Batch safe full-automatic reverse connection device and method for new and old rail transit control systems

Abstract

The invention relates to a batch safe full-automatic reverse connection device and method for new and old rail transit control systems, the device is respectively connected with system equipment and controlled equipment, and the reverse connection device comprises a console used for operating and monitoring the whole switching process; the switching server is in interactive connection with the console and is used for processing data and control signals in the switching process; and the switching terminal is connected with the switching server in an interactive manner, is respectively connected with the new and old system equipment and the controlled equipment, and is used for receiving a switching command of the switching server, verifying the switching command, executing switching operation through a mechanical device, realizing dynamic switching between the new and old systems, monitoring a switching state and feeding back the switching state to the switching server. Compared with the prior art, the method has the advantages that the efficiency and the safety of switching between the new system and the old system are improved, and safe and high-speed switching between systems of different standards can be realized.

Description

Technical Field

[0001] The present invention relates to a rail transit signal system, and more particularly to a batch-safe full-automatic switching device and method for new and old rail transit control systems. Background Art

[0002] The rail transit control system is the core technology to ensure the safe and efficient operation of rail transit. With the rapid development of the rail transit industry, its control system is also constantly evolving. The early rail transit control systems mainly relied on manual operation and simple signal systems. With the development of automation technology, the automatic train control system (ATC) was gradually introduced, including functions such as automatic train protection (ATP), automatic train operation (ATO), and automatic train supervision (ATS). In recent years, with the further development of information technology, an intelligent full-automatic operation system (iFAO) has emerged in the rail transit control system. Based on the traditional full-automatic operation system (FAO), it has expanded the scope and depth of automatic control, and can realize functions such as online dynamic full-automatic train operation and intelligent dynamic dispatching. However, during the process of upgrading and replacing the rail transit control system, the switching problem between the new and old systems has gradually become prominent.

[0003] After retrieval, Chinese Patent Publication No. CN117104312A discloses a signal system switching method and system, which is realized based on the active following shadow mode and full-time domain quality monitoring. The method includes: S1, when the signal system starts, the working state is set to the working state of the old system and the shadow running state of the new system; S2, when the signal system is officially in operation, the old system performs normal operation control, and the new system obtains the operation data of the line and the train; S3, the data automatic collection module provides the operation data obtained by the new system to the trackside line data pool, and the line data pool provides the operation data to the central data lake; S4, the quality monitoring subsystem QMS automatically analyzes the operation quality according to the operation data in the central data lake and transmits the result to the panoramic cockpit HMS; S5, when the signal system is under commissioning, the working state is set to the working state of the new system. However, this existing patent does not involve the combination of "batch switching" and "safe switching".

[0004] Therefore, the existing switching methods mainly have the following disadvantages:

[0005] 1. Insufficient safety: During the commissioning stage of the new system, there may be potential safety hazards in the data interaction and control right switching between the new and old systems. For example, the security and real-time performance of the system communication architecture are insufficient, which may lead to data transmission errors or delays, thus affecting the operation safety of the train.

[0006] 2. Low switching efficiency: Traditional switching methods are mostly manual or semi-automatic operations, which require a large amount of manual intervention. Not only are they time-consuming and laborious, but also prone to switching failures due to human errors.

[0007] 3. Great interference to operation: During the handover process, it is often necessary to suspend the operation of some or all lines, which will cause great interference to the normal operation of rail transit and reduce the operation efficiency. Summary of the Invention

[0008] The purpose of the present invention is to overcome the defects of the above-mentioned existing technologies and provide a batch safety fully automatic switching device and method for new and old rail transit control systems, which is used to improve the efficiency and safety during the handover between new and old systems and can achieve safe and high-speed handover between different system types.

[0009] The purpose of the present invention can be achieved through the following technical solutions:

[0010] According to the first aspect of the present invention, a batch safety fully automatic switching device for new and old rail transit control systems is provided. The device is respectively connected to system equipment and controlled equipment. The switching device includes:

[0011] A console for operating and monitoring the entire handover process;

[0012] A handover server, which is interactively connected to the console and is responsible for processing data and control signals during the handover process;

[0013] A handover terminal, which is interactively connected to the handover server and is respectively connected to new and old system equipment and controlled equipment. It is used to receive the handover command from the handover server and perform verification, execute the handover operation through a mechanical device, achieve dynamic handover between new and old systems, and monitor the handover status and feedback it to the handover server.

[0014] As a preferred technical solution, there are two sets of consoles, namely a first console and a second console that independently execute the handover function.

[0015] As a preferred technical solution, there are two sets of handover servers, including a first handover server and a second handover server, which respectively receive the control instructions from the first console and the second console, generate corresponding handover commands and send them to the handover terminal through a secure communication protocol.

[0016] As a preferred technical solution, the number of handover terminals is configured according to the number of system equipment to be switched.

[0017] As a preferred technical solution, the handover terminal includes:

[0018] A sending and receiving processing module for processing the signals sent and received;

[0019] A verification output module, which is connected to the sending and receiving processing module and is used to verify the received signals;

[0020] A mechanical execution module, connected to the verification output module, for performing corresponding mechanical operations according to the received signals;

[0021] A system reverse connection module, respectively connected to the old and new system devices and the controlled device, for responsible for reversing the signals between different system devices;

[0022] A reverse connection status acquisition module, connected to the system reverse connection module, for acquiring the status information during the reverse connection process;

[0023] A status processing module, respectively connected to the reverse connection status acquisition module and the sending and receiving processing module, for processing the received reverse connection status and feeding it back to the switching server through the sending and receiving processing module.

[0024] As a preferred technical solution, the sending and receiving processing module has two paths, respectively connected to the verification output module.

[0025] As a preferred technical solution, the verification output module performs safety verification on the two received signals, and only generates a switching command to output to the mechanical actuator when the two are consistent, and generates a reverse connection failure message and feeds it back to the sending and receiving processing module when they are inconsistent.

[0026] As a preferred technical solution, the mechanical operations of the mechanical execution module do not invade the existing old system devices or new system devices.

[0027] As a preferred technical solution, the mechanical execution module adopts a non-circuit-invasive mechanical switching, realizing electrical isolation from the existing old system devices and new system devices.

[0028] As a preferred technical solution, the system reverse connection module allows the system to flexibly switch between old and new devices.

[0029] According to the second aspect of the present invention, there is provided a method for using the batch safety full-automatic reverse connection device of the old and new rail transit control systems, including the following steps:

[0030] Step S1, the console sends a switching command to the switching server;

[0031] Step S2, the switching server processes the received switching command and sends it to the network;

[0032] Step S3, the first sending and receiving processing module and the second sending and receiving processing module of the switching terminal independently receive the switching command and decode the switching command; the verification output module checks whether the switching commands received by the sending and receiving processing module are consistent. If they are consistent, execute Step S4, otherwise the verification output module generates a "reverse connection failure" status message to the status processing module;

[0033] Step S4, the verification output module sends the valid switching command to the mechanical execution module, and the mechanical execution module performs the reverse connection action;

[0034] Step S5, the system reverse connection module completes the reverse connection action of the old and new system devices;

[0035] Step S6, the reverse connection status acquisition module acquires the reverse connection status information and sends it to the status processing module. After processing the reverse connection status information, the status processing module sends it to the sending and receiving processing module;

[0036] Step S7, the sending and receiving processing module feeds back the reverse connection status to the switching server.

[0037] As a preferred technical solution, step S1 is specifically as follows:

[0038] The first operator sends a switching command through the first console, and the second operator sends a switching command through the second console. The first operator and the second operator are different operators, and the operation time is within the specified time.

[0039] As a preferred technical solution, step S2 is specifically as follows:

[0040] Step S201, the switching server checks the validity of the switching command received from the console;

[0041] Step S202, the switching server encodes the valid switching command using a security protocol;

[0042] Step S203, the switching server adds an information security protection layer to the encoded switching command and then sends it.

[0043] As a preferred technical solution, the checking process of the verification output module in step S3 includes: whether the switching command serial numbers are the same, and whether the command times of the first sending and receiving processing module and the second sending and receiving processing module are within the validity period. If both are satisfied, it is judged to be consistent.

[0044] As a preferred technical solution, the switching server verifies the switching status of the switching terminal according to the received reverse connection status information.

[0045] As a preferred technical solution, if all switching terminals feedback successful switching, the switching server sends the "switching successful" status to the console for display;

[0046] If any switching terminal feedbacks unsuccessful switching, the switching server sends the "switching unsuccessful" status to the console for display and triggers an audible and visual alarm.

[0047] Compared with the prior art, the present invention has the following advantages:

[0048] 1) High-efficiency switching technology. The present invention adopts a fully automated switching method, which can achieve fast and seamless switching between the old and new systems, greatly improving the switching efficiency. By optimizing the switching process and algorithms, manual intervention is reduced, and the risk of switching failure caused by human error is lowered.

[0049] 2) Innovation in safety mechanism. By introducing an advanced safety control mechanism, the switching device adopts a non-circuit-invasive mechanical switching method, achieving electrical isolation from both the existing old system and the new system. After switching, the mechanical device is disengaged to achieve physical isolation, greatly enhancing safety. At the same time, redundant design and fault detection technologies are adopted to be able to monitor the system status in real time and ensure safe operation during the switching process.

[0050] 3) Minimizing operational interference. The present invention can achieve batch switching between the old and new systems without affecting normal operations. Through reasonable scheduling and control strategies, it ensures that the operation of trains is not affected during the switching process, thus minimizing interference with rail transit operations to the greatest extent. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] Figure 1 It is a schematic structural diagram of the switching device according to Embodiment 1 of the present invention;

[0052] Figure 2 It is a schematic structural diagram of the switching terminal according to Embodiment 1 of the present invention;

[0053] Figure 3 It is a specific flowchart of the switching method according to Embodiment 2 of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0054] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of them. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0055] Embodiment 1

[0056] The present invention proposes a batch-safe full-automatic switching device for old and new rail transit control systems, aiming to solve the above problems existing in the prior art, which can effectively solve the problems of insufficient safety, low switching efficiency, and large interference with operations in the prior art, and provides strong support for the technological upgrading and safe operation of the rail transit industry.

[0057] As Figure 1 shown, the batch-safe full-automatic switching device for old and new rail transit control systems of the present invention includes:

[0058] Console: It includes a first console and a second console, which are used to operate and monitor the entire switching process.

[0059] Switching server: It includes a first switching server and a second switching server, which are responsible for processing data and control signals during the switching process.

[0060] Switching terminal: The number of switching terminals is configured according to the number of system devices to be switched. The switching terminal is used to connect the controlled devices and the old and new system devices, execute the switching command, and monitor the switching status.

[0061] Among them:

[0062] Interaction between the console and the switching server: The first console and the second console are two sets of workstations that independently execute the switching function. They are responsible for sending switching instructions and monitoring the switching process. The purpose of using two sets is to ensure that the safety level of the system can reach the goal of SIL2. The first switching server and the second switching server respectively receive these instructions, and are responsible for generating corresponding switching commands and sending them through a secure communication protocol. This design allows the operator to remotely control the switching process while ensuring the accuracy and reliability of the switching operation.

[0063] Connection between system devices and switching terminals: System 1 - Device 1, System 2 - Device 1, etc. represent different devices in the old and new rail transit control systems. These devices are connected to Controlled Device 1, Controlled Device 2, etc. through Switching Terminal 1 - n, Switching Terminal 2, etc. The role of the switching terminal is to receive the switching command from the switching server, perform verification, execute the switching operation through a mechanical device, realize dynamic switching between the old and new systems, transfer the control right of the controlled device, and monitor the control right switching status and feedback it to the switching server.

[0064] Control of controlled devices: Controlled Device 1, Controlled Device 2, etc. represent actual rail transit devices, such as trains, signal lights, etc. Through the switching terminal, these devices can receive control signals from different system devices, realizing fast and safe switching between the old and new systems.

[0065] As Figure 2 shown, the switching terminal of the present invention executes the switching command, realizes the switching operation between the old and new systems and monitors the switching status in real time, and mainly consists of the following modules:

[0066] First sending and receiving processing module and second sending and receiving processing module: Responsible for processing the signals sent and received to ensure the accuracy and integrity of the commands.

[0067] Verification output module: Verifies the two received signals to ensure the correctness of the signals.

[0068] Status processing module: Processes the received signal status and feeds it back to the console and the switching server.

[0069] Mechanical execution module: According to the received signal, perform corresponding mechanical operations.

[0070] System reverse connection module: Responsible for reversing the signal between different system devices.

[0071] Reverse connection status acquisition module: Acquire the status information during the reverse connection process and feedback it to the status processing module.

[0072] Among them:

[0073] Transmission and reception processing module: The first transmission and reception processing module and the second transmission and reception processing module are responsible for processing the transmitted and received signals respectively. These modules ensure the accuracy and integrity of the data, providing a basis for subsequent signal processing.

[0074] Verification output module: Perform safety verification on the two received signals. Only when the two signals are consistent, a switching command is generated and output to the subsequent actuator. When they are inconsistent, a reverse connection failure message is generated and feedback to the transmission and reception processing module. This module ensures the correctness of the signal. This step is crucial for preventing the propagation of incorrect signals and helps improve the reliability of the system.

[0075] Status processing module: The status processing module processes the received reverse connection status, performs safety encoding through the verification module, and then gives it to the transmission and reception processing module, which feeds it back to the console and the switching server. This enables the operator to monitor the switching process in real time and adjust the operation strategy in a timely manner.

[0076] Mechanical execution module: The mechanical execution module performs corresponding mechanical operations according to the received signal. This operation does not invade the existing old system or new system. It is the key to realizing physical switching, ensuring the safe and efficient execution of the switching operation. The switching device adopts a non-circuit-invasive mechanical switching, realizing electrical isolation from the existing old system and new system. After switching, the mechanical device is disconnected to achieve physical isolation, greatly improving safety.

[0077] System reverse connection module: The system reverse connection module is responsible for reversing the signal between different system devices. The design of this module allows the system to flexibly switch between old and new devices, realizing a smooth transfer of control.

[0078] Reverse connection status acquisition module: The reverse connection status acquisition module acquires the status information during the reverse connection process and feeds it back to the console and the switching server through the status processing module. This helps the operator comprehensively understand the switching process and ensures the smooth progress of the switching operation.

[0079] Embodiment 2

[0080] Such as Figure 3As shown in the figure, a batch safety full-automatic switching method for new and old rail transit control systems includes the following steps:

[0081] Step 1: Command Sending

[0082] Operator 1 sends a command of "switch from System 1 to System 2" from the first console.

[0083] Operator 2 sends the same command from the second console.

[0084] Operator 1 and Operator 2 should be authorized switching operators and cannot be the same person. The operation time must be within the specified time to ensure the authenticity and validity of the switching command.

[0085] Step 2: Command Validity Check

[0086] The first switching server checks the validity of the switching command received from the first console.

[0087] The second switching server checks the validity of the switching command received from the second console.

[0088] Step 3: Security Protocol Encoding

[0089] The first switching server encodes the command using a security protocol.

[0090] The second switching server also encodes the command using a security protocol.

[0091] Step 4: Information Security Protection

[0092] The first switching server adds an information security protection layer.

[0093] The second switching server adds an information security protection layer.

[0094] Step 5: Command Sending to Network

[0095] The first switching server sends the encoded command to the network.

[0096] The second switching server sends the encoded command to the network.

[0097] Step 6: Command Receiving and Verification

[0098] The sending / receiving processing modules 1 and 2 of the switching terminals 1-n independently receive the command and decode the command.

[0099] The verification output module of the switching terminals 1-n checks whether the commands of the sending / receiving processing modules 1 and 2 are consistent, whether the command serial numbers are the same, and whether the command times of the two modules are within the validity period to determine the validity of the command.

[0100] Step 7: Command Validity Judgment

[0101] If the command is valid, switch the mechanical execution modules of terminals 1 - n to perform the reverse connection action. The switching device uses non - circuit - invasive mechanical switching, achieving electrical isolation from both the existing old system and the new system. After switching, the mechanical device is disengaged to achieve physical isolation, greatly enhancing safety...

[0102] If the command is invalid, the verification output module of terminals 1 - n generates a "reverse connection failure" status message and sends it to the status processing module.

[0103] Step 8: Perform Reverse Connection Action

[0104] The system reverse connection module of terminals 1 - n completes the action of "reversing from System 1 to System 2".

[0105] Step 9: Reverse Connection Status Collection and Processing

[0106] The reverse connection status collection module of terminals 1 - n collects the reverse connection status.

[0107] The status processing module of terminals 1 - n processes the reverse connection status information and sends it to the sending / receiving processing module 2.

[0108] Step 10: Status Information Sending

[0109] The status sending / receiving processing module 2 of terminals 1 - n sends the reverse connection status to the second switching server.

[0110] Step 11: Switching Status Verification

[0111] The second switching server verifies the switching status of terminals 1 - n.

[0112] Step 12: Switching Result Feedback

[0113] If all switching terminals feedback successful switching, the second switching server sends a "switching successful" status to the second console for display.

[0114] If any switching terminal feedbacks unsuccessful switching, the second switching server sends a "switching unsuccessful" status to the second console for display and triggers an audible and visual alarm.

[0115] Through the above steps, the system realizes a safe and automated switch from System 1 to System 2, ensuring the stability and reliability of the rail transit control system. At the same time, through the status feedback and alarm mechanism, the system can respond in a timely manner to possible problems during the switching process, improving the safety and maintainability of the system.

[0116] Embodiment 3

[0117] The following takes the update of the CBTC (Communication-Based Train Control System) system to the TACS (Train Autonomous Operation Control System based on vehicle-to-vehicle communication) system as an example for illustration. The relevant principles and logics also apply to the switching between other old and new control systems.

[0118] Implementation Steps

[0119] 1. Preparation Stage:

[0120] Ensure that the CBTC and TACS systems at all stations are installed and operating normally.

[0121] Configure the first switching server and the second switching server to ensure that they can handle the instructions from the first console and the second console.

[0122] 2. Command Sending:

[0123] The operator sends the command "Switch from System 1 to System 2" simultaneously on the first console and the second console, and the time difference between the two command operations is not greater than 1 minute.

[0124] 3. Command Verification and Encoding:

[0125] After receiving the command, the first switching server and the second switching server conduct a validity check and encode the command using a security protocol to add an information security protection layer.

[0126] 4. Command Transmission:

[0127] The encoded command is sent to the switching terminals (Switching Terminal 1 - n) at each station through the network.

[0128] 5. Command Execution:

[0129] After receiving the command, the switching terminal verifies the validity of the command. If it is valid, it performs the switching action to switch the control right from the CBTC system to the TACS system.

[0130] 6. Status Collection and Feedback:

[0131] After the switching terminal completes the switching, it collects the switching status and sends the status information to the second switching server through the sending / receiving processing module.

[0132] The second switching server verifies the status of all switching terminals to confirm whether the switching at all stations is successful.

[0133] 7. Result Feedback:

[0134] If the switching at all stations is successful, the second switching server sends the "Switching Successful" status to the second console for display.

[0135] If the handover of any site fails, the second handover server will send the "unsuccessful handover" status to the second console for display and trigger an audible and visual alarm.

[0136] Specific data:

[0137] Handover time: The handover time for each site is controlled within 4 seconds.

[0138] Handover success rate: The target is to achieve a success rate of 99.99%.

[0139] Number of handover terminals: Each site has no less than 200 handover terminals.

[0140] Advantages:

[0141] 1. High security: Through security protocol encoding and information security protection layers, the security and integrity of data during the handover process are ensured. The handover device uses a non-circuit-invasive mechanical handover to achieve electrical isolation from both the existing old system and the new system. After the handover, the mechanical device is disengaged to achieve physical isolation, greatly enhancing security.

[0142] 2. High efficiency: The automated handover process reduces manual intervention and improves handover efficiency. The handover time for each site is controlled within 5 seconds.

[0143] 3. High reliability: Through the status acquisition and feedback mechanism, the handover process can be monitored in real time to ensure the reliability of the handover.

[0144] 4. Reduced operation interference: The fast and automated handover process reduces interference with the normal operation of rail transit.

[0145] 5. Easy to maintain: The centralized handover server and distributed handover terminal design facilitate the maintenance and upgrade of the system.

[0146] The above is only the specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present invention can easily think of various equivalent modifications or substitutions, and these modifications or substitutions should all be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A batch safe fully automatic reversal device for new and old rail transit control systems, which is connected to system equipment and controlled equipment respectively, and is characterized in that: The inverted connection device comprises: The console is used to operate and monitor the entire switching process; The switching server is interactively connected with the console and is responsible for processing data and control signals during the switching process; The switching terminal interacts with the switching server and is respectively connected to the old and new system devices and the controlled devices. It is used to receive and verify the switching command from the switching server, perform the switching operation through a mechanical device, realize dynamic switching between the new and old systems, and monitor the switching status and feed it back to the switching server.

2. According to claim 1, a batch safe fully automatic reversing device for new and old rail transit control systems is characterized in that: The console is provided with two sets, namely a first console and a second console which independently perform switching functions.

3. According to claim 2, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The switching server is provided with two sets, including a first switching server and a second switching server, which respectively receive control instructions from the first console and the second console, and generate corresponding switching commands and send them to the switching terminal through a secure communication protocol.

4. According to claim 1, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The number of the switching terminals is configured according to the number of system devices that need to be switched.

5. According to claim 1, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The switching terminal comprises: The sending and receiving processing module is responsible for processing the sending and receiving signals; A verification output module, connected to the sending and receiving processing module, is used to verify the received signal; A mechanical execution module, connected to the verification output module, for executing corresponding mechanical operations according to the received signal; The system inversion module is connected to the new and old system devices and the controlled devices respectively, and is responsible for the signal inversion between different system devices; The inversion state acquisition module is connected to the system inversion module and is used to collect state information during the inversion process; The state processing module is connected to the inverted connection state acquisition module and the sending and receiving processing module respectively, and is used to process the received inverted connection state and feed it back to the switching server through the sending and receiving processing module.

6. According to claim 5, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The sending and receiving processing module is provided with two paths, which are respectively connected with the verification output module.

7. According to claim 6, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The verification output module performs safety verification on the two received signals, and only generates a switching command to output to the mechanical actuator when the two signals are consistent. If they are inconsistent, it generates a reverse connection failure information and feeds it back to the sending and receiving processing module.

8. According to claim 5, a batch safe fully automatic reversal device for new and old rail transit control systems is characterized in that: The mechanical operation of the mechanical execution module does not invade existing old system equipment or new system equipment.

9. According to claim 5, a batch safe fully automatic reversing device for new and old rail transit control systems is characterized in that: The mechanical execution module adopts non-circuit-intrusive mechanical switching to achieve electrical isolation from existing old system equipment and new system equipment.

10. The device for batch safe and automatic reversal of old and new rail transit control systems according to claim 5 is characterized in that: The system flip module allows the system to flexibly switch between new and old equipment.

11. A method using the device for batch safe and automatic reversal of old and new rail transit control systems according to any one of claims 1 to 10, characterized in that: The following steps are involved: Step S1, the console sends a switching command to the switching server; Step S2, the switching server processes the received switching command and sends it to the network; Step S3, the first sending / receiving processing module and the second sending / receiving processing module of the switching terminal independently receive the switching command and decode the switching command; The verification output module checks whether the switching command received by the sending and receiving processing module is consistent. If it is consistent, step S4 is executed, otherwise the verification output module generates a "failed to connect" status information to the status processing module; Step S4, the verification output module sends a valid switching command to the mechanical execution module, and the mechanical execution module executes the inversion action; Step S5, the system reversal module completes the reversal of the new and old system devices; Step S6, the inverted connection state collection module collects the inverted connection state information and sends it to the state processing module, and the state processing module processes the inverted connection state information and then sends it to the sending and receiving processing module; Step S7: the sending and receiving processing module feeds back the switching status to the switching server.

12. The method according to claim 11, characterized in that: The step S1 is specifically as follows: The first operator sends a switching command through the first console, and the second operator sends a switching command through the second console. The first operator and the second operator are different operators, and the operation time is within a specified time.

13. The method according to claim 11, characterized in that: The step S2 is specifically as follows: Step S201, the switching server checks the validity of the switching command received from the console; Step S202, the switching server encodes the valid switching command using a security protocol; Step S203: The switching server adds an information security protection layer to the encoded switching command and then sends it.

14. The method according to claim 11, characterized in that: The verification output module checking process in step S3 includes: whether the switching command sequence numbers are the same, whether the command times of the first sending and receiving processing module and the second sending and receiving processing module are within the validity period, and if both are met, they are judged to be consistent.

15. The method according to claim 11, characterized in that: The switching server verifies the switching state of the switching terminal according to the received inversion state information.

16. The method according to claim 11, characterized in that: If all switching terminals report that the switching is successful, the switching server sends the "switching successful" status to the console for display; If any switching terminal reports that the switching is unsuccessful, the switching server sends the "switching unsuccessful" status to the console for display and triggers an audible and visual alarm.

Images