CN112793632A - Safety guide device applied to rail transit system and rail transit signal system - Google Patents
Safety guide device applied to rail transit system and rail transit signal system Download PDFInfo
- Publication number
- CN112793632A CN112793632A CN202110293916.0A CN202110293916A CN112793632A CN 112793632 A CN112793632 A CN 112793632A CN 202110293916 A CN202110293916 A CN 202110293916A CN 112793632 A CN112793632 A CN 112793632A
- Authority
- CN
- China
- Prior art keywords
- processor
- circuit
- output
- interface circuit
- safety
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000001514 detection method Methods 0.000 claims abstract description 38
- 230000002159 abnormal effect Effects 0.000 claims abstract description 18
- 238000004891 communication Methods 0.000 claims description 17
- 238000004804 winding Methods 0.000 claims description 17
- 238000012360 testing method Methods 0.000 claims description 10
- 230000000737 periodic effect Effects 0.000 claims description 7
- 238000001914 filtration Methods 0.000 claims description 4
- 238000000034 method Methods 0.000 description 11
- 238000010586 diagram Methods 0.000 description 9
- 230000007246 mechanism Effects 0.000 description 8
- 101000880160 Streptomyces rochei Subtilisin inhibitor-like protein 2 Proteins 0.000 description 4
- 238000007689 inspection Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 230000002093 peripheral effect Effects 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 230000007613 environmental effect Effects 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
Images
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B61—RAILWAYS
- B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
- B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
- B61L27/50—Trackside diagnosis or maintenance, e.g. software upgrades
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B61—RAILWAYS
- B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
- B61L23/00—Control, warning or like safety means along the route or between vehicles or trains
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01R—MEASURING ELECTRIC VARIABLES; MEASURING MAGNETIC VARIABLES
- G01R31/00—Arrangements for testing electric properties; Arrangements for locating electric faults; Arrangements for electrical testing characterised by what is being tested not provided for elsewhere
- G01R31/28—Testing of electronic circuits, e.g. by signal tracer
- G01R31/282—Testing of electronic circuits specially adapted for particular applications not provided for elsewhere
Landscapes
- Engineering & Computer Science (AREA)
- Mechanical Engineering (AREA)
- Health & Medical Sciences (AREA)
- Biomedical Technology (AREA)
- General Health & Medical Sciences (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Train Traffic Observation, Control, And Security (AREA)
Abstract
The invention discloses a safety guide device applied to a rail transit system and a rail transit signal system. The processor is used for detecting the internal module of the processor and detecting each interface circuit by using the self-detection circuit, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal; the processor does not output dynamic pulse signals when the software timing sequence of the processor is abnormal; the safety circuit is used for converting the dynamic pulse signal into a direct current signal for supplying power to the output interface circuit when receiving the dynamic pulse signal so as to ensure the output of the processor; when the dynamic pulse signal is not received, the direct current signal is stopped being provided for the output interface circuit so as to cut off the output of the processor, and the system safety is effectively ensured.
Description
Technical Field
The invention relates to the field of rail transit, in particular to a safety guide device applied to a rail transit system and a rail transit signal system.
Background
The rail traffic signal system is an important component of a rail traffic engineering system, ensures the safe, orderly, rapid and comfortable operation of a train, and is a key system device for controlling the operation of the train. At present, a rail transit signal system generally has a Safety Integrity Level (SIL) of SIL2 Level, where SIL2 is one Level), such as an ATO (Automatic Train Operation) system, a DMI (Device Machine Interface) system, and a tramcar-mounted system.
For each rail traffic signal system with SIL2 level safety requirements, there is a definition of the safety side, i.e. the system output is switched off when it is not safe, so that the system is directed to the safety side. In the prior art, a track traffic signal system mostly adopts a single CPU (central processing unit) architecture, and based on the single CPU architecture, a detection method of system output security generally includes: the CPU detects the peripheral interface circuit and the internal module of the CPU, judges whether the output of the CPU is safe or not according to the detection result, and cuts off the output of the CPU if the output of the CPU is not safe so as to lead the system to the safe side. However, the conventional detection method has the following problems:
1) when the software time sequence is abnormal due to hardware failure or software error of the CPU, fault detection cannot be realized, and the system detection coverage is not comprehensive.
2) Under the existing detection method, in order to meet the SIL2 level safety requirement, the system can only select devices with low failure rate, so as to ensure the system safety through the quality of the devices. However, this method is more dependent on the quality level of the device, so that the quality fluctuation caused by the discrete characteristics of the device and different batches cannot be effectively protected.
Therefore, how to provide a solution to the above technical problem is a problem that needs to be solved by those skilled in the art.
Disclosure of Invention
The invention aims to provide a safety guide device and a rail transit signal system applied to a rail transit system, which can realize system-level detection full coverage; the failure rate of system devices is not required to be strictly required, and meanwhile, the system safety is not influenced due to the discrete characteristics of the devices and the quality fluctuation caused by different batches; in addition, a safety mechanism independent of software and hardware failure modes of the system processor is realized, namely an inherent failure-safety mechanism is realized, and the system safety is effectively ensured.
In order to solve the above technical problem, the present invention provides a safety guiding device applied to a rail transit system, comprising:
the self-checking circuit is respectively connected with each interface circuit on the periphery of a processor of the system;
the processor is connected with the self-checking circuit and used for detecting the internal module of the processor and detecting each interface circuit by using the self-checking circuit, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal; the processor does not output the dynamic pulse signal when the self software time sequence is abnormal;
the safety circuit is respectively connected with the processor and the power supply end of the output interface circuit at the periphery of the processor and is used for converting the dynamic pulse signal into a direct current signal for supplying power to the output interface circuit when receiving the dynamic pulse signal so as to ensure the output of the processor; and when the dynamic pulse signal is not received, stopping providing the direct current signal for the output interface circuit so as to cut off the output of the processor.
Preferably, the dynamic pulse signal comprises two paths of dynamic square wave signals with a phase difference of 180 degrees;
the safety circuit includes:
the transformer comprises two primary windings and a secondary winding, wherein two signal access ends of the two primary windings are connected into two paths of dynamic square wave signals one by one, and two grounding ends of the two paths of dynamic square wave signals are grounded;
and the rectifying circuit is used for rectifying the alternating current signal to obtain a direct current signal for supplying power to the output interface circuit.
Preferably, the safety circuit further comprises:
the filter circuit is used for filtering the direct current signal so as to supply the filtered direct current signal to the power supply end of the output interface circuit.
Preferably, the interface circuit of the processor periphery includes an input interface circuit for inputting an analog signal and an output interface circuit for outputting an analog signal;
the self-test circuit includes:
the input self-checking circuit is respectively connected with the input interface circuit and the processor;
the output self-checking circuit is respectively connected with the output interface circuit and the processor;
the processor is specifically used for carrying out power-on self-detection on the internal module of the processor and triggering each self-detection circuit to correspondingly carry out power-on self-detection on each interface circuit during the power-on period of the processor, carrying out periodic detection on the internal module of the processor and utilizing each self-detection circuit to correspondingly carry out periodic detection on each interface circuit during the operation period of the processor, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal.
Preferably, the interface circuit of the processor periphery further comprises a communication interface circuit for transmitting digital signals; the communication safety of the communication interface circuit is guaranteed by a safety communication protocol.
Preferably, the internal module of the processor comprises a timer;
the processor is specifically configured to set and enable the timer to run after the power-on initialization of the processor is completed, and generate a signal with alternating high and low levels at a fixed time interval according to a count value of the timer, so as to obtain a dynamic pulse signal for output to the safety circuit; wherein the processor is not to set and enable the timer when powered up and not to generate the dynamic pulse signal.
Preferably, the processor is further configured to:
setting a timer interrupt service function which is independent of processor software operation, used for triggering interrupt every preset interrupt time and used for accumulating interrupt times as a count value of the timer for the timer;
clearing the accumulated interrupt times in the timer interrupt service function at intervals of a preset software period when the processor software normally runs;
detecting whether the accumulated interruption times in the timer interruption service function exceeds a preset threshold value or not by using the timer interruption service function; if so, determining that the processor software time sequence is abnormal, and stopping the generation of the dynamic pulse signal so as to realize that the dynamic pulse signal is not output when the processor software time sequence is abnormal; wherein, the preset threshold value is equal to the maximum value corresponding to the software period.
In order to solve the technical problem, the invention also provides a rail transit signal system which comprises any one of the safety guide devices applied to the rail transit system.
The invention provides a safety guide device applied to a rail transit system, which comprises a self-checking circuit, a system processor and a safety circuit. The method and the device can detect the condition that the software time sequence is abnormal due to hardware failure or software error of the system processor, and timely cut off the output of the processor to lead the system to the safety side, thereby realizing system level detection full coverage. Moreover, the system safety guiding method does not depend on the quality of the device to ensure the safety of the system, so that the failure rate of the system device is not strictly required, only the industrial grade device required by the system due to the environmental condition is required to be met, and meanwhile, the system safety is not influenced due to the discrete characteristic of the device and the quality fluctuation condition caused by different batches. In addition, the power supply enabling signal is designed for the output interface circuit of the system processor, the dynamic pulse signal output by the processor is converted into the power supply enabling signal used by the output interface circuit through the safety circuit, a safety mechanism independent of software and hardware failure modes of the system processor is realized, namely an inherent failure-safety mechanism is realized, and the system safety is effectively ensured.
The invention also provides a rail transit signal system which has the same beneficial effects as the safety guide device.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed in the prior art and the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.
Fig. 1 is a schematic structural diagram of a safety guide device applied to a rail transit system according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a safety circuit according to an embodiment of the present invention;
fig. 3(a) is a schematic diagram of a first dynamic square wave signal input by a transformer according to an embodiment of the present invention;
fig. 3(b) is a schematic diagram of a second dynamic square wave signal input by the transformer according to the embodiment of the present invention;
fig. 3(c) is a schematic diagram of an integrated input signal of a transformer according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a safety guiding device applied to a rail transit system according to an embodiment of the present invention.
Detailed Description
The core of the invention is to provide a safety guide device and a rail transit signal system applied to a rail transit system, which can realize system-level detection full coverage; the failure rate of system devices is not required to be strictly required, and meanwhile, the system safety is not influenced due to the discrete characteristics of the devices and the quality fluctuation caused by different batches; in addition, a safety mechanism independent of software and hardware failure modes of the system processor is realized, namely an inherent failure-safety mechanism is realized, and the system safety is effectively ensured.
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, fig. 1 is a schematic structural diagram of a safety guiding device applied to a rail transit system according to an embodiment of the present invention.
The safety guide device applied to the rail transit system comprises:
the self-checking circuit 1 is respectively connected with each interface circuit on the periphery of the processor 2 of the system;
the processor 2 is connected with the self-checking circuit 1 and is used for detecting the internal module of the processor and detecting each interface circuit by using the self-checking circuit 1, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal; wherein, the processor 2 does not output dynamic pulse signals when the self software time sequence is abnormal;
the safety circuit 3 is respectively connected with the processor 2 and the power supply end of the output interface circuit at the periphery of the processor 2, and is used for converting the dynamic pulse signal into a direct current signal for supplying power to the output interface circuit when receiving the dynamic pulse signal so as to ensure the output of the processor 2; when the dynamic pulse signal is not received, the supply of the dc signal to the output interface circuit is stopped to cut off the output of the processor 2.
Specifically, the safety guiding device applied to the rail transit system of the present application includes a self-checking circuit 1, a processor 2 (such as a CPU) and a safety circuit 3, and its working principle is:
the processor 2 detects the internal module of the processor, simultaneously detects each interface circuit at the periphery of the processor 2 by using the self-detection circuit 1, judges whether the self-output is safe or not according to the detection result of the internal module and the detection result of the interface circuit, and if the self-output is safe, the processor 2 outputs a dynamic pulse signal to the safety circuit 3; if the self-output is not safe, the processor 2 actively stops outputting the dynamic pulse signal to the safety circuit 3 (in this case, it indicates that the software timing of the processor 2 itself is not abnormal, and the fault detection function is still available). It should be noted that the processor 2 does not output the dynamic pulse signal to the safety circuit 3 when its own software timing is abnormal.
When receiving the dynamic pulse signal output by the processor 2, the safety circuit 3 converts the received dynamic pulse signal into a direct current signal for supplying power to the output interface circuit at the periphery of the processor 2, and then supplies the direct current signal to the power supply terminal of the output interface circuit at the periphery of the processor 2, thereby ensuring that the output interface circuit at the periphery of the processor 2 is in a working state, i.e. ensuring the output of the processor 2.
When the safety circuit 3 does not receive the dynamic pulse signal output by the processor 2, it cannot supply the dc signal required for supplying power to the output interface circuit at the periphery of the processor 2, and the output interface circuit at the periphery of the processor 2 cannot operate, thereby cutting off the output of the processor 2. That is, when the output of the processor 2 is not safe due to the failure of the internal module and the peripheral interface circuits of the processor 2 or the software timing is abnormal due to the hardware failure or the software error of the processor 2, the output interface circuits at the periphery of the processor 2 do not work, and the system is directed to the safe side.
Therefore, the method and the device can detect the condition of software time sequence abnormity of the system processor caused by hardware failure or software error, and timely cut off the output of the processor to lead the system to the safety side, thereby realizing system level detection full coverage. Moreover, the system safety guiding method does not depend on the quality of the device to ensure the safety of the system, so that the failure rate of the system device is not strictly required, only the industrial grade device required by the system due to the environmental condition is required to be met, and meanwhile, the system safety is not influenced due to the discrete characteristic of the device and the quality fluctuation condition caused by different batches. In addition, the power supply enabling signal is designed for the output interface circuit of the system processor, the dynamic pulse signal output by the processor is converted into the power supply enabling signal used by the output interface circuit through the safety circuit, a safety mechanism independent of software and hardware failure modes of the system processor is realized, namely an inherent failure-safety mechanism is realized, and the system safety is effectively ensured.
On the basis of the above-described embodiment:
referring to fig. 2, fig. 2 is a schematic structural diagram of a safety circuit according to an embodiment of the present invention.
As an alternative embodiment, the dynamic pulse signal includes two paths of dynamic square wave signals with a phase difference of 180 °;
the safety circuit 3 includes:
the transformer T comprises two primary windings and a secondary winding, wherein two signal access ends of the two primary windings are connected into two paths of dynamic square wave signals one by one, and two grounding ends of the two paths of dynamic square wave signals are grounded;
and the rectifying circuit 31 is used for rectifying the alternating current signal to obtain a direct current signal for supplying power to the output interface circuit.
Specifically, the dynamic pulse signal output by the processor 2 to the safety circuit 3 is specifically two dynamic square wave signals (i.e., a dynamic pulse signal with a fixed frequency and a duty ratio of 50%), and the phase difference between the two dynamic square wave signals is 180 °. Based on this, the safety circuit 3 of the present application includes a transformer T and a rectifying circuit 31, and its operating principle is:
the transformer T includes a double primary winding consisting of a first primary winding L1 and a second primary winding L2 and a secondary winding L3. The signal access end of the first primary winding L1 is connected to one of the dynamic square wave signals output by the processor 2, and the grounding end of the first primary winding L1 is grounded; the signal access end of the second primary winding L2 is connected to the other path of dynamic square wave signal output by the processor 2, and the ground end of the second primary winding L2 is grounded, so that the transformer T is specifically configured to integrate the two paths of dynamic square wave signals, and obtain one path of alternating current signal to be supplied to the rectification circuit 31. For example, a low level is represented by "0", a high level is represented by "1", and the first dynamic square wave signal output by the processor 2 is represented by "0, 1, 0, 1 … …", as shown in fig. 3 (a); the second path of dynamic square wave signal output by the processor 2 is denoted as "1, 0, 1, 0 … …", as shown in fig. 3 (b); the transformer T integrates the two paths of dynamic square wave signals to obtain a path of alternating current signal, which is denoted as "-1, -1, 1 … …", as shown in fig. 3 (c).
After receiving the ac signal output by the transformer T, the rectifier circuit 31 performs rectification processing on the received ac signal to obtain a dc signal for power supply to the output interface circuit on the periphery of the processor 2, and then supplies the dc signal to the power supply terminal of the output interface circuit on the periphery of the processor 2.
As an alternative embodiment, the safety circuit 3 further comprises:
and the filter circuit 32, the input end of which is connected with the output end of the rectifier circuit 31 and the output end of which is connected with the power supply end of the output interface circuit, is used for filtering the direct current signal so as to supply the filtered direct current signal to the power supply end of the output interface circuit.
Further, the safety circuit 3 of the present application further includes a filter circuit 32, and the working principle thereof is as follows:
the filter circuit 32 first performs filtering processing on the dc signal output by the rectifier circuit 31 to obtain a more stable dc signal, and then supplies the more stable dc signal to the power supply terminal of the output interface circuit.
Referring to fig. 4, fig. 4 is a schematic structural diagram of a safety guiding device applied to a rail transit system according to an embodiment of the present invention.
As an alternative embodiment, the interface circuits at the periphery of the processor 2 include an input interface circuit for inputting analog signals and an output interface circuit for outputting analog signals;
the self-test circuit 1 includes:
an input self-checking circuit 11 connected to the input interface circuit and the processor 2, respectively;
an output self-checking circuit 12 connected to the output interface circuit and the processor 2, respectively;
the processor 2 is specifically configured to perform power-on self-inspection on the internal module of the processor and trigger each self-inspection circuit 1 to perform power-on self-inspection on each interface circuit correspondingly during power-on of the processor, perform periodic detection on the internal module of the processor and perform periodic detection on each interface circuit correspondingly by using each self-inspection circuit 1 during operation of the processor, and judge whether self-output is safe or not according to a detection result, if so, output a dynamic pulse signal; if not, the dynamic pulse signal is stopped to be output.
Specifically, the peripheral interface circuit of processor 2 of this application includes input interface circuit and output interface circuit (be used for analog input/output), and correspondingly, self-checking circuit 1 of this application includes input self-checking circuit 11 and output self-checking circuit 12, and its theory of operation is:
the processor 2 performs power-on self-test on the internal module during the power-on period of the processor, and simultaneously triggers the input self-test circuit 11 to perform power-on self-test on the input interface circuit and the output self-test circuit 12 to perform power-on self-test on the output interface circuit. In addition, the processor 2 periodically detects the internal module during its operation, and simultaneously periodically detects the input interface circuit by the input self-test circuit 11 and periodically detects the output interface circuit by the output self-test circuit 12. Meanwhile, the processor 2 judges whether the self output is safe according to the self-detection result or the periodic detection result, and if the self output is safe, the dynamic pulse signal is output; if the output is unsafe, the output of the dynamic pulse signal is stopped.
As an alternative embodiment, the interface circuits at the periphery of the processor 2 further comprise communication interface circuits for transmitting digital signals; the communication safety of the communication interface circuit is ensured by a safety communication protocol.
Further, the interface circuit at the periphery of the processor 2 of the present application further includes a communication interface circuit for transmitting digital signals. Although the self-checking circuit 1 is not specially arranged for the communication interface circuit, the communication safety of the communication interface circuit can be guaranteed through a safety communication protocol.
As an alternative embodiment, the internal modules of the processor 2 comprise a timer;
the processor 2 is specifically configured to set and enable the timer to run after the power-on initialization of the processor is completed, and generate a signal with high and low levels changing alternately at a fixed time interval according to a count value of the timer, so as to obtain a dynamic pulse signal for output to the safety circuit 3; the processor 2 does not set and enable the timer when being powered on, and does not generate the dynamic pulse signal.
Specifically, the internal module of the processor 2 of the present application includes a timer, and the principle of the processor 2 generating the dynamic pulse signal is as follows:
after the processor 2 completes its power-on initialization, it sets and enables the timer to run, and then generates a signal with alternating high and low levels at a fixed time interval according to the count value of the timer, i.e. a dynamic square wave signal with fixed frequency and 50% duty ratio, for providing to the safety circuit 3 when its output is safe. It should be noted that, the processor 2 does not set and enable the timer when powering on, and does not generate a dynamic pulse signal, so the system is guided to the safety side by default when powering on.
As an alternative embodiment, the processor 2 is further configured to:
setting a timer interrupt service function which is independent of the running of processor software, is used for triggering interrupt every preset interrupt time and accumulates interrupt times as the counting value of the timer for the timer;
clearing the accumulated interrupt times in the timer interrupt service function every other preset software period when the processor software normally runs;
detecting whether the accumulated interruption times in the timer interruption service function exceeds a preset threshold value or not by using the timer interruption service function; if so, determining that the processor software time sequence is abnormal, and stopping the generation of the dynamic pulse signal so as to realize that the dynamic pulse signal is not output when the processor software time sequence is abnormal; wherein, the preset threshold value is equal to the maximum value corresponding to the software period.
Further, the processor 2 of the present application sets a timer interrupt service function for the timer, which runs independently from the processor software, and runs independently from the processor software means that the running of the timer interrupt service function is not affected by the processor software timing abnormality. The timer interrupt service function is specifically configured to trigger an interrupt every preset interrupt time (e.g., 1 ms), and accumulate interrupt times as a count value of the timer.
The processor 2 generates a signal with alternating high and low levels at fixed time intervals according to the count value of the timer, and specifically, the level may change once every 10ms, that is, the level changes once every 10 times the timer interrupt service function is interrupted.
When the processor software normally runs, clearing the accumulated interruption times in the timer interruption service function every a preset software period (such as 100 ms), so that the value of the accumulated interruption times in the timer interruption service function cannot exceed the maximum value corresponding to the software period.
Based on this, this application sets for a threshold value, and its theory of setting is: when the time sequence of the processor software is abnormal, the processor software cannot maintain the operation of the original period mode, so that the accumulated interruption times in the timer interruption service function cannot be cleared, and the accumulated interruption times in the timer interruption service function exceeds a set threshold value (can be set to be equal to the maximum value corresponding to the software period). Therefore, the processor 2 detects whether the accumulated interruption times in the timer interruption service function exceeds a preset threshold value or not by using the timer interruption service function; and if the time sequence exceeds the preset threshold value, determining that the processor software is abnormal in time sequence, and stopping the generation of the dynamic pulse signal, so as to realize that the dynamic pulse signal is not output when the processor software is abnormal in time sequence.
The application also provides a rail transit signal system, which comprises any one of the safety guide devices applied to the rail transit system.
For introduction of the rail transit signal system provided in the present application, please refer to the above-mentioned embodiment of the system safety guiding device, which is not described herein again.
It is further noted that, in the present specification, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (8)
1. A safety guide device for use in a rail transit system, comprising:
the self-checking circuit is respectively connected with each interface circuit on the periphery of a processor of the system;
the processor is connected with the self-checking circuit and used for detecting the internal module of the processor and detecting each interface circuit by using the self-checking circuit, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal; the processor does not output the dynamic pulse signal when the self software time sequence is abnormal;
the safety circuit is respectively connected with the processor and the power supply end of the output interface circuit at the periphery of the processor and is used for converting the dynamic pulse signal into a direct current signal for supplying power to the output interface circuit when receiving the dynamic pulse signal so as to ensure the output of the processor; and when the dynamic pulse signal is not received, stopping providing the direct current signal for the output interface circuit so as to cut off the output of the processor.
2. The safety guide device applied to the rail transit system as claimed in claim 1, wherein the dynamic pulse signal comprises two dynamic square wave signals with a phase difference of 180 degrees;
the safety circuit includes:
the transformer comprises two primary windings and a secondary winding, wherein two signal access ends of the two primary windings are connected into two paths of dynamic square wave signals one by one, and two grounding ends of the two paths of dynamic square wave signals are grounded;
and the rectifying circuit is used for rectifying the alternating current signal to obtain a direct current signal for supplying power to the output interface circuit.
3. The safety guide device for a rail transit system as claimed in claim 2, wherein the safety circuit further comprises:
the filter circuit is used for filtering the direct current signal so as to supply the filtered direct current signal to the power supply end of the output interface circuit.
4. The safety guide device applied to the rail transit system as claimed in claim 1, wherein the interface circuit at the periphery of the processor includes an input interface circuit for inputting an analog signal and an output interface circuit for outputting an analog signal;
the self-test circuit includes:
the input self-checking circuit is respectively connected with the input interface circuit and the processor;
the output self-checking circuit is respectively connected with the output interface circuit and the processor;
the processor is specifically used for carrying out power-on self-detection on the internal module of the processor and triggering each self-detection circuit to correspondingly carry out power-on self-detection on each interface circuit during the power-on period of the processor, carrying out periodic detection on the internal module of the processor and utilizing each self-detection circuit to correspondingly carry out periodic detection on each interface circuit during the operation period of the processor, judging whether the output of the processor is safe or not according to the detection result, and if so, outputting a dynamic pulse signal; if not, stopping outputting the dynamic pulse signal.
5. The safety guide device for rail transit system as claimed in claim 4, wherein the interface circuit of the processor periphery further comprises a communication interface circuit for transmitting digital signals; the communication safety of the communication interface circuit is guaranteed by a safety communication protocol.
6. The safety guide device applied to the rail transit system as claimed in any one of claims 1 to 5, wherein the internal module of the processor comprises a timer;
the processor is specifically configured to set and enable the timer to run after the power-on initialization of the processor is completed, and generate a signal with alternating high and low levels at a fixed time interval according to a count value of the timer, so as to obtain a dynamic pulse signal for output to the safety circuit; wherein the processor is not to set and enable the timer when powered up and not to generate the dynamic pulse signal.
7. The safety guide device for a rail transit system of claim 6, wherein the processor is further configured to:
setting a timer interrupt service function which is independent of processor software operation, used for triggering interrupt every preset interrupt time and used for accumulating interrupt times as a count value of the timer for the timer;
clearing the accumulated interrupt times in the timer interrupt service function at intervals of a preset software period when the processor software normally runs;
detecting whether the accumulated interruption times in the timer interruption service function exceeds a preset threshold value or not by using the timer interruption service function; if so, determining that the processor software time sequence is abnormal, and stopping the generation of the dynamic pulse signal so as to realize that the dynamic pulse signal is not output when the processor software time sequence is abnormal; wherein, the preset threshold value is equal to the maximum value corresponding to the software period.
8. A rail transit signal system comprising a safety guide as claimed in any one of claims 1 to 7 for use in a rail transit system.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110293916.0A CN112793632A (en) | 2021-03-19 | 2021-03-19 | Safety guide device applied to rail transit system and rail transit signal system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110293916.0A CN112793632A (en) | 2021-03-19 | 2021-03-19 | Safety guide device applied to rail transit system and rail transit signal system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112793632A true CN112793632A (en) | 2021-05-14 |
Family
ID=75817217
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110293916.0A Pending CN112793632A (en) | 2021-03-19 | 2021-03-19 | Safety guide device applied to rail transit system and rail transit signal system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112793632A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115562233A (en) * | 2022-10-18 | 2023-01-03 | 中车株洲电力机车研究所有限公司 | Safety control device of rail transit vehicle-mounted control system |
Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101106336A (en) * | 2006-07-12 | 2008-01-16 | 群康科技(深圳)有限公司 | Power circuit |
| CN101439725A (en) * | 2008-12-20 | 2009-05-27 | 兰州大成自动化工程有限公司 | Control and monitoring system for railway switch location |
| CN201383092Y (en) * | 2008-12-10 | 2010-01-13 | 中国北车股份有限公司大连电力牵引研发中心 | CAN-based digital data and pulse signal acquisition module |
| FR2938656A1 (en) * | 2008-11-18 | 2010-05-21 | Thales Sa | INTRINSIC SECURITY SYSTEM AND TEST MODULE, IN PARTICULAR FOR USE IN A RAILWAY SIGNALING SYSTEM |
| CN102087334A (en) * | 2009-12-04 | 2011-06-08 | 北京广利核系统工程有限公司 | High-reliability digital quantity acquisition system |
| CN202364198U (en) * | 2011-12-08 | 2012-08-01 | 无锡华测电子系统有限公司 | Self-checking and protection circuit of miniature microwave module |
| CN105398472A (en) * | 2015-11-06 | 2016-03-16 | 株洲南车时代电气股份有限公司 | Platform host plug-in |
| CN106300526A (en) * | 2016-08-31 | 2017-01-04 | 苏州迈力电器有限公司 | The multifunctional charging circuit of electronic product |
| CN107672624A (en) * | 2017-09-29 | 2018-02-09 | 北京佳讯飞鸿电气股份有限公司 | Railway section fiber optic network signal control device and system |
| CN108639103A (en) * | 2018-04-12 | 2018-10-12 | 北京交通大学 | The implementation method of track traffic signal control system reaction equation fail-safe mechanism |
| CN110098728A (en) * | 2019-04-24 | 2019-08-06 | 杭州中恒电气股份有限公司 | Interleaved converter current sampling circuit, sampling control method and its application |
-
2021
- 2021-03-19 CN CN202110293916.0A patent/CN112793632A/en active Pending
Patent Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101106336A (en) * | 2006-07-12 | 2008-01-16 | 群康科技(深圳)有限公司 | Power circuit |
| FR2938656A1 (en) * | 2008-11-18 | 2010-05-21 | Thales Sa | INTRINSIC SECURITY SYSTEM AND TEST MODULE, IN PARTICULAR FOR USE IN A RAILWAY SIGNALING SYSTEM |
| CN201383092Y (en) * | 2008-12-10 | 2010-01-13 | 中国北车股份有限公司大连电力牵引研发中心 | CAN-based digital data and pulse signal acquisition module |
| CN101439725A (en) * | 2008-12-20 | 2009-05-27 | 兰州大成自动化工程有限公司 | Control and monitoring system for railway switch location |
| CN102087334A (en) * | 2009-12-04 | 2011-06-08 | 北京广利核系统工程有限公司 | High-reliability digital quantity acquisition system |
| CN202364198U (en) * | 2011-12-08 | 2012-08-01 | 无锡华测电子系统有限公司 | Self-checking and protection circuit of miniature microwave module |
| CN105398472A (en) * | 2015-11-06 | 2016-03-16 | 株洲南车时代电气股份有限公司 | Platform host plug-in |
| CN106300526A (en) * | 2016-08-31 | 2017-01-04 | 苏州迈力电器有限公司 | The multifunctional charging circuit of electronic product |
| CN107672624A (en) * | 2017-09-29 | 2018-02-09 | 北京佳讯飞鸿电气股份有限公司 | Railway section fiber optic network signal control device and system |
| CN108639103A (en) * | 2018-04-12 | 2018-10-12 | 北京交通大学 | The implementation method of track traffic signal control system reaction equation fail-safe mechanism |
| CN110098728A (en) * | 2019-04-24 | 2019-08-06 | 杭州中恒电气股份有限公司 | Interleaved converter current sampling circuit, sampling control method and its application |
Non-Patent Citations (1)
| Title |
|---|
| 罗永升: "信号系统通用车载显示器安全性设计与应用", 《中国新通信》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115562233A (en) * | 2022-10-18 | 2023-01-03 | 中车株洲电力机车研究所有限公司 | Safety control device of rail transit vehicle-mounted control system |
| CN115562233B (en) * | 2022-10-18 | 2023-09-05 | 中车株洲电力机车研究所有限公司 | Safety control device of track traffic vehicle-mounted control system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1929230B (en) | Power converter and power supply for conditional response to a fault condition | |
| US9407086B2 (en) | Safety switching device with power supply | |
| US8520415B1 (en) | Multi-function feedback using an optocoupler | |
| KR940008950A (en) | Performance of coded railroad track circuits with reduced power standby | |
| CN112793632A (en) | Safety guide device applied to rail transit system and rail transit signal system | |
| KR101735200B1 (en) | Electronic watt-hour meter for realtime blackout infromation transmission and method for transmitting realtime blackout information | |
| EP2915018B1 (en) | Device and method for early detection of power failure in an external power supply | |
| KR100975343B1 (en) | System for monitoring switched-mode power supply with an auto recovery function of an audio frequency electrical joint apparatus | |
| CN103380476A (en) | Residual-current-operated circuit breaker | |
| EP3226179B1 (en) | Electronic device | |
| US11916374B2 (en) | Fault managed power system | |
| WO2023014595A1 (en) | Fault managed power system | |
| US9099931B2 (en) | Power supply device | |
| CN113671931B (en) | Safety signal collector | |
| KR100844755B1 (en) | Dual-switched-mode power supply of an audio frequency electrical joint apparatus | |
| KR20070110820A (en) | System for monitoring switched-mode power supply with a data auto transmission function of an audio frequency electrical joint apparatus | |
| JP2015037368A (en) | Power supply unit | |
| CN211266581U (en) | Intelligent standby power supply device | |
| KR102510026B1 (en) | Redundant uninterruptible power supply | |
| KR102158243B1 (en) | Remote circuit breaker monitoring system | |
| CN213957575U (en) | Periodic power supply voltage detection circuit | |
| US20240162703A1 (en) | Supplying fault managed power | |
| CN212229123U (en) | Power supply power failure detection circuit | |
| JP2002329625A (en) | Abnormality detector for differential transformer | |
| KR100218944B1 (en) | Power conduct devices and method for inverter circuit |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210514 |
|
| RJ01 | Rejection of invention patent application after publication |