CN110789569B - Column control DMI data redundancy control method and system - Google Patents

Column control DMI data redundancy control method and system Download PDF

Info

Publication number
CN110789569B
CN110789569B CN201910988880.0A CN201910988880A CN110789569B CN 110789569 B CN110789569 B CN 110789569B CN 201910988880 A CN201910988880 A CN 201910988880A CN 110789569 B CN110789569 B CN 110789569B
Authority
CN
China
Prior art keywords
data
main
dmi
standby
heartbeat
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910988880.0A
Other languages
Chinese (zh)
Other versions
CN110789569A (en
Inventor
朱志承
王建敏
张友兵
于晓娜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CRSC Research and Design Institute Group Co Ltd
Original Assignee
CRSC Research and Design Institute Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CRSC Research and Design Institute Group Co Ltd filed Critical CRSC Research and Design Institute Group Co Ltd
Priority to CN201910988880.0A priority Critical patent/CN110789569B/en
Publication of CN110789569A publication Critical patent/CN110789569A/en
Priority to EA202092375A priority patent/EA202092375A1/en
Priority to PCT/CN2020/108331 priority patent/WO2021073221A1/en
Priority to RS20221049A priority patent/RS63730B1/en
Priority to HUE20785892A priority patent/HUE060600T2/en
Priority to EP20785892.9A priority patent/EP3828055B1/en
Application granted granted Critical
Publication of CN110789569B publication Critical patent/CN110789569B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0018Communication with or on the vehicle or train
    • B61L15/0036Conductor-based, e.g. using CAN-Bus, train-line or optical fibres
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0063Multiple on-board control systems, e.g. "2 out of 3"-systems
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0072On-board train data handling
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/009On-board display devices
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0081On-board diagnosis or maintenance

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Hardware Redundancy (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)

Abstract

The invention provides a column control DMI data redundancy control method and a system, wherein a DMI simultaneously receives and processes two groups of data which are mutually in a primary-backup relationship, the DMI judges the primary-backup relationship based on the analysis result of the data, and the DMI displays primary system data; the system comprises two main control units, a DMI and a display unit, wherein the two main control units are used for respectively sending data to the DMI, the two groups of data are in a main-standby relationship with each other, and the DMI is used for simultaneously receiving and processing the two groups of data which are in the main-standby relationship with each other and judging the main-standby relationship based on the analysis result of the data to display main system data; the DMI receives data sent by the two main control units simultaneously, the two main control units are respectively used as a main system and a standby system according to the two main and standby system identifications, when the main system is abnormal, the two main and standby system identifications are changed, the DMI switches the main system and the standby system after recognizing that the two main and standby system identifications are changed, the content displayed by the DMI is not influenced, a switching module does not need to be configured, the structure is simple, and the switching efficiency is high.

Description

Column control DMI data redundancy control method and system
Technical Field
The invention belongs to the technical field of dual-computer hot standby, and particularly relates to a column control DMI data redundancy control method and system.
Background
In the field of train communication, data packets between a human machine interface (DMI) and a vehicle-mounted main control unit are transmitted through a bus;
the vehicle-mounted equipment main control unit transmits data to the human-computer interaction unit through the bus, the human-computer interaction unit also transmits the data to the vehicle-mounted main control unit through the bus, and a plurality of corresponding ports can be configured on the vehicle-mounted main control unit and the human-computer interaction unit as required to carry out interactive transmission of the data;
the existing vehicle-mounted equipment is a single-system main control unit, the main control unit carries out data interactive transmission with a human-computer interaction unit through a bus, and the double-system main control unit does not have the function of double-system hot equipment; fig. 1 shows a schematic diagram of a communication connection relationship between a human-computer interaction unit and a vehicle-mounted main control unit in the prior art, the human-computer interaction unit reads data sent by the vehicle-mounted main control unit from a corresponding port through a bus, application logic of the human-computer interaction unit unpacks the read data, the human-computer interaction unit writes data to be transmitted into the corresponding port on the bus at the same time, and the vehicle-mounted main control unit reads the data sent by the human-computer interaction unit from the port on the bus for processing.
Even if the existing vehicle-mounted main control unit realizes double-system hot standby, namely two vehicle-mounted main control units are arranged, the two vehicle-mounted main control units are respectively used as a main system and a standby system, the two vehicle-mounted main control units are in communication connection with the man-machine interaction unit, but the vehicle-mounted main control units and the man-machine interaction unit are in single-system communication, namely the main control unit in use is in data interaction communication with the man-machine interaction unit, the standby system main control unit does not perform data communication transmission with the man-machine interaction unit at the moment, if the main control unit in use fails, the vehicle-mounted equipment needs to be switched to the other main control unit, then a switching circuit is specially arranged to realize a switching function, the switching efficiency is reduced due to the existence of the switching electric circuit, and the real time difference easily causes data loss.
Disclosure of Invention
In order to solve the above problems, the present invention provides a column control DMI data redundancy control method,
the DMI receives and processes two groups of data which are mutually in a primary-secondary relationship at the same time, judges the primary-secondary relationship based on the analysis result of the data, and displays primary system data.
Preferably, the DMI stores backup data.
Preferably, the analysis result includes a primary and secondary system identifier, and the primary and secondary system identifier dynamically changes based on the data state;
the DMI judges whether the main and standby system identification is a main system identification or a standby system identification;
the DMI displays data with a master system identification, and the DMI stores data with a slave system identification.
Preferably, the master/slave system identifier dynamically changes based on a data state, and includes:
the DMI receives first heartbeat data sent by a main system, and the state of the first heartbeat data synchronously changes along with the state of the main system data;
the DMI judges whether the first heartbeat data is normal or not, and executes the following steps based on the judgment result:
the DMI judges that the first heartbeat data is normal, and the main and standby system identification is kept unchanged;
and the DMI judges that the first heartbeat data is abnormal, the main system identification is converted into the standby system identification, and the standby system identification is converted into the main system identification.
Preferably, the master/slave system identifier dynamically changes based on a data state, and includes:
the standby system receives second heartbeat data sent by the main system, and the state of the second heartbeat data is synchronously changed along with the state of the main system data;
judging whether the second heartbeat data is normal or not, and executing the following steps based on the judgment result:
the backup system judges that the second heartbeat data is normal, and the primary and backup system identification is kept unchanged;
the backup system determines the second heartbeat data is abnormal, the primary system identifier is converted into a backup system identifier, and the backup system identifier is converted into a primary system identifier.
Preferably, the DMI receives third heartbeat data sent by the master system, and the state of the third heartbeat data is synchronously changed along with the state of the master system data;
the DMI judges whether the third heartbeat data is normal or not, and executes the following steps based on the judgment result:
the DMI judges that the third heartbeat data is normal, and the main and standby systems are kept unchanged;
and the DMI judges that the third heartbeat data is abnormal, the main system data is converted into the standby system data, and the standby system data is converted into the main system data.
The invention also provides a column control DMI data redundancy control system, which comprises:
the two main control units are used for respectively sending data to the DMI, and the two groups of data are in a master-slave relationship with each other;
and the DMI is used for receiving and processing two groups of data which are mutually in a primary-secondary relationship at the same time, judging the primary-secondary relationship based on the analysis result of the data and displaying the primary data.
Preferably, the DMI is used for storing backup data.
Preferably, the analysis result includes a primary and secondary system identifier, and the primary and secondary system identifier dynamically changes based on the data state;
the DMI is used for judging whether the main and standby system identification is a main system identification or a standby system identification;
the DMI is used for displaying data with a master system identification and storing the data with a slave system identification.
Preferably, the master/slave system identifier dynamically changes based on a data state, and includes:
the DMI is used for receiving first heartbeat data sent by a main control unit serving as a main system, and the state of the first heartbeat data synchronously changes along with the state of the main system data;
the DMI is used for judging whether the first heartbeat data is normal or not and executing the following steps based on the judgment result:
the DMI judges that the first heartbeat data is normal, and the main and standby system identification is kept unchanged;
and the DMI judges that the first heartbeat data is abnormal, the main system identification is converted into the standby system identification, and the standby system identification is converted into the main system identification.
Preferably, the master/slave system identifier dynamically changes based on a data state, and includes:
the master control unit serving as the backup system receives second heartbeat data sent by the master control unit serving as the master system, and the state of the second heartbeat data is synchronously changed along with the state of the master system data;
the backup system is used for judging whether the second heartbeat data is normal or not and executing the following steps based on the judgment result:
the backup system judges that the second heartbeat data is normal, and the primary and backup system identification is kept unchanged;
the backup system determines the second heartbeat data is abnormal, the primary system identifier is converted into a backup system identifier, and the backup system identifier is converted into a primary system identifier.
Preferably, the DMI is configured to receive third heartbeat data sent by a main control unit serving as a master system, and a state of the third heartbeat data is synchronously changed along with a state of the master system data;
the DMI is used for judging whether the third heartbeat data is normal or not and executing the following steps based on the judgment result:
the DMI judges that the third heartbeat data is normal, and the main and standby systems are kept unchanged;
and the DMI judges that the third heartbeat data is abnormal, the main system data is converted into the standby system data, and the standby system data is converted into the main system data.
According to the row control DMI data redundancy control method and system, the man-machine interaction unit receives data sent by the first main control unit and the second main control unit at the same time, the first main control unit and the second main control unit are respectively used as the main system and the standby system according to the first main system identification and the second main system identification, when the main system is abnormal, the first main system identification and the second main system identification change, the man-machine interaction unit switches the main system and the standby system after recognizing the change of the first main system identification and the second main system identification, the content displayed by the man-machine interaction unit is not influenced, a switching module does not need to be configured, the structure is simple, and the switching efficiency is high.
Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.
FIG. 1 is a schematic diagram illustrating a communication connection between a single master control unit and a human-computer interaction unit in the prior art;
FIG. 2 is a schematic diagram of communication connections of a column control DMI data redundancy control system according to an embodiment of the invention;
FIG. 3 is a flow chart illustrating a column control DMI data redundancy control method according to an embodiment of the invention;
FIG. 4 is a diagram illustrating the structure of a data packet according to an embodiment of the present invention;
fig. 5 shows a schematic flow chart of monitoring states of the main and standby systems according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
And the human-computer interaction unit (DMI) is used by a train driver, so that the driver can drive the train to run according to the displayed information and can be instructed to execute related operations according to prompts.
The embodiment provides a column control DMI data redundancy control system, which comprises two main control units and a human-computer interaction unit, wherein the two main control units are respectively called a first main control unit and a second main control unit;
one of the first main control unit and the second main control unit is used as a main system, and the other one is used as a standby system;
the human-computer interaction unit comprises a display module and a storage module, the display module and the storage module are not shown in the figure, the display module is used for displaying data sent by the main system to the human-computer interaction unit, the storage module is used for storing the data sent by the main system to the human-computer interaction unit, and the data sent by the standby system to the human-computer interaction unit is not displayed. Data transmitted from the master control unit as the master system is referred to as master system data, and data transmitted from the master control unit as the slave system is referred to as slave system data.
In a working state, the first main control unit and the second main control unit simultaneously send data to the man-machine interaction unit, wherein the data sent by the main control unit serving as the main system is displayed on the display module, the data sent by the main control unit serving as the standby system is stored in the storage module, and the man-machine interaction unit simultaneously feeds back the data to the first main control unit and the second main control unit.
Specifically, referring to fig. 2, the human-computer interaction unit has a receiving port (sink port) and a source port (source port), the first main control unit is provided with the receiving port (sink port) and the source port (source port), and the second main control unit is provided with the receiving port (sink port) and the source port (source port). The receiving port (sink port) and the source port (source port) are both connected to a train bus (bus), and the train bus can be a multifunctional vehicle bus, a twisted wire train bus and the like. The receiving port of the man-machine interaction unit is in communication connection with the source port of the first main control unit and the source port of the second main control unit, and the source port of the man-machine interaction unit is in communication connection with the receiving port of the first main control unit and the receiving port of the second main control unit; in a working state, the man-machine interaction unit sends data to the first main control unit and the second main control unit through the source port at the same time, the sent data are received through the receiving port of the first main control unit and the receiving port of the second main control unit, the first main control unit and the second main control unit respectively send data to the man-machine interaction unit through the respective source ports at the same time, and the sent data are received through the receiving port of the man-machine interaction unit.
The first main control unit is provided with a first heartbeat module, the second main control unit is provided with a second heartbeat module, the first heartbeat module is in communication connection with the human-computer interaction unit through a heartbeat line, and the second heartbeat module is in communication connection with the human-computer interaction unit through the heartbeat line. The first heartbeat module and the second heartbeat module respectively send first heartbeat data to the man-machine interaction unit, so that the man-machine interaction unit can monitor the states of the first main control unit and the second main control unit.
The first main control unit is provided with a third heartbeat module, and the second main control unit is provided with a fourth heartbeat module. The third heartbeat module is in communication connection with the second main control unit through a heartbeat wire, the fourth heartbeat module is in communication connection with the first main control unit through the heartbeat wire, the third heartbeat module is used for sending second heartbeat data to the second main control unit, the second main control unit can monitor the state of the first main control unit, the fourth heartbeat module is used for sending the second heartbeat data to the first main control unit, and the first main control unit can monitor the state of the second main control unit.
Referring to fig. 3, in an initial state, a first main control unit and a second main control unit send first heartbeat data to a human-computer interaction unit, and if the human-computer interaction unit can receive two sets of the first heartbeat data, a heartbeat value is not 0, and the heartbeat values are normal, it is indicated that the human-computer interaction unit is normally connected with the first main control unit and the second main control unit, and subsequent main-standby system configuration can be performed. If one or two groups of first heartbeat data are abnormal, the connection between the human-computer interaction unit and the first main control unit or the second main control unit is abnormal, the subsequent process is interrupted, and an operator needs to check the equipment at the moment.
The man-machine interaction unit receives first data sent by the first main control unit and second data sent by the second main control unit in real time, the first data and the second data both adopt data packets of a typical producer/consumer mode, and as shown in fig. 4, a data packet structure includes a main system identifier, data and a CRC code. In order to distinguish the first data from the second data, the primary/secondary system identifiers of the data packet of the first data are called first primary/secondary system identifiers, the primary/secondary system identifiers of the data packet of the second data are called second primary/secondary system identifiers, the CRC code of the first data is generated by the first main control unit, and the CRC code of the second data is generated by the second main control unit;
the man-machine interaction unit receives first data sent by the first main control unit in real time, the first data is provided with a first main/standby system identification, and the man-machine interaction unit analyzes the first main/standby system identification. In this embodiment, a result of the first primary/secondary system identifier analysis is represented by 1 or 2, if the analysis result is 1, it indicates that the first primary control unit should be used as the primary system at this time, and if the analysis result is 2, it indicates that the first primary control unit should be used as the secondary system at this time.
The man-machine interaction unit receives second data sent by a second main control unit in real time, and the second data has second main and standby system identifications; the man-machine interaction unit analyzes the second main and standby system identification, if the analysis result of the second main and standby system identification is 1, the second main control unit is used as the main system at the moment, and if the analysis result is 2, the second main control unit is used as the standby system at the moment.
The first main/standby system identifier and the second main/standby system identifier are both 1 in the analysis result of one and 2 in the analysis result of the other at any time, so that the situation that the two main/standby system identifiers are both 1 or both 2 does not occur, and one of the first main control unit and the second main control unit is ensured to be used as the main system and the other one is used as the standby system under any situation.
And the man-machine interaction unit judges whether the main and standby system identification of the source of the current display data is 1 in real time, if so, the main and standby system identification is not adjusted, and if not, the main and standby system identification is converted into the standby system.
Illustratively, in the initial state, the first main control unit and the second main control unit mutually agree that the first active/standby system identifier is 1, and the second active/standby system identifier is 2. The man-machine interaction unit stores the data of the second main control unit but does not display the data of the second main control unit, and the data sent by the second main control unit is the standby data; when the first main control unit fails, the state is not good, communication is blocked and the like, the first main control unit cannot accurately and timely transmit data to the man-machine interaction unit, at the moment, the first main/standby system identifier is changed into 2, the second main/standby system identifier is changed into 1, the second main control unit is lifted into a main system, the first main control unit is lowered into a standby system, at the moment, the man-machine interaction unit displays data of the second main control unit, the man-machine interaction unit stores but does not display the data of the first main control unit, at the moment, the data sent by the second main control unit is main system data, the data sent by the first main control unit is standby coefficient data, information displayed by the man-machine interaction unit is not affected by the abnormality of the first main control unit, at the moment, the first main control unit needs to be repaired, and after the repair, the first main control unit continues to be used as the standby system.
Through the analysis, no matter the first main control unit is used as the main system or the second main control unit is used as the main system, the man-machine interaction unit receives data transmitted by the main system in real time, and when the main system and the standby system are switched, the content displayed by the man-machine interaction unit is not affected.
In addition, after monitoring that the first heartbeat data is normal, the human-computer interaction unit sets an effective mark of the first data and the second data as true, and checks the transmitted first data and the transmitted second data in order to ensure the accuracy and the integrity of data transmission. In the embodiment, Cyclic Redundancy Check (CRC) is adopted, a CRC code behind a data packet of first data is calculated by a first main control unit, a CRC code behind a data packet of second data is calculated by a second main control unit, a human-computer interaction unit recalculates the CRC code when receiving the first data and the second data, and compares a calculation result with an actually received CRC code, if the two CRC codes are equal, transmission is free of errors, and if the two CRC codes are not equal, transmission is in errors.
The process of generating the CRC code is:
1. a 16-bit variable, called the CRC register, is assigned 0 xffff.
2. The first byte of the message is exclusive-ored with the CRC register and stored in the CRC register.
3. The CRC register is shifted right by one bit and zero-filled high.
4. Judging whether the removed bit is 0 or 1, and returning to the step 3 if the removed bit is 0; if 1, the CRC register is XOR'd with 0xa001 and saved to the CRC register.
5. Repeat 3-4 until eight shifts are completed.
6. Repeat steps 2-5 for the next byte.
7. After calculating each byte of the message, the CRC code is generated, but it should be noted that: when the CRC code is placed in the message, the high byte and the low byte need to be exchanged.
If no error occurs in the first data transmission process and the second data transmission process, the man-machine interaction unit is respectively connected with the main system and the standby system, the man-machine interaction unit displays the content transmitted by the main system, and if an error occurs in the first data transmission process or the second data transmission process, the data transmission is stopped, and the equipment is checked.
The man-machine interaction unit needs to judge whether the current state of the master system is normal or not in real time so as to ensure that the standby system can be timely upgraded to the master system when the master system is abnormal. Referring to fig. 5, a human-computer interaction unit receives first heartbeat data sent by a main system in real time, the human-computer interaction unit judges a main system state based on the first heartbeat data of the main system, the first heartbeat data state is synchronously changed along with the main system data state, and a first main-standby system identifier and a second main-standby system identifier are dynamically changed based on a judgment result. If the first heartbeat data is normal, the main and standby systems keep the current state, if the first heartbeat data is abnormal, the first main and standby system identification and the second main and standby system identification are changed, the standby system is upgraded to the main system, and the main system is upgraded to the standby system; at this time, the standby system may or may not send the first heartbeat data to the human-computer interaction unit, and if the standby system sends the first heartbeat data to the human-computer interaction unit, the human-computer interaction unit monitors the states of the main and standby systems at the same time.
Exemplarily, in the current state, the first main control unit is a main system, the second main control unit is a standby system, the first main system and standby system are identified as 1, the second main system and standby system are identified as 2, and the first main control unit sends the first heartbeat data to the human-computer interaction unit at regular time. Specifically, the first main control unit sends the local state by taking 100ms as a unit, the local state comprises a normal state and an error state, when the man-machine interaction unit receives error information of the first main control unit or receives first heartbeat data for 5 times continuously, the man-machine interaction unit changes a first main/standby system identifier into 2 and a second main/standby system identifier into 1, after the main/standby system identifiers are changed, the man-machine interaction unit displays second data sent by the second main control unit and stores the first data sent by the first main control unit, the first main control unit is lowered into a standby system, and the second main control unit is raised into a main system, so that switching of the main/standby systems is realized.
In another design mode of monitoring the states of the main and standby systems, the standby system receives second heartbeat data sent by the main system in real time, judges the state of the main system based on the second heartbeat data, dynamically changes a first main and standby system identifier and a second main and standby system identifier based on a judgment result, keeps the current state of the main and standby systems if the second heartbeat data is normal, changes the first main and standby system identifiers and the second main and standby system identifiers if the second heartbeat data is abnormal, and then the main system is upgraded to be the main system and the main system is upgraded to be the standby system.
Exemplarily, in the current state, the first main control unit is a main system, the second main control unit is a standby system, the first main system identifier is 1, the second main system identifier is changed to 2, and the first main control unit sends the second heartbeat data to the second main control unit at regular time. Specifically, the first main control unit sends the local state by taking 100ms as a unit, the local state comprises a normal state and an error state, when the second main control unit receives error information of the first main control unit or receives second heartbeat data for 5 times continuously, the second main control unit feeds back information to the first main control unit, the man-machine interaction unit changes the first main backup system identifier into 2, the second main backup system identifier into 1, the first main control unit is lowered into a backup system, the second main control unit is raised into a main system, and switching of the main backup system is achieved.
The data redundancy system can adopt the two design schemes of the main and standby system state monitoring simultaneously to ensure that the main system state abnormity can be monitored in time, so that the main and standby systems can be switched in time, and the displayed content of the man-machine interaction unit is not influenced.
In another design mode, the first data and the second data are not provided with main and standby system identifications, the man-machine interaction unit receives third heartbeat data sent by the main system, and the state of the third heartbeat data is synchronously changed along with the state of the main system data;
the human-computer interaction unit judges whether the third heartbeat data is normal or not, and executes the following steps based on the judgment result:
the man-machine interaction unit judges that the third heartbeat data is normal, and the main and standby systems are kept unchanged;
and the human-computer interaction unit judges that the third heartbeat data is abnormal, the main system data is converted into standby system data, and the standby system data is converted into main system data.
Illustratively, in the current state, the first main control unit is a main system, the second main control unit is a standby system, the first main control unit sends third heartbeat data to the human-computer interaction unit at regular time, specifically, the first main control unit sends the local state by taking 100ms as a unit, the local state includes a normal state and an error state, when the human-computer interaction unit monitors that the third heartbeat data is abnormal, the human-computer interaction unit does not display the data sent by the first main control unit any more, but displays the data sent by the second main control unit, the first main control unit is lowered to the standby system, the second main control unit is raised to the main system, and switching between the main system and the standby system is realized.
Although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (6)

1. A column control DMI data redundancy control method is characterized in that,
the DMI receives and processes two groups of data which are in a primary-secondary relationship with each other at the same time, the DMI judges the primary-secondary relationship based on an analysis result of the data, the analysis result comprises a primary-secondary system identifier, and the primary-secondary system identifier dynamically changes based on a data state; the DMI receives first heartbeat data sent by a master system, and the state of the first heartbeat data synchronously changes along with the state of the master system data; the DMI judges whether the first heartbeat data is normal or not, and executes the following steps based on the judgment result: the DMI judges that the first heartbeat data is normal, and the main and standby system identification is kept unchanged; the DMI judges that the first heartbeat data is abnormal, the main system identification is converted into a standby system identification, and the standby system identification is converted into a main system identification;
the DMI judges whether the main and standby system identification is a main system identification or a standby system identification;
the DMI displays data with a master system identification, and the DMI stores data with a slave system identification.
2. The column-controlled DMI data redundancy control method of claim 1,
the main and standby system identification dynamically changes based on the data state, and the method comprises the following steps:
the standby system receives second heartbeat data sent by the main system, and the state of the second heartbeat data is synchronously changed along with the state of the main system data;
judging whether the second heartbeat data is normal or not, and executing the following steps based on the judgment result:
the backup system judges that the second heartbeat data is normal, and the primary and backup system identification is kept unchanged;
the backup system determines the second heartbeat data is abnormal, the primary system identifier is converted into a backup system identifier, and the backup system identifier is converted into a primary system identifier.
3. The column-controlled DMI data redundancy control method of claim 1,
the DMI receives third heartbeat data sent by the master system, and the state of the third heartbeat data is synchronously changed along with the state of the master system data;
the DMI judges whether the third heartbeat data is normal or not, and executes the following steps based on the judgment result:
the DMI judges that the third heartbeat data is normal, and the main and standby systems are kept unchanged;
and the DMI judges that the third heartbeat data is abnormal, the main system data is converted into the standby system data, and the standby system data is converted into the main system data.
4. A column control DMI data redundancy control system, comprising:
the two main control units are used for respectively sending data to the DMI, and the two groups of data are in a master-slave relationship with each other;
the DMI is used for receiving and processing two groups of data which are in a master-slave relationship with each other at the same time, judging the master-slave relationship based on an analysis result of the data, and displaying master-slave system data, wherein the analysis result comprises a master-slave system identifier which dynamically changes based on a data state; the DMI is used for receiving first heartbeat data sent by a main control unit serving as a main system, and the state of the first heartbeat data synchronously changes along with the state of the main system data; the DMI is used for judging whether the first heartbeat data is normal or not and executing the following steps based on the judgment result: the DMI judges that the first heartbeat data is normal, and the main and standby system identification is kept unchanged; the DMI judges that the first heartbeat data is abnormal, the main system identification is converted into a standby system identification, and the standby system identification is converted into a main system identification;
the DMI is used for judging whether the main and standby system identification is a main system identification or a standby system identification;
the DMI is used for displaying data with a master system identification and storing the data with a slave system identification.
5. The column controlled DMI data redundancy control system of claim 4,
the main and standby system identification dynamically changes based on the data state, and the method comprises the following steps:
the master control unit as the backup system is used for receiving second heartbeat data sent by the master control unit as the master system, and the state of the second heartbeat data is synchronously changed along with the state of the master system data;
the backup system is used for judging whether the second heartbeat data is normal or not and executing the following steps based on the judgment result:
the backup system judges that the second heartbeat data is normal, and the primary and backup system identification is kept unchanged;
the backup system determines the second heartbeat data is abnormal, the primary system identifier is converted into a backup system identifier, and the backup system identifier is converted into a primary system identifier.
6. The column controlled DMI data redundancy control system of claim 4,
the DMI is used for receiving third heartbeat data sent by a main control unit serving as a main system, and the state of the third heartbeat data is synchronously changed along with the state of the main system data;
the DMI is used for judging whether the third heartbeat data is normal or not and executing the following steps based on the judgment result:
the DMI judges that the third heartbeat data is normal, and the main and standby systems are kept unchanged;
and the DMI judges that the third heartbeat data is abnormal, the main system data is converted into the standby system data, and the standby system data is converted into the main system data.
CN201910988880.0A 2019-10-17 2019-10-17 Column control DMI data redundancy control method and system Active CN110789569B (en)

Priority Applications (6)

Application Number Priority Date Filing Date Title
CN201910988880.0A CN110789569B (en) 2019-10-17 2019-10-17 Column control DMI data redundancy control method and system
EA202092375A EA202092375A1 (en) 2019-10-17 2020-08-11 METHOD AND SYSTEM FOR DMI REDUCE DATA CONTROL FOR TRAIN CONTROL
PCT/CN2020/108331 WO2021073221A1 (en) 2019-10-17 2020-08-11 Train control dmi data redundancy control method and system
RS20221049A RS63730B1 (en) 2019-10-17 2020-08-11 Train control dmi data redundancy control method and system
HUE20785892A HUE060600T2 (en) 2019-10-17 2020-08-11 Train control dmi data redundancy control method and system
EP20785892.9A EP3828055B1 (en) 2019-10-17 2020-08-11 Train control dmi data redundancy control method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910988880.0A CN110789569B (en) 2019-10-17 2019-10-17 Column control DMI data redundancy control method and system

Publications (2)

Publication Number Publication Date
CN110789569A CN110789569A (en) 2020-02-14
CN110789569B true CN110789569B (en) 2022-04-22

Family

ID=69439325

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910988880.0A Active CN110789569B (en) 2019-10-17 2019-10-17 Column control DMI data redundancy control method and system

Country Status (6)

Country Link
EP (1) EP3828055B1 (en)
CN (1) CN110789569B (en)
EA (1) EA202092375A1 (en)
HU (1) HUE060600T2 (en)
RS (1) RS63730B1 (en)
WO (1) WO2021073221A1 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110789569B (en) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 Column control DMI data redundancy control method and system
DE102020105794B4 (en) * 2020-03-04 2022-02-03 Infineon Technologies Ag Device, controller for a device and method for communication
CN112249092A (en) * 2020-10-30 2021-01-22 株洲中车时代电气股份有限公司 Console interaction system
CN112706801B (en) * 2021-01-28 2023-07-11 苏州长风航空电子有限公司 Control method and control system for train network information
CN113568301B (en) * 2021-09-26 2022-01-14 浙江中控技术股份有限公司 Hot standby redundancy method and control system
CN114348049B (en) * 2022-01-06 2024-01-19 北京全路通信信号研究设计院集团有限公司 Multi-radio redundancy control method and device for CTCS (China train control System)

Family Cites Families (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3911907A1 (en) * 1989-04-12 1990-10-18 Standard Elektrik Lorenz Ag METHOD FOR CONTINUOUSLY TESTING A SIGNAL-SECURE SCREEN DISPLAY
CN101277269A (en) * 2008-05-06 2008-10-01 杭州华三通信技术有限公司 Terminal with dependable communication, terminal switch method and system as well as method for implementing the system
CN201321058Y (en) * 2008-12-19 2009-10-07 中国铁道科学研究院通信信号研究所 Human-machine interface device of train control on-vehicle equipment and train control on-vehicle equipment
CN101890971B (en) * 2009-05-18 2013-01-23 华为技术有限公司 Method, equipment and system for controlling train operation
DE102009025550A1 (en) * 2009-06-15 2010-12-16 Siemens Aktiengesellschaft Method for train data entry in a multi-system train-protection configuration and multi-system configuration
CN101923739B (en) * 2010-08-19 2012-09-05 北京航空航天大学 Integrated display system for aircraft engine parameters and air service information and construction method thereof
KR101275027B1 (en) * 2011-07-29 2013-06-17 현대로템 주식회사 Man machine interface apparatus for railway car
CN102497429B (en) * 2011-12-13 2014-08-06 南京恩瑞特实业有限公司 Multi-redundancy processing method for train-ground data transmission in rail transit
CN103019218B (en) * 2012-12-26 2014-08-20 北京国铁路阳技术有限公司 Railway signal device utilizing dual-CPU (central processing unit) redundancy and control method of railway signal device
US9497099B2 (en) * 2013-12-16 2016-11-15 Artesyn Embedded Computing, Inc. Voting architecture for safety and mission critical systems
CN103780365B (en) * 2014-01-26 2017-03-29 中国神华能源股份有限公司 dynamic multi-link redundancy data transmission method
CN105790825B (en) * 2014-12-25 2020-08-14 中兴通讯股份有限公司 Method and device for hot backup of controller in distributed protection
CN105187248B (en) * 2015-09-16 2018-10-23 浙江众合科技股份有限公司 A kind of redundancy switching system
CN205186191U (en) * 2015-10-10 2016-04-27 河南思维自动化设备股份有限公司 Train operation monitoring system
CN105471622B (en) * 2015-11-12 2019-03-01 武汉噢易云计算股份有限公司 A kind of high availability method and system of the control node active-standby switch based on Galera
CN105450446A (en) * 2015-11-17 2016-03-30 绵阳市维博电子有限责任公司 Duplicated hot-redundancy system and arbitration switching method
CN105539522A (en) * 2015-12-21 2016-05-04 株洲南车时代电气股份有限公司 Train operation monitoring device based on double 2-vote-2 safety computer structure and method for train operation monitoring device
CN206193530U (en) * 2016-10-28 2017-05-24 上海恒锦动力科技有限公司 Two redundant monitored control system of diesel generating set
CN108092752B (en) * 2017-11-14 2020-10-23 北京全路通信信号研究设计院集团有限公司 Main control unit hot backup method and device based on train operation control system
CN109218096A (en) * 2018-09-19 2019-01-15 新智能源系统控制有限责任公司 A kind of SCADA real-time database access system based on master-slave redundancy
CN109306875B (en) * 2018-09-25 2021-02-09 中国船舶重工集团公司第七0三研究所 Steam turbine DEH dual-controller synchronous hot standby redundancy switching device and method
CN109367578A (en) * 2018-09-28 2019-02-22 卡斯柯信号有限公司 A kind of man-machine interactive system and method suitable for ITCS mobile unit
CN208861155U (en) * 2018-10-29 2019-05-14 北京交大思诺科技股份有限公司 Hot backup redundancy display
CN109649446B (en) * 2018-12-21 2024-05-31 中国铁道科学研究院集团有限公司通信信号研究所 Multiple redundant networked computer interlocking man-machine interaction system
CN109720379B (en) * 2018-12-31 2021-04-27 河南思维自动化设备股份有限公司 Train control system and four-die switching display method thereof
CN109739694A (en) * 2019-01-03 2019-05-10 中国兵器装备集团自动化研究所 A kind of two-shipper arbitrary switch-over system and method
CN109823375A (en) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 Dual-system hot standby switching method and system applied to automatic train operation system
CN109946956B (en) * 2019-03-27 2020-11-24 北京全路通信信号研究设计院集团有限公司 Device main and standby system synchronization and hot standby method
CN110789569B (en) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 Column control DMI data redundancy control method and system

Also Published As

Publication number Publication date
EP3828055A1 (en) 2021-06-02
HUE060600T2 (en) 2023-03-28
EP3828055A4 (en) 2021-08-25
EP3828055B1 (en) 2022-09-28
WO2021073221A1 (en) 2021-04-22
EA202092375A1 (en) 2021-08-02
RS63730B1 (en) 2022-12-30
CN110789569A (en) 2020-02-14

Similar Documents

Publication Publication Date Title
CN110789569B (en) Column control DMI data redundancy control method and system
CN101694588B (en) Double 2 vote 2 active/standby control switching system and method
JP2697519B2 (en) Intelligent interconnect and data transmission method for broadband optical networks
EP2085839B1 (en) Apparatus for unidirectionally interconnecting modules
CN104808572A (en) High-integrity PLC controller based on function safety
CN104781792B (en) Judge redundant device unit and the method for fault in industrial control system, industrial control system and include the industrial system of redundant device unit
CN107870584A (en) A kind of business board input power working state detecting method and machine frame type equipment
CN103941625B (en) Can bus data transmission monitoring system
CN115913906A (en) Redundancy control system and method for ship
CN111614531B (en) Method, medium, and monitoring device for monitoring a LIN node
CN102955427A (en) Interconnecting error correction type triple-modular redundancy control system and arbitration method
CN108259130A (en) The Modbus Transmission systems and method of a kind of baud rate even-odd check position adaptive
CN204633800U (en) The switch of a kind of administrative unit and the two redundancy of crosspoint
JP2024108417A (en) Network interface card and transmission performance monitoring method
CN112637011B (en) Data transmission method, data transmission device, and storage medium
CN112650168A (en) Distributed control system and method for dynamically scheduling resources thereof
CN115529223B (en) Dual-redundancy network card switching method based on cascade switch
CN115529222B (en) Dual-redundancy network card switching device based on cascading switch
CN110035007A (en) Data transmission method and system, storage medium, electronic device
US20230230428A1 (en) Inspection apparatus and inspection method
CN113805567B (en) MVB fault diagnosis method, train control unit and rail locomotive
EP4428692A1 (en) Functional safety display controller and functional safety display control system
JP2000295255A (en) Redundant conversion method of transmission line and system using the same
JPS63131693A (en) Signal transmitter for remote supervisory and controlling equipment
CN114168070A (en) Storage device, master-slave determination method, and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant