Vehicle domain control system and method and train

Abstract

The invention provides a vehicle domain control system which can be applied to the technical field of rail transit. The control system comprises: a main domain controller configured to generate a control instruction based on a control logic of a train compartment and equipment state information of the train compartment; the slave domain controller is configured to receive the control instruction sent by the master domain controller and execute a control action according to the control instruction; wherein the master domain controller and the slave domain controllers each comprise a standard board card, the standard board cards conform to a preset specification and an interface standard, configuration information of the master domain controller is determined based on control demand information of a train compartment space domain or control demand information of a function domain, and the multiple slave domain controllers are arranged on the basis of the configuration information of the master domain controller. And the master domain controller is connected with the plurality of slave domain controllers through communication links. The invention further provides a vehicle domain control method and a train.

Description

Technical Field

[0001] The present disclosure relates to the field of rail transit technology, and in particular to a vehicle domain control system, method and train. Background Art

[0002] The control system of rail transit vehicles is a highly integrated complex system, and its core goal is to ensure the safe and efficient operation of trains through the coordinated work of multiple modules (such as power supply, traction, braking, and communication). The control system of traditional rail transit vehicles is a communication-based train control system, which consists of automatic train monitoring, data communication system, regional controller, and on-board controller.

[0003] Although the traditional hierarchical control system can achieve basic automated control, it faces challenges when upgrading to intelligent control. It lacks hardware-based design based on replaceable functional units, and the vehicle's control devices have problems such as heavy bundling of software and hardware, device-based function implementation, and a low riding environment experience. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a vehicle domain control system, method and train.

[0005] According to a first aspect of the present disclosure, a vehicle domain control system is provided, comprising: a master domain controller, configured to generate control instructions based on the control logic of a train car and equipment status information of the train car; a slave domain controller, configured to receive the control instructions sent by the master domain controller, and perform control actions according to the control instructions; wherein the master domain controller and the slave domain controller each include a standard board card, the standard board card complies with preset specifications and interface standards, the configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain, the slave domain controller includes multiple, and the master domain controller is connected to the multiple slave domain controllers via a communication link.

[0006] According to an embodiment of the present disclosure, the spatial domain includes a driving domain, an interior domain, a roof domain and an under-vehicle domain; the primary domain controller selects a domain controller corresponding to the maximum control requirement information from multiple control requirement information by comparing the control requirement information of the driving domain, the control requirement information of the interior domain, the control requirement information of the roof domain and the control requirement information of the under-vehicle domain as the primary domain controller, and the primary domain controller meets the computing resources and communication bandwidth of preset conditions.

[0007] According to an embodiment of the present disclosure, the functional domains include a traction functional domain, a braking functional domain, an air-conditioning functional domain, a door functional domain, a lighting functional domain and a control logic domain; the master domain controller is used to control the logic domain, and the slave domain controller is used to control the traction functional domain, the braking functional domain, the air-conditioning functional domain, the door functional domain and the lighting functional domain.

[0008] According to an embodiment of the present disclosure, the standard board is also configured to update the control algorithm, hardware configuration and communication protocol of the standard board according to the control signal of the train carriage to obtain an updated board.

[0009] According to an embodiment of the present disclosure, the standard board is also configured to meet the access requirements of the non-standard board through interface design and modular design for non-standard control signals.

[0010] According to an embodiment of the present disclosure, the standard board is also configured to meet preset safety standards through a load protection mechanism; the load protection mechanism includes at least one of the following: the standard board adopts an overcurrent protection device to perform a disconnection operation when the current exceeds a preset threshold; overload protection and disconnection operations are performed between the sub-channel and the main channel within the standard board through a multi-channel analog-to-digital converter and a baseboard management chip; overload protection is performed between the standard board and the sub-board using a power management chip.

[0011] According to an embodiment of the present disclosure, the master domain controller is also configured to process the same input signal in parallel through at least two independent channels, generate respective output results, and compare multiple output results. When multiple output results are the same, the output result is used as the final output to meet the redundant configuration requirements. The slave domain controller is also configured to meet the security level requirements through hardware isolation strategy, software space independence strategy and software time independence strategy.

[0012] According to an embodiment of the present disclosure, the standard board meets the preset specifications and interface standards, including: determining the interface standard, communication design, power design, board size and connector type of the standard board.

[0013] According to an embodiment of the present disclosure, the master domain controller and the slave domain controller are further configured to use multiple independent power boards, each of which includes a power connector, and the physical interface and interface definition of the power connectors of each of the multiple power boards are the same.

[0014] A second aspect of the present disclosure provides a vehicle domain control method, which is applied to a vehicle domain control system. The control method includes: a master domain controller generates a control instruction based on the control logic of a train car and the equipment status information of the train car; a slave domain controller receives the control instruction sent by the master domain controller, and performs a control action according to the control instruction; wherein the master domain controller and the slave domain controller each include a standard board card, the standard board card complies with preset specifications and interface standards, the configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain, the slave domain controller includes multiple, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

[0015] A third aspect of the present disclosure provides a train, comprising: a carriage; and a vehicle domain control system according to any one of the above items.

[0016] A fourth aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above method.

[0017] The fifth aspect of the present disclosure also provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to execute the above method.

[0018] The sixth aspect of the present disclosure also provides a computer program product, including a computer program, which implements the above method when executed by a processor.

[0019] According to the vehicle domain control system, method and train provided by the present disclosure, redundant control is performed for key control contents through the master domain controller and the slave domain controller, centralized processing of data flow and logical operations is realized, and redundant and complicated controllers are avoided. Since the master domain controller and the slave domain controller are flexibly configured based on the replaceable unit-standard board, the problem of software and hardware bundling and function bundling is broken, the number of vehicle controllers is reduced, the architecture of the control system is streamlined, and the equipment cost is reduced. Through integrated design, the electronic system of the vehicle is more compact, which can better adapt to the limited space inside the vehicle and improve the passenger experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0021] Figure 1 The application scenario diagram of the vehicle domain control system, method and train according to the embodiments of the present disclosure is schematically shown.

[0022] Figure 2 The structural block diagram of a vehicle domain control system according to an embodiment of the present disclosure is schematically shown.

[0023] Figure 3A The diagram schematically shows an example diagram of a controller and related equipment corresponding to the train spatial domain according to an embodiment of the present disclosure, wherein (3A-1) shows an example diagram of the distribution of the spatial domain, and (3A-2) shows an example diagram of the controller and related equipment.

[0024] Figure 3B The diagram schematically shows an extended topology diagram between a master domain controller and a slave domain controller according to an embodiment of the present disclosure.

[0025] Figure 4The schematic diagram of the chassis dimensions of the master domain controller and the slave domain controller according to the embodiment of the present disclosure is shown schematically, wherein (4a) is a main view and (4b) is a top view.

[0026] Figure 5 A schematic diagram of the system architecture of a master domain controller and a slave domain controller according to an embodiment of the present disclosure is schematically shown.

[0027] Figure 6 The flowchart of the vehicle domain control method according to the embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0028] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0029] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0030] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0031] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0032] In the technical solution of the present disclosure, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0033] The control systems of traditional rail transit vehicles face challenges when upgrading to intelligent ones. There is a lack of hardware-based design based on replaceable functional units, and the various control devices on the vehicles have problems such as heavy bundling of software and hardware, device-based function implementation, and a low riding environment experience.

[0034] In view of this, the present disclosure uses the master domain controller and the slave domain controller to perform redundant control on key control contents, realizes centralized processing of data flow and logical operations, and avoids redundant and complicated controllers. Since the master domain controller and the slave domain controller are flexibly configured based on the replaceable unit-standard board, the problem of software and hardware bundling and function bundling is broken, the number of vehicle controllers is reduced, the architecture of the control system is streamlined, and the equipment cost is reduced. Through the integrated design, the electronic system of the vehicle is more compact, which can better adapt to the limited space inside the vehicle, and further enhance the passenger experience.

[0035] The embodiments of the present disclosure provide a vehicle domain control system, method and train. The vehicle domain control system includes: a master domain controller configured to generate a control instruction based on the control logic of a train car and the device status information of the train car; a slave domain controller configured to receive the control instruction sent by the master domain controller and perform a control action according to the control instruction; wherein the master domain controller and the slave domain controller each include a standard board card, the standard board card conforms to the preset specification and interface standard, the configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain, the slave domain controller includes multiple, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

[0036] Figure 1 The application scenario diagram of the vehicle domain control system, method and train according to the embodiments of the present disclosure is schematically shown.

[0037] like Figure 1As shown, the application scenario according to this embodiment may include a master domain controller 101, a slave domain controller 102, a network 103 and a carriage 104. The network 103 is used to provide a medium for a communication link between the master domain controller 101 and the slave domain controller 102. The network 103 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc. It can be understood that the master domain controller 101 and the slave domain controller 102 can be set inside the carriage 104 according to actual conditions, and the specific setting location is not limited here.

[0038] The master domain controller 101 can be used to obtain the status information of the train and send control instructions to the slave domain controller according to the overall operation status and control logic of the vehicle. For example, the master domain controller 101 can collect the equipment status information, train operation status information and environment information in the carriage in real time.

[0039] The slave domain controller 102 can feed back the status information of the execution module to the master domain controller. For example, after receiving the instruction from the master controller 101, the slave domain controller 102 executes the instruction through the air conditioning control module to control the switch of the air conditioning system and adjust the temperature and wind speed.

[0040] The master domain controller 101 and the slave domain controller 102 can realize complex functions of the train through cooperative control. For example, in the automatic driving function, the master domain controller 101 (such as the driving domain controller) and the slave domain controller (such as the off-board domain controller) cooperate with each other to ensure that the vehicle can respond quickly in dangerous working conditions.

[0041] For example, the master domain controller 101 may send a braking, acceleration or steering instruction to the slave domain controller 102. For example, the slave domain controller 102 may transmit information such as the pressure of the braking system and the speed of the motor to the master domain controller in real time.

[0042] It should be noted that Figure 1 The number of slave domain controllers and networks can be multiple, depending on actual needs.

[0043] Figure 2 The structural block diagram of a vehicle domain control system according to an embodiment of the present disclosure is schematically shown.

[0044] like Figure 2 As shown, the vehicle domain control system of this embodiment includes a master domain controller 101 and a slave domain controller 102 .

[0045] The primary domain controller 101 is configured to generate control instructions based on the control logic of the train carriage and the equipment status information of the train carriage.

[0046] The slave domain controller 102 is configured to receive a control instruction sent by the master domain controller and execute a control action according to the control instruction.

[0047] Preferably, the master domain controller 101 and the slave domain controller 102 each include a standard board card, which complies with preset specifications and interface standards. The configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain. The slave domain controller includes multiple slave domain controllers, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

[0048] In the embodiments of the present disclosure, the functional domain of the train compartment can be an architectural mode of division according to different functional modules of the train vehicle; the spatial domain can be an architectural mode of division according to the physical space of the vehicle. The standard board can adopt a modular design to facilitate expansion and maintenance.

[0049] For example, the primary domain controller 101 can collect the equipment status information in the train compartment in real time through various types of sensors and communication interfaces. The primary domain controller 101 can also analyze and process the collected status information according to the preset control logic. The preset control logic includes but is not limited to safety logic, operation logic and comfort logic. The primary domain controller 101 can also generate specific control instructions based on the processing results of the control logic. The control instructions include but are not limited to equipment control instructions, operation control instructions and safety control instructions.

[0050] For example, the master domain controller 101 can send the generated control instructions to the slave domain controller 102 or other related devices through a communication link. After receiving the instructions, the slave domain controller 102 can perform corresponding operations and feed back the execution results to the master domain controller 101. Furthermore, the master domain controller 101 can further adjust the control logic and instructions according to the execution results fed back by the slave domain controller 102. It can be understood that this process is dynamic, and the coordinated control of the master domain controller 101 and the slave domain controller 102 can ensure that the train is in the best operating state.

[0051] For example, the slave domain controller 102 can be used to execute the instructions of the master domain controller 101 and feed back the execution results to the master domain controller 101, thereby realizing real-time control and dynamic adjustment of train equipment.

[0052] For example, the standard boards in the master domain controller 101 and the slave domain controller 102 can be configured as standardized communication interfaces, and the communication interface is set at the first side of the board to facilitate communication with other boards. The standard board is designed to be pluggable, which is convenient for plugging and unplugging operations, and is convenient for standardized design and maintenance. The standard board can support a variety of hardware interfaces and storage interfaces to meet the needs of different functional modules; the standard board also supports a variety of communication protocols to ensure compatibility between different devices; the standard board can also comply with specific power management standards to ensure the stable operation of the system.

[0053] According to the embodiments of the present disclosure, the master domain controller and the slave domain controller are used to perform redundant control on key control contents, realize centralized processing of data flow and logical operations, and avoid redundant and complicated controllers. Since the master domain controller and the slave domain controller are flexibly configured based on the replaceable unit-standard board, the problem of software and hardware bundling and function bundling is broken, the number of vehicle controllers is reduced, the architecture of the control system is streamlined, and the equipment cost is reduced. Through the integrated design, the electronic system of the vehicle is more compact and can better adapt to the limited space inside the vehicle, further improving the passenger experience.

[0054] According to an embodiment of the present disclosure, the spatial domain includes a driving domain, an interior domain, a roof domain and an under-vehicle domain; the primary domain controller selects a domain controller corresponding to the maximum control requirement information from multiple control requirement information by comparing the control requirement information of the driving domain, the control requirement information of the interior domain, the control requirement information of the roof domain and the control requirement information of the under-vehicle domain as the primary domain controller, and the primary domain controller meets the computing resources and communication bandwidth of preset conditions.

[0055] Figure 3A The diagram schematically shows an example diagram of a controller and related equipment corresponding to the train spatial domain according to an embodiment of the present disclosure, wherein (3A-1) shows an example diagram of the distribution of the spatial domain, and (3A-2) shows an example diagram of the controller and related equipment.

[0056] like Figure 3A As shown in Figure (3A-1) in FIG. 3A , the space domain of the train may include a driving domain 301, a compartment domain 302, a roof domain 303, and a bottom domain 304. Figure 3A As shown in Figure (3A-2), the related equipment corresponding to the space domain may include console equipment 31, Passenger Information System (PIS) 32, door 33, air conditioning equipment 34, traction equipment 35, brake equipment 36, data acquisition equipment 37 and front cabin equipment 38. The controller corresponding to the driving domain 301 is the driving domain controller 3011, the controller corresponding to the in-car domain 302 is the in-car domain controller 3021, and the controller corresponding to the under-car domain 304 is the under-car domain controller 3041.

[0057] In an embodiment of the present disclosure, before selecting the domain controller corresponding to the maximum control demand information as the primary domain controller, the maximum demand information can be determined first, and the determination process may include: defining the control demand information of each functional domain by defining the quantitative standard of the control demand information, determining the maximum demand information by comparing the control demand information, and then determining the domain controller corresponding to the maximum control demand information as the primary domain controller.

[0058] For example, clarify the specific quantitative indicators of the control demand information of each functional domain. For example, the control demand can be quantified based on factors such as task complexity, resource consumption, and priority. Each domain controller can generate a control demand value based on its own task situation; collect the control demand information of each domain from the domain controllers of the driving domain, the interior domain, the roof domain, and the under-vehicle domain, and then compare the collected control demand information of each domain to find the domain controller with the largest control demand value, and set the domain controller with the largest control demand as the primary domain controller.

[0059] In a feasible embodiment, after the primary domain controller is determined, considering that the vehicle's operating environment and mission requirements may change dynamically, the selection of the primary domain controller can be set to have dynamic adjustment capabilities, and the control requirements of each domain can be re-evaluated regularly, and the primary domain controller can be re-selected based on the latest situation. Dynamically adjusting the primary domain controller based on the latest control requirement information can more reasonably allocate computing resources, communication bandwidth and energy, and avoid resource waste.

[0060] According to an embodiment of the present disclosure, the functional domains include a traction functional domain, a braking functional domain, an air-conditioning functional domain, a door functional domain, a lighting functional domain and a control logic domain; the master domain controller is used to control the logic domain, and the slave domain controller is used to control the traction functional domain, the braking functional domain, the air-conditioning functional domain, the door functional domain and the lighting functional domain.

[0061] In an embodiment of the present disclosure, based on the master-slave architecture of the master domain controller and the slave domain controller, collaborative management of functional modules can be achieved. The master domain controller corresponds to the control logic domain and can be responsible for global control strategy, operation mode management, fault diagnosis and recovery, data aggregation and analysis. The hardware requirements of the master domain controller may include high-performance multi-core processors, redundant design (such as dual-machine hot standby or three-out-of-two voting mechanism) and support for multiple communication interfaces (such as Ethernet). The software requirements of the master domain controller may include a real-time operating system, integrated artificial intelligence algorithms for predictive maintenance, and support for over-the-air download technology upgrades.

[0062] For example, the traction domain in the slave domain controller can execute motor control algorithms (such as vector control, direct torque control); the braking domain can dynamically allocate electric braking and mechanical braking force in response to the master domain deceleration command; the air conditioning domain can adjust the air valve and compressor power based on temperature sensor data; the door domain can control the door switch and integrate safety interlock logic; the lighting domain can adjust the cabin lighting according to the ambient light and operating status. The hardware requirements of the slave domain controller may include an embedded microcontroller, a dedicated sensor interface, and a low-latency communication module (such as Ethernet).

[0063] In a feasible embodiment, the master-slave architecture based on the master domain controller and the slave domain controller may also include communication protocols and data interaction, functional collaborative design, redundancy and fault-tolerant design, fault diagnosis and self-healing, and deployment and verification.

[0064] According to the embodiments of the present disclosure, through the master-slave architecture of the master domain controller and the slave domain controller, rail transit vehicles have achieved an upgrade from hardware stacking to software definition, taking into account real-time, reliability and intelligence, and further achieving a higher standard of fully automatic operation.

[0065] According to an embodiment of the present disclosure, the standard board is also configured to update the control algorithm, hardware configuration and communication protocol of the standard board according to the control signal of the train carriage to obtain an updated board.

[0066] In the embodiments of the present disclosure, in order to improve the safety performance and operational efficiency of the train and optimize the hardware and communication protocols, an updated board can be obtained by updating the control algorithm, hardware configuration and communication protocol of the standard board.

[0067] For example, updating the control algorithm of a standard board may include: analyzing the deficiencies of existing control algorithms and designing new control algorithms based on the control signal requirements of train carriages; compiling the updated control algorithm into a software package, deploying it to the standard board through remote or on-site updates, and adopting a secure version update authorization mechanism to ensure the reliability of the update process; building a vehicle logic circuit control system on the ground to conduct tests under extreme conditions such as simulated failures and control disorders to ensure safe and reliable vehicle control, and collecting updated data for performance evaluation and optimization.

[0068] For example, the hardware configuration of standard boards can include hardware selection and integration, hardware installation and debugging, and performance testing. According to new control requirements, suitable hardware modules, such as sub-boards, can be selected to integrate sub-boards with different functions into standard chassis, eliminating manual wiring and improving system reliability and production efficiency; by installing new hardware modules and performing intelligent batch debugging, the compatibility of hardware and software can be ensured to improve debugging efficiency; the updated hardware configuration can also be tested, including functional testing, performance testing, and reliability testing, so as to optimize and adjust according to the test results to ensure that the hardware configuration meets the requirements of train operation.

[0069] According to an embodiment of the present disclosure, the control algorithm, hardware configuration and communication protocol of the standard board are updated according to the control signal of the train carriage, thereby improving the operation efficiency and safety of the train.

[0070] Figure 3B The diagram schematically shows an extended topology diagram between a master domain controller and a slave domain controller according to an embodiment of the present disclosure.

[0071] like Figure 3B As shown, the distributed system architecture may include a master domain controller 101 and a slave domain controller 102, the master domain controller 101 includes a switch board 105a, and the slave domain controller includes a switch board 105b. There are multiple slave domain controllers 102, such as slave domain controllers 102a, slave domain controllers 102b, and slave domain controllers 102c. The master domain controller 101 and the slave domain controllers 102 can be connected and data exchanged through a switch board. Each slave domain controller 102 includes multiple types of boards, such as a main control board 1021, an I / O board 1022, and a fusion board 1023. The main control board 1021 can be used for the control and management of the slave domain controller 102, the I / O board 1022 can be used for input and output operations, and the fusion board 1023 can be used for data fusion processing. This topological structure can improve the scalability and reliability of the system, and the processing capacity and number of interfaces of the system can be expanded by increasing the slave domain controllers. It should be noted that the number of domain controllers, switch boards, main control boards, fusion boards and I / O boards in the figure is only for reference, and the specific number can be determined according to actual needs.

[0072] Figure 4 The schematic diagram of the chassis dimensions of the master domain controller and the slave domain controller according to the embodiment of the present disclosure is shown schematically, wherein (4a) is a main view and (4b) is a top view.

[0073] like Figure 4 As shown in Figure (4a) in the figure, the total length of the master domain controller and the slave domain controller chassis is 482mm and the height is 132mm. Figure 4As shown in Figure (4b) of FIG. 1 , the net length of the chassis is 445 mm and the width is 250 mm. It should be noted that the specific dimensions of the chassis can be determined according to relevant standards and actual needs. The dimensions in the figure are only examples and are not specifically limited here.

[0074] According to an embodiment of the present disclosure, the standard board is also configured to meet the access requirements of the non-standard board through interface design and modular design for non-standard control signals.

[0075] According to an embodiment of the present disclosure, a non-standard control signal can represent a signal that does not meet the standardization mechanism. Considering that complex automation equipment uses non-standard signals to achieve equipment control and monitoring, the present disclosure processes non-standard control information signals through signal conversion, interface design and modular design.

[0076] For example, non-standard signals can be converted into standard signals through signal conversion devices to make them compatible with existing systems; standardized interfaces can be designed to enable non-standard boards to be connected to the system through adapters or conversion modules; modular design can be used to integrate hardware modules with different functions into the system to improve the flexibility and scalability of the system.

[0077] According to the embodiments of the present disclosure, the standard board meets the requirements of flexible configuration and access to third-party boards (non-standard boards), and can realize control function integration and standard hardware board configuration. For example, flexible board configuration can be performed according to the control signal of the vehicle, and third-party board access is allowed for a small number of special non-standard signals, which can reduce the development cost of special boards. Flexible board configuration is conducive to enhancing the development of hardware standardization work, reducing the types of spare parts, and reducing the cost of operation, inspection and maintenance.

[0078] According to an embodiment of the present disclosure, the standard board is also configured to meet preset safety standards through a load protection mechanism; the load protection mechanism includes at least one of the following: the standard board adopts an overcurrent protection device to perform a disconnection operation when the current exceeds a preset threshold; overload protection and disconnection operations are performed between the sub-channel and the main channel within the standard board through a multi-channel analog-to-digital converter and a baseboard management chip; overload protection is performed between the standard board and the sub-board using a power management chip.

[0079] In the embodiments of the present disclosure, the load protection mechanism of the standard board may include overcurrent and overload protection from the standard board to the load end, overload protection and disconnection between the sub-channel and the main channel inside the standard board, and overload protection and disconnection between the sub-board and the backplane. The power management chip is used to distribute and protect power between the standard board and the sub-board.

[0080] For example, in terms of current overcurrent protection, it can include: setting the protection current value through the setting module, such as 6A, 10A, 12A, etc., the current detection module monitors the current in the circuit in real time and transmits the data to the control module; the control module compares the monitored current value with the set protection current value. When the current exceeds the set threshold and the duration reaches the set time threshold, the control module cuts off the circuit by controlling the switch module.

[0081] It should be noted that, taking into account the different overload protection requirements of various load types in the train, the present invention can also flexibly set the current value of overcurrent protection according to different load types and application scenarios, and by adopting high-precision detection elements such as current transformers, the accuracy of current monitoring can be ensured.

[0082] For example, the overload protection and cut-off operations between the sub-channel and the main channel can be implemented through a multi-channel analog-to-digital converter and a baseboard management chip, which may include: multi-channel real-time acquisition of current and voltage signals of the main channel and the sub-channel, and conversion of them into digital signals; the baseboard management chip reads the digital signal converted by the multi-channel analog-to-digital converter, and determines whether an overload occurs based on a preset threshold. When the current or voltage exceeds the preset threshold, the baseboard management chip activates the protection mechanism; the baseboard management chip can cut off the power supply of the overload channel by controlling a relay or other cutting device.

[0083] For example, the power management chip can monitor the power current of the daughter board in real time through the built-in current sensor. When the current exceeds the preset threshold, the chip can trigger the protection mechanism. The power management chip can send a signal to cut off the power supply of the daughter board by controlling the relay. When the overload condition is relieved, the power management chip can automatically restore the power supply.

[0084] According to the embodiments of the present disclosure, through the various load protection mechanisms of the standard motherboard, the power management chip can monitor the current in real time. When the current exceeds the preset threshold, the power supply is automatically cut off to prevent equipment damage caused by overload. By controlling the opening and closing of the load, the power distribution is optimized and energy consumption is reduced.

[0085] According to an embodiment of the present disclosure, the master domain controller is also configured to process the same input signal in parallel through at least two independent channels, generate respective output results, and compare multiple output results. When multiple output results are the same, the output result is used as the final output to meet the redundant configuration requirements. The slave domain controller is also configured to meet the security level requirements through hardware isolation strategy, software space independence strategy and software time independence strategy.

[0086] In the embodiments of the present disclosure, based on the open control architecture of the master domain controller and the slave domain controller, the master domain controller can meet the requirements of the safety integrity level through a dual redundant design. The slave domain controller can achieve a flexible combination of SIL2 to SIL0 certification by combining different hardware and software strategies under different safety level requirements.

[0087] For example, the primary domain controller can contain two completely independent hardware systems, each with independent power supplies, processors, input and output modules, etc. For the software system of the primary domain controller, the two processing units in each subsystem can run the same software logic, but perform tasks independently, and ensure the consistency of output results through a comparison mechanism to achieve software redundancy. The system can monitor the status of each processing unit in real time, and when a unit failure is detected, it can automatically switch to the backup unit to ensure the continuous operation of the system.

[0088] For example, the hardware isolation strategy of the domain controller can include independent power supply, physical isolation and interface isolation. For example, independent power supply can be provided for modules with different security levels to prevent power failure or interference from affecting other modules; hardware components with different security levels can be physically separated to reduce electromagnetic interference and common cause failure; isolation interfaces (such as optical couplers and isolation converters) can be used to connect modules with different security levels to ensure the independence of signal transmission.

[0089] For example, the domain controller's software space independence strategy can adopt a hardware-supported memory protection unit to prevent the memory space of high-security software from being illegally accessed or tampered with by low-security software; or use an operating system that supports memory protection to further strengthen the independence of the memory space through software mechanisms; ensure that data from low-security software does not flow to high-security software to avoid data pollution.

[0090] For example, the software time independence strategy from the domain controller can include: the operating system can allocate deterministic time slices to software tasks of different security levels to ensure that each task can obtain processing resources within the scheduled time. Assign higher priorities to high-security level tasks to ensure that high-security level tasks can be executed first when resources compete. Or by monitoring the execution time of software tasks, if a task exceeds its scheduled execution time, the system will terminate the task to prevent it from causing potential risks to system security.

[0091] In the embodiments of the present disclosure, except for the SIL4 level which requires the architecture of the main domain controller to meet the 2×2oo2 requirement, SIL2~SIL0 certifications can be configured through flexible combinations, and the chassis architecture does not need to be changed, thereby increasing the signal density per unit volume, which can better meet the vehicle control requirements and save the space and weight occupied by the vehicle control system.

[0092] According to the embodiments of the present disclosure, through flexible configuration methods, the master domain controller and the slave domain controller can achieve flexible configuration of SIL0 to SIL4 levels according to different security level requirements by combining different hardware and software strategies, thereby optimizing system cost and complexity while meeting safety requirements.

[0093] According to an embodiment of the present disclosure, the standard board meets the preset specifications and interface standards, including: determining the interface standard, communication design, power design, board size and connector type of the standard board.

[0094] In the embodiments of the present disclosure, other intranet forms in traditional technologies are considered, such as the number of controller LAN nodes is generally required to be no more than 40, and the longer the communication distance, the slower the communication rate. If the length of the communication cable in the carriage exceeds 50 meters, the communication speed is less than 1Mbps. The communication rate of Ethernet is faster and is not limited by the number of nodes and distance. The communication design of the standard board in the present disclosure can use 100M Ethernet, and its communication speed is not affected (the typical carriage application wiring length does not exceed 100 meters).

[0095] For example, for the power supply design of standard boards, considering the impact of power board failure, the main domain controller can use two independent power boards (power board A / B) for redundant power supply, each power board is equipped with a power connector, and the physical interface form and interface definition of the power connectors of the two power boards are the same. For example, other interface designs can include definitions such as 5V, 24V power supply, power-off signal, slot signal, Ethernet, address encoding, etc.

[0096] According to the embodiments of the present disclosure, by clarifying the interface definition, signal and power design requirements of the backplane, and unifying the board size and connector model, the needs of high-performance computing and embedded systems can be met.

[0097] According to an embodiment of the present disclosure, the master domain controller and the slave domain controller are further configured to use multiple independent power boards, each of which includes a power connector, and the physical interface and interface definition of the power connectors of each of the multiple power boards are the same.

[0098] In an embodiment of the present disclosure, the master domain controller and the slave domain controller are each configured with an independent power board, which can work independently without interfering with each other, and provide redundant power through multiple power boards to ensure that the system can still operate normally when a power board fails. For the power connector, the power connector on the power board can adopt a standardized design to ensure the consistency of the physical interface. The interface definition of the power connector can follow the relevant standards to ensure that the electrical characteristics and signal definitions between different power boards are consistent. Through standardized interface definitions, the power board can be uniformly powered with other components in the system.

[0099] In a feasible embodiment, based on the combination of the train functional domain and the physical space domain, the domain controller corresponding to the driving domain can be a separate independent architecture controller, and can adopt the SIL4 certification of the 2×2oo2 (Two out of Two) architecture (some signals can also be SIL2 level); the undercarriage domain, as an important signal control area for train traction and braking, can also adopt a safety certification architecture, with the main domain controller completing the vehicle operation command control, and at the same time collecting sensor information through slave domain controllers distributed in various places to facilitate the main domain controller to make decision instructions.

[0100] In a feasible embodiment, a graphical programming software that meets relevant standards (such as the IEC 61131 standard) can be used, and the underlying software configuration of the daughter board can be configured using address recognition and pre-writing. When the daughter board is inserted into the corresponding card slot, the backplane identification number can be used to determine the board type and read the relevant board configuration. There is no need to flash a separate program, which saves flexibility in debugging and use.

[0101] Figure 5 A schematic diagram of the system architecture of a master domain controller and a slave domain controller according to an embodiment of the present disclosure is schematically shown.

[0102] like Figure 5 As shown, the system architecture of the master domain controller and the slave domain controller may adopt an architecture including a bottom-level driver 501, an operating system 502, a platform software 503, and a logic function program 104. The platform software 503 may support modular packaging and user secondary development by adopting programming software that complies with relevant standards to meet intuitiveness and operability.

[0103] The underlying driver 501 may include a variety of hardware controllers, such as a Flash controller, a serial port controller, an I2C controller (Inter-Integrated Circuit Controller), a CAN controller (Controller Area Network Controller), an SPI controller (Serial Peripheral Interface Controller), an I / O controller (Input / Output Controller) and an Ethernet controller. These controllers are responsible for directly interacting with the hardware and providing basic hardware operation functions.

[0104] The operating system 502 may use a real-time operating system 5021 and a board support package 5022. The real-time operating system 5021 may include a kernel library, a file system, an I / O system, and a user library. The board support package 5022 may include various drivers, such as a Flash driver, a serial port driver, an I2C driver, a CAN driver, an SPI driver, an I / O driver, and an Ethernet driver, which may provide an interface for the operating system to interact with the hardware.

[0105] The platform software 503 may include functional modules such as application configuration, program update, configuration file management, fault diagnosis, redundancy management, power-off protection, chassis management, PTU interaction (maintaining system software functions) and programming software. These modules may provide system-level software functions to support the operation and management of application programs.

[0106] The logic function program 504 may include functions such as digital input acquisition (DI acquisition), digital output (DO output), fault reporting, data recording, and train operation data communication. These programs may implement the specific business logic and functions of the system.

[0107] According to the embodiments of the present disclosure, by adopting a safe computer architecture suitable for rail transit on-board applications, flexible software and hardware configuration and configuration design are performed, some relays are replaced by contactless control technology, the vehicle's hard-wired logic circuits are software-based, the control logic is simplified and flexible design of circuit control logic is achieved, and based on the control needs and functional requirements of each subsystem of the vehicle, independent controllers are replaced by safe computer function boards, and control data is connected, which can improve the intelligence and digitization level of rail transit vehicle controllers and further improve the operating efficiency of trains.

[0108] Based on the above vehicle domain control system, the present disclosure also provides a vehicle domain control method. Figure 6 The method is described in detail.

[0109] Figure 6The flowchart of the vehicle domain control method according to the embodiment of the present disclosure is schematically shown.

[0110] like Figure 6 As shown, the vehicle domain control method of this embodiment may include operations S610 to S620.

[0111] In operation S610, the primary domain controller generates a control instruction based on the control logic of the train car and the device status information of the train car.

[0112] In operation S620, the slave domain controller receives a control instruction sent by the master domain controller, and performs a control action according to the control instruction.

[0113] Preferably, the master domain controller and the slave domain controller each include a standard board card, the standard board card complies with preset specifications and interface standards, the configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain, the slave domain controller includes multiple, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

[0114] According to an embodiment of the present disclosure, the present disclosure also provides a train, including: a carriage; and the above-mentioned vehicle domain control system.

[0115] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0116] It will be appreciated by those skilled in the art that the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations and / or combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways without departing from the spirit and teachings of the present disclosure. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0117] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A vehicle domain control system, comprising: a primary domain controller configured to generate a control instruction based on a control logic of a train carriage and device status information of the train carriage; A slave domain controller is configured to receive a control instruction sent by the master domain controller and execute a control action according to the control instruction; Among them, the master domain controller and the slave domain controller each include a standard board card, and the standard board card complies with preset specifications and interface standards. The configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain. The slave domain controller includes multiple slave domain controllers, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

2. The control system according to claim 1, wherein the spatial domain includes a driving domain, a vehicle interior domain, a vehicle roof domain, and a vehicle bottom domain; The primary domain controller selects the domain controller corresponding to the maximum control requirement information from multiple control requirement information as the primary domain controller by comparing the control requirement information of the driving domain, the control requirement information of the vehicle interior domain, the control requirement information of the roof domain and the control requirement information of the under-vehicle domain. The primary domain controller meets the computing resources and communication bandwidth of the preset conditions.

3. The control system according to claim 1, wherein the functional domains include a traction functional domain, a braking functional domain, an air conditioning functional domain, a door functional domain, a lighting functional domain and a control logic domain; The master domain controller is used for controlling the logic domain, and the slave domain controller is used for controlling the traction function domain, the braking function domain, the air conditioning function domain, the door function domain and the lighting function domain.

4. According to the control system of claim 1, the standard board is further configured to update the control algorithm, hardware configuration and communication protocol of the standard board according to the control signal of the train carriage to obtain an updated board.

5. The control system according to claim 1, wherein the standard board is further configured to meet the access requirements of non-standard board through interface design and modular design for non-standard control signals.

6. The control system according to any one of claims 1 to 5, wherein the standard board is further configured to meet preset safety standards through a load protection mechanism; The load protection mechanism includes at least one of the following: The standard board adopts an overcurrent protection device, which performs a disconnection operation when the current exceeds a preset threshold; Overload protection and cut-off operations are performed between the sub-channel and the main channel in the standard board through a multi-channel analog-to-digital converter and a baseboard management chip; A power management chip is used between the standard board and the daughter board to perform overload protection.

7. According to the control system of claim 1, the master domain controller is also configured to process the same input signal in parallel through at least two independent channels, generate respective output results, and compare multiple output results. When multiple output results are the same, the output result is used as the final output to meet the redundant configuration requirements. The slave domain controller is also configured to meet the security level requirements through hardware isolation strategy, software space independence strategy and software time independence strategy.

8. The control system according to claim 7, wherein the standard board meets the preset specifications and interface standards, including: The interface standard, communication design, power supply design, board size and connector type of the standard board are determined.

9. According to the control system of claim 8, the master domain controller and the slave domain controller are further configured to use multiple independent power boards, each of which includes a power connector, and the physical interface and interface definition of the power connectors of each of the multiple power boards are the same.

10. A vehicle domain control method, applied to a vehicle domain control system, the control method comprising: The primary domain controller generates a control instruction based on the control logic of the train carriage and the device status information of the train carriage; The slave domain controller receives a control instruction sent by the master domain controller, and executes a control action according to the control instruction; Among them, the master domain controller and the slave domain controller each include a standard board card, and the standard board card complies with preset specifications and interface standards. The configuration information of the master domain controller is determined based on the control requirement information of the train car space domain or the control requirement information of the functional domain. The slave domain controller includes multiple slave domain controllers, and the master domain controller is connected to the multiple slave domain controllers through a communication link.

11. A train comprising: car; The vehicle domain control system according to any one of claims 1 to 9.

Images