CN102900299A - Cold standby redundant method for station side door controller, and station side door controller - Google Patents

Cold standby redundant method for station side door controller, and station side door controller Download PDF

Info

Publication number
CN102900299A
CN102900299A CN2012103726675A CN201210372667A CN102900299A CN 102900299 A CN102900299 A CN 102900299A CN 2012103726675 A CN2012103726675 A CN 2012103726675A CN 201210372667 A CN201210372667 A CN 201210372667A CN 102900299 A CN102900299 A CN 102900299A
Authority
CN
China
Prior art keywords
module
side door
supervision
main system
standby
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2012103726675A
Other languages
Chinese (zh)
Inventor
王飞
贺文
陈庆
连奇幸
董嗣耀
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhuzhou CRRC Times Electric Co Ltd
Ningbo CRRC Times Transducer Technology Co Ltd
Original Assignee
Zhuzhou CSR Times Electric Co Ltd
Ningbo CSR Times Transducer Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhuzhou CSR Times Electric Co Ltd, Ningbo CSR Times Transducer Technology Co Ltd filed Critical Zhuzhou CSR Times Electric Co Ltd
Priority to CN2012103726675A priority Critical patent/CN102900299A/en
Publication of CN102900299A publication Critical patent/CN102900299A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Safety Devices In Control Systems (AREA)

Abstract

The invention relates to a cold standby redundant method for a station side door controller. According to the method, power supply modules, monitoring modules, safety logical operation units and safety relay output control unit modules in a system A and a system B are subjected to redundancy of 1+1. The invention also provides the station side door controller using the method. By the cold standby redundant method and the station side door controller, the integral system is clear in structure, simple, easy to use and convenient to maintain while the high reliability and high availability of the device can be ensured.

Description

A kind of cold standby redundancy approach and platform side door controller thereof for platform side door controller
Technical field
The present invention relates to the control system of traffic gate, be specifically related to a kind of side door control device based on the cold standby redundancy approach, applicable to the control of subway shielding door/safety door system.
Background technology
Platform side door controller is for the treatment of all kinds of input/output signals of subway shielding door/safety door system, every side platform all disposes a platform side door controller, and it controls the operation of this each gate cell of side platform according to the opening-closing door order of the signal system that receives.Design according to as shown in Figure 1 prior art, adopt a power module, a platform side door controller that monitors module and a control module realization, supervision that in this way also can completion system and control function, but exist hidden danger, because if wherein arbitrary module breaks down, then whole device just will be in the state that partly or completely lost efficacy, as: if power failure, then whole device just can't be worked; If the supervision module failure then can't carry out the supervision of system and state, fault information reporting to Master Control Room; If the faults such as electric shock welding appear in the relay in the control module, then the control function of device just completely loses, and whole side door can't move and affect the operation of subway.Reliability for intensifier, the platform side door control device of prior art design has also adopted the double CPU for redundant design to the supervision module of its inside, but even so, still can't eliminate to occur to open circuit suddenly to wait unusually to make such as power circuit and monitor that module produces the impact of inefficacy.In addition, the platform side door control device of prior art design is although mainly contain following form of structure: 1. the control circuit board that designs is connected by screw and is fixed in the seal case; 2. PLC monitors that module and safety relay module adopt guide tracked installation, carry out wire interconnects by the wiring system of complexity to each element.The former often dismounting bother very much, need this device of integral replacing during fault; Although and drop at the research and development initial stage during second way relatively low, the wiring trouble, in batches after hardware cost higher, and its trouble point is difficult to locate when the device of realizing breaks down.
Summary of the invention
The technical problem to be solved in the present invention is to overcome the above-mentioned deficiency of prior art and a kind of cold standby redundancy approach for platform side door controller and platform side door controller thereof are provided, and also significantly improves availability and the maintainability of system in the Guarantee control system high reliability.
The technical solution adopted for the present invention to solve the technical problems is as follows: a kind of cold standby redundancy approach for platform side door controller, it is characterized in that, power module, supervision module, security logic arithmetic element, safety relay output control unit module are carried out the 1+1 redundant, and namely device has comprised two groups of identical hardware (hereinafter to be referred as A system and B system); Its working method is as follows: the power module of the power module of A system and B system is active redundancy(-ce) each other, mode by parallel connection is embodied as other module hardware current-sharing power supply, arbitrary power module fault or when being removed, another power module still can guarantee as system normal power supply; The supervision module (being called main system) of A system and the supervision module (being called standby system) of B system are carried out exchanges data and synchronous by high-speed bus, two systems all carry out same program, when the supervision module of main system broke down, the supervision module of standby system will be taken over the work of main system; The security logic arithmetic element that A system and B system comprise and safety relay output control unit only have wherein one group to be in the state of working on power at synchronization, can switch to other one group of hardware to guarantee the normal operation of system by changeover switch when breaking down.
Better, respectively comprise one in the supervision module of above-mentioned main system and the supervision module of standby system and monitor CPU, and power supply is powered separately, two monitor that CPU carries out exchanges data and synchronous by the high-speed bus on the backboard, two systems all carry out same program, and generally main system is devoted oneself to work, the running status of standby system real time monitoring main system, in case note abnormalities, just take over all functions of main system.
A kind of platform side door control device based on above-mentioned cold standby redundancy approach also is provided, and it comprises power module, supervision module, security logic arithmetic element and the safety relay output control unit module of 1+1 redundant; Its working method is as follows: the power module of the power module of A system and B system is active redundancy(-ce) each other, mode by parallel connection is embodied as other module hardware current-sharing power supply, arbitrary power module fault or when being removed, another power module still can guarantee as system normal power supply; The supervision module (being called main system) of A system and the supervision module (being called standby system) of B system are carried out exchanges data and synchronous by high-speed bus, two systems all carry out same program, when the supervision module of main system broke down, the supervision module of standby system will be taken over the work of main system; The security logic arithmetic element that A system and B system comprise and safety relay output control unit only have wherein one group to be in the state of working on power at synchronization, can switch to other one group of hardware to guarantee the normal operation of system by changeover switch when breaking down.
Better, the power module of above-mentioned main system and standby system, supervision module, security logic arithmetic element, safety relay output control unit module are designed to the form of plug-in unit, jointly be installed in the subrack of 6U normal formula, undertaken interconnectedly between the plug-in unit by backboard, finish the mutual of information.
Better, respectively comprise one in the supervision module of above-mentioned main system and the supervision module of standby system and monitor CPU, and realized the independent power supply of power supply, two monitor that CPU carries out exchanges data and synchronous by the high-speed bus on the backboard, two systems all carry out same program, and generally main system is devoted oneself to work, the running status of standby system real time monitoring main system, in case note abnormalities, just take over all functions of main system.Supervision plug-in unit fault in A system and the B system or when being removed can't affect device to the control function of whole side door like this, and namely door still can normally operation under the effect of security logic computing plug-in unit and safety relay output control plug-in unit.
Better, interchangeable between the plug-in unit with identical function of correspondence in A system and the B system.
Compared with prior art, make the whole system clear in structure in the time of the high reliability that the present invention can assurance device and high availability, be simple and easy to usefulness, and be convenient to safeguard.
Description of drawings
Fig. 1 is the control method schematic diagram that prior art adopts single hardware system.
Fig. 2 is cold standby redundancy approach and the device schematic diagram that the embodiment of the invention is used for platform side door controller.
Fig. 3 is that the embodiment of the invention is based on the structural representation of cold standby redundancy approach device.
The specific embodiment
The present invention is described further below in conjunction with drawings and Examples.
Such as Fig. 2, shown in Figure 3, the device that the present invention realizes adopts the working method of A system and B system two cover hardware systems, in two cover systems that comprise in the device subrack power module (plug-in unit) 3,4 is arranged respectively, realize parallel redundancy by diode (led) module between them, give other functional module (plug-in unit) power supply of device.When any one power module (plug-in unit) fault, can the power module (plug-in unit) of another normal operation not exerted an influence.
Information interaction with the external world in A system or the B system is such: the rigid line control command signal of signal system is obtained and is implemented the security logic combinatorial operation by the security logic arithmetic element, its control safety relay output control unit of giving an order is exported the control device that corresponding rigid line controls signal to each gate cell, and security logic arithmetic element 7,8 is also carried out the redundancy diagnosis to realize security control to safety relay output control unit 5,6 simultaneously; The status information of control section processes for the supervision module by the SPI port transmission, supervision module 9,10 is also carried out real-time Communication for Power by the control device of fieldbus networks and each gate cell, finish obtaining of field data, all information after monitoring module synthesis and processing by mailing to Master Control Room.
Monitor that module (plug-in unit) except being connected by the interior security logic arithmetic element (plug-in unit) of SPI communication port 1 and native system, also is connected with another security of system ALU (plug-in unit) by SPI communication port 2.The A system devotes oneself to work when normal, and the B system is in holding state, but the information that the supervision module 9 of A system and B system, 10 obtains by the SPI communication port is in full accord; In case the A system failure, B system just devote oneself to work to replace the A system, can guarantee that the information completely of uploading is correct this moment.
The security logic arithmetic element that A system and B system comprise and safety relay output control unit by changeover switch 1 control its whether electric operation.When this group of A system discovery hardware occurs when unusual, when surveillance is switched with reporting fault information, that group hardware of notifying the user to break down by the changeover switch excision, and hardware system for subsequent use just begins to devote oneself to work.
Above all hardware functional module is all used the plug-in unit mode, changeover switch 1 is arranged on the panel 2, the power module 3,4 of main system and standby system, supervision module 9,10, security logic arithmetic element 7,8, safety relay output control unit module 5,6 are designed to the form of plug-in unit, jointly be installed in the subrack of 6U normal formula, undertaken interconnected by backboard between the plug-in unit, finish the mutual of information, concrete device is seen Fig. 3, and all supports hot-swappable.

Claims (6)

1. cold standby redundancy approach that is used for platform side door controller, it is characterized in that: power module, supervision module, security logic arithmetic element, safety relay output control unit module are carried out the 1+1 redundant, and namely device has comprised two groups of identical hardware (hereinafter to be referred as A system and B system); Its working method is as follows: the power module of the power module of A system and B system is active redundancy(-ce) each other, mode by parallel connection is embodied as other module hardware current-sharing power supply, arbitrary power module fault or when being removed, another power module still can guarantee as system normal power supply; The supervision module (being called main system) of A system and the supervision module (being called standby system) of B system are carried out exchanges data and synchronous by high-speed bus, two systems all carry out same program, when the supervision module of main system broke down, the supervision module of standby system will be taken over the work of main system; The security logic arithmetic element that A system and B system comprise and safety relay output control unit only have wherein one group to be in the state of working on power at synchronization, can switch to other one group of hardware to guarantee the normal operation of system by changeover switch when breaking down.
2. the cold standby redundancy approach for platform side door controller according to claim 1, it is characterized in that: respectively comprise one in the supervision module of main system and the supervision module of standby system and monitor CPU, and power supply is powered separately, two monitor that CPU carries out exchanges data and synchronous by the high-speed bus on the backboard, two systems all carry out same program, generally main system is devoted oneself to work, the running status of standby system real time monitoring main system, in case note abnormalities, just take over all functions of main system.
3. platform side door control device is characterized in that: it comprise the 1+1 redundant power module, monitor module, security logic arithmetic element and safety relay output control unit module; Its working method is as follows: the power module of the power module of A system and B system is active redundancy(-ce) each other, mode by parallel connection is embodied as other module hardware current-sharing power supply, arbitrary power module fault or when being removed, another power module still can guarantee as system normal power supply; The supervision module (being called main system) of A system and the supervision module (being called standby system) of B system are carried out exchanges data and synchronous by high-speed bus, two systems all carry out same program, when the supervision module of main system broke down, the supervision module of standby system will be taken over the work of main system; The security logic arithmetic element that A system and B system comprise and safety relay output control unit only have wherein one group to be in the state of working on power at synchronization, can switch to other one group of hardware to guarantee the normal operation of system by changeover switch when breaking down.
4. platform side door controller according to claim 3, it is characterized in that: the power module of main system and standby system, supervision module, security logic arithmetic element, safety relay output control unit module are designed to the form of plug-in unit, jointly be installed in the subrack of normal formula, undertaken interconnectedly between the plug-in unit by backboard, finish the mutual of information.
5. according to claim 3 or 4 described platform side door controllers, it is characterized in that: respectively comprise one in the supervision module of main system and the supervision module of standby system and monitor CPU, and realized the independent power supply of power supply, two monitor that CPU carries out exchanges data and synchronous by the high-speed bus on the backboard, two systems all carry out same program, generally main system is devoted oneself to work, the running status of standby system real time monitoring main system, in case note abnormalities, just take over all functions of main system.
6. it is characterized in that according to claim 3 or 4 described platform side door controllers: interchangeable between the corresponding plug-in unit with identical function in A system and the B system.
CN2012103726675A 2012-09-29 2012-09-29 Cold standby redundant method for station side door controller, and station side door controller Pending CN102900299A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2012103726675A CN102900299A (en) 2012-09-29 2012-09-29 Cold standby redundant method for station side door controller, and station side door controller

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2012103726675A CN102900299A (en) 2012-09-29 2012-09-29 Cold standby redundant method for station side door controller, and station side door controller

Publications (1)

Publication Number Publication Date
CN102900299A true CN102900299A (en) 2013-01-30

Family

ID=47572759

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2012103726675A Pending CN102900299A (en) 2012-09-29 2012-09-29 Cold standby redundant method for station side door controller, and station side door controller

Country Status (1)

Country Link
CN (1) CN102900299A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105715139A (en) * 2015-12-09 2016-06-29 重庆川仪自动化股份有限公司 Platform electrical door controller with full-redundancy control function

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101030073A (en) * 2007-03-30 2007-09-05 哈尔滨工程大学 Switch circuit for engine redundant electrically-controlled system and its controlling method
CN201671766U (en) * 2010-04-21 2010-12-15 陕西科技大学 Wind power generation control device with soft redundancy function
CN201936169U (en) * 2010-12-14 2011-08-17 上海嘉成轨道交通安全保障系统有限公司 Central redundancy control system for shielding door of rail transportation station
CN203097556U (en) * 2012-09-29 2013-07-31 株洲南车时代电气股份有限公司 Door controller beside platform

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101030073A (en) * 2007-03-30 2007-09-05 哈尔滨工程大学 Switch circuit for engine redundant electrically-controlled system and its controlling method
CN201671766U (en) * 2010-04-21 2010-12-15 陕西科技大学 Wind power generation control device with soft redundancy function
CN201936169U (en) * 2010-12-14 2011-08-17 上海嘉成轨道交通安全保障系统有限公司 Central redundancy control system for shielding door of rail transportation station
CN203097556U (en) * 2012-09-29 2013-07-31 株洲南车时代电气股份有限公司 Door controller beside platform

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
贺文等: "城市轨道交通站台屏蔽门中央控制盘的研制", 《机车电传动》 *
高振天等: "屏蔽门控制系统的功能设计与技术探讨", 《电气传动》 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105715139A (en) * 2015-12-09 2016-06-29 重庆川仪自动化股份有限公司 Platform electrical door controller with full-redundancy control function

Similar Documents

Publication Publication Date Title
CN105739299B (en) Control device based on two-by-two-out-of-two safety redundancy system
US11718331B2 (en) Non-national standard turnout drive system based on double 2-vote-2 architecture
CN103455005B (en) Controller redundancy and switching method
CN201909961U (en) Redundancy control system
CN102055633B (en) Satellite-borne double-CAN (Controller Area Network) bus node failure self-restoration system
CN110376876B (en) Double-system synchronous safety computer platform
CN101337552B (en) Counting axle system using double 2-vote-2 system
CN102866690B (en) Redundancy switching method between Redundant process control station in scattered control system
CN101710376B (en) Hardware platform of safe computer 2-out-of-3 voting method
CN103176870B (en) Multi-mode information interaction redundancy safety computer platform
CN201936169U (en) Central redundancy control system for shielding door of rail transportation station
CN103389668A (en) Hot standby redundancy central control panel used for screen door
CN210129215U (en) Dual-redundancy electromechanical management computer architecture
CN102724092A (en) Profibus-DP communication protocol redundancy master station
CN108255123B (en) Train LCU control equipment based on two software and hardware voting
CN106394538A (en) Locomotive brake control unit and locomotive
CN102830647A (en) Double 2-vote-2 device for fail safety
CN203084523U (en) Redundant unit controller for metro screen doors
CN103043082A (en) Device and method for controlling metro platform screen door
CN203097556U (en) Door controller beside platform
CN103001867A (en) Host-standby machine duplicated hot-backup system and method
CN109976489A (en) Automatically reset realization method and system under a kind of iic bus abnormal conditions
CN102156669B (en) Arbitration system of vehicle-mounted train control equipment
CN102900299A (en) Cold standby redundant method for station side door controller, and station side door controller
CN104301145B (en) The network equipment and the control serial ports collocation method for the network equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20130130