Safety key input acquisition method for vehicle door state of vehicle-mounted signal system

Abstract

The invention discloses a safety key input acquisition method for a vehicle door state of a vehicle-mounted signal system, which comprises the following steps: S1, for a vehicle door closing state, a vehicle provides an all-left-door closing train line and an all-right-door closing train line which respectively represent a closing state of a left side door and a closing state of a right side door of the whole train; s2, a relay for closing all the left doors is provided, and when all the left doors of the whole train are in a closed state, a train line is powered on, and the relay is excited; s3, a relay for closing all the right doors is provided, and when all the right doors of the whole train are in a closed state, the train line is powered on, and the relay is excited; s4, one end of one normally open contact of each left door closing relay is connected with all right door closing train lines, and the other end of one normally open contact of each left door closing relay is connected with a door closing input 1 of a signal system VOBC; and S5, connecting one end of a normally open contact of each right door closing relay with all left door closing train lines. The method provided by the invention realizes low-cost design and has the characteristic of high isomerism.

Description

Technical Field

[0001] The present invention relates to a method for collecting safety-critical inputs of door states in a vehicle-mounted signal system. Background Art

[0002] To meet the requirements of functional safety, the input states of the vehicle-mounted signal system for the ATP function are defined as safety-critical inputs, and its interface design needs to meet the requirements of the safety-critical input interface, including: using two signals from different sources to represent the same state, and any single-point failure cannot cause the system to misjudge the dangerous state, etc.

[0003] Taking the door closed (locked) state as an example, in the current vehicle circuit design, two train lines are often used to represent the closed (locked) states of the left and right doors of the train respectively, and the signal system needs to collect the closed (locked) states of all vehicle doors (DCS1, DCS2) for the ATP function. Currently, there are generally two types of interface designs between the train lines for the door closed (locked) state and the signal system:

[0004] 1) Relay interface, two train lines respectively control the relays for the door closed (locked) state for the signal system interface, as Figure 3 shown. In this interface method, to meet the requirements of the safety-critical interface, each train line needs to control two independent interface relays to avoid the signal system receiving incorrect door closed (locked) states due to a single relay failure.

[0005] 2) Shielded wire interface, each train line for the door state is respectively connected to the vehicle-mounted signal system through two shielded wire interfaces, as Figure 4 shown. In this interface method, to meet the requirements of the safety-critical interface, the door state on each side needs to be collected by two input channels to avoid the signal system receiving incorrect door closed (locked) states due to a single-channel failure.

[0006] It can be seen that in the above two methods, twice the number of interface relays or input channels are required to meet the safety interface requirements, resulting in a high cost and great implementation difficulty.

[0007] Therefore, a method for collecting safety-critical inputs of door states in a vehicle-mounted signal system is provided. Summary of the Invention

[0008] The purpose of the present invention is to provide a method for collecting safety-critical inputs of door states in a vehicle-mounted signal system to overcome the existing defects, which realizes low-cost design and has the characteristics of high heterogeneity.

[0009] The technical solution to achieve the above purpose is:

[0010] A method for collecting safety-critical inputs of door states in a vehicle-mounted signal system, comprising:

[0011] Step S1: For the door closed state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, representing the closed states of the left doors and the right doors of the whole train respectively.

[0012] Step S2: Provide a relay for all left doors closed. When all the left doors of the whole train are in the closed state, the train line is powered and the relay is energized.

[0013] Step S3: Provide a relay for all right doors closed. When all the right doors of the whole train are in the closed state, the train line is powered and the relay is energized.

[0014] Step S4: Connect one end of a normally open contact of the above-mentioned relay for all left doors closed to the train line for all right doors closed, and the other end to the door closed input 1 of the signal system VOBC.

[0015] Step S5: Connect one end of a normally open contact of the above-mentioned relay for all right doors closed to the train line for all left doors closed, and the other end to the door closed input 2 of the signal system VOBC.

[0016] Step S6: Each of the left and right input paths has the state provided jointly by the train line and the relay contact, thus realizing the acquisition of different sources for the safety-critical input.

[0017] Preferably, in step S4, when the train line for all right doors closed is powered and the relay for all left doors closed is energized, the door closed input 1 of VOBC is at a high level.

[0018] Preferably, in step S5, when the train line for all left doors closed is powered and the relay for all right doors closed is energized, the door closed input 2 of VOBC is at a high level.

[0019] Preferably, in step S6, each of the left and right input paths has the state provided jointly by the train line and the relay contact. Any failure of the relay or input channel will cause the two door closed states received by the on-vehicle signal system to be inconsistent, and thus a fault is judged to occur.

[0020] The beneficial effects of the present invention are as follows: In the connection mode of the present invention, each input path has the state provided jointly by the train line and the relay contact. Any failure of the relay or input channel will cause the two door closed (locked) states received by the on-vehicle signal system to be inconsistent, so as to judge the occurrence of a fault and make a safety response, avoiding the harm caused by a single-point fault, and having the characteristic of high heterogeneity; and the present invention only needs to use two relays and two input channels, saving half of the number of relays compared with the relay interface design in the existing method, and saving half of the number of input channels compared with the shielded wire interface design in the existing method, realizing a low-cost design. Description of the Drawings

[0021] Figure 1 It is a flowchart of a method for collecting safety-critical inputs of the door state of a vehicle-mounted signal system according to the present invention;

[0022] Figure 2 In the present invention, each train line of the door state is connected to the vehicle-mounted signal system through two relays respectively;

[0023] Figure 3 It is a schematic diagram of a traditional technical solution in which a relay interface controls a door closing state relay for each of the two train lines for the signal system interface;

[0024] Figure 4 It is a schematic diagram of a traditional technical solution in which each train line of the door state is connected to the vehicle-mounted signal system through two shielded wire interfaces respectively. Detailed implementation manners

[0025] Next, the technical solution of the present invention will be described clearly and completely in conjunction with the accompanying drawings. In the description of the present invention, it should be noted that the orientation or positional relationship indicated by the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc. is based on the orientation or positional relationship shown in the accompanying drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of the present invention. In addition, the terms "first", "second", "third" are only used for descriptive purposes and cannot be construed as indicating or implying relative importance.

[0026] Next, the present invention will be further described in conjunction with the accompanying drawings.

[0027] The present invention takes the door closing state as an example to describe the content of the present invention in detail.

[0028] Such as Figure 1 、 2 shown, a method for collecting safety-critical inputs of the door state of a vehicle-mounted signal system includes:

[0029] Step S1, for the door closing state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, respectively representing the closing states of the left doors and the right doors of the entire train.

[0030] Step S2, provide a relay for all left doors closed. When all the left doors of the entire train are in the closed state, the train line is powered on and the relay is excited.

[0031] Step S3, provide a relay for all right doors closed. When all the right doors of the entire train are in the closed state, the train line is powered on and the relay is excited.

[0032] Step S4: One normally open contact of all the above left door closing relays has one end connected to the train line for all right doors closed, and the other end connected to the door closing input 1 of the signal system VOBC. That is, when the train line for all right doors closed is powered and all the left door closing relays are energized, the door closing input 1 of VOBC is at a high level.

[0033] Step S5: One normally open contact of all the above right door closing relays has one end connected to the train line for all left doors closed, and the other end connected to the door closing input 2 of the signal system VOBC. That is, when the train line for all left doors closed is powered and all the right door closing relays are energized, the door closing input 2 of VOBC is at a high level.

[0034] Step S6: Each left - right pair of inputs provides the status jointly by the train line and the relay contact, thus realizing the diverse - source acquisition of safety - critical inputs.

[0035] In the embodiment, each left - right pair of inputs provides the status jointly by the train line and the relay contact. If any relay or input channel fails, it will cause the two - way door closing states received by the on - vehicle signal system to be inconsistent. Then, the fault is judged to occur, and a safety response is made to avoid the harm caused by a single - point fault, featuring high heterogeneity.

[0036] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A safety-critical input acquisition method for a vehicle door status of a vehicle signal system, characterized in that: include: Step S1, for the door closing state, the vehicle provides an all left door closing train line and an all right door closing train line, which respectively represent the closing state of the left door and the closing state of the right door of the entire train; Step S2, providing a relay for closing all left doors, when all left doors of the entire train are in a closed state, the train line is energized and the relay is energized; Step S3, providing a right door closing relay, when all right doors of the entire train are in a closed state, the train line is energized and the relay is energized; Step S4, connect one end of a normally open contact of all the left door closing relays to all the right door closing train lines, and the other end to the door closing input 1 of the signal system VOBC; Step S5, connect one end of a normally open contact of all the above right door closing relays to all the left door closing train lines, and the other end to the door closing input 2 of the signal system VOBC; In step S6, each of the left and right inputs has a train line and a relay contact jointly providing a status, thereby achieving different source collection of safety-critical inputs.

2. The method for collecting safety-critical inputs of a vehicle door status of a vehicle-mounted signal system according to claim 1, characterized in that: In step S4, when all right door closing train lines are energized and all left door closing relays are energized, the door closing input 1 of VOBC is at a high level.

3. The method for collecting safety-critical inputs of a vehicle door status of a vehicle-mounted signal system according to claim 1, characterized in that: In step S5, when all left door closing train lines are energized and all right door closing relays are energized, the door closing input 2 of VOBC is at a high level.

4. The method for collecting safety-critical inputs of a vehicle door status of a vehicle-mounted signal system according to claim 1, characterized in that: In step S6, each of the left and right inputs has a status provided by the train line and the relay contacts. Any relay or input channel failure will cause the two door closing states received by the on-board signal system to be inconsistent, thereby determining that a fault has occurred.

Images