High-availability control system redundancy device

By employing redundant devices with unequal configurations in the train control system, the control board controls multiple different control terminals, thus solving the problem of the expanded impact range of simultaneous board failures in unequal configurations. This achieves high availability and stability of the system while reducing costs.

CN223526648UActive Publication Date: 2025-11-07TRAFFIC CONTROL TECH CO LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202423238470.X
Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
Filing Date
2024-12-26
Publication Date
2025-11-07
Estimated Expiration
2034-12-26

AI Technical Summary

Technical Problem

In existing train control systems, the equal-position configuration leads to a wider impact range when two boards fail simultaneously, making it impossible to control multiple devices normally, reducing system availability and increasing costs.

Method used

The system employs a redundant control system with unequal configuration, where the number of control boards N is greater than 2. Each control board controls multiple different control terminals, ensuring that damage or failure of each control board only affects one device. The availability and stability of the system are guaranteed through the relationship N*n=M*m.

Benefits of technology

Without increasing the number of control boards, it reduces the impact of faults, improves system availability, lowers costs, and facilitates line inspection and troubleshooting.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN223526648U_ABST
    Figure CN223526648U_ABST
Patent Text Reader

Abstract

The utility model provides a control system redundancy device with high availability, which comprises N control panels, N is greater than 2, N is greater than 1, and N is greater than 2. The number of the control ends is M, and M is larger than or equal to N; the number of the control ends controlled by each control board is larger than one, and the control ends are different. According to the technical characteristics, an unequal configuration mode is used, when two redundant control boards fail at the same time, one controlled device is affected at most, and on the premise that the control boards are not increased, the usability of the system is improved, and the fault influence surface is reduced.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the field of train control system, and particularly relates to a high-availability control system redundancy device. BACKGROUND

[0002] In a train control system, whether it is a vehicle-mounted device or a ground device, in order to ensure the availability and stability of the device, a redundancy arrangement method needs to be adopted.

[0003] The mainstream architecture at present is 2X2OO2, in which 2X realizes redundancy, that is, two identical function boards jointly control the same device, such as a signal machine, a switch machine on the ground, or a relay of a vehicle; and 2OO2 ensures safety. The existing redundancy mode, taking a board and an electrical device as an example, board A and board B can control electrical device A and electrical device B, and board C and board D can control electrical device C and electrical device D, so this configuration mode is called equiposition configuration.

[0004] The main problem of equiposition configuration is that when two boards fail at the same time, such as board A and board B fail at the same time, then electrical device A and electrical device B cannot be controlled at the same time. If two boards control three identical electrical devices, although the overall cost of the system can be reduced, if the two boards fail at the same time, the influence of the failure will be expanded. CONTENT OF THE INVENTION

[0005] In view of the problems existing in the prior art, the present application provides a high-availability control system redundancy device, which comprises: control boards, the number of the control boards is N, and N is greater than 2; control ends, the number of the control ends is M, and M is greater than or equal to N; the number of control ends controlled by each control board is greater than 1 and is different. Through the above technical features, the equiposition configuration is not used, and when two redundant control boards fail at the same time, at most one controlled device is affected, the availability of the system is improved, and the influence of the failure is reduced without increasing the number of control boards.

[0006] In some embodiments, the total number of control ends controlled by all the control boards is the same as the number of controlled devices received by all the control ends; each control board controls n control ends, and n is greater than 1; each control end receives m controlled devices, that is,

[0007] N*n=M*m.

[0008] Therefore, it is helpful for workers to check the line and troubleshoot.

[0009] In some embodiments, the number of controlled devices received by each control end is 2, that is,

[0010] n = 2.

[0011] Thus, on the one hand, it helps the staff to check the line, on the other hand, it can also reduce the consumption of excess cost, and also play a redundant while, but also save costs.

[0012] In some embodiments, each of the functional boards controls the number of control ends is less than or equal to 3, i.e.

[0013] 1 < n < 3.

[0014] Thus, while achieving redundancy, it also ensures the reliability and stability of the overall system, so that the load is evenly distributed.

[0015] It should be understood that the content described in the content part of the utility model is not intended to limit the key or important features of the embodiments of the present disclosure, nor to limit the scope of the present disclosure. Other features of the present disclosure will become apparent through the following description. BRIEF DESCRIPTION OF DRAWINGS

[0016] Figure 1 A conventional control system redundancy configuration flow chart is shown;

[0017] Figure 2 A conventional control system redundancy configuration flow chart is shown;

[0018] Figure 3 A system flow chart of one of the high-availability control system redundancy devices of the present embodiment is shown;

[0019] Figure 4 Another system flow chart of the high-availability control system redundancy device of the present embodiment is shown.

[0020] SYMBOL DESCRIPTION

[0021] 1, control board; 2, control end. DETAILED DESCRIPTION

[0022] In the following, the preferred embodiments (or implementation manners) of the present utility model are described in detail in conjunction with the drawings.

[0023] Reference Figures 1-4 to describe a high-availability control system redundancy device of the present utility model.

[0024] A kind of high available control system redundancy device includes control board 1 and control end 2, control card can be board card, need to cooperate computer to use, to realize relevant control operation to relevant electric equipment.Control end 2, with the control board 1 electric connection, and is controlled by control board 1.Control end 2 can be ground signal machine, switch machine or car relay etc., by the control operation of control board 1, to make different kinds of electric equipment realize corresponding function effect.

[0025] To realize redundancy, each described control board 1 can be provided with M, M quantity is greater than 2;And each control board 1 can connect multiple described control end 2, if one of control board 1 is damaged or fails, the rest described control board 1 can guarantee the normal operation of control end 2, so that the function of control end 2 will not be affected by the damage of control board 1.

[0026] Figure 1 The conventional control system redundancy parity configuration flow chart is shown.It is shown in Figure 1 The conventional redundancy parity configuration is composed of multiple control boards 1 and multiple control ends 2, in the embodiment, the number of control boards 1 is taken as an example and is four, and is control board A1, control board B1, control board C1 and control board D1 respectively;And the number of control ends 2 is taken as an example and is six, and is control end A1, control end B1, control end C1, control end D1, control end E1, control end F1 respectively.Control board A1 is electrically connected with control end A1, control end B1 and control end C1 respectively, and controls control end A1, control end B1 and control end C1;Control board B1 is electrically connected with control end A1, control end B1 and control end C1 respectively, and controls control end A1, control end B1 and control end C1;Control board C1 is electrically connected with control end D1, control end E1 and control end F1 respectively, and controls control end D1, control end E1 and control end F1;Control board D1 is electrically connected with control end D1, control end E1 and control end F1 respectively, and controls control end D1, control end E1 and control end F1.

[0027] If control board A1 is damaged or fails, it will not affect the normal work of control end A1, control end B1 and control end C1, and all of them will be connected and controlled by B1.If control board A1 and control board B1 are damaged or fail, control end A1, control end B1 and control end C1 cannot work normally, and two control boards 1 cause three control ends 2 to be unable to operate normally, which expands the influence of failure.

[0028] Figure 2 The conventional control system redundancy parity configuration flow chart is shown.It is shown in Figure 2As shown, the conventional redundant parity configuration is composed of a plurality of control boards 1 and a plurality of control terminals 2. In this embodiment, the number of control boards 1 is taken as an example of four, which are control board A2, control board B2, control board C2 and control board D2 respectively; and the number of control terminals 2 is taken as an example of four, which are control terminal A2, control terminal B2, control terminal C2 and control terminal D2 respectively. Control board A2 is electrically connected with control terminal A2 and control terminal B2 respectively, and controls the control terminal A2 and control terminal B2; control board B2 is electrically connected with control terminal A2 and control terminal B2 respectively, and controls the control terminal A2 and control terminal B2; control board C2 is electrically connected with control terminal C2 and control terminal D2 respectively, and controls the control terminal C2 and control terminal D2; control board D2 is electrically connected with control terminal C2 and control terminal D2 respectively, and controls the control terminal C2 and control terminal D2.

[0029] If control board A2 is damaged or fails, it will not affect the normal work of control terminal A2 and control terminal B2, both of which will be connected and controlled by control board B2. If control board A2 and control board B2 are both damaged or fail, control terminal A2 and control terminal B2 cannot work normally, and two control boards 1 cause two control terminals 2 to be unable to work normally.

[0030] In order to reduce the influence of failure, Figure 3 A system flowchart of one of the high-availability control system redundancy devices of this embodiment is shown, which is referred to as FIG. 2. Figure 3 As shown, the redundant non-parity configuration is composed of a plurality of control boards 1 and a plurality of control terminals 2. In this embodiment, the number of control boards 1 is taken as an example of four, which are control board A3, control board B3, control board C3 and control board D3 respectively; and the number of control terminals 2 is taken as an example of four, which are control terminal A3, control terminal B3, control terminal C3 and control terminal D3 respectively. Control board A3 is electrically connected with control terminal A3 and control terminal B3 respectively, and controls the control terminal A3 and control terminal B3; control board B3 is electrically connected with control terminal B3 and control terminal C3 respectively, and controls the control terminal B3 and control terminal C3; control board C3 is electrically connected with control terminal C3 and control terminal D3 respectively, and controls the control terminal C3 and control terminal D3; control board D3 is electrically connected with control terminal D3 and control terminal A3 respectively, and controls the control terminal D3 and control terminal A3.

[0031] If control board A3 is damaged or fails, it will not affect the normal work of control terminal A3 and control terminal B3, both of which are connected and controlled by control board B3 and control board D3. If control board A3 and control board B3 are both damaged or fail, compared with the parity configuration, only control terminal B3 cannot work normally in this embodiment, and control terminal A3 is connected and controlled by control board D3, which ensures the normal work of control terminal A3, and two control boards 1 cause one control terminal 2 to be unable to work normally, reducing the loss of failure.

[0032] Figure 4 This diagram illustrates another system flowchart of a highly available control system redundancy device according to this embodiment. (Refer to...) Figure 4 As shown, the redundant unequal configuration consists of multiple control boards 1 and multiple control terminals 2. In this embodiment, the number of control boards 1 is set to 4, namely control board A4, control board B4, control board C4 and control board D4; while the number of control terminals 2 is set to 6, namely control terminal A4, control terminal B4, control terminal C4, control terminal D4, control terminal E4 and control terminal F4. Control board A4 is electrically connected to control terminals A4, B4, and C4, and controls control terminals A4, B4, and C4; control board B4 is electrically connected to control terminals B4, C4, and D4, and controls control terminals B4, C4, and D4; control board C4 is electrically connected to control terminals D4, E4, and F4, and controls control terminals D4, E4, and F4; control board D4 is electrically connected to control terminals E4, F4, and A4, and controls control terminals E4, F4, and A4.

[0033] If control board 1A4 is damaged or malfunctions, it will not affect the normal operation of control terminals A4, B4, and C4, as they will be connected and controlled by control boards B4 and D4. If both control boards A4 and B4 are damaged or malfunction, control terminals B4 and C4 will no longer function normally. However, control terminal A4 is connected and controlled by control board D4, ensuring its normal operation. The two control boards 1 cause the two control terminals 2 to malfunction, reducing the impact of a fault compared to an equal-position configuration. If control boards A4, B4, and C4 are damaged or malfunction simultaneously, control terminals B4, C4, and D4 will no longer function normally. However, control terminals A4, E4, and F4, connected and controlled by control board D4, ensure their normal operation. Compared to the traditional equal-position configuration, using an unequal-position configuration ensures that when two redundant boards fail simultaneously, at most one controlled device will be affected. To improve system availability and reduce the impact of failures without adding more circuit boards.

[0034] In the redundant configuration, the control end 2 receives the controlled quantity of 2, which guarantees the redundant configuration and reduces the consumption of redundant cost. Moreover, the number of the control end 2 controlled by each functional board is greater than 1 and less than or equal to 3, which guarantees the reliability and stability of the overall system while meeting the redundant configuration. The number of the control end 2 controlled by the control board 1 is n, and the controlled quantity received by each control end 2 is m. According to the data in the two groups of embodiments, the total number of the control end 2 controlled by all the control boards 1 is the same as the controlled quantity received by all the control end 2 from the control board 1, that is, N*n=M*m.

[0035] In the description of the present specification, the terms "connection", "installation", "fixation" and the like should be understood in a broad sense, for example, "connection" can be fixed connection, can also be detachable connection, or integral connection; can be directly connected, or indirectly connected through an intermediate medium. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0036] The above is only the preferred embodiment of the present application and is not used to limit the present application. For those skilled in the art, the present application can have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A high-availability control system redundancy apparatus, characterized by, Comprise: Control board (1), the number of control board (1) is N, and N is greater than 2; Control end (2), the number of control end (2) is M, and M is greater than or equal to N;Each of the control board (1) is electrically connected with a plurality of control ends (2), and the number of control ends (2) controlled by each of the control board (1) is greater than 1, and is not the same.

2. The high-availability control system redundancy apparatus of claim 1, wherein, The total number of control ends (2) controlled by all the control boards (1) is the same as the controlled number of control boards (1) received by all control ends (2);Each of the control board (1) controls n control ends (2), and n is greater than 1;Each of the control ends (2) receives a controlled number m, that is N*n=M*m.

3. A high-availability control system redundancy apparatus according to claim 2, wherein, The controlled number of the control end (2) received is 2, that is n=2。 4. The high-availability control system redundancy apparatus of claim 2, wherein, The number of control ends (2) controlled by each of the control board (1) is less than or equal to 3, that is 1<n≤3。