Rail transit power supply and grounding safety locking control system and control method

Abstract

The invention discloses a rail transit power supply and grounding safety locking control system and control method, and relates to the technical field of visual grounding systems. The invention provides a rail transit power supply and grounding safety locking control system which comprises the following steps: acquiring a to-be-overhauled target overhead line system according to a parallel control task; the safety locking system is configured to obtain a target isolation switch and a target visual grounding switch associated with a target contact network according to the target contact network to be overhauled; a first unlocking instruction is sent to the first locking device, the state information of the first locking device is verified, and whether the first unlocking instruction is executed or not is determined; if the first unlocking instruction is executed, closing the electrical operation loop, and performing remote control switching on the target isolation switch; sending a second unlocking instruction to the second locking device, verifying the state information of the second locking device, and determining whether to execute the second unlocking instruction; and if the second unlocking instruction is executed, performing remote grounding closing on the target grounding switch.

Description

[0001] Rail transit power supply and grounding safety locking control system and control method TECHNICAL FIELD The present application relates to the technical field of visual grounding system, and particularly to a rail transit power supply and grounding safety locking control system and control method. BACKGROUND

[0002] With the rapid development of rail transit, the application of computer computing, communication technology and automatic control technology, the equipment used in the rail transit system usually has the functions of real-time collection uploading and remote control. At the same time, due to the explosive growth of rail transit operation and maintenance requirements, if the traditional microcomputer five-prevention system is still used, the maintenance personnel need to take a computer key to the scene to sequentially unlock and perform switching operation on the equipment according to the operation sequence, which will greatly occupy the actual maintenance time, reduce the work efficiency, and cannot meet the needs of the development of rail transit system. Moreover, when performing cross-operation of multiple tasks, each operation ticket will add a padlock to the device to be operated, and the padlock position space is limited. SUMMARY

[0003] The main purpose of the present application is to provide a rail transit power supply and grounding safety locking control system and control method, which aims to solve the technical problem that the traditional microcomputer five-prevention system is used, the maintenance personnel need to take a computer key to the scene to sequentially unlock and perform switching operation on the equipment according to the operation sequence, which will greatly occupy the actual maintenance time, reduce the work efficiency, and cannot meet the needs of the development of rail transit system.

[0004] To achieve the above-mentioned purpose, in a first aspect, the present application provides a control method of a rail transit power supply and grounding safety locking control system, comprising: According to the control task, the target catenary to be maintained is obtained; According to the target catenary to be maintained, the target isolation switch and the target visual grounding switch associated with the target catenary are obtained, wherein the target isolation switch is configured with a first locking device, and the target visual grounding switch is configured with a second locking device; A first unlocking instruction is sent to the first locking device, the state information of the first locking device is verified, and it is determined whether to execute the first unlocking instruction; If the first unlocking instruction is executed, the electrical operation loop is closed, and the target isolation switch is remotely controlled to switch; A second unlocking instruction is sent to the second locking device, the state information of the second locking device is verified, and it is determined whether to execute the second unlocking instruction; If the second unlocking instruction is executed, the target grounding switch is remotely grounded.

[0005] Optionally, the state information of the first and second locking devices each comprises a locking number, and the step of obtaining the locking number of the locking device comprises: in response to receiving the target control instruction, updating the locking number of the locking device according to the target control instruction; judging whether the updated locking number of the locking device matches the target control instruction according to the updated locking number of the locking device; when the updated locking number of the locking device matches the target control instruction, controlling the locking device to switch states according to the target control instruction.

[0006] Optionally, the step of updating the locking number of the locking device according to the target control instruction in response to receiving the target control instruction comprises: obtaining all locking and unlocking instructions of the locking device within a preset time period according to the target control instruction; each time a locking instruction is executed, the locking number is added, each time an unlocking instruction is executed, the locking number is subtracted, and the locking number of the locking device is updated in real time.

[0007] Optionally, the step of controlling the locking device to switch states according to the target control instruction when the updated locking number of the locking device matches the target control instruction comprises: when the updated locking number of the locking device matches the target control instruction, obtaining the dry node information and node sampling value of the controlled device associated with the locking device; only when the dry node locking input signal has no signal and the node sampling value is less than a preset threshold, the locking device is controlled to switch states according to the target control instruction.

[0008] Optionally, the step of sending a first unlocking instruction to the first locking device and verifying the state information of the first locking device to determine whether to execute the first unlocking instruction comprises: sending a first unlocking instruction to the first locking device through the safety locking system and obtaining the state information of the first locking device, wherein the state information of the first locking device comprises a locking number, dry node information and node sampling value of the first locking device; after the first locking device receives the locking command issued by the safety locking system, the locking number is added, after the one-time password security verification is passed, the locking number is subtracted, and the locking number of the locking device is updated in real time; only when the locking number of the first locking device is zero, the dry node locking input signal has no signal, and the node sampling value is less than a preset threshold, the first unlocking instruction is executed; otherwise, the first unlocking instruction is not executed.

[0009] Optionally, if the first unlocking instruction is executed, the step of remotely controlling the target disconnector to switch over includes: According to the scheduling order of the parallel control task, remotely controlling the target disconnector to switch over and performing the power-off operation; After the power-off operation is completed, the target disconnector is locked by the safety locking system so that the cabinet door of the target disconnector refuses network authorization.

[0010] Optionally, the step of sending the second unlocking instruction to the second locking device, verifying the state information of the second locking device, and determining whether to execute the second unlocking instruction includes: The second unlocking instruction is sent to the second locking device by the safety locking system, and the state information of the second locking device includes the locking number of the second locking device, the dry node information, and the node sampling value, wherein the dry node of the second locking device accesses the target disconnector position signal; After the second locking device receives the locking command issued by the safety locking system, the locking number is accumulated, and after the one-time password security verification is passed, the locking number is reduced, and the locking number of the locking device is updated in real time; The second unlocking instruction is executed only when the locking number of the second locking device is zero, the dry node locking input signal is no signal, and the node sampling value is less than the target threshold value; Otherwise, the second unlocking instruction is not executed.

[0011] Optionally, if the second unlocking instruction is executed, the step of remotely grounding the target grounding switch includes: According to the scheduling order of the parallel control task, remotely grounding the target grounding switch to complete the grounding operation; After the grounding operation is completed, the target grounding switch is locked by the safety locking system so that the cabinet door of the target grounding switch refuses network authorization.

[0012] Optionally, if the second unlocking instruction is executed, the step after remotely grounding the target grounding switch includes: After the target disconnector is opened and locked in the open position and the target grounding switch is closed and locked in the closed position, the authorized personnel sends a one-time password and a work permission command to the maintenance personnel, and the safety locking system generates a security verification code by using an encryption algorithm and transmits the security verification code to the first locking device and the second locking device through encrypted communication; After receiving the one-time password and the work permission command, the maintenance personnel starts to perform maintenance work on the target overhead contact system.

[0013] Optionally, the step of starting to perform maintenance work on the target overhead contact system after the maintenance personnel receives the one-time password and the work permission command includes: After the maintenance personnel complete the maintenance work, the one-time password is input into the first locking device and the second locking device, the first locking device and the second locking device are encrypted and verified, the number of lockings is reduced, the security verification code is recovered and destroyed; When the first locking device and the second locking device both complete the security verification of the one-time password, the authorized personnel is allowed to revoke the work permission order.

[0014] Optionally, the security verification code generation step comprises: applying the SHA-256 algorithm to the original input string to generate a hash value of a fixed length, rearranging the bytes of the hash value according to the permutation vector of the preset value to generate a new disordered hash value; According to the original length of the original input string, the original length of the bytes is cut from the starting position of the disordered hash value to form an intermediate byte sequence; Traverse each byte of the intermediate byte sequence, and perform a modulo operation on the value of each byte to the size of the printable character set to obtain the result as an index, and take the corresponding character from the printable character set as the final security verification code.

[0015] Optionally, the first locking device and the second locking device are integrated with a password keyboard module, a voice prompt module, a biometric identification module, and an electromagnetic lock control module, and a GPIO module.

[0016] In a second aspect, the application provides a rail transit power supply and grounding safety locking control system, comprising: A host computer control system configured to create and control tasks, and according to the control tasks, to obtain a target catenary to be maintained; A safety locking system configured to obtain a target isolation switch and a target visual grounding switch associated with the target catenary to be maintained according to the target catenary to be maintained, wherein the target isolation switch is configured with a first locking device, and the target visual grounding switch is configured with a second locking device; sending a first unlocking instruction to the first locking device, verifying the state information of the first locking device, and determining whether to execute the first unlocking instruction; If the first unlocking instruction is executed, the electrical operation loop is closed, and the target isolation switch is remotely controlled to switch; sending a second unlocking instruction to the second locking device, verifying the state information of the second locking device, and determining whether to execute the second unlocking instruction; If the second unlocking instruction is executed, the target grounding switch is remotely grounded.

[0017] The application can achieve the following beneficial effects: The track power supply and grounding safety locking control system and the control method provided by the embodiment of the application, the target disconnecting switch is configured with a first locking device, the target visual grounding switch is configured with a second locking device, and the state information of the locking device is verified after sending the unlocking instruction to determine whether to execute the instruction. This double locking and verification mechanism ensures that the corresponding operation will only be executed when the safety condition is met, greatly reducing the safety risk caused by device misoperation or illegal operation, and further improving the safety of the entire visual grounding system control. After executing the first unlocking instruction and verifying that it is passed, the electrical operation loop is closed, and the target disconnecting switch is remotely controlled to switch; after executing the second unlocking instruction and verifying that it is passed, the target grounding switch is remotely grounded. The remote control operation mode does not require the operator to manually operate the device on site, reducing the time and labor cost of on-site operation, and improving the efficiency of maintenance operation. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 The flowchart for obtaining the locking number of the locking device for the embodiment of the application; Figure 2 The flowchart for the control method of the track power supply and grounding safety locking control system for the embodiment of the application; Figure 3 The position diagram of the first locking device; Figure 4 The position diagram of the second locking device; Figure 5 The unlocking flowchart of the locking device; Figure 6 The locking flowchart of the locking device; Figure 7 The verification flowchart of the safety verification code.

[0019] The implementation, functional features and advantages of the application will be further described with reference to the embodiments and the accompanying drawings. DETAILED DESCRIPTION

[0020] The technical solutions in the embodiments of the application will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, rather than all the embodiments. Based on the embodiments in the application, all other embodiments obtained by those skilled in the art without creative labor fall within the protection scope of the application.

[0021] It should be noted that all direction indications (such as up, down, left, right, front, back, etc.) in the embodiments of the present application are only used to explain the relative position relationship, movement condition, etc. between components in a certain posture (as shown in the drawings), and if the certain posture changes, the direction indications will also change accordingly.

[0022] In the present application, unless otherwise explicitly specified and limited, the terms "connection", "fixation" and the like should be understood in a broad sense, for example, "fixation" can be fixed connection, or detachable connection, or integral; can be mechanical connection, or electrical connection; can be direct connection, or indirect connection through an intermediate medium; can be internal communication of two elements or interaction relationship between two elements, unless otherwise explicitly limited. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0023] In addition, if the present application has a description of "first", "second", etc., the description of "first", "second", etc. is only for the purpose of description, and cannot be understood as indicating or implying the relative importance of the indicated technical features or implicitly indicating the number of the indicated technical features. Therefore, the features limited by "first" and "second" can explicitly or implicitly include at least one of the features. In addition, the meaning of "and / or" appearing throughout the text includes three parallel solutions. For example, "A and / or B" includes A solution, or B solution, or A and B solution. In addition, the technical solutions of each embodiment can be combined with each other, but it must be based on the fact that a person skilled in the art can realize it. When the combination of technical solutions appears contradictory or unachievable, it should be considered that the combination of technical solutions does not exist, and is not within the scope of protection required by the present application.

[0024] In the prior art, the traditional method uses a "microcomputer five-prevention system" to realize the misoperation prevention locking function. The microcomputer "five-prevention" system mainly consists of a five-prevention expert system, a computer key, a lock, and the like. The parts work together to realize the "five-prevention" function. The "five-prevention" specifically refers to preventing misoperation of disconnectors; preventing live line pulling and closing of disconnectors; preventing live line hanging (closing) of grounding wires (grounding switches); preventing closing of disconnectors (disconnectors) with grounding wires (grounding switches); and preventing misoperation into a live compartment.

[0025] Five-prevention expert system: as the core of the system, it is responsible for storing the primary main wiring diagram of the substation, the device operation rules and the locking logic database. Through real-time communication with the monitoring system, it receives the actual state information of the field devices, and performs simulation and rehearsal according to the operation ticket to determine whether the operation meets the "five-prevention" requirements.

[0026] Computer key: As the executive tool of the operator, it receives the unlocking instruction issued by the five-prevention expert system and performs unlocking operation on the equipment on site. At the same time, the computer key can also transmit the equipment state information in real time for the five-prevention expert system to make subsequent judgments.

[0027] Lock: including mechanical coded lock, electrical coded lock and intelligent lock, etc., used for physical locking of on-site equipment. These locks cooperate with the computer key to realize the unlocking and locking operation of the equipment.

[0028] Remote locking controller: The remote locking controller is used to realize the remote operation of the locking control. The remote locking controller receives the unlocking / locking command issued by the five-prevention expert system, controls the remote locking relay through the system bus to perform the unlocking / locking operation, so as to realize the accurate control of the remote operation of the electrical equipment.

[0029] The existing "microcomputer five-prevention operation system" adds a padlock to the equipment to be operated when performing cross-operation of multiple tasks. When restoring the safety measures, the last person who removes the padlock performs the switching operation on the equipment. This operation process has the following problems: a) Due to the large number of cross-operations, there is no extra space for padlock use, and only queuing is available, which reduces the operation efficiency.

[0030] b) When restoring the safety measures, the last person who removes the padlock and removes the grounding can perform the subsequent operation steps, i.e. other operation groups can only wait on site to perform the subsequent steps even if they have completed their operation in advance.

[0031] c) Due to cross-operations, it is more likely to cause the possibility of missing padlock due to human factors. After the other operation groups complete the operation, they will remove the grounding and perform the switching operation, which will bring great safety risk to the operation group missing the padlock.

[0032] The existing "microcomputer five-prevention system" realizes safety control by installing anti-misoperation lock on the disconnector and grounding switch. Since the five-prevention lock cannot detect whether the lock is pressed and correctly locked, and whether the lock is hung back to the original position after the equipment operation is completed, it is easy to cause human operation error, which leads to not locking or not hanging back to the original position, bringing great safety risk, i.e. easy to cause safety control failure.

[0033] Some terms in this application are explained as follows: Visual grounding system: An important safety feature in power systems, primarily used to provide a safe and reliable working environment for personnel during equipment inspection and maintenance, preventing injury to personnel and equipment from accidental power surges or induced currents. This system typically consists of several key components, including disconnect switches and visual grounding switches, and may also include monitoring terminals, communication networks, and related control software.

[0034] A disconnecting switch is a common electrical device whose main function is to establish a clear disconnect point in a circuit. When maintenance is required on a section of line or equipment, operators can reliably isolate the section to be maintained from the normally operating section by operating the disconnecting switch. This ensures that even if other parts malfunction or are misoperated during maintenance, the area under maintenance will not be affected, thus protecting the safety of the personnel.

[0035] Visualized grounding switches are a new type of equipment developed by combining visualization technology with traditional grounding switches. They not only possess the functions of traditional grounding switches—reliably connecting the contact network to the earth and ensuring it is at zero potential to prevent hazards from induced current and residual charge—but also, through built-in sensors and cameras, can monitor the grounding switch's status in real time (such as its open / closed position and grounding resistance value), transmitting this information to a monitoring terminal in the form of intuitive images or data. Personnel can view the grounding switch's operating status at any time through the monitoring terminal, promptly identifying potential safety hazards and improving the reliability and safety of grounding operations.

[0036] The interlocking device is installed on the cabinet door of the disconnecting switch and the cabinet door of the visual grounding switch. When the interlocking device is locked, the cabinet door cannot be opened.

[0037] Parallel control task: This is a comprehensive task plan that covers all instructions and requirements related to the maintenance of the overhead contact line. It may include specifying the location of the target overhead contact line to be maintained, the maintenance schedule, the maintenance operation sequence, and the operation requirements of the disconnecting switches and grounding switches involved. This provides guidance for subsequently obtaining the target overhead contact line, associated switches, and performing a series of operations.

[0038] Figure 3 and Figure 4 In the diagram, the numbers are: 100-Second locking device, 200-Electromagnetic lock, 300-Keypad, 400-Contact wire, 500-Isolating switch, 600-Isolating switch cabinet door, 700-First locking device, 800-Door lock. Figure 3 This is a schematic diagram showing the first locking device installed on the cabinet door of the disconnector switch. Figure 4 This is a schematic diagram showing the structure of the second interlocking device installed on the cabinet door of the grounding switch. Figure 5and Figure 6 The safety interlocking device in the text refers to either the first interlocking device or the second interlocking device.

[0039] Example 1 Reference Figures 1-7 The first embodiment of this application provides a control method for a rail transit power supply and grounding safety interlocking control system, including the following operation steps: S10. Based on the control task, obtain the target overhead contact line to be inspected.

[0040] Optionally, the system receives and controls tasks via a communication interface with a host computer or other task scheduling system. These tasks are transmitted in a specific data format, containing basic information about the maintenance task, such as task number, task initiation time, and estimated maintenance duration. Upon receiving the task, the system parses it, extracts key information, and clarifies which section(s) of the overhead contact line are targeted for maintenance. Based on the parsed information, combined with the system's internal database of overhead contact line geographic information and topology model, the system determines the specific location of the target overhead contact line to be maintained. This database records detailed information such as the number, starting and ending mileage, and associated line for each section of the overhead contact line, while the topology model displays the connections and electrical characteristics between the overhead contact lines. Using this information, the system can accurately locate the target overhead contact line on a virtual map or electrical wiring diagram. The control task replaces the operation ticket.

[0041] S20. Based on the target contact network to be inspected, obtain the target disconnect switch and the target visual grounding switch associated with the target contact network, wherein the target disconnect switch is equipped with a first interlocking device and the target visual grounding switch is equipped with a second interlocking device.

[0042] Optionally, the system uses an internally stored table of relationships between the overhead contact system and switchgear to query disconnecting switches and visual grounding switches directly connected to or associated with the target overhead contact system. This table, compiled during the system design and construction phase based on actual electrical wiring and equipment layout, details the correspondence between each section of the overhead contact system and surrounding switchgear. The system then filters out target disconnecting switches and target visual grounding switches that meet the requirements of this maintenance task from the query results. Considering the possibility of multiple sets of switchgear associated with the target overhead contact system, the system will further determine the final target switchgear based on the specific requirements of the parallel control task, such as the scope of maintenance and the order of operations. Simultaneously, the system will perform a preliminary check on the status of the target switchgear to ensure it is in an operable state, such as checking whether the switchgear's communication is normal and whether there are any fault alarms.

[0043] S30. Send a first unlocking command to the first locking device, verify the status information of the first locking device, and determine whether to execute the first unlocking command.

[0044] Optionally, the system sends a first unlocking command to the first interlocking device configured on the target isolating switch via a secure and reliable communication link. This communication link employs encryption technology to ensure the command is not tampered with or leaked during transmission. The command includes authentication information and operational parameters required for unlocking, such as operator ID and unlocking password. Upon receiving the unlocking command, the first interlocking device immediately collects its own status information and feeds this information back to the system via the communication link. Status information includes, but is not limited to, the number of locks, dry node information, and node sampling values. The number of locks reflects the historical lock history of the interlocking device; dry node information is used to detect the physical connection status of the interlocking device; and node sampling values ​​may involve internal electrical or environmental parameters of the interlocking device. After receiving the status information of the first interlocking device, the system performs rigorous verification. Verification conditions include: the number of locks of the first interlocking device is zero, indicating that the device is not abnormally locked; there is no dry node interlocking input signal, indicating that the physical connection of the interlocking device is normal and not subject to external interference; and the node sampling value is less than a preset threshold, which is set according to the normal operating range and safety requirements of the interlocking device and is used to determine whether the interlocking device is in a normal state. The system will only execute the first unlock command if all verification conditions are met; otherwise, it will not execute the unlock command and will send a corresponding alarm message to the operator, indicating that the locking device is in an abnormal state.

[0045] S40. If the first unlocking command is executed, the electrical operation circuit is closed, and the target disconnecting switch is remotely controlled for switching.

[0046] Optionally, after the system determines to execute the first unlocking command, it sends a command to the electrical control system to close the electrical operating circuit related to the target disconnector. Based on the received command, the electrical control system controls the corresponding relays, contactors, and other electrical components to activate the operating circuit, providing power support for the remote operation of the target disconnector. After the electrical operating circuit is closed, the system performs remote-controlled switching operations on the target disconnector according to the dispatch order of the parallel control task. During the operation, the system monitors the status changes of the disconnector in real time, acquiring information such as the switch's open / closed position and the status of the operating mechanism through sensors installed on the switchgear, and feeding this information back to the operator. Simultaneously, the system records the operation process, including operation time, operator, and switch status changes, for subsequent querying and analysis. Once the target disconnector completes the switching operation and de-energizes the system, the system confirms the de-energization operation is complete through multiple methods. On one hand, it detects electrical parameters such as voltage and current in the contact network through sensors; when these parameters drop to a safe range, the de-energization is considered successful. On the other hand, it obtains power outage status feedback information from relevant equipment through communication. After confirming the power outage operation is complete, the system locks the target isolating switch via a safety interlocking system to prevent accidental operation. The locking method can involve using physical devices such as electromagnetic locks to lock the operating mechanism of the isolating switch, while simultaneously preventing network authorization from accessing the target isolating switch's cabinet door, ensuring that only authorized personnel can operate it under specific conditions.

[0047] Safety interlocking system: This system provides safety control over the behavior of the host computer control system and communicates with both the first and second interlocking devices to unlock and lock the controlled equipment. The safety interlocking system and the safety interlocking devices use encrypted communication. The data transmitted from the safety interlocking devices to the safety interlocking system is as follows: Locked status: Indicates whether the device is currently unlocked or locked, and is used to indicate whether the host computer control system can control the device.

[0048] Lock count: After receiving a lock command from the safety interlocking system, the lock count is incremented by 1. After the security verification code is entered and verified, the lock count is decremented by 1. Only when the lock count is 0 can the equipment be actually unlocked.

[0049] Operation password: The operation password entered on the interlocking device is sent to the safety interlocking system. After passing the safety interlocking system's anti-misoperation safety verification, the electromagnetic lock of the equipment can be remotely unlocked to open the equipment cabinet door for equipment maintenance operations.

[0050] Employee card number: After swiping the employee card on the safety interlock device and sending it to the safety interlock system, the electromagnetic lock of the equipment can be remotely unlocked after passing the safety interlock system's anti-misoperation safety verification to open the equipment cabinet door for equipment maintenance operations.

[0051] Biometrics: Biometrics (fingerprint / face) are identified on the safety interlock device and sent to the safety interlock system. After the safety interlock system performs a safety verification to prevent misoperation, the electromagnetic lock of the equipment is remotely unlocked to open the equipment cabinet door for equipment maintenance.

[0052] Cabinet door status: Indicates whether the cabinet door of the current device is open or closed.

[0053] The data sent by the safety interlocking system to the safety interlocking device is as follows: Unlock / Lock: The safety interlocking system sends control commands to the safety interlocking device to control the unlocking / locking of the operated equipment. After the operated equipment is unlocked, the electrical operation control circuit of the equipment is closed, and remote control can be performed; after the operated equipment is locked, the electrical operation control circuit of the equipment is open, and remote control cannot be performed.

[0054] Open / Close: The safety interlocking system sends control commands to the safety interlocking device to control the operation of the equipment cabinet door to open or close.

[0055] S50. Send a second unlocking command to the second locking device, verify the status information of the second locking device, and determine whether to execute the second unlocking command.

[0056] Optionally, after confirming that the target disconnect switch is locked and the power-off operation is completed, the system sends a second unlocking command to the second interlocking device configured on the target visual grounding switch via the same encrypted communication link. The command format and content are similar to the first unlocking command, including necessary authentication information and operating parameters. After receiving the command, the second interlocking device collects its own status information and feeds it back to the system. The status information also includes the number of locks, dry node information, and node sampling values, but the dry node of the second interlocking device is connected to the target disconnect switch position signal for real-time monitoring of the target disconnect switch's open / closed state. The system verifies the status information of the second interlocking device under conditions similar to those of the first interlocking device: zero locks, no dry node interlocking input signal, and node sampling value less than the target threshold (the target threshold is set according to the characteristics and safety requirements of the second interlocking device). Only when all conditions are met is the second unlocking command executed; otherwise, the command is not executed and an alarm is triggered.

[0057] S60. If the second unlocking command is executed, the target grounding switch will be remotely grounded and closed.

[0058] Optionally, after the system determines to execute the second unlocking command, it performs a remote grounding closing operation on the target grounding switch according to the scheduling order of the parallel control task. The system sends a command to the electrical control system to control the operating mechanism of the grounding switch, causing the grounding switch to close and connecting the target contact network to the ground, achieving safe grounding. During the operation, the system monitors the status changes of the grounding switch in real time, acquiring information such as the switch's open / closed position and grounding resistance through sensors, and feeding this information back to the operator. After the target grounding switch completes the closing operation, the system confirms the completion of the grounding operation through multiple methods. On the one hand, it detects the grounding resistance value through sensors; when the grounding resistance value is within a reasonable range, it considers the grounding successful. On the other hand, it obtains the grounding status feedback information of the equipment through communication with relevant equipment. After confirming that the grounding operation is completed, the system locks the target grounding switch through a safety interlocking system to prevent misoperation. The locking method is similar to that of the target isolating switch, locking the operating mechanism through a physical device and preventing the cabinet door of the target grounding switch from network authorization. At the same time, the system records relevant information about the grounding operation, including operation time, operator, and grounding resistance value, for subsequent query and analysis.

[0059] Optionally, the status information of both the first and second locking devices includes the number of locks, wherein the step of obtaining the number of locks of the locking devices includes: S1. In response to receiving a target control command, update the locking count of the locking device according to the target control command.

[0060] S2. Based on the number of times the updated interlocking device has been locked, determine whether the number of times the updated interlocking device has been locked matches the target control command.

[0061] S3. When the number of locks of the updated locking device matches the target control command, control the locking device to switch states according to the target control command.

[0062] Optionally, the step of updating the locking count of the locking device in response to receiving a target control command includes: According to the target control command, obtain all locking and unlocking commands of the locking device within a preset time period; Each time a lock command is executed, the lock count is incremented; each time an unlock command is executed, the lock count is decremented. Update the locking count of the locking device based on the last executed locking or unlocking command.

[0063] Optionally, the step of controlling the locking device to switch states according to the target control command when the updated locking count matches the target control command includes: When the number of lockouts of the updated interlocking device matches the target control command, obtain the dry node information and node sample value of the controlled equipment associated with the interlocking device; The locking device switches states according to the target control command if and only if there is no locking input signal at the dry node and the node sampling value is less than a preset threshold.

[0064] In this embodiment, the target control command is an unlock command or a lock command. When the locking device receives the target control command from the host computer control system, the locking device updates the number of locks. When performing multi-task collaborative work, the same locking device may receive lock commands from multiple tasks.

[0065] The system remains in a continuous monitoring state. Upon receiving a target control command, it immediately initiates the parsing process. This parsing includes identifying the command type (lock or unlock), the command source, and the identifier of the interlocking device targeted by the command, ensuring accurate understanding of the command's intent. Simultaneously, it retrieves all locking and unlocking command records from the system storage within a preset time period. The preset time period can be set according to actual needs, such as the past 24 hours or one week, to ensure sufficient information reflecting the recent operational status of the interlocking device is obtained.

[0066] Initialize a temporary variable to record changes in the number of lock counts. Iterate through all lock and unlock command records within a preset time period. Increment the temporary variable by 1 for each lock command encountered; decrement it by 1 for each unlock command encountered. During the iteration, record detailed information for each command, including execution time and the target of the operation (if multiple interlocking devices are involved), for later troubleshooting and problem identification. After completing the iteration and calculation, determine the final number of lock counts based on the timestamp of the last executed lock or unlock command. Update the current status record of the interlocking device with this final number of lock counts, and simultaneously update the relevant data in the system database to ensure data consistency and real-time performance.

[0067] Based on different target control command types, corresponding locking count matching rules are pre-set. For example, for simple lock or unlock commands, the current locking count may be required to be exactly equal to the target locking count specified in the command; for some complex operation commands, range matching of locking counts or other logical relationship judgments may be involved. The matching rules can also take into account factors such as the historical operation records of the interlocking device and the current operating mode. For example, in certain specific operating modes, the matching threshold for the locking count may be adjusted.

[0068] The current number of lock counts is retrieved from the updated interlocking device status record and compared with the relevant information in the target control command. Detailed calculations and logical judgments are performed according to preset matching rules. If the current number of lock counts meets the matching rule requirements, the match is considered successful; otherwise, the match is considered unsuccessful, and the reason for the failure is recorded, such as insufficient lock counts, excessive lock counts, or failure to conform to a specific logical relationship.

[0069] Once it is determined that the updated locking count of the interlocking device matches the target control command, the process immediately begins acquiring relevant information about the controlled equipment associated with the interlocking device. This is done through the communication interface with the controlled equipment (such as serial communication, network communication, etc.) to obtain the dry node information and node sample values ​​of the controlled equipment. The dry node information reflects certain switching states of the controlled equipment, while the node sample values ​​may be measured values ​​of physical quantities such as voltage, current, and temperature.

[0070] A detailed analysis is performed on the acquired dry node information and node sample values. A conditional judgment logic is established: the state switching condition is met only when the interlocking input signal of the dry node is absent (i.e., the dry node is in an open state) and the node sample value is less than a preset threshold. The preset threshold is set based on the actual operating parameters and safety requirements of the controlled equipment. For example, for voltage sample values, a safe voltage threshold may be set; the interlocking device is only allowed to switch states when the sampled voltage is below this threshold. If the state switching condition is met, a corresponding control signal is sent to the interlocking device, controlling it to switch states according to the target control command, such as switching from a locked state to an unlocked state or vice versa.

[0071] Example 2 Based on Example 1, this example provides a control method for a rail transit power supply and grounding safety interlocking control system, including: S10. Based on the control task, obtain the target overhead contact line to be inspected.

[0072] S20. Based on the target contact network to be inspected, obtain the target disconnect switch and the target visual grounding switch associated with the target contact network, wherein the target disconnect switch is equipped with a first interlocking device and the target visual grounding switch is equipped with a second interlocking device.

[0073] S30. Send a first unlocking command to the first locking device, verify the status information of the first locking device, and determine whether to execute the first unlocking command.

[0074] Optionally, the steps of sending a first unlocking command to the first locking device, verifying the status information of the first locking device, and determining whether to execute the first unlocking command include: S301. Send a first unlocking command to the first locking device through the safety interlocking system and obtain the status information of the first locking device, wherein the status information of the first locking device includes the number of times the first locking device is locked, dry node information and node sampling value; Specifically, upon receiving an unlock request from the control center or operating terminal, the security interlocking system first authenticates the request. It verifies the legitimacy of the request's source, for example, by confirming the operator's identity and permissions through digital certificates, usernames, and passwords, ensuring that only authorized personnel can initiate the unlock command. Based on the content of the unlock request, the security interlocking system generates a first unlock command. This command contains a unique identifier for the target first interlocking device to ensure accurate delivery to the corresponding device; it also includes specific requirements for the unlocking operation, such as unlocking time limits. The security interlocking system sends the encrypted first unlock command to the first interlocking device via a pre-established secure communication link. The communication link can use wired communication (such as Ethernet or fiber optic communication) or wireless communication (such as Wi-Fi or 4G / 5G private networks). Upon receiving the request, the first interlocking device immediately collects its own status information, including the number of locks, node information, and node sampling values. The number of lockouts records the historical number of times the interlocking device has been locked; the dry node information reflects the physical connection status of the interlocking device, such as whether the dry node is closed; the node sampling value may be the electrical parameters (such as voltage and current) or environmental parameters (such as temperature and humidity) inside the interlocking device.

[0075] S302. After receiving the locking command from the safety locking system, the first locking device increments the number of locking attempts. After the one-time password security verification is passed, the number of locking attempts is decremented. Specifically, when the first interlocking device receives a locking command from the safety interlocking system, it first verifies the validity of the command. If the locking command verification is successful, the first interlocking device increments its own locking count. The locking count is typically stored in the interlocking device's internal non-volatile memory to ensure that the data is not lost after the device is powered off or restarted. If the entered security verification code is verified successfully, the first interlocking device decrements the locking count, restoring it to the state before the locking command was executed. This indicates that the locking operation has been legally authorized, and the interlocking device can proceed with subsequent unlocking or other operations normally. That is, when multiple tasks need to operate the same device in a coordinated manner, each task independently sends a locking / unlocking command to the interlocking device. When the interlocking device receives a locking command, it increments the locking count by 1; after the security verification code is verified successfully, the locking count is decremented by 1. Only when the locking count is 0 will the actual unlocking command be executed on the controlled switch.

[0076] S303. The first unlocking command is executed if and only if the number of locking times of the first locking device is zero, the dry node locking input signal is absent, and the node sampling value is less than a preset threshold. Specifically, after obtaining the status information of the first interlocking device, the safety interlocking system first checks whether the number of lock counts is zero. If the number of lock counts is not zero, it indicates that the interlocking device may have had an incomplete locking operation or an abnormal locking situation. In this case, the unlocking command is not allowed to be executed to ensure the safety and consistency of equipment operation.

[0077] The safety interlocking system checks the status of the dry contact interlocking input signal. The dry contact interlocking input signal reflects the physical connection status between the interlocking device and external equipment, or whether certain critical conditions are met. If the dry contact interlocking input signal is present, it indicates that the external equipment may not be disconnected or certain safety conditions may not be met. In this case, the unlocking command must not be executed to prevent equipment damage or safety accidents due to misoperation.

[0078] The safety interlocking system compares the node sampling value of the first interlocking device with a preset threshold. The preset threshold is set based on the normal operating range and safety requirements of the interlocking device. For example, the threshold for electrical parameters might be determined based on the equipment's rated voltage and current, while the threshold for environmental parameters might be set based on the equipment's operating environment requirements. If the node sampling value is greater than or equal to the preset threshold, it indicates that the interlocking device may be in an abnormal operating state. In this case, the unlocking command is not allowed to avoid the risks associated with operating the equipment under abnormal conditions.

[0079] The safety interlocking system determines that the first interlocking device is in an unlockable state and sends an unlocking command signal to it only when all three conditions are met simultaneously: the number of lock attempts of the first interlocking device is zero, there is no signal from the dry node interlocking input signal, and the node sampling value is less than a preset threshold. Upon receiving the signal, the first interlocking device performs the corresponding unlocking operation, such as releasing the mechanical lock or disconnecting the interlocking circuit, thus restoring the equipment to an operable state.

[0080] S304. Otherwise, do not execute the first unlock command.

[0081] Specifically, if any one of the following conditions is not met: the first interlocking device's locking count is not zero, the dry node interlocking input signal is present, or the node sampling value is greater than or equal to a preset threshold, the safety interlocking system will determine that the first interlocking device does not meet the unlocking conditions and will not execute the first unlocking command. This prevents accidental operation. Simultaneously, the safety interlocking system will generate corresponding alarm information, detailing the reason for not executing the unlocking command, such as "Locking count is not zero, please check the device's locking status," "Dry node interlocking input signal is present, please check the external device connection," or "Node sampling value exceeds the preset threshold, the device may be in an abnormal state," etc.

[0082] S40. If the first unlocking command is executed, the electrical operation circuit is closed, and the target disconnecting switch is remotely controlled for switching.

[0083] Optionally, if the first unlocking command is executed, the steps of closing the electrical operating circuit and remotely controlling the switching of the target disconnector include: S401. Perform remote control switching and power-off operation on the isolating switch according to the dispatch order of the parallel control task; Specifically, the remote control center where the operator is located receives and controls the dispatch order through a dedicated power dispatch communication system. Upon receiving the dispatch order, the control center's computer system parses it using a preset parsing algorithm. The parsed information includes the specific number of the disconnector switch, its location, the type of operation to be performed (e.g., tripping to cut off power), and the required operation time. Since the electrical circuit of the disconnector switch has been connected via the first unlocking command, remote operation is feasible, enabling remote switching. Because the safety interlocking device disconnects the electrical operating circuit of any unlocked disconnector switch, remote switching commands cannot be executed, preventing accidental misoperation. The power dispatcher can use various methods such as point control, sequential control, and parallel control to achieve switching, improving operational efficiency.

[0084] S402. After the power-off operation is completed, the target isolating switch is locked by the safety interlocking system so that the cabinet door of the target isolating switch refuses network authorization.

[0085] Specifically, after confirming the successful de-energization of the disconnecting switch, the control center's computer system will determine whether the conditions for triggering the safety interlocking system are met based on preset logic. These conditions may include the disconnecting switch remaining in the open state for a certain period of time and the related equipment being in normal condition. If the triggering conditions are met, the control center's computer system generates a safety interlocking command, which contains the unique identifier of the target disconnecting switch and the interlocking operation requirements. The interlocking command is sent to the control unit of the safety interlocking system via a secure communication link. After receiving the command, the control unit of the safety interlocking system decrypts and verifies the command to ensure its legality and accuracy. The control unit of the safety interlocking system controls the corresponding mechanical locking device to operate according to the interlocking command, mechanically locking the target disconnecting switch. The mechanical locking device can be a lock, a baffle, etc., which physically prevents the operating mechanism of the disconnecting switch from moving, preventing accidental closing of the disconnecting switch. For example, a lock will lock the operating handle of the disconnecting switch, preventing it from turning; a baffle will block the movement path of the operating mechanism, preventing its closing action. Once the target disconnecting switch is locked by the safety interlocking system, the safety interlocking system will send a refusal authorization signal to the network authorization system. Upon receiving this signal, the network authorization system updates the cabinet door's authorization status and rejects any network-based authorization requests to open the cabinet door. After the electrical switching operation is completed, since the isolating switch is now in the unlocked state, to prevent safety risks caused by electrical switch misoperation, equipment malfunction, or local misoperation, the isolating switch can be locked via the safety interlocking system. Once the isolating switch is locked, the isolating switch cabinet door cannot be opened via network authorization.

[0086] S50. Send a second unlocking command to the second locking device, verify the status information of the second locking device, and determine whether to execute the second unlocking command.

[0087] Optionally, the steps of sending a second unlocking command to the second locking device, verifying the status information of the second locking device, and determining whether to execute the second unlocking command include: The safety interlocking system sends a second unlocking command to the second interlocking device. The status information of the second interlocking device includes the number of times the second interlocking device is locked, the dry node information, and the node sampling value. The dry node of the second interlocking device is connected to the target isolating switch position signal. After receiving a locking command from the safety interlocking system, the second interlocking device increments the number of locks. After a one-time password security verification is successful, the number of locks is decremented. The second unlocking command is executed if and only if the number of locking attempts of the second locking device is zero, the dry node locking input signal is absent, and the node sampling value is less than the target threshold. Otherwise, the second unlock command will not be executed.

[0088] Specifically, the principles for sending and receiving the second unlocking command are the same as those for the first unlocking command. The second unlocking command is sent to the second interlocking device to release the locks on all target grounding switches for this task. The unlocking process can only be executed when the number of lockouts is 0, the dry node interlocking input signal is absent (the dry node is connected to the disconnect position signal, i.e., when the disconnect switch is closed, unlocking the grounding switch is prohibited), and the node sampling value (connected to the contact network voltage; if it is determined to be energized, unlocking the grounding switch is prohibited) is less than a specified threshold. The operator remotely closes the target grounding switch according to the dispatch order to complete the grounding operation. Because the second interlocking device disconnects the electrical operating circuit of the unlocked grounding switch, remote control commands cannot be executed, preventing accidental misoperation. To improve operational efficiency, a parallel control method is generally used for one-button grounding operation.

[0089] S60. If the second unlocking command is executed, the target grounding switch will be remotely grounded and closed.

[0090] Optionally, if the second unlocking command is executed, the step of remotely grounding and closing the target grounding switch includes: According to the dispatch order of the parallel control task, the target grounding switch is remotely grounded and closed to complete the grounding operation; After the grounding operation is completed, the target grounding switch is locked by the safety interlocking system so that the cabinet door of the target grounding switch refuses network authorization.

[0091] Specifically, after the grounding operation is completed, since the target grounding switch is now in the unlocked state, to prevent safety risks caused by remote operator misoperation, equipment malfunction, or local misoperation, the grounding switch is locked through a safety interlocking system. Once the grounding switch is locked, the grounding switch cabinet door cannot be opened via network authorization.

[0092] Optionally, if the second unlocking command is executed, the following steps are performed after the remote grounding closing of the target grounding switch. This step is the operation phase and specifically includes: S701. After the authorized personnel confirm that the target isolating switch is open and locked in the open position, and the target grounding switch is closed and locked in the closed position, a one-time password and work permit order are sent to the maintenance personnel. The safety interlocking system uses an encryption algorithm to generate a safety verification code and transmits it to the first interlocking device and the second interlocking device through encrypted communication.

[0093] S702. After receiving the one-time password and work permit order, the maintenance personnel begin to carry out maintenance work on the target overhead contact line.

[0094] S703. After maintenance work is completed, the maintenance personnel will input a one-time password into the first locking device and the second locking device. After the first locking device and the second locking device perform encrypted calculation and verification, the number of lock counts will be deducted, and the security verification code will be collected and destroyed.

[0095] S704. Authorized personnel are only allowed to revoke the work permit order after both the first and second locking devices have completed the security verification of the one-time password.

[0096] Optionally, both the first and second locking devices integrate a keypad module, a voice prompt module, a biometric identification module, an electromagnetic lock control module, and a GPIO module.

[0097] Optionally, the steps for generating a security verification code include: Apply the SHA-256 algorithm to the original input string s to generate a fixed-length hash value. Based on the permutation vector of the preset value, the bytes of the hash value are rearranged to generate a new disordered hash value; Based on the original length of the original input string, extract bytes of the original length from the starting position of the disordered hash value to form an intermediate byte sequence; Iterate through each byte of the intermediate byte sequence, perform a modulo operation on the size of the printable character set for each byte's value, use the result as an index, and retrieve the corresponding character from the printable character set as the final security verification code.

[0098] The execution process of the above-mentioned security verification code generation algorithm can be broken down into the following four core mathematical steps: Step 1: Secure Hash Code Generation Apply the SHA-256 algorithm to the original input string S to generate a hash value H of fixed length 32 bytes. ; Step 2: Hash code permutation and rearrangement: The bytes of the hash value H are rearranged using a predefined permutation vector M to generate a new out-of-order hash value. For each byte in ... Its value is determined by H. The bytes at the specified index position are determined. In the formula, represents the index in H. byte.

[0099] Step 3: Sequence truncation: Based on the length L of the original input string S, from the disordered hash value L bytes are extracted from the starting position to form the intermediate byte sequence C.

[0100] ; That is, for all ,have .

[0101] Step 4: Character Mapping Traverse each byte in the intermediate byte sequence C The value of each byte is moduloed by the size N of the printable character set P. The result is used as an index to retrieve the corresponding character from the character set P, which is then used as part of the final verification code V.

[0102] ,in .

[0103] here, It is interpreted as an unsigned integer value between 0 and 255.

[0104] Combining the above steps, we can represent the entire generation process from input S to output V as a unified formula. For the j-th character of the final verification code V... (in Its generation formula is as follows:

[0105] in: H is the result of the first step.

[0106] This indicates that the index in H is taken as The bytes, which correspond to the combination of the second and third steps (i.e. ).

[0107] P corresponds to the modulo operation and character lookup in step four.

[0108] This formula can precisely describe the deterministic generation process of any input string S into its unique corresponding security verification code V.

[0109] Application of secure CAPTCHA generation algorithms in secure interlocking systems: String to be encrypted ; D1: Represents the device ID to be encrypted. Different device IDs are different. The device ID in the safety interlocking system comes from the device ID of the safety interlocking device and is stored in the database through configuration.

[0110] R1: A 6-digit random one-time password randomly generated by the security interlocking system, consisting of characters [0,9], [a,z], and [A,Z].

[0111] S1: The string formed by combining D1 and R1.

[0112] V1: This is the security verification code, which is a string obtained by encrypting S1. The security interlocking system transmits V1 to the security interlocking device through TLS-based encrypted secure communication. At the same time, the one-time password R1 is sent to the operator's handheld device through the SMS gateway.

[0113] Application of security verification code generation algorithms in security interlocking devices (first interlocking device and second interlocking device): The string to be encrypted is S2 = D2 + R2 D2: Represents the unique device ID of the safety interlocking device. Generally, the device's hardware code is used as the device ID, which consists of 8 to 32 characters. Different devices have different IDs. D1=D2.

[0114] R2: A one-time password entered by CP through the security interlocking device, R2=R1.

[0115] S2: The string formed by combining D2 and R2.

[0116] V2: This is the security verification code, which is obtained by encrypting the string S2. If V2 equals V1, it means that the one-time password entered by the operator is correct and valid; otherwise, the input data is considered invalid.

[0117] The aforementioned encryption algorithms prevent critical security data from being leaked or tampered with, thereby ensuring system security.

[0118] After maintenance personnel have completed their maintenance operations, it is usually necessary to disconnect the grounding and disconnect the power.

[0119] Removing the grounding mainly includes the following steps: Unlocking: The safety interlocking system releases all grounding switches for this task by sending an unlocking command to the second interlocking device. If multiple tasks are operating concurrently, the unlocking action can only be executed when the equipment has been locked 0 times. This prevents safety risks to other workers.

[0120] Grounding Removal: The operator remotely trips the grounding switch according to the dispatch order, completing the grounding removal operation. Because the safety interlock device disconnects the electrical operating circuit of the unlocked grounding switch, remote control commands cannot be executed, preventing accidental misoperation. To improve operational efficiency, a parallel control method is generally used for one-button grounding removal.

[0121] Grounding Locking: After the grounding removal operation is completed, the grounding switch is now in the unlocked state. To prevent safety risks caused by remote operator misoperation, equipment malfunction, or local misoperation, the grounding switch can be locked using the safety interlocking system. Once the grounding switch is locked, the grounding switch cabinet door cannot be opened via network authorization.

[0122] The main steps to disconnect the power are as follows: Unlocking: The safety interlocking system unlocks all disconnect switches for this task by sending an unlock command to the first interlocking device. If multiple tasks are operating concurrently, the unlocking action can only be performed when the equipment has been locked 0 times. This prevents safety risks to other operators.

[0123] Power-on switching: The power dispatcher remotely controls the switching of disconnecting switches according to the dispatch order to complete the power-on operation. Because the safety interlocking device disconnects the electrical operating circuit of any disconnecting switch that has not been unlocked, the remote switching command cannot be executed, preventing accidental misoperation. The power dispatcher can use various methods such as point control, sequential control, and parallel control to achieve switching, improving operational efficiency.

[0124] Locking and Isolation: After the switching operation is completed, the isolating switch is now in the unlocked state. To prevent safety risks caused by accidental operation of the power dispatcher, equipment malfunction, or local misoperation, the isolating switch is locked through a safety interlocking system. Once the isolating switch is locked, the isolating switch cabinet door cannot be opened via network authorization.

[0125] Example 3 Based on Example 1, this example provides a visual grounding system, including: The host computer control system is configured to create and control tasks, and obtain the target contact network to be inspected based on the control tasks. A safety interlocking system is configured to acquire a target disconnecting switch and a target visual grounding switch associated with the target contact network to be inspected, wherein the target disconnecting switch is equipped with a first interlocking device and the target visual grounding switch is equipped with a second interlocking device. Send a first unlocking command to the first locking device, verify the status information of the first locking device, and determine whether to execute the first unlocking command; If the first unlocking command is executed, the electrical operating circuit is closed, and the target disconnect switch is remotely controlled for switching. Send a second unlocking command to the second locking device, verify the status information of the second locking device, and determine whether to execute the second unlocking command; If the second unlocking command is executed, the target grounding switch will be remotely grounded and closed.

[0126] The above are merely preferred embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A safety interlocking control system for power supply and grounding in rail transit, characterized in that, include: The host computer control system is configured to create and control tasks, and obtain the target contact network to be inspected based on the control tasks. A safety interlocking system is configured to acquire a target disconnecting switch and a target visual grounding switch associated with the target contact network to be inspected, wherein the target disconnecting switch is equipped with a first interlocking device and the target visual grounding switch is equipped with a second interlocking device. Send a first unlocking command to the first locking device, verify the status information of the first locking device, and determine whether to execute the first unlocking command; If the first unlocking command is executed, the electrical operating circuit is closed, and the target disconnect switch is remotely controlled for switching. Send a second unlocking command to the second locking device, verify the status information of the second locking device, and determine whether to execute the second unlocking command; If the second unlocking command is executed, the target grounding switch will be remotely grounded and closed.

2. A control method for a rail transit power supply and grounding safety interlocking control system, characterized in that, include: Based on the control task, obtain the target overhead contact line to be inspected; Based on the target contact network to be inspected, obtain the target disconnect switch and the target visual grounding switch associated with the target contact network. The target disconnect switch is equipped with a first interlocking device, and the target visual grounding switch is equipped with a second interlocking device. Send a first unlocking command to the first locking device, verify the status information of the first locking device, and determine whether to execute the first unlocking command; If the first unlocking command is executed, the electrical operating circuit is closed, and the target disconnect switch is remotely controlled for switching. Send a second unlocking command to the second locking device, verify the status information of the second locking device, and determine whether to execute the second unlocking command; If the second unlocking command is executed, the target grounding switch will be remotely grounded and closed.

3. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 2, characterized in that, The status information of both the first and second locking devices includes the number of lock counts. The step of obtaining the number of lock counts for each locking device includes: In response to receiving a target control command, the locking count of the locking device is updated according to the target control command; Based on the number of times the updated interlocking device has locked, determine whether the number of times the updated interlocking device has locked matches the target control command. When the number of lockouts of the updated locking device matches the target control command, the locking device is controlled to switch states according to the target control command.

4. The control method of the rail transit power supply and grounding safety interlocking control system according to claim 3, characterized in that, The step of updating the locking count of the locking device in response to receiving a target control command includes: According to the target control command, obtain all locking and unlocking commands of the locking device within a preset time period; Each time a locking command is executed, the number of locking counts is incremented; each time an unlocking command is executed, the number of locking counts is decremented, and the locking count of the locking device is updated in real time.

5. The control method for the rail transit power supply and grounding safety interlocking control system according to claim 3, characterized in that, The step of controlling the locking device to switch states according to the target control command when the updated locking count matches the target control command includes: When the number of lockouts of the updated interlocking device matches the target control command, obtain the dry node information and node sample value of the controlled equipment associated with the interlocking device; The locking device switches states according to the target control command if and only if there is no locking input signal at the dry node and the node sampling value is less than a preset threshold.

6. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 2, characterized in that, The steps of sending a first unlocking command to the first locking device, verifying the status information of the first locking device, and determining whether to execute the first unlocking command include: The first unlocking command is sent to the first locking device through the safety interlocking system to obtain the status information of the first locking device. The status information of the first locking device includes the number of times the first locking device has been locked, the dry node information, and the node sampling value. After receiving the locking command from the safety interlocking system, the first interlocking device increments the number of locks. After the security verification code is entered and verified, the number of locks is decremented, and the number of locks of the interlocking device is updated in real time. The first unlocking command is executed if and only if the number of locking attempts of the first locking device is zero, the dry node locking input signal is absent, and the node sampling value is less than a preset threshold. Otherwise, the first unlock command will not be executed.

7. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 2, characterized in that, The steps of sending a second unlocking command to the second locking device, verifying the status information of the second locking device, and determining whether to execute the second unlocking command include: The safety interlocking system sends a second unlocking command to the second interlocking device. The status information of the second interlocking device includes the number of times the second interlocking device is locked, the dry node information, and the node sampling value. The dry node of the second interlocking device is connected to the target isolating switch position signal. After receiving the locking command from the safety locking system, the second locking device increments the number of locks. After the security verification code is entered and verified, the number of locks is decremented, and the locking count of the locking device is updated in real time. The second unlocking command is executed if and only if the number of locking attempts of the second locking device is zero, the dry node locking input signal is absent, and the node sampling value is less than the target threshold. Otherwise, the second unlock command will not be executed.

8. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 2, characterized in that, After the remote control switching operation is completed, the target disconnect switch is locked by the safety interlocking system so that the cabinet door of the target disconnect switch refuses network authorization; After performing a remote grounding closing operation and completing the grounding operation, the target grounding switch is locked through a safety interlocking system so that the cabinet door of the target grounding switch refuses network authorization.

9. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 2, characterized in that, If the second unlocking command is executed, the steps following the remote grounding closing of the target grounding switch include: After the authorized personnel confirm that the target isolating switch is open and locked in the open position, and the target grounding switch is closed and locked in the closed position, a one-time password and work permit order are sent to the maintenance personnel. The safety interlocking system uses an encryption algorithm to generate a safety verification code and transmits it to the first interlocking device and the second interlocking rotating device through encrypted communication. After receiving a one-time password and work permit, maintenance personnel began maintenance work on the target overhead contact line. After maintenance work is completed, the maintenance personnel will input a one-time password into the first and second locking devices. After the first and second locking devices perform encrypted calculations and verifications, the number of lock counts will be deducted, and the security verification code will be collected and destroyed. Only after both the first and second locking devices have successfully completed the one-time password security verification can authorized personnel revoke the work permit order.

10. The control method of the rail transit power supply and grounding safety interlocking control system as described in claim 9, characterized in that, The steps for generating a security verification code include: Apply the SHA-256 algorithm to the original input string to generate a fixed-length hash value. Based on the permutation vector of the preset value, the bytes of the hash value are rearranged to generate a new disordered hash value; Based on the original length of the original input string, extract bytes of the original length from the starting position of the disordered hash value to form an intermediate byte sequence; Iterate through each byte of the intermediate byte sequence, perform a modulo operation on the size of the printable character set for each byte's value, use the result as an index, and retrieve the corresponding character from the printable character set as the final security verification code.

Images