Seamless Switchover System for Train Control Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In safety-critical systems like train control, switching control from a first controller to a redundant controller can lead to unnecessary actuation of safety devices, such as emergency brakes, due to delays in switchover processes, which can cause unnecessary slowing and increase risk to passengers and crew.
Innovation Solution
A system that enables seamless switchover of control between master and slave states by de-energizing and re-energizing inputs before the predetermined time interval for safety device actuation, avoiding reliance on software timing and ensuring the safety device is not actuated unnecessarily.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If control is switched from first controller to redundant controller, then system reliability is improved, but safety device may actuate unnecessarily due to switchover delay
Solution Approach 1:
The system performs preliminary action by having the redundant controller prepare to take control before the active controller fails. The redundant controller is pre-configured and can immediately assume control when needed, eliminating the switchover delay that would otherwise trigger unnecessary safety device actuation.
Solution Approach 2:
The system maintains continuity of useful action by ensuring control signal delivery to the safety device never interrupts. During switchover, the redundant controller seamlessly takes over control signal generation, preventing the de-energization period that would normally cause the safety device to actuate unnecessarily.
2Object-affected harmful factors
If switchover delay is added to allow controlled transition, then unnecessary safety actuation is prevented, but system complexity and cost increase
Solution Approach 1:
The system replaces mechanical timing delays with an electronic/architectural solution. Instead of adding software or hardware delay mechanisms to allow controlled switchover, the system uses a redundant controller architecture that enables immediate failover without interruption, eliminating the need for delay-based workarounds and reducing overall system complexity.
Data Source
Figure 1
Figure 2
Figure 2A
AI summary
A system and method provide seamless control switchover through an input coupled to a power line and a safety apparatus that actuates if the input remains de-energized for a first time interval. Each of a plurality of subsystems has a control unit that controls a power source to energize the power line and is capable of transitioning between master and slave states. A first switch or second and third switches in series couple the power source to the power line. The first switch is closed during master state operation. The second switch is closed during slave operation and the third switch is open if any subsystem control unit is in master state. The system is configured to open or close the first switch, the second switch, or the third switch responsive to a transition of a control unit to or from master state within the first time interval.