A platform door control system

Abstract

The application provides a platform door control system, and relates to the technical field of rail transit.The system comprises two execution hosts and a plurality of platform door controllers;each execution host adopts a two-by-two voting architecture, and each platform door controller adopts a two-out-of-two architecture;the execution host is configured to, in the case of receiving target data for a target platform door controller, send the target data to the target platform door controller through a CANFD bus between the execution host and the target platform door controller, and the target platform door controller is included in the platform door controllers;and the platform door controller is configured to, in the case of receiving the target data sent by the execution host, respond to the target data.The platform door control system provided by the application can realize massive data transmission between different electronic devices and platform door controllers in a rail transit system, can significantly improve the data transmission efficiency between the platform door controllers, and improves the flexibility and versatility of platform door control.

Description

Technical Field

[0001] This invention relates to the field of rail transit technology, and in particular to a platform screen door control system. Background Technology

[0002] In rail transit systems, platform screen doors are key equipment for ensuring passenger safety and improving operational efficiency, and the way they transmit opening and closing commands and safety-related information is of paramount importance.

[0003] Hard-wire communication refers to the direct transmission of electrical signals through physical lines (such as cables). In related technologies, control signals such as door opening and closing commands, obstacle detection signals, and safety interlock information are typically sent to the platform screen door controller via hard-wire communication, so that the platform screen door controller can respond to the above control signals to control the opening and closing of the platform screen doors.

[0004] However, with the rapid development of rail transit technology, especially the widespread application of driverless technology, the amount of data that needs to be transmitted between platform screen door controllers and other equipment has increased dramatically. This includes not only basic door opening and closing commands, but also diverse and high-frequency data and signals such as precise train location information, speed information, obstacle detection status information, and emergency braking signals. Due to the inherent limitations of its physical connections, hardwired communication is difficult to efficiently carry such a large amount of data.

[0005] Furthermore, with the diversification of train formations, the fixed nature of hardline layout means that when train formations change, customized installation is required to achieve flexible control of the platform doors corresponding to the train formations. This not only increases construction and maintenance costs but also limits the flexibility and versatility of platform door control, making it difficult to meet the needs of flexible adjustment of train formations. Summary of the Invention

[0006] The present invention provides a platform screen door control system to solve the defects of limited data transmission between other electronic devices in rail transit systems and platform screen door controllers, as well as the low flexibility and versatility of platform screen door control in the prior art, thereby improving the data transmission efficiency between the platform screen door controller and the flexibility and versatility of platform screen door control.

[0007] This invention provides a platform screen door control system, comprising: two execution hosts and multiple platform screen door controllers; each execution host adopts a 2x2-out-of-2 architecture, and each platform screen door controller adopts a 2x2-out-of-2 architecture; each platform screen door controller is connected to each execution host via a CANFD bus; each execution host, upon receiving target data for a target platform screen door controller, sends the target data to the target platform screen door controller via the CANFD bus, wherein each platform screen door controller includes the target platform screen door controller; each platform screen door controller, upon receiving the target data sent by the execution host, responds to the target data and returns response data including the response result to the target data to the execution host via the CANFD bus.

[0008] According to a platform screen door control system provided by the present invention, the execution host is used to periodically send broadcast data carrying a host communication cycle number to each platform screen door controller after power-on. The execution host is also used to, upon receiving initial response data carrying initial state information of the target platform screen door controller returned by the target platform screen door controller, add the target data to the next broadcast data sent to the target platform screen door controller if the target data is received. The initial value of the host communication cycle number is 1. If the host communication cycle number carried in the broadcast data sent by the execution host in the previous cycle is not greater than a preset value, the host communication cycle number carried in the broadcast data sent by the execution host in the current cycle is 1 greater than the host communication cycle number carried in the broadcast data sent in the previous cycle. If the host communication cycle number carried in the broadcast data sent by the execution host in the previous cycle is a preset value, the host communication cycle number carried in the broadcast data sent by the execution host in the current cycle is 1. Specifically, the platform screen door controller is used to, upon receiving a first number of consecutive broadcast data carrying the host communication cycle number after power-on, return an initial response data carrying the initial state information of the platform screen door controller to the execution host. The platform door controller initiates a response to the execution host and determines that a secure communication link has been established. If, upon determining that the received broadcast data is acceptable, the controller responds to the received broadcast data and returns response data including the response result to the execution host. The response data also carries the slave communication cycle number and the host communication cycle number carried in the received broadcast data. The response data returned by the platform door controller to the execution host for the first time after determining that a secure communication link has been established carries the slave communication cycle number. If the communication cycle number is 1, and the slave communication cycle number carried in the response data returned by the platform door controller to the execution host in the previous instance is not greater than the preset value, then the slave communication cycle number carried in the response data returned by the platform door controller to the execution host in the current instance is 1 greater than the slave communication cycle number carried in the response data returned by the platform door controller to the execution host in the previous instance is greater than the preset value, then the slave communication cycle number carried in the response data returned by the platform door controller to the execution host in the current instance is 1.

[0009] According to a platform screen door control system provided by the present invention, the platform screen door controller is configured to, when determining that a secure communication link has been established with the execution host, determine whether the host communication cycle number carried by the broadcast data received this time is continuous with the host communication cycle number carried by the second most recently received broadcast data before the broadcast data received this time. If it is determined that the host communication cycle number carried by the broadcast data received this time is continuous with the host communication cycle number carried by the second most recently received broadcast data before the broadcast data received this time and the broadcast data received this time has passed the verification of the two-by-two architecture, then the broadcast data received this time is accepted.

[0010] According to a platform screen door control system provided by the present invention, the execution host is used to determine whether to accept the response data returned by any platform screen door controller when receiving response data returned by any platform screen door controller, based on the order of the slave communication cycle number and the host communication cycle number carried in the response data returned by any platform screen door controller and the two-out-of-two architecture.

[0011] According to a platform screen door control system provided by the present invention, when the execution host is the data sender, the platform screen door controller is the data receiver, the data received by the data receiver is the broadcast data, and the communication sequence number carried by the data received by the data receiver is the host communication cycle number carried by the broadcast data; When the platform gate controller is the data sender, the execution host is the data receiver, the data received by the data receiver is the response data, and the communication sequence number carried by the data received by the data receiver is the slave communication cycle number carried by the response data; the data receiver is used to determine that the data received this time is the same as the data received last time when it is determined that the communication sequence number carried by the data received this time is the same as the communication sequence number carried by the data received last time, and to perform tolerance processing on the data received this time.

[0012] According to a platform screen door control system provided by the present invention, the data receiver is configured to report a first abnormality indicating data loss when it determines that the communication sequence number carried by the currently received data is not continuous with the communication sequence number carried by the previously received data, and the difference between the communication sequence number carried by the currently received data and the communication sequence number carried by the previously received data is greater than a numerical threshold, or the difference between the sum of the communication sequence number carried by the currently received data and the preset value and the communication sequence number carried by the previously received data is greater than the numerical threshold.

[0013] According to a platform screen door control system provided by the present invention, the data receiver is configured to, when determining that the communication sequence number carried by the data received this time is reversed or not increasing according to the rules of the communication sequence number carried by the third most recently received data before the data received this time, reorder the data received this time and the third most recently received data before the data received this time according to the order of the communication sequence number; if the communication sequence number carried by the reordered data is continuous, the reordered data is accepted; if the communication sequence number carried by the reordered data is not continuous, the reordered data is discarded.

[0014] According to a platform screen door control system provided by the present invention, the data sender is further configured to add a source identifier for identifying the identity of the data sender to the data sent to the data receiver; the data receiver is configured to report a second abnormality information indicating that the data has been received if it is determined that the data received is inserted data based on the source identifier carried in the data received this time.

[0015] According to a platform screen door control system provided by the present invention, the data receiver is used to determine that the data received this time is delayed data when the time of receiving the data this time exceeds the time of receiving the data last time by a preset time.

[0016] According to a platform screen door control system provided by the present invention, the execution host is configured to, upon receiving an upgrade firmware package for a platform screen door controller to be upgraded, send a software upgrade command and the upgrade firmware package to the platform screen door controller to be upgraded via a CANFD bus, wherein each platform screen door controller includes the platform screen door controller to be upgraded; the platform screen door controller is configured to, upon receiving the software upgrade command, switch to Bootloader mode; and, upon receiving the upgrade firmware package within a preset time after receiving the software upgrade command, verify the upgrade firmware package based on a 2x2 architecture; and, if the upgrade firmware package passes verification, perform a software upgrade based on the upgrade firmware package in Bootloader mode.

[0017] This invention provides a platform screen door control system that utilizes the CANFD bus connection between the execution host and the platform screen door controller to achieve massive data transmission between different electronic devices in the rail transit system and the platform screen door controller. This significantly improves data transmission efficiency. Through the CANFD bus network connection, flexible control of the platform screen door controller can be achieved without rewiring when train formation changes, enhancing the flexibility and versatility of platform screen door control. It supports dynamic expansion of the number of platform screen door controllers, better adapts to dynamic changes in train formation, and significantly reduces construction and maintenance costs. The execution host and platform screen door controller in this system, based on a 2x2 architecture, address the single-point failure risk in hard-wired communication, improving the security of platform screen door control. Data transmission security is high, and remote diagnostics and firmware upgrades are supported. Rapid diagnosis and replacement of faulty components are possible, providing core infrastructure support for the development of intelligent rail transit. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0019] Figure 1 This is a schematic diagram of the structure of a platform door control system provided by the present invention. Detailed Implementation

[0020] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0021] In the description of the invention, it should be noted that, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0022] In the description of this application, the terms "first," "second," etc., are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class, without limiting the number of objects; for example, a first object can be one or more. Furthermore, in the description of this application, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects have an "or" relationship.

[0023] It should be noted that in rail transit systems, control signals such as door opening and closing commands, obstacle detection signals, and safety interlock information are usually sent to the platform door controller via hard-wired communication, so that the platform door controller can respond to the above control signals to control the opening and closing of the platform doors.

[0024] Communicating with platform door controllers via hard-wired transmission offers advantages such as simple structure, strong anti-interference capability, and high real-time performance, meeting the basic safety control requirements of early rail transit systems. However, with the rapid development of rail transit technology, especially the widespread application of driverless technology, rail transit systems have placed higher demands on the bandwidth, flexibility, and compatibility of data transmission.

[0025] Hard-wire communication can only transmit single command signals and cannot support the high bandwidth requirements of real-time status monitoring, fault diagnosis, and multi-sensor data interaction needed for autonomous driving. Different train formations (such as 6-car and 8-car formations) require customized hard-wire interfaces, leading to increased complexity and upgrade costs for the rail transit system. The fixed layout of hard-wire lines makes it difficult to adapt to the platform door control requirements of dynamically adjusted operational scenarios (such as temporary train formation additions or line modifications). Hard-wire lines are susceptible to environmental factors such as vibration and corrosion, and fault diagnosis and replacement require operational interruptions, affecting system reliability and availability.

[0026] Furthermore, regarding software upgrades for platform screen door controllers, current technologies typically employ a method of upgrading each controller individually. However, each station usually has dozens of platform screen door controllers, and upgrading each controller individually would take several hours to complete the upgrade for all controllers at a single station. During rail transit operation, only a few hours at night are usually available for equipment debugging and maintenance. Therefore, the current method of upgrading platform screen door controller software is ill-suited to the actual operational needs of rail transit.

[0027] CAN FD (Controller Area Network with Flexible Data-Rate) is an upgraded version of the traditional CAN protocol, designed to address the limitations of the traditional CAN bus in terms of data transmission rate and bandwidth. While retaining the high reliability of the CAN protocol, CAN FD significantly improves data transmission efficiency and flexibility, and is widely used in automotive, industrial control, and rail transportation industries.

[0028] To address the limitations of data transmission between platform screen door controllers and related technologies, as well as the low flexibility and versatility of platform screen door control, this application presents a highly secure networked platform screen door control system based on CANFD. The platform screen door control system provided by this invention achieves highly reliable information transmission with the platform screen door controller through communication link redundancy and secure communication protocol design, thereby eliminating reliance on hardwired connections. This enables the transmission of larger data volumes with the platform screen door controller, resulting in higher data transmission efficiency and improved flexibility and versatility of platform screen door control. It also allows for more efficient and flexible transmission of parameter settings, software upgrades, status feedback, and log recording data for all platform screen door controllers throughout the station.

[0029] The following is combined Figure 1 This invention describes a platform door control system.

[0030] Figure 1 This is a structural schematic diagram of a platform door control system provided by the present invention. The following is in conjunction with… Figure 1 The present invention provides a platform door control system. For example... Figure 1 As shown, a platform screen door control system 101 includes: two main actuators 102 and multiple platform screen door controllers 103; each main actuator 102 adopts a two-out-of-two architecture, and each platform screen door controller 103 adopts a two-out-of-two architecture.

[0031] Each station door controller 103 is connected to each execution host 102 via a CANFD bus.

[0032] The execution host 102 is used to send target data to the target platform door controller via the CANFD bus when it receives target data for the target platform door controller. The platform door controller 103 includes the target platform door controller.

[0033] The platform door controller 103 is used to respond to the target data sent by the execution host 102 upon receiving the target data, and to return response data including the response result to the target data to the execution host 102 via the CANFD bus between the two hosts.

[0034] It should be noted that the two execution hosts 102 in this embodiment of the invention include a first execution host and a second execution host.

[0035] Figure 1 In this context, PEDCA represents the first execution host, PEDCB represents the second execution host, DCU represents the platform door controller 103, and the number after DCU represents the identification information of the platform door controller 103.

[0036] It should be noted that, Figure 1 The CANFD bus used to connect the platform gate controller 103 and the execution host 102 consists of two traces: CAN_H (CAN High) and CAN_L (CAN Low). Differential signal transmission can be achieved using the CAN_H and CAN_L traces on the CANFD bus, thereby effectively improving the anti-interference capability and communication reliability of data transmission.

[0037] In this embodiment of the invention, the first and second execution hosts adopt a 2x2 architecture, and each station door controller 103 adopts a 2x2 architecture, employing secure computer platform technology. Because the logic execution of the secure computer platform is strongly time-dependent, it possesses functions such as intra-system time synchronization, micro-period time slice division, and micro-period time monitoring, providing strict periodic control for secure communication protocols.

[0038] In this embodiment of the invention, the execution host 102 includes two independent operating units (such as CPU A and CPU B). These two independent operating units must simultaneously calculate and compare the results, and only output a valid instruction when the results match. Relying on a secure computer platform, the dual-redundant execution host 102 enables rapid data exchange between its two operating units, achieving functions such as different polynomial CRC checks and binary output voting. Outputting a valid instruction only when the dual operating units' checks and results match improves the security of data transmission.

[0039] The first execution host and the second execution host are designed to be completely redundant, operate simultaneously and cross-check each other. If either the first execution host or the second execution host 102 fails, the other execution host 102 will take over control.

[0040] The platform door controller 103 contains two independent control modules (such as control module 1 and control module 2), which need to receive and verify control commands simultaneously. Only when both are confirmed to be valid will the corresponding platform door be controlled to perform the action corresponding to the above control command (such as opening and closing the door).

[0041] It should be noted that, in the embodiments of the present invention, the platform door controller 103 that needs to be controlled or the platform door controller 103 that needs to transmit data can be identified as the target platform door controller.

[0042] It is understood that the target platform door controller can be determined based on actual needs, and no specific limitation is made to the target platform door controller in this embodiment of the invention.

[0043] It should be noted that the platform screen door controller 103 in this embodiment of the invention can control one or more platform screen doors, and the number of target platform screen door controllers can be one or more. Each platform screen door controller 103 includes a target platform screen door controller.

[0044] It is understood that the target data in the embodiments of the present invention may include control instructions for controlling the target platform gate controller, and / or information that needs to be sent to the target platform gate controller.

[0045] It should be noted that, in the embodiments of the present invention, the target data may be input by the user, or it may be sent by other electronic devices in the rail transit system. For example, the target data may be sent by the on-board controller of the train, or it may be sent by the monitoring host of the monitoring center.

[0046] When the host 102 receives a target control command for the target platform door, it can send the target data to the target platform door controller via the CANFD bus used to control the target platform door, based on a two-out-of-two architecture.

[0047] For any platform door controller 103, if the platform door controller 103 receives the target data sent by the execution host, it can be said that the platform door controller 103 is the target platform door controller, and can then respond to the target data based on a two-by-two architecture.

[0048] It should be noted that the response of the target platform gate controller to the above target data may include, but is not limited to, status information response, control command response, fault signal response, safety circuit signal response, and gap depth measurement response.

[0049] The status information response may include, but is not limited to, returning the current status signal to the execution host 102. The control command response may include controlling the opening, closing, and isolation of the platform door, as well as executing or disengaging interlocks. The fault information response may include, but is not limited to, returning detected fault information to the execution host 102. The safety loop signal response may include, but is limited to, feeding back the safety loop status information to the execution host 102. The gap depth measurement response may include, but is not limited to, returning obstacle detection information to the execution host 102.

[0050] It should be noted that a shielded twisted-pair cable is installed on the CANFD bus between the platform door controller 103 and the first actuator host, and a shielded twisted-pair cable is also installed on the CANFD bus between the platform door controller 103 and the second actuator host 102. The specifications of the shielded twisted-pair cable can be 4*0.5mm. 2 +0.5mm 2 .

[0051] This invention discloses a platform screen door control system that utilizes a CANFD bus connection between the execution host and the platform screen door controller to achieve massive data transmission between different electronic devices in the rail transit system and the platform screen door controller. This significantly improves data transmission efficiency. Through the CANFD bus network connection, flexible control of the platform screen door controller can be achieved without rewiring when train formation changes, enhancing the flexibility and versatility of platform screen door control. It supports dynamic expansion of the number of platform screen door controllers, better adapts to dynamic changes in train formation, and significantly reduces the construction and maintenance costs of the platform screen door control system. The execution host and platform screen door controller, based on a 2x2 architecture, address the single-point failure risk in hard-wired communication, improving the security of platform screen door control. Data transmission security is high, supporting remote diagnostics and firmware upgrades, enabling rapid diagnosis and replacement of faulty components, and providing core infrastructure support for the development of intelligent rail transit.

[0052] As an optional embodiment, the execution host 102 is used to periodically send broadcast data carrying a host communication cycle number to each platform gate controller 103 after power-on. The execution host 102 is also used to add target data to the broadcast data sent to the target platform gate controller in the next broadcast if target data is received, in the case of receiving initial response data carrying initial status information of the target platform gate controller. The initial value of the host communication cycle number is 1. If the host communication cycle number carried in the broadcast data sent by the execution host in the previous cycle is not greater than a preset value, the host communication cycle number carried in the broadcast data sent by the execution host in the current cycle is 1 greater than the host communication cycle number carried in the broadcast data sent by the execution host in the previous cycle. If the host communication cycle number carried in the broadcast data sent by the execution host in the previous cycle is a preset value, the host communication cycle number carried in the broadcast data sent by the execution host in the current cycle is 1.

[0053] The platform door controller 103 is specifically used to, upon receiving a first number of consecutive broadcast data with master communication cycle numbers after power-on, return initial response data carrying initial status information of the platform door controller 103 to the execution master 102, and determine the establishment of a secure communication link with the execution master 102. The platform door controller 103 is also used to, upon determining the establishment of a secure communication link with the execution master 102, if it determines that the received broadcast data is acceptable, respond to the received broadcast data and return response data including the response result to the execution master 102. The response data also carries the slave communication cycle number and the master communication cycle number carried in the received broadcast data. 3. After establishing a secure communication link with the execution host 102, the slave communication cycle number carried in the first response data returned to the execution host 102 is 1. If the slave communication cycle number carried in the response data returned by the platform door controller 103 to the execution host in the previous instance is not greater than the preset value, the slave communication cycle number carried in the response data returned by the platform door controller 103 to the execution host in this instance is 1 greater than the slave communication cycle number carried in the previous response data returned to the execution host. If the slave communication cycle number carried in the response data returned by the platform door controller 103 to the execution host in the previous instance is greater than the preset value, the slave communication cycle number carried in the response data returned by the platform door controller 103 to the execution host in this instance is 1.

[0054] Specifically, after the host 102 is powered on, it actively sends communication to each platform door controller 103, and sends broadcast data carrying the host communication cycle number to each platform door controller 103 at preset intervals.

[0055] It should be noted that the host communication cycle number carried in the broadcast data sent by the execution host 102 to each station door controller 103 in this embodiment of the invention can be used to identify the sending order of the broadcast data sent by the execution host 102.

[0056] If any of the platform door controllers 103 is not powered on, it will not respond to the broadcast data sent by the host 102.

[0057] It should be noted that after the platform screen door controller 103 is powered on, the broadcast data sent by the host 102 is received by the platform screen door controller 103. However, since the validity of the first few broadcast data received by the platform screen door controller 103 cannot be determined, that is, the first few broadcast data received by the platform screen door controller 103 are not reliable to the platform screen door controller 103, the platform screen door controller 103 does not execute the first number of broadcast data received after power-on.

[0058] After the platform door controller 103 is powered on, it can determine whether the host communication cycle number carried in the broadcast data sent by the execution host 102 received this time is continuous with the host communication cycle number carried in the broadcast data sent by the execution host 102 previously received by the platform door controller 103.

[0059] It should be noted that, in this embodiment of the invention, the host communication cycle number carried in the broadcast data sent by the execution host 102 that the platform door controller 103 receives this time is continuous with the host communication cycle number carried in the broadcast data sent by the execution host 102 that the platform door controller 103 previously received. This means that the host communication cycle number carried in the broadcast data sent by the execution host 102 that the platform door controller 103 receives this time is 1 greater than the host communication cycle number carried in the broadcast data sent by the execution host 102 that the platform door controller 103 previously received is a preset value, and the host communication cycle number carried in the broadcast data sent by the execution host 102 that the platform door controller 103 receives this time is 1.

[0060] It should be noted that the preset values ​​in the embodiments of the present invention can be determined based on prior knowledge and / or actual conditions. For example, the range of the preset values ​​can be 30 to 50. The specific values ​​of the preset values ​​are not limited in the embodiments of the present invention.

[0061] If the platform door controller 103 receives a first number of consecutive broadcast data of host communication cycle numbers after power-on, it returns initial response data carrying the initial status information of the platform door controller 103 to the execution host 102, and determines to establish a secure communication link with the execution host 102.

[0062] Upon receiving response data from the platform door controller 103 carrying initial status information of the platform door controller 103, the execution host 102 determines that the platform door controller 103 is online.

[0063] It should be noted that the first quantity in the embodiments of the present invention can be determined based on prior knowledge and / or actual conditions. For example, the value range of the first quantity in the embodiments of the present invention can be 2 to 4. The specific value of the first quantity is not limited in the embodiments of the present invention.

[0064] Optionally, in this embodiment of the invention, the first quantity can be 3.

[0065] It should be noted that the initial status information of the platform door controller 103 in this embodiment of the invention may include, but is not limited to, the synchronization status code and online device identifier of the platform door controller 103.

[0066] It should be noted that if the host communication cycle number carried in the broadcast data sent by the execution host 102 received by the platform door controller 103 after power-on is not consecutive with the host communication cycle number carried in the broadcast data sent by the execution host 102 previously received by the platform door controller 103, then the number of invalid data receptions recorded by the platform door controller 103 is incremented by 1. If the number of invalid data receptions recorded by the platform door controller 103 exceeds the threshold, the platform door controller 103 determines that the establishment of a secure communication link with the execution host has failed.

[0067] It should be noted that the initial value for the number of invalid data receptions recorded by the platform gate controller 103 is 0. The aforementioned threshold number can be determined based on prior knowledge and / or actual circumstances; for example, the threshold number can range from 2 to 5 times. In this embodiment of the invention, the specific value of the threshold number is not limited.

[0068] If the platform door controller 103 determines that it has failed to establish a secure communication link with the execution host, it can clear the recorded number of invalid data receptions to zero and return to the step of judging whether the host communication cycle number carried by the broadcast data sent by the execution host 102 received this time is consecutive with the host communication cycle number carried by the broadcast data sent by the execution host 102 previously received by the platform door controller 103, until the platform door controller 103 determines that it has established a secure communication link with the execution host 102.

[0069] As an optional embodiment, the platform door controller 103, upon determining that a secure communication link has been established with the execution host 102, determines whether the host communication cycle number carried in the currently received broadcast data is consecutive to the host communication cycle number carried in the second most recently received broadcast data. If it is determined that the host communication cycle number carried in the currently received broadcast data is consecutive to the host communication cycle number carried in the second most recently received broadcast data and the currently received broadcast data has passed the verification of the two-by-two architecture, then it determines to accept the currently received broadcast data.

[0070] It should be noted that the second quantity in the embodiments of the present invention can be determined based on prior knowledge and / or actual circumstances. For example, the value range of the second quantity in the embodiments of the present invention can be 2 to 4. The specific value of the second quantity is not limited in the embodiments of the present invention.

[0071] As an optional embodiment, the execution host 102 is used to determine whether to accept the response data returned by any platform gate controller 103 when it receives response data returned by any platform gate controller 103, based on the order of the slave communication cycle number and the host communication cycle number carried in the response data returned by any platform gate controller 103 and the two-out-of-two architecture.

[0072] Specifically, when the execution host 102 receives response data returned by any platform screen door controller 103, if the slave communication cycle number carried in the response data returned by the platform screen door controller 103 received this time is consecutive to the slave communication cycle number carried in the second number of response data returned by the platform screen door controller 103 most recently received before the response data returned by the platform screen door controller 103 received this time, and if the host communication cycle number carried in the response data returned by the platform screen door controller 103 received this time is consecutive to the host communication cycle number carried in the second number of response data returned by the platform screen door controller 103 most recently received before the response data returned by the platform screen door controller 103 received this time, then the execution host 102 can determine to accept the response data returned by the platform screen door controller 103 received this time.

[0073] As an optional embodiment, when the execution host is the data sender, the platform door controller 103 is the data receiver. The data received by the data receiver is broadcast data, and the communication sequence number carried by the data received by the data receiver is the host communication cycle number carried by the broadcast data.

[0074] When the platform gate controller 103 is the data sender, the execution host is the data receiver. The data received by the data receiver is the response data, and the communication sequence number carried in the data received by the data receiver is the slave communication cycle number carried in the response data.

[0075] The data receiver is used to determine that the data received this time is the same as the data received last time if the communication sequence number carried by the data is the same as the communication sequence number carried by the data received last time, and to tolerate the data received this time.

[0076] It should be noted that if the platform door controller 103 determines that the broadcast data received this time is the same as the broadcast data received last time, it will not accept the broadcast data received this time. When the platform door controller 103 tolerates the broadcast data received this time, it will not respond to the broadcast data received this time.

[0077] As an optional embodiment, the data receiver is configured to report a first abnormality indicating data loss if it determines that the communication sequence number carried by the data received this time is not continuous with the communication sequence number carried by the data received last time, and the difference between the communication sequence number carried by the data received this time and the communication sequence number carried by the data received last time is greater than a numerical threshold, or the difference between the sum of the communication sequence number carried by the data received this time and a preset value and the communication sequence number carried by the data received last time is greater than a numerical threshold.

[0078] It should be noted that if the data receiver determines that the communication sequence number carried by the data received this time is not continuous with the communication sequence number carried by the data received last time, and the difference between the communication sequence number carried by the data received this time and the communication sequence number carried by the data received last time is greater than a numerical threshold, or the difference between the sum of the communication sequence number carried by the data received this time and a preset value and the communication sequence number carried by the data received last time is greater than a numerical threshold, it can determine that data loss occurred before the data was received this time, and can report the first abnormal information indicating that data loss occurred before the data was received this time to the monitoring host and other electronic devices.

[0079] It should be noted that the monitoring host and the execution host 102 in this embodiment of the invention can be connected via an RS48S bus, and the monitoring host and the execution host 102 can be installed together in the PSC cabinet.

[0080] It should be noted that the numerical thresholds in the embodiments of the present invention can be determined based on prior knowledge and / or actual circumstances. For example, the range of the above-mentioned numerical thresholds may include 2 to 4. The embodiments of the present invention do not specifically limit the range of the above-mentioned numerical thresholds.

[0081] Optionally, in this embodiment of the invention, the value of the above-mentioned numerical threshold is 3.

[0082] As an optional embodiment, the data receiver is configured to, if it is determined that the communication sequence number carried by the data received this time is reversed or does not increase according to the rules of the communication sequence number carried by the third most recently received data before the data received this time, reorder the data received this time and the third most recently received data before the data received this time according to the order of the communication sequence number; if the communication sequence number carried by the reordered data is consecutive, the reordered data is accepted; if the communication sequence number carried by the reordered data is not consecutive, the reordered data is discarded.

[0083] It should be noted that the third quantity in the embodiments of the present invention can be determined based on prior knowledge and / or actual circumstances. For example, the value range of the third quantity mentioned above can include 2 to 4. The embodiments of the present invention do not specifically limit the value range of the third quantity mentioned above.

[0084] Optionally, in this embodiment of the invention, the third quantity is 3.

[0085] As an optional embodiment, the data sender is also used to add a source identifier to the data sent to the data receiver to identify the identity of the data sender.

[0086] The data receiver is used to report a second abnormality message indicating that it has received inserted data if it determines that the received data is inserted data based on the source identifier carried in the received data.

[0087] Specifically, if the data receiver determines that the data sender is not a device in the platform gate control system 101 based on the source identifier carried in the received data, the data receiver can determine that the received data is inserted data and can report a second abnormality information indicating that the inserted data has been received to the monitoring host or other electronic devices.

[0088] The format of the broadcast data sent by the host 102 to the platform door controller 103 is shown in Table 1.

[0089] Table 1. Format of broadcast data sent from host 102 to platform door controller 103

[0090] The format of the response data sent by the platform door controller 103 to the execution host 102 is shown in Table 2.

[0091] Table 2. Format of broadcast data sent from platform door controller 103 to execution host 102

[0092] As an optional embodiment, the data receiver is configured to determine that the data received this time is delayed data if the time when the data is received this time exceeds a preset time.

[0093] It should be noted that the preset duration in this embodiment of the invention can be determined based on the period of broadcast data sent from the execution host 102 to the platform door controller 103. For example, the preset duration can be three times the aforementioned period. The specific value of the preset duration is not limited in this embodiment of the invention.

[0094] It should be noted that the execution host in this embodiment of the invention adopts a 2x2 architecture, and the platform door controller 103 adopts a 2x2 architecture. During the data transmission between the execution host and the platform door controller 103, different polynomial CRC checks are used between the two CPUs: CPU0 uses a 32-bit CRC check, and CPU1 uses a 16-bit CRC check. The two CPUs perform CRC checks after exchanging CRC values. If the CRC check result fails, the data is judged to be corrupted.

[0095] In this embodiment of the invention, the communication network consisting of the host 102 and the platform door controller 103 is a closed transmission system, which can protect against abnormal situations such as duplicate data, data loss, inserted data, out-of-order data, damaged data, and delayed data, thereby improving the data transmission security of a platform door control system 101.

[0096] As an optional embodiment, the execution host 102 is used to send software upgrade instructions and upgrade firmware packages to the platform door controller 103 to be upgraded via the CANFD bus when it receives an upgrade firmware package for the platform door controller 103 to be upgraded. Each platform door controller 103 includes the platform door controller 103 to be upgraded.

[0097] The platform door controller 103 is used to switch to Bootloader mode when it receives a software upgrade instruction. If it receives an upgrade firmware package within a preset time after receiving the software upgrade instruction, it verifies the upgrade firmware package based on a two-by-two architecture. If it is determined that the upgrade firmware package has passed the verification, it performs a software upgrade based on the upgrade firmware package in Bootloader mode.

[0098] It should be noted that the number of platform gate controllers 103 to be upgraded in the embodiments of the present invention can be one or more.

[0099] If any platform door controller 103 receives a software upgrade instruction sent by the execution host 102, it can be said that the aforementioned platform door controller 103 is the platform door controller 103 to be upgraded.

[0100] Upon receiving a software upgrade command from the execution host 102, the platform door controller 103 to be upgraded switches from application mode to bootloader mode. Bootloader mode refers to a special operating state that the bootloader enters upon power-on or under specific conditions, primarily used for booting and loading operating systems or applications, and for performing software updates.

[0101] If the platform door controller 103 to be upgraded receives the upgrade firmware package within a preset time after receiving the software upgrade instruction sent by the execution host 102, it can verify the upgrade firmware package based on the two-by-two architecture.

[0102] If the platform gate controller 103 to be upgraded does not receive the upgrade firmware package within a preset time after receiving the software upgrade instruction sent by the execution host 102, it will jump back to the application mode.

[0103] It should be noted that the preset duration in the embodiments of the present invention can be determined based on prior knowledge and / or actual conditions. For example, the value range of the preset duration can be 15 to 30 seconds. The specific value of the preset duration is not limited in the embodiments of the present invention.

[0104] Optionally, in this embodiment of the invention, the preset duration can be 20 seconds.

[0105] It should be noted that if an unexpected event occurs during the process of receiving the upgrade firmware package, causing communication interruption or single packet CRC verification failure, the upgrade firmware package can be automatically obtained from another redundant link. If both communication links fail, it will automatically jump back to the original application mode.

[0106] If the upgrade firmware package is verified, the platform door controller 103 can perform a software upgrade based on the upgrade firmware package. If the upgrade firmware package is not verified, the platform door controller 103 can switch back to the application mode.

[0107] This invention enables parallel upgrades by having the host 102 simultaneously send software upgrade commands and firmware packages to multiple platform screen door controllers 103. This significantly shortens the software upgrade time for multiple platform screen door controllers 103, greatly improving the efficiency of software upgrades and allowing more platform screen door controllers 103 to be upgraded within a limited time. The significantly reduced upgrade time also minimizes disruption to normal rail transit operations. A two-by-two verification mechanism is introduced during the software upgrade process to ensure the integrity and correctness of the firmware package, improving the reliability of the software upgrade and reducing the risk of equipment failure due to upgrade failure or firmware package corruption. Centralized management and distribution of the firmware package by the host 102 simplifies the upgrade process for the platform screen door controllers 103. Maintenance personnel no longer need to operate each controller individually, reducing the complexity and error probability of manual operations and improving the convenience and efficiency of maintenance work.

[0108] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A platform screen door control system, characterized in that, include: Two execution hosts and multiple platform door controllers; each execution host adopts a two-out-of-two architecture, and each platform door controller adopts a two-out-of-two architecture. Each of the platform door controllers is connected to each of the execution hosts via a CANFD bus; The execution host is used to send the target data to the target platform door controller via the CANFD bus when it receives target data for the target platform door controller. Each platform door controller includes the target platform door controller. The platform screen door controller is used to respond to the target data sent by the execution host upon receiving the target data, and to return response data including the response result to the target data to the execution host via the CANFD bus between the execution host and the execution host. The execution host is used to periodically send broadcast data carrying a host communication cycle number to each platform screen door controller after power-on. The execution host is also used to add the target data to the next broadcast data sent to the target platform screen door controller if it receives the target data if it receives the initial response data carrying the initial status information of the target platform screen door controller returned by the target platform screen door controller. The initial value of the host communication cycle number is 1. If the host communication cycle number carried by the broadcast data sent by the execution host in the previous cycle is not greater than a preset value, the host communication cycle number carried by the broadcast data sent by the execution host in the current cycle is 1 greater than the host communication cycle number carried by the broadcast data sent by the execution host in the previous cycle. If the host communication cycle number carried by the broadcast data sent by the execution host in the previous cycle is a preset value, the host communication cycle number carried by the broadcast data sent by the execution host in the current cycle is 1. The platform door controller is specifically configured to, upon receiving a first number of consecutive broadcast data cycles from the host communication number after power-on, return initial response data carrying initial status information of the platform door controller to the execution host, and determine to establish a secure communication link with the execution host. The platform door controller is also configured to, upon determining to establish a secure communication link with the execution host, if it determines that the currently received broadcast data is acceptable, respond to the currently received broadcast data and return response data including the response result to the execution host. The response data also carries the slave communication cycle number and the host communication cycle number carried in the currently received broadcast data. The platform door controller, upon determining... After establishing a secure communication link with the execution host, the slave communication cycle number carried in the first response data returned by the platform door controller to the execution host is 1. If the slave communication cycle number carried in the previous response data returned by the platform door controller to the execution host is not greater than the preset value, the slave communication cycle number carried in the response data returned by the platform door controller to the execution host this time is 1 greater than the slave communication cycle number carried in the previous response data returned by the platform door controller to the execution host. If the slave communication cycle number carried in the previous response data returned by the platform door controller to the execution host is greater than the preset value, the slave communication cycle number carried in the response data returned by the platform door controller to the execution host this time is 1.

2. The platform screen door control system according to claim 1, characterized in that, When the executing host is the data sender, the platform door controller is the data receiver, the data received by the data receiver is the broadcast data, and the communication sequence number carried by the data received by the data receiver is the host communication cycle number carried by the broadcast data; When the platform door controller is the data sender, the execution host is the data receiver, the data received by the data receiver is the response data, and the communication sequence number carried by the data received by the data receiver is the slave communication cycle number carried by the response data; The data receiver is configured to determine that the data received this time is the same as the data received last time if the communication sequence number carried by the data is the same as the communication sequence number carried by the data received last time, and to tolerate the data received this time.

3. A platform screen door control system according to claim 1, characterized in that, The platform door controller is used to determine, when it is determined that a secure communication link has been established with the execution host, whether the host communication cycle number carried in the broadcast data received this time is consecutive to the host communication cycle number carried in the second most recently received broadcast data before the broadcast data received this time. If it is determined that the host communication cycle number carried in the broadcast data received this time is consecutive to the host communication cycle number carried in the second most recently received broadcast data before the broadcast data received this time, and the broadcast data received this time has passed the verification of the two-by-two architecture, then the broadcast data received this time is accepted.

4. A platform screen door control system according to claim 1, characterized in that, The execution host is used to determine whether to accept the response data returned by any platform gate controller when it receives response data from any platform gate controller, based on the order of the slave communication cycle number and the host communication cycle number carried in the response data returned by any platform gate controller and the two-out-of-two architecture.

5. A platform screen door control system according to claim 2, characterized in that, The data receiver is configured to report a first abnormality indicating data loss when it determines that the communication sequence number carried by the currently received data is not consecutive to the communication sequence number carried by the previously received data, and the difference between the communication sequence number carried by the currently received data and the communication sequence number carried by the previously received data is greater than a numerical threshold, or the difference between the sum of the communication sequence number carried by the currently received data and the preset value and the communication sequence number carried by the previously received data is greater than the numerical threshold.

6. A platform screen door control system according to claim 2, characterized in that, The data receiver is configured to, if it determines that the communication sequence number carried by the data received this time is reversed or does not increase according to the rules, reorder the data received this time and the third most recently received data according to the order of the communication sequence numbers. If the communication sequence numbers carried by the reordered data are consecutive, the reordered data is accepted. If the communication sequence numbers carried by the reordered data are not consecutive, the reordered data is discarded.

7. A platform screen door control system according to claim 2, characterized in that, The data sender is also configured to add a source identifier to the data sent to the data receiver to identify the identity of the data sender; The data receiver is used to report a second abnormality message indicating that it has received inserted data if it determines that the received data is inserted data based on the source identifier carried in the received data.

8. A platform screen door control system according to claim 2, characterized in that, The data receiver is used to determine that the data received this time is delayed data if the time when the data is received this time exceeds a preset time.

9. A platform screen door control system according to any one of claims 1 to 8, characterized in that, The execution host is used to send a software upgrade command and the upgrade firmware package to the platform door controller to be upgraded via the CANFD bus when it receives the upgrade firmware package for the platform door controller to be upgraded. Each platform door controller includes the platform door controller to be upgraded. The platform door controller is used to switch to Bootloader mode when it receives the software upgrade instruction. If it receives the upgrade firmware package within a preset time after receiving the software upgrade instruction, it verifies the upgrade firmware package based on a two-by-two architecture. If it is determined that the upgrade firmware package passes the verification, it performs a software upgrade based on the upgrade firmware package in Bootloader mode.

Images