DK163753B - CIRCUIT FOR CHECKING THE CORRECT START OF A TWO-CHANNEL FAIL-SAFE MICRO-DATA CABLE, NAME FOR RAILWAY INSTALLATION - Google Patents

CIRCUIT FOR CHECKING THE CORRECT START OF A TWO-CHANNEL FAIL-SAFE MICRO-DATA CABLE, NAME FOR RAILWAY INSTALLATION Download PDF

Info

Publication number
DK163753B
DK163753B DK433084A DK433084A DK163753B DK 163753 B DK163753 B DK 163753B DK 433084 A DK433084 A DK 433084A DK 433084 A DK433084 A DK 433084A DK 163753 B DK163753 B DK 163753B
Authority
DK
Denmark
Prior art keywords
microcomputer
predetermined number
processing steps
inverter
bit
Prior art date
Application number
DK433084A
Other languages
Danish (da)
Other versions
DK433084A (en
DK433084D0 (en
DK163753C (en
Inventor
Michael Gronemeyer
Georg Scharfenberg
Original Assignee
Siemens Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Ag filed Critical Siemens Ag
Publication of DK433084D0 publication Critical patent/DK433084D0/en
Publication of DK433084A publication Critical patent/DK433084A/en
Publication of DK163753B publication Critical patent/DK163753B/en
Application granted granted Critical
Publication of DK163753C publication Critical patent/DK163753C/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0796Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L1/00Devices along the route controlled by interaction with the vehicle or train
    • B61L1/20Safety arrangements for preventing or indicating malfunction of the device, e.g. by leakage current, by lightning
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16Error detection or correction of the data by redundancy in hardware
    • G06F11/1629Error detection by comparing the output of redundant processing systems
    • G06F11/1641Error detection by comparing the output of redundant processing systems where the comparison is not performed by the redundant processing components

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Mechanical Engineering (AREA)
  • Safety Devices In Control Systems (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Hardware Redundancy (AREA)
  • Radar Systems Or Details Thereof (AREA)
  • Arrangements For Transmission Of Measured Signals (AREA)

Abstract

1. Circuit arrangement for testing the in-sequence start-up of a duel-channel fail-safe microcomputer sequential logic system, in particular for railway security equipment, having microcomputers which process the same information on two channels, the signals of which microcomputers are tested bit by bit in a plurality of comparators, no switch-off being triggered only in the event of complete, continuous correct sequencing of all bit pairs, and memories for test programmes being provided which are used at least during the time of the start-up of the microcomputer sequential logic system for test purposes, characterized in that after the start-up of the microcomputer sequential logic system at least the information provided by the one channel (MC2) for a comparator (VRn) is fed in a fixed predetermined number of successive processing steps per test programme, inverted by means of a controllable inverter (ER), and in that switching means (ZR) are provided which, at the beginning of the predetermined number of processing steps, activate the inverter (ER) and deactivate it again after the predetermined number of processing steps.

Description

iin

DK 163753 BDK 163753 B

Opfindelsen angår et kredsløb til kontrol af den korrekte start af et tokanalet fail-safe-mikrodatamat-kobleværk, navnlig til jernbanesikringsanlæg, med mikrodatamater, som i to kanaler bearbejder de samme in-5 formationer, og hvis signaler kontrolleres bit for bit i et antal komparatorer, hvorhos der kun ved fuldstændig, vedvarende korrekthed af alle bitpar ikke udløses nogen frakoblingsproces, og hvor der findes lagre for kontrolprogrammer, som i det mindste i tidsrummet 10 for mikrodatamatkobleværkets start anvendes til testformål.The invention relates to a circuit for checking the correct start of a two-channel fail-safe microcomputer switchgear, in particular for railway safety systems, with microcomputers which process the same information in two channels and whose signals are controlled bit by bit in a number of comparators where only by complete, continuous correctness of all bit pairs no disconnection process is triggered and there are storage programs for control programs which are used for testing purposes at least in the period 10 for the start of the microcomputer switchgear.

Ved tekniske processer med sikkerhedsansvar, eksempelvis ved overvågning og styring af kernereaktorer eller i jernbanesikringsanlæg, arbejdes der efter et 15 anerkendt sikringsteknisk princip, ved hvilket den proces, der skal styres, ved tekniske fejl, som der må regnes med ved drift af ikke-sikre databearbejdningsanlæg, overføres i en for mennesker og materiel ukritisk tilstand. Dette kan opnås ved, at der til alle proces-20 aktiverende informationer knyttes specielle signaler, f.eks. et højt signalniveau, skiftesignaler, som ved en konstateret teknisk forstyrrelse i databearbejdningsanlægget på alle udlæsningskanaler overføres til et ukri- ;; tisk signal, f.eks. nul volt. IIn technical processes with safety responsibilities, for example in monitoring and control of nuclear reactors or in railway safety installations, work is carried out according to a recognized security principle, in which the process to be controlled by technical faults that must be taken into account when operating unsafe data processing plants, transmitted in a human and material uncritical state. This can be achieved by attaching special signals to all process-activating information, e.g. a high signal level, switching signals which, in the event of a detected technical disturbance in the data processing system on all read out channels, are transmitted to an uncorrected ;; tical signal, e.g. zero volts. IN

25 Et mikrodatamatkobleværk af den forannævnte art, som tilfredsstiller den forklarede sikkerhedsfilosofi, kendes fra fagtidsskriftet "Elektronische Rechenanla-gen", 22. årgang 1980, hæfte 5, siderne 229-236. Dette gennemprøvede mikrodatamatkobleværk er opbygget af to 30 mikrodatamater, som parallelt bearbejder de samme informationer, og det drives således, at efter en konstateret ulighed mellem to kanaler undertrykkes mikrodatamaternes aktiviteter. Dette kan ske enten ved tilbageholdelse af de, til de to mikroprocessorer tilførte, 35 drivende taktimpulser eller ved umiddelbar frakobling af udgangssignalomsættere.25 A microcomputer coupler of the aforementioned kind which satisfies the explained security philosophy is known from the professional journal "Elektronische Rechenanla-gene", 22 year 1980, booklet 5, pages 229-236. This proven microcomputer switchgear is made up of two microcomputers which process the same information in parallel, and it is operated so that, after an observed inequality between two channels, the activities of the microcomputers are suppressed. This can be done either by withholding the pulse rate pulses applied to the two microprocessors or by immediately switching off the output signal inverters.

22

DK 163753 BDK 163753 B

Det tokanalede fail-safe-mikrodatamatkobleværk opfylder på fordelagtig måde fordringen om en kort defekt-afsløringstid dels ved, at de to datamatgrenes tilstande sammenlignes med hinanden i kobleværket efter 5 hver et bearbejdningstrin karakteriserende taktimpuls, således at det næste bearbejdningstrin kun kan udløses i afhængighed af et positivt totalresultat af denne sammenligningsproces; dels findes der specielle kontrolprogrammer .The two-channel fail-safe microcomputer switchgear advantageously fulfills the requirement for a short defect detection time, partly by comparing the states of the two computer branches to each other in the switchgear after each one processing step, characterized by a clock pulse, so that the next processing step can only be triggered depending on a positive overall result of this comparison process; partly there are special control programs.

10 Indgående overvejelser har imidlertid haft til resultat, at under visse omstændigheder kan den ønskede fejlafsløring under bestemte forudsætninger ikke være sikret i det tokanalede mikrodatamatkobleværks startfase.However, in-depth consideration has resulted in the fact that, under certain conditions, the desired error detection cannot be ensured during the start-up phase of the two-channel microcomputer switchgear.

15 Opfindelsen har således til opgave at videreud vikle et tokanalet mikrodatamatkobleværk af den indledningsvis nævnte art således ved hjælp af en ekstrakob-ling, at i tilfælde af start af mikrodatamatkobleværket med ens falske data og/eller adresser vil også denne 20 fejl blive konstateret indenfor den ønskede korte de-fekt-afsløringstid og føre til en frakoblingsproces.It is the object of the invention to further develop a two-channel microcomputer switch of the kind mentioned above by means of an extra coupling, that in case of starting of the microcomputer switch with one's false data and / or addresses, this error will also be detected within the desired short defect detection time and lead to a disconnection process.

Ifølge opfindelsen løses opgaven ved, at efter mikrodatamatkobleværkets start bliver i det mindste information fra den ene kanal inverteret pr. kontrolpro-25 gram over et fast forudgivet antal efter hinanden følgende bearbejdningstrin tilført en komparator over en styrbar inverter, og at der findes koblingsmidler, som ved begyndelsen af det forudgivne antal bearbejdningstrin aktiverer inverteren og efter det forudgivne antal 30 bearbejdningstrin igen afaktiverer inverteren.According to the invention, the task is solved by the fact that after the start of the microcomputer switchgear, at least information from one channel is inverted per second. control program over a fixed predetermined number of consecutive processing steps supplied to a comparator over a controllable inverter, and there are coupling means which, at the beginning of the predetermined number of processing steps, activate the inverter and again deactivate the inverter after the predetermined number of processing steps.

Hermed er det på fordelagtig måde muligt at sikre den rigtige start af mikrodatamatkobleværket med korrekte begyndelsesadresser for de to mikroprocessorer, idet sammenligningen eksempelvis kan finde sted på 35 mindst ét databitpar i de to databusser. Til det formål bliver en databit af de første sammenlignede data 3Hereby it is advantageously possible to ensure the correct start of the microcomputer switching with the correct starting addresses of the two microprocessors, for example the comparison can take place on at least one data bit pair in the two data buses. To that end, a data bit of the first compared data becomes 3

DK 163753 BDK 163753 B

f.eks. i lageret inverteret pr. kontrolprogram for en kanal, nemlig over et forudgivet antal på hinanden følgende bearbejdningstrin.eg. in the inventory inverted per. control program for a channel, namely over a predetermined number of consecutive processing steps.

Da realiseringen af den yderligere hardware-kob-5 ling ligeledes kan ske udelukkende med gængse komponenter indenfor digitalteknikken, og denne ekstrakobling kræver et særlig ringe koblingsteknisk opbud, beriger løsningen ifølge opfindelsen mikrodatamatkobleværket i særlig høj grad.Since the realization of the additional hardware coupling can also be done only with conventional components in the digital technology, and this extra coupling requires a very small coupling technical supply, the solution according to the invention enriches the microcomputer coupling tool to a very high degree.

10 En foretrukket udførelsesform for kredsløbet ifølge opfindelsen er ejendommelig ved, at der til kom-paratoren som styrbar inverter er knyttet et exclusiv-ELLER-led, hvoraf en indgang er forbundet med udgangen på en det forudgivne antal bearbejdningstrin bestemmen-15 de tæller, som kan tilkobles ved et for flere koblingsdele i mikrodatamatkobleværket før starten forhåndenværende tilbagestillingssignal og videreskiftes af de bearbejdningstrinnene karakteriserende taktimpulser.A preferred embodiment of the circuit according to the invention is characterized in that an exclusive OR link is connected to the comparator as a controllable OR link, an input of which is connected to the output of a predetermined number of processing steps which determine can be switched on by one too many switching parts in the microcomputer switching prior to the start resetting signal and switched on by the processing steps characterizing clock pulses.

Et udførelseseksempel ifølge opfindelsen er vist 20 på tegningen og forklares i det efterfølgende.An exemplary embodiment of the invention is shown in the drawing and is explained in the following.

Tegningen viser et blokdiagram over et tokanalet fail-safe-mikrodatamatkobleværk med mikrodatamater MCI og MC2. Dette mikrodatamatkobleværk kan tjene til styring af driften ved jernbanesikringsanlæg. Symbolsk 25 for et stort antal indgange er der vist en indgangssignalomsætter EGR, som på udgangssiden er forbundet med de to mikrodatamater MCI og MC2. Da det for forklaringen af ekstrakoblingen ifølge opfindelsen er uvæsentligt, på hvilken måde mikrodatamaterne MCI, MC2 30 er opbygget, er der af hensyn til tegningens overskuelighed givet afkald på at vise nærmere detaljer. For et stort antal udgange er der vist en udgangssignalomsætter AR. Denne har til opgave at videregive en bestemt, af mikrodatamaten MCI afgivet information over 35 en ledning LI til den proces, som skal styres. Videregivelsen må kun finde sted, hvis der ikke foreligger 4The drawing shows a block diagram of a two-channel fail-safe microcomputer switchgear with microcomputers MCI and MC2. This microcomputer switchgear can serve to control the operation of railway safety systems. Symbolic 25 for a large number of inputs is shown an input signal converter EGR, which is connected on the output side to the two microcomputers MCI and MC2. Since for the explanation of the auxiliary coupling according to the invention it is immaterial in the way in which the microcomputers MCI, MC2 30 are constructed, for the sake of clarity of drawing there is no need to show further details. For a large number of outputs, an output signal converter AR is shown. It is tasked with passing on a certain information provided by the microcomputer MCI over a line LI to the process to be controlled. The transfer may only take place if there are no 4

DK 163753 BDK 163753 B

et frakoblingssignal AL. Dette udløses altid, hvis det under kontrolprocesser, hvortil der findes et stort antal komparatorer VRl, VR2.... VRn, er konstateret, at et informationspar, eksempelvis på ledningerne L2 og 5 L3, ikke er korrekt. Alt efter komparatortype kontrol leres der med hensyn til ækvivalens eller med hensyn til antivalens. Til videreledning af frakoblingssignalet AL er ud- og indgangene på komparatorerne VRl, VR2... VRn seriekoblet. Frakoblingssignalet AL kan 10 også benyttes til at frakoble en for mikrodatamaterne MCI og MC2 nødvendig taktstrømforsyningsindretning (ikke vist) henholdsvis udover afaktiveringen af udgangssignalomsætteren AR at udløse en anden yderligere frakoblingsproces. En tilbagestillingssignalgiver 15 RR, som efter slutning af en tastkontakt TT udløser et tilbagestillingssignal RL, er nødvendig til forberedelse af den korrekte start af det tokanalede mikro-datamatkobleværk. Til det formål bliver tilbagestillingssignalet RL i det mindste tilført de to mikroda-20 tamater MCI og MC2; under visse omstændigheder bliver det eventuelt også tilført komparatorerne VRl, VR2... VRn.a disconnect signal AL. This is always triggered if during control processes for which a large number of comparators VR1, VR2 .... VRn are found, an information pair, for example on lines L2 and 5 L3, is found to be incorrect. Depending on the type of comparator, equivalence or antivalence is controlled. For relaying the disconnection signal AL, the outputs and inputs of the comparators VR1, VR2 ... VRn are connected in series. The disconnect signal AL can also be used to disconnect a clock current supply device (not shown) required for the microcomputers MCI and MC2, respectively, in addition to deactivating the output signal converter AR, to trigger another additional disconnection process. A reset signal transducer 15 RR, which, after closing a key switch TT, triggers a reset signal RL, is needed to prepare for the correct start of the two-channel microcomputer switch. To this end, the reset signal RL is at least supplied to the two microdata tomatoes MCI and MC2; in certain circumstances it may also be added to the comparators VR1, VR2 ... VRn.

Til kontrol af den korrekte start af det tokanalede fail-safe-mikrodatamatkobleværk er en ledning L4 25 fra mikrodatamaten MC2 forbundet indirekte over et exclusiv-ELLER-led ER med den tilhørende komparator VRn. Exclusiv-ELLER-leddet ER arbejder som styrbar inverter på den måde, at en invertering af en over ledningen L4 tilført information kun sker over et fast 30 forudgivet antal bearbejdningstrin for mikrodatamatkob-leværket. Denne kredsløbstekniske foranstaltning kunne desuden eller i stedet for også forefindes ved mikrodatamaten MC21 s ledning L5 eller i forbindelse med en af udgangene på mikrodatamaten MCI. Det er væsent-35 ligt, at den forklarede invertering for mindst én komparator sker énsidigt i kun én bearbejdningskanal.For checking the correct start of the two-channel fail-safe microcomputer switch, a line L4 25 from the microcomputer MC2 is connected indirectly over an exclusive OR link ER with the associated comparator VRn. The Exclusive OR link is operating as a controllable inverter in that inversion of information supplied over line L4 occurs only over a fixed 30 predetermined number of processing steps for the microcomputer copper. This circuit technical measure could additionally or instead also be present at the microcomputer MC21 s line L5 or in connection with one of the outputs of the microcomputer MCI. It is essential that the explained inversion for at least one comparator occurs unilaterally in only one processing channel.

55

DK 163753 BDK 163753 B

Medens exclusiv-ELLER-leddet ER over sin indgang ER1 modtager den tidsmæssigt begrænset inverterede information, er indgangen ER2 forbundet med udgangen A på en tæller ZR. En videreskifteindgang +m 5 på denne tæller ZR er forbundet med mikrodatamaten MC2 med henblik på tilførsel af taktimpulser T, som karakteriserer mikrodatamatkobleværkets enkelte bearbejdningstrin. En tilbagestillingsindgang R på tælleren ZR er endelig forbundet med udgangen på tilbage-10 stillingssignalgiveren RR, således at tilbagestillingssignalet RL kan indstille tælleren ZR i en defineret grundstilling. Endvidere har tælleren ZR en frigiveindgang F, som er forbundet med udgangen A.While the exclusive OR link ER over its input ER1 receives the temporally inverted information, the input ER2 is associated with the output A of a counter ZR. A forward switch input + m 5 on this counter ZR is connected to the microcomputer MC2 for the supply of clock pulses T, which characterize the single processing stage of the microcomputer coupler. Finally, a reset input R of the counter ZR is connected to the output of the reset signal transducer RR, so that the reset signal RL can set the counter ZR to a defined basic position. Furthermore, the counter ZR has a release input F which is connected to the output A.

I denne kobling bevirker tælleren ZR ved exclusiv-15 ELLER-leddet ER, at dette ved begyndelsen af et fast forudgivet antal bearbejdningstrin under mikrodatamatkobleværkets start er virksomt som inverter og efter det forudgivne antal bearbejdningstrin for den fortsatte drift ikke foretager nogen invertering af de over 20 indgangen ER1 tilførte informationer.In this coupling, the counter ZR at the EXCLUSIVE OR OR ER is that at the beginning of a predetermined number of processing steps during the start of the microcomputer switching operation it acts as an inverter and after the predetermined number of processing steps for continued operation does not invert the above 20 the entry ER1 provided information.

Kontrolprogrammer, som er lagret i ikke nærmere viste funktionsgrupper i mikrodatamaten MC2, bevirker nu for tiden for mikrodatamatkobleværkets start, at der for de over ledningen L4 afgivne informationer over 25 det nævnte fast forudgivne antal bearbejdningstrin foretages en invertering, der imidlertid genophæves som følge af exclusiv-ELLER-leddet ER's drift. Således gør den midlertidige værdimæssige ændring af informationen i en kanal sig ikke bemærket ved komparatoren 30 VRn, så længe der ikke foreligger utilladelige startbetingelser i begge mikrodatamater MCI og MC2. Til disse utilladelige startbetingelser hører bl.a. en ens fejlagtig bearbejdningsstart for begge mikrodatamater MCI og MC2 i en utilladelig programdel.Control programs stored in function groups not shown in the microcomputer MC2 are presently leading to the start of the microcomputer switching operation that for the information provided over the line L4 above the stated predetermined number of processing steps, an inversion is performed, which is, however, revoked as a result of exclusive -OR joint is the operation of the ER. Thus, the temporal value change of the information in a channel is not noticed by the comparator 30 VRn, as long as there are no unavoidable starting conditions in both microcomputers MCI and MC2. Among these unacceptable starting conditions include an even erroneous processing start for both microcomputers MCI and MC2 in an inadmissible program part.

35 Hvis nu som følge af en uregelmæssighed ved starten af det tokanalede fail-safe-mikrodatamatkoble-35 If, now, due to an irregularity at the start of the two-channel fail-safe microcomputer connector,

Claims (2)

15 PATENTKRAV15 PATENT REQUIREMENTS 1. Kredsløb til kontrol af den korrekte start af et tokanalet fail-safe-mikrodatamatkobleværk, navnlig til jernbanesikringsanlæg, med mikrodatamater (MCI,1. Circuits for checking the correct start of a two-channel fail-safe microcomputer switchgear, in particular for railway safety systems, with microcomputers (MCI, 20 MC2), som i to kanaler bearbejder de samme informationer, og hvis signaler kontrolleres bit for bit i et antal komparatorer (VR1, VRn), hvorhos der kun ved fuldstændig, vedvarende korrekthed af alle bitpar ikke udløses nogen frakoblingsproces, og hvor der findes 25 lagre for kontrolprogrammer, som i det mindste i tidsrummet for mikrodatamatkobleværkets start anvendes til testformål, kendetegnet ved, at efter mikrodatamatkobleværkets start bliver i det mindste informal tion fra den ene kanal (MC2) inverteret pr. kontrolpro-30 gram over et fast forudgivet antal efter hinanden følgende bearbejdningstrin tilført en komparator (VRn) over en styrbar inverter (ER), og at der findes koblingsmidler (ZR), som ved begyndelsen af det forudgivne antal bearbejdningstrin aktiverer inverteren (ER) og 35 efter det forudgivne antal bearbejdningstrin igen afaktiverer inverteren (ER). DK 163753 B20 MC2), which processes the same information in two channels, and whose signals are checked bit by bit in a number of comparators (VR1, VRn), where no disconnection process is triggered only by complete, continuous correctness of all bit pairs and where 25 storage programs for control programs, which are used for testing purposes at least in the period of start of the microcomputer switchgear, characterized in that after the start of the microcomputer switchgear, at least information from one channel (MC2) is inverted per second. control program over a fixed predetermined number of consecutive processing steps applied to a comparator (VRn) over a controllable inverter (ER), and that there are coupling means (ZR) which, at the beginning of the predetermined number of processing steps, activate the inverter (ER) and 35 after the predetermined number of machining steps again deactivates the inverter (ER). DK 163753 B 2. Kredsløb ifølge krav 1, kendetegnet ved, at der til komparatoren (VRn) som styrbar inverter er knyttet et exclusiv-ELLER-led (ER), hvoraf en indgang (ER2) er forbundet med udgangen på en det forud-5 givne antal bearbejdningstrin bestemmende tæller (ZR), som kan tilkobles ved et for flere koblingsdele i mik-rodatamatkobleværket før starten forhåndenværende til-bagestillingssginal (RL) og videreskiftes af de bearbejdningstrinnene karakteriserende taktimpulser (T).2. A circuit according to claim 1, characterized in that an exclusive OR link (s) of which an input (ER2) is connected to the output of a predetermined number is connected to the comparator (VRn) as a controllable inverter. processing step determining counter (ZR), which can be switched on by one for several switching parts in the microcomputer switching station prior to the start available reset signal (RL) and switched on by the processing steps characterizing clock pulses (T).
DK433084A 1983-09-12 1984-09-11 CIRCUIT FOR CHECKING THE CORRECT START OF A TWO-CHANNEL FAIL-SAFE MICRO-DATA CABLE, NAME FOR RAILWAY INSTALLATION DK163753C (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19833332802 DE3332802A1 (en) 1983-09-12 1983-09-12 CIRCUIT ARRANGEMENT FOR CHECKING THE CORRECT STARTING OF A TWO-CHANNEL FAIL-SAFE MICROCOMPUTER SWITCHGEAR, ESPECIALLY FOR RAILWAY LOCKING SYSTEMS
DE3332802 1983-09-12

Publications (4)

Publication Number Publication Date
DK433084D0 DK433084D0 (en) 1984-09-11
DK433084A DK433084A (en) 1985-03-13
DK163753B true DK163753B (en) 1992-03-30
DK163753C DK163753C (en) 1992-09-07

Family

ID=6208816

Family Applications (1)

Application Number Title Priority Date Filing Date
DK433084A DK163753C (en) 1983-09-12 1984-09-11 CIRCUIT FOR CHECKING THE CORRECT START OF A TWO-CHANNEL FAIL-SAFE MICRO-DATA CABLE, NAME FOR RAILWAY INSTALLATION

Country Status (5)

Country Link
EP (1) EP0148995B1 (en)
AT (1) ATE53135T1 (en)
DE (2) DE3332802A1 (en)
DK (1) DK163753C (en)
ZA (1) ZA847122B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3708055A1 (en) * 1987-03-12 1988-09-22 Siemens Ag SAFETY SWITCHGEAR WITH MULTIPLE MICROCOMPUERS PROCESSING THE SAME DATA
DE59006247D1 (en) * 1990-09-07 1994-07-28 Siemens Ag Device for controlling an electronic signal box organized according to the area computer principle.
EP0653708B1 (en) * 1993-10-15 2000-08-16 Hitachi, Ltd. Logic circuit having error detection function, redundant resource management method, and fault tolerant system using it
RU2536990C1 (en) * 2013-05-22 2014-12-27 Закрытое акционерное общество "НПЦ Устройства безопасности движения" Two-channel system for controlling train movement
RU2642347C1 (en) * 2016-08-31 2018-01-24 Общество с ограниченной ответственностью "Диалог-транс" Method of comparison of controlling signals and device for its realization

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE2612100A1 (en) * 1976-03-22 1977-10-06 Siemens Ag DIGITAL DATA PROCESSING ARRANGEMENT, IN PARTICULAR FOR RAILWAY SAFETY TECHNOLOGY
DE2636352C3 (en) * 1976-08-12 1979-12-20 Kraftwerk Union Ag, 4330 Muelheim Protection system for a nuclear reactor
CA1190307A (en) * 1981-09-14 1985-07-09 Theodore S. Malinowski Watch-dog timer circuit
FR2513409A1 (en) * 1981-09-22 1983-03-25 Alsthom Cgee METHOD FOR SYNCHRONIZING TWO MICROPROCESSORS

Also Published As

Publication number Publication date
DE3482342D1 (en) 1990-06-28
DK433084A (en) 1985-03-13
ATE53135T1 (en) 1990-06-15
EP0148995B1 (en) 1990-05-23
ZA847122B (en) 1985-04-24
DK433084D0 (en) 1984-09-11
EP0148995A3 (en) 1987-09-30
DK163753C (en) 1992-09-07
DE3332802A1 (en) 1985-03-28
EP0148995A2 (en) 1985-07-24

Similar Documents

Publication Publication Date Title
US3829668A (en) Double unit control device
FI70650C (en) DATA SHEET DATABEHANDLINGSANORDNING FOER JAERNVAEGSSAEKERHETSAENDAMAOL
US5222065A (en) Device for generating measuring signals with a plurality of redundantly provided sensors
US4535456A (en) Method of detecting execution errors in program-controlled apparatus
US4517673A (en) Computer-based interlocking system
US4309767A (en) Monitor system for a digital signal
US3810577A (en) Error testing and error localization in a modular data processing system
GB1081812A (en) Data handling system
US3988579A (en) System for testing a data processing unit
NO862510L (en) DIAGNOSTIC CIRCUIT WHICH USES TWO-TEST DATA COMPARISONS.
US4222515A (en) Parallel digital data processing system with automatic fault recognition utilizing sequential comparators having a delay element therein
DK163753B (en) CIRCUIT FOR CHECKING THE CORRECT START OF A TWO-CHANNEL FAIL-SAFE MICRO-DATA CABLE, NAME FOR RAILWAY INSTALLATION
US3992696A (en) Self-checking read and write circuit
DK153605B (en) DEVICE FOR MONITORING OF THE TIMING SIGNALS IN A DIGITAL PLANT
FI98572C (en) Reliable three-computer multi-computer system
US4213188A (en) Apparatus for detecting and correcting errors in arithmetic processing of data represented in the numerical system of residual classes
IE50004B1 (en) Apparatus for monitoring the operation of electronic equipment
EP0110354B1 (en) Detecting improper operation of a digital data processing apparatus
US3273121A (en) Flagging of selected groups of code signals
US10438383B2 (en) Display device
KR0183949B1 (en) Fault detecting device of fault tolerant systems
SU822192A1 (en) Interface testing device
EP0403451A1 (en) A method and arrangement for detecting and localizing errors or faults in a multi-plane unit incorporated in a digital time switch
DK157634B (en) TWO CHANNEL MICRODATA COMPUTER UNIT, NAME FOR RAILWAY SAFETY PLANT
SU1730611A1 (en) Device for identifying binary signals

Legal Events

Date Code Title Description
PBP Patent lapsed