A microcomputer-controlled top speed regulation control system based on redundancy design

Abstract

This invention relates to a microcomputer-controlled top speed regulation control system based on redundancy design, belonging to the field of hump speed regulation technology. The purpose of this invention is to solve the problem of poor stability in existing microcomputer-controlled top speed regulation systems. Information output from the pedal module and the weighing module is transmitted to a redundant fourth CPU via a redundant third CPU. Information output from the track module is also transmitted to the redundant fourth CPU. After processing and analysis by the redundant fourth CPU, a control signal is output and sent to the execution power board via a redundant second CPU. The redundant fourth CPU can also transmit information output from the pedal module, weighing module, and track module to the electronic station. After receiving the information, the operator manually outputs control commands to the execution power board according to the operational requirements to achieve speed regulation. Switching occurs between the two redundant control modules, between the two redundant first CPUs, and between the two redundant second CPUs. This invention employs redundancy technology to ensure system reliability.

Description

Technical Field

[0001] This utility model relates to the field of hump speed regulation technology. Background Technology

[0002] Microcomputer-controlled jacking speed regulation systems are mainly used in railway marshalling yards. They use communication technology to track and control shunted cars in real time. Based on parameters such as the weight, length, speed of the shunted cars, the available track length, the braking capacity of the controllable jacking, and the car's running resistance, the system controls the controllable jacking to either brake or not brake, ultimately achieving safe coupling of the cars. Existing microcomputer-controlled jacking speed regulation systems use a single-bus communication, single-CPU control, and single-power supply design, resulting in poor anti-interference capabilities and reliability. They are sensitive to electrical sparks and electromagnetic interference generated by electric locomotives, and are frequently disrupted by induced lightning strikes during the rainy season, leading to equipment malfunctions and even system crashes. Especially when the equipment is past its service life or under special weather conditions, poor cable moisture protection combined with long transmission distances within the station reduces anti-interference capabilities, causing interference and interruptions in information transmission. This can result in the loss of some control commands, causing the controllable jacking to fail to brake when a car passes, thus affecting railway transportation safety. Utility Model Content

[0003] The purpose of this invention is to solve the problem of poor reliability in existing microcomputer-controlled speed regulation systems, and to propose a microcomputer-controlled speed regulation control system based on redundancy design.

[0004] The microcomputer-controlled top speed regulation control system based on redundancy design includes a control cabinet, an electronic console, a monitoring unit, and multiple execution power supply cabinets.

[0005] The control cabinet includes a pedal module, a weighing module and a track module, communication equipment, a control cabinet terminal, two redundant control modules and a CAN bus;

[0006] The pedal module is used to collect the speed of the hook train, the weighing module is used to collect the weight of the hook train, and the track module is used to collect track information.

[0007] The control cabinet terminal includes two redundant first CPUs;

[0008] Each redundant control module includes a third CPU and a fourth CPU;

[0009] The CAN port 1 of the two redundant third CPUs communicates with multiple pedal modules via CAN bus, and the CAN port 2 of the two redundant third CPUs communicates with the weighing module via CAN bus.

[0010] The hook data signal output terminal of the third CPU in each control module is connected to the hook data signal input terminal of the fourth CPU in the same control module.

[0011] Each fourth CPU's CAN port 1, each first CPU's CAN port 1, and the track module communicate via the CAN bus.

[0012] The CAN port 2 of each fourth CPU, the CAN port 2 of each first CPU, and multiple execution power cabinets communicate via CAN bus.

[0013] Both the electronic station and the monitoring unit interact with the communication equipment via the CAN bus, and the communication equipment communicates with two redundant first CPUs via Ethernet.

[0014] Two redundant control modules work in a time-sharing manner, serving as the master control module and the slave control module respectively. When the slave control module detects an abnormality in the master control module, the master control module switches to the slave control module.

[0015] Two redundant first CPUs operate in a time-sharing manner, serving as the master first CPU and the slave first CPU respectively. When the slave first CPU detects an abnormality in the master first CPU, the master first CPU will switch to the slave first CPU to operate.

[0016] Each execution power cabinet includes up to 12 execution power boards and 1 execution power cabinet terminal, and each execution power cabinet terminal includes 2 redundant second CPUs;

[0017] The second CAN port of each fourth CPU, the second CAN port of each first CPU, and the two redundant second CPUs in each execution power cabinet terminal communicate via the CAN bus.

[0018] Each execution power cabinet contains two redundant second CPUs that communicate with up to 12 execution power boards via a CAN bus.

[0019] Two redundant second CPUs operate in a time-sharing manner, serving as the master second CPU and the slave second CPU respectively. When the slave second CPU detects an anomaly in the master second CPU, the master second CPU switches to the slave second CPU to operate.

[0020] Preferably, the communication equipment includes communication extensions and switches;

[0021] Both the electronic station and the monitoring unit interact with the communication unit via the CAN bus. The communication unit communicates with two redundant first CPUs via Ethernet through a switch.

[0022] Preferably, the control cabinet and the execution power cabinet each include two redundant power supplies;

[0023] The execution power cabinet has two redundant power supplies to power the execution power board and the execution power cabinet terminal.

[0024] The control cabinet has two redundant power supplies to power the communication extension, control cabinet terminal, two redundant control modules, pedal module, weighing module and track module.

[0025] The beneficial effects of this utility model are:

[0026] This invention employs dual CAN buses, dual first CPUs in the control cabinet terminal, dual control modules, and dual second CPUs in the execution power supply cabinet terminal. This redundant communication design enhances the reliability and fault tolerance of the control system. The dual first CPUs communicate with each other, the dual control modules communicate with each other, and the dual second CPUs communicate with each other. If one CPU in the redundancy fails, the system can quickly switch to the other CPU, ensuring the continuity and stability of data communication. Furthermore, the dual CAN bus communication is high-speed and efficient, significantly improving the system's response speed and data processing capabilities, providing strong support for real-time control. It also features redundant dual control modules; both control modules have identical hardware and software. If one control module fails, the system quickly switches to the other, further enhancing system control reliability through redundancy.

[0027] This utility model adopts a modular design with dual CAN bus transmission, dual CPUs for information processing and control command issuance, and dual power supply redundancy, ensuring stable and reliable equipment operation, improving the system's anti-interference capability, and ensuring that the system does not crash during long-term operation in harsh electromagnetic environments and frequent thunderstorms. The modular design of the redundant parts makes it easy to expand and maintain.

[0028] This invention employs two completely independent communication lines. If one line fails, the system quickly switches to the other, ensuring the continuity and stability of data communication, preventing the loss of control commands and other information, and ensuring safe coupling of vehicles. When one power source fails, the other can continue to supply power, ensuring continuous and uninterrupted system operation. Attached Figure Description

[0029] Figure 1 This is a schematic diagram of a microcomputer-controlled top speed regulation control system based on redundancy design.

[0030] Figure 2 A schematic diagram showing that each power cabinet terminal includes two redundant second CPUs;

[0031] Figure 3 A schematic diagram showing two redundant control modules and a control cabinet terminal containing two redundant first CPUs;

[0032] Figure 4 The power supply schematic diagram for the two redundant power supplies in the power cabinet;

[0033] Figure 5 This is a power supply schematic diagram for two redundant power supplies within the control cabinet. Detailed Implementation

[0034] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments. Based on the embodiments of the present utility model, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the protection scope of the present utility model.

[0035] It should be noted that, unless otherwise specified, the embodiments and features described in these embodiments can be combined with each other.

[0036] The present invention will be further described below with reference to the accompanying drawings and specific embodiments, but this is not intended to limit the present invention.

[0037] Specific implementation method one: Combining Figure 1 This embodiment describes a microcomputer-controlled top speed control system based on redundancy design. The system includes a control cabinet, an electronic console, a monitoring unit, and multiple execution power supply cabinets.

[0038] The control cabinet includes a pedal module, a weighing module and a track module, communication equipment, a control cabinet terminal, two redundant control modules and a CAN bus;

[0039] The pedal module is used to collect the speed of the hook train, the weighing module is used to collect the weight of the hook train, and the track module is used to collect track information.

[0040] The control cabinet terminal includes two redundant first CPUs;

[0041] Each redundant control module includes a third CPU and a fourth CPU;

[0042] The CAN port 1 of the two redundant third CPUs communicates with multiple pedal modules via CAN bus, and the CAN port 2 of the two redundant third CPUs communicates with the weighing module via CAN bus.

[0043] The hook data signal output terminal of the third CPU in each control module is connected to the hook data signal input terminal of the fourth CPU in the same control module.

[0044] Each fourth CPU's CAN port 1, each first CPU's CAN port 1, and the track module communicate via the CAN bus.

[0045] The CAN port 2 of each fourth CPU, the CAN port 2 of each first CPU, and multiple execution power cabinets communicate via CAN bus.

[0046] Both the electronic station and the monitoring unit interact with the communication equipment via the CAN bus, and the communication equipment communicates with two redundant first CPUs via Ethernet.

[0047] Two redundant control modules work in a time-sharing manner, serving as the master control module and the slave control module respectively. When the slave control module detects an abnormality in the master control module, the master control module switches to the slave control module.

[0048] Two redundant first CPUs operate in a time-sharing manner, serving as the master first CPU and the slave first CPU respectively. When the slave first CPU detects an abnormality in the master first CPU, the master first CPU will switch to the slave first CPU to operate.

[0049] Specifically, during system operation, the main control module and the primary CPU initially operate. If either the main control module or the primary CPU malfunctions, the system switches to the slave control module and the slave CPU. Once the main control module and the primary CPU are functioning normally again, the system switches back to operating as the main control module and the primary CPU. This switching process is existing technology.

[0050] Figure 1 The two redundant control modules are control module A and control module B. The two hardware and software are completely identical and process in parallel.

[0051] The CAN bus connects all components. It employs two independent bus systems, each containing independent bus cables, bus drivers, and bus controllers. The redundant, hot-standby, dual-channel isolated CAN bus communication design provides full redundancy at the physical medium, physical layer, data link layer, and application layer. The primary CAN bus serves as the default communication channel, responsible for normal system operation. In the event of a primary CAN bus failure, the secondary CAN bus automatically takes over, ensuring communication continuity. The dual-channel isolation design further reduces mutual interference between the two buses, improving the stability and reliability of CAN bus communication.

[0052] The pedal module, weight measurement module, and track module are three data acquisition modules with different functions. The pedal module and weight measurement module transmit the collected hooklift speed and weight to the third CPU. The third CPU transmits the received information to the fourth CPU. At the same time, the track module transmits the collected track information to the fourth CPU. The fourth CPU processes the received data and outputs control signals to the second CPU. The second CPU sends control commands to the execution power board via the CAN bus. After processing the data, the fourth CPU also transmits the vehicle data to the first CPU in the control display terminal. The first CPU then transmits the data to the electronic station and monitoring unit via the switch and communication extension. The monitoring unit stores the data. After receiving the data, the electronic station displays the vehicle data and travel position on the interface. Based on the vehicle data, the operator can manually output control commands to the second CPU via the communication equipment when necessary. The second CPU then sends the control commands to the execution power board via the CAN bus.

[0053] When the system powers on, the weighing module, track module, pedal module, and power supply board all perform self-tests and send their results to their respective connected CPUs. Additionally, these modules can also actively send self-test commands from their respective connected CPUs, and each module will then report its self-test results. All module status information is transmitted to the first CPU via the CAN bus. When the status of a module changes, the first CPU sends the information to the electronic station and monitoring unit via communication devices for display and storage of the device status.

[0054] Specific Implementation Method 2: This implementation method further defines the microcomputer-controlled top speed control system based on redundancy design described in Specific Implementation Method 1. In this implementation method, each execution power cabinet includes an execution power board and an execution power cabinet terminal, and each execution power cabinet terminal includes two redundant second CPUs.

[0055] The second CAN port of each fourth CPU, the second CAN port of each first CPU, and the two redundant second CPUs in each execution power cabinet terminal communicate via the CAN bus.

[0056] Each execution power cabinet contains two redundant second CPUs that communicate with up to 12 execution power boards via a CAN bus.

[0057] Two redundant second CPUs operate in a time-sharing manner, serving as the master second CPU and the slave second CPU respectively. When the slave second CPU detects an anomaly in the master second CPU, the master second CPU switches to the slave second CPU to operate.

[0058] Specifically, the number of execution power cabinets is determined by the total number of execution power boards required on site. Each execution power cabinet can hold at least one and at most 12 execution power boards. If 12 execution power boards are needed, only one execution power cabinet is required; if 13 execution power boards are needed, two execution power cabinets are required. Each execution power cabinet contains one execution power cabinet terminal.

[0059] Specific Implementation Method 3: This implementation method further defines the microcomputer-controlled top speed control system based on redundancy design described in Specific Implementation Method 2. In this implementation method, the communication equipment includes a communication extension and a switch.

[0060] Both the electronic station and the monitoring unit interact with the communication unit via the CAN bus. The communication unit communicates with two redundant first CPUs via Ethernet through a switch.

[0061] Specific Implementation Method 4: This implementation method further defines the microcomputer-controlled top speed control system based on redundancy design described in Specific Implementation Method 2 or 3. In this implementation method, the control cabinet and the execution power cabinet each include 2 redundant power supplies.

[0062] The execution power cabinet has two redundant power supplies to power the execution power board and the execution power cabinet terminal.

[0063] The control cabinet has two redundant power supplies to power the communication extension, control cabinet terminal, two redundant control modules, pedal module, weighing module and track module.

[0064] Specifically, a dual power supply is employed, with each device having two power sources. If one power source fails, the other can continue to supply power, ensuring continuous and uninterrupted system operation, while simultaneously triggering an alarm to alert personnel for maintenance. This design not only improves system stability but also reduces downtime due to power failures, thereby guaranteeing the efficient and reliable operation of the entire system. The system also features power output detection, providing early warnings of power supply status and increasing system power reliability.

[0065] This embodiment can also provide audible and visual alarms to prompt staff for maintenance. Both the control cabinet terminal and the execution power cabinet terminal include displays, making it convenient for on-site operators to view system parameters and equipment and bus status.

[0066] On-site installation: A weighing unit consisting of one load cell and two pairs of speed sensors is installed on the hump. The signal output terminals of the load cell and the two pairs of speed sensors are all connected to the input terminal of the weighing module. When each hook car passes through the weighing unit, the weighing module sends information to the control module, mainly including the hook number of this hook car, the weight class of this hook car, the total number of axles of this hook car, hump occupancy information, and sensor malfunction status in the weighing area.

[0067] In the track area, track circuits are arranged in sections on each track. The output of the track circuit is connected to the input of the track module. When the occupancy of any section changes, the track module sends track occupancy information to the control module in real time to obtain the track length that can be used for parking.

[0068] A pair of speed sensors are installed one meter in front of each controllable top on site. The output of the speed sensor is connected to the input of the pedal module (one pedal module can connect up to 32 speed sensors). Whenever an axle passes the speed sensor at that location, the pedal module sends information to the control module, mainly including the current position information, the speed of the hook-up vehicle, direction, number of axles, and sensor malfunction.

[0069] The fourth CPU within the control module acquires information such as the current position of the hook car, hook car speed, hook car direction, weight class of the hook car, total number of axles of the hook car, current number of axles, and track length that can be stored. It then compares this information with preset parameters multiple times to determine whether the controllable top section where the hook car is located needs to perform work to reduce the hook car speed. Based on the controllable top model, it determines whether power needs to be supplied or de-energized, and how long after power is supplied it should be de-energized. Afterward, it sends a power supply command to the corresponding execution power cabinet to ensure that the hook car moves towards the safe working area or safe coupling at an exit speed of no more than 5 km / h.

[0070] Combination Figure 1 Explain the control principle of this system:

[0071] The redundant CAN buses serve as the main CAN bus group and the backup bus group, the two redundant first CPUs serve as the master first CPU and the slave first CPU, and the two redundant control modules serve as the master control module and the slave control module, respectively. When the system starts up, the main CAN bus, the master first CPU, and the master control module work. When the main CAN bus group, the master first CPU, and the master control module fail, the slave CAN bus group, the slave first CPU, and the slave control module take over the work.

[0072] Information output from the pedal module and weighing module is transmitted to a redundant fourth CPU via a redundant third CPU. Information output from the track module is also transmitted to the redundant fourth CPU. After processing and analysis by the redundant fourth CPU, control commands are output and sent to the execution power board via a redundant second CPU. For example, controlling the power supply of a certain execution power board will activate the solenoid valve on the corresponding controllable top, causing the controllable top to perform work. The redundant fourth CPU can also transmit information output from the pedal module, weighing module, and track module to the electronic station. After receiving the information, the operator can issue manual control commands to the execution power board according to the work requirements to control the power supply or deactivation of the controllable top. The electronic station can also receive control feedback information from the execution power board (the electronic station and the monitoring unit interact with the communication unit via a CAN bus. The communication unit communicates with the first CPU via an Ethernet switch to obtain data information from each execution power board).

[0073] The pedal module hardware has 32 input processing units, each with a self-test function. It can process 16 pairs of pedal signals (front and rear pedals spaced one meter apart). When a hookup truck passes by, it can calculate the speed and the number of axles passing in real time, and determine the hookup information. This information is transmitted to control module A and control module B via the CAN bus.

[0074] The pedal module has a closed-loop timed self-test function to ensure that the system can work continuously and stably in complex and harsh environments.

[0075] The track module collects track occupancy information (the track module is used to collect whether different sections of the track are occupied by trains) and transmits it via the CAN bus to the monitoring machine and the electronic station in sequence through the fourth CPU, the first CPU, the switch, and the communication substation. The monitoring machine is responsible for storing the data, and the electronic station is responsible for displaying the track occupancy information on the interface.

[0076] Each power supply cabinet terminal includes two secondary CPUs, improving the system's fault tolerance and processing efficiency, and enhancing the reliability of power output commands. The power supply board can also package and upload power supply status information to the electronic station. This real-time feedback allows the electronic station to promptly analyze the power supply board's operating status and any potential problems, making corresponding adjustments or troubleshooting. This ensures the reliable issuance of power output commands in the controllable automatic speed regulation system, avoiding "false power supply" problems caused by interference, and providing voltage stabilization, filtering, overvoltage, and overcurrent protection functions for system operation.

[0077] The execution power cabinet terminal is responsible for receiving and parsing commands from the electronic station and the fourth CPU, and then issuing these commands to the execution power board. The execution power cabinet terminal employs a dual-first-CPU design, with two independent processors handling different tasks, improving the system's fault tolerance and processing efficiency, and enhancing the reliability and stability of power output command issuance.

[0078] Under the dual-CPU host control and management, control information is transmitted through dual CAN communication channels to track and control the shunting vehicles in real time, thereby achieving safe coupling of the shunting hook cars.

[0079] The power modules, power cables, and power management unit all operate with dual backups, ensuring that if one power supply fails, the other power supply can still provide a stable power supply.

[0080] While specific embodiments of the present invention have been described herein with reference to them, it should be understood that these embodiments are merely examples of the principles and applications of the present invention. Therefore, it should be understood that many modifications can be made to the exemplary embodiments, and other arrangements can be designed without departing from the spirit and scope of the present invention as defined by the appended claims. It should be understood that different dependent claims and features described herein can be combined in ways different from those described in the original claims. It is also understood that features described in conjunction with individual embodiments can be used in other described embodiments.

Claims

1. A microcomputer controllable governor control system based on a redundant design, characterized in that, The system includes a control cabinet, an electronic console, a monitoring unit, and multiple power supply cabinets. The control cabinet includes a pedal module, a weighing module and a track module, communication equipment, a control cabinet terminal, two redundant control modules and a CAN bus; The pedal module is used to collect the speed of the hook train, the weighing module is used to collect the weight of the hook train, and the track module is used to collect track information. The control cabinet terminal includes two redundant first CPUs; Each redundant control module includes a third CPU and a fourth CPU; The CAN port 1 of the two redundant third CPUs communicates with multiple pedal modules via CAN bus, and the CAN port 2 of the two redundant third CPUs communicates with the weighing module via CAN bus. The hook data signal output terminal of the third CPU in each control module is connected to the hook data signal input terminal of the fourth CPU in the same control module. Each fourth CPU's CAN port 1, each first CPU's CAN port 1, and the track module communicate via the CAN bus. The CAN port 2 of each fourth CPU, the CAN port 2 of each first CPU, and multiple execution power cabinets communicate via CAN bus. Both the electronic station and the monitoring unit interact with the communication equipment via the CAN bus, and the communication equipment communicates with two redundant first CPUs via Ethernet. Two redundant control modules work in a time-sharing manner, serving as the master control module and the slave control module respectively. When the slave control module detects an abnormality in the master control module, the master control module switches to the slave control module. Two redundant first CPUs operate in a time-sharing manner, serving as the master first CPU and the slave first CPU respectively. When the slave first CPU detects an abnormality in the master first CPU, the master first CPU will switch to the slave first CPU to operate.

2. The microprocessor-based governor control system based on redundant design according to claim 1, characterized in that, Each execution power cabinet includes up to 12 execution power boards and 1 execution power cabinet terminal, and each execution power cabinet terminal includes 2 redundant second CPUs; The second CAN port of each fourth CPU, the second CAN port of each first CPU, and the two redundant second CPUs in each execution power cabinet terminal communicate via the CAN bus. Each execution power cabinet contains two redundant second CPUs that communicate with up to 12 execution power boards via a CAN bus. Two redundant second CPUs operate in a time-sharing manner, serving as the master second CPU and the slave second CPU respectively. When the slave second CPU detects an anomaly in the master second CPU, the master second CPU switches to the slave second CPU to operate.

3. The microprocessor-based governor control system based on redundant design according to claim 2, characterized in that, Communication equipment includes communication extensions and switches; Both the electronic station and the monitoring unit interact with the communication unit via the CAN bus. The communication unit communicates with two redundant first CPUs via Ethernet through a switch.

4. The microprocessor-based governor control system based on redundant design according to claim 2 or 3, characterized in that, The control cabinet and the execution power cabinet each include two redundant power supplies; The execution power cabinet has two redundant power supplies to power the execution power board and the execution power cabinet terminal. The control cabinet has two redundant power supplies to power the communication extension, control cabinet terminal, two redundant control modules, pedal module, weighing module and track module.

Images