CN111361610A - Full-automatic train operation signal system based on time synchronization - Google Patents

Abstract

The invention relates to a train automatic running signal system based on time synchronization, including ATC equipment, ATS equipment, CI equipment, ATS maintenance desk, MSS equipment, DCS equipment, communication front-end FEP, application server CATS and gateway server. Described signal system also includes external clock system, this external clock system is connected with application server CATS through communication front-end machine FEP, described application server CATS is respectively connected with ATS equipment, CI equipment, ATS maintenance desk and gateway server, described The gateway server is respectively connected with ATC equipment and DCS equipment, and the ATS maintenance station is connected with MSS equipment; the communication front-end machine synchronizes the external clock system, and the signal system is synchronized with the time obtained by the communication front-end machine. The internal time synchronization of the signal system described above adopts the NTP protocol. Compared with the prior art, the present invention has the advantages of improving system reliability and the like.

Description

A time synchronization-based train automatic running signal system

technical field

The invention relates to a signal system for full automatic operation of trains, in particular to a signal system for full automatic operation of trains based on time synchronization.

Background technique

Time synchronization is of great significance to improving the safety, reliability and operation efficiency of urban rail transit systems, especially for fully automatic operation lines. Asynchrony can easily affect the punctuality rate of operations, and the door opening and closing time is too short, which affects passenger satisfaction.

In the fully automatic operation line, the trackside ATS compares the planned arrival or departure time of the train with the actual train arrival or departure time, adjusts the stopping time and interval running time according to the situation of early and late, and sends the adjusted time to the ATC on-board equipment, ATC The on-board equipment calculates the ATO speed curve based on the equipment status and authorized end point transmitted by the wayside; if the time of the trackside ATS and ATC on-board equipment is not synchronized, it will affect the running speed of the ATO, the running time of the train in the section and the arrival time, and thus affect the punctuality. Rate.

In the fully automatic operation line, the train stops at the platform, and the ATC on-board equipment judges the train is parked through the information obtained by the trackside transponder and the on-board sensor, and requests the vehicle to remove the traction and brake application. Send the door opening command to the vehicle, and send the screen door opening command through the interlock. The trackside ATS transmits the stop time adjusted according to the morning and evening time to the ATC on-board equipment through the vehicle-ground wireless communication. The time of the side ATS and ATC in-vehicle equipment is not synchronized, which is likely to cause the door opening time to be too short, affecting passengers getting on and off.

For fully automatic operation lines, when the external time jumps abnormally or the accuracy of the two machines providing the time source is insufficient, the time accuracy of the next layer is often affected, and the on-board equipment and the trackside time are not synchronized, which directly affects the operation punctuality rate, Passengers get on and off.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a signal system for fully automatic train operation based on time synchronization in order to overcome the above-mentioned defects of the prior art.

The object of the present invention can be realized through the following technical solutions:

A time synchronization-based train automatic running signal system, including ATC equipment, ATS equipment, CI equipment, ATS maintenance desk, MSS equipment, DCS equipment, communication front-end FEP, application server CATS and gateway server, the signal The system also includes an external clock system, the external clock system is connected with the application server CATS through the communication front-end machine FEP, and the application server CATS is respectively connected with the ATS equipment, the CI equipment, the ATS maintenance desk and the gateway server, and the gateway server Connect with ATC equipment and DCS equipment respectively, and the ATS maintenance desk is connected with MSS equipment;

The communication front-end computer synchronizes the external clock system, the signal system is internally synchronized with the time obtained by the communication front-end computer, and the internal time synchronization of the signal system adopts the NTP protocol.

Preferably, the communication front-end machine FEP adopts a dual-machine hot standby redundant setting, and the two communication front-end machine FEPs are connected through serial communication;

The device that is started first is the host computer, and the one that is started later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant; the communication front-end computer provides time services after the host is started. terminal, the communication front-end machine standby machine stop time server.

Preferably, the application server CATS adopts a dual-machine hot standby redundant setting, and the two application servers CATS are connected through serial communication;

The device that starts up first is the host computer, and the one that starts later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant.

Preferably, the gateway server adopts a dual-machine hot standby redundant setting, and the two gateway servers are connected through serial communication;

The device that starts up first is the host computer, and the one that starts later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant.

Preferably, the time source is obtained from the inside of the communication system through the communication front-end machine, and it is agreed that within the set time deviation range, the communication front-end machine synchronizes the external clock system in real time. If the external clock system jumps abnormally and exceeds the set time deviation If the time deviation is fixed, the communication front-end computer judges that the external time is faulty, stops synchronizing the external time source, and gives an alarm message, and the external clock system returns to normal. After confirmation, the communication front-end computer can manually input a command to synchronize the external clock system.

Preferably, the signal system is internally synchronized with the time obtained by the communication front-end machine, and ensures that the main computer of the communication front-end machine provides a time server, and the standby machine stops providing a time server.

Preferably, the two application servers synchronize the time of the mainframe of the communication front-end, and the two application servers communicate with each other, one master and one backup, the master provides a time server, and the backup stops providing time services;

If there is a dual-host phenomenon, the application program of one host will be automatically exited, and the application server host and standby time services will be started and closed through the application control of the application server to ensure that only the host of the two application servers provides clock services.

Preferably, the two gateway servers synchronize the host time of the application server, the two gateway servers communicate with each other, one is the master and the other is the standby, the host provides a time server, and the standby stops providing time services;

If there is a dual-host phenomenon, the application program of one host is automatically exited, and the time service of the gateway server host and the standby machine is started and closed through the gateway application control, thereby ensuring that only the host of the two gateways provides clock services.

Preferably, a time server device is provided in the signal system. If the time jump variable exceeds the set value, the time synchronization service of the lower layer device will stop immediately; if it is less than the set value, the time synchronization client will complete the smooth adjustment within a certain period of time. , and is consistent with the time server.

Preferably, the external clock system is a first-level master clock, and the five subsystems of ATC, ATS, CI, MSS, and DCS in the signal system have unified time, and the precision can reach the millisecond level.

Compared with the prior art, the present invention has the following advantages:

1. The key equipment and communication channels of the present invention are redundant and hot-standby, which can avoid the failure of a certain device or communication channel and affect the time of the next layer of equipment, thereby improving the reliability of the system.

2. For the time server of all redundant devices, only the host provides the time server, which can prevent the two time server devices from malfunctioning or jumping due to accidental reasons of the operating system or hardware, resulting in the time deviation of the two time server devices. If it is too large, it will affect the time synchronization of the next layer of equipment.

3. The time server equipment jumps within a certain time range, and the next layer of equipment can smoothly adjust and synchronize the time server time within a certain period of time to avoid jumps that affect the fully automatic operation of the train.

4. When the time server equipment jumps over a certain period of time, the next layer of equipment can automatically stop synchronizing the time server, so as to avoid the excessive time change of other equipment affecting the fully automatic operation of the train.

5. Different ways are used to synchronize the time inside and outside the signal system, which overcomes the shortcomings of the existing technical solutions and avoids the external clock jump directly affecting the internal signal system;

6. The NTP protocol is adopted in the signal system, and the redundant equipment only provides time service by the host, which ensures the synchronization accuracy of the equipment, and the accuracy can reach the millisecond level, which ensures the needs of the fully automatic operation of the train.

At present, the clock synchronization solution has been successfully used in Beijing, Shanghai, Chengdu, Wuhan, Shenzhen and other cities.

Description of drawings

FIG. 1 is a schematic structural diagram of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

The time synchronization-based train automatic running signal system of the present invention includes:

1. The fully automatic operation signal system of the train includes ATC equipment, ATS equipment, CI equipment, MSS equipment, and DCS equipment; among which ATC equipment and CI lower computer equipment are equipment to ensure system safety, the safety level is SIL4, and the redundant network Composition; ATS equipment, CI host computer equipment safety level is SIL2, composed of another pair of redundant networks; MSS equipment is SIL0, composed of non-redundant networks; The external clock system is connected to the FEP of the ATS equipment, ATS equipment It is connected with SIL4 equipment through gateway; ATS equipment is connected with SIL0 equipment through maintenance desk.

2. In the fully automatic operation line, in order to realize the fully automatic operation of the train, the time synchronization of each subsystem of the signal system must be ensured, especially the time synchronization of the signal vehicle equipment and the trackside equipment.

3. In the fully automatic operation line, the key equipment and communication channels in the signal system are all redundantly configured and are in a hot standby state to ensure that the train can still run fully automatically in the event of a key equipment or communication channel failure.

4. The two communication front-end FEPs communicate through the network and serial port connection. The application program that starts first is the host computer, and the one that starts later is the standby computer; when the network is unstable, the status of the other party is obtained through serial communication to ensure the communication channel and equipment. Both are redundant; after the main communication front-end machine is started, the time server is provided, and the communication front-end machine standby machine stops the time server.

5. The two application servers CATS communicate through the network and serial port connection. The first application program is the host computer, and the second one is the standby computer; when the network is unstable, the status of each other is obtained through serial communication to ensure the redundancy of communication channels and equipment. .

6. The two gateway servers communicate through the network and serial port connection. The application program started first is the host computer, and the second one is the standby computer; when the network is unstable, the status of each other is obtained through serial communication to ensure the redundancy of communication channels and equipment. .

7. In the fully automatic operation line, the internal time synchronization of the signal system adopts the NTP (network time protocol) protocol, and the accuracy is in the millisecond level; the self-developed application program deployed through the communication front-end computer obtains the time source from the communication system clock interface, avoiding external The time source jumps, which affects the interior of the signal system. It is agreed that within a certain time deviation range, the communication front-end computer synchronizes the external time source in real time. If the external time source jumps abnormally and exceeds a certain time deviation, the communication front-end computer determines that the external time occurs. If there is a fault, stop synchronizing the external time source, and give an alarm message. The external time returns to normal. After confirmation, you can manually input a command to synchronize the external time source in the communication front-end.

8. In the fully automatic operation line, the signal system has high requirements for the synchronization of the trackside equipment and the on-board equipment. The external clock system uses GPS technology to perform synchronization time calibration to avoid accumulated errors; the signal system uses the time obtained by the communication front-end machine. Synchronize, and ensure that the communication front-end host provides the time server, and the standby machine stops providing the time server, so as to avoid two communication front-end machines providing time services for the next layer of equipment at the same time, due to hardware or operating system abnormalities. The time deviation of the communication front-end machine is too large, which affects the accuracy and precision of the lower-layer time synchronization.

9. In the fully automatic operation line, in order to ensure the time synchronization between the trackside equipment and the on-board equipment, the signal system is redundantly configured for the key equipment providing the time server, and cross-connected with the next layer of equipment to improve the reliability of time synchronization , as shown in Figure 1, FEP, CATS, and Gateway are redundant time servers. For FEP, CATS, Gateway, and ATS maintenance desks, as a time client to synchronize the clock information of the upper layer, and as a time server to provide a time reference for the next layer of equipment.

10. In the fully automatic operation line, in order to ensure the time accuracy, the signal system adopts the NTP protocol for synchronization. The two application servers synchronize the time of the front-end host computer, and the two application servers communicate with each other, one master and one backup, and the master provides time services If there is a dual-host phenomenon, one host application will be automatically exited, and the application server host and standby time services will be started and closed through the application server control to ensure that the two application servers are only hosts Provide clock service to avoid excessive time deviation between two application servers and affect the time accuracy and precision of the next layer of equipment.

11. In the fully automatic operation line, the two gateways synchronize the time of the host of the application server, and the two gateways communicate with each other. One is the master and the other is the backup. For the host application, the startup and shutdown of the gateway host and standby machine time services are controlled by the gateway application program. Through this method, it is ensured that only the host provides clock services for the two gateways, so as to avoid the time deviation of the two gateways being too large and affecting the next layer of equipment. Time accuracy and precision.

12. Time server equipment is provided in the signal system. If the time jump variable exceeds a certain value, the time synchronization service of the lower device will stop immediately to avoid the synchronization jump of other devices; if it is less than a certain value, the time synchronization client will complete the smooth adjustment within a certain period of time. , and consistent with the time server to avoid jumping.

13. The time server device adopts the SNTP protocol (simple network time protocol). The time accuracy of the lower-level client device can only reach the second level, which cannot meet the needs of fully automatic operation. Therefore, as the time server device, it needs to use the NTP protocol for synchronization.

14. The five subsystems of ATC, ATS, CI, MSS, and DCS in the signal system unify the time, and the precision can reach the millisecond level to ensure the fully automatic operation of the train.

Detailed ways:

As shown in Figure 1, the specific implementation process of the present invention is as follows:

1) The communication front-end of the signal system obtains a unified time source from the clock system through the network, and after the communication front-end obtains the time source information, it synchronizes the time of the local operating system.

2) Among the two communication front-end machines, only the communication front-end machine host provides the time server for the next layer of equipment and the communication front-end machine backup machine, and the communication front-end machine backup machine stops providing the time server.

3) The communication front-end machine main machine quits due to hardware, operating system or application failure, and the communication front-end machine backup machine application program is upgraded to the main machine, and a time server is provided at the same time. For the original host that fails, the application will act as a standby after the application is started, and the application of the standby will actively stop the time service. If the application of the standby is not started, the host will send a stop time service command to the operating system of the standby to ensure that only the host provides the time. Serve.

4) The two application servers act as clients to synchronously communicate with the time of the front-end host.

5) Among the two application servers, only the application server host provides the time server for the next layer of equipment, and the application server standby machine stops providing the time server.

6) The application server host exits due to hardware, operating system or application failure, and the application server standby application is upgraded to the host, and a time server is provided at the same time. For the original host that fails, the application will act as a standby after the application is started, and the application of the standby will actively stop the time service. If the application of the standby is not started, the host will send a stop time service command to the operating system of the standby to ensure that only the host provides the time. Serve.

7) ATS workstation, ATS maintenance desk, ATS station server, interlocking SDM workstation, as a client to synchronize the time of two application server hosts.

8) The two gateways act as clients to synchronize the time of the host of the application server.

9) Among the two gateways, only the gateway host provides the time server for the next layer of equipment, and the gateway standby machine stops providing the time server.

10) The gateway host exits due to hardware, operating system or application failure, and the gateway standby application program is upgraded to the host, and a time server is provided at the same time. For the original host that fails, the application will be the standby after the application is started, and the application of the standby will actively stop the time service. If the application of the standby is not started, the host will send a stop time service command to the operating system of the standby to ensure that only the host provides the time. Serve.

11) The ATC device and DCS device of the signal network are used as the client to synchronize the time of the hosts in the two gateways;

12) The ATS maintenance station communicates with the MSS subsystem, and acts as a server to provide time services to the MSS equipment, and the MSS equipment acts as a client to synchronize the time of the ATS maintenance station.

The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited to this. Any person skilled in the art can easily think of various equivalents within the technical scope disclosed by the present invention. Modifications or substitutions should be included within the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims (10)

1. a kind of train automatic operation signal system based on time synchronization, comprising ATC equipment, ATS equipment, CI equipment, ATS maintenance station, MSS equipment, DCS equipment, communication front-end FEP, application server CATS and gateway server, its feature The signal system also includes an external clock system, the external clock system is connected with the application server CATS through the communication front-end machine FEP, and the application server CATS is respectively connected with the ATS equipment, the CI equipment, the ATS maintenance desk and the gateway server. , the gateway server is respectively connected with ATC equipment and DCS equipment, and the ATS maintenance desk is connected with MSS equipment; The communication front-end computer synchronizes the external clock system, the signal system is internally synchronized with the time obtained by the communication front-end computer, and the internal time synchronization of the signal system adopts the NTP protocol. 2. A kind of train fully automatic operation signal system based on time synchronization according to claim 1, is characterized in that, described communication front-end machine FEP adopts dual-machine hot standby redundant setting, and two described communication front-end machines are set. The built-in FEPs are connected through serial communication; The device that is started first is the host computer, and the one that is started later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant; the communication front-end computer provides time services after the host is started. terminal, the communication front-end machine standby machine stop time server. 3. A kind of automatic train operation signal system based on time synchronization according to claim 1, is characterized in that, described application server CATS adopts dual-machine hot standby redundant setting, and between two described application servers CATS. connected through serial communication; The device that starts up first is the host computer, and the one that starts later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant. 4. A kind of fully automatic train operation signal system based on time synchronization according to claim 1, is characterized in that, described gateway server adopts dual-machine hot standby redundant setting, and between two described gateway servers through Serial communication connection; The device that starts up first is the host computer, and the one that starts later is the standby computer. When the network is unstable, the main and standby computers obtain the status of each other through serial communication to ensure that the communication channels and devices are redundant. 5. A time synchronization-based train fully automatic operation signal system according to claim 1, characterized in that the time source is obtained from the communication system through the communication front-end machine, and a set time deviation range is agreed upon. Internally, the communication front-end computer synchronizes the external clock system in real time. If the external clock system jumps abnormally and exceeds the set time deviation, the communication front-end computer judges that the external time is faulty, stops synchronizing the external time source, and gives an alarm message. The clock system returns to normal. After confirmation, the external clock system can be synchronized manually by inputting commands in the communication front-end. 6. The signal system for fully automatic train operation based on time synchronization according to claim 2, wherein the signal system is internally synchronized with the time obtained by the communication front-end machine, and ensures that the communication front-end machine host The time server is provided, and the standby machine stops providing the time server. 7. A kind of fully automatic train running signal system based on time synchronization according to claim 3, it is characterized in that, two described application servers synchronize communication front-end host time, two application servers communicate with each other, one main One standby, the host provides the time server, and the standby machine stops providing time services; If there is a dual-host phenomenon, the application program of one host will be automatically exited, and the application server host and standby time services will be started and closed through the application control of the application server to ensure that only the host of the two application servers provides clock services. 8 . A kind of fully automatic train running signal system based on time synchronization according to claim 4 , characterized in that, the two gateway servers synchronize the application server host time, and the two gateway servers communicate with each other, one main and one standby. 9 . , the host provides the time server, and the standby machine stops providing time services; If there is a dual-host phenomenon, the application program of one host is automatically exited, and the time service of the gateway server host and the standby machine is started and closed through the gateway application control, thereby ensuring that only the host of the two gateways provides clock services. 9 . The signal system for fully automatic train operation based on time synchronization according to claim 1 , wherein a time server device is provided in the signal system, and if the time jump variable exceeds a set value, the time of the lower layer device will be delayed. 10 . The synchronization service will stop immediately; if it is less than the set value, the time synchronization client will complete the smooth adjustment within a certain period of time, and it will be consistent with the time server. 10. The signal system for fully automatic train operation based on time synchronization according to claim 1, wherein the external clock system is a primary master clock, and the ATC, ATS, CI, The five subsystems of MSS and DCS unify the time, and the precision can reach the millisecond level.

Images