Communication-based SIL4 platform screen door system

Abstract

A communication-based SIL4 platform screen door system, comprising a domain controller, a DCU, an external interface and other subsystem devices. The platform screen door system implements interconnection and intercommunication with a signal system and the other subsystem devices by means of a bus connection and a hard wire connection, such that the high safety and high reliability of the system are ensured. Moreover, by means of using a dual-CPU architecture in the domain controller and the DCU, dual processing and cross validation can be performed on data by using the dual-CPU design, such that data accuracy and consistency are ensured, and an existing relay circuit is replaced to achieve SIL4. A transparent data transmission mechanism performed by using a single CPU reduces the data transmission delay and improves a real-time response capability. Further disclosed is the application of the communication-based SIL4 platform screen door system in a rail-transit door control system.

Description

A communication-based SIL4 level platform door system TECHNICAL FIELD

[0001] The present application relates to the technical field of platform door control, and specifically relates to a communication-based SIL4 level platform door system. BACKGROUND

[0002] In a modern rail transit system, a platform door system is an important component for ensuring passenger safety; the platform door not only needs to accurately control the flow of passengers entering and exiting the platform, but also must respond quickly in emergency situations to ensure passenger safety. However, since the platform door system is usually in a complex operating environment, the system is required to have high reliability and safety.

[0003] Currently, existing platform door systems have a hardware-based SIL4 level platform door system designed to address safety issues. This system mainly relies on complex hard-wired circuits and a large number of relay circuits to achieve high safety and reliability. Although this traditional design can meet the basic safety requirements of SIL4 level, the complexity of the hard-wired circuit and the large number of relays make it very difficult to maintain and expand the system. SUMMARY

[0004] The technical problem to be solved by the present application is that existing SIL4 level platform door systems rely on more hard-wired circuits and relay circuits, which are poor in maintenance and scalability.

[0005] To solve the technical problem, the technical solution adopted by the present application is:

[0006] In a first aspect, a communication-based SIL4 level platform door system is provided, comprising:

[0007] A platform door system connected to a signal system through a bus connection and a hard-wired connection;

[0008] The platform door system is connected to other subsystem devices through a bus connection and a hard-wired connection;

[0009] A domain controller is provided in the platform door system, the domain controllers are connected through a bus, and a plurality of DCUs are connected to the platform door system, and the DCUs are connected to the domain controllers through a bus;

[0010] The domain controller and the DCU perform transparent transmission through a single CPU, and transmit data to a double CPU unit for data processing.

[0011] Optionally, the platform door system is provided with an external interface, wherein the external interface includes a hard-wired interface and a network interface, and is used to switch according to the interface type of an external device.

[0012] Optionally, the domain controller is provided as two, and the two domain controllers are connected by a communication interface through a bus;

[0013] The domain controller is internally provided with a communication unit, a security calculation unit and a security input and output unit; the communication unit is used for transparent transmission of data to the security calculation unit and the security input and output unit for data processing; the communication unit and the security calculation unit are connected by a communication interface through a bus, and the security calculation unit and the security input and output unit are connected by a communication interface through a bus.

[0014] Optionally, a communication module is provided between the domain controllers, and the two domain controllers communicate through the communication module.

[0015] Optionally, the communication unit is provided with a CPU 3, the communication unit in the domain controller is connected to the CPU 3, and the communication unit is connected to the signal system through a network interface and connected to another domain controller through a network interface;

[0016] The communication unit only performs transparent transmission.

[0017] Optionally, the security calculation unit is internally provided with a CPU 1 and a CPU 2, and the two CPUs communicate through a network interface and are connected to the CPU 3 of the communication unit through a network interface;

[0018] The security input and output unit is internally provided with a CPU 4 and a CPU 5, and the two CPUs are connected to the CPU 1 and the CPU 2 in the security calculation unit through a network interface respectively;

[0019] The security input and output unit is connected to the CPU 4 and the CPU 5, and is connected to the signal system through a secure hard line.

[0020] Optionally, the security calculation unit uses SDTv4 to ensure the security of data according to the protocol.

[0021] Optionally, the DCU is connected to other subsystem devices and domain controllers through a network interface;

[0022] The DCU is provided with a communication unit and a security control unit, the communication unit is provided with a single CPU, the communication unit synchronizes data with the double CPU in the security control unit through the single CPU, and other subsystem devices and peripherals are connected to the double CPU in the security control unit through a circuit.

[0023] In the second aspect, a communication-based SIL4 level rail transit door control system is provided, and the communication-based SIL4 level platform door system of the first aspect is applied to the rail transit door control system.

[0024] Compared with the prior art, the present application has the following beneficial effects:

[0025] The platform door system of the present application adopts a double-CPU architecture inside the domain controller and the door control unit, and the double-CPU design can perform double processing and cross verification on data, ensuring the accuracy and consistency of the data, thereby achieving the SIL4 safety level. At the same time, the data transparent transmission mechanism performed by the single CPU reduces the data transmission delay and improves the real-time response capability. The redundant design of the double CPU ensures the continuous operation of the system in the case of single-point failure. Through the design of the double CPU, the two-by-two voting replaces the existing relay circuit, ensuring the consistency of the calculation results, thereby improving the reliability of data processing and the safety of the system. BRIEF DESCRIPTION OF DRAWINGS

[0026] Fig. 1 is a schematic diagram of the overall assembly structure of the present application;

[0027] Fig. 2 is a schematic diagram of the domain controller assembly structure of the present application;

[0028] Fig. 3 is a schematic diagram of the DCU assembly structure of the present application. DETAILED DESCRIPTION

[0029] The technical solutions of the present application will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0030] Embodiment one:

[0031] As shown in Fig. 1, a communication-based SIL4 level platform door system is provided, which includes a domain controller, a DCU, an external interface and other subsystem devices. The platform door system realizes interconnection and intercommunication with the signal system and other subsystem devices through bus connection and hard-wire connection, ensuring high safety and high reliability of the system.

[0032] Two domain controllers are provided in the platform door system, which are connected through a bus and communicate data through a communication module. In this embodiment, TSN is used for communication, thereby improving the reliability and real-time performance of communication. A plurality of DCUs are connected to the platform door system, and the DCUs are connected to the domain controller through a bus.

[0033] The domain controller and the DCU perform transparent transmission through a single CPU, and transmit data to a unit with double CPUs for data processing.

[0034] The platform door system is mainly responsible for managing and controlling the opening and closing of the platform door, and ensuring that it can quickly respond and perform corresponding operations in emergency situations. The system is connected to the signal system through bus connection and hard-wired connection, and is connected to other subsystem devices in the same way to achieve multi-level and multi-channel safe data transmission.

[0035] Two domain controllers are provided in the system, and the domain controllers are connected through a bus. Each domain controller internally includes a communication unit, a secure computing unit, and a secure input / output unit.

[0036] The communication unit is responsible for transparent data transmission and is internally provided with a CPU 3 to ensure that data is not tampered with during transmission. The communication unit in the domain controller is connected to the CPU 3, and the communication unit is connected to the signal system through a network interface and connected to another domain controller through a network interface.

[0037] Transparent transmission is performed by a single CPU to deliver data to a dual-CPU unit for data processing, ensuring real-time data transmission. The transparent transmission mechanism reduces the delay in data transmission, ensuring that the system can quickly respond to external instructions and events. The parallel processing capability of the dual CPU further improves the processing efficiency of the system, ensuring that the platform door can quickly and accurately perform opening or closing operations.

[0038] As shown in FIG. 2, the domain controller is internally provided with a communication unit, a secure computing unit, and a secure input / output unit. The communication unit is used to transparently transmit data to the secure computing unit and the secure input / output unit for data processing. The communication unit and the secure computing unit are connected by a bus using a communication interface, and the secure computing unit and the secure input / output unit are connected by a bus using a communication interface. The secure computing unit includes CPU 1 and CPU 2, and the two CPUs communicate through a network interface and are connected to the CPU 3 of the communication unit through a network interface, which is responsible for data processing and security checks.

[0039] The secure input / output unit includes CPU 4 and CPU 5, which are in communication with CPU 1 and CPU 2 in the secure computing unit, respectively, and are connected to the signal system through a secure hard-wired connection, which is responsible for the secure transmission and execution of input / output data.

[0040] Communication modules are also provided between the domain controllers to enable communication and data synchronization between the two domain controllers, ensuring reliable operation of the system under high load and complex environments.

[0041] As shown in Figure 3, multiple DCUs are accessed in the platform door system, the DCUs are connected with the domain controller through a bus, a communication unit and a safety control unit are arranged in each DCU; the communication unit is internally provided with a single CPU, the CPU is responsible for data synchronization with the double CPU of the safety control unit, and is connected with other subsystem devices and the domain controller through a network interface.

[0042] Through the double CPU architecture in the domain controller and the DCU, strict monitoring and verification of data processing and transmission are realized, ensuring that the system reaches the SIL4 safety level; the double CPU architecture can cross-verify data, check the consistency and correctness of data by comparing the calculation results of the two CPUs. Once inconsistency is detected, the system will immediately take safety measures to prevent error propagation, thereby ensuring the integrity and security of data.

[0043] The platform door system is provided with external interfaces, including hard-wired interfaces and network interfaces; since the existing SIL4 interfaces between the platform door system and the signal system are all hard-wired interfaces realized by relays, the embodiment retains the SIL4 hard-wired interface, and at the same time reserves the SIL4 communication interface, so that real-time changes can be made according to changes in the signal system.

[0044] The domain controller is internally provided with a communication unit, the communication unit only performs transparent transmission without further processing, and transmits data to the safety computing unit, and then uses the SDTv4 protocol according to the communication protocol to ensure safety, preventing data from being tampered with or lost during transmission.

[0045] When the platform door system receives instructions from the signal system, the communication unit transparently transmits data to the safety computing unit through a bus. CPU1 and CPU2 in the safety computing unit process and check the safety of the data. The processed data is transmitted to the safety input / output unit through a network interface.

[0046] After the safety input / output unit receives the processed data, it transmits the instructions to the actual platform door actuator through a safety hard-wired line, and completes the opening or closing operation of the platform door.

[0047] During the execution of the system, the running state of each subsystem and device is monitored in real time through the DCU and the communication unit. Any abnormal situation will be immediately fed back to the domain controller and processed by the safety computing unit, ensuring the continuous and stable operation of the system.

[0048] Embodiment two:

[0049] On the basis of the embodiments one and two, the SIL4 level door system based on communication proposed in this embodiment is not only suitable for the control of platform door systems, but also suitable for the control of door systems in rail transit vehicles.

[0050] The vehicle door system is an important safety subsystem in the process of rail transit operation, and needs to meet the functional safety requirements of SIL4 level, with high reliability, high real-time performance and high redundancy capability. The control architecture is applied to the vehicle door system in this embodiment, and has the following characteristics:

[0051] The vehicle door system is connected to the signal system and other vehicle subsystem devices such as PIS and TCMS through hardwires and buses;

[0052] Two domain controllers are provided, which are installed at different control nodes of the vehicle to realize hot standby redundancy;

[0053] A plurality of DCUs are distributed in each carriage of the train for controlling corresponding door actuators;

[0054] All DCUs are connected to the domain controller through the communication bus to realize centralized management and distribution of door status and control signals.

[0055] Each domain controller is internally provided with a communication unit, a safety calculation unit and a safety input and output unit;

[0056] The communication unit is configured with CPU3, which only performs transparent transmission function to transmit the received control data to the safety calculation unit and the safety input and output unit without processing;

[0057] The safety calculation unit and the input and output unit are respectively configured with double CPUs (such as CPU1 / CPU2, CPU4 / CPU5), which are connected through internal communication interfaces to realize redundant operation and bidirectional verification, improve the functional safety processing capability, and ensure to meet the SIL4 level requirements;

[0058] The safety input and output unit is connected to the door actuator through the safety hardwire mode to ensure the physical safety isolation and electrical integrity of the final execution layer.

[0059] The DCU is internally provided with a communication unit with single CPU and a safety control unit with double CPUs;

[0060] The communication unit communicates with other DCUs and domain controllers through the network interface, and transparently transmits data to the safety control unit;

[0061] The door control signal is processed by the safety control unit with double CPUs to improve the response certainty and safety level;

[0062] The DCU is externally provided with a network or hardwire interface to adapt to various door opening and closing actuators, door state sensors, and peripheral devices such as the intrusion detection module.

[0063] Obviously, the above embodiments are merely example for clearly illustrating but not limitation to the embodiments. Based on the above description, other different forms of changes or variations can be made by those skilled in the art. Here, all the embodiments need not and can not be enumerated. The obvious changes or variations derived from the above description are still within the protection scope of the present application.

Claims

1. A communication-based SIL 4-rated platform door system, characterized by, The platform door system is connected with the signal system and other subsystem devices through bus connection and hard-wire connection; The platform door system is connected with the signal system and other subsystem devices through bus connection and hard-wire connection; The platform door system is provided with domain controllers, the domain controllers are connected through a bus, and a plurality of DCUs are connected in the platform door system, and the DCUs are connected with the domain controllers through a bus; The domain controller and the DCU are transparently transmitted by a single CPU to a unit with double CPUs for data processing.

2. The system of claim 1, wherein, The platform door system is provided with an external interface, wherein the external interface includes a hard-wire interface and a network interface, and is used for switching according to the interface type of an external device.

3. The system of claim 1, wherein, The domain controller is provided with two domain controllers, and the two domain controllers are connected through a bus by a communication interface; The domain controller is provided with a communication unit, a security calculation unit and a security input and output unit; the communication unit is used for transparently transmitting data to the security calculation unit and the security input and output unit for data processing; the communication unit and the security calculation unit are connected through a bus by a communication interface, and the security calculation unit and the security input and output unit are connected through a bus by a communication interface.

4. The system of claim 3, wherein, The domain controller is provided with a communication module, and the two domain controllers are connected through the communication module.

5. The system of claim 3, wherein, The communication unit is provided with a CPU3, the communication unit in the domain controller is connected with the CPU3, and the communication unit is connected with the signal system through a network interface and connected with another domain controller through a network interface; The communication unit only performs transparent transmission.

6. The system of claim 3, wherein, The security calculation unit is provided with a CPU1 and a CPU2, the two CPUs are connected through a network interface, and the two CPUs are connected with the CPU3 of the communication unit through a network interface; The security input and output unit is provided with a CPU4 and a CPU5, and the two CPUs are connected with the CPU1 and the CPU2 in the security calculation unit through a network interface; The security input and output unit is connected with the CPU4 and the CPU5, and is connected with the signal system through a security hard-wire.

7. The system of claim 6, wherein, The security calculation unit uses an SDTv4 according to a protocol to ensure the safety of data.

8. The system of claim 1, wherein, The DCU is connected with other subsystem devices and domain controllers through a network interface; The DCU is provided with a communication unit and a security control unit, the communication unit is provided with a single CPU, the communication unit is connected with double CPUs in the security control unit through the single CPU for data synchronization, and other subsystem devices and external devices are connected with the double CPUs in the security control unit through a circuit.

9. Application of the communication-based SIL4-level platform door system in claim 1-8 to a rail transit door control system.

Images