CN112130448A - Method for switching between main and standby machines - Google Patents
Method for switching between main and standby machines Download PDFInfo
- Publication number
- CN112130448A CN112130448A CN202011028586.4A CN202011028586A CN112130448A CN 112130448 A CN112130448 A CN 112130448A CN 202011028586 A CN202011028586 A CN 202011028586A CN 112130448 A CN112130448 A CN 112130448A
- Authority
- CN
- China
- Prior art keywords
- machine
- standby
- switching
- host
- main
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Abstract
The invention relates to a method for switching between a main machine and a standby machine, which is suitable for a control system with a man-machine interaction interface and a standby machine in the field of railway signals; the method for switching the main machine and the standby machine of the double machines is that after the equipment is powered on, the double machines determine the main machine and the standby machine by a method of contending for mutual interlocking, and when the double machines work normally, a driver can realize manual switching of the main machine and the standby machine through a switching button of the machine A and the machine B of the man-machine interaction interface; when the machine A serving as the host machine fails, the equipment automatically switches to the machine B serving as the standby machine to work, the machine B is upgraded to the host machine, the switching button fails at the moment, when the failed machine A recovers to be normal again, the equipment is defaulted to be the standby machine, and at the moment, the equipment can complete manual switching between the main machine and the standby machine through the switching button of the machine A and the machine B. The invention has the technical advantages that: the main machine and the standby machine can be freely switched manually, and the main machine can be automatically switched to the standby machine when the main machine fails, so that the switching method is flexible, safe and reliable.
Description
Technical Field
The invention relates to the field of railway signals, in particular to a main-standby switching method applied to a dual-machine hot-standby control system.
Background
With the progress of technology and the continuous development of railway transportation industry, the requirements of railway signal systems on the safety, reliability and degree of automation of related equipment are gradually increased. In order to improve the reliability of the equipment, more and more railway signal equipment adopts a design method of redundancy of a control system, and the redundancy design of the equipment is the most effective method for improving the reliability of the equipment. The redundant design of the double-machine hot standby can ensure that when the main machine fails, the standby machine is switched to quickly recover the normal working state in time, thereby ensuring that the running process of the train is not influenced. The success rate of the main-standby switching in the redundancy control system is a key factor of the system reliability.
However, the existing main/standby switching method of the railway signal equipment generally has the following problems:
1. the switching mode is single, the host can be automatically switched to the standby machine only when the host fails, and the original host cannot be started again even if the normal function is recovered, so that the usability of the equipment is low. When the dual-computer is normal, the free switching between the dual-computer main and standby can not be realized, and the operation flexibility is poor.
2. In addition, the situation of double hosts is easy to occur during the main-standby switching, and when the double hosts are the hosts, the output interface is controlled to send data at the same time, so that the receiving equipment can easily receive error information to influence the driving safety, and the reliability of the equipment is low.
Therefore, a safe, reliable and convenient main/standby switching method is urgently needed for railway signal equipment.
Disclosure of Invention
In view of the above requirements, the present invention provides a main/standby switching method that can be applied to a dual-computer hot-standby system, and can implement both automatic switching and manual switching.
The invention provides a method for switching between a main machine and a standby machine, which is suitable for a control system with a man-machine interaction interface and a hot standby machine in the field of railway signals; the man-machine interaction interface is provided with a machine A and a machine B switching button as a manual switching switch for switching between the main machine and the standby machine,
the control system of the double-machine hot standby, namely two control systems with the same function of one railway signal device, forms a machine A and a machine B, and the machine A and the machine B work simultaneously to complete the hot standby of real-time data and state information; when the machine A and the machine B work normally, data of external equipment are acquired through respective interfaces, the acquired data are calculated, only the host can output control commands or state information to the external equipment, the standby machine is only used for a monitoring function, and when the host fails, the standby machine is switched to work to continue to complete the work of the host;
the method for switching the main machine and the standby machine of the double machines is that after the equipment is powered on, the double machines determine the main machine and the standby machine by a method of contending for mutual interlocking, and when the double machines work normally, a driver can realize manual main machine and standby machine switching through an A machine switching button and a B machine switching button of a man-machine interaction interface; when the machine A serving as the host machine fails, the equipment automatically switches to the machine B serving as the standby machine to work, the machine B is upgraded to the host machine, the switching button fails at the moment, when the failed machine A recovers to be normal again, the equipment is defaulted to be the standby machine, and at the moment, the equipment can complete manual switching between the main machine and the standby machine through the switching button of the machine A and the machine B.
The invention has the technical advantages that: the main machine and the standby machine can be freely switched manually, and the main machine can be automatically switched to the standby machine when the main machine fails, so that the switching method is flexible, safe and reliable.
Drawings
[1] FIG. 1 is a schematic diagram of a dual-computer hot standby system
[2] FIG. 2 is a schematic diagram of the primary/standby identification function
Detailed Description
The features and advantages of the present invention are described in detail below with reference to specific embodiments. This summary will aid those skilled in the art in further understanding the present invention, but is not intended to limit the invention in any way. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the inventive concept, which falls within the scope of the present invention.
The invention provides a switching method of a main standby machine, which can realize automatic switching and manual switching and is suitable for a double-machine hot standby control system with a human-computer interaction interface in the field of railway signals. And the railway signal field has equipment of the dual-machine hot standby control system, such as man-machine interaction screen display equipment, expansion units, BTM equipment, LEU equipment, cab signal equipment and the like.
The double-machine hot standby control system, namely two sets of control systems with the same function of one railway signal device, form a machine A and a machine B. The machine A and the machine B work simultaneously to complete hot standby of real-time data and state information. When the machine A and the machine B work normally, data of external equipment are acquired through respective interfaces, and the acquired data are calculated. However, only the host can output a control command or status information to the external device, and the standby device is used only for a listening function. When the host fails, the standby machine is switched to work to continue to complete the work of the host.
According to the method for switching the main machine and the standby machine, after the equipment is powered on, the two machines determine the main machine and the standby machine through a method of contending for mutual right and interlocking. When the double machines work normally, a driver can realize free switching of the manual main machine and the manual standby machine through the buttons of the machine A and the machine B of the man-machine interaction interface, and the switching buttons realize the self-locking and interlocking functions of the keys through the interlocking circuit. When the host machine A fails, the equipment automatically switches to the standby machine B to work, the standby machine B is upgraded to the host machine, and the switching button fails. When the A machine with the fault recovers to be normal again, the A machine is defaulted to be the standby machine, and the equipment can complete the switching function of the manual main and standby machines through the switching button of the A machine and the B machine.
The method for determining the master and the standby machines by adopting the contention interlocking can effectively defend the safety risk of the double hosts and improve the reliability of the equipment. The main-standby switching button realizes the self-locking and interlocking functions of the keys through the interlocking circuit, so that the misoperation of the keys is prevented, the safety risk of the double hosts is defended, and the reliability of manual main-standby switching is improved. The device automatically switched to the B machine as the host machine can be used as a normal standby machine to be started again after the function of the A machine with the fault is recovered to be normal, so that the usability of the device is improved.
The following describes the active/standby switching method in the present invention with reference to the accompanying drawings.
Referring to fig. 1, when both the machine a and the machine B work normally, the relationship between the host machine and the standby machine is automatically determined by the master-standby identification module. And the switching between the manual host and the standby machine is realized through the button A and the button B of the human-computer interaction interface.
Referring to fig. 2, after power-on, the machine a and the machine B respectively and simultaneously transmit a square wave ZA and a square wave ZB (control square waves) to respective square wave level-shifting circuits, and control coils of the safety relay a and the safety relay B of the active-standby identification module to attract each other, so as to transmit a square wave CA and a square wave CB (detection square waves) for detection by the acquisition end a and the acquisition end B. If the A acquisition end of the machine A acquires dynamic square waves firstly, the machine A is locked as a host, the safety relay B is not attracted at the moment, the square waves cannot be acquired by the B acquisition end, and the machine B is a standby machine. If the B acquisition end of the B machine acquires dynamic square waves firstly, the B machine is locked as a host, the safety relay A is not attracted at the moment, the square waves cannot be acquired by the A acquisition end, and the A machine is a standby machine.
The double machines confirm that the machine A is the main machine in an automatic contending mode, when the machine A fails, the square wave ZA cannot be sent out, the safety relay A does not attract, and the machine A cannot acquire the dynamic square wave through the acquisition end A. At the moment, the machine B as a standby machine works normally, the safety relay B can be controlled to be attracted, and the collected dynamic square waves are automatically upgraded into a host machine.
The design method of the main and standby machines can effectively defend the safety risk of the double main machines by adopting the method of contending for mutual locking through the two safety relays, and the reliability of the main and standby switching is improved.
The manual switching of the state of the main machine and the standby machine is realized through two switching buttons, referring to fig. 1, a human-computer interaction interface of the system is provided with a machine A button and a machine B button. When the double machines work normally, the driver presses the button of the machine A, the machine A is the main machine, and the machine B is the standby machine. If the B machine is switched to the host machine, the button of the B machine needs to be pressed, the B machine is switched to the host machine, and the A machine is switched to the standby machine.
The manual switching button realizes self-locking and interlocking functions through an interlocking circuit. The self-locking function is that the A machine is still kept as the host machine by pressing the button of the A machine for a plurality of times after the button of the A machine is pressed and determined as the host machine, and the B machine can be switched to be the host machine until the button of the B machine is pressed, so that the host machine and the standby machine are prevented from being switched for a plurality of times due to misoperation. The interlocking function is that when the button of the machine A is pressed and determined to be the host, the machine B cannot acquire the dynamic square wave to be automatically locked as the standby machine, and when the button of the machine B is pressed and determined to be the host, the machine A cannot acquire the dynamic square wave to be automatically locked as the standby machine.
The button of the A machine and the button of the B machine are provided with indicator lights for displaying, when the A machine and the B machine work normally, the host lamp is on, and the standby lamp flashes. When the A machine fault system is automatically switched to the B machine, the lamp of the A machine is turned off, the lamp of the B machine is turned on, and at the moment, the manual switching function is failed. After the function of the A machine is recovered to be normal, the A machine is used as a standby machine lamp to flash, and the manual switching of the main machine and the standby machine can be realized at the moment. When the AB machine fails simultaneously, the two indicator lights are all turned off.
The button with the indicator lamp is used as the switching button of the main and standby machines, the operation is convenient and visual, the design is humanized, the button achieves the self-locking and interlocking functions of the button through the interlocking circuit, on one hand, misoperation of the button is prevented, on the other hand, the safety risk of the double main machines is defended, and the reliability of manual main and standby switching is improved.
Method for comprehensively describing dual-host switching with reference to fig. 1
After the system is powered on, when the dual-machine works normally, the A machine and the B machine confirm the relationship of the main machine and the standby machine by acquiring the detection dynamic square waves of the main identified module, when the A machine acquires square wave signals firstly, the A machine is locked as the main machine, and the B machine is locked as the standby machine at the moment, namely, the dual-machine obtains the main right and the standby right in a way of contending for the right. At this time, the host and the standby machine can be switched by the switching button of the host and the standby machine, for example, the switch B machine is switched to the host machine by pressing the button of the B machine, the indicator lamp on the button of the B machine is turned on, the switching button is connected with the interlocking circuit, the lock of the a machine is the standby machine once the switch B is confirmed to be the host machine, and the indicator lamp on the button of the a machine flashes.
When the B machine serving as the host machine has a fault, the B machine cannot acquire a detection square wave signal through the main and standby identification modules, and the A machine which normally works can acquire a square wave, so that the A machine is automatically upgraded to the host machine. At the moment, the switching button of the main machine and the standby machine is invalid, the indicating lamp of the button of the machine A is lightened, and the indicating lamp of the button of the machine B is extinguished.
When the B machine with the fault is recovered to be normal, the B machine is automatically locked as a standby machine, the switching between the main machine and the standby machine can be carried out through the switching button of the main machine and the standby machine, the indicating lamp on the button of the B machine flashes, and the indicating lamp on the button of the A machine serving as the main machine is on.
The invention has the technical advantages that: the method of mutual locking of the disputes is adopted to realize the confirmation and the automatic switching of the main machine and the standby machine, and the risk of the double main machines is defended, so that the reliability of the main machine and the standby machine switching is improved. The self-locking and interlocking functions of the switching key are realized through the interlocking circuit, the main and standby machines are prevented from being switched back and forth due to misoperation of the key, and the reliability of manual main and standby switching is improved. The switching of the main machine and the standby machine can be realized through manual switching and automatic switching, and the device is convenient to operate and flexible to apply. The switching button of the main and standby machine is provided with a working state indicator lamp, and humanized design is reflected.
The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (8)
1. A method for switching between main and standby machines is suitable for a control system with a man-machine interaction interface and a hot standby machine in the field of railway signals; the man-machine interaction interface is provided with a machine A and a machine B switching button as a manual switching switch for switching between the main machine and the standby machine,
the control system of the double-machine hot standby, namely two control systems with the same function of one railway signal device, forms a machine A and a machine B, and the machine A and the machine B work simultaneously to complete the hot standby of real-time data and state information; when the machine A and the machine B work normally, data of external equipment are acquired through respective interfaces, the acquired data are calculated, only the host can output control commands or state information to the external equipment, the standby machine is only used for a monitoring function, and when the host fails, the standby machine is switched to work to continue to complete the work of the host;
the method for switching the main machine and the standby machine of the double machines is that after the equipment is powered on, the double machines determine the main machine and the standby machine by a method of contending for mutual interlocking, and when the double machines work normally, a driver can realize manual main machine and standby machine switching through an A machine switching button and a B machine switching button of a man-machine interaction interface; when the machine A serving as the host machine fails, the equipment automatically switches to the machine B serving as the standby machine to work, the machine B is upgraded to the host machine, the switching button fails at the moment, when the failed machine A recovers to be normal again, the equipment is defaulted to be the standby machine, and at the moment, the equipment can complete manual switching between the main machine and the standby machine through the switching button of the machine A and the machine B.
2. The method of claim 1, wherein after the device is powered on, when both the a-plane and the B-plane operate normally, the relationship between the host and the standby plane is automatically determined by the primary and standby identification modules.
3. The method according to claim 2, wherein after power-on, the machine a and the machine B respectively and simultaneously send control square waves to respective square wave level-shifting circuits, and control coils of a safety relay a and a safety relay B of the active and standby identification modules to pull in so as to send detection dynamic square waves for respective acquisition ends of the machine a and the machine B to perform detection;
if the acquisition end of the machine A acquires the detection dynamic square waves firstly, the machine A is locked as a host, the safety relay B is not attracted at the moment, the acquisition end of the machine B cannot acquire the square waves, and the machine B is a standby machine.
4. The method of claim 3, wherein after the dual machines confirm that the machine A is the host machine in an automatic right competing mode, when the machine A fails, the machine A cannot send out a control square wave, the safety relay A does not attract, the machine A cannot collect a detection dynamic square wave through the collection end, and at the moment, the machine B serving as a standby machine works normally, and can control the safety relay B to attract, collect the detection dynamic square wave and automatically upgrade the detection dynamic square wave to the host machine.
5. The method of claim 1, wherein the switching button implements self-locking and interlocking functions of the key through an interlocking circuit, on one hand, preventing misoperation of the key, and on the other hand, defending against security risks of the dual hosts.
6. The method according to claim 5, wherein the self-locking function is that the machine A is still kept as the host machine by pressing the machine A button for multiple times after the machine A button is pressed and determined as the host machine, and the machine B can not be switched to be the host machine until the machine B button is pressed, so that multiple switching of the host machine and the standby machine caused by misoperation is prevented;
the interlocking function is that after the button of the machine A is pressed and determined to be the host, the machine B cannot acquire the detection dynamic square waves and automatically locks the machine B to be the standby machine, and after the button of the machine B is pressed and determined to be the host, the machine A cannot acquire the detection dynamic square waves and automatically locks the machine B to be the standby machine.
7. The method as claimed in claim 1, wherein when the dual machines are working normally, the driver presses the button of the machine a, the machine a is the master machine, the machine B is the standby machine, if the button of the machine B needs to be pressed to switch the machine B to the master machine, the machine B is switched to the master machine, and the machine a is switched to the standby machine.
8. The method of claim 7, wherein the switch button of the host-standby machine is provided with an operation status indicator light;
when the machine A and the machine B work normally, the main machine lights and the standby machine lights;
when the fault system of the machine A is automatically switched to the machine B, the lamp of the machine A is turned off, the lamp of the machine B is turned on, and at the moment, the manual switching function is failed;
when the function of the A machine is recovered to be normal, the A machine is used as a standby machine to flash, and the manual switching of the main machine and the standby machine can be realized;
both indicator lights go off when A, B fails simultaneously.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011028586.4A CN112130448A (en) | 2020-09-25 | 2020-09-25 | Method for switching between main and standby machines |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011028586.4A CN112130448A (en) | 2020-09-25 | 2020-09-25 | Method for switching between main and standby machines |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112130448A true CN112130448A (en) | 2020-12-25 |
Family
ID=73840998
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011028586.4A Pending CN112130448A (en) | 2020-09-25 | 2020-09-25 | Method for switching between main and standby machines |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112130448A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113050407A (en) * | 2021-03-04 | 2021-06-29 | 中国航空工业集团公司西安航空计算技术研究所 | Method for determining and switching master controller and slave controller of distributed processing system |
| CN113625540A (en) * | 2021-07-19 | 2021-11-09 | 交控科技股份有限公司 | Dual-computer hot standby control method and device and dual-computer hot standby system |
| CN114216348A (en) * | 2021-11-29 | 2022-03-22 | 苏州振湖电炉有限公司 | Automatic control system of double-power-supply double-furnace-body change-over switch |
| CN115257890A (en) * | 2022-06-23 | 2022-11-01 | 卡斯柯信号有限公司 | Method for detecting abnormity of main and standby equipment of ATS system key redundancy equipment |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101917283A (en) * | 2010-07-22 | 2010-12-15 | 北京交通大学 | Two-channel hot standby system and method for realizing two-channel hot standby |
| CN203027276U (en) * | 2012-12-10 | 2013-06-26 | 北京交控科技有限公司 | Dual-machine hot standby platform |
| CN108008624A (en) * | 2017-12-08 | 2018-05-08 | 北京交大思诺科技股份有限公司 | Rob power logic control element |
| CN109507866A (en) * | 2018-12-07 | 2019-03-22 | 天津津航计算技术研究所 | A kind of double-machine redundancy system and method based on network address drift technology |
| WO2019080477A1 (en) * | 2017-10-24 | 2019-05-02 | 北京全路通信信号研究设计院集团有限公司 | Computer-based interlocking system and redundancy switching method thereof |
| CN109739694A (en) * | 2019-01-03 | 2019-05-10 | 中国兵器装备集团自动化研究所 | A kind of two-shipper arbitrary switch-over system and method |
-
2020
- 2020-09-25 CN CN202011028586.4A patent/CN112130448A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101917283A (en) * | 2010-07-22 | 2010-12-15 | 北京交通大学 | Two-channel hot standby system and method for realizing two-channel hot standby |
| CN203027276U (en) * | 2012-12-10 | 2013-06-26 | 北京交控科技有限公司 | Dual-machine hot standby platform |
| WO2019080477A1 (en) * | 2017-10-24 | 2019-05-02 | 北京全路通信信号研究设计院集团有限公司 | Computer-based interlocking system and redundancy switching method thereof |
| CN108008624A (en) * | 2017-12-08 | 2018-05-08 | 北京交大思诺科技股份有限公司 | Rob power logic control element |
| CN109507866A (en) * | 2018-12-07 | 2019-03-22 | 天津津航计算技术研究所 | A kind of double-machine redundancy system and method based on network address drift technology |
| CN109739694A (en) * | 2019-01-03 | 2019-05-10 | 中国兵器装备集团自动化研究所 | A kind of two-shipper arbitrary switch-over system and method |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113050407A (en) * | 2021-03-04 | 2021-06-29 | 中国航空工业集团公司西安航空计算技术研究所 | Method for determining and switching master controller and slave controller of distributed processing system |
| CN113625540A (en) * | 2021-07-19 | 2021-11-09 | 交控科技股份有限公司 | Dual-computer hot standby control method and device and dual-computer hot standby system |
| CN114216348A (en) * | 2021-11-29 | 2022-03-22 | 苏州振湖电炉有限公司 | Automatic control system of double-power-supply double-furnace-body change-over switch |
| CN115257890A (en) * | 2022-06-23 | 2022-11-01 | 卡斯柯信号有限公司 | Method for detecting abnormity of main and standby equipment of ATS system key redundancy equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112130448A (en) | Method for switching between main and standby machines | |
| CN107995079B (en) | Hot standby vehicle-mounted ATP (automatic train protection) equipment based on MVB (multifunction vehicle bus) | |
| US8620497B2 (en) | Computer interlocking system and code bit level redundancy method therefor | |
| RU2563095C2 (en) | Method and device to control operating condition of coupling device | |
| CN201193041Y (en) | Traction control system based on TCN network | |
| CA1138970A (en) | Railway control signal dynamic input interlocking systems | |
| CN110412862B (en) | Computer interlocking system and switching control method, equipment and storage medium thereof | |
| CN103389668A (en) | Hot standby redundancy central control panel used for screen door | |
| CN102407856A (en) | Hot backup redundancy method and hot backup redundancy system of train central control unit | |
| CN108725521B (en) | Hot standby redundancy management system and method for main and standby control centers of rail transit | |
| CN111874049A (en) | Brake control system for safety computer of train control | |
| CN101504540B (en) | Control method for safe and intelligent I/O combination system | |
| CA1300251C (en) | Method and electrical circuit for the reliable detection of process states within freely couplable units | |
| CN110896307B (en) | Railway signal redundancy coding device and redundancy coding method | |
| CN109062184B (en) | Double-machine emergency rescue equipment, fault switching method and rescue system | |
| CN207992714U (en) | Safety independence active-standby switch equipment | |
| KR20130013794A (en) | Man machine interface apparatus for railway car | |
| JP2004175186A (en) | Electronic interlock system | |
| CN106873356B (en) | Redundancy control system capable of automatically recovering redundancy and redundancy automatic recovery method thereof | |
| CN116750039A (en) | Control method and system for safe interaction with switch machine | |
| CA3128801C (en) | Electronically controlled pneumatic railway car with end of train device mode | |
| US10202134B2 (en) | Train information managing apparatus | |
| CN111694269B (en) | Locomotive signal processing device | |
| CN216486732U (en) | Dual-computer redundant audio and video system | |
| CN109283910B (en) | KVM remote control system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |