A safety-critical input acquisition method for door status in a vehicle signaling system

Abstract

This invention discloses a safety-critical input acquisition method for the door status of an on-board signaling system, comprising: Step S1, for the door closed state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, representing the closed state of the left and right doors of the entire train, respectively; Step S2, providing a relay for all left doors closed, the train line is energized and the relay is energized when all left doors of the entire train are closed; Step S3, providing a relay for all right doors closed, the train line is energized and the relay is energized when all right doors of the entire train are closed; Step S4, connecting one normally open contact of the above-mentioned relay for all left doors closed to the train line for all right doors closed, and connecting the other end to the door closed input 1 of the signaling system VOBC; Step S5, connecting one normally open contact of the above-mentioned relay for all right doors closed to the train line for all left doors closed. This invention achieves low-cost design and has the characteristics of high heterogeneity.

Description

Technical Field

[0001] This invention relates to a method for acquiring safety-critical inputs on the door status of a vehicle signaling system. Background Technology

[0002] To meet functional safety requirements, the input status of the on-board signal system used for ATP function is defined as a safety-critical input. Its interface design must meet the requirements of a safety-critical input interface, including: using two different source signals to represent the same status, and ensuring that any single point of failure does not cause the system to incorrectly judge a dangerous status.

[0003] Taking the closed (locked) door status as an example, current vehicle circuit designs often use two train lines to represent the closed (locked) status of the left and right doors respectively. The signaling system needs to collect the closed (locked) status of all vehicle doors (DCS1, DCS2) for ATP (Automatic Train Protection) functions. Currently, there are generally two interface designs between the train lines and the signaling system for the closed (locked) door status:

[0004] 1) Relay interface: Two train lines control the door closing (locking) status. Relays are used for the signal system interface, such as... Figure 3 As shown. In this interface method, to meet the safety-critical interface requirements, each train line needs to control two independent interface relays to prevent a single relay failure from causing the signal system to receive an incorrect door closed (locked) state.

[0005] 2) Shielded wire interface: Each door status train line is connected to the on-board signaling system through two shielded wire interfaces, such as... Figure 4 As shown in the diagram. In this interface method, to meet the requirements of a safety-critical interface, the status of each door needs to be collected by two input channels to avoid the signal system receiving an incorrect door closing (locking) status due to a single-channel failure.

[0006] It is evident that, of the two methods described above, twice the number of interface relays or input channels are required to meet the safety interface requirements, resulting in higher costs and greater implementation difficulties.

[0007] Therefore, a method for acquiring safety-critical inputs of vehicle door status in an on-board signal system is provided. Summary of the Invention

[0008] The purpose of this invention is to overcome the shortcomings of existing methods and provide a safety-critical input acquisition method for the door status of a vehicle signal system, which achieves low-cost design and has the characteristics of high heterogeneity.

[0009] The technical solution to achieve the above objectives is:

[0010] A method for acquiring safety-critical inputs on the door status of a vehicle-mounted signal system, comprising:

[0011] Step S1: For the closed door state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, which respectively represent the closed state of the left and right doors of the entire train;

[0012] Step S2: Provide a relay for closing all left doors. When all left doors of the entire train are closed, the train line is energized and the relay is energized.

[0013] Step S3: Provide a relay for closing all right doors. When all right doors of the entire train are closed, the train line is energized and the relay is energized.

[0014] Step S4: Connect one end of a normally open contact of all the above left door closing relays to all right door closing train lines, and the other end to the door closing input 1 of the signal system VOBC;

[0015] Step S5: Connect one end of a normally open contact of all the right door closing relays to all the left door closing train lines, and the other end to the door closing input 2 of the signal system VOBC.

[0016] In step S6, each of the left and right inputs is provided with status by both the train line and relay contacts, thereby realizing the acquisition of different sources of safety-critical inputs.

[0017] Preferably, in step S4, when all right door closing train lines are energized and all left door closing relays are energized, the door closing input 1 of VOBC is at a high level.

[0018] Preferably, in step S5, when all left door closing train lines are energized and all right door closing relays are energized, the door closing input 2 of VOBC is at a high level.

[0019] Preferably, in step S6, each of the left and right inputs is provided with a status by both the train line and the relay contact. A failure of any relay or input channel will cause the two door closing statuses received by the on-board signal system to be inconsistent, thereby determining that a fault has occurred.

[0020] The beneficial effects of this invention are as follows: In the connection method of this invention, each input is provided with a status jointly by the train line and relay contacts. Any failure of any relay or input channel will cause the two door closing (locking) statuses received by the on-board signal system to be inconsistent, thereby judging the occurrence of the fault and making a safety response, avoiding the hazards caused by single-point failures, and has the characteristics of high heterogeneity; moreover, this invention only requires two relays and two input channels, saving half the number of relays compared to the relay interface design in the existing method, and saving half the number of input channels compared to the shielded wire interface design in the existing method, thus achieving a low-cost design. Attached Figure Description

[0021] Figure 1 This is a flowchart of a safety-critical input acquisition method for the door status of a vehicle signal system according to the present invention;

[0022] Figure 2 In this invention, each door status train line is connected to the on-board signal system via two relays.

[0023] Figure 3 This is a schematic diagram of a traditional technical solution where two train lines are used to control the door closing status via a relay interface, and the relay is used as the signal system interface.

[0024] Figure 4 This is a schematic diagram of the traditional technical solution in which each door status train line is connected to the on-board signaling system through two shielded wire interfaces. Detailed Implementation

[0025] The technical solution of the present invention will now be clearly and completely described in conjunction with the accompanying drawings. In the description of the present invention, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of the present invention. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0026] The invention will now be further described with reference to the accompanying drawings.

[0027] This invention describes the invention in detail using the example of a car door being closed.

[0028] like Figure 1 , 2 As shown, a safety-critical input acquisition method for the door status of a vehicle signaling system includes:

[0029] Step S1: For the closed door state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, which respectively represent the closed state of the left and right doors of the entire train.

[0030] Step S2: Provide a relay for closing all left doors. When all left doors of the entire train are closed, the train line is energized and the relay is energized.

[0031] Step S3: Provide a relay for closing all right doors. When all right doors of the entire train are closed, the train line is energized and the relay is energized.

[0032] Step S4: Connect one end of a normally open contact of all the left door closing relays to all the right door closing train lines, and the other end to the door closing input 1 of the signal system VOBC. That is, when all the right door closing train lines are energized and all the left door closing relays are energized, the door closing input 1 of VOBC is at a high level.

[0033] Step S5: Connect one end of a normally open contact of all the right door closing relays to all the left door closing train lines, and the other end to the door closing input 2 of the signal system VOBC. That is, when all the left door closing train lines are energized and all the right door closing relays are energized, the door closing input 2 of VOBC is at a high level.

[0034] In step S6, each of the left and right inputs is provided with status by both the train line and relay contacts, thereby realizing the acquisition of different sources of safety-critical inputs.

[0035] In this embodiment, each pair of left and right inputs is provided with a status by train lines and relay contacts. If any relay or input channel fails, the two door closing statuses received by the on-board signal system will be inconsistent, thereby determining the occurrence of the fault and taking a safety response to avoid the harm caused by a single point of failure. This system has the characteristics of high heterogeneity.

[0036] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for acquiring safety-critical inputs of vehicle door status in a vehicle-mounted signaling system, characterized in that, include: Step S1: For the closed door state, the vehicle provides a train line for all left doors closed and a train line for all right doors closed, which respectively represent the closed state of the left and right doors of the entire train; Step S2: Provide a relay for closing all left doors. When all left doors of the entire train are closed, the train line is energized and the relay is energized. Step S3: Provide a relay for closing all right doors. When all right doors of the entire train are closed, the train line is energized and the relay is energized. Step S4: Connect one end of a normally open contact of all the above left door closing relays to all right door closing train lines, and the other end to the door closing input 1 of the signal system VOBC; Step S5: Connect one end of a normally open contact of all the right door closing relays to all the left door closing train lines, and the other end to the door closing input 2 of the signal system VOBC. In step S6, each of the left and right inputs is provided with status by both the train line and relay contacts, thereby realizing the acquisition of different sources of safety-critical inputs.

2. The method for acquiring safety-critical inputs of vehicle door status in a vehicle-mounted signal system according to claim 1, characterized in that, In step S4, when all right door closing train lines are energized and all left door closing relays are energized, the door closing input 1 of VOBC is at a high level.

3. The method for acquiring safety-critical inputs of vehicle door status in a vehicle-mounted signal system according to claim 1, characterized in that, In step S5, when all left door closing train lines are energized and all right door closing relays are energized, the door closing input 2 of VOBC is at a high level.

4. The method for acquiring safety-critical inputs of vehicle door status in a vehicle-mounted signal system according to claim 1, characterized in that, In step S6, each pair of left and right inputs is provided with status by train lines and relay contacts. If any relay or input channel fails, the two door closing statuses received by the on-board signal system will be inconsistent, thus indicating that a fault has occurred.

Images