Hot Standby Main Control Unit for Seamless Train Failover

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing train control systems require stopping the train to switch to a standby unit upon failure of the main control unit, affecting operation efficiency and driving safety.

Innovation Solution

A method and apparatus providing a hot standby for the main control unit, allowing seamless switching from the first main control unit to a second main control unit or controlled unit without stopping the train, by directly switching entire modules or only faulty modules, ensuring continuous operation and safety.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cold standby train control is adopted for controlled devices, then system security requirements are satisfied, but train operation efficiency deteriorates when switching to standby unit is needed

Engineering Contradiction:
Improvesystem securityVSAvoidoperation efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements hot standby mechanism where the standby main control unit is pre-initialized and maintains readiness state in advance. When a failure occurs in the active main control unit, the pre-prepared standby unit can immediately take over without requiring train stoppage, thus resolving the contradiction between maintaining high security standards and preserving operation efficiency during failover scenarios

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent changes the operational state parameter of the standby control unit from 'cold standby' (powered off or minimal operation) to 'hot standby' (fully initialized and ready). This parameter change enables the standby unit to assume control responsibilities instantly upon failure detection, eliminating the need to stop the train for switching while maintaining the security requirements through redundant control capability

Inventive Principle:
Principle #35Parameter changes

2Reliability

If the train stops to switch from fault controlled unit to standby controlled unit, then switching reliability is improved, but operation efficiency deteriorates

Engineering Contradiction:
Improveswitching reliabilityVSAvoidoperation time loss
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent establishes a hot standby architecture where the standby main control unit remains in a fully initialized and active state, continuously ready to assume control functions. This continuity of preparedness allows seamless failover without interrupting train operation, thereby maintaining switching reliability while eliminating operational time loss that would occur with cold standby switching procedures

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If entire main control unit is switched when module failure occurs, then system reliability is improved, but device complexity increases

Engineering Contradiction:
Improvesystem reliabilityVSAvoidcontrol unit structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the main control unit into multiple independent functional modules. When a failure occurs in a specific module, the system can identify and switch only the affected module rather than the entire control unit. This modular segmentation maintains high system reliability through targeted replacement while reducing the complexity of the overall control architecture by allowing selective module-level operations

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3713127B1Method and apparatus for hot backup of master control unit, and computer storage medium
Publication Date: 2022.01.05 CRSC RESEARCH & DESIGN INSTITUTE GROUP CO LTD
  • EP3713127B1 patent drawingFigure 1
  • EP3713127B1 patent drawingFigure 2
  • EP3713127B1 patent drawingFigure 3

AI summary

This application provides a method of providing a hot standby for a main control unit, the method including: using a second main control unit (30) to provide a hot standby for a first main control unit (20) , wherein the first main control unit (20) controls a first controlled unit (10) to receive information from a ground subsystem, the first main control unit (20) and the second main control unit (30) each including a plurality of modules; and directly switching from the first main control unit (20) to the second main control unit (30) when a failure occurs in one or more modules of the first main control unit. A fault device is switched to a standby device without stopping the train, which does not affect operation efficiency and running safety of the train. This application further provides an apparatus for providing a hot standby for a main control unit and a computer storage medium.