Power-down control device for a train on-board equipment and control method thereof

Abstract

The application discloses a power-off control device of a train-mounted device and a control method thereof, and belongs to the technical field of rail transit. Through double-adaptation sub-circuit design, the train system with TCMS and the train system without TCMS are simultaneously compatible, and the adaptation defects of the traditional scheme that is only applicable to a non-intelligent management scene and only relies on TCMS are solved. The logic of "timing window + power recovery confirmation + forced activation" is introduced, and the problem that a device cannot be started due to power recovery during the shutdown process after power-off in the prior art is solved. Meanwhile, relying on the low-cost and low-power characteristics of an MCU, the device does not need to rely on a super capacitor energy storage circuit which is large in size, short in service life and high in cost (or only retains a basic energy storage in the second sub-circuit for temporary power supply of the controller, instead of relying on the super capacitor energy storage circuit to maintain the whole shutdown process), so that the size of the device is greatly reduced, and the service life is prolonged.

Description

Technical Field

[0001] This application relates to the field of rail transit technology, and in particular to a power-off control device and control method for train onboard equipment. Background Technology

[0002] The stable operation of train onboard equipment is directly related to passenger service quality and equipment safety. Among them, the control of the power failure process is a key link to ensure equipment reliability. When the onboard equipment encounters a sudden forced power failure, it is easy to cause data loss, file system corruption, task interruption and potential hardware failure. Therefore, a special power failure control scheme is needed to achieve normal shutdown of the equipment.

[0003] There are two typical technical solutions for power failure control of traditional train onboard equipment.

[0004] One type of solution achieves protection by configuring a power failure detection circuit, a charging circuit, an energy storage circuit, and a switching circuit. During normal power-on, the voltage regulator circuit provides the operating voltage, while the charging circuit charges the energy storage circuit. When a power failure is detected, the energy storage circuit continuously supplies power to the equipment through another voltage regulator circuit, allowing the controller to complete the shutdown operation. However, this solution relies on energy storage circuits that often use supercapacitors, which have inherent drawbacks such as large size and short lifespan. Furthermore, as usage time increases, the energy storage capacity decays, easily leading to power depletion during shutdown. More importantly, if the train regains power during shutdown powered by the energy storage circuit, the equipment will continue executing the shutdown procedure and cannot restart normally.

[0005] Another approach relies on the Train Control and Management System (TCMS) to achieve intelligent power-off. Before powering down the train, the TCMS sends a power-down signal to each device via Ethernet. Upon receiving the signal, the devices initiate shutdown, and the TCMS executes a full power-off after a specific time. However, with the functional upgrades of onboard equipment, the number of task nodes that need to be saved and services that need to be shut down during shutdown has increased significantly, leading to a longer shutdown time. If the train cancels the power-off and re-energizes within this shutdown cycle, the devices, still in the shutdown process, cannot respond to the power-on command, resulting in startup failure.

[0006] The two solutions mentioned above cannot effectively solve the "start-up failure caused by the train being powered on after the power failure command is triggered but before the equipment is shut down". Furthermore, the first solution is also limited by the performance defects of the energy storage components, resulting in low overall equipment reliability and high maintenance costs, making it difficult to meet the needs of the rail transit field for miniaturized, long-life, and highly reliable on-board equipment. Summary of the Invention

[0007] This application provides a power-off control device and control method for train onboard equipment. The technical solution is as follows.

[0008] On the one hand, a power-off control device for train onboard equipment is provided, the device including a controller, an MCU microprocessor, a switching circuit and an adapter circuit; The adapter circuit includes a first sub-circuit adapted to the train TMCS intelligent power-off management system and a second sub-circuit adapted to the absence of the TMCS intelligent power-off management system. The MCU microprocessor is electrically connected to the controller, the switching circuit and the adapter circuit respectively, and the switching circuit is connected in series with the power supply circuit of the controller; When the train sends a power failure signal or the adapter circuit detects a power failure, the controller receives the power failure command and notifies the MCU microprocessor to start timing. If the train is powered back on before the timer reaches a specific time, the MCU microprocessor is used to send a power-on signal to the controller after the timer reaches the specific time and continuous power supply is detected. If the controller does not respond to the power-on signal, the MCU microprocessor controls the switching circuit to force the controller to power on.

[0009] Optionally, the first sub-circuit includes a voltage regulator circuit 2, the input of which is connected to the train power supply and the output of which is electrically connected to the MCU microprocessor. When the train sends a power-down signal via TMCS, the controller is used to receive the power-down signal and send a shutdown notification to the MCU microprocessor. The MCU microprocessor is also used to start a timer based on the shutdown notification. The voltage regulator circuit 2 has an output voltage of 3.3V or 5V, an output ripple of ≤50mV, and a load regulation of ≤1%.

[0010] Optionally, the second sub-circuit includes a power failure detection circuit, a charging circuit, and an energy storage circuit; The power failure detection circuit is connected to the train power supply, the charging circuit is connected to both the train power supply and the energy storage circuit, and the energy storage circuit is electrically connected to the controller. When the power failure detection circuit detects a power failure in the train, the controller is used to start the shutdown and enable the energy storage circuit to supply power. At the same time, the MCU microprocessor stops working when the train loses power. If the train is powered back on, the MCU microprocessor restarts and starts timing. After a certain time has elapsed, it is also used to send a power-on signal to the controller. The MCU microprocessor sends a power-on signal to the controller 3-5 times, with an interval of 100ms-500ms between each consecutive transmission. If the controller still does not respond after a preset number of consecutive transmissions, the MCU microprocessor is also used to determine that the controller has not started normally. After establishing communication with the controller, the MCU microprocessor is also used to send a reset signal to the controller to clear the power-off status flag of the controller, and the controller enters the normal operation mode.

[0011] Optionally, the specific time is 10%-20% higher than the longest shutdown time under the maximum load of the controller, and the longest shutdown time is determined by obtaining the time taken for the device to shut down all services and save complete data through pre-testing.

[0012] Optionally, when the MCU microprocessor controls the switching circuit to turn on and off, it first controls the switching circuit to turn off for 1s-3s to cut off the power supply circuit of the controller, and then controls the switching circuit to turn on to restore power supply, thereby achieving forced power-on; The MCU microprocessor is a low-power microprocessor with a power consumption of ≤50mW, a power-on startup time of ≤10ms, and supports UART or I2C communication protocols with the controller. The switching circuit includes a MOSFET switch or a relay switch. The control terminal of the switching circuit is electrically connected to the I / O port of the MCU microprocessor, and the controlled terminal is connected in series between the controller and the power conversion circuit.

[0013] On the other hand, a power-off control method is provided, applied to a power-off control device for train on-board equipment as described above, the method comprising: S1, during the adaptation startup process, depending on whether the train is equipped with the TMCS intelligent power-down management system, the first or second sub-circuit of the adaptation circuit is activated to establish a signal connection between the MCU microprocessor and the train power supply and controller. S2, During the power failure response and timing process, after receiving the TMCS power failure signal through the first sub-circuit or detecting the train power failure through the second sub-circuit, the controller starts the shutdown and notifies the MCU microprocessor to start the timing. S3, during the power restoration triggering and verification process, if the train is detected to be powered on before the timer reaches a specific time, the MCU microprocessor will send a power-on signal to the controller after the timer reaches the specific time and the power restoration is confirmed to continue. S4, during the forced activation process, if no communication response is detected from the controller, the MCU microprocessor controls the switching circuit to perform a "power off-power on" action to force the controller to restart.

[0014] Optionally, during the adaptation startup process, the method further includes: When the first sub-circuit is activated, the train power supply is converted to the MCU microprocessor operating voltage through voltage regulator circuit 2; When the second sub-circuit is activated, the energy storage circuit is pre-charged through the charging circuit, while the power failure detection circuit enters standby mode.

[0015] Optionally, during the power restoration triggering and verification process, the detection criterion is "the voltage collected for 50ms-100ms continuously is ≥90% of the train's rated voltage". The verification is initiated by sending a verification command through the UART / I2C interface. If no response is received within 1 second, it is determined that the communication has not been established.

[0016] Optionally, it also includes S5, state synchronization and sleep process; During the state synchronization and hibernation process, after the controller restarts successfully, the MCU microprocessor sends a synchronization signal with a timestamp to resume task scheduling. The train continues to lose power until the timer ends, at which point the MCU microprocessor powers off after the train loses power.

[0017] By employing a dual-adapter sub-circuit design, the system is compatible with both train systems with and without TCMS, thus addressing the limitations of traditional solutions that are only applicable to scenarios without intelligent management and rely solely on TCMS. The introduction of a "timing window + power-on confirmation + forced activation" logic resolves the issue of "the device failing to start after power-off shutdown and subsequent power-on" in existing technologies. Furthermore, leveraging the low-cost and low-power characteristics of the MCU, the system eliminates the need for bulky, short-lifespan, and expensive supercapacitor energy storage circuits (or only retains basic energy storage in the second sub-circuit for temporary power supply to the controller, rather than relying on it to maintain a complete shutdown), significantly reducing device size and extending its lifespan. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1 This embodiment shows an overall structural diagram of a power-off control device for train onboard equipment. Figure 2 This embodiment shows an overall structural diagram of another train-mounted equipment power-off control device. Detailed Implementation

[0020] To make the objectives, technical solutions, and advantages of the present invention clearer, the embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0021] In this article, "multiple" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, or B alone. The character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0022] Example 1 like Figure 1 and Figure 2 As shown, this embodiment provides a schematic diagram of a power-off control device for train onboard equipment and another schematic diagram of a power-off control device for train onboard equipment. Both are core circuit block diagrams of the power-off control device of this invention, respectively corresponding to two mainstream power supply management scenarios for trains to intuitively demonstrate the device's adaptability structure and connection logic. Figure 1 The paper presents how the device achieves precise control of power-down and power-up by adding a voltage regulator circuit 2 and an MCU microprocessor for a train architecture with intelligent power-down management. Figure 2 This diagram illustrates how, for train architectures without intelligent management, the device achieves seamless integration of power failure monitoring and power restoration through the collaboration of a power failure detection circuit, a charging circuit, an energy storage circuit, and an MCU microprocessor. The two figures together demonstrate the core design of this device's "dual-scenario adaptation," providing intuitive structural support for the detailed explanation of the working principles of different sub-circuits in subsequent embodiments.

[0023] In addition, it should be noted that the adapter circuit is in Figure 1 It includes voltage regulator circuit 2 (MCU-specific voltage regulator). The switching circuit is located within... Figure 1 The circuit consists of switch circuit 1 (regular power supply circuit for the controller) and switch circuit 2 (temporary power supply circuit for energy storage); Figure 2 The middle section represents switch circuit 1 (the processor's conventional power supply circuit); in Figure 2 It includes voltage regulator circuit 2 (energy storage stage voltage regulator), voltage regulator circuit 3 (MCU dedicated voltage regulator), power failure detection circuit, charging circuit, and energy storage circuit.

[0024] The following is an introduction to the structure and its working principle.

[0025] The power failure control device for train onboard equipment includes a controller, an MCU microprocessor, a switching circuit, and an adapter circuit.

[0026] The adapter circuit includes a first sub-circuit adapted to the train TMCS intelligent power-off management system and a second sub-circuit adapted to the system without TMCS intelligent power-off management system; the MCU microprocessor is electrically connected to the controller, the switching circuit and the adapter circuit respectively, and the switching circuit is connected in series with the power supply circuit of the controller.

[0027] The adapter circuit employs a dual-path design of "first sub-circuit + second sub-circuit" to ensure compatibility with two mainstream train scenarios: "intelligent power-off management with Train Control and Management System (TCMS)" and "intelligent power-off management without TCMS." In terms of connectivity, the MCU microprocessor, as the core control unit, establishes electrical connections with the controller (responsible for main equipment task processing), the switching circuit (responsible for power supply on / off control), and the adapter circuit (responsible for scene recognition and signal acquisition). Furthermore, the switching circuit is connected in series in the controller's power supply loop, enabling precise control over the controller's power supply.

[0028] During the control process, when the train sends a power-down signal or the adapter circuit detects a power-down, the controller receives the power-down command and notifies the MCU microprocessor to start timing. If the train is powered back on before the timing reaches a specific time, the MCU microprocessor sends a power-on signal to the controller after the timing reaches a specific time and continuous power supply is detected. If the controller does not respond to the power-on signal, the MCU microprocessor controls the switching circuit to force the controller to power on.

[0029] In summary, the working logic revolves around a closed-loop design for the entire "power outage-power restoration" process. When the train actively sends a power outage signal via TCMS (adapting to the first sub-circuit scenario), or when the power outage detection module of the adaptable circuit directly detects the train's power supply being disconnected (adapting to the second sub-circuit scenario), the controller prioritizes receiving the power outage command and simultaneously sends a shutdown notification to the MCU microprocessor, triggering the MCU to start timing. If the train is unexpectedly powered back on before the preset shutdown duration (a specific time) is reached, the MCU will continue timing until the specific time is confirmed. After confirming that the train's power supply is continuously powered, it will send a power-on signal to the controller to restart the equipment. If the controller does not respond to the power-on signal (e.g., it is still in a shutdown deadlock state), the MCU will forcibly cut off and restore the controller's power supply by controlling the on / off action of the switching circuit, achieving a secondary startup.

[0030] In addition, the MCU microprocessor selected for this device has the characteristics of simple peripheral circuits, low cost, low power consumption, strong real-time performance, simple power-on sequence and short power-on and power-off time, providing a hardware foundation for low-cost and high-reliability control.

[0031] In summary, this application embodiment, through a dual-adapter sub-circuit design, is compatible with both train systems with and without TCMS, solving the adaptation defects of traditional solutions that are only applicable to scenarios without intelligent management and rely solely on TCMS; it introduces the logic of "timing window + power restoration confirmation + forced activation" to solve the problem in the prior art that "the device cannot start after power restoration during the shutdown process after a power failure"; at the same time, relying on the low cost and low power consumption characteristics of the MCU, it does not need to rely on the large, short-life, and high-cost supercapacitor energy storage circuit (or only retains basic energy storage in the second sub-circuit for temporary power supply to the controller, rather than relying on it to maintain a complete shutdown), which greatly reduces the size of the device and extends its service life.

[0032] Example 2 The "first sub-circuit" in Example 1 is further defined, and its core component is clarified as voltage regulator circuit 2.

[0033] like Figure 1 As shown, its core component, the first sub-circuit, includes a voltage regulator circuit 2. The input of the voltage regulator circuit 2 is connected to the train power supply, and the output is electrically connected to the MCU microprocessor. The input of the voltage regulator circuit 2 is directly connected to the train power supply, and the output is dedicated to powering the MCU microprocessor, forming an MCU power supply loop independent of the controller. In a train scenario with TCMS, its collaborative workflow is as follows: after the train sends a power-down signal to the controller through the TCMS system, the controller receives the signal and immediately transmits a shutdown notification to the MCU microprocessor. The MCU then starts a timing program based on this notification.

[0034] according to Figure 1It can be understood that, based on the existing train power supply and equipment control architecture with TMCS, two core components, a voltage regulator circuit 2 and an MCU microprocessor, are added, forming the first sub-circuit in the adapter circuit. The input of the voltage regulator circuit 2 is directly connected to the train power supply, while its output provides a stable power supply to the MCU microprocessor, forming a dedicated power supply link for the MCU independent of the controller's main power supply circuit. The MCU microprocessor establishes electrical connections with both the controller and the switching circuit. The switching circuit is connected in series in the controller's power supply circuit, enabling precise control of the controller's power supply. Under normal operating conditions, the train power supply provides the controller with operating voltage through the existing power supply circuit, which is then converted by the voltage regulator circuit 2 to continuously power the MCU microprocessor, which remains in standby monitoring mode. When the train needs to be powered down, the TCMS system sends a power-down signal to the controller via Ethernet. Upon receiving this signal, the controller immediately initiates the shutdown procedure and simultaneously sends a shutdown notification to the MCU microprocessor, triggering the MCU to start timing. If the train is de-energized and re-energized before the specified time is reached, the MCU microprocessor will continue timing until the specified time. During this period, after detecting that the train power supply is continuously supplied through voltage regulator circuit 2, it will immediately send a power-on signal to the controller. If no communication response is detected from the controller after sending the power-on signal, the MCU will output a control signal through the I / O port to drive the switching circuit to first shut down for 1-3 seconds to cut off the controller power supply, and then turn it back on to restore power, forcing the controller to restart. After the controller restarts successfully, the MCU establishes communication with the controller and sends a reset signal to clear the controller's power-off status flag, ensuring that the equipment enters normal operating mode.

[0035] It should be noted that, Figure 1 In the circuit, voltage regulator circuit 1 is a conventional power supply voltage regulator module for the controller (CPU, SOC, FPGA), with its input connected to the train power supply and its output providing the operating voltage for the controller; voltage regulator circuit 2 is a dedicated voltage regulator module for the MCU microprocessor, with its input connected to the train power supply and its output independently supplying power to the MCU; switching circuit 1 is connected in series between the train power supply and voltage regulator circuit 1, and is controlled by the MCU or controller logic.

[0036] When the train sends a power-down signal via TMCS, the controller receives the power-down signal and sends a shutdown notification to the MCU microprocessor. The MCU microprocessor is also used to start a timer based on the shutdown notification.

[0037] Among them, the output voltage of the voltage regulator circuit 2 is 3.3V or 5V (to meet the operating voltage requirements of mainstream MCUs), the output ripple is ≤50mV (to ensure power supply stability and avoid signal interference), and the load regulation rate is ≤1% (to ensure that the power supply voltage of the MCU is stable under different loads). The above parameters provide hardware guarantee for the MCU's accurate timing and signal transmission.

[0038] In summary, the parameter design of voltage regulator circuit 2 ensures that the MCU can still obtain stable power supply when the train's power supply fluctuates, avoiding timing deviations or signal loss due to abnormal power supply, and solving the problem of "power failure detection and timing relying on unstable power supply" in traditional solutions. In addition, by limiting the structure and parameters of the first sub-circuit, the control logic of the TCMS system is more feasible to implement.

[0039] Example 3 The "second sub-circuit" in Example 1 is further refined, and it is clarified that it consists of a power failure detection circuit, a charging circuit, and an energy storage circuit, which work together to adapt to train scenarios without TCMS.

[0040] Optional, such as Figure 2 As shown, its second sub-circuit consists of a power-down detection circuit, a charging circuit, and an energy storage circuit, and is combined with an MCU microprocessor and a switching circuit to form a complete control architecture.

[0041] It should be noted that, Figure 2 In this circuit, voltage regulator circuit 1 is the conventional power supply voltage regulator module for the controller, with its input connected to the train power supply and its output providing the operating voltage for the controller; voltage regulator circuit 2 is the downstream voltage regulator module for the energy storage circuit, providing temporary power to the controller when it is powered off; voltage regulator circuit 3 is a dedicated voltage regulator module for the MCU microprocessor, independently powering the MCU; switching circuit 1 is connected in series in the conventional power supply circuit of the controller; switching circuit 2 is connected in series in the temporary power supply circuit from the energy storage circuit to the controller; and the power failure detection circuit monitors the on / off state of the train power supply in real time.

[0042] The power failure detection circuit is connected to the train power supply to monitor the power on / off status in real time. The charging circuit is connected to both the train power supply and the energy storage circuit to pre-charge the energy storage circuit when the train is powered on normally. The energy storage circuit is electrically connected to the controller to provide temporary power to the controller after the train loses power. When the power failure detection circuit detects that the train has lost power, the controller is used to start the shutdown and enable the energy storage circuit to supply power. At the same time, the MCU microprocessor stops working when the train loses power.

[0043] If the train is powered back on, the MCU microprocessor restarts and starts timing. After a certain time has elapsed, it is also used to send a power-on signal to the controller.

[0044] The MCU microprocessor sends a power-on signal to the controller 3-5 times, with an interval of 100ms-500ms between each consecutive transmission. If the controller still does not respond after a preset number of consecutive transmissions, the MCU microprocessor is also used to determine that the controller has not started normally. After establishing communication with the controller, the MCU microprocessor is also used to send a reset signal to the controller to clear the power-off status flag of the controller, and the controller enters the normal operation mode.

[0045] When the power failure detection circuit detects a power failure in the train, the controller automatically switches to the energy storage circuit for power and initiates the shutdown procedure. Simultaneously, because the train's power supply is disconnected, the MCU microprocessor powers on and stops working. If the train is powered back on during the controller's shutdown process, the MCU microprocessor powers on again and immediately starts timing. After the timing reaches a specific time, it sends a power-on signal to the controller. To improve startup reliability, the number of times the MCU sends the power-on signal is limited to 3-5 times, with an interval of 100ms-500ms between adjacent signals (to avoid signal congestion or single transmission failure). If no response is received from the controller after sending the preset number of signals, the startup is considered to have failed.

[0046] In addition, once the MCU and controller successfully establish communication, the MCU will send a reset signal to the controller, which is specifically used to clear the controller's shutdown status flag, ensuring that the controller completely switches from the "shutdown process" to the "normal working mode" and avoids task abnormalities caused by residual status.

[0047] In summary, the embodiments of this application provide a full-process control adapted to TCMS-free scenarios. By clarifying the composition and working sequence of the second sub-circuit, the connection problem of "power failure detection - temporary power supply - power restoration and start-up" in TCMS-free systems is solved, making up for the inability to adapt to TCMS-free trains. The multiple signal transmission design reduces the probability of signal transmission failure, and the reset signal clearing the shutdown flag avoids the controller's "false start" (appears to be powered on but is still in a shutdown state), which improves reliability compared to the single logic of "relying only on the energy storage circuit for power shutdown" in the existing solution. In addition, while retaining the energy storage circuit, its function is limited to "temporary power supply for the controller" rather than "a core component that maintains full shutdown" in the prior art, thus avoiding the impact of short lifespan and capacity decay of supercapacitors.

[0048] Example 4 Optionally, the specific time is 10%-20% higher than the longest shutdown time under the maximum load of the controller, and the longest shutdown time is determined by obtaining the time taken for the device to shut down all services and save complete data through pre-testing.

[0049] To address the issue of increased device workload leading to longer shutdown times in existing technologies, this approach utilizes pre-testing to cover extreme operating scenarios of the devices, while the floating ratio provides a certain time redundancy to prevent incomplete shutdown due to a sudden increase in tasks.

[0050] Therefore, the value of the specific time is based on the actual load test of the equipment, which ensures that the controller has enough time to complete shutdown operations such as data saving and service shutdown, and avoids the problems of "incomplete shutdown when the load increases" or "slow power-on response when the load is small" caused by using a fixed time (such as the specific waiting time in the prior art). In addition, the quantitative value method makes "specific time" no longer an abstract concept. Those skilled in the art can directly determine it according to the specific equipment parameters, which solves the subjective defects of "waiting time set by experience" in the traditional solution.

[0051] Example 5 Optionally, when the MCU microprocessor controls the switching circuit to turn on or off, it first controls the switching circuit to turn off for 1s-3s to cut off the power supply circuit of the controller, and then controls the switching circuit to turn on to restore power supply, thereby achieving forced power-on.

[0052] The MCU microprocessor is a low-power microprocessor with an operating power consumption of ≤50mW (reducing the overall energy consumption of the device) and a power-on startup time of ≤10ms (ensuring a rapid response after power restoration). It supports UART or I2C communication protocols with the controller (two mainstream switch types to adapt to controllers of different power). Its control terminal is connected to the I / O port of the MCU (receiving the MCU's on / off commands), and the controlled terminal is connected in series between the controller and the power conversion circuit (directly controlling the power supply of the controller).

[0053] The switching circuit includes a MOSFET switch or a relay switch. The control terminal of the switching circuit is electrically connected to the I / O port of the MCU microprocessor, and the controlled terminal is connected in series between the controller and the power conversion circuit.

[0054] In summary, in the forced activation scenario, the MCU microprocessor controls the switching circuit to execute a "turn off first, then turn on" timing action. First, it outputs a control signal to turn off the switching circuit for 1-3 seconds (ensuring that the controller is completely powered off and residual charge and abnormal state are cleared), and then controls the switching circuit to turn on to restore power supply, thereby achieving a forced restart of the controller.

[0055] In summary, the "1s-3s power outage + power restoration" timing design in this embodiment solves the problem of "startup failure due to incomplete controller power-off" that may occur with traditional "direct restart". The low-power MCU reduces the train's power supply burden, and its fast start-up characteristics ensure immediate response after power restoration. Support for multiple types of switching circuits and communication protocols allows the device to be adapted to different models of onboard controllers, improving its versatility. It also further clarifies component parameters and connection relationships, avoiding control failures caused by improper component selection.

[0056] Example 6 On the other hand, a power-off control method is provided, applied to a power-off control device for train on-board equipment as described above, the method comprising: S1, during the adaptation startup process, depending on whether the train is equipped with the TMCS intelligent power-down management system, the first or second sub-circuit of the adaptation circuit is activated to establish a signal connection between the MCU microprocessor and the train power supply and controller.

[0057] During the adaptation startup process, the method also includes the following:

[0058] When the first sub-circuit is activated, the train power supply is converted to the MCU microprocessor operating voltage through the voltage regulator circuit 2; when the second sub-circuit is activated, the energy storage circuit is pre-charged through the charging circuit, and the power failure detection circuit is put into standby mode at the same time.

[0059] By limiting the startup actions of the two sub-circuits, it is ensured that the initial state under different train scenarios meets the subsequent control requirements (such as stable MCU power supply, pre-charging of the energy storage circuit, and standby of the detection circuit). The voltage regulation and conversion of the first sub-circuit ensures stable power supply after the MCU starts up, while the pre-charging and standby detection of the second sub-circuit avoids problems such as "the energy storage circuit is not fully charged when power is lost" and "power loss detection delay", laying the foundation for subsequent power loss response.

[0060] S2, During the power failure response and timing process, after receiving the TMCS power failure signal through the first sub-circuit or detecting the train power failure through the second sub-circuit, the controller starts the shutdown and notifies the MCU microprocessor to start the timing. S3, during the power restoration triggering and verification process, if the train is detected to be powered on before the timer reaches a specific time, the MCU microprocessor will send a power-on signal to the controller after the timer reaches the specific time and the power restoration is confirmed to continue.

[0061] During the power restoration triggering and verification process, the detection criterion is "the voltage collected continuously for 50ms-100ms is ≥90% of the train's rated voltage". The verification is initiated by sending a verification command through the UART / I2C interface. If no response is received within 1 second, it is determined that the communication has not been established.

[0062] The MCU collects the train power supply voltage in real time through the adapter circuit. When the voltage is detected to be ≥90% of the train's rated operating voltage for 50ms-100ms, it is determined that the train power supply has been restored. The combination of this duration and the voltage threshold can avoid "false power restoration" caused by instantaneous fluctuations in the train power supply. Furthermore, after the MCU sends the power-on signal, it sends a verification command (such as "start status query command") to the controller through the UART or I2C communication interface. If no response signal (such as "start confirmed signal") is received from the controller within 1 second, it is determined that the communication has not been established, that is, the controller has not started normally.

[0063] Therefore, the dual determination of continuous duration and voltage threshold avoids false power restoration detection caused by instantaneous power surges in the train, solving the problems of "false start" or "missed start" in traditional solutions. The verification command and response mechanism of the communication interface is more accurate than the traditional logic of "sending a power-on signal without feedback," and can effectively identify the deadlock state of the controller "powered on but not started," providing accurate triggering conditions for subsequent forced activation.

[0064] S4, during the forced activation process, if no communication response is detected from the controller, the MCU microprocessor controls the switching circuit to perform a "power off-power on" action to force the controller to restart.

[0065] In one example, the method first identifies whether the train is equipped with TCMS upon startup, automatically activating either the first sub-circuit (with TCMS) or the second sub-circuit (without TCMS) to establish a signal connection between the MCU and the train power supply and controller, laying the foundation for subsequent detection and control. After obtaining a power failure signal (TCMS command or power disconnection detection) through the corresponding sub-circuit, the controller starts the shutdown procedure and simultaneously notifies the MCU to start timing, ensuring that timing and shutdown processes are synchronized. If the train is detected to be powered on before the timing reaches a specific time, the MCU does not immediately trigger startup but continues timing until the specific time (ensuring the controller completes the current shutdown step), and sends a startup signal only after confirming that the train power supply is continuously providing power, avoiding false startup caused by "instantaneous power restoration". If no communication response from the controller is detected after sending the startup signal, the MCU performs a "power-off-power-on" action through the control switch circuit, forcing the controller to restart, forming a closed loop of "trigger-verification-remediation".

[0066] In summary, the method of this application embodiment is based on device structure design, with four interconnected processes, from scenario adaptation to forced recovery, covering all key nodes of "power outage-power restoration", and solving the defects of existing solutions such as "continuous shutdown after power restoration" and "failure to start power-on during shutdown".

[0067] Example 7 The "state synchronization and hibernation process" has been added to improve the control closed loop.

[0068] During the state synchronization and hibernation process, after the controller successfully restarts, the MCU microprocessor sends a synchronization signal with a timestamp to resume task scheduling. Specifically, if the train continues to lose power until the timer ends, the MCU microprocessor will power down after the train loses power.

[0069] Once the MCU detects that the controller has started normally through the communication interface, it immediately sends a synchronization signal containing a "power-down-power-up timestamp" and a "startup status identifier" to the controller. After receiving the signal, the controller restores the task scheduling sequence before the power-down based on the timestamp and clears the error flags left over from the shutdown process based on the status identifier, ensuring task continuity.

[0070] Therefore, the timestamped synchronization signal solves the problem of "the controller losing its task status before the power outage after power restoration," ensuring that the equipment quickly resumes normal service and improving the passenger experience. The hibernation state during continuous power outages significantly reduces standby power consumption, meeting the train's "optimized energy consumption" requirements, while also reducing MCU wear from prolonged power-on, extending equipment lifespan. The entire lifecycle control process—from "start-up-power outage-power restoration-synchronization-hibernation"—enables more comprehensive local control.

[0071] This application also provides a computer-readable medium storing at least one instruction, which is loaded and executed by the processor to implement the control methods described in the above embodiments.

[0072] The above description is merely an optional embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A power-off control device for train onboard equipment, characterized in that, The device includes a controller, an MCU microprocessor, a switching circuit, and an adapter circuit; The adapter circuit includes a first sub-circuit adapted to the train TMCS intelligent power-off management system and a second sub-circuit adapted to the absence of the TMCS intelligent power-off management system. The MCU microprocessor is electrically connected to the controller, the switching circuit and the adapter circuit respectively, and the switching circuit is connected in series with the power supply circuit of the controller; When the train sends a power failure signal or the adapter circuit detects a power failure, the controller receives the power failure command and notifies the MCU microprocessor to start timing. If the train is powered back on before the timer reaches a specific time, the MCU microprocessor is used to send a power-on signal to the controller after the timer reaches the specific time and continuous power supply is detected. If the controller does not respond to the power-on signal, the MCU microprocessor controls the switching circuit to force the controller to power on.

2. The power-off control device according to claim 1, characterized in that, The first sub-circuit includes a voltage regulator circuit 2, the input of which is connected to the train power supply and the output of which is electrically connected to the MCU microprocessor. When the train sends a power-down signal via TMCS, the controller is used to receive the power-down signal and send a shutdown notification to the MCU microprocessor. The MCU microprocessor is also used to start a timer based on the shutdown notification. The voltage regulator circuit 2 has an output voltage of 3.3V or 5V, an output ripple of ≤50mV, and a load regulation of ≤1%.

3. The power-off control device according to claim 1, characterized in that, The second sub-circuit includes a power failure detection circuit, a charging circuit, and an energy storage circuit; The power failure detection circuit is connected to the train power supply, the charging circuit is connected to both the train power supply and the energy storage circuit, and the energy storage circuit is electrically connected to the controller. When the power failure detection circuit detects a power failure in the train, the controller is used to start the shutdown and enable the energy storage circuit to supply power. At the same time, the MCU microprocessor stops working when the train loses power. If the train is powered back on, the MCU microprocessor restarts and starts timing. After a certain time has elapsed, it is also used to send a power-on signal to the controller. The MCU microprocessor sends a power-on signal to the controller 3-5 times, with an interval of 100ms-500ms between each consecutive transmission. If the controller still does not respond after a preset number of consecutive transmissions, the MCU microprocessor is also used to determine that the controller has not started normally. After establishing communication with the controller, the MCU microprocessor is also used to send a reset signal to the controller to clear the power-off status flag of the controller, and the controller enters the normal operation mode.

4. The power-off control device according to claim 1, characterized in that, The specific time is 10%-20% higher than the longest shutdown time under the controller's maximum load. The longest shutdown time is determined by pre-testing to obtain the time it takes for the device to shut down all services and save complete data.

5. The power-off control device according to claim 1, characterized in that, When the MCU microprocessor controls the switching circuit to turn on and off, it first controls the switching circuit to turn off for 1s-3s to cut off the power supply circuit of the controller, and then controls the switching circuit to turn on to restore power supply, thereby achieving forced power-on; The MCU microprocessor is a low-power microprocessor with a power consumption of ≤50mW, a power-on startup time of ≤10ms, and supports UART or I2C communication protocols with the controller. The switching circuit includes a MOSFET switch or a relay switch. The control terminal of the switching circuit is electrically connected to the I / O port of the MCU microprocessor, and the controlled terminal is connected in series between the controller and the power conversion circuit.

6. A power-off control method, characterized in that, The method of the power-off control device for train on-board equipment as described in any one of claims 1 to 5 includes: During the adaptation startup process, depending on whether the train is equipped with the TMCS intelligent power-off management system, the first or second sub-circuit of the adaptation circuit is activated to establish a signal connection between the MCU microprocessor and the train power supply and controller. During the power failure response and timing process, after receiving the TMCS power failure signal through the first sub-circuit or detecting the train power failure through the second sub-circuit, the controller starts the shutdown and notifies the MCU microprocessor to start the timing. During the power restoration triggering and verification process, if the train is detected to be powered on before the timer reaches a specific time, the MCU microprocessor will send a power-on signal to the controller after the timer reaches the specific time and the power restoration is confirmed to continue. If no communication response is detected from the controller during the forced activation process, the MCU microprocessor controls the switching circuit to perform a "power off-power on" action to force the controller to restart.

7. The method according to claim 6, characterized in that, During the adaptation startup process, the method further includes: When the first sub-circuit is activated, the train power supply is converted to the MCU microprocessor operating voltage through voltage regulator circuit 2; When the second sub-circuit is activated, the energy storage circuit is pre-charged through the charging circuit, while the power failure detection circuit enters standby mode.

8. The method according to claim 6, characterized in that, During the power restoration triggering and verification process, the detection criterion is "the voltage collected continuously for 50ms-100ms is ≥90% of the train's rated voltage". The verification is initiated by sending a verification command through the UART / I2C interface. If no response is received within 1 second, it is determined that the communication has not been established.

9. The method according to claim 6, characterized in that, It also includes state synchronization and sleep processes; During the state synchronization and hibernation process, after the controller restarts successfully, the MCU microprocessor sends a synchronization signal with a timestamp to resume task scheduling. The train continues to lose power until the timer ends, at which point the MCU microprocessor powers off after the train loses power.

Images