High-reliability zero-second action control system and method

What is AI technical title?
AI technical title is built by Patsnap AI team. It summarizes the technical point description of the patent document.
Through the EPA real-time bus and time-sharing multiplexing scheduling combined with the three redundant design of software and hardware, the problem of delay uncontrollable and redundant unreliable in the ground equipment control system is solved, and high-reliability and low-delay zero-second action control is achieved, meeting the reliability requirements of the launch of the new generation of launch vehicles.

CN120406219APending Publication Date: 2025-08-01BEIJING INST OF SPACE LAUNCH TECH

View PDF 0 Cites 0 Cited by

Patent Information

Application Number: CN202510276502.5
Authority / Receiving Office: CN · China
Patent Type: Applications(China)
Current Assignee / Owner
Filing Date: 2025-03-10
Publication Date: 2025-08-01

AI Technical Summary

Technical Problem

The existing ground equipment control technology has the problem of uncontrollable delay and traditional redundant methods that cannot meet the reliable execution of second-degree faults, especially when the new generation of launch vehicles is launched, it is impossible to achieve high-reliability and low-delay zero-second action control.

Method used

The EPA real-time bus and time-sharing multiplexing scheduling method are adopted, combined with the three redundant design of software and hardware, and low-delay communication is realized through the signal holding and adaptation unit and the isolation control unit, and a power-on control and status feedback loop are designed to ensure that the control system still operates reliably in the case of a second-degree fault.

Benefits of technology

It realizes stable control with low latency, improves the system's anti-interference ability and self-test ability, and ensures that important actions can still be performed reliably in the case of a second-degree fault.

✦ Generated by Eureka AI based on patent content.

Smart Images

Figure CN120406219A_ABST

Patent Text Reader

Abstract

According to the high-reliability zero-second action control system and method, an EPA real-time bus is adopted, low time delay is achieved through a time division multiplexing scheduling method, the control reliability is guaranteed in the mode that software and hardware are combined with triple redundancy, and the requirement that important actions still work reliably when controlling second-degree faults can be met; and a power-up control and state feedback loop is further designed, so that misoperation is avoided, and the anti-interference and self-checking capabilities are improved.

Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of zero-second action control during the launch of ground equipment in the aerospace system, and particularly relates to a highly reliable zero-second action control system and method. Background Art

[0002] With the development of the new generation of launch vehicles and the requirement of unmanned operation, ground equipment needs to perform some important actions at the moments of ignition, takeoff, etc. In order not to affect the rocket launch, it is required that zero-second control must have the characteristics of high reliability and low latency. There are two problems in the existing control technology of ground equipment: First, due to the low requirement for latency, the network architecture is designed based on Ethernet, and the transmission conflicts and randomness caused by its CSMA / CD mechanism cannot achieve stable low latency. Second, the system architecture adopts the traditional redundancy method, which can ensure the normal function in case of a single fault, but cannot meet the requirement that the actions in case of a double fault can still be reliably executed. Summary of the Invention

[0003] The present invention aims to provide a highly reliable zero-second action control method and device that overcome or at least partially solve the above problems.

[0004] To achieve the above object, the technical solution of the present invention is specifically implemented as follows:

[0005] One aspect of the present invention provides a highly reliable zero-second action control system, including:

[0006] A first master device, including: a first EPA real-time bus interface of the first master device, a second EPA real-time bus interface of the first master device, and a third EPA real-time bus interface of the first master device, for receiving a first zero-second control instruction through the third EPA real-time bus of the first master device;

[0007] A second master device, including: a first EPA real-time bus interface of the second master device, a second EPA real-time bus interface of the second master device, and a third EPA real-time bus interface of the second master device, for receiving a second zero-second control instruction through the third EPA real-time bus of the second master device;

[0008] The first distributed control sub-station includes: the first EPA real-time bus interface of the first distributed sub-station, the second EPA real-time bus interface of the first distributed sub-station, and the DO module interface of the first distributed sub-station. The first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the first master device. The second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the first master device. The first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the second master device. The second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the second master device. It is used to receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station, and output the first zero-second control instruction, or receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station, and output the second zero-second control instruction;

[0009] The second distributed control sub-station includes: the first EPA real-time bus interface of the second distributed sub-station, the second EPA real-time bus interface of the second distributed sub-station, and the DO module interface of the second distributed sub-station. The first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the second master device. The second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the second master device. The first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the first master device. The second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the first master device. It is used to receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station, and output the second zero-second control instruction, or receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station, and output the first zero-second control instruction;

[0010] The signal holding and transfer unit includes multiple signal holding and transfer unit relays. The multiple signal holding and transfer unit relays include: a signal holding and transfer unit forwarding relay, which is used to receive a hardware signal, disconnect and close according to the hardware signal, and perform the reception and forwarding of the hardware signal;

[0011] The isolation control unit is used for isolating and converting the control loop and the drive loop, and includes: a plurality of isolation control unit relays, and the plurality of isolation control unit relays include: an isolation control unit first relay, an isolation control unit second relay, and an isolation control unit third relay. The isolation control unit first relay is used for receiving the hardware signal forwarded by the signal holding and transfer unit. The isolation control unit second relay is used for receiving the first zero-second control instruction output by the first distributed substation. The isolation control unit third relay is used for receiving the second zero-second control instruction output by the second distributed substation, powering on the drive loop, and controlling the controlled device to power on.

[0012] Optionally, the signal holding and transfer unit forwarding relay includes: a first group of relays, a second group of relays, and a third group of relays. The first group of relays includes a first relay and a second relay. The second group of relays includes: a third relay and a fourth relay. The third group of relays includes: a fifth relay and a sixth relay.

[0013] Optionally, the first set of contacts of the first relay and the second relay are used for signal locking.

[0014] Optionally, the plurality of signal holding and transfer unit relays further includes: a signal holding and transfer unit loop power-on control relay, and the loop power-on control relay includes: a seventh relay and an eighth relay, which are used for loop power-on control.

[0015] Optionally, the plurality of signal holding and transfer unit relays further includes: a power-on state acquisition relay, and the power-on state acquisition relay includes: a ninth relay and a tenth relay, which are used for power-on state acquisition.

[0016] Optionally, the plurality of isolation control unit relays further includes: an isolation control unit fourth relay and an isolation control unit fifth relay, which are used for drive loop power-on control.

[0017] Optionally, the plurality of isolation control unit relays further includes: an isolation control unit sixth relay and an isolation control unit seventh relay, which are used for drive loop power-on state acquisition.

[0018] Optionally, the drive loop is set to a triple-redundancy design, and each drive loop is independently powered and corresponds to a group of controlled devices.

[0019] Another aspect of the present invention provides a highly reliable zero-second action control method, which performs zero-second action control by using the highly reliable zero-second action control system as described above.

[0020] Optionally, the zero-second action control includes:

[0021] The power-on control relay of the control signal holding and transfer unit loop is turned on, and the loop is powered on;

[0022] The fourth relay of the control isolation control unit and the fifth relay of the isolation control unit are turned on, and the loop is powered on;

[0023] An EPA trigger signal is sent. After the first master device and / or the second master device processes the EPA trigger signal, it is sent to the first distributed control sub-station and the second distributed control sub-station. The first distributed control sub-station controls the output of the DO module of the first distributed control sub-station, and the second distributed control sub-station controls the output of the DO module of the second distributed control sub-station, and the second relay and the third relay of the control isolation control unit are turned on; or the hardware trigger signal is closed, the relay of the signal holding and transfer unit is turned on, and the first to eighth outputs of the corresponding single machine are all turned on, and the hardware transfer signal input of the isolation control unit is turned on, and the first relay of the control isolation control unit is turned on;

[0024] When any one of the first relay of the isolation control unit, the second relay of the isolation control unit, or the third relay of the isolation control unit is turned on, it controls the controlled device to be powered on.

[0025] It can be seen that through the high-reliability zero-second action control system and method provided by the present invention, the EPA real-time bus is adopted, the time-division multiplexing scheduling method is used to achieve low latency, and the reliability of control is ensured by the software and hardware combined triple-redundancy method, which can meet the requirement of reliable operation of the control second-degree fault of important actions; further design the power-on control and status feedback loop to avoid misoperation and improve the anti-interference and self-checking capabilities. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0027] Figure 1 It is a schematic structural diagram of the high-reliability zero-second action control system provided by the embodiment of the present invention;

[0028] Figure 2 It is a schematic diagram of the principle of the signal holding and transfer unit provided by the embodiment of the present invention;

[0029] Figure 3 It is a schematic diagram of the principle of the isolation control unit provided by the embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0030] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present disclosure can be completely conveyed to those skilled in the art.

[0031] Figure 1 The structural diagram of the highly reliable zero-second action control system provided by the embodiment of the present invention is shown. Refer to Figure 1 The highly reliable zero-second action control system provided by the embodiment of the present invention includes:

[0032] The first master device includes: the first EPA real-time bus interface of the first master device, the second EPA real-time bus interface of the first master device, and the third EPA real-time bus interface of the first master device, and is used to receive the first zero-second control instruction through the third EPA real-time bus of the first master device;

[0033] The second master device includes: the first EPA real-time bus interface of the second master device, the second EPA real-time bus interface of the second master device, and the third EPA real-time bus interface of the second master device, and is used to receive the second zero-second control instruction through the third EPA real-time bus of the second master device;

[0034] The first distributed control sub-station includes: the first EPA real-time bus interface of the first distributed sub-station, the second EPA real-time bus interface of the first distributed sub-station, and the DO module interface of the first distributed sub-station. The first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the first master device, the second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the first master device, the first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the second master device, and the second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the second master device. It is used to receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station, and output the first zero-second control instruction, or receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station, and output the second zero-second control instruction;

[0035] The second distributed control sub-station includes: the first EPA real-time bus interface of the second distributed sub-station, the second EPA real-time bus interface of the second distributed sub-station, and the DO module interface of the second distributed sub-station. The first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the second master device, and the second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the second master device. The first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the first master device, and the second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the first master device. It is used to receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station, and output the second zero-second control instruction, or receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station, and output the first zero-second control instruction;

[0036] The signal holding and transfer unit includes multiple signal holding and transfer unit relays. The multiple signal holding and transfer unit relays include: a signal holding and transfer unit forwarding relay, which is used to receive hardware signals, disconnect and close according to the hardware signals, and perform the reception and forwarding of the hardware signals;

[0037] The isolation control unit is used to isolate and convert the control loop and the drive loop, and includes: multiple isolation control unit relays. The multiple isolation control unit relays include: the first relay of the isolation control unit, the second relay of the isolation control unit, and the third relay of the isolation control unit. The first relay of the isolation control unit is used to receive the hardware signal forwarded by the signal holding and transfer unit, the second relay of the isolation control unit is used to receive the first zero-second control instruction output by the first distributed sub-station, and the third relay of the isolation control unit is used to receive the second zero-second control instruction output by the second distributed sub-station, so as to power on the drive loop and control the controlled device to power on.

[0038] Specifically, the present invention adopts the EPA real-time bus, uses the time-division multiplexing scheduling method to achieve low latency, and ensures the reliability of control through a software and hardware combined triple-redundancy method. This method can be used in any application scenario with high reliability and low latency control requirements.

[0039] The zero-second control principle of the present invention is as Figure 1As shown in the figure, it is divided into a control part and a drive part. The control part adopts two redundant EPA real-time buses and one-way hardware to implement signal output, which is compatible with the domain centralized system architecture. The main control device runs the control logic as the core, and the slave stations receive instructions as distributed nodes and execute outputs; the drive part is used to drive the controlled devices. When problems such as bus transmission failure, control device failure, and hardware component failure occur, reliable operation in the event of a second-degree fault can be ensured.

[0040] The EPA real-time bus divides the communication macro cycle into a periodic time and an aperiodic time. During the periodic time, zero-second control-related instructions are sent. By designing and planning the communication transmission of each node, the data transmission time of each node is specified to achieve conflict-free and strongly real-time data transmission.

[0041] As an optional implementation manner of the embodiment of the present invention, the signal holding and transfer unit forwarding relay includes: a first group of relays, a second group of relays, and a third group of relays. The first group of relays includes a first relay and a second relay. The second group of relays includes: a third relay and a fourth relay. The third group of relays includes: a fifth relay and a sixth relay.

[0042] As an optional implementation manner of the embodiment of the present invention, the first set of contacts of the first relay and the second relay are used for signal locking.

[0043] As an optional implementation manner of the embodiment of the present invention, the multiple signal holding and transfer unit relays further include: a signal holding and transfer unit loop power-on control relay. The loop power-on control relay includes: a seventh relay and an eighth relay, which are used for loop power-on control.

[0044] As an optional implementation manner of the embodiment of the present invention, the multiple signal holding and transfer unit relays further include: a power-on state acquisition relay. The power-on state acquisition relay includes: a ninth relay and a tenth relay, which are used for power-on state acquisition.

[0045] Specifically, the signal holding and transfer unit is used for the processing and transmission of hardware signals. Through the combination of contact relays, functions such as signal reception and forwarding, self-locking, loop power-on, and power-on state feedback are realized. The principle is as Figure 2 shown. Three groups of relays K1-K6 are used to realize the self-locking and forwarding of trigger signals. The first set of contacts of relays K1 and K2 are used to lock the signals to prevent control failure caused by sudden signal disappearance. Relays K7 and K8 realize loop power-on control, and relays K9 and K10 realize power-on state acquisition. Remote power-on and power-off can keep the loop in a power-off state during non-action periods to prevent misoperation, and state acquisition can test whether the power supply and power-on functions are normal.

[0046] As an alternative embodiment of the embodiment of the present invention, the plurality of isolation control unit relays further include: an isolation control unit fourth relay and an isolation control unit fifth relay, which are used for power-on control of the drive circuit.

[0047] As an alternative embodiment of the embodiment of the present invention, the plurality of isolation control unit relays further include: an isolation control unit sixth relay and an isolation control unit seventh relay, which are used for acquisition of the power-on state of the drive circuit.

[0048] As an alternative embodiment of the embodiment of the present invention, the drive circuit is designed with triple redundancy, and each drive circuit is independently powered and corresponds to a group of controlled devices.

[0049] Specifically, the isolation control unit of the present invention realizes isolation and conversion between the control circuit and the drive circuit, controls the power-on of the controlled device, and the principle is as Figure 3 shown. The control circuit receives the two-way substation DO output signals to control the relays K2 and K3, and receives the hardware signals forwarded by the signal holding and transfer unit to control the relay K1. Any relay working can connect the drive circuit. The relays K4 and K5 realize the power-on control of the drive circuit, and the relays K6 and K7 realize the acquisition of the power-on state. To ensure reliable power supply to the controlled device, the drive circuit is designed with triple redundancy according to the form of the controlled object. Generally, there are three groups of controlled objects, and three sets of drive circuits need to be designed based on Figure 3 the principle, and each set is independently powered and corresponds to a group of controlled objects.

[0050] It can be seen that through the highly reliable zero-second action control system provided by the embodiment of the present invention, it can meet the requirement of reliable operation even in the case of a second-degree fault in the control of important actions; the EPA real-time bus is selected to achieve stable and low-latency communication and control; the power-on control and status feedback circuits are designed to avoid misoperation and improve the anti-interference and self-checking capabilities.

[0051] The embodiment of the present invention also provides a highly reliable zero-second action control method. This highly reliable zero-second action control method applies the above system. Only a simple description of the highly reliable zero-second action control method is given below. For other matters not covered, please refer to the relevant descriptions in the above highly reliable zero-second action control system. The highly reliable zero-second action control method provided by the embodiment of the present invention performs zero-second action control by using the highly reliable zero-second action control system as described above.

[0052] As an alternative embodiment of the embodiment of the present invention, the zero-second action control includes:

[0053] The control signal holding and transfer unit circuit power-on control relay is turned on, and the circuit is powered on;

[0054] The isolation control unit fourth relay and the isolation control unit fifth relay are turned on, and the circuit is powered on;

[0055] An EPA trigger signal is sent out. After being processed by the first master device and / or the second master device, the EPA trigger signal is sent to the first distributed control sub-station and the second distributed control sub-station. The first distributed control sub-station controls the output of the DO module of the first distributed control sub-station, and the second distributed control sub-station controls the output of the DO module of the second distributed control sub-station, controlling the second relay and the third relay of the isolation control unit to be turned on; or when the hardware trigger signal is closed, the relay of the signal holding and transfer unit is turned on, and the first to eighth outputs of the corresponding single machine are all turned on, and the hardware transfer signal input of the isolation control unit is turned on, controlling the first relay of the isolation control unit to be turned on;

[0056] When any one of the first relay of the isolation control unit, the second relay of the isolation control unit or the third relay of the isolation control unit is turned on, it controls the controlled device to be powered on.

[0057] Specifically, the highly reliable zero-second action control method provided by the embodiment of the present invention includes:

[0058] 1) Receive the trigger signal through 2 EPA buses and 1 hardware, use the output of the signal holding and transfer unit as the hardware trigger signal input of the isolation control unit, and use the DO modules of sub-station 1 and sub-station 2 to control the relays of the isolation control unit;

[0059] 2) The relays K7 and K8 of the signal holding and transfer unit are turned on, and the loop is powered on;

[0060] 3) The relays K4 and K5 of the isolation control unit are turned on, and the loop is powered on;

[0061] 4) The EPA trigger signal is sent out. After being processed by the master device, the EPA signal is sent to 2 sub-stations, controlling the output of the DO module and controlling the relays K2 and K3 of the isolation control unit to be turned on;

[0062] 5) When the hardware trigger signal is closed, the relays K1-K6 of the signal holding and transfer unit are turned on, the first to eighth outputs of the corresponding single machine are all turned on, the hardware transfer signal input of the isolation control unit is turned on, and K1 is turned on;

[0063] 6) When any one of the relays K1, K2, and K3 of the isolation control unit is turned on, the controlled device will be powered on, completing the control logic.

[0064] It can be seen that through the highly reliable zero-second action control method provided by the embodiment of the present invention, it can meet the requirement of reliable operation even in the case of a second-degree fault in the control of important actions; the EPA real-time bus is selected to achieve stable and low-latency communication and control; the power-on control and status feedback loop are designed to avoid misoperation and improve the anti-interference and self-checking capabilities.

[0065] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the scope of the claims of the present application.

Claims

1. A highly reliable zero-second action control system, characterized in that, Comprising: A first master device, comprising: a first EPA real-time bus interface of the first master device, a second EPA real-time bus interface of the first master device, and a third EPA real-time bus interface of the first master device, for receiving a first zero-second control instruction through the third EPA real-time bus of the first master device; A second master device, comprising: a first EPA real-time bus interface of the second master device, a second EPA real-time bus interface of the second master device, and a third EPA real-time bus interface of the second master device, for receiving a second zero-second control instruction through the third EPA real-time bus of the second master device; A first distributed control sub-station, comprising: a first EPA real-time bus interface of the first distributed sub-station, a second EPA real-time bus interface of the first distributed sub-station, and a DO module interface of the first distributed sub-station. The first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the first master device, the second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the first master device, the first EPA real-time bus interface of the first distributed sub-station is connected to the first EPA real-time bus interface of the second master device, and the second EPA real-time bus interface of the first distributed sub-station is connected to the second EPA real-time bus interface of the second master device. It is used to receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station and output the first zero-second control instruction, or receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the first distributed sub-station and output the second zero-second control instruction; A second distributed control sub-station, comprising: a first EPA real-time bus interface of the second distributed sub-station, a second EPA real-time bus interface of the second distributed sub-station, and a DO module interface of the second distributed sub-station. The first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the second master device, the second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the second master device, the first EPA real-time bus interface of the second distributed sub-station is connected to the first EPA real-time bus interface of the first master device, and the second EPA real-time bus interface of the second distributed sub-station is connected to the second EPA real-time bus interface of the first master device. It is used to receive the second zero-second control instruction sent by the second master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station and output the second zero-second control instruction, or receive the first zero-second control instruction sent by the first master device through the first EPA real-time bus interface and / or the second EPA real-time bus interface of the second distributed sub-station and output the first zero-second control instruction; Signal holding and transfer unit, including a plurality of signal holding and transfer unit relays, and the plurality of signal holding and transfer unit relays include: a signal holding and transfer unit forwarding relay, configured to receive a hardware signal, disconnect and close according to the hardware signal, and perform reception and forwarding of the hardware signal; Isolation control unit, configured to isolate and convert a control loop and a drive loop, and includes: a plurality of isolation control unit relays, and the plurality of isolation control unit relays include: an isolation control unit first relay, an isolation control unit second relay, and an isolation control unit third relay. The isolation control unit first relay is configured to receive the hardware signal forwarded by the signal holding and transfer unit, the isolation control unit second relay is configured to receive the first zero-second control instruction output by the first distributed substation, and the isolation control unit third relay is configured to receive the second zero-second control instruction output by the second distributed substation, power on the drive loop, and control the controlled device to power on.

2. The system according to claim 1, wherein The signal holding and transfer unit forwarding relay includes: a first group of relays, a second group of relays, and a third group of relays. The first group of relays includes a first relay and a second relay, the second group of relays includes: a third relay and a fourth relay, and the third group of relays includes: a fifth relay and a sixth relay.

3. The system according to claim 2, wherein The first group of contacts of the first relay and the second relay are used for signal locking.

4. The system according to claim 3, characterized in that The plurality of signal holding and transfer unit relays further include: a signal holding and transfer unit loop power-on control relay, and the loop power-on control relay includes: a seventh relay and an eighth relay, configured to perform loop power-on control.

5. The system according to claim 4, wherein The plurality of signal holding and transfer unit relays further include: a power-on state acquisition relay, and the power-on state acquisition relay includes: a ninth relay and a tenth relay, configured to perform power-on state acquisition.

6. The system according to claim 1, wherein The plurality of isolation control unit relays further include: an isolation control unit fourth relay and an isolation control unit fifth relay, configured to perform drive loop power-on control.

7. The system according to claim 6, wherein The plurality of isolation control unit relays further include: an isolation control unit sixth relay and an isolation control unit seventh relay, configured to perform drive loop power-on state acquisition.

8. The system according to claim 7, characterized in that, The drive loop is set to a triple-redundancy design, and each drive loop is independently powered and corresponds to a group of controlled devices.

9. A highly reliable zero-second action control method, characterized in that, Perform zero-second action control by using the highly reliable zero-second action control system according to any one of claims 1 to 8.

10. The method according to claim 9, wherein The zero-second action control includes: Control the signal holding and transfer unit loop power-on control relay to be turned on, and the loop is powered on; Control the isolation control unit fourth relay and the isolation control unit fifth relay to be turned on, and the loop is powered on; An EPA trigger signal is sent out. After being processed by the first master device and / or the second master device, the EPA trigger signal is sent to the first distributed control sub-station and the second distributed control sub-station. The first distributed control sub-station controls the output of the DO module of the first distributed control sub-station, and the second distributed control sub-station controls the output of the DO module of the second distributed control sub-station, controlling the second relay of the isolation control unit and the third relay of the isolation control unit to be turned on; or when the hardware trigger signal is closed, the relay of the signal holding and transfer unit is turned on, and the first to eighth outputs of the corresponding single machine are all turned on, and the hardware transfer signal input of the isolation control unit is turned on, controlling the first relay of the isolation control unit to be turned on; When any one of the first relay of the isolation control unit, the second relay of the isolation control unit or the third relay of the isolation control unit is turned on, it controls the controlled device to be powered on.