Cloud interlocking and traditional interlocking dual-system operation architecture and method

Abstract

The invention relates to the technical field of rail transit signal control, in particular to a cloud interlocking and traditional interlocking dual-system operation architecture and method, and the architecture comprises a cloud interlocking arithmetic unit, a traditional interlocking arithmetic unit, a shared driving execution unit and a system activation control unit. The system activation control unit is used for receiving human-computer interaction information and outputting a control right signal to the arithmetic unit based on the human-computer interaction information; the cloud interlocking operation unit and the traditional interlocking operation unit are mutually redundant, and an activated end with a control right and a non-activated end without the control right are determined based on a control right signal; and the shared driving and acquiring execution unit establishes communication connection with the cloud interlocking operation unit and the traditional interlocking operation unit simultaneously through a safety communication protocol, and is used for acquiring the state of the trackside equipment and driving the trackside equipment to act based on a control command of an activated end. According to the dual-system operation architecture, dual-system safety redundancy and accurate control right distribution are achieved, and the traffic safety in the transitional period is guaranteed.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of rail transit signal control technology, in particular to a cloud interlocking and traditional interlocking dual-system operation architecture and method. BACKGROUND

[0002] Traditional rail transit computer interlocking systems are deployed in stations, and interlocking machines are usually based on specific, closed hardware and operating system platforms, and the signal system is costly to reform, upgrade and maintain. The cloud interlocking system is a new generation of interlocking technology, which migrates the interlocking operation unit from the station side to the cloud control center, uses general servers, virtualization technology and cloud computing operating systems, realizes resource pooling and elastic scaling, significantly reduces the life cycle cost, and is conducive to cross-professional system integration and sustainable development.

[0003] However, in the process of evolving from traditional interlocking to cloud interlocking, the introduction of cloud interlocking technology in the traditional interlocking system station will result in the operation of traditional interlocking and cloud interlocking dual systems in the same control area. In addition, during the process of transforming the old line into a cloud interlocking system, there will also be a situation of two systems running in the transformation area for cloud interlocking and other areas still using traditional interlocking. Because traditional interlocking and cloud interlocking belong to two different physical deployment nodes of station local and cloud control center, both have control ability to trackside equipment. If there is no reliable control right allocation mechanism, it is easy to output control instructions at the same time, causing serious safety hazards; at the same time, if there is no strict mutual exclusion logic in the control right switching process, there will be a control right vacuum or instruction conflict, which cannot guarantee the continuity and safety of train control. SUMMARY

[0004] The purpose of the present application is to solve the technical problem of control right conflict in the transition period from traditional interlocking to cloud interlocking in related technology, to build a cloud interlocking and traditional interlocking dual-system operation architecture and method that can realize safe redundancy of dual systems, precise allocation of control rights, and sharing of trackside equipment driving and sampling, to ensure the safety of train operation in the transition period.

[0005] To solve the above technical problems, the technical scheme adopted by the present application is: The application provides a cloud interlocking and traditional interlocking dual-system operation architecture, which comprises a cloud interlocking operation unit arranged at a cloud control center side, a traditional interlocking operation unit arranged at a station side, a shared drive and capture execution unit and a system activation control unit; the system activation control unit is used for receiving human-computer interaction information and outputting a control right signal to the cloud interlocking operation unit and the traditional interlocking operation unit based on the human-computer interaction information; the cloud interlocking operation unit and the traditional interlocking operation unit are redundant to each other, and the activated end with the control right and the unactivated end without the control right are determined based on the control right signal; the shared drive and capture execution unit simultaneously establishes a communication connection with the cloud interlocking operation unit and the traditional interlocking operation unit through a secure communication protocol, and is used for capturing a trackside device state and driving a trackside device action based on a control command of the activated end.

[0006] Optionally, the cloud interlocking operation unit and the traditional interlocking operation unit are further connected with an external communication interface, and the external communication interface is used for allocating a unified external network identity identifier to the cloud interlocking operation unit and the traditional interlocking operation unit.

[0007] Optionally, the unified external network identity identifier comprises a service ID and a service IP address; the service ID is dynamically bound with the activated end, and is held by the operation unit currently having the control right and is used for external service communication.

[0008] Optionally, the system activation control unit is a physical knob or button arranged at an IBP panel of the station, and a state signal of the physical knob or button is captured as the control right signal through an IO board card, and the output control right signal is a hard-wire mutual exclusion signal.

[0009] Optionally, the internal control output of the unactivated end in the cloud interlocking operation unit and the traditional interlocking operation unit is forced to guide a safe state; the forced guiding safe state is achieved by cutting off a drive output or making a relay in a de-energized state.

[0010] Optionally, the shared drive and capture execution unit is further used for simultaneously sending the captured trackside device state to the cloud interlocking operation unit and the traditional interlocking operation unit.

[0011] Optionally, the executable programs running in the cloud interlocking operation unit and the traditional interlocking operation unit are respectively generated based on an interlocking service logic source file through differential compilation configuration, and the executable programs comprise a first executable program suitable for a traditional interlocking platform and a second executable program suitable for a cloud interlocking platform.

[0012] The application also provides a cloud interlocking and traditional interlocking dual-system operation method, which is applied to the cloud interlocking and traditional interlocking dual-system operation architecture and comprises the following steps: a system activation control unit receives human-computer interaction information and outputs a control right signal to a cloud interlocking operation unit and a traditional interlocking operation unit based on the human-computer interaction information, and determines an activated end with the control right and an inactivated end without the control right; the activated end binds a unified service ID and a service IP address, exercises the control right over trackside equipment, and communicates with an external system; internal control output of the inactivated end is forced to direct a safe state; and a shared drive and execution unit collects trackside equipment states and drives trackside equipment to act based on a control command of the activated end.

[0013] Optionally, in the process of switching the operation unit from the inactivated end to the activated end, the original activated end forces the internal control output to direct a safe state and releases the service ID and the service IP address; and the operation unit newly becoming the activated end outputs a control command to the trackside equipment and communicates with the external system based on an external communication interface after performing an initialization and a power-on unlocking safety process.

[0014] Optionally, the cloud interlocking operation unit and the traditional interlocking operation unit both receive the trackside equipment states from the shared drive and execution unit and perform interlocking logic operation.

[0015] The application has the following advantages: 1. The system activation control unit outputs a hard-wired exclusive control right signal, clearly determines the activated state and the inactivated state of the dual operation units, avoids the conflict of simultaneously outputting control instructions from the dual systems from the physical layer, forces the internal control output of the inactivated end to direct a safe state, which can be cutting off the drive output or making the relay in a loss of excitation state, overcomes the interference of unauthorized instructions on the trackside equipment, and overcomes the problems of chaotic control right distribution and lack of safety state management of the dual systems. Moreover, the executable programs of the dual operation units are generated by differentiating compilation based on the same interlocking service logic source file, which ensures the functional consistency of the traditional interlocking platform and the cloud interlocking platform, does not need to separately develop service logic for the dual systems, and greatly reduces the program development and verification cost.

[0016] 2. The shared drive and execution unit synchronously sends the trackside equipment states to the dual operation units, guarantees the consistency of the operation input data of the dual operation units, avoids the logic operation deviation caused by the difference in data sources, and provides a unified data benchmark for interlocking safety judgment.

[0017] 3. The external communication interface allocates a unified service ID and a service IP address for the dual operation units and dynamically binds the service ID and the service IP address with the activated end, so that the external system only needs to identify a unique communication identity and does not need to adapt the interfaces and identities of different systems, overcomes the problems of chaotic external communication identity and mismatched service instructions of the dual systems operating in parallel, and ensures that the collaborative control logic with external systems such as CTC and ATO is not interrupted. BRIEF DESCRIPTION OF DRAWINGS

[0018] Other features, objects, and advantages of the application will become more apparent from the following detailed description when read in connection with the following drawings. The drawings are provided for purposes of illustration only and merely depict preferred embodiments of the present application. The drawings shown throughout the specification are not necessarily drawn to scale.

[0019] Figure 1 A schematic diagram of a cloud interlocking and traditional interlocking dual system operation architecture in the present application; Figure 2 A flowchart of a cloud interlocking and traditional interlocking dual system operation method in the present application. DETAILED DESCRIPTION

[0020] In order to make the objects, technical solutions and advantages of the present application clearer, further detailed description will be made to the present application in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only the best mode of the present application, which are used to explain the present application and do not limit the protection scope of the present application. All other embodiments obtained by those skilled in the art without creative labor fall within the protection scope of the present application.

[0021] As an embodiment, as shown in Figure 1 The present application provides a cloud interlocking and traditional interlocking dual system operation architecture, which comprises a cloud interlocking operation unit deployed at a cloud control center side, a traditional interlocking operation unit deployed at a station side, a shared drive and capture execution unit, a system activation control unit and an external communication interface.

[0022] The system activation control unit is used for receiving human-computer interaction information and outputting a control right signal to the cloud interlocking operation unit and the traditional interlocking operation unit based on the human-computer interaction information. The system activation control unit is a physical knob or button arranged on an IBP plate at the station. The state signal of the physical knob or button is collected as the control right signal through an IO board card. The output control right signal is a hard-wire mutual exclusion signal.

[0023] Specifically, the core carrier of the unit is a physical knob or button on the IBP plate (integrated backup plate) at the station. The on-site operation and maintenance personnel or dispatchers manually operate according to actual operation needs, such as cloud interlocking pilot, traditional interlocking bottoming, system switching, etc., to complete the input of human-computer interaction instructions. When the operator rotates the knob or presses the button, the physical contact state will change (such as gear switching of the knob, on-off switching of the button). The state change will be collected by the connected IO board card in real time, and converted into an initial control instruction in the form of an electrical signal, to complete the conversion from manual operation to electrical signal.

[0024] The IO board card transmits the collected initial electrical signal to the internal logic module of the system activation control unit. The module checks the validity of the signal, such as excluding invalid signals caused by contact jitter or false contact, and generates a corresponding control signal based on the preset logic. Since the unit itself has a hard-wired mutual exclusion logic design, the control signal output naturally has the mutual exclusion property of being one or the other. That is, at the same time, only one of the cloud interlocking operation unit or the traditional interlocking operation unit can send an activation signal, and the other can send a non-activation signal, which prevents the possibility of both systems obtaining control at the same time from the bottom logic.

[0025] The processed hard-wired mutual exclusion control signal is transmitted to the cloud interlocking operation unit and the traditional interlocking operation unit through independent hard-wired links. The operation unit receiving the activation signal becomes the activated end with control, and can normally output trackside device control instructions. The operation unit receiving the non-activation signal automatically triggers the internal control output safety guiding mechanism and cannot send control instructions externally. At the same time, the mechanical state of the physical rotary knob or button remains at the current gear, ensuring the continuous and stable output of the control signal until the operator manually switches again, ensuring the continuous reliability of the control state.

[0026] The cloud interlocking operation unit and the traditional interlocking operation unit are redundant, and the activated end with control and the non-activated end without control are determined based on the control signal. The internal control output of the non-activated end in the cloud interlocking operation unit and the traditional interlocking operation unit is forced to guide to a safe state. The way to achieve the forced safety state includes cutting off the drive output or making the relay in a de-energized state.

[0027] Further, the executable programs of the cloud interlocking operation unit and the traditional interlocking operation unit are generated based on the interlocking business logic source file through differential compilation configuration. The executable programs include a first executable program suitable for the traditional interlocking platform and a second executable program suitable for the cloud interlocking platform.

[0028] The shared drive execution unit establishes communication connections with the cloud interlocking operation unit and the traditional interlocking operation unit through a secure communication protocol, collects trackside device states, and drives trackside device actions based on the control commands of the activated end. It also sends the collected trackside device states to the cloud interlocking operation unit and the traditional interlocking operation unit.

[0029] The external communication interface is used to allocate a unified external network identity to the cloud interlocking operation unit and the traditional interlocking operation unit. The unified external network identity includes a business ID and a business IP address. The business ID is dynamically bound to the activated end and is held by the operation unit currently having control and used for external business communication.

[0030] Specifically, in the dual-system operation architecture of the cloud interlocking and the traditional interlocking, to solve the problems of external communication identity confusion and service connection interruption when the dual systems are running in parallel, a dynamic communication management mechanism of "floating IP" is adopted for the unified service IP address of the external communication interface, and a unified external network identity is used to realize the uniqueness of the external communication subject. The dual systems share the same set of external service identity, in which the service ID is a fixed identity, used by external systems to identify the interlocking service subject of the control area, such as the CTC dispatching system and the interlocking system of adjacent stations. The service IP address is not fixedly bound to the cloud interlocking operation unit or the traditional interlocking operation unit, and follows the configuration principle of active end exclusive and non-active end release. In the stable operation stage of the system, only the network interface corresponding to the active end operation unit that currently has control authority is configured and bound with the service IP address. At this time, the active end operation unit can rely on the service IP and the unified identity ID to establish a stable service communication link with the external system, receive dispatching instructions, and feedback equipment status. Correspondingly, the network interface of the non-active end operation unit is not configured with the service IP, and its external network interface only retains the internal operation and maintenance communication address, and cannot establish a connection with the external system as a service subject, thereby eliminating the conflict of the dual systems simultaneously communicating externally from the network level.

[0031] Further, when the control authority is switched by the system activation control unit, such as the cloud interlocking unit switching from non-active to active and the traditional interlocking unit taking over the control authority, the "floating IP" mechanism will automatically perform the unbinding and rebinding operations of the service IP, realizing seamless migration of external communication connection, including: In the IP unbinding stage of the original active end, after the system activation control unit outputs the control authority switching signal, the original active end operation unit first triggers the internal control output safety guide process, which includes cutting off the drive output or making the relay in a loss of excitation state. The IP unbinding program of the network interface is started synchronously, the service IP address bound to the network interface is unconfigured, and the network communication port corresponding to the IP is released. At the same time, the IP release completion confirmation signal is fed back to the external communication interface, ensuring that the original active end no longer has the network identity of service communication. In the IP reconfiguration stage of the new active end, after receiving the IP release confirmation signal of the original active end, the external communication interface drives the network interface of the new active end operation unit to complete the reconfiguration and binding of the service IP address, and dynamically associates the unified identity ID with the hardware link of the new active end. After the IP configuration is completed, the new active end needs to perform safety processes such as initialization and power-on unlocking to ensure that there is no error output due to historical data or state asynchronization. After the network link self-checking is passed, the new active end operation unit can rely on the service IP and the unified identity ID to automatically take over the original external service communication connection, realizing the non-perception migration of the communication link without manual switching of the communication docking address by the external system.

[0032] This embodiment fundamentally eliminates the security risks caused by logical discrepancies between the two systems by using differential compilation based on the same source code, simplifies data configuration and maintenance, and achieves absolutely consistent control logic. Through a unified identity / IP and a "floating IP" mechanism, a single, stable communication interface is presented to external systems, allowing them to adapt without any modifications. This greatly reduces the complexity of system integration and achieves a transparent and compatible technical effect.

[0033] The activation control mechanism based on physical hardwires, combined with strict state management of the activated / deactivated ends, ensures the mutual exclusion and safe switching of control rights, effectively preventing the risk of simultaneous output from both systems and guaranteeing the security and reliability of control. The shared drive and acquisition execution unit architecture avoids redundant investment in trackside equipment, significantly reducing engineering costs and complexity during the modification and transition period, and achieving high resource reuse. This architecture provides a smooth transition path from traditional interlocking to cloud interlocking, supporting on-demand, regional modification and switching, maximizing the continuity and safety of rail transit operations.

[0034] As one implementation method, a traditional interlocking host, or traditional interlocking computing unit, is installed indoors at the station equipment room. Simultaneously, a cloud interlocking virtual machine instance, or cloud interlocking computing unit, is deployed at a remote cloud control center. The drive acquisition for station equipment such as trackside relays, signals, and switch machines is unified into a shared drive acquisition execution unit. This unit communicates with both the traditional interlocking host and the cloud interlocking instance simultaneously via a redundant network.

[0035] A system activation knob is added to the station's IBP panel. Its output is collected by the shared drive acquisition execution unit's security I / O board and sent to both the traditional interlocking host and the cloud interlocking instance. The activation status of the traditional interlocking host and the cloud interlocking instance is communicated to the shared drive acquisition execution unit via the network. A unique interlocking ID (business ID) and business IP address (one each for networks A and B) are assigned to the station: 192.168.1.10 and 192.168.2.10. Initially, when the knob is turned to "cloud interlocking," the cloud interlocking instance is activated, its network card is configured with IPs 192.168.1.10 and 192.168.2.10, and it communicates normally with the ATS system. The traditional interlocking host is deactivated; its internal logic operations are normal, but all outputs are masked, and it is not bound to a business ID or business IP address.

[0036] When system switching is needed, the dispatcher turns the knob to the "traditional interlocking host". The shared drive execution unit detects the change in knob state and sends the button state to the traditional interlocking host and the cloud interlocking instance. The cloud interlocking instance detects the disappearance of the activation signal and immediately directs all its outputs to the safe side, disconnects the external communication connection and deletes the configurations of 192.168.1.10, 192.168.2.10 on the network card. The shared drive execution unit receives the safe side data and stops the external output. At the same time, the traditional interlocking host is activated. It first performs safety processes such as initialization and power-on interlocking, binds IP 192.168.1.10, 192.168.2.10 on its communication board and establishes an external communication connection. After completing the power-on interlocking, it can send control commands to the shared drive execution unit to the permissive side and output permissive side data externally. After the shared drive execution unit confirms that the cloud interlocking is the activated end, it starts executing its commands. At this point, the control right switching is completed. The ATS system only perceives a short interruption in communication with IP 192.168.1.10, 192.168.2.10 and automatically recovers without any manual intervention.

[0037] The application also provides a cloud interlocking and traditional interlocking dual-system operation method, which is applied to the cloud interlocking and traditional interlocking dual-system operation architecture and refers to Figure 2 , and comprises the following steps. S1, the system activation control unit receives human-computer interaction information and outputs a control right signal to the cloud interlocking operation unit and the traditional interlocking operation unit based on the human-computer interaction information, determines the activated end with control right and the unactivated end without control right.

[0038] S2, the activated end binds a unified service ID and service IP address, exercises control right over wayside equipment and communicates with external systems; the internal control output of the unactivated end is forcibly directed to the safe state.

[0039] S21, in the process of switching from the unactivated end to the activated end in the operation unit, the original activated end forcibly directs its internal control output to the safe state and releases the service ID and service IP address; the operation unit that becomes the activated end outputs control commands to the wayside equipment and communicates externally based on the external communication interface after performing initialization and power-on interlocking safety processes.

[0040] S22, the cloud interlocking operation unit and the traditional interlocking operation unit both receive the wayside equipment state from the shared drive execution unit and perform interlocking logic operation.

[0041] S3, the shared drive execution unit collects the wayside equipment state and drives the wayside equipment action based on the control commands of the activated end.

[0042] Compared with the prior art, the application based on the above embodiment has the following beneficial effects: 1. The system activates the control unit by outputting hard-wired mutually exclusive control signals, clearly defining the active and inactive states of the two arithmetic units. This physically prevents conflicts caused by simultaneous control command outputs from both systems. Simultaneously, the inactive end's internal control output is forcibly guided to a safe state, which can be achieved by cutting off drive outputs or demagnetizing relays. This overcomes interference from unauthorized commands on trackside equipment and addresses the issues of chaotic control allocation and lack of safety state management in the dual systems. Furthermore, the executable programs for both arithmetic units are compiled and generated differently from the same interlocking business logic source file. This ensures functional consistency between traditional and cloud interlocking platforms while eliminating the need for separate business logic development for both systems, significantly reducing program development and verification costs.

[0043] 2. The shared drive and acquisition execution unit synchronously sends the trackside equipment status to the dual calculation unit to ensure the consistency of the calculation input data of the two, avoid logical operation deviations caused by differences in data sources, and provide a unified data benchmark for interlocking safety judgment.

[0044] 3. The external communication interface assigns a unified business ID and business IP address to the two computing units and dynamically binds them to the activation end. This allows external systems to identify only the unique communication identity without needing to adapt to the interfaces and identifiers of different systems. This overcomes the problems of confused external communication identities and mismatched business instructions when the two systems are running in parallel, and ensures that the collaborative control logic with external systems such as CTC and ATO is not interrupted.

[0045] The specific embodiments described above are preferred embodiments of the dual-system operation architecture and method of cloud interlocking and traditional interlocking of this application, and are not intended to limit the specific implementation scope of this application. The scope of this application includes but is not limited to the specific embodiments described above. All equivalent changes made in accordance with the shape and structure of this application are within the protection scope of this application.

Claims

1. A dual-system operating architecture combining cloud-based interlocking and traditional interlocking, characterized in that, include: The system comprises a cloud-based interlocking calculation unit deployed at the cloud control center, a traditional interlocking calculation unit deployed at the station, a shared drive and acquisition execution unit, and a system activation control unit. The system activation control unit receives human-machine interaction information and outputs control authority signals to the cloud-based and traditional interlocking calculation units based on this information. The cloud-based and traditional interlocking calculation units are redundant and determine the activated end with control authority and the inactive end without control authority based on the control authority signals. The shared drive and acquisition execution unit establishes communication connections with both the cloud-based and traditional interlocking calculation units simultaneously through a secure communication protocol. It is used to collect the status of trackside equipment and drive the trackside equipment to operate based on the control commands from the activated end.

2. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 1, characterized in that, It also includes an external communication interface, which is used to assign a unified external network identity to the cloud interlocking computing unit and the traditional interlocking computing unit.

3. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 2, characterized in that, The unified external network identity includes a service ID and a service IP address; the service ID is dynamically bound to the activated terminal and is held by the computing unit that currently has control and used for external business communication.

4. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 1, characterized in that, The system activation control unit is a physical knob or button located on the station's IBP panel. The status signal of the physical knob or button is acquired by the IO board as a control signal, and the output control signal is a hard-wired mutual exclusion signal.

5. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 1, characterized in that, The internal control outputs of the inactive terminals in the cloud interlocking calculation unit and the traditional interlocking calculation unit are forcibly guided to a safe state. Methods to achieve a forced guided safe state include: cutting off the drive output or demagnetizing the relay.

6. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 1, characterized in that, The shared drive and acquisition execution unit is also used to simultaneously send the acquired trackside equipment status to both the cloud interlocking calculation unit and the traditional interlocking calculation unit.

7. The dual-system operation architecture of cloud interlocking and traditional interlocking as described in claim 1, characterized in that, The executable programs running on the cloud interlocking computing unit and the traditional interlocking computing unit are generated separately based on the interlocking business logic source files through differentiated compilation configurations. The executable programs include a first executable program suitable for the traditional interlocking platform and a second executable program suitable for the cloud interlocking platform.

8. A method for operating a dual-system of cloud interlocking and traditional interlocking, applied to the dual-system operating architecture of cloud interlocking and traditional interlocking as described in any one of claims 1 to 7, characterized in that, include: The system activation control unit receives human-machine interaction information and outputs control authority signals to the cloud interlocking calculation unit and the traditional interlocking calculation unit based on the human-machine interaction information to determine the activated end with control authority and the inactive end without control authority. The activated end is bound to a unified business ID and business IP address, exercises control over the trackside equipment, and communicates with external systems; the internal control output of the inactive end is forcibly directed to a safe state. The shared drive and acquisition execution unit collects the status of trackside equipment and drives the trackside equipment to operate based on the control commands of the activated end.

9. A method for operating a dual-system of cloud interlocking and traditional interlocking according to claim 8, characterized in that, During the process of switching the computing unit from an inactive end to an active end, the original active end forces its internal control output to a safe state and releases the service ID and service IP address. After executing the initialization and power-on unlocking safety procedures, the newly activated computing unit outputs control commands to the trackside equipment and conducts external communication based on the external communication interface.

10. A method for operating a dual-system of cloud interlocking and traditional interlocking according to claim 8, characterized in that, Both the cloud-based interlocking calculation unit and the traditional interlocking calculation unit receive the trackside equipment status from the shared drive and acquisition execution unit and perform interlocking logic calculations.

Images