CN104065515A - Multi-loop system for DCS system - Google Patents

Abstract

The invention discloses a multi-loop system for a DCS system, and the multi-loop system comprises an ATC core network which is used for transmitting an ATC safety flow, an ATS core network which is used for transmitting an ATS non-safety flow, a wireless core network which is used for transmitting a vehicle-ground communication flow, and a firewall device which is used for isolating the wireless core network with the ATC core network and the ATS core network. A distribution layer device has a function of dynamic routing, thereby enabling the ATC safety flow to be transmitted by the ATS core network under the condition that the ATC core network has a fault, and enabling ATS non-safety flow to be transmitted by the ATC core network under the condition that the ATS core network has a fault. The multi-loop system can enable the ATC flow to be guided to the ATS network when the ATC core network is broken down caused by the fault, and can enable ATS flow to be guided to the ATC network when the ATS core network is broken down caused by the fault, thereby improving the reliability of a DCS subsystem, and enabling the operation of a subway line to be safer.

Description

A kind of DCS system multi-ring network system

Technical field

The present invention relates to one and be applied to subway CBTC (Communication Based Train Control, based on the Train Control of communication) system subordinate's DCS (Data Communication System, data communication system) subsystem multi-ring network deployment system.

Background technology

DCS subsystem is not the system of a safety with respect to intrasystem other subsystem of CBTC, controls relevant safety command because DCS subsystem does not directly produce driving, and DCS subsystem is the transmission channel of these secure datas.If DCS subsystem breaks down, cause secure data to transmit or to lose in transport process, the train moving on circuit enters degraded mode operation because can not receive correct instruction, now, if the TD person at center scheduling goes wrong, very likely make the great operation accidents such as collision, derail.So enough stalwartnesses that DCS subsystem must design, have the ability to resist the various network failures that may occur.

A common network reasonable in design must have network layer very clearly: be followed successively by Access Layer → distribution layer → core layer from bottom to top, in fact the robustness that improves network is exactly the robustness that improves every one deck, so again three levels are combined, just can obtain an almost network for zero-fault.

DCS server layer is mainly responsible for doing exchanges data at a high speed between each network node being attached thereto, and can, by the self-healing mechanism of itself by the service traffics spare physical link that leads, ensure that service traffics are unlikely to interrupt under failure condition.At present, the signal provider of main flow, in DCS core net aspect, generally can be used two kinds of equipment: the optical transmission device that 1, has moved RPR (Resilent Packet Ring, Resilient Packet Ring) or similar agreement; 2, moved the Ethernet switch of data link layer looped network convergence protocol.These two kinds of technology have pluses and minuses separately, simply say to be exactly: the light transmission convergence time is short compared with Ethernet switch, but networking cost is higher, complicated operation, difficult in maintenance, and cannot under adverse circumstances, use; Ethernet switch convergence rate does not have light transmission fast, but cost is lower, simple to operate, easy to maintenance, and on market, has technical grade product, can adapt to various severe metro environments.So with respect to light transmission, Ethernet switch is adapted at metro project application more.In addition, also there are some born defects in Ethernet switch: the spreading of uncontrollable broadcast storm, cannot do intelligent flow control, and do not support QoS (Quality of Service, service quality), in the time that network traffics are larger, easily cause time delay and the packet loss of regular traffic flow, this is unacceptable for the very high Train Control flow of Qos quality requirement.The DCS network of single core net, owing to not having core net for subsequent use to take over the work of primary core net, so must solve the above problems in the time that network failure occurs.

DCS system provides communication port for following flow:

ATC (Automatic Train Control, train is controlled automatically) Train Control flow, comprise between zone controller, zone controller and Vehicle Controller, zone controller and center ATS (Automatic TrainSupervision, train automatic monitoring) driving control flow between server and Vehicle Controller and center ATS server, be called as safe traffic, because it relates to traffic safety;

ATS train supervision flow, belongs to the monitoring flow of train operation state, does not relate to the driving control of train, is called as non-security flow;

Train-ground communication flow, this class flow had both comprised ATC safe traffic, also comprise the non-security flow of ATS, in addition because train-ground communication belongs to radio communication category, along with the development of DCS wireless network, under the prerequisite allowing in technology, the wireless network part of later DCS subsystem also may be born in-car TV, the first-class PIS of vehicle-mounted pick-up (Passenger Information System, passenger information system) service traffics.So train-ground communication flow belongs to mixed type flow;

Third party's service traffics, such as master clock, alarm of fire etc.

For ATC flow and ATS flow, domestic should be that these two kinds of flows are mixed through the metro project of operation at present mostly, transmits, as shown in Figure 1 a physical network the inside.Even if A/B nets such framework, do not accomplish the physical isolation of these two kinds of flows yet.There is following defect in this design:

Safe traffic and non-security flow mix and transmit, although the priority of safe traffic is higher, because conventional switch is not supported Qos, do not have problem in the situation that of low discharge; Once but the flow on backbone network exceedes the nominal bandwidth of switch, ATS flow is seized the bandwidth that should keep for ATC flow possibly, cause time delay and the loss of safe traffic transmission;

In core net because broadcast storm or other reason are while paralysing, the passage of going to center due to train supervision flow now lost efficacy, TD person in control centre can't see the real-time status information of online operation train, very likely because commander's error causes great operation accident.

Summary of the invention

The object of the present invention is to provide a kind of DCS system multi-ring network system, in the time that ATC core net fault is paralysed, can be by ATC direct traffic ATS net, simultaneously when ATS core net fault, again can be by ATS direct traffic ATC net, improve the reliability of DCS subsystem, thereby made subway line operation more safe.And, can make the improper flow of wireless side to enter secure side network by fire compartment wall, and then affect normal service traffics.

The technical scheme that realizes above-mentioned purpose is:

A kind of DCS system multi-ring network system, comprising:

For the ATC core net of transmit atc safe traffic;

For transmitting the ATS core net of the non-security flow of ATS;

For the wireless core network of transmission vehicle ground communication flows; And

For isolating the firewall box of described wireless core network and described ATC core net and ATS core net;

On distribution layer equipment, configure dynamic routing function, make: under ATC core net failure condition, ATC safe traffic is transmitted via described ATS core net; Under ATS core net failure condition, the non-security flow of ATS transmits via described ATC core net.

Further, on described firewall box, dispose security strategy.

The invention has the beneficial effects as follows: the present invention is the one optimization to original single core net system, adopt the multi-core network design of isolation mutually, can allow subway line operation more safe, guarantee that TD person can grasp real-time line information under any network failure, for TD provides reliable basis; Increased the expandable type of network simultaneously, on the basis of multi-core network, can introduce more redundancy scheme and guarantee the reliability of network in DCS network, network design also can be more flexible; And in the different physical network in various types of service traffics office, the structure of network is more clear, contributes to very much analysis and the network operation of network failure.

Brief description of the drawings

Fig. 1 is CBTC single core network architecture;

Fig. 2 is ATC/ATS double-core planar network architecture.

Fig. 3 is the structure chart of DCS system multi-ring network system of the present invention.

Embodiment

Below in conjunction with accompanying drawing, the invention will be further described.

Refer to Fig. 2, for ATC/ATS double-core planar network architecture, be to build second ATS core net on original CBTC core net basis, safe traffic passage and non-security traffic channel must be isolated, thereby ensure the transmitting of ATC flow and the safety of subway line operation.So, in the time that ATC backbone network is paralysed, the zone controller of trackside is lost the driving control to train, and train degradation continues operation under artificial mode, and TD still can be seen the positional information that grasps operation train, and train driver is sent to instruction accurately.

Refer to Fig. 3, DCS system multi-ring network system of the present invention, comprising: ATC core net, ATS core net, wireless core network and firewall box, wherein:

On distribution layer equipment, configure dynamic routing function, make: under normal condition, ATC safe traffic arrives target device via ATC core net, and the non-security flow of ATS arrives target device via ATS core net; Under ATC core net failure condition, ATC safe traffic is transmitted via ATS core net; Under ATS core net failure condition, the non-security flow of ATS transmits via ATC core net.

Wireless core network is for transmission vehicle ground communication flows, due to train-ground communication employing is wireless network, also be the part that in DCS system, revenue passenger can touch, so do at wireless network secure strategy not in place, wireless network is likely invaded by hacker, and then enters station Intranet by wireless network, invades zone controller, assign wrong driving instruction, the traffic safety that jeopardizes whole piece circuit.So must realize the physical isolation of wireless core network and ATC core net, ATS core net, add firewall box between wireless core network and ATC core net and ATS core net, and dispose security strategy on firewall box.Prevent that Intranet is by assault.Make cannot enter secure side network by fire compartment wall at the improper flow of wireless side, and then affect normal service traffics.

Above embodiment is used for illustrative purposes only, but not limitation of the present invention, person skilled in the relevant technique, without departing from the spirit and scope of the present invention, can also make various conversion or modification, therefore all technical schemes that are equal to also should belong to category of the present invention, should be limited by each claim.

Claims (2)

1. a DCS system multi-ring network system, is characterized in that, comprising:

For the ATC core net of transmit atc safe traffic;

For transmitting the ATS core net of the non-security flow of ATS;

For the wireless core network of transmission vehicle ground communication flows; And

For isolating the firewall box of described wireless core network and described ATC core net and ATS core net;

On distribution layer equipment, configure dynamic routing function, make: under ATC core net failure condition, ATC safe traffic is transmitted via described ATS core net; Under ATS core net failure condition, the non-security flow of ATS transmits via described ATC core net.

2. DCS system multi-ring network system according to claim 1, is characterized in that, on described firewall box, disposes security strategy.