Interlocking mining and driving simulation test device, system and simulation test method

Abstract

An interlocking acquisition and driving simulation test device, system and simulation test method are used to form an interlocking acquisition and driving simulation test device by using a computing cage composed of a simulation PC terminal, an interlocking operation module and an interlocking verification module. A large number of acquisition drive boards and relays can be simulated without connecting to real trackside equipment through hard wires, reducing a large amount of hardware costs in the software integration link, saving laboratory expenses and space. The present invention supports various acquisition and driving combinations below the maximum capacity, and can be adapted to various types of stations, improving the station type switching efficiency in the logic confirmation link, and the batch verification efficiency is high. The present invention only inserts the necessary low-priority task functions on the interlocking system software of the interlocking operation module. Except for the necessary pile functions, it is almost the same as the officially released software, using a simulation environment close to the official version of the interlocking software, and the test conclusion is more convincing, which enhances the confidence of developers, testers, operators and owners.

Description

Technical Field

[0001] The present invention relates to the field of rail transit signals, and in particular to an interlocking acquisition and drive simulation test device, system and simulation test method. Background Art

[0002] Interlocking products in the field of rail transit signals ensure the safe and orderly operation of trains by collecting, calculating and driving information from trackside equipment such as signal machines, turnouts and track circuits. In view of the special safety status of interlocking products in the field of rail transit signals, they need to undergo an almost harsh testing process before leaving the factory, especially the system software integration and interlocking logic confirmation.

[0003] Strictly speaking, when interlocking manufacturers conduct the above tests in the laboratory, they should build a real operating environment on site, including the acquisition drive equipment, network communication equipment, human-computer interaction equipment, etc. of the target station, and try to expose product problems in the laboratory stage. However, there are usually the following difficulties:

[0004] 1. The standard test station used in the interlocking system integration process usually requires dozens or even hundreds of acquisition driver boards. In order to show different acquisition states and drive behaviors, external relays are also required to perform actions. These acquisition driver boards and relays are expensive and large in size. Manufacturers find it difficult to configure them in sufficient quantities in the laboratory due to cost and space issues.

[0005] 2. The interlocking logic confirmation link needs to adjust different acquisition and drive layouts for different project station types. The efficiency of switching back and forth is low, and frequent plugging and unplugging of boards will increase the probability of interface damage, and it will cost energy to troubleshoot additional hardware failures.

[0006] 3. The more external communication interfaces there are, the more important it is to coordinate with the equipment of other communication signal manufacturers. Sometimes it is necessary to build a training environment for the owner to carry out teaching. These activities require the provision of a portable interlocking system.

[0007] 4. A simple solution to the above three difficulties is to use pure software virtualization interlocking equipment on the PC side. However, the difference between the compiled and running environment and the actual environment for final delivery and use is too large. For safety-critical products such as interlocking, the test results cannot be close to the factory results and do not meet export quality standards.

[0008] The statements herein merely provide background art related to the present invention and do not necessarily constitute prior art. Summary of the invention

[0009] The purpose of the present invention is to provide an interlocking mining and driving simulation test device, system and simulation test method. The present invention reduces a large amount of hardware costs in the software integration link, improves the station type switching efficiency in the logic confirmation link, and makes the test conclusion more convincing.

[0010] In order to achieve the above object, the present invention provides an interlocking mining and driving simulation test device, comprising: at least one simulation PC terminal and at least one interlocking operation module;

[0011] The simulation PC runs simulation software to simulate the acquisition behavior of multiple acquisition boards and the driving behavior of multiple drive boards corresponding to the trackside signal equipment, and sends the acquisition test words and drive return words generated in the simulation process to the interlocking operation module;

[0012] The interlocking operation module includes two independent memories and two central processing units (CPUs), each of which stores a redundant code table file for test words of an acquisition board and a redundant code table file for return words of a driver board. Interlocking system software runs on each of the central processing units, and redundant code table reading and processing functions are inserted on each of the interlocking system software. The redundant code table reading and processing functions are used to query the redundant code table file for test words of the acquisition board to verify whether the acquisition test words sent by the simulation PC end are correct, and the redundant code table reading and processing functions are used to query the redundant code table file for return words of a driver board to verify whether the drive return words sent by the simulation PC end are correct. The interlocking operation module outputs the verification result after two-out-of-two voting by the two central processing units.

[0013] The interlocking sampling and driving simulation test device further comprises: at least one interlocking verification module, and the interlocking verification module is used to re-verify the verification result of the interlocking operation module.

[0014] The interlocking operation module is connected to the simulation PC end through a network cable and a switch, and the interlocking operation module communicates with the simulation PC end using a UDP protocol.

[0015] The interlocking operation module and the interlocking verification module are connected via a special hard line, or the interlocking operation module and the interlocking verification module are connected via a backplane in the same computing cage.

[0016] The code group capacity of the acquisition board test word redundant code table file supports the interlocking maximum number of acquisition boards, and the code group capacity of the driver board return word redundant code table file supports the interlocking maximum number of driver boards.

[0017] The two sets of acquisition board test word redundant code table files stored in two independent memories meet the Hamming code distance requirements, and the two sets of driver board return word redundant code table files stored in two independent memories meet the Hamming code distance requirements.

[0018] A communication function is inserted into each of the interlocking system software, and the communication function is used to realize communication with the simulation PC end.

[0019] The interlocking mining and driving simulation test device comprises two simulation PC terminals, two interlocking operation modules and two interlocking verification modules;

[0020] The first simulation PC terminal is connected to the first interlocking operation module, and the first interlocking verification module is connected to the first interlocking operation module, and together they form a first simulation operation device;

[0021] The second simulation PC end is connected to the second interlocking operation module, and the second interlocking verification module is connected to the second interlocking operation module, and together they form a second simulation operation device;

[0022] The first interlocking operation module and the second interlocking operation module perform bidirectional communication.

[0023] Optionally, the system acquisition board in the first simulation PC end uses a real board, and the first simulation PC end runs simulation software to simulate other acquisition boards in the derailment signal device, and the system driver board in the first simulation PC end uses a real board, and the first simulation PC end runs simulation software to simulate other driver boards in the derailment signal device;

[0024] The second simulation PC terminal runs simulation software to simulate other acquisition boards in the derailment signal device, the system driver board in the second simulation PC terminal adopts a real board, and the second simulation PC terminal runs simulation software to simulate other driver boards in the derailment signal device;

[0025] The system acquisition board and the system drive board are located in the same acquisition and drive cage.

[0026] Optionally, the first simulation PC terminal runs simulation software to simulate the system acquisition board and other acquisition boards in the trackside signal device, and the first simulation PC terminal runs simulation software to simulate the system driver board and other driver boards in the trackside signal device;

[0027] The second simulation PC terminal runs simulation software to simulate the system acquisition board and other acquisition boards in the trackside signal equipment, and the second simulation PC terminal runs simulation software to simulate the system driver board and other driver boards in the trackside signal equipment.

[0028] The present invention also provides an interlocking mining and driving simulation test system, comprising:

[0029] The interlocking mining and driving simulation test device;

[0030] A network signal device communicates with the interlocking operation module, and the network signal device is used to realize communication between the interlocking acquisition and drive simulation test device and the rail transit signal system.

[0031] The present invention also provides an interlocking mining and driving simulation test method, comprising:

[0032] The simulation PC simulates the acquisition behavior of multiple acquisition boards in the trackside signal equipment, and sends the acquired acquisition information and the acquisition test words generated by the acquisition behavior to the interlocking operation module;

[0033] The interlocking operation module receives the acquisition test word sent by the simulation PC end, inserts a redundant code table reading and processing function on the interlocking system software to query the acquisition board test word redundant code table file to verify the acquisition test word, if the acquisition board test word is queried in the acquisition board test word redundant code table file, it means that the acquisition test word is correct, then the interlocking system software on the interlocking operation module performs interlocking safety operation on the acquisition information obtained by the simulation PC end, obtains a drive control command, and sends the drive control command to the simulation PC end;

[0034] The simulation PC simulates the driving behavior of multiple driving boards in the trackside signal equipment according to the driving control command, and collects the driving return words related to the driving behavior and sends them to the interlocking operation module;

[0035] The interlocking operation module receives the driver recovery word sent by the simulation PC end, and inserts the redundant code table reading and processing function on the interlocking system software to query the driver board recovery word redundant code table file to verify the driver recovery word. If the driver recovery word is found in the driver board recovery word redundant code table file, it means that the driver recovery word is correct, and the simulation test is successful.

[0036] If the acquisition board test word is not found in the acquisition board test word redundant code table file, indicating that the acquisition test word is wrong, the interlocking operation module sends a prompt acquisition abnormality signal to the simulation PC end, and the simulation PC end displays the abnormal light position of the acquisition light corresponding to the acquisition board in the cabinet diagram according to the prompt acquisition abnormality signal.

[0037] If the drive return word is not found in the drive board return word redundant code table file, it means that the drive return word is wrong, and the interlocking operation module sends an error message to the interlocking verification module. The interlocking verification module pre-stores a drive return word file. The interlocking verification module compares the received error message with the drive return word file. If the error message is not found in the drive return word file, the verification fails, and the interlocking verification module cuts off the power supply of the interlocking operation module.

[0038] The interlocking operation module outputs the verification result after two central processors perform a two-out-of-two vote and reach a consensus;

[0039] When verifying the collected test word, if the two-out-of-two voting results are inconsistent, the interlocking operation module outputs a false value directed to the safety side to participate in the subsequent interlocking safety operation;

[0040] When checking the drive return word, if the two-out-of-two voting results are inconsistent, the interlocking operation module outputs garbled code as error information and sends it to the interlocking verification module.

[0041] After the simulation test is successful, the interlocking operation module sends a normal driving prompt signal to the simulation PC end, and the simulation PC end displays the normal light position of the driving light corresponding to the driving board in the cabinet diagram according to the normal driving prompt signal.

[0042] A project configuration file is stored on the simulation PC, and the project configuration file describes the information of the acquisition boards and driver boards contained in different stations. By adjusting the project configuration file, the simulation PC switches to simulate the acquisition boards and driver boards of the trackside signal equipment in different stations.

[0043] When the system acquisition board and the system driver board in the first simulation PC end are real boards, and the system acquisition board and the system driver board in the second simulation PC end are also real boards, the system acquisition board collects data by itself, and the system driver board drives by itself, and determines the master-slave status of the first simulation computing device and the second simulation computing device by itself.

[0044] When the first simulation PC terminal runs simulation software to simulate the system acquisition board and the system driver board, and the second simulation PC terminal runs simulation software to simulate the system acquisition board and the system driver board, the first simulation computing device is forcibly set as the main system, and the second simulation computing device is forcibly set as the backup system, forming a dual-system environment that cannot be switched.

[0045] The network signal equipment is used to realize the communication between the interlocking acquisition and driving simulation test device and the rail transit signal system.

[0046] The present invention adopts a computing cage composed of a simulation PC end, an interlocking operation module and an interlocking verification module to form an interlocking acquisition and driving simulation test device. Without connecting the real trackside equipment by hard wire, a large number of acquisition drive boards and relays can be simulated, reducing a large amount of hardware costs in the software integration link, saving laboratory expenses and space. The present invention supports various acquisition and driving combinations below the maximum capacity, and can be adapted to various types of stations, improves the station type switching efficiency in the logic confirmation link, and has high batch verification efficiency. The present invention only inserts piles of necessary low-priority task functions on the interlocking system software of the interlocking operation module. Except for the necessary pile functions, it is almost the same as the formal release software, using a simulation environment close to the formal version of the interlocking software, and the test conclusion is more convincing, which enhances the confidence of developers, testers, operators and owners. The present invention has been applied to the software integration link and logic confirmation link of the interlocking iLOCK system and the VPI system, and has achieved good simulation test results. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 It is a structural block diagram of an interlocking mining and driving simulation test device provided by the present invention.

[0048] Figure 2 It is a flow chart of an interlocking mining and driving simulation test method provided by the present invention.

[0049] Figure 3 Schematic diagram of an interlocking mining and driving simulation test device provided in an embodiment. DETAILED DESCRIPTION

[0050] The following is based on Figure 1 to Figure 3 , specifically describe the preferred embodiments of the present invention.

[0051] As a safety-critical product in the field of rail transit signals, the computer interlocking system must follow the design concept of fault-oriented safety, and usually adopts a structure of "reactive fault-safety", "combined fault-safety", or a combination of the two. The former requires the sampling and driving behavior to be output after verification by a third-party independent unit, and the latter requires the multi-channel sampling and driving behavior to be output after a vote of consensus. Based on these two mainstream safety structures, the present invention designs an interlocking sampling and driving simulation test device and simulation test method based on table lookup, which solves the above-mentioned difficulties encountered in the software integration link and logic confirmation link before the interlocking product leaves the factory.

[0052] like Figure 1As shown, the present invention provides an interlocking mining and driving simulation test device, comprising: a simulation PC terminal 1, an interlocking operation module 2 connected to the simulation PC terminal 1, and an interlocking verification module 3 connected to the interlocking operation module 2, wherein the interlocking operation module 2 is connected to the simulation PC terminal 1 through a network cable and a switch, the interlocking operation module 2 communicates with the simulation PC terminal 1 through a network connection method and adopts a UDP protocol, the interlocking operation module 2 and the interlocking verification module 3 are connected through a special hard line, or the interlocking operation module 2 and the interlocking verification module 3 are connected through a backplane in the same computing machine cage.

[0053] The simulation PC terminal 1 runs simulation software to simulate the collection behavior of multiple collection boards and the driving behavior of multiple driver boards corresponding to the trackside signal equipment. The station diagram displays the work of the trackside signal equipment such as the collection and driving signal machine, track circuit, and turnout. The cabinet diagram displays the port status of the collection board and the driver board in the simulated trackside signal equipment. In the cabinet diagram, the port status of the collection board is displayed by the collection light, and the port status of the driver board is displayed by the driver light. The simulation PC terminal 1 stores a project configuration file. In the logic confirmation link, the project configuration file is adjusted to switch the work of the trackside signal equipment in different stations. The project configuration file corresponds to the support file of a specific station, such as HDW (describing how many collection boards and driver boards this station has, their layout in the rack, and the meaning of the specific light position of each collection board and driver board), NetConfig (which network interfaces this station supports externally, such as neighboring station CBI, TCC, RBC).

[0054] The interlocking operation module 2 adopts a two-out-of-two architecture, which includes two independent memories and two central processing units (CPUs). Each of the independent memories stores a redundant code table file for the test word of the acquisition board and a redundant code table file for the return word of the driver board. The code group capacity of the redundant code table file for the test word of the acquisition board supports the maximum number of acquisition boards for interlocking, and the code group capacity of the redundant code table file for the return word of the driver board supports the maximum number of driver boards for interlocking. For the interlocking designed with a two-out-of-two combined fault-safe structure, two sets of redundant code tables are required to maintain the two CPU acquisition and drive channels. If the two channels vote in unison, the result is output. The code groups of the two sets of code tables must meet the Hamming code distance requirements. Interlocking system software is run on each of the central processing units, and a task function is inserted on each of the interlocking system software. The task function includes: a communication function, and a redundant code table reading and processing function. The communication function is used to realize communication with the simulation PC terminal 1. The redundant code table reading and processing function is used to query the acquisition board test word redundant code table file to verify whether the acquisition test word sent by the simulation PC terminal 1 is correct. The redundant code table reading and processing function is used to query the driver board return word redundant code table file to verify whether the driver return word sent by the simulation PC terminal 1 is correct. The interlocking operation module 2 outputs the verification result after a two-out-of-two vote is consistent through two central processing units.

[0055] The interlocking verification module 3 independently verifies the table lookup verification result of the interlocking operation module 2. The safety of the interlocking system pays more attention to the output drive link, because the input acquisition link also needs to go through the two-out-of-two operation of the interlocking operation module 2, and finally it will be reflected in the output, so the test word does not need to be sent to the interlocking verification module 3 for verification, and the collected word reflects the final output link and needs to be sent to the interlocking verification module 3 for verification. The interlocking operation module 2 will send the redundant codewords obtained by table lookup to the interlocking verification module 3 for verification every cycle. If an abnormal codeword is received, the interlocking verification module 3 will directly cut off the power supply of the interlocking operation module 2 to cut off the power of the interlocking operation module to prevent the output of the dangerous side, thus realizing the guided safety design.

[0056] like Figure 2 As shown, the present invention provides an interlocking mining and driving simulation test method, comprising the following steps:

[0057] Step S1, initialization.

[0058] The simulation PC terminal 1 is powered on and starts, runs the simulation software, and performs an initialization self-test;

[0059] The interlocking operation module 2 is powered on and starts, runs the interlocking system software and task functions, and performs an initialization self-check;

[0060] The interlocking operation module 2 establishes network communication with the simulation PC terminal 1 , and the interlocking operation module 2 and the simulation PC terminal 1 communicate with each other using the UDP protocol.

[0061] Step S2, the simulation PC terminal 1 simulates the acquisition behavior of multiple acquisition boards in the trackside signal equipment, and sends the acquired acquisition information and the acquisition test word generated by the acquisition behavior to the interlocking operation module 2;

[0062] The simulation PC terminal 1 displays the signal machine, track circuit, turnout and other trackside signal equipment through the station map, and displays the status of all the acquisition drive board ports of the station through the cabinet map;

[0063] The simulation software running on the simulation PC terminal 1 performs operations such as port opening, port closing, port abnormality, etc. of the acquisition board to simulate the acquisition behavior.

[0064] Step S3, the interlocking operation module 2 receives the acquisition test word sent by the simulation PC terminal 1, inserts the redundant code table reading and processing function on the interlocking system software to query the acquisition board test word redundant code table file to verify whether the acquisition test word sent by the simulation PC terminal 1 is correct, if the acquisition board test word is queried in the acquisition board test word redundant code table file, it means that the acquisition test word is correct, then proceed to step S4, if the acquisition board test word is not queried in the acquisition board test word redundant code table file, it means that the acquisition test word is wrong, then proceed to step S8;

[0065] The interlocking operation module 2 outputs the verification result after the two central processors perform a two-out-of-two vote and the two results are consistent. If the two-out-of-two vote results are inconsistent, the interlocking operation module 2 will output a false value leading to the safety side to participate in the subsequent interlocking safety operation.

[0066] Step S4 , the interlocking system software on the interlocking operation module 2 performs interlocking safety operation on the collected information obtained by the simulation PC terminal 1 , obtains a drive control command, and sends the drive control command to the simulation PC terminal 1 .

[0067] Step S5, the simulation PC terminal 1 simulates the driving behavior of multiple driving boards in the trackside signal equipment according to the driving control command, and collects the driving return words related to the driving behavior and sends them to the interlocking operation module 2;

[0068] The simulation software running on the simulation PC terminal 1 simulates the driving behavior by displaying operations such as port opening, port closing, and abnormal recovery on the corresponding driving board according to the driving control command.

[0069] Step S6, the interlocking operation module 2 receives the drive recovery word sent by the simulation PC terminal 1, inserts the redundant code table reading and processing function on the interlocking system software to query the driver board recovery word redundant code table file to verify whether the drive recovery word sent by the simulation PC terminal 1 is correct. If the drive recovery word is queried in the driver board recovery word redundant code table file, it means that the drive recovery word is correct, and then step S7 is performed. If the drive recovery word is not queried in the driver board recovery word redundant code table file, it means that the drive recovery word is wrong, and then step S9 is performed;

[0070] The interlocking operation module 2 outputs a verification result after two central processors perform a two-out-of-two vote and the two results are consistent. If the two-out-of-two voting results are inconsistent, the interlocking operation module 2 outputs a garbled code to the interlocking verification module 3.

[0071] Step S7, the interlocking operation module 2 sends a normal driving prompt signal to the simulation PC terminal 1, and the simulation PC terminal 1 makes the driving light corresponding to the driving board in the cabinet diagram display a normal light position according to the normal driving prompt signal.

[0072] Step S8, the interlocking operation module 2 sends a prompt collection abnormality signal to the simulation PC terminal 1, and the simulation PC terminal 1 makes the collection light corresponding to the collection board in the cabinet diagram display an abnormal light position according to the prompt collection abnormality signal.

[0073] Step S9, the interlocking operation module 2 sends the wrong drive recovery word or garbled code to the interlocking verification module 3, the interlocking verification module 3 pre-stores a drive recovery word file, and the interlocking verification module 3 compares the received information with the drive recovery word file. If the information is found in the drive recovery word file, the verification is correct. If the information is not found in the drive recovery word file, the verification fails. After the drive recovery word verification fails, the power supply of the interlocking operation module 2 is cut off.

[0074] like Figure 3 As shown, two simulation PC terminals, two interlocking operation modules and two interlocking verification modules are used to form a redundant system. The first simulation PC terminal 11 is connected to the first interlocking operation module 21, and the first interlocking verification module 31 is connected to the first interlocking operation module 21, which together constitute the first simulation operation device. The second simulation PC terminal 12 is connected to the second interlocking operation module 22, and the second interlocking verification module 32 is connected to the second interlocking operation module 22, which together constitute the second simulation operation device. Since the reliability requirements of the interlocking system are very high, the system must have hardware redundancy. The first interlocking operation module 21 and the second interlocking operation module 22 are bidirectionally communicated to achieve data transmission, master-slave synchronization, and rapid switching. Therefore, it is necessary to verify the consistency of the interlocking system software to the master-slave data and the transition of the cutting machine operation.

[0075] In one embodiment, the system acquisition board in the first simulation PC terminal 11 adopts a real board, and uses software to simulate other acquisition boards in the derailment signal device. The system driver board in the first simulation PC terminal 11 adopts a real board, and uses software to simulate other driver boards in the derailment signal device. The system acquisition board in the second simulation PC terminal 12 also adopts a real board, and uses software to simulate other acquisition boards in the derailment signal device. The system driver board in the second simulation PC terminal 12 also adopts a real board, and uses software to simulate other driver boards in the derailment signal device. The system acquisition board and the system driver board are located in the same acquisition and driver cage. The system acquisition board and the system driver board are boards that reflect and enable the health of the interlocking system's own cabinet cage. Each system has a pair of them, and the dual system is redundant. There must be one master and one backup. When the master system is working normally, the backup system cannot have output, otherwise there will be a similar confusion phenomenon as dual master. Therefore, the acquisition driver board of the master and standby systems is designed as a mutually exclusive structure. Whoever grabs the master system mark first will work as the master system, and the other system can only work as the standby system, unless the master system abnormally gives up the master system mark. Low-latency mutually exclusive structures are generally implemented with physical hardware, so they correspond to real boards. The system acquisition board collects data and the system driver board drives it to determine the master and standby status of the first simulation computing device and the second simulation computing device. If the first simulation computing device is the master system and the second simulation computing device is the standby system, and any device in the first simulation computing device operates abnormally, the first simulation computing device will be downgraded to the standby system and the second simulation computing device will be upgraded to the master system.

[0076] In another embodiment of the present invention, the system acquisition board and the system driver board in the first simulation PC terminal 11 and the second simulation PC terminal 12 are also software simulations like other acquisition boards and driver boards. At this time, the first simulation computing device can be set as the main system by software, and the second simulation computing device can be set as the backup system by software, forming a dual-system environment that cannot be switched. The advantage is that no acquisition and driver cage is required, only a computing cage is required, which can minimize the dual-system simulation hardware space. Although the switching function cannot be tested, all other dual-system behaviors can be tested, such as how the main system synchronizes data to the backup system, whether the external output of the backup system is normal, etc.

[0077] like Figure 1As shown, the interlocking acquisition and driving simulation test device can communicate with the network signal device 4 to perform interface joint adjustment confirmation activities such as train control center and neighboring station interlocking. The network signal device 4 communicates with the interlocking operation module 2 through the network, and the network signal device 4 and the interlocking operation module 2 are connected through a network cable and a switch. The network signal device 4 and the interlocking acquisition and driving simulation test device constitute an interlocking acquisition and driving simulation test system. The network signal device 4 is a variety of network peripheral interfaces for interlocking, such as TCC (railway transit line network command center), CBI (computer interlocking), RBC (radio block center) and other rail transit signal systems. These interfaces can be real devices from other manufacturers or pure software simulators. The simulation PC terminal 1 and the interlocking operation module 2 jointly set and calculate the interlocking relationship of this station. The calculation results involve external interfaces such as train control information, neighboring station interlocking information, and radio block center, which can be sent to the network signal device 4 through the network. The interlocking acquisition and driving simulation test device composed of the simulation PC terminal 1, the interlocking operation module 2 and the interlocking verification module 3 is small in size and can be conveniently carried to the interface manufacturer to connect with the network signal equipment 4 to carry out joint debugging activities, and can also be carried to the owner to connect with the network signal equipment 4 to carry out practical training activities at the level of the rail transit signal large system.

[0078] The present invention adopts a computing cage composed of a simulation PC end, an interlocking operation module and an interlocking verification module to form an interlocking acquisition and driving simulation test device. Without connecting the real trackside equipment by hard wire, a large number of acquisition drive boards and relays can be simulated, reducing a large amount of hardware costs in the software integration link, saving laboratory expenses and space. The present invention supports various acquisition and driving combinations below the maximum capacity, and can be adapted to various types of stations, improves the station type switching efficiency in the logic confirmation link, and has high batch verification efficiency. In the software integration link, the present invention only inserts piles of necessary low-priority task functions on the interlocking system software of the interlocking operation module, except for the necessary pile functions, it is almost the same as the formal release software, using a simulation environment close to the formal version of the interlocking software, and the test conclusion is more convincing, which enhances the confidence of developers, testers, operators and owners. The present invention has been applied to the software integration link and logic confirmation link of the interlocking iLOCK system and the VPI system, and has achieved good simulation test results.

[0079] It should be noted that, in the embodiments of the present invention, the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise", "axial", "radial", "circumferential" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the embodiments, and do not indicate or imply that the devices or elements referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0080] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0081] It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0082] It should also be understood that the terms used in this application specification are only for the purpose of describing specific embodiments and are not intended to limit the application. As used in this application specification and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0083] It should be further understood that the term “and / or” used in the specification and appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0084] As used in this specification and the appended claims, the term "if" may be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting," depending on the context. Similarly, the phrases "if it is determined" or "if [described condition or event] is detected" may be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]," depending on the context.

[0085] Although the content of the present invention has been described in detail through the above preferred embodiments, it should be appreciated that the above description should not be considered as limiting the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present invention. After reading the above content, it will be obvious for those skilled in the art to make various modifications and substitutions to the present invention. Therefore, the scope of protection of the present invention should be defined by the attached claims.

Claims

1. An interlocking mining and driving simulation test device, characterized in that: It includes: at least one simulation PC terminal and at least one interlocking operation module; The simulation PC runs simulation software to simulate the acquisition behavior of multiple acquisition boards and the driving behavior of multiple drive boards corresponding to the trackside signal equipment, and sends the acquisition test words and drive return words generated in the simulation process to the interlocking operation module; The interlocking operation module includes two independent memories and two central processing units (CPUs), each of which stores a redundant code table file for test words of an acquisition board and a redundant code table file for return words of a driver board. Interlocking system software runs on each of the central processing units, and redundant code table reading and processing functions are inserted on each of the interlocking system software. The redundant code table reading and processing functions are used to query the redundant code table file for test words of the acquisition board to verify whether the acquisition test words sent by the simulation PC end are correct, and the redundant code table reading and processing functions are used to query the redundant code table file for return words of a driver board to verify whether the drive return words sent by the simulation PC end are correct. The interlocking operation module outputs the verification result after two-out-of-two voting by the two central processing units.

2. The interlocking mining and driving simulation test device according to claim 1, characterized in that: It also includes: at least one interlocking verification module, which is used to re-verify the verification result of the interlocking operation module.

3. The interlocking mining and driving simulation test device according to claim 1, characterized in that: The interlocking operation module is connected to the simulation PC end through a network cable and a switch, and the interlocking operation module communicates with the simulation PC end using a UDP protocol.

4. The interlocking mining and driving simulation test device according to claim 2, characterized in that: The interlocking operation module and the interlocking verification module are connected via a special hard line, or the interlocking operation module and the interlocking verification module are connected via a backplane in the same computing cage.

5. The interlocking mining and driving simulation test device according to claim 1, characterized in that: The code group capacity of the acquisition board test word redundant code table file supports the interlocking maximum number of acquisition boards, and the code group capacity of the driver board return word redundant code table file supports the interlocking maximum number of driver boards.

6. The interlocking mining and driving simulation test device according to claim 1, characterized in that: The two sets of acquisition board test word redundant code table files stored in two independent memories meet the Hamming code distance requirements, and the two sets of driver board return word redundant code table files stored in two independent memories meet the Hamming code distance requirements.

7. The interlocking mining and driving simulation test device according to claim 1, characterized in that: A communication function is inserted into each of the interlocking system software, and the communication function is used to realize communication with the simulation PC end.

8. The interlocking mining and driving simulation test device according to any one of claims 1 to 7, characterized in that: The interlocking mining and driving simulation test device comprises two simulation PC terminals, two interlocking operation modules and two interlocking verification modules; The first simulation PC terminal is connected to the first interlocking operation module, and the first interlocking verification module is connected to the first interlocking operation module, and together they form a first simulation operation device; The second simulation PC end is connected to the second interlocking operation module, and the second interlocking verification module is connected to the second interlocking operation module, and together they form a second simulation operation device; The first interlocking operation module and the second interlocking operation module perform bidirectional communication.

9. The interlocking mining and driving simulation test device according to claim 8, characterized in that: The system acquisition board in the first simulation PC end uses a real board, and the first simulation PC end runs simulation software to simulate other acquisition boards in the derailment signal device. The system driver board in the first simulation PC end uses a real board, and the first simulation PC end runs simulation software to simulate other driver boards in the derailment signal device. The system acquisition board in the second simulation PC end uses a real board, and the second simulation PC end runs simulation software to simulate other acquisition boards in the derailment signal device. The system driver board in the second simulation PC end uses a real board, and the second simulation PC end runs simulation software to simulate other driver boards in the derailment signal device. The system acquisition board and the system drive board are located in the same acquisition and drive cage.

10. The interlocking mining and driving simulation test device according to claim 8, characterized in that: The first simulation PC terminal runs simulation software to simulate the system acquisition board and other acquisition boards in the trackside signal equipment, and the first simulation PC terminal runs simulation software to simulate the system driver board and other driver boards in the trackside signal equipment; The second simulation PC terminal runs simulation software to simulate the system acquisition board and other acquisition boards in the trackside signal equipment, and the second simulation PC terminal runs simulation software to simulate the system driver board and other driver boards in the trackside signal equipment.

11. An interlocking mining and driving simulation test system, characterized in that: Include: The interlocking mining and driving simulation test device according to any one of claims 8 to 10; A network signal device communicates with the interlocking operation module, and the network signal device is used to realize communication between the interlocking acquisition and drive simulation test device and the rail transit signal system.

12. An interlocking mining and driving simulation test method, implemented based on the interlocking mining and driving simulation test system according to claim 11, characterized in that: Include: The simulation PC simulates the acquisition behavior of multiple acquisition boards in the trackside signal equipment, and sends the acquired acquisition information and the acquisition test words generated by the acquisition behavior to the interlocking operation module; The interlocking operation module receives the acquisition test word sent by the simulation PC end, inserts a redundant code table reading and processing function on the interlocking system software to query the acquisition board test word redundant code table file to verify the acquisition test word, if the acquisition board test word is queried in the acquisition board test word redundant code table file, it means that the acquisition test word is correct, then the interlocking system software on the interlocking operation module performs interlocking safety operation on the acquisition information obtained by the simulation PC end, obtains a drive control command, and sends the drive control command to the simulation PC end; The simulation PC simulates the driving behavior of multiple driving boards in the trackside signal equipment according to the driving control command, and collects the driving return words related to the driving behavior and sends them to the interlocking operation module; The interlocking operation module receives the driver recovery word sent by the simulation PC end, and inserts the redundant code table reading and processing function on the interlocking system software to query the driver board recovery word redundant code table file to verify the driver recovery word. If the driver recovery word is found in the driver board recovery word redundant code table file, it means that the driver recovery word is correct, and the simulation test is successful.

13. The interlocking mining and driving simulation test method according to claim 12, characterized in that: If the acquisition board test word is not found in the acquisition board test word redundant code table file, indicating that the acquisition test word is wrong, the interlocking operation module sends a prompt acquisition abnormality signal to the simulation PC end, and the simulation PC end displays the abnormal light position of the acquisition light corresponding to the acquisition board in the cabinet diagram according to the prompt acquisition abnormality signal.

14. The interlocking mining and driving simulation test method according to claim 12, characterized in that: If the drive return word is not found in the drive board return word redundant code table file, it means that the drive return word is wrong, and the interlocking operation module sends an error message to the interlocking verification module. The interlocking verification module pre-stores a drive return word file. The interlocking verification module compares the received error message with the drive return word file. If the error message is not found in the drive return word file, the verification fails, and the interlocking verification module cuts off the power supply of the interlocking operation module.

15. The interlocking mining and driving simulation test method according to claim 13 or 14, characterized in that: The interlocking operation module outputs the verification result after two central processors perform a two-out-of-two vote and reach a consensus; When verifying the collected test word, if the two-out-of-two voting results are inconsistent, the interlocking operation module outputs a false value directed to the safety side to participate in the subsequent interlocking safety operation; When checking the drive return word, if the two-out-of-two voting results are inconsistent, the interlocking operation module outputs garbled code as error information and sends it to the interlocking verification module.

16. The interlocking mining and driving simulation test method according to claim 12, characterized in that: After the simulation test is successful, the interlocking operation module sends a normal driving prompt signal to the simulation PC end, and the simulation PC end displays the normal light position of the driving light corresponding to the driving board in the cabinet diagram according to the normal driving prompt signal.

17. The interlocking mining and driving simulation test method according to claim 12, characterized in that: A project configuration file is stored on the simulation PC, and the project configuration file describes the information of the acquisition boards and driver boards contained in different stations. By adjusting the project configuration file, the simulation PC switches to simulate the acquisition boards and driver boards of the trackside signal equipment in different stations.

18. The interlocking mining and driving simulation test method according to claim 12, characterized in that: When the system acquisition board and the system driver board in the first simulation PC end are real boards, and the system acquisition board and the system driver board in the second simulation PC end are also real boards, the system acquisition board collects data by itself, and the system driver board drives by itself, and determines the master-slave status of the first simulation computing device and the second simulation computing device by itself.

19. The interlocking mining and driving simulation test method according to claim 12, characterized in that: When the first simulation PC terminal runs simulation software to simulate the system acquisition board and the system driver board, and the second simulation PC terminal runs simulation software to simulate the system acquisition board and the system driver board, the first simulation computing device is forcibly set as the main system, and the second simulation computing device is forcibly set as the backup system, forming a dual-system environment that cannot be switched.

20. The interlocking mining and driving simulation test method according to claim 12, characterized in that: The network signal equipment is used to realize the communication between the interlocking acquisition and driving simulation test device and the rail transit signal system.

Images