Multi-link automatic switching device and method for air traffic control system

Abstract

The invention provides a multi-link automatic switching device and method for an air traffic control system. A multi-path input interface module accesses a message link, and the output end of the multi-path input interface module is connected with a core processing and control module; the core processing and control module executes data acquisition, state judgment and algorithm decision; the output interface module is used for receiving an instruction of the core processing and control module and transmitting data of a selected link to post-stage communication equipment; the emergency bypass circuit is used for communicating a specified primary link input port with the output interface module through a physical switch; the communication module core processing and control module performs data interaction with a remote monitoring host through the communication module; when the system runs normally, the link state is monitored in real time, and data of the RS-232 interfaces are read; and when the data of the input port is abnormal, the application layer controls the multi-path input module to quickly switch the output signal to the optimal link interface. According to the method, the message data flow can be kept smooth through physical direct connection under the extreme condition of complete downtime of the device.

Description

Technical Field

[0001] This invention relates to an air traffic control technology, specifically a multi-link automatic switching device and method for an air traffic control system. Background Technology

[0002] Air Traffic Control (ATC) automation systems are central to ensuring flight safety, relying on stable and continuous data transmission of messages (such as flight plans and radar data). Currently, the automated systems of air traffic control units such as the Shenyang Area Control Center commonly use single-channel RS-232 serial links for message transmission between themselves and peripheral systems (such as relay systems). RS-232 is a traditional serial communication protocol widely used for point-to-point short-range data communication.

[0003] Traditional technology employs a single-link backup scheme with purely manual switching. This means that when the primary link being used is interrupted or fails, the system cannot detect it automatically. On-duty maintenance personnel must manually connect the backend equipment to the pre-deployed backup link by physically unplugging and plugging cables or switching switches.

[0004] The shortcomings of the above operation are as follows: The response delay is high, posing a significant safety hazard. Manually detecting the fault, assessing the situation, and executing the switchover operation takes at least 3-5 minutes. During this period, critical air traffic control message data transmission is completely interrupted, seriously threatening flight safety and failing to meet the extremely high real-time and reliability requirements of the air traffic control system.

[0005] Lacking intelligence, this solution cannot selectively switch between the best links. It merely performs a simple "primary / backup" failover, failing to monitor and intelligently analyze the real-time status of multiple links (such as signal quality, bit error rate, and latency) to select the optimal link for data transmission.

[0006] The system's availability design is inadequate. Existing solutions typically do not account for equipment failures (such as power outages). If the switching device fails, all link communication will be interrupted, creating a single point of failure and lacking emergency backup mechanisms.

[0007] The operation and maintenance efficiency is low. The entire process relies on manual labor, which increases the workload and psychological pressure on operation and maintenance personnel. Furthermore, it makes remote monitoring and centralized management impossible, which is detrimental to the construction of a modern and intelligent air traffic control operation and maintenance system. Summary of the Invention

[0008] To address the shortcomings of traditional air traffic control automation systems, such as high response delays, poor intelligence, low system availability, and low efficiency due to reliance on manual operation and maintenance, this invention proposes a multi-link automatic switching device and method for air traffic control systems. This method enables real-time, remote automatic monitoring of multi-link status, intelligent switching algorithms, and improved system reliability.

[0009] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is as follows: This invention provides a multi-link automatic switching device for air traffic control systems, comprising a multi-input interface module, a core processing and control module, an output interface module, an emergency bypass circuit, a communication module, and a power supply module, wherein: The multi-input interface module connects to multiple message links, and its output is connected to the data acquisition terminal of the core processing and control module. The core processing and control module runs a real-time operating system and performs all data acquisition, status judgment, and algorithm decision-making. The output interface module receives instructions from the core processing and control module and transmits the selected link data to the subsequent communication device. The emergency bypass circuit directly connects the designated main link input port and the output interface module via a physical switch. The communication module, core processing and control module interacts with the remote monitoring host through the communication module; The power module provides operating power to the aforementioned electrical components.

[0010] The multi-input interface module has multiple input interfaces. One end of each input interface is connected to a message signal, and the other end is connected to the data input terminal of the core processing and control module. When the system is running normally, the core processing and control module selects one of the input interfaces to work and transmits the data to the output interface module.

[0011] The emergency bypass circuit is a relay. The normally closed contact of the relay is connected in series between one input interface of the multi-input interface module and the output interface module. The relay coil is connected to the power supply module. When the power supply to the device is interrupted, a designated input port is directly connected to the output interface module through the normally closed contact of the relay.

[0012] The power module adopts a dual-redundant power supply design, which is managed by a power management chip and automatically switches to ensure continuous system operation.

[0013] The present invention also provides a method for automatic multi-link switching in an air traffic control system, comprising the following steps: S1. When the system is running normally, the link status is monitored in real time, and data from multiple RS-232 interfaces is periodically read in parallel through the underlying driver layer. S2, Intelligent switching decision: The middleware layer runs an intelligent switching algorithm based on state machine and time threshold ratio to dynamically select an optimal link; S3. When the system detects that the data being connected to the input port is normal, it uses the specified input interface as the system's common interface to access the data link and returns to step S1 to monitor the system status. S4. When the system detects that the data of the input port being connected is interrupted or abnormal, it performs a switch. The application layer controls the multi-input module to quickly switch the output signal to the optimal link interface selected in step S2. S5. Alarms and Recording: An alarm message is generated immediately after the switching action is triggered and pushed to the remote monitoring terminal via TCP / IP protocol. At the same time, the event (including time, cause, and links before and after the switch) is recorded in the local log.

[0014] It also includes step S6: manual intervention, where the user initiates a manual forced switching command via a local button or remote monitoring interface to immediately stop the automatic switching algorithm and unconditionally switch to the link specified by the user.

[0015] In step S1, when the system is powered off, the system switches to the emergency bypass circuit and designates an input port to be directly connected to the output interface module through the emergency bypass circuit.

[0016] Step S2 includes: S201, By default, an input port is set as the primary interface corresponding to the highest priority primary link; S202. The algorithm continuously compares the status of each link. When the data interruption of the primary link is detected to exceed a preset time threshold T, the link is determined to be faulty. S203. Dynamically select an optimal link from the remaining normal backup links according to preset rules.

[0017] The algorithm includes: when the primary link fails, dynamically selecting the optimal link from the remaining normal links, with the selection based on a comprehensive scoring function. The score for each backup link is calculated as follows: ; in, For link The higher the overall score, the better; For link The signal quality index; For link The bit error rate; For link Average latency, in milliseconds; This represents the maximum allowable latency threshold for the system. For link Static priority; All are weighting coefficients, satisfying , .

[0018] The present invention has the following beneficial effects and advantages: 1. This invention provides a multi-link automatic switching device and method for air traffic control systems, with a time threshold. It filters out instantaneous jitter, reducing the false handover rate to below 1% (actual test data). The optimization function comprehensively considers link quality, bit error rate, latency and priority to ensure optimal link after handover, improving data throughput by about 20%. The weight coefficients and thresholds can be dynamically adjusted through remote configuration to adapt to different network environments.

[0019] 2. This invention improves switching time from "minutes" to "seconds" (automatic switching <5 seconds) by reducing data transmission interruption time by more than 90%. System reliability is significantly improved through algorithm optimization and hardware bypass, meeting the requirements of 24 / 7 uninterrupted operation of air traffic control. Operation and maintenance efficiency is reduced by remote monitoring and configuration functions, reducing manual intervention and operation and maintenance costs by 50%. Based on general-purpose hardware (ARM Cortex-M) and standard protocols (RS-232 / TCP / IP), it is inexpensive and can be widely used in industrial control, power and other fields.

[0020] 3. This invention employs a hardware-level emergency bypass mechanism to ensure that even in the extreme case of a complete system crash, the message data stream can still remain uninterrupted through a physical direct connection, fundamentally eliminating the risk of the device itself becoming a single point of failure, which is something that pure software solutions cannot achieve.

[0021] 4. This invention has been tested and verified in a real air traffic control environment, and has high practicality and reliability; the system is developed using C / C++ language and an embedded RTOS platform, and has good portability. Attached Figure Description

[0022] Figure 1 This is a block diagram of the overall hardware structure of the multi-link automatic switching device for air traffic control systems according to the present invention. Figure 2 This is the electrical schematic diagram of the multi-input interface module in the device of the present invention; Figure 3 This is the electrical schematic diagram of the emergency bypass circuit in the device of the present invention; Figure 4 This is a schematic diagram of the layered architecture of the present invention; Figure 5 This is a data flow diagram of the device during normal operation of the present invention; Figure 6 This is a data flow diagram of the device of the present invention during fault operation; Figure 7 This is a flowchart of the multi-link automatic switching method for air traffic control systems according to the present invention; Figure 8 This is a flowchart of an embodiment of the method of the present invention. Detailed Implementation

[0023] This invention provides a multi-link automatic switching device for air traffic control systems, such as... Figure 1 As shown, it includes a multi-input interface module, a core processing and control module, an output interface module, an emergency bypass circuit, a communication module, and a power supply module, wherein: The multi-input interface module connects to multiple message links, and its output is connected to the data acquisition terminal of the core processing and control module. The core processing and control module runs a real-time operating system and performs all data acquisition, status judgment, and algorithm decision-making. The output interface module receives instructions from the core processing and control module and transmits the selected link data to the subsequent communication device. The emergency bypass circuit directly connects the designated main link input port and the output interface module via a physical switch. The communication module, core processing and control module interacts with the remote monitoring host through the communication module; The power module provides operating power to the aforementioned electrical components.

[0024] The multi-input interface module has multiple input interfaces. One end of each input interface is connected to a message signal, and the other end is connected to the data input terminal of the core processing and control module. When the system is running normally, the core processing and control module selects one of the input interfaces to work and transmits the data to the output interface module.

[0025] In this embodiment, the multi-input interface module uses four independent RS-232 serial communication interfaces, which are compatible with the interface standards of existing air traffic control equipment. For example... Figure 2 As shown, the four input interfaces are connected to the core processing unit in parallel. These four input interfaces are simultaneously connected to the core processing and control module via an RS-232 serial interface using TX (transmit) and RX (receive). The RS-232 data from the four input interfaces is sent to the core processing and control module for analysis and processing.

[0026] The core processing and control module, serving as the brain of the system, employs a high-performance, low-power embedded microcontroller based on the ARM Cortex-M series.

[0027] The output interface module includes one RS-232 output interface, which is used to transmit the selected link data to the subsequent communication device (such as the host computer of the automation system).

[0028] The communication module integrates an Ethernet interface and supports the TCP / IP protocol.

[0029] The power module adopts a dual-redundant power supply design. The dual power inputs are managed by a power management chip. When one power supply fails, it can automatically and seamlessly switch to the other to ensure continuous system operation.

[0030] An emergency bypass circuit is an emergency bypass channel designed at the hardware level, such as... Figure 3 As shown, the emergency bypass circuit is a relay. The normally closed contact of this relay is connected in series between one input interface module and the output interface module of the multi-input interface module, and the relay coil is connected to the power supply module. When the power supply to the device is interrupted, a designated input port is directly connected to the output interface module through the normally closed contact of the relay.

[0031] When the system detects that both power supply modules have failed, the relay coil is de-energized, the normally closed contact closes, and the bypass function is activated. The designated main link input port and output port are directly connected through physical switches such as relays to achieve direct data transmission, thereby ensuring that message transmission is not interrupted in the worst case.

[0032] Fault detection is implemented by the core processing and control module, including: Power monitoring chips (such as TPS3809) monitor the status of dual power supplies in real time; A watchdog timer monitors the operating status of the MCU; The system crashed due to a hardware heartbeat signal (periodically triggered by the MCU).

[0033] Logic control is a core processing and control module function, using CPLD or logic gate circuits, independent of the MCU, to achieve fault diagnosis and bypass switching.

[0034] like Figure 5 As shown, during normal system operation, the multi-input interface module transmits data to the MCU of the core processing and control module, which then selects one input channel. The data is then output to the output interface of the next stage through the core processing and control module.

[0035] like Figure 6 As shown, when the system loses power, the emergency bypass circuit works, the emergency function is activated, and the system defaults to directly outputting signals from the first interface to the subsequent output interface module, without going through the system's core processing and control module.

[0036] In emergency mode, if both power supplies fail (voltage below the threshold), the logic control unit in the core processing and control module automatically triggers the emergency bypass circuit. Switching process: Within 10ms of a fault occurring, the relay array switches to bypass mode, directly connecting the designated primary link input port (such as the first interface) to the output interface module, allowing data to bypass the MCU and be transmitted directly. The bypass status is indicated by LED indicators.

[0037] Recovery mechanism: When the system power is restored, the normally closed contact of the relay will automatically open, cut off the emergency bypass circuit, and return to normal mode without manual intervention. Even if the system completely crashes, data can still be transmitted through the bypass, with availability reaching 99.999% (actual test).

[0038] Zero-interruption switching: The bypass switching time is extremely short (<10ms), and there is no impact on data transmission.

[0039] Purely hardware implementation: The emergency bypass circuit does not rely on software, has high reliability, and meets the stringent safety requirements of air traffic control systems.

[0040] like Figure 4 As shown, the device of the present invention is based on a layered software architecture (driver layer, middleware layer, application layer) of RTOS, which ensures the real-time performance, stability and maintainability of the system, and enables complex functions such as intelligent algorithms, hardware operation and remote monitoring to work together efficiently and reliably.

[0041] Meanwhile, the integration of dual-redundant power supply and remote monitoring functions combines power redundancy, link redundancy, and management functions into a complete and highly reliable solution.

[0042] The above structural design ensures that even in the extreme case of a complete system failure, the message data flow can still remain uninterrupted through physical direct connection, fundamentally eliminating the risk of the device itself becoming a single point of failure, which is something that pure software solutions cannot achieve.

[0043] like Figures 7-8 As shown, the present invention also provides a method for automatic multi-link switching in an air traffic control system, which realizes the judgment of link status and dynamic selection through a multi-layer state machine and a time threshold mechanism, including the following steps: S1. When the system is running normally, the link status is monitored in real time, and data from multiple RS-232 interfaces is periodically read in parallel through the underlying driver layer. S2, Intelligent switching decision: The middleware layer runs an intelligent switching algorithm based on state machine and time threshold ratio to dynamically select an optimal link; S3. When the system detects that the data being accessed at the input port (i.e., the input message signal, which conforms to the RS-232 standard) is normal, it uses the specified input interface as the system's common interface to access the data link and returns to step S1 to monitor the system status. S4. When the system detects that the data of the input port being connected is interrupted or abnormal, it performs a switch. The application layer controls the multi-input module to quickly switch the output signal to the optimal link interface selected in step S2. S5. Alarms and Recording: An alarm message is generated immediately after the switching action is triggered and pushed to the remote monitoring terminal via TCP / IP protocol. At the same time, the event (including time, cause, and links before and after the switch) is recorded in the local log.

[0044] In step S1, the monitored parameters include not only "whether there is data" but also status information such as data stream continuity and frame error rate. When the system loses power, it switches to the emergency bypass circuit, designating an input port to be directly connected to the output interface module through the emergency bypass circuit. A watchdog timer timeout indicates that the MCU has crashed; the hardware heartbeat signal is lost for more than a predetermined time (e.g., 5 seconds).

[0045] The time threshold in step S2 is used to filter data by setting a configurable time threshold T (typically 3-5 seconds). A fault is determined only when the data interruption duration of the primary link (default is the first interface) exceeds T. This effectively filters out instantaneous network jitter or brief interference and avoids erroneous switching.

[0046] The intelligent switching algorithm in step S2 includes: S201, By default, an input port is set as the primary interface corresponding to the highest priority primary link; S202. The algorithm continuously compares the status of each link. When the data interruption of the primary link is detected to exceed a preset time threshold T, the link is determined to be faulty. S203. Dynamically select an optimal link from the remaining normal backup links according to preset rules.

[0047] S203. From the remaining normal backup links, dynamically select the optimal link according to preset rules (such as priority order or based on recent data quality scores).

[0048] The preset rule in step S203 is: When the primary link fails, the optimal link is dynamically selected from the remaining normal links, based on a comprehensive scoring function. The score for each backup link is calculated using the following algorithm: ; in, For link The higher the overall score, the better; For link Signal quality index (normalized value, based on signal level and signal-to-noise ratio); For link Bit error rate (normalized value, based on recent error frame statistics); For link Average latency, in milliseconds; The maximum allowed latency threshold for the system (e.g., 100ms). For link The static priority (user preset, such as interface 2 priority is 0.9, interface 3 priority is 0.8, etc.). All are weighting coefficients, satisfying The default value is .

[0049] The algorithm in step S2 selects the highest-ranking link. The goal is to directly transmit input data to the output interface through the application layer. The switching time is less than 100ms, ensuring seamless data transmission.

[0050] Once the system fault is repaired (e.g., power restoration or MCU restart), the core processing and control module automatically detects and switches back to normal mode. Manual intervention is still retained; the user can initiate a manual forced switching command via a local button (i.e., an external switch providing high / low level signals to the core processing module) or a remote monitoring interface, immediately halting the automatic switching algorithm and unconditionally switching to the user-specified link.

[0051] This invention can monitor and intelligently analyze the real-time status (such as signal quality, bit error rate, and delay) of multiple links, thereby selecting the optimal link for data transmission, improving operation and maintenance efficiency, reducing the workload and psychological pressure of operation and maintenance personnel, enabling remote monitoring and centralized management, strengthening the construction of a modern and intelligent air traffic control operation and maintenance system, and meeting the extremely high requirements of air traffic control systems for real-time performance and reliability.

Claims

1. A multi-link automatic switching device for an air traffic control system, characterized in that: It includes a multi-input interface module, a core processing and control module, an output interface module, an emergency bypass circuit, a communication module, and a power supply module, among which: The multi-input interface module connects to multiple message links, and its output is connected to the data acquisition terminal of the core processing and control module. The core processing and control module runs a real-time operating system and performs all data acquisition, status judgment, and algorithm decision-making. The output interface module receives instructions from the core processing and control module and transmits the selected link data to the subsequent communication device. The emergency bypass circuit directly connects the designated main link input port and the output interface module via a physical switch. The communication module, core processing and control module interacts with the remote monitoring host through the communication module; The power module provides operating power to the aforementioned electrical components.

2. The multi-link automatic switching device for air traffic control systems according to claim 1, characterized in that: The multi-input interface module has multiple input interfaces. One end of each input interface is connected to a message signal, and the other end is connected to the data input terminal of the core processing and control module. When the system is running normally, the core processing and control module selects one of the input interfaces to work and transmits the data to the output interface module.

3. The multi-link automatic switching device for air traffic control systems according to claim 1, characterized in that: The emergency bypass circuit is a relay. The normally closed contact of the relay is connected in series between one input interface of the multi-input interface module and the output interface module. The relay coil is connected to the power supply module. When the power supply to the device is interrupted, a designated input port is directly connected to the output interface module through the normally closed contact of the relay.

4. The multi-link automatic switching device for air traffic control systems according to claim 1, characterized in that: The power module adopts a dual-redundant power supply design, which is managed by a power management chip and automatically switches to ensure continuous system operation.

5. The method for automatic multi-link switching in an air traffic control system according to claim 1, characterized in that... Includes the following steps: S1. When the system is running normally, the link status is monitored in real time, and data from multiple RS-232 interfaces is periodically read in parallel through the underlying driver layer. S2, Intelligent switching decision: The middleware layer runs an intelligent switching algorithm based on state machine and time threshold ratio to dynamically select an optimal link; S3. When the system detects that the data being connected to the input port is normal, it uses the specified input interface as the system's common interface to access the data link and returns to step S1 to monitor the system status. S4. When the system detects that the data of the input port being connected is interrupted or abnormal, it performs a switch. The application layer controls the multi-input module to quickly switch the output signal to the optimal link interface selected in step S2. S5. Alarms and Recording: An alarm message is generated immediately after the switching action is triggered and pushed to the remote monitoring terminal via TCP / IP protocol. At the same time, the event (including time, cause, and links before and after the switch) is recorded in the local log.

6. The method for automatic multi-link switching in an air traffic control system according to claim 5, characterized in that... It also includes step S6: manual intervention, where the user initiates a manual forced switching command via a local button or remote monitoring interface to immediately stop the automatic switching algorithm and unconditionally switch to the link specified by the user.

7. The method for automatic multi-link switching in an air traffic control system according to claim 5, characterized in that... In step S1, when the system is powered off, the system switches to the emergency bypass circuit and designates an input port to be directly connected to the output interface module through the emergency bypass circuit.

8. The method for automatic multi-link switching in an air traffic control system according to claim 5, characterized in that... Step S2 includes: S201, By default, an input port is set as the primary interface corresponding to the highest priority primary link; S202. The algorithm continuously compares the status of each link. When the data interruption of the primary link is detected to exceed a preset time threshold T, the link is determined to be faulty. S203. Dynamically select an optimal link from the remaining normal backup links according to preset rules.

9. The method for automatic multi-link switching in an air traffic control system according to claim 8, characterized in that: The algorithm includes: when the primary link fails, dynamically selecting the optimal link from the remaining normal links, with the selection based on a comprehensive scoring function. The score for each backup link is calculated as follows: ; in, For link The higher the overall score, the better; For link The signal quality index; For link The bit error rate; For link Average latency, in milliseconds; This represents the maximum allowable latency threshold for the system. For link Static priority; All are weighting coefficients, satisfying , .

Images