CN102951182A - Working method of secure computer specially used for railways - Google Patents
Working method of secure computer specially used for railways Download PDFInfo
- Publication number
- CN102951182A CN102951182A CN2012103987779A CN201210398777A CN102951182A CN 102951182 A CN102951182 A CN 102951182A CN 2012103987779 A CN2012103987779 A CN 2012103987779A CN 201210398777 A CN201210398777 A CN 201210398777A CN 102951182 A CN102951182 A CN 102951182A
- Authority
- CN
- China
- Prior art keywords
- communication
- board
- cpu
- cpu module
- port ram
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Hardware Redundancy (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The invention discloses a working method of a secure computer specially used for railways. The computer comprises two secure computers which are respectively used as a principal machine and a standby machine; each secure computer comprises a CPU (Central Processing Unit) board and a plurality of communication boards, wherein data transmission and synchronization between a first CPU module and a second CPU module of the CPU board are completed through a double-port RAM (Random Access Memory) and interrupt operation; the data exchange between the CPU board and the communication board positioned in a same system is completed through the double-port RAM and the interrupt operation; the first CPU module and the second CPU module output control signals used for driving a general control relay during the operation of the system, and the normally open contact of the general control relay is used for controlling onboard secure relays and active power supplies of all the communication boards. The working method disclosed by the invention can realize the functional security of a square two-out-of-two architecture platform through the secure computer specially used for the railways, realize the synchronization of the short-period task levels of the system and double systems and achieve seamless switching under the condition of a fault.
Description
Technical field
The present invention relates to communication technical field, relate in particular to a kind of method of work of railway Special safety computing machine.
Background technology
In the last few years, along with being growing more intense of competition in transport market, various countries' railway was for realizing speed-raising, at a high speed and heavy haul transport, and the active adoption up-to-date technology has increased substantially the modernization level of communication and signal equipment, and up-to-date technology continues to bring out.Synchronous or hardware clock is synchronous based on software cycle, as to have " three get two " or " two take advantage of two get two " redundancy structure form fail-safe computer is because its high security and high reliability are widely used in the railway signal control field.Fig. 1 is the classical architecture of railway signal control system, and fail-safe computer is operated in the interlocking operation layer, is its main operational equipment of whistle control system.
The signal control equipment of European countries is followed unified technical standard, this standard adopts the system security method based on risk management, by the safety and reliability of quantitative and Qualitative means proof system, the whistle control system of its triplex level redundancy has been subject in the world extensive approval and has applied.The railway signal control system of Japan is because its outstanding combating a natural disaster property also receives much concern, and most equipment of China's main track railway applications are to take advantage of two to get two redundant systems from two of Japan's introduction.But the railway signal control system standard of Japan is not similar to the strict rationale of Europe standard, need to come by a large amount of tests, test the safety of proof system.Although the technical standard that the signal system of Europe and Japan is carried out is different, in order to improve device security, their employings simultaneously its main operational equipment of railway Special safety computing machine as whistle control system.
Safety is the eternal theme of railway transportation, China's economy is fast-developing in recent two decades, railway transportation is for the speed of development of adapt to economic development, improve freight volume by variety of way, constantly speed-raising, a large amount of inputs have all been done in China's 11th Five-Year and 12 planning, but during this repeatedly safety misadventure have occured also, have caused the self-examination of the whole society to railway security.Use proven technique and security mechanism, improve constantly the safety of signalling set, particularly the safety of core security platform is economic construction and the inevitable demand of social development.Although China railways has obtained significant progress, face the shortage core technology, particularly the awkward situation of security platform core technology.Europe standard and safety assessment mechanism are approved as world's universal standard now, and this also is the opportunity of China railways development core technology.
Summary of the invention
The object of the invention is to solve the present situation that China railways signal control its main operational equipment development falls behind, a kind of method of work that is applicable to railway Special safety computing machine is provided.
The technical solution used in the present invention is: a kind of method of work of railway Special safety computing machine, described railway Special safety computing machine comprises two fail-safe computers, respectively as main frame and standby host, described fail-safe computer comprises CPU board, and comprise at least two systems switch communication board, two be communication board, be used for the electronic unit communication board that the electronics performance element with the interlocking machine system communicates and a plurality of communication boards of the aobvious machine communication board of control that is used for communicating with the aobvious machine of the control of interlocking machine system;
The method of work of every fail-safe computer is:
Described CPU board comprises first, second CPU module by the different electrical power module for power supply, the data transmission of first, second CPU intermodule reaches synchronously and finishes by dual port RAM and the internal interrupt operation at the two place, described communication board comprises first, second communication controller, second dual port RAM at first dual port RAM at the one CPU module place and the 2nd CPU module place, and the first second communication dual port RAM of communicating by letter dual port RAM and second communication controller place at the first communication controller place all hangs on the core bus;
Interrupt operation swap data between the dual port RAM by place separately between CPU board and the communication board and plate, when CPU board when exporting class data as take over party's communication board, the one CPU module is crossed core bus with a described class data communication device and is write direct in first, second communication dual port RAM as first, second communication controller place of take over party's communication board, simultaneously, CPU module notice has sent described class data as the first and second communication controllers of take over party's communication board; The 2nd CPU module is crossed core bus with a described class data communication device and is write direct in first, second communication dual port RAM as first, second communication controller place of take over party's communication board, simultaneously, the 2nd CPU module notice has sent described class data as the first and second communication controllers of take over party's communication board;
When one receive two class data as the first communication controller of the communication board of transmit leg after, directly two class data communication devices are crossed in first, second dual port RAM that core bus writes first, second CPU module place, interrupted between the plate that arrives to first, second CPU module trigger data afterwards; When one receive two class data as the second communication controller of the communication board of transmit leg after, directly two class data communication devices are crossed in first, second dual port RAM that core bus writes first, second CPU module place, interrupted between the plate that arrives to first, second CPU module trigger data afterwards;
System's run duration, first, second CPU module output is used for driving the control signal of total controlled relay, makes total controlled relay dead electricity in the situation that the first and/or the 2nd CPU module breaks down; The open contact of described total controlled relay carries the action power of safety relay for the plate of all communication boards of control, when CPU board is normal, the plate that the open contact of total controlled relay drives all communication boards by core bus output carries relay and gets electric operating voltage, when CPU board occurs when unusual, the output of cutting off the electricity supply of the open contact of total controlled relay, make the plate of all communication boards carry relay electric-loss, cut off the output of each communication board;
Main frame and standby host switch communication board by two systems separately respectively and receive the active and standby handover information that interlocking machine issues, to realize the switching between main frame and standby host;
Main frame and standby host are that communication board is realized the synchronous communication between the two by separately two, and to realize the seamless switching under the failure condition when receiving active and standby handover information, the two of main frame and standby host are to adopt two redundant logical OR signalling methodss between the communication board.
Beneficial effect of the present invention is:
1. realized that two take advantage of two functional safeties of getting two architecture platforms, be specially:
Double 2-vote-2 system framework manager opinion is calculated possesses very high safety and reliability; This framework is got two fail-safe computers by two two and is consisted of hot standby relation, realize the active and standby switching under the failure condition, in addition, fail-safe computer has been realized the secure synchronization operation between the interior two CPU of unit and the two-shipper, possess the fail safe function, accomplished the safety of security platform self function.
2. realized that this is synchronous with the minor cycle task level of two systems, can at seamless switching under the failure condition, be specially:
Two CPU accomplish the synchronized operation of minor cycle task level in the unit, and four CPU have accomplished that periodic duty is synchronous between two systems, and main frame and standby host keep can realizing the seamless switching under the failure condition with the cycle synchronisation operation.
Description of drawings
Fig. 1 shows the classical architecture of railway signal control system;
Fig. 2 is a kind of enforcement framework according to railway Special safety computing machine of the present invention;
Fig. 3 is the structural representation of CPU board among Fig. 1;
Fig. 4 is the structural representation of communication board among Fig. 1.
The specific embodiment
As shown in Figure 2, the railway Special safety computing machine that the present invention relates to comprises two fail-safe computers, respectively as main frame and standby host, the two is hot standby relation, this fail-safe computer comprises CPU board and comprises at least two systems switching communication board, two is communication board, the aobvious machine communication board of electronic unit communication board and control is at interior a plurality of communication boards, in addition, this fail-safe computer also can comprise at least one expanding communication plate, be used for to realize communicating by letter between two fail-safe computers and external system, in the present embodiment, this fail-safe computer comprises three expanding communication plates, is respectively first, the second and the 3rd expanding communication plate, the three communicates by external system communication network and external system.
As shown in Figure 3, CPU board comprises first, second CPU modules A, B, and the data transmission of first, second CPU intermodule and synchronous dual port RAM by the two place (being the SRAM memory device that first, second CPU module all can be carried out to it randomness access) and internal interrupt operation are finished.This CPU board comprises the one the second CPU modules by the different electrical power module for power supply, to avoid common mode fault.As shown in Figure 4, this communication board comprises first, second communication controller 2A, 2B, second dual port RAM 2 at first dual port RAM 1 at the one CPU modules A place and the 2nd CPU module B place, and the first second communication dual port RAM 4 of communicating by letter dual port RAM 3 and second communication controller 2B place at the first communication controller 2A place all hangs on the core bus, be between CPU board and the communication board by dual port RAM and interrupt operation, carry out data exchange via core bus.
On the basis with upper mounting plate, the method for work of railway Special safety computing machine of the present invention is:
Interrupt operation swap data between the dual port RAM by place separately between CPU board and the communication board and plate, when CPU board when exporting class data as take over party's communication board, the one CPU modules A is crossed core bus with a described class data communication device and is write direct in first, second communication dual port RAM 3,4 as first, second communication controller 2A of take over party's communication board, 2B place, simultaneously, CPU modules A notice has sent described class data as the first and second communication controller 2A, the 2B of take over party's communication board; The 2nd CPU module B crosses core bus with a described class data communication device and writes direct in first, second communication dual port RAM 3,4 as first, second communication controller 2A of take over party's communication board, 2B place, simultaneously, the 2nd CPU module B notice has sent described class data as the first and second communication controller 2A, the 2B of take over party's communication board.Like this, can to store same in each interlocking cycle be the double output data of first, second CPU module of CPU board to first, second communication dual port RAM.
After first a communication controller 2A as the communication board of transmit leg receives two class data, directly two class data communication devices are crossed in first, second dual port RAM 1,2 that core bus writes first, second CPU modules A, B place, interrupted between the plate that arrives to first, second CPU modules A, B trigger data afterwards; After a second communication controller 2B as the communication board of transmit leg receives two class data, directly two class data communication devices are crossed in first, second dual port RAM 1,2 that core bus writes first, second CPU modules A, B place, interrupted between the plate that arrives to first, second CPU modules A, B trigger data afterwards.More than class data and two class data represent respectively the data that CPU board sends to CPU board to communication board and communication board.Like this, after first, second communication controller is received two class data (external data), also two class data can be write in first, second dual port RAM at CPU board place.
As shown in Figure 3, system's run duration, the the one the second CPU modules A, B export respectively be used to the control signal that drives total controlled relay, make total controlled relay dead electricity in the situation that the first and/or the 2nd CPU module breaks down, i.e. the control signal of the two output can adopt the total controlled relay of the structure control of " logical AND " (being specially the coil of total controlled relay); The open contact of this total controlled relay carries the action power of safety relay for the plate of all communication boards of control, when CPU board normal (namely first, the 2nd CPU module is all normal) time, the plate that the open contact of total controlled relay drives all communication boards by core bus output carries relay and gets electric operating voltage, when CPU board occurs unusual (namely first, as long as having one in the 2nd CPU module occurs unusual) time, the output of cutting off the electricity supply of the open contact of total controlled relay, make the plate of all communication boards carry relay electric-loss, cut off the output of each communication board, at this, the open contact that carries relay by plate is controlled the first communication controller 2A to the communication network A of external device, and second communication controller 2B realizes the break-make of the communication network B of external device.In addition, the first communication controller can carry out closed loop to the open contact that plate carries the break-make that is used for communication control net A of relay and detect, the second communication controller can carry out closed loop to the open contact that plate carries the break-make that is used for communication control net B of relay and detect, with real-time adjustment communication work state.
In the present embodiment, first, second communication controller is by independently insulating power supply power supply.
Main frame and standby host switch communication board by two systems separately respectively and receive the active and standby handover information that interlocking machine issues, to realize the switching between main frame and standby host.In the present embodiment, as shown in Figure 2, two two switchings of getting between two fail-safe computers are switched by two systems and the realization of state display module, this pair is to connect by the RS232/422 bus between switching and state display module and the interlocking machine, communication bus is two redundant settings, and the communication pattern of employing logical OR, two systems switch and the state display module sends to two two two systems of getting two fail-safe computers with active and standby handover information and switches communication boards, and two two two systems of getting two fail-safe computers switch communication board and software exchange information is sent to this module upgrade hot standby mode of operation and show (namely above-mentioned communication network A and the B of two system switching communication board are the RS232/422 bus) simultaneously.
Main frame and standby host are that communication board utilizes optical fiber (the above-mentioned communication network A and the B that namely couple are communication board are optical fiber) to realize the synchronous communication between the two by separately two, to realize the seamless switching under the failure condition when receiving active and standby handover information, the two of main frame and standby host are to adopt two redundant logical OR signalling methodss between the communication board; Realize two redundant logical OR signalling methodss by optical fiber or CAN bus (the above-mentioned communication network A and the B that are the electronic unit communication board are optical fiber or CAN bus) between the electronic unit communication board of main frame and standby host and the electronics performance element of interlock system.Realize two redundant logical OR signalling methodss by ethernet (namely above-mentioned communication network A and the B of the aobvious machine communication board of control are ethernet) between the aobvious machine communication board of the control of main frame and standby host and the aobvious machine of control.
Above-mentioned electronics performance element is that the patent No. is the patent of invention of ZL201010234491.8, ZL201010234463.6, ZL201010234575.1 and ZL201010234447.7, and the patent No. is track switch, signal, the track execution unit of putting down in writing in the utility application of ZL201020268482.6, ZL201020268497.2, ZL201020268485.X, and scattered performance element etc., turnout execution unit wherein is responsible for controlling the switch machine switch with follow up movement and is carried out the scheduled exercise and anti-parade location; Signal execution unit is used for the control shunting signal, signal out of the station shows, namely controls the demonstration of various types of signal lamp; Track execution unit is the track condition collecting unit of the bottom, is mainly used in from the status information of track circuit receiving end acquisition trajectory circuit and the magnitude of voltage on the rail level; Scattered performance element is responsible for remainder, such as the 64D semi-automatic circuit, according to the control of looking into circuit and liaison circuit between yards.Interlocking machine is assigned control command to each performance element by safety computer platform of the present invention, performance element is carried out corresponding action by the control circuit control terminal, and the status information that performance element collects indication circuit simultaneously is uploaded to interlocking machine by safety computer platform of the present invention.
The main frame of fail-safe computer of the present invention and standby host all can design a redundant power module, and the two is except can by the interlocking machine Power supply, also powering by this redundant power module respectively.
The above only is the better embodiment of the present invention, is not to limit practical range of the present invention, and the equivalence of in every case doing in protection scope of the present invention changes and modifies, and all should think to have fallen in protection scope of the present invention.
Claims (1)
1. the method for work of a railway Special safety computing machine, it is characterized in that: described railway Special safety computing machine comprises two fail-safe computers, respectively as main frame and standby host, described fail-safe computer comprises CPU board, and comprise at least two systems switch communication board, two be communication board, be used for the electronic unit communication board that the electronics performance element with the interlocking machine system communicates and a plurality of communication boards of the aobvious machine communication board of control that is used for communicating with the aobvious machine of the control of interlocking machine system;
The method of work of every fail-safe computer is:
Described CPU board comprises first, second CPU module by the different electrical power module for power supply, the data transmission of the one the second CPU intermodules and finishing by dual port RAM and the internal interrupt operation at the two place synchronously, described communication board comprises first, second communication controller, second dual port RAM at first dual port RAM at the one CPU module place and the 2nd CPU module place, and the first second communication dual port RAM of communicating by letter dual port RAM and second communication controller place at the first communication controller place all hangs on the core bus;
Interrupt operation swap data between the dual port RAM by place separately between CPU board and the communication board and plate, when CPU board when exporting class data as take over party's communication board, the one CPU module is crossed core bus with a described class data communication device and is write direct in first, second communication dual port RAM as first, second communication controller place of take over party's communication board, simultaneously, CPU module notice has sent described class data as the first and second communication controllers of take over party's communication board; The 2nd CPU module is crossed core bus with a described class data communication device and is write direct in first, second communication dual port RAM as first, second communication controller place of take over party's communication board, simultaneously, the 2nd CPU module notice has sent described class data as the first and second communication controllers of take over party's communication board;
When one receive two class data as the first communication controller of the communication board of transmit leg after, directly two class data communication devices are crossed in first, second dual port RAM that core bus writes first, second CPU module place, interrupted between the plate that arrives to first, second CPU module trigger data afterwards; When one receive two class data as the second communication controller of the communication board of transmit leg after, directly two class data communication devices are crossed in first, second dual port RAM that core bus writes first, second CPU module place, interrupted between the plate that arrives to first, second CPU module trigger data afterwards;
System's run duration, first, second CPU module output is used for driving the control signal of total controlled relay, makes total controlled relay dead electricity in the situation that the first and/or the 2nd CPU module breaks down; The open contact of described total controlled relay carries the action power of safety relay for the plate of all communication boards of control, when CPU board is normal, the plate that the open contact of total controlled relay drives all communication boards by core bus output carries relay and gets electric operating voltage, when CPU board occurs when unusual, the output of cutting off the electricity supply of the open contact of total controlled relay, make the plate of all communication boards carry relay electric-loss, cut off the output of each communication board;
Main frame and standby host switch communication board by two systems separately respectively and receive the active and standby handover information that interlocking machine issues, to realize the switching between main frame and standby host;
Main frame and standby host are that communication board is realized the synchronous communication between the two by separately two, and to realize the seamless switching under the failure condition when receiving active and standby handover information, the two of main frame and standby host are to adopt two redundant logical OR signalling methodss between the communication board.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012103987779A CN102951182A (en) | 2012-10-18 | 2012-10-18 | Working method of secure computer specially used for railways |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012103987779A CN102951182A (en) | 2012-10-18 | 2012-10-18 | Working method of secure computer specially used for railways |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102951182A true CN102951182A (en) | 2013-03-06 |
Family
ID=47760714
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2012103987779A Pending CN102951182A (en) | 2012-10-18 | 2012-10-18 | Working method of secure computer specially used for railways |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102951182A (en) |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106444553A (en) * | 2016-11-29 | 2017-02-22 | 卡斯柯信号有限公司 | Scattered collection driving system based on double 2-vote-2 architecture |
| CN108052194A (en) * | 2017-11-13 | 2018-05-18 | 北京全路通信信号研究设计院集团有限公司 | Computer backboard, computer platform and computer fusion system |
| CN108092752A (en) * | 2017-11-14 | 2018-05-29 | 北京全路通信信号研究设计院集团有限公司 | Method and device for hot backup of main control unit and computer storage medium |
| CN109305190A (en) * | 2017-07-28 | 2019-02-05 | 比亚迪股份有限公司 | Switch control system, method and track switch controller |
| WO2019076036A1 (en) * | 2017-10-19 | 2019-04-25 | 北京全路通信信号研究设计院集团有限公司 | Redundant ethernet-based secure computer system |
| CN110008022A (en) * | 2019-03-25 | 2019-07-12 | 北京和利时系统工程有限公司 | A kind of fail-safe computer module and fail-safe computer |
| CN110361979A (en) * | 2019-07-19 | 2019-10-22 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform in railway signal field |
| CN110412862A (en) * | 2018-04-27 | 2019-11-05 | 比亚迪股份有限公司 | Computer interlock system and its method for handover control, equipment, storage medium |
| CN110968021A (en) * | 2019-12-20 | 2020-04-07 | 上海亨钧科技股份有限公司 | Interlocking machine dual-system switching system and control method |
| CN112698991A (en) * | 2021-01-20 | 2021-04-23 | 北京锐马视讯科技有限公司 | Dual-computer hot standby system and method based on 1 to 1 heartbeat |
| WO2022100232A1 (en) * | 2020-11-13 | 2022-05-19 | 中车株洲电力机车有限公司 | Distributed-type on-board safety computer system |
| CN117056099A (en) * | 2023-08-14 | 2023-11-14 | 中国铁道科学研究院集团有限公司 | Railway signal security computer platform and memory sharing method thereof |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1803510A (en) * | 2005-09-19 | 2006-07-19 | 北京全路通信信号研究设计院 | Computer interlock system |
| KR100840243B1 (en) * | 2006-12-20 | 2008-06-20 | 한국철도기술연구원 | Fault tolerant system for ground train control system using industrial computer |
| CN201293929Y (en) * | 2008-11-13 | 2009-08-19 | 南京恩瑞特实业有限公司 | Universal safety type input-output controller for subway |
| CN101605151A (en) * | 2009-07-10 | 2009-12-16 | 北京全路通信信号研究设计院 | A kind of system that is used for track traffic regional interlock and interior communication |
| CN101694588A (en) * | 2009-10-14 | 2010-04-14 | 北京全路通信信号研究设计院 | Double 2 vote 2 active/standby control switching system and method |
| CN101876928A (en) * | 2009-11-13 | 2010-11-03 | 北京全路通信信号研究设计院 | Synchronization method and device of double 2-vote-2 system |
| CN201694211U (en) * | 2010-06-25 | 2011-01-05 | 上海铁大电信设备有限公司 | Dual-machine hot standby device of DJK ground host machine |
-
2012
- 2012-10-18 CN CN2012103987779A patent/CN102951182A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1803510A (en) * | 2005-09-19 | 2006-07-19 | 北京全路通信信号研究设计院 | Computer interlock system |
| KR100840243B1 (en) * | 2006-12-20 | 2008-06-20 | 한국철도기술연구원 | Fault tolerant system for ground train control system using industrial computer |
| CN201293929Y (en) * | 2008-11-13 | 2009-08-19 | 南京恩瑞特实业有限公司 | Universal safety type input-output controller for subway |
| CN101605151A (en) * | 2009-07-10 | 2009-12-16 | 北京全路通信信号研究设计院 | A kind of system that is used for track traffic regional interlock and interior communication |
| CN101694588A (en) * | 2009-10-14 | 2010-04-14 | 北京全路通信信号研究设计院 | Double 2 vote 2 active/standby control switching system and method |
| CN101876928A (en) * | 2009-11-13 | 2010-11-03 | 北京全路通信信号研究设计院 | Synchronization method and device of double 2-vote-2 system |
| CN201694211U (en) * | 2010-06-25 | 2011-01-05 | 上海铁大电信设备有限公司 | Dual-machine hot standby device of DJK ground host machine |
Non-Patent Citations (1)
| Title |
|---|
| 刚建雷等: "基于FPGA的二取二总线数据比较器", 《电子产品世界》 * |
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106444553B (en) * | 2016-11-29 | 2023-09-08 | 卡斯柯信号有限公司 | Scattered acquisition driving system based on two-by-two-out-of-two architecture |
| CN106444553A (en) * | 2016-11-29 | 2017-02-22 | 卡斯柯信号有限公司 | Scattered collection driving system based on double 2-vote-2 architecture |
| CN109305190A (en) * | 2017-07-28 | 2019-02-05 | 比亚迪股份有限公司 | Switch control system, method and track switch controller |
| WO2019076036A1 (en) * | 2017-10-19 | 2019-04-25 | 北京全路通信信号研究设计院集团有限公司 | Redundant ethernet-based secure computer system |
| CN108052194A (en) * | 2017-11-13 | 2018-05-18 | 北京全路通信信号研究设计院集团有限公司 | Computer backboard, computer platform and computer fusion system |
| CN108092752A (en) * | 2017-11-14 | 2018-05-29 | 北京全路通信信号研究设计院集团有限公司 | Method and device for hot backup of main control unit and computer storage medium |
| CN110412862A (en) * | 2018-04-27 | 2019-11-05 | 比亚迪股份有限公司 | Computer interlock system and its method for handover control, equipment, storage medium |
| CN110008022A (en) * | 2019-03-25 | 2019-07-12 | 北京和利时系统工程有限公司 | A kind of fail-safe computer module and fail-safe computer |
| CN110361979A (en) * | 2019-07-19 | 2019-10-22 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform in railway signal field |
| CN110968021A (en) * | 2019-12-20 | 2020-04-07 | 上海亨钧科技股份有限公司 | Interlocking machine dual-system switching system and control method |
| WO2022100232A1 (en) * | 2020-11-13 | 2022-05-19 | 中车株洲电力机车有限公司 | Distributed-type on-board safety computer system |
| CN112698991A (en) * | 2021-01-20 | 2021-04-23 | 北京锐马视讯科技有限公司 | Dual-computer hot standby system and method based on 1 to 1 heartbeat |
| CN117056099A (en) * | 2023-08-14 | 2023-11-14 | 中国铁道科学研究院集团有限公司 | Railway signal security computer platform and memory sharing method thereof |
| CN117056099B (en) * | 2023-08-14 | 2024-06-07 | 中国铁道科学研究院集团有限公司 | Railway signal security computer platform and memory sharing method thereof |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102945221A (en) | Full-electronic security computer interlocking system | |
| CN102951182A (en) | Working method of secure computer specially used for railways | |
| CN100519293C (en) | Wireless locomotive signal dual-engine warm standby control method | |
| CN106740999A (en) | All-electronin computer interlock system based on performing module redundancy | |
| CN203027276U (en) | Dual-machine hot standby platform | |
| CN202004776U (en) | Redundant hot swapping system | |
| CN103176870B (en) | Multi-mode information interaction redundancy safety computer platform | |
| WO2019100916A1 (en) | Non-national-standard-system type turnout drive system based on double 2-vote-2 framework | |
| CN105187248A (en) | Redundancy switching system | |
| CN107054414A (en) | Remote reboot control method and device for Urban Rail Transit Signal equipment | |
| CN108459496A (en) | Safety Redundancy system for railway signal system | |
| CN112693495B (en) | Node-free distributed turnout safety driving control system | |
| CN112415917B (en) | Turnout control system and method for traction of single or multiple point switches | |
| CN111186463A (en) | Board-level redundant full-electronic computer interlocking system | |
| CN201694211U (en) | Dual-machine hot standby device of DJK ground host machine | |
| CN1632702A (en) | Traction control system for stationary reconnection locomotive | |
| CN101643074A (en) | Hot-standby system for primary and standby control center | |
| CN202617154U (en) | Train communication system | |
| CN107672624A (en) | Railway section fiber optic network signal control device and system | |
| CN203732945U (en) | Hot-standby train automatic driving system | |
| CN102991538A (en) | Device and method for automatically switching point-to-point communication | |
| CN102156669B (en) | Arbitration system of vehicle-mounted train control equipment | |
| CN108536046A (en) | Main control unit switching method and locomotive communication equipment for locomotive communication equipment | |
| CN208953906U (en) | Safety Redundancy system for railway signal system | |
| CN103021220B (en) | Railway station signal equipment simulation training system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C05 | Deemed withdrawal (patent law before 1993) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20130306 |