CN106627668B - Multiply the two train supervision server systems and control method for taking two frameworks based on two - Google Patents
Multiply the two train supervision server systems and control method for taking two frameworks based on two Download PDFInfo
- Publication number
- CN106627668B CN106627668B CN201611219877.5A CN201611219877A CN106627668B CN 106627668 B CN106627668 B CN 106627668B CN 201611219877 A CN201611219877 A CN 201611219877A CN 106627668 B CN106627668 B CN 106627668B
- Authority
- CN
- China
- Prior art keywords
- ats
- safety
- module
- server
- related computing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B61—RAILWAYS
- B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
- B61L15/00—Indicators provided on the vehicle or vehicle train for signalling purposes ; On-board control or communication systems
- B61L15/0018—Communication with or on the vehicle or vehicle train
- B61L15/0036—Conductor-based, e.g. using CAN-Bus, train-line or optical fibres
Abstract
Multiply the two train supervision server systems and control method for taking two frameworks based on two the invention discloses a kind of, belong to train operating safety dispatching technique field, system includes the first, second ATS server and the first, second interchanger, first, second ATS server and hot standby each other two sets two of the cross interconnected composition of the first, second interchanger multiply system, and the first, second ATS server is respectively by the first, second ATS service unit service with the same function to take two votings to secure data calculation process realization two.Method includes the first, second ATS server of starting；First, second ATS service unit takes two votings to secure data calculation process realization two after reading the data and order that CBTC external system and ATS client upload and voting result is sent to CBTC external system and ATS client.It is realized the present invention is based on hardware platform and two takes two operations, improve the safety of ATS service system, realize hot standby between two-server, improve the availability of ATS server system.
Description
Technical field
It is the present invention relates to train operating safety dispatching technique field, in particular to a kind of to multiply two column for taking two frameworks based on two
Vehicle monitoring server system and control method.
Background technique
In China's subway line, communication-based train control system (Communication Based is generally used
Train Control System, CBTC) Lai Shixian Train Control and running scheduling.And automatic train monitor
(Automatic Train Supervision, ATS) is responsible for monitoring and adjust automatically train as one of CBTC subsystem
Operation, is commander's core of metro operation,
For existing majority ATS system using C/S structure, core is operate in the ATS server of control centre, existing
The most ATS servers having have been realized in the redundancy backup of system, but can not take precautions against under data operation fault condition
Mistake exports bring safety problem, and the security level of ATS server system is inadequate.
Summary of the invention
Multiply the train supervision server system and control that two take two frameworks based on two the purpose of the present invention is to provide a kind of
Method, to improve the security level of ATS server system.
In order to achieve the above object, the technical solution adopted by the present invention are as follows: take two in a first aspect, providing one kind and multiplying two based on two
The train supervision server system of framework, the system include: the first, second ATS server and the first, second interchanger, first,
2nd ATS server and hot standby each other two set two of the cross interconnected composition of the first, second interchanger multiply system, and first, second
ATS server is respectively by the first, second ATS service unit service with the same function to realize secure data calculation process
Two take two votings.
Second aspect provides a kind of controlling party for multiplying the automatic train monitoring server system that two take two frameworks based on two
Method, this method comprises:
Start the first, second ATS server, the first, second ATS server is mutual by the first, second ATS service unit
Monitor other side's working condition；
It is right after data and order that first, second ATS service unit reading CBTC external system and ATS client upload
Secure data calculation process realizes that two take two votings；
First, second ATS service unit takes two votings to be sent to CBTC external system for the two of secure data calculation process
And ATS client.
Compared with prior art, there are following technical effects by the present invention: the present invention is identical logical by two sets of configurations of setting
With server, two interchangers, two sets of ATS service units, every server configuration dual processors are to safety-related life in ATS system
It enables and realizes that two take two operations, two-server is hot standby each other, the ATS server system phase with existing single set or two-node cluster hot backup
Than the present invention is based on hardware platforms to realize that two take two operations, improves the safety of ATS service system, reality between two-server
It is existing hot standby, improve the availability of ATS server system.
Detailed description of the invention
Fig. 1 is that the structure for multiplying the train supervision server system that two take two frameworks based on two in one embodiment of the invention is shown
It is intended to；
Fig. 2 is the first ATS service unit or the 2nd ATS service unit structural schematic diagram in one embodiment of the invention；
Fig. 3 is the controlling party for multiplying the train supervision server system that two take two frameworks based on two in one embodiment of the invention
The flow diagram of method；
Fig. 4 is the flow diagram of the subdivided step of the step S2 in one embodiment of the invention.
Specific embodiment
Below with reference to shown in Fig. 14, the present invention is described in further detail.
As shown in Figure 1, present embodiments provide it is a kind of multiply the two train supervision server systems for taking two frameworks based on two, should
System includes the first, second ATS server 10,20 and the first, second interchanger 30,40, the first, second ATS server 10,20
Multiply system, and the first, second ATS server for hot standby each other two set two with the cross interconnected composition of the first, second interchanger 30,40
10, it 20 is serviced respectively by the first, second ATS service unit 50,60 with the same function with real to secure data calculation process
Existing two take two votings.
It should be noted that two-server passes through two interchangers and CBTC external system and ATS in the present embodiment
Client carries out data exchange, wherein the configuration of two-server is identical, and two-server is hot standby each other simultaneously, is based on hardware
Platform realizes defeated to the voting of data safety-related in the order and data of CBTC external system and the upload of ATS client
Out, the safety of ATS system is improved.
Specifically, the first ATS server 10 include the first CPU11, the 2nd CPU12 and first, second network port 13,
14, the 2nd ATS server 20 include the 3rd CPU21, the 4th CPU22 and third, the 4th network port 23,24, the first CPU11,
2nd CPU12 passes through first, second network port 13,14 respectively and connect with the first, second interchanger 30,40, the 3rd CPU21,
4th CPU22 passes through third respectively, the 4th network port 23,24 is connect with the first, second interchanger 30,40.
It should be noted that the ATS server in the present embodiment includes at least two CPU, at least two network ports, it is somebody's turn to do
At least two network ports are connect with two interchangers respectively.Two sets of ATS service units are separately operable in two ATS servers
In, every set ATS service unit realizes that the two of safety-relevant data takes two operations based on the dual processors in ATS server, realizes voting
Output.
Specifically, ATS server unit distinguishes first class services CPU11, the 2nd CPU12 using dual-thread, and using double
Thread services the 3rd CPU21, the 4th CPU22 respectively.
Specifically, as shown in Fig. 2, the first, second ATS service unit 50,60 includes initial module 51, communication module
52, the first, second safety-related computing module 53,54 and tasks synchronization comparison module 55；The output end of initialization module 51
It is connect by communication module 52 with the input terminal of the first, second safety-related computing module 53,54 to change the relationship of dual-thread
Property；The input terminal of communication module 52 passes through first, second network port 13,14 or third, the 4th 23,24 and CBTC of the network port
External system and the connection of ATS client, the output end of communication module 52 and the first, second safety-related computing module 53,54
Input terminal connection；The output end of first, second safety-related computing module 53,54 and the input terminal of tasks synchronization comparison module 55
Connection；The output end of tasks synchronization comparison module 55 is connect with the input terminal of communication module 52, with by communication module 52 with
CBTC external system and ATS client are communicated.
Specifically, the effect of the initialization module 51 in the present embodiment is to realize the initial launch configuration of ATS service unit,
Affinity including changing dual-thread, for the first, second safety-related computing module 53,54 specified CPU.Communication module 52
Effect is the data of CBTC external system and ATS client to be read by the network port, and judge the type of data, will be safe
Relevant data give the first, second peace related operation module 53,54 respectively to carry out data operation.First, second safe phase
It closes computing module 53,54 to operate on independent CPU using independent thread respectively, realizes the processing to safety-relevant data.
The effect of tasks synchronization comparison module 55 is to carry out data to the processing result of the first, second safety-related computing module 53,54
Compare, to realize, task checks synchronization between two CPU.
Specifically, the first, second ATS service unit 50,60, which is also included, connect to carry out with communication module 52
The non-safety-related computing module 56 of two-way communication.
It should be noted that communication module 52 is to being safety-relevant data and non-from the collected data classification of the network port
Safety-relevant data, and non-safety-related data are sent into non-safety-related computing module 56 for non-safety-related operation mould
Block 56 is handled, and non-safety-related computing module 56 here is without using the first, second safety-related computing module 53,54
Cpu resource.
Specifically, the first, second ATS service unit 50,60 is also included through communication module 52 and initial module 51, the
One, the second safety-related computing module 53,54, tasks synchronization comparison module 55 and the connection of non-safety-related computing module 56 with
The active and standby system's switching module 57 communicated.
Wherein, the effect of active and standby system's switching module 57 is the software and hardware of the first, second ATS of real-time monitoring server 10,20
State, when software and hardware state meets the condition of switching, starting main preparation system switching, i.e. the first, second ATS service unit 50,
60 switching outputs, for example, the cutting output of the first ATS service unit 50, the starting output of the 2nd ATS service unit 60.
Multiply train supervision server system that two take two frameworks based on two as shown in figure 3, present embodiment discloses a kind of
Control method, this method comprises the following steps S1 to S3:
S1, the first, second ATS server 10,20 of starting, the first, second ATS server 10,20 pass through first, second
ATS service unit 50,60 monitors mutually other side's working condition；
After the starting of first, second ATS server 10,20, the first, second ATS service unit 50,60 monitors mutually other side's work
Make state, after determining that the first, second ATS server 10,20 working conditions are errorless, according to the first, second ATS service unit
50, the active and standby system of successively competition of 60 runing times, for example, the time of the first ATS service unit 50 operation first services with the 2nd ATS
Unit 60, it is determined that the first ATS server 10 is principal series, the 2nd ATS server 20 is standby system.
S2, the first, second ATS service unit 50,60 read the data that CBTC external system and ATS client upload and
Two, which take two votings, is realized to secure data calculation process after order；
S3, the first, second ATS service unit 50,60 take two votings to be sent to CBTC for the two of secure data calculation process
External system and ATS client.
Specifically, as shown in figure 4, above-mentioned step S2 specifically includes following subdivided step S21 to S24:
S21, initialization module 51 change the affinity of dual-thread as the first, second safety-related computing module 53,54
It respectively specifies that CPU1/CPU2, and first, second network port 13,14 or third, the 4th network port 23,24 is carried out initial
Change；
S22, communication module 52 are read by first, second network port 13,14 or third, the 4th network port 23,24
The data and order that CBTC external system and ATS client upload, and safety-related data and order are sent to first,
Second safety-related computing module 53,54；
S23, first, second safety-related computing module 53,54 pairs of safety-related data and order are handled, and will
Processing result is exported to tasks synchronization comparison module 55；
The processing result that S24, tasks synchronization comparison module 55 export the first, second safety-related computing module 53,54
The processing for being compared, and first, second safety-related computing module 53,54 being exported to communication module 52 when than more consistent
As a result it exports to CBTC external system and ATS client.
It should be noted that in practical applications, first, second 53,54 pairs of safety-related numbers of safety-related computing module
According to being handled, processing result is exported to tasks synchronization comparison module 55, tasks synchronization comparison module 55 is to two modules
Processing result is compared, and what is run in the first, second safety-related computing module 53,54 of monitoring simultaneously is same task,
If not same task, then delay waiting is carried out, postponed to the processing in the first, second safety-related computing module 53,54
As a result it is compared.
Specifically, above-mentioned step S2 further includes following steps not shown in the figure:
Communication module 52 exports the data of non-safety-related and order to non-safety-related computing module 56；
Non-safety-related computing module 56 handles the data of the non-safety-related received and order, and will processing
As a result pass through the output of communication module 52 to CBTC external system and ATS client.
Specifically, be described as follows to the course of work of communication module 52: communication module 52 reads CBTC by the network port
Safety-relevant data is given the by data that external system and ATS client upload, and classifying to the data read
One, the second safety-related computing module 53,54, gives non-safety-related data to non-safety-related computing module 56.
Specifically, above-mentioned step S2 further includes following steps not shown in the figure:
Active and standby system's switching module 57 is by communication module 52 to initial module 51, the first, second safety-related computing module
53,54, tasks synchronization comparison module 55 and non-safety-related computing module 56 carry out real-time monitoring, and any in discovery
When module breaks down, machine-cut changes logic judgment for starting；
Meet it is preset cut be logic after, the first, second ATS service unit switches over output.
The modules in ATS service unit are monitored by the way that active and standby system's switching module 57 is arranged in the present embodiment,
To obtain the working condition of modules, and the working condition of a wherein module meet it is preset cut be logic when, first,
2nd ATS service unit switches over defeated output, greatly improves the safety and availability of ATS server system.
Claims (6)
1. a kind of multiply the two train supervision server systems for taking two frameworks based on two, which is characterized in that including the first, second ATS
Server (10,20) and the first, second interchanger (30,40), the first ATS server (10) include the first CPU (11), second
CPU (12), first network port (13), second network port (14), the 2nd ATS server (20) include the 3rd CPU (21), the
Four CPU (22), the third network port (23), the 4th network port (24), the first CPU (11), the 2nd CPU (12) are respectively by the
One network port (13), second network port (14) are connect with the first interchanger (30), second switch (40), the 3rd CPU
(21), the 4th CPU (22) passes through the third network port (23), the 4th network port (24) and the first interchanger (30), the respectively
Two interchangers (40) connection；And first, second ATS server (10,20) respectively by the first, second ATS with the same function
Service unit (50,60) service is to realize that two take two votings to secure data calculation process；Wherein, first, second ATS
Service unit (50,60) includes communication module (52) and non-safety-related computing module (56), non-safety-related computing module
(56) it connect with communication module (52) to carry out two-way communication；The first, second ATS service unit (50,60) also wraps
Include through communication module (52) the active and standby system's switching module (57) being connect with non-safety-related computing module (56) to be communicated.
2. the system as claimed in claim 1, which is characterized in that the ATS server unit services using dual-thread respectively
One, (11,12) the 2nd CPU, and service third, the 4th CPU (21,22) respectively using dual-thread.
3. system as claimed in claim 2, which is characterized in that the first, second ATS service unit (50,60) wraps
Include initial module (51), the first, second safety-related computing module (53,54) and tasks synchronization comparison module (55)；
The output end of the initialization module (51) passes through communication module (52) and the first safety-related computing module (53) and the
The input terminal of two safety-related computing modules (54) is connected to change the affinity of dual-thread；
The input terminal of the communication module (52) passes through first and second network ports (13,14) or third and fourth network port
(23,24) are connect with CBTC external system and ATS client, the output end of communication module (52) and the first safety-related operation mould
Block (53) is connected with the input terminal of the second safety-related computing module (54)；
The output end and tasks synchronization of the first safety-related computing module (53) and the second safety-related computing module (54)
The input terminal of comparison module (55) connects；
The output end of the tasks synchronization comparison module (55) is connect with the input terminal of communication module (52), to pass through communication module
(52) it is communicated with CBTC external system and ATS client.
4. system as claimed in claim 3, which is characterized in that the initial module (51), the first, second safety-related fortune
Module (53,54) and tasks synchronization comparison module (55) is calculated to connect by communication module (52) with active and standby system's switching module (57)
To be communicated.
5. a kind of control according to any one of claims 1-4 for multiplying the train supervision server system that two take two frameworks based on two
Method processed, which comprises the steps of:
S1, starting the first, second ATS server (10,20), the first, second ATS server (10,20) pass through first, second
ATS service unit (50,60) monitors mutually other side's working condition；
S2, the first, second ATS service unit (50,60) read the data and life that CBTC external system and ATS client upload
Two, which take two votings, is realized to secure data calculation process after order；
Its step S2 further include:
Communication module (52) exports the data of non-safety-related and order to non-safety-related computing module (56)；
Non-safety-related computing module (56) handles the data of the non-safety-related received and order, and processing is tied
Fruit is exported by communication module (52) to CBTC external system and ATS client；
Active and standby system's switching module (57) is by communication module (52) to initial module (51), the first, second safety-related operation mould
Block (53,54), tasks synchronization comparison module (55) and non-safety-related computing module (56) carry out real-time monitoring, and are finding
When any module breaks down, machine-cut changes logic judgment for starting；And meet it is preset cut be logic after, first,
Two ATS service units switch over output；
S3, the first, second ATS service unit (50,60) take two votings to be sent to outside CBTC for the two of secure data calculation process
Portion's system and ATS client.
6. method as claimed in claim 5, which is characterized in that the step S2 includes:
S21, initialization module (51) change the affinity of dual-thread as the first and second safety-related computing modules (53,54)
Respectively specify that CPU1/CPU2, and to first and second network ports (13,14) or third and fourth network port (23,24) into
Row initialization；
S22, communication module (52) pass through first and second network ports (13,14) or third and fourth network port (23,24)
The data and order that CBTC external system and ATS client upload are read, and safety-related data and order are sent to
First, second safety-related computing module (53,54)；
S23, the first, second safety-related computing module (53,54) handle safety-related data and order, and will place
Reason result is exported to tasks synchronization comparison module (55)；
The processing result that S24, tasks synchronization comparison module (55) export the first, second safety-related computing module (53,54)
It is compared, and first, second safety-related computing module (53,54) is exported to communication module (52) when than more consistent
Processing result is exported to CBTC external system and ATS client.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611219877.5A CN106627668B (en) | 2016-12-26 | 2016-12-26 | Multiply the two train supervision server systems and control method for taking two frameworks based on two |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611219877.5A CN106627668B (en) | 2016-12-26 | 2016-12-26 | Multiply the two train supervision server systems and control method for taking two frameworks based on two |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106627668A CN106627668A (en) | 2017-05-10 |
| CN106627668B true CN106627668B (en) | 2019-04-05 |
Family
ID=58827562
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201611219877.5A Active CN106627668B (en) | 2016-12-26 | 2016-12-26 | Multiply the two train supervision server systems and control method for taking two frameworks based on two |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106627668B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107992752B (en) * | 2017-10-18 | 2020-05-22 | 北京全路通信信号研究设计院集团有限公司 | Data processing method and device and computer equipment |
| CN109739568B (en) * | 2018-12-19 | 2021-12-21 | 卡斯柯信号有限公司 | Security platform starting method based on 2-by-2-out-of-2 architecture |
| CN112776853B (en) * | 2019-11-08 | 2022-03-22 | 株洲中车时代电气股份有限公司 | Train microcomputer network control system and method thereof |
| CN110979393A (en) * | 2019-12-14 | 2020-04-10 | 中车大连电力牵引研发中心有限公司 | Programmable logic control system applied to subway train |
| CN110979404B (en) * | 2019-12-19 | 2021-11-12 | 交控科技股份有限公司 | Dual-machine hot standby system and method of automatic train supervision system |
| CN111541578A (en) * | 2020-05-27 | 2020-08-14 | 合肥工大高科信息科技股份有限公司 | Data interaction device, method and system for dual-computer hot standby interlocking system |
| CN114644030B (en) * | 2020-12-21 | 2023-05-09 | 比亚迪股份有限公司 | Automatic train monitoring system |
| CN114553376A (en) * | 2022-01-06 | 2022-05-27 | 北京全路通信信号研究设计院集团有限公司 | Two-by-two-out-of-two platform communication method and system for computer interlocking system |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101659270A (en) * | 2009-09-01 | 2010-03-03 | 卡斯柯信号有限公司 | Method for connecting station ATS with station ATO |
| CN103634150A (en) * | 2013-12-03 | 2014-03-12 | 合肥工大高科信息科技股份有限公司 | Redundant high-safety CAN (controller area network) bus communication system and communication method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2012021759A2 (en) * | 2010-08-11 | 2012-02-16 | Zonit Structured Solutions Llc | Parallel redundant power distribution |
| US8707095B2 (en) * | 2011-07-14 | 2014-04-22 | Beacon Property Group Llc | Datacenter utilizing modular infrastructure systems and redundancy protection from failure |
-
2016
- 2016-12-26 CN CN201611219877.5A patent/CN106627668B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101659270A (en) * | 2009-09-01 | 2010-03-03 | 卡斯柯信号有限公司 | Method for connecting station ATS with station ATO |
| CN103634150A (en) * | 2013-12-03 | 2014-03-12 | 合肥工大高科信息科技股份有限公司 | Redundant high-safety CAN (controller area network) bus communication system and communication method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106627668A (en) | 2017-05-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106627668B (en) | Multiply the two train supervision server systems and control method for taking two frameworks based on two | |
| CN105278516B (en) | A kind of implementation method of the reliable fault-tolerant controller of dual redundant switching value PLC control system | |
| CN110361979B (en) | Safety computer platform in railway signal field | |
| CN101916218B (en) | Double-CPU redundancy control system based on analysis redundancy mechanism | |
| CN102866690B (en) | Redundancy switching method between Redundant process control station in scattered control system | |
| CN102621938A (en) | Triple redundancy control system in process control and method thereof | |
| CN104360916B (en) | Main standby synchronous method based on data syn-chronization | |
| CN105681131B (en) | Main preparation system and its parallel output method | |
| CN110376876A (en) | A kind of safety computer platform that double systems are synchronous | |
| CN110351174A (en) | A kind of safety computer platform of module redundancy | |
| CN104268037A (en) | Hot redundancy interlocking subsystem and main and standby switching method thereof | |
| CN107483135A (en) | A kind of high synchronous time triggered Ethernet device and method | |
| CN108551397A (en) | The communication control method of network bridge device and application and more PLC master stations and more PLC slave stations | |
| CN105516292A (en) | Hot standby method of cloud platform of intelligent substation | |
| JPS58221453A (en) | Multi-system information processor | |
| CN104516306A (en) | Redundant automation system | |
| CN104407949A (en) | Spaceborne module-level redundant backup system and method | |
| CN110716543A (en) | Ship redundancy control technical scheme | |
| CN105045181A (en) | Overall redundant architecture of PAS 100 control system | |
| CN113127270A (en) | Cloud computing-based 2-out-of-3 safety computer platform | |
| CN103929424B (en) | The treatment of two from three secure data and referee method and its device of software and hardware combining | |
| CN101931519A (en) | Triple-modular redundancy implementation method based on synchronous communication exchange | |
| CN107153351A (en) | The redundancy control system of actuator and the method for its Redundant Control | |
| CN106444685A (en) | Distributed control system and method of distributed control system for dynamic scheduling resources | |
| CN102866698A (en) | Human machine interface (HMI) redundant communication method for distributed control system controller |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |