Double-loop network safety communication door opening and closing control device of platform door control system

Abstract

The utility model relates to a double loop network safety communication door opening and closing control device of a platform door control system, which comprises a platform door controller PEDC and a plurality of door control units DCU, and takes the platform door controller PEDC as an EtherCAT main station. The door control units DCU serve as EtherCAT slave stations to form an EtherCAT network, and communication is conducted between the platform door controller PEDC and the multiple door control units DCU through an FSOE safety communication protocol. The platform door controller PEDC comprises a PEDC A system and a PEDC B system, each door control unit DCU comprises a first processor and a second processor, the PEDC A system and the first processors of the plurality of door control units DCU form a first communication topological structure, the PEDC B system and the second processors of the plurality of door control units DCU form a second communication topological structure, and the first communication topological structure and the second communication topological structure form a second communication topological structure. The first communication topological structure and the second communication topological structure are independent of each other. According to the utility model, safe and reliable communication between the platform door controller PEDC and the plurality of door control units DCU is realized.

Description

TECHNICAL FIELD

[0001] The utility model relates to the field of rail transit platform door control, especially a platform door control system double ring net safety communication switch door control device. BACKGROUND

[0002] With the rapid development of urban rail transit, the platform door control system plays a crucial role in ensuring passenger safety and improving operational efficiency. Traditional platform door control systems mainly rely on hard-wired switch door methods. Although this method provides certain stability in the short term, it lacks flexibility and adaptability in the face of complex operating environments with multiple train types and multiple formation trains. Hard-wired systems are difficult to quickly adapt to changes in train types and have limitations in maintenance and expansion, which limits the further development of platform door control systems.

[0003] To address this challenge, the modernization of platform door control systems is increasingly demanded, especially under the promotion of carbon neutralization, where multiple formation trains become the norm. This requires platform door control systems to flexibly adapt to the opening and closing door needs of different train types while ensuring system safety and reliability. Therefore, developing a technology that enables point-to-point switch door control through communication becomes particularly important. This technology needs to address the safety and reliability of communication control, as well as communication delay and response synchronization issues, while also meeting real-time and bandwidth requirements of communication interfaces to adapt to growing operational demands and improve overall system performance.

[0004] One of the biggest difficulties in implementing communication switch door control for platform door control systems is the need to address safety issues. Safety Integrity Level (SIL) is an important indicator of system safety. Functional safety design is crucial in platform door control systems, and in existing technology, the switch door function integrity of previous platform door control systems can only reach SIL2 level. SIL2 level cannot meet the strict requirements of system safety and reliability in some complex and highly safety-critical rail transit application scenarios. Market demand for SIL4 level switch door function in platform door control systems is increasing. For example, on high-density train lines or in fully automated and unmanned rail transit systems, the safety integrity level of platform door control systems needs to be further improved to ensure accurate execution of switch door control and passenger safety during train operation.

[0005] In summary, to enable communication switch door control technology to be applied to platform door control systems, the technical solution must have high safety and, as much as possible, retain the high reliability of hard-wired control itself. UTILITY MODEL CONTENT

[0006] The utility model disc purposes at overcoming prior art's insufficient, provide platform door control system double ring net safety communication switch door control device, realized platform door controller PEDC and a plurality of door control unit DCU between safe and reliable communication.

[0007] The utility model disc purposes at overcoming prior art's insufficient, provide platform door control system double ring net safety communication switch door control device, realized platform door controller PEDC and a plurality of door control unit DCU between safe and reliable communication.

[0008] Platform door control system double ring net safety communication switch door control device, the switch door control device includes platform door controller PEDC and a plurality of door control unit DCU, the switch door control device with platform door controller PEDC as EtherCAT master station, with door control unit DCU as EtherCAT slave station forms EtherCAT network and carries out communication between platform door controller PEDC and a plurality of door control unit DCU through FSOE safety communication protocol, platform door controller PEDC includes PEDC A and PEDC B, the door control unit DCU includes first processor and second processor, PEDC A and a plurality of door control unit DCU's first processor form first communication topology structure, PEDC B and a plurality of door control unit DCU's second processor form second communication topology structure, first communication topology structure and second communication topology structure are independent of each other.

[0009] Further, the first communication topology structure and the second communication topology structure are both ring topology structures.

[0010] Further, the ring topology structure adopts a cable redundancy mode for networking.

[0011] Further, the platform door controller PEDC and the door control unit DCU both adopt a two-out-of-two architecture design.

[0012] Further, the first processor and the second processor of the door control unit DCU respectively adopt two independent and mutually isolated Ethernet interfaces for constructing the first communication topology structure and the second communication topology structure.

[0013] Further, the Ethernet interface of the first processor is a first input interface and a first output interface, and the Ethernet interface of the second processor is a second input interface and a second output interface.

[0014] Further, the Ethernet output end of the PEDC A system is electrically connected with the first input interface of the first level gate unit DCU, the Ethernet input end of the PEDC A system is electrically connected with the first output interface of the last level gate unit DCU, and the first output interface of the gate unit DCU is electrically connected with the first input interface of the next level gate unit DCU one by one; the Ethernet output end of the PEDC B system is electrically connected with the second input interface of the first level gate unit DCU, the Ethernet input end of the PEDC B system is electrically connected with the second output interface of the last level gate unit DCU, and the second output interface of the gate unit DCU is electrically connected with the second input interface of the next level gate unit DCU one by one.

[0015] Further, the master control chip of the platform door controller PEDC is AMD-Xilinx XCZU2CG.

[0016] Further, the master control chip is integrated with two Cortex TM -A53 processor core, two Cortex TM -R5 real-time processing unit and FinFET+ programmable logic.

[0017] Further, the first processor and the second processor of the gate unit DCU are both two Renesas RX72M processors integrated with Ethercat slave station ESC kernels.

[0018] The utility model has the advantages of:

[0019] Through the EtherCAT network and the FSOE safety communication protocol, the safety communication between the platform door controller PEDC and the plurality of gate units DCU is realized, through two independent communication topological structures, the redundant EtherCAT network is realized, the network communication channels are mutually isolated, and the communication reliability is improved. BRIEF DESCRIPTION OF DRAWINGS

[0020] Figure 1 It is the structural schematic diagram of the utility model;

[0021] Figure 2 It is the EtherCAT cable redundant communication mechanism;

[0022] Figure 3 It is the double ring network safety communication switch door control data flow;

[0023] Figure 4 It is the safety communication switch door 2 deployment architecture diagram;

[0024] Figure 5 It is the DCU redundant slave station guide cutting process flow diagram;

[0025] Figure 6Flowchart for PEDC secure communication data synchronization;

[0026] Figure 7 Software architecture diagram for PEDC safe communication door opening and closing;

[0027] Figure 8 Software architecture diagram for DCU safe communication door opening and closing. Detailed Implementation

[0028] The following specific examples illustrate the implementation of this utility model. Those skilled in the art can easily understand other advantages and effects of this utility model from the content disclosed in this specification. This utility model can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this utility model. It should be noted that, unless otherwise specified, the following embodiments and features described therein can be combined with each other.

[0029] It should be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of the present invention. Therefore, the drawings only show the components related to the present invention and are not drawn according to the number, shape and size of the components in actual implementation. In actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0030] Example 1:

[0031] like Figures 1 to 8 As shown, the platform screen door control system includes a dual-ring network safety communication door opening and closing control device. The device comprises a platform screen door controller (PEDC) and multiple door control units (DCUs). The PEDC acts as the EtherCAT master station, and the DCUs act as EtherCAT slave stations, forming an EtherCAT network. Communication between the PEDC and the DCUs is achieved via the FSOE safety communication protocol. The PEDC includes a PEDC A series and a PEDC B series. Each DCU includes a first processor and a second processor. The PEDC A series forms a first communication topology with the first processors of the DCUs, and the PEDC B series forms a second communication topology with the second processors of the DCUs. The first and second communication topologies are independent of each other.

[0032] Both the first and second communication topologies are ring topologies.

[0033] Both the platform door controller PEDC and the door control unit DCU adopt a two-out-of-two architecture design.

[0034] The two-out-of-two architecture design refers to having two independent judgment mechanisms, and only when both of the judgment mechanisms draw valid conclusions, the whole is determined to be valid.

[0035] Through the EtherCAT network and the FSOE safety communication protocol, safe communication between the platform door controller PEDC and multiple door control units DCU is realized, and through two independent communication topologies, a redundant EtherCAT network is realized, the network communication channels are isolated from each other, and the communication reliability is improved.

[0036] Note: DCU, Door Control Unit, door control unit DCU; PEDC, Platform Edge Door Controller, platform door controller PEDC.

[0037] The door opening and closing control method is realized based on the EtherCAT network, and the FSOE safety communication protocol is deployed on the EtherCAT network, and the door opening and closing control data is transmitted through the safety communication protocol.

[0038] In the network networking scheme, the PEDC assumes the role of the EtherCAT master station, the DCU assumes the role of the EtherCAT slave station, the master station FSOE is deployed on the PEDC, the slave station FSOE is deployed on the DCU, and the PEDC and the DCU both adopt the two-out-of-two architecture design, thereby adapting to the deployment architecture required by the FSOE safety communication protocol. In order to improve the reliability of network transmission deployment application, the network adopts the cable redundancy and hot plug technology of EtherCAT, and innovatively puts forward "redundant master station + redundant slave station" to realize double ring network, and fully improves the reliability of network transmission channel.

[0039] The signals of the PEDC A system are transmitted to the first processors of the multiple door control units DCU one by one and then returned to the PEDC A system;

[0040] The signals of the PEDC B system are transmitted to the second processors of the multiple door control units DCU one by one and then returned to the PEDC B system.

[0041] Redundant communication: The PEDC network master stations A and B can simultaneously establish EtherCAT communication with a single DCU, and the network communication channels are isolated from each other. A single DCU has the function of simultaneously communicating data transmission with the A and B master stations.

[0042] Safe communication: FSoE safe communication defines the unique master / slave relationship between ESoE master and FSoE slave. In FSoE safe communication connection, each device only returns its new message after receiving a new message from the connected device. In each FSoE cycle, the complete transmission mode between FSoE master and FSoE slave is monitored by a single watchdog timer on both devices.

[0043] In application deployment, the DCU only maintains one valid FSoE safe communication data by default, and when the EtherCAT communication is disconnected, the other EtherCAT communication takes over the maintenance of FSoE safe communication, and reports the communication failure state.

[0044] The ring topology adopts a cable redundancy mode for networking.

[0045] Cable redundancy: single EtherCAT network communication adopts a cable redundancy mode for networking, when one of the DCUs fails and cannot communicate, it does not affect the communication of the remaining DCUs on the same side.

[0046] As Figure 2 In the figure, the frames sent on MAC1 are processed by the left part of the network, and the frames sent on MAC2 are processed by the right part of the network; the EtherCAT master receives both frames and merges the results, while the application receives a notification about the "line fault". In the figure, the slave N-2 fails.

[0047] The switch door control method of the station door control system double-ring network safe communication, the switch door control method realizes the communication between PEDC A system and the first processor through the first communication topology structure, and the switch door control method realizes the communication between PEDC B system and the second processor through the second communication topology structure.

[0048] The processing method of the switch door control method for the data stream from the PEDC A system includes the following steps:

[0049] S11: PEDC A system sends a switch door control command to the FSoE master of PEDC A system, and the FSoE master of PEDC A system converts the switch door control command into a master safe PDU (i.e. a master safe PDU in Figure 3 and sends the master safe PDU to the EtherCAT slave of the first processor of the door control unit DCU through the EtherCAT master of PEDC A system;

[0050] S12: The EtherCAT slave of the first processor sends the received master safe PDU to the FSoE slave of the door control unit DCU;

[0051] S13: The FSOE slave station of the door control unit DCU sends the obtained response switch door control command to the switch door execution interface after processing the received master station safety protocol data unit, and responds to the EtherCAT slave station of the first processor with the slave station safety protocol data unit;

[0052] S14: The EtherCAT slave station of the first processor sends the response slave station safety protocol data unit to the FSOE master station of the PEDCA system through the EtherCAT master station of the PEDCA system;

[0053] The processing method of the switch door control method for the data stream from the PEDCA system comprises the following steps:

[0054] S21: The PEDCB system sends the switch door control command to the FSOE master station of the PEDCB system, and the FSOE master station of the PEDCB system converts the switch door control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the second processor of the door control unit DCU through the EtherCAT master station of the PEDCB system;

[0055] S22: The EtherCAT slave station of the second processor sends the received master station safety protocol data unit to the FSOE slave station of the door control unit DCU;

[0056] S23: The FSOE slave station of the door control unit DCU sends the obtained response switch door control command to the switch door execution interface after processing the received master station safety protocol data unit, and responds to the EtherCAT slave station of the second processor with the slave station safety protocol data unit;

[0057] S24: The EtherCAT slave station of the second processor sends the response slave station safety protocol data unit to the FSOE master station of the PEDCB system through the EtherCAT master station of the PEDCB system.

[0058] The switch door control commands of the PEDCA system and the PEDCB system are received through the switch door command interface.

[0059] The control data flow of the double-ring network safety communication switch door control used in the platform door control system is as shown in Figure 3 The control flow from receiving the switch door instruction from the PEDC to receiving and executing the switch door by the DCU is described.

[0060] The switch door command acquisition of the PEDCA system and the PEDCB system, the FSOE master station safety communication, and the FSOE slave station safety communication of the door control unit DCU all adopt a 2-to-2 design, as shown in Figure 4, which ensures the safety of the switch door command issued between the PEDC and the DCU.

[0061] Therefore, the processors of the PEDC A system and the PEDC B system are electrically connected for dual-core synchronization, and the first processor and the second processor of the gate control unit DCU are electrically connected for dual-core synchronization.

[0062] The first processor and the second processor of the gate control unit DCU respectively adopt two independent and mutually isolated Ethernet interfaces to construct the first communication topology and the second communication topology.

[0063] The Ethernet interface of the first processor is a first input interface and a first output interface, and the Ethernet interface of the second processor is a second input interface and a second output interface.

[0064] The Ethernet output end of the PEDC A system is electrically connected with the first input interface of the first-stage gate control unit DCU, the Ethernet input end of the PEDC A system is electrically connected with the first output interface of the last-stage gate control unit DCU, and the first output interface of the gate control unit DCU is electrically connected with the first input interface of the next-stage gate control unit DCU one by one; the Ethernet output end of the PEDC B system is electrically connected with the second input interface of the first-stage gate control unit DCU, the Ethernet input end of the PEDC B system is electrically connected with the second output interface of the last-stage gate control unit DCU, and the second output interface of the gate control unit DCU is electrically connected with the second input interface of the next-stage gate control unit DCU one by one.

[0065] Reliability design: two redundant safety communication ring networks are designed for the PEDC and the DCU. Thanks to the design of two independent and mutually isolated Ethernet interfaces of the DCU safety slave station, when one PEDC is completely offline, the FSOE interface of the DCU internal slave station will automatically switch to the other one, so as to maintain the normal issuance of the switch door control command. From the perspective of network interface reliability, as long as one of the four network interfaces of the PEDC or one of the four network interfaces of the single DCU maintains normal, the safety communication switch door function continues to maintain, fully reflecting the high reliability of the network communication switch door control scheme.

[0066] The fault processing method of the switch door control method for the first communication topology and the second communication topology is:

[0067] If one of the first communication topology and the second communication topology fails and the other works normally, the gate control unit DCU receives the master station safety protocol data unit of the normally working one of the two, and the FSOE slave station processes the master station safety protocol data unit to obtain a response switch door control command and responds to the slave station safety protocol data unit, and transmits the slave station safety protocol data unit through the normally working one of the first communication topology and the second communication topology.

[0068] Synchronization design: Since the safety communication mechanism between PEDC and DCU requires point-to-point maintenance, in order to solve the situation that the DCU switch door command receiving delay is caused by the processing delay in the PEDC software when communicating with multiple DCUs, the PEDC designs a data synchronization mechanism in the EtherCAT data transmission interface, as shown in Figure 6 The synchronization of the switch door command issuing is realized. At the same time, the network transmission bandwidth of the EtherCAT network is 100 Mbps, which also guarantees the real-time performance of the communication transmission.

[0069] The switch door control method for the communication synchronization method of the station door controller PEDC and the plurality of gate control units DCU includes the following steps:

[0070] 1) The station door controller PEDC receives the slave station safety protocol data unit;

[0071] 2) Send a switch door control command to the FSOE master station;

[0072] 3) The FSOE master station processes the switch door control command into a master station safety protocol data unit;

[0073] 4) If the traversal processing of the slave station safety protocol data unit for all gate control units DCU is not completed, return to step 3);

[0074] 5) Synchronously update the master station safety protocol data unit of the interface with the gate control unit DCU;

[0075] 6) The FSOE master station of the station door controller PEDC sends the master station safety protocol data unit.

[0076] This embodiment describes a case of implementing multiple marshalling safety communication switch doors based on the double-ring network safety communication switch door control technology of the station door control system.

[0077] PEDC deployment case introduction

[0078] The main control chip of the station door controller PEDC is AMD-Xilinx XCZU2CG, and the main control chip is integrated with two Cortex TM -A53 processor cores, two Cortex TMR5 real-time processing unit and 16nm FinFET+ programmable logic form a heterogeneous processing system. A 2-of-2 architecture and dual-core lockstep design are adopted, which ensures stable operation of the system through double redundancy and ensures security of the system through 2-of-2. The Ethercat master station, Fsoe master station and switch door command acquisition processing module are deployed between R5 and the soft core in the Linux environment of A53, realizing 2-of-2 heterogeneous processing.

[0079] Figure 7 The PEDC safe communication switch door software architecture diagram is as follows:

[0080] APP1: a system communication module, responsible for communication with other professionals (signal system, integrated monitoring system communication, etc.).

[0081] APP2: a system monitoring module, responsible for monitoring the running state of the platform door system.

[0082] APP3: a control module of the system, responsible for the control of the platform door opening and closing.

[0083] Component 1: a network layer component of the computer network.

[0084] Component 2: an application layer component of the computer network.

[0085] Communication interface 1 and communication interface 2: both are hardwires.

[0086] Communication interface 3: a network communication interface of the system, including an EtherCAT network port.

[0087] The PEDC deploys the switch door acquisition control module and the FSOE master station of the system in the processor R5 and the processor Microblaze, realizes a 2-of-2 control, and runs the Ethercat master station in the Linux environment of A53 to transmit safe communication data.

[0088] DCU deployment case introduction

[0089] The first processor and the second processor of the door control unit DCU are both Rensa RX72M processors integrated with Ethercat slave station ESC kernels; so that the slave station has two completely independent Ethernet interfaces, and a single network adopts an in-out design. Two cores deploy Fsoe slave stations and switch door control execution modules to realize 2-of-2 processing. In order to realize slave station network redundancy switching, independent Ethercat slave stations are deployed in both cores, and a serial synchronous data interface for redundant standby switching transmission of safe communication data is also provided.

[0090] The embodiment has the following advantages:

[0091] 1. Communication control scheme flexibility: Breaks through the limitations of traditional hard-wired control, this safe communication switch door technology scheme makes the platform door fully adapt to different train types and marshalling trains, as well as the deployment of virtual marshalling, etc., providing unprecedented flexibility for platform door control system, which is crucial for coping with the diversified operation needs of rail transit.

[0092] 2. Reliability of communication control scheme: Based on dual-core architecture inside DCU, the isolated dual-network slave station interface scheme is designed to create independent two-way ring network architecture for the main and standby PEDC, which fully improves the reliability of the communication switch door scheme.

[0093] 3. Safety of communication control scheme: The PEDC and DCU of this scheme adopt 2-to-2 architecture, which makes the switch door command transmission process able to overcome the hazards caused by various single-point failures, greatly improving the safety of switch door command transmission of the platform door control system, making the scheme widely applicable to various complex and safety-demanding application scenarios.

[0094] In summary, the dual-ring network safe communication control technology is deployed on PEDC and DCU with 2-to-2 architecture, and FSOE safe communication also adopts 2-to-2 mechanism for safe data verification and analysis, ensuring the safety and accuracy of data transmission, eliminating the risk of single-point failure, and significantly improving the safety of switch door function.

[0095] Based on the "redundant master station + redundant slave station" dual-ring network structure deployed on the EtherCAT network, the system can automatically switch to the backup communication transmission path when any master station fails or the network interface fails, maintaining the normal issuance of switch door control instructions. This redundant design not only reduces the risk of single-point failure, but also improves the fault tolerance of the system, ensuring the stable operation of the platform door control system under various abnormal conditions, fully embodying the high reliability of the control scheme.

[0096] The technical scheme realizes switch door control for multiple marshalling through communication automatic adaptation, providing flexible adaptation capability for different train types and marshalling. This flexibility is mainly due to the implementation of safe communication scheme, making the system quickly respond to the switch door needs of different trains. In addition, the automation level of the system is improved, reducing the risk of human intervention, improving the overall safety management level of the platform, and also adapting to the needs of mixed operation of multiple marshalling train types, enhancing the applicability and flexibility of the system.

[0097] The 100Mbps transmission bandwidth of the EtherCAT network ensures high real-time communication transmission, meeting the needs of large data volume and fast response of the platform door control system. The high real-time network transmission capability ensures the rapid issuance and execution of the switch door command, reduces communication delay, and improves the response speed of the system. At the same time, the larger data bandwidth also provides more data processing interfaces for the system, improving the overall performance of the system.

[0098] The long-distance advantage of network transmission makes it suitable for more complex electrical deployment environments. At the same time, the technical solution is not only suitable for subway platform doors, but also widely used in high-speed rail platform doors and other rail transit fields. This universal applicability makes the technical solution have a wide market application prospect. Whether it is a new project construction or an old project modification, the technical solution can provide an effective solution to meet the needs of different rail transit scenarios. This wide applicability enables the technical solution to work in a variety of environments, providing a new safe communication control solution for rail transit platform door control systems.

[0099] A safe communication control scheme is proposed in the platform door control system, which is deployed between the PEDC (Platform Edge Door Controller) and the DCU (Door Control Unit). The platform door control system can automatically adapt to multiple marshalling switch door control under different marshalling vehicle scenarios through communication, and can also ensure the synchronization of communication switch door control. At the same time, it can solve the safety and reliability problems of the communication scheme itself. This scheme can be widely applied to the field of rail transit, including but not limited to subway platform doors and high-speed rail platform doors and other scenarios.

[0100] The above-described embodiments only express the specific implementation of the present application, and the description is more specific and detailed, but it should not be understood as limiting the scope of the present application. It should be noted that for those skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are all within the scope of protection of the present application.

Claims

1. A safe communication switch door control device for a double ring network of a platform door control system, characterized in that: The switch door control device includes a platform door controller PEDC and a plurality of door control units DCU, the switch door control device takes the platform door controller PEDC as an EtherCAT master station, takes the door control unit DCU as an EtherCAT slave station to form an EtherCAT network, and communicates between the platform door controller PEDC and the plurality of door control units DCU through an FSOE safety communication protocol; the platform door controller PEDC includes a PEDC A system and a PEDC B system, the door control unit DCU includes a first processor and a second processor, the PEDC A system forms a first communication topology structure with the first processor of the plurality of door control units DCU, the PEDC B system forms a second communication topology structure with the second processor of the plurality of door control units DCU, and the first communication topology structure and the second communication topology structure are independent of each other; the first communication topology structure and the second communication topology structure are both ring topology structures; the first processor and the second processor of the door control unit DCU respectively adopt two independent and mutually isolated Ethernet interfaces to construct the first communication topology structure and the second communication topology structure; the Ethernet interface of the first processor is a first input interface and a first output interface, and the Ethernet interface of the second processor is a second input interface and a second output interface; the Ethernet output end of the PEDC A system is electrically connected with the first input interface of the first-level door control unit DCU, the Ethernet input end of the PEDC A system is electrically connected with the first output interface of the last-level door control unit DCU, and the first output interface of the door control unit DCU is electrically connected with the first input interface of the next-level door control unit DCU one by one; the Ethernet output end of the PEDC B system is electrically connected with the second input interface of the first-level door control unit DCU, the Ethernet input end of the PEDC B system is electrically connected with the second output interface of the last-level door control unit DCU, and the second output interface of the door control unit DCU is electrically connected with the second input interface of the next-level door control unit DCU one by one.

2. The platform door control system double ring network safety communication switch door control device according to claim 1, characterized in that: The ring topology structure adopts a cable redundancy mode for networking.

3. The platform door control system double ring network safety communication switch door control device according to claim 1, characterized in that: The platform door controller PEDC and the door control unit DCU both adopt a two-out-of-two architecture design.

4. The platform door control system double ring network safety communication switch door control device according to claim 1, characterized in that: The main control chip of the platform door controller PEDC is an AMD-Xilinx XCZU2CG.

5. The platform door control system double ring network safety communication switch door control device according to claim 4, characterized in that: The master chip integrates two Cortex TM - A53 processor core, two Cortex TM - R5 real-time processing unit and FinFET+ programmable logic.

6. The platform door control system double ring network safety communication switch door control device according to claim 1, characterized in that: The first processor and the second processor of the door control unit DCU are both two Renesas RX72M processors integrated with Ethercat slave station ESC kernels.

Images