Vital Message Generation via Intermediary Processor Coordination
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer-controlled train management systems, such as Positive Train Control (PTC) systems, lack coordination between multiple processors to ensure that vital messages are generated correctly and safely, leading to potential transmission of incorrect data if the primary CPU is out of synchronization with other CPUs.
Innovation Solution
A system and method where multiple processors generate vital messages based on safety-critical data, with a separate processor combining and validating these messages to ensure correctness, using identifiers and logical operations to filter out invalid messages and confirm that the final message is generated from at least two processors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the primary CPU builds and sends the vital message alone, then the message transmission speed is fast, but the reliability is reduced because the primary CPU may be out of synchronization with other CPUs or build the message with incorrect data
Solution Approach 1:
A separate processor is introduced as an intermediary to receive vital messages from multiple CPUs, combine them, and generate the final message. This mediator ensures that the final message is built from synchronized data across all CPUs without requiring direct coordination between the CPUs themselves, thus maintaining reliability while avoiding complex peer-to-peer coordination mechanisms.
Solution Approach 2:
The message generation process is segmented into two distinct phases: (1) individual CPUs independently generate their own vital messages based on their local data, and (2) a separate processor combines these individual messages into a final synchronized message. This segmentation allows each CPU to operate independently while ensuring final message accuracy through the combination step.
2Productivity
If multiple processors generate and send vital messages independently, then the processing capacity is increased, but harmful factors increase because inconsistent messages may be transmitted
Solution Approach 1:
Multiple individual vital messages generated by different CPUs are merged into a single final message by a separate processor. This combining process ensures that all CPUs contribute to the final message while eliminating inconsistencies, thus maintaining high productivity without generating harmful inconsistent messages.
Solution Approach 2:
The system implements a feedback mechanism where the separate processor receives messages from all CPUs, combines them, and generates a final message that reflects the synchronized state of all processors. This feedback loop ensures that any inconsistencies are resolved before the final message is transmitted, preventing harmful inconsistent data from being sent.
3Reliability
If a separate processor combines messages from multiple CPUs, then the reliability is improved by filtering invalid data, but the processing time increases
Solution Approach 1:
Each CPU independently generates its vital message in advance based on its local data before the combination step. This preliminary action allows the separate processor to simply combine and validate pre-generated messages rather than performing complex validation and generation operations in real-time, thus improving reliability while minimizing additional processing time.
Data Source
AI summary
A system, method, and apparatus for generating vital messages on an on-board system of a vehicle is disclosed. The method includes generating a plurality of vital messages with each processor of a plurality of different processors of the on-board system based on train data available to each processor, transmitting the plurality of vital messages from the plurality of different processors to a separate processor, and generating, by the separate processor, a final vital message based on at least two vital messages of the plurality of vital messages. A system and an apparatus for implementing the aforementioned method includes appropriately communicatively connected hardware components.