EP3828055B1 - Procédé et système de commande de redondance de données dmi de commande de train - Google Patents

Procédé et système de commande de redondance de données dmi de commande de train Download PDF

Info

Publication number
EP3828055B1
EP3828055B1 EP20785892.9A EP20785892A EP3828055B1 EP 3828055 B1 EP3828055 B1 EP 3828055B1 EP 20785892 A EP20785892 A EP 20785892A EP 3828055 B1 EP3828055 B1 EP 3828055B1
Authority
EP
European Patent Office
Prior art keywords
primary
data
system identifier
standby system
standby
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP20785892.9A
Other languages
German (de)
English (en)
Other versions
EP3828055A1 (fr
EP3828055A4 (fr
Inventor
Zhicheng ZHU
Jianmin Wang
Youbing Zhang
Xiaona YU
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CRSC Research and Design Institute Group Co Ltd
Original Assignee
CRSC Research and Design Institute Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CRSC Research and Design Institute Group Co Ltd filed Critical CRSC Research and Design Institute Group Co Ltd
Priority to RS20221049A priority Critical patent/RS63730B1/sr
Publication of EP3828055A1 publication Critical patent/EP3828055A1/fr
Publication of EP3828055A4 publication Critical patent/EP3828055A4/fr
Application granted granted Critical
Publication of EP3828055B1 publication Critical patent/EP3828055B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0063—Multiple on-board control systems, e.g. "2 out of 3"-systems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0018—Communication with or on the vehicle or train
    • B61L15/0036—Conductor-based, e.g. using CAN-Bus, train-line or optical fibres
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0072—On-board train data handling
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/009—On-board display devices
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0081—On-board diagnosis or maintenance

Definitions

  • the present invention relates to a field of dual-machine hot standby technology, and more particularly to a train control DMI data redundancy control method and system.
  • a data packet between a Driver Machine Interface (DMI) and a vehicle-mounted main control unit is transmitted via a bus.
  • DMI Driver Machine Interface
  • the main control unit as a vehicle-mounted device transmits data to the driver machine interface via the bus; and the driver machine interface also transmits data to the vehicle-mounted main control unit via the bus; wherein, a plurality of corresponding ports may be configured on both the vehicle-mounted main control unit and the driver machine interface as required for interactive data transmission.
  • the existing vehicle-mounted device is a single-system main control unit; the main control unit performs interactive data transmission with the driver machine interface via a bus, and does not have a dual-system hot standby function;
  • FIG. 1 shows a schematic diagram of a communicative connection relationship between the driver machine interface and the vehicle-mounted main control unit in a prior art; the driver machine interface reads data sent by the vehicle-mounted main control unit from a corresponding port via the bus; the driver machine interface processes (e.g., unpack) the read data by applying logic; the driver machine interface simultaneously writes data to be transmitted to a corresponding port on the bus; and the vehicle-mounted main control unit reads the data sent by the driver machine interface from a port on the bus for processing.
  • the vehicle-mounted main control unit has implemented dual-system hot standby, that is, two vehicle-mounted main control units are set up, the two vehicle-mounted main control units respectively serve as a primary system and a standby system, and the two vehicle-mounted main control units are communicatively connected with the driver machine interface, the vehicle-mounted main control units are still in single-system communication with the driver machine interface, that is, a main control unit in use performs interactive data communication with the driver machine interface, while a standby-system main control unit does not carry out data communicative transmission with the driver machine interface at that time; if the main control unit in use fails, the vehicle-mounted device needs to switch to another main control unit, so it is necessary to specifically set up a switching circuit to implement a switching function; and existence of the switching circuit causes reduced switching efficiency and a real-time difference, which is prone to data loss.
  • CN109720379A discloses a switching display method for a train control DMI.
  • the DMI selects the data to display based on a dual-system hot standby.
  • the selection of information is based on a priority of the information of each of the 4 modules and therefore it is implicit that all data is sent simultaneously to the DMI.
  • KR20130013794A discloses a redundant human machine interface device for a railway car.
  • Two independent HMI show information simultaneously to the driver and detect the failure of the other one.
  • In normal operation only the input of the active HMI is enabled.
  • In case there is a failure in the active HMI its input is disconnected and the input of the standby HMI is activated.
  • the present invention provides a train control DMI data redundancy control method as described in the claim 1, as well as some advantageous embodiments as described in its dependent claims.
  • the present invention further proposes a train control DMI data redundancy control system as described in the claim 4, as well as some advantageous embodiments as described in its dependent claims.
  • the driver machine interface simultaneously receives data sent by a first main control unit and a second main control unit, and respectively uses the first main control unit and the second main control unit as the primary system and the standby system according to a first primary-standby system identifier and a second primary-standby system identifier; when the primary system is abnormal, the first primary-standby system identifier and the second primary-standby system identifier change, and the driver machine interface switches the primary system and the standby system after identifying change of the first primary-standby system identifier and the second primary-standby system identifier, without affecting content displayed by the driver machine interface, and without configuring a switching module, which has a simple structure and high switching efficiency.
  • FIGS. 3 , 4 and 5 are not according to the invention and are present for illustration purposes only.
  • a Driver Machine Interface is for use of a train driver, to facilitate the driver to drive the train according to displayed information, and to guide the driver to execute related operations according to a prompt.
  • This embodiment proposes a train control DMI data redundancy control system, comprising two main control units and a driver machine interface; and in this embodiment, the two main control units are respectively referred to as a first main control unit and a second main control unit;
  • One of the first main control unit and the second main control unit serves as a primary system, and the other serves as a standby system;
  • the driver machine interface includes a display module and a storage module; the display module and the storage module are not shown; the display module is configured to display data sent by the primary system to the driver machine interface; the storage module is configured to store data sent by the standby system to the driver machine interface; and the data sent by the standby system to the driver machine interface is not displayed.
  • data sent by a main control unit as the primary system is referred to as primary system data
  • data sent by a main control unit as the standby system is referred to as standby system data.
  • the first main control unit and the second main control unit simultaneously send data to the driver machine interface, wherein, the data sent by the main control unit as the primary system is displayed on the display module, while the data sent by the main control unit as the standby system is stored in the storage module; and the driver machine interface simultaneously feeds back data to the first main control unit and the second main control unit.
  • the driver machine interface has a sink port and a source port; the first main control unit is provided with a sink port and a source port; and the second main control unit is provided with a sink port and a source port.
  • the sink ports and the source ports as described above are all coupled to a train bus; and the train bus may be a multifunctional vehicle bus, or a wire train bus, etc.
  • the sink port of the driver machine interface is communicatively connected with the source port of the first main control unit and the source port of the second main control unit; the source port of the driver machine interface is communicatively connected with the sink port of the first main control unit and the sink port of the second main control unit.
  • the driver machine interface simultaneously sends data to the first main control unit and the second main control unit through the source port, and the sent data is received through the sink port of the first main control unit and the sink port of the second main control unit; the first main control unit and the second main control unit simultaneously send data to the driver machine interface respectively through their own source ports, and the sent data is received by the sink port of the driver machine interface.
  • the first main control unit is provided with a first heartbeat module; the second main control unit is provided with a second heartbeat module; the first heartbeat module is communicatively connected with the driver machine interface through a heartbeat line; and the second heartbeat module is communicatively connected with the driver machine interface through a heartbeat line.
  • the first heartbeat module and the second heartbeat module respectively send first heartbeat data to the driver machine interface, so that the driver machine interface can monitor states of the first main control unit and the second main control unit.
  • the first main control unit is provided with a third heartbeat module; and the second main control unit is provided with a fourth heartbeat module.
  • the third heartbeat module is communicatively connected with the second main control unit through a heartbeat line;
  • the fourth heartbeat module is communicatively connected with the first main control unit through a heartbeat line;
  • the third heartbeat module is configured to send second heartbeat data to the second main control unit, so that the second main control unit can monitor a state of the first main control unit;
  • the fourth heartbeat module is configured to send second heartbeat data to the first main control unit, so that the first main control unit can monitor a state of the second main control unit.
  • This embodiment proposes the train control DMI data redundancy control method, referring to FIG. 3 , in an initial state, the first main control unit and the second main control unit send first heartbeat data to the driver machine interface; if the driver machine interface can receive two sets of first heartbeat data of which heartbeat values are not 0 and the heartbeat values are both normal, it indicates that connections of the driver machine interface with the first main control unit and the second main control unit are normal, and subsequent primary-standby system configuration may be performed. If one or two sets of first heartbeat data are abnormal, it indicates that a connection between the driver machine interface and the first main control unit or the second main control unit is abnormal, and a subsequent process is suspended, at which time, an operator needs to check the device.
  • the driver machine interface receives in real time first data sent by the first main control unit and second data sent by the second main control unit; both the first data and the second data adopt a data packet in a typical producer/consumer mode, as shown in FIG. 4 , a data packet structure includes a primary-standby system identifier, data and a CRC code.
  • a primary-standby system identifier of a data packet of the first data is referred to as a first primary-standby system identifier
  • a primary-standby system identifier of a data packet of the second data is referred to as a second primary-standby system identifier
  • a CRC code of the first data is generated by the first main control unit
  • a CRC code of the second data is generated by the second main control unit
  • the driver machine interface receives in real time the first data sent by the first main control unit; the first data has the first primary-standby system identifier; and the driver machine interface parses the first primary-standby system identifier.
  • a parsing result of the first primary-standby system identifier is represented by 1 or 2; if the parsing result is 1, it indicates that the first main control unit should be used as the primary system at this time; and if the parsing result is 2, it indicates that the first main control unit should be used as the standby system at this time.
  • the driver machine interface receives in real time the second data sent by the second main control unit; the second data has the second primary-standby system identifier; the driver machine interface parses the second primary-standby system identifier; if a parsing result of the second primary-standby system identifier is 1, it indicates that the second main control unit should be used as the primary system at this time; and if the parsing result is 2, it indicates that the second main control unit should be used as the standby system at this time.
  • a parsing result of one of the first primary-standby system identifier and the second primary-standby system identifier is 1, and a parsing result of the other is 2, and a case where the primary-standby system identifiers are both 1 or both 2 will never occur, which ensures that one of the first main control unit and the second main control unit is used as the primary system, and the other is used as the standby system in any case.
  • the driver machine interface judges in real time whether a primary-standby system identifier of a source of currently displayed data is 1; if it is 1, no adjustment is made; and if it is not 1, the standby system is switched to the primary system.
  • the first main control unit and the second main control unit mutually agree on that the first primary-standby system identifier is 1, and the second primary-standby system identifier is 2.
  • the first main control unit serves as the primary system;
  • the second main control unit serves as the standby system;
  • the driver machine interface displays the data sent by the first main control unit, at which time, the data sent by the first main control unit is just the primary system data, and the driver machine interface stores the data of the second main control unit, but does not display the data of the second main control unit, at which time, the data sent by the second main control unit is just the standby system data; in a case of failure, poor state or blocked communication, etc.
  • the first primary-standby system identifier is changed to 2
  • the second primary-standby system identifier is changed to 1
  • the second main control unit is upgraded to the primary system
  • the first main control unit is downgraded to the standby system
  • the driver machine interface displays the data of the second main control unit
  • the driver machine interface stores but does not display the data of the first main control unit, at which time, the data sent by the second main control unit is just the primary system data, and the data sent by the first main control unit is just the standby system data; information displayed by the driver machine interface is not affected by abnormality of the first main control unit; and at this time, the first main control unit needs to be repaired, and the repaired first main control unit continue to serve as the standby system.
  • the driver machine interface receives in real time the data transmitted by the primary system, and the driver machine interface will not have the displayed content affected when switching the primary-standby systems; as compared with the technical solution in the prior art that a structure such as a switch needs to be configured, the data redundancy method according to this embodiment does not need an additional hardware structure configured, rendering higher switching efficiency of the primary-standby systems.
  • the driver machine interface sets valid identifiers of the first data and the second data to true; in order to ensure accuracy and integrity of data transmission, the first data and the second data transmitted are checked.
  • Cyclic Redundancy Check (CRC) is adopted; the CRC code in the rear of the data packet of the first data is calculated by the first main control unit, and the CRC code in the rear of the data packet of the second data is calculated by the second main control unit; when receiving the first data and the second data, the driver machine interface re-calculates the CRC code, and compares a calculation result with the actually received CRC code; if the two CRC codes are equal, there is no transmission error; and if the CRC codes are not equal, there is a transmission error.
  • CRC Cyclic Redundancy Check
  • the driver machine interface If there is no error during transmission of the first data and the second data, then the driver machine interface is respectively connected with the primary-standby systems, and the driver machine interface displays the content transmitted by the primary system; and if there is an error during transmission of the first data or the second data, the data transmission is stopped to check the device.
  • the driver machine interface needs to judge in real time whether a state of a current primary system is normal, to ensure that the standby system can be timely upgraded to the primary system when the primary system is abnormal.
  • the driver machine interface receives in real time the first heartbeat data sent by the primary system; the driver machine interface judges the state of the primary system based on the first heartbeat data of the primary system, a first heartbeat data state synchronously changing with a primary system data state, and dynamically changes the first primary-standby system identifier and the second primary-standby system identifier based on a judgment result.
  • the standby system may send the first heartbeat data to the driver machine interface, or may not send the first heartbeat data; if the standby system sends the first heartbeat data to the driver machine interface, the driver machine interface simultaneously monitors states of the primary-standby systems.
  • the first main control unit is the primary system
  • the second main control unit is the standby system
  • the first primary-standby system identifier is 1
  • the second primary-standby system identifier is changed to 2
  • the first main control unit regularly sends the first heartbeat data to the driver machine interface.
  • the first main control unit sends, in a unit of 100 ms, a local state, including a normal state and an error state; when the driver machine interface receives error information of the first main control unit, or fails to receive the first heartbeat data for 5 consecutive times, the driver machine interface changes the first primary-standby system identifier to 2, and changes the second primary-standby system identifier to 1; after the primary-standby system identifiers are changed, the driver machine interface displays the second data sent by the second main control unit, stores the first data sent by the first main control unit, downgrades the first main control unit to the standby system, and upgrades the second main control unit to the primary system, so as to implement switch between the primary-standby systems.
  • the standby system receives in real time the second heartbeat data sent by the primary system, the standby system judges the state of the primary system based on the second heartbeat data, and dynamically changes the first primary-standby system identifier and the second primary-standby system identifier based on a judgment result; if the second heartbeat data is normal, the primary-standby systems are maintained in the current state; if the second heartbeat data is abnormal, the first primary-standby system identifier and the second primary-standby system identifier are changed, the standby system is upgraded to the primary system, and the primary system is downgraded to the standby system.
  • the first main control unit is the primary system
  • the second main control unit is the standby system
  • the first primary-standby system identifier is 1
  • the second primary-standby system identifier is changed to 2
  • the first main control unit regularly sends the second heartbeat data to the second main control unit.
  • the first main control unit sends, in a unit of 100 ms, a local state, including a normal state and an error state; when the second main control unit receives error information of the first main control unit, or fails to receive the second heartbeat data for 5 consecutive times, the second main control unit feeds back information to the first main control unit, the driver machine interface changes the first primary-standby system identifier to 2, changes the second primary-standby system identifier to 1, downgrades the first main control unit to the standby system, and upgrades the second main control unit to the primary system, so as to implement switch between the primary-standby systems.
  • the data redundancy system may simultaneously adopt the above-described two design solutions for monitoring the states of the primary-standby systems, so as to ensure that the abnormal state of the primary system can be timely monitored, so that the primary-standby systems can be switched in time, to further ensure that the content displayed by the driver machine interface is not affected.
  • the first data and the second data are not set with primary-standby system identifiers; the driver machine interface receives third heartbeat data sent by the primary system; and a third heartbeat data state changes synchronously with the primary system data state;
  • the driver machine interface judges whether the third heartbeat data is normal, and executes, based on a judgment result, steps of:
  • driver machine interface judges that the third heartbeat data is normal, maintaining the primary-standby systems unchanged
  • driver machine interface judges that the third heartbeat data is abnormal, changing the primary system data to the standby system data, and changing the standby system data to the primary system data.
  • the first main control unit in the current state, is the primary system, the second main control unit is the standby system, and the first main control unit regularly sends the third heartbeat data to the driver machine interface.
  • the first main control unit sends, in a unit of 100 ms, a local state, including a normal state and an error state; when the driver machine interface monitors that the third heartbeat data is abnormal, the driver machine interface no longer displays the data sent by the first main control unit, but instead displays the data sent by the second main control unit, downgrades the first main control unit to the standby system, and upgrades the second main control unit to the primary system, so as to implement switch between the primary-standby systems.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Hardware Redundancy (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)

Claims (6)

  1. Procédé de commande de redondance de données DMI de commande de train,
    ladite DMI recevant et traitant simultanément deux ensembles de données, lesdits deux ensembles de données présentant une relation principale-de secours mutuelle ; ladite DMI évaluant la relation principale-de secours sur la base d'un résultat d'analyse des données ; caractérisé en ce que
    le résultat d'analyse comprend un identifiant du système principal-de secours, l'identifiant du système principal-de secours étant dynamiquement modifié sur la base d'un état de données ;
    ladite DMI évaluant si l'identifiant du système principal-de secours est un identifiant du système principal ou un identifiant du système de secours ;
    ladite DMI affichant des données comportant l'identifiant du système principal, et ladite DMI stockant des données comportant l'identifiant du système de secours.
  2. Procédé de commande de redondance de données DMI de commande de train selon la revendication 1,
    ledit identifiant du système principal-de secours qui est modifié dynamiquement sur la base d'un état de données comprenant :
    la réception, par la DMI, de premières données de rythme cardiaque envoyées par un système principal, un premier état de données de rythme cardiaque changeant de manière synchrone avec un état de données de système principal ;
    l'évaluation, par la DMI, pour savoir si les premières données de rythme cardiaque sont normales, et l'exécution, sur la base d'un résultat d'évaluation, des étapes :
    si la DMI évalue que les premières données de rythme cardiaque sont normales, de maintien de l'identifiant du système principal-de secours inchangé ;
    si la DMI évalue que les premières données de rythme cardiaque sont anormales, de remplacement de l'identifiant du système principal par l'identifiant du système de secours et de remplacement de l'identifiant du système de secours par l'identifiant du système principal.
  3. Procédé de commande de redondance de données DMI de commande de train selon la revendication 1,
    ledit identifiant du système principal-de secours qui est modifié dynamiquement sur la base d'un état de données, comprenant :
    la réception, par le système de secours, de secondes données de rythme cardiaque envoyées par le système principal, un second état de données de rythme cardiaque changeant de manière synchrone avec l'état des données du système principal ;
    l'évaluation, par le système de secours, pour savoir si les secondes données de rythme cardiaque sont normales, et l'exécution, sur la base d'un résultat d'évaluation, des étapes :
    si le système de secours évalue que les secondes données de rythme cardiaque sont normales, de maintien de l'identifiant du système principal-de secours inchangé ;
    si le système de secours évalue que les secondes données de rythme cardiaque sont anormales, de remplacement de l'identifiant du système principal par l'identifiant du système de secours et de remplacement de l'identifiant du système de secours par l'identifiant du système principal.
  4. Système de commande de redondance de données DMI de commande de train, comprenant :
    deux unités de commande principales, configurées pour envoyer respectivement des données à la DMI, les deux ensembles de données étant dans une relation principale-de secours mutuelle ; et
    la DMI, configurée pour recevoir et traiter simultanément les deux ensembles de données dans une relation principale-de secours mutuelle, et évaluer la relation principale-de secours sur la base d'un résultat d'analyse des données ;
    caractérisé en ce que
    le résultat d'analyse comprend un identifiant du système principal-de secours, l'identifiant du système principal-de secours étant dynamiquement modifié sur la base d'un état de données ;
    la DMI est configurée pour évaluer si l'identifiant du système principal-de secours est un identifiant du système principal ou un identifiant du système de secours ;
    la DMI est configurée pour afficher des données comportant l'identifiant du système principal, et stocker des données comportant l'identifiant du système de secours.
  5. Système de commande de redondance de données DMI de commande de train selon la revendication 4, ledit identifiant du système principal-de secours qui est modifié dynamiquement sur la base d'un état de données, comprenant :
    la DMI est configurée pour recevoir des premières données de rythme cardiaque envoyées par une unité de commande principale en tant que système principal, un premier état de données de rythme cardiaque changeant de manière synchrone avec un état de données de système principal ;
    la DMI est configurée pour évaluer si les premières données de rythme cardiaque sont normales, et exécuter, sur la base d'un résultat d'évaluation, les étapes :
    si la DMI évalue que les premières données de rythme cardiaque sont normales, de maintien de l'identifiant du système principal-de secours inchangé ;
    si la DMI évalue que les premières données de rythme cardiaque sont anormales, de remplacement de l'identifiant du système principal par l'identifiant du système de secours et de remplacement de l'identifiant du système de secours par l'identifiant du système principal.
  6. Système de commande de redondance de données DMI de commande de train selon la revendication 4, ledit identifiant du système principal-de secours qui est modifié dynamiquement sur la base d'un état de données, comprenant :
    une unité de commande principale en tant que système de secours est configurée pour recevoir des secondes données de rythme cardiaque envoyées par une unité de commande principale en tant que système principal, un second état de données de rythme cardiaque changeant de manière synchrone avec l'état des données du système principal ;
    le système de secours est configuré pour évaluer si les secondes données de rythme cardiaque sont normales, et exécuter, sur la base d'un résultat d'évaluation, les étapes :
    si le système de secours évalue que les secondes données de rythme cardiaque sont normales, de maintien de l'identifiant du système principal-de secours inchangé ;
    si le système de secours évalue que les secondes données de rythme cardiaque sont anormales, de remplacement de l'identifiant du système principal par l'identifiant du système de secours et de remplacement de l'identifiant du système de secours par l'identifiant du système principal.
EP20785892.9A 2019-10-17 2020-08-11 Procédé et système de commande de redondance de données dmi de commande de train Active EP3828055B1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
RS20221049A RS63730B1 (sr) 2019-10-17 2020-08-11 Postupak i sistem za kontrolu redundantnosti dmi podataka upravljanja vozom

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910988880.0A CN110789569B (zh) 2019-10-17 2019-10-17 一种列控dmi数据冗余控制方法和系统
PCT/CN2020/108331 WO2021073221A1 (fr) 2019-10-17 2020-08-11 Procédé et système de commande de redondance de données dmi de commande de train

Publications (3)

Publication Number Publication Date
EP3828055A1 EP3828055A1 (fr) 2021-06-02
EP3828055A4 EP3828055A4 (fr) 2021-08-25
EP3828055B1 true EP3828055B1 (fr) 2022-09-28

Family

ID=69439325

Family Applications (1)

Application Number Title Priority Date Filing Date
EP20785892.9A Active EP3828055B1 (fr) 2019-10-17 2020-08-11 Procédé et système de commande de redondance de données dmi de commande de train

Country Status (6)

Country Link
EP (1) EP3828055B1 (fr)
CN (1) CN110789569B (fr)
EA (1) EA202092375A1 (fr)
HU (1) HUE060600T2 (fr)
RS (1) RS63730B1 (fr)
WO (1) WO2021073221A1 (fr)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110789569B (zh) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 一种列控dmi数据冗余控制方法和系统
DE102020105794B4 (de) * 2020-03-04 2022-02-03 Infineon Technologies Ag Vorrichtung, Steuerung für eine Vorrichtung und Verfahren zur Kommunikation
CN112249092A (zh) * 2020-10-30 2021-01-22 株洲中车时代电气股份有限公司 一种操纵台交互系统
CN112706801B (zh) * 2021-01-28 2023-07-11 苏州长风航空电子有限公司 列车网络信息的控制方法和控制系统
CN113568301B (zh) * 2021-09-26 2022-01-14 浙江中控技术股份有限公司 热备冗余方法及控制系统
CN114348049B (zh) * 2022-01-06 2024-01-19 北京全路通信信号研究设计院集团有限公司 一种ctcs列控系统多电台冗余控制方法及装置

Family Cites Families (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3911907A1 (de) * 1989-04-12 1990-10-18 Standard Elektrik Lorenz Ag Verfahren zur staendigen pruefung einer signaltechnisch sicheren bildschirmdarstellung
CN101277269A (zh) * 2008-05-06 2008-10-01 杭州华三通信技术有限公司 实现可靠通信的终端、终端切换方法及系统和适用该系统的方法
CN201321058Y (zh) * 2008-12-19 2009-10-07 中国铁道科学研究院通信信号研究所 列控车载设备的人机界面装置及列控车载设备
CN101890971B (zh) * 2009-05-18 2013-01-23 华为技术有限公司 一种列车运行控制方法、设备和系统
DE102009025550A1 (de) * 2009-06-15 2010-12-16 Siemens Aktiengesellschaft Verfahren zur Zugdateneingabe bei einer Mehrsystemkonfiguration zur Zugsicherung und Mehrsystemkonfiguration
CN101923739B (zh) * 2010-08-19 2012-09-05 北京航空航天大学 飞行器发动机参数和空勤信息综合显示系统及其构建方法
KR101275027B1 (ko) * 2011-07-29 2013-06-17 현대로템 주식회사 철도차량용 이중화 인간기계인터페이스 장치
CN102497429B (zh) * 2011-12-13 2014-08-06 南京恩瑞特实业有限公司 轨道交通中车地数据传输多重冗余处理方法
CN103019218B (zh) * 2012-12-26 2014-08-20 北京国铁路阳技术有限公司 采用双cpu冗余技术的铁路信号装置及其控制方法
US9497099B2 (en) * 2013-12-16 2016-11-15 Artesyn Embedded Computing, Inc. Voting architecture for safety and mission critical systems
CN103780365B (zh) * 2014-01-26 2017-03-29 中国神华能源股份有限公司 动态的多链路冗余数据传输方法
CN105790825B (zh) * 2014-12-25 2020-08-14 中兴通讯股份有限公司 一种分布式保护中控制器热备份的方法和装置
CN105187248B (zh) * 2015-09-16 2018-10-23 浙江众合科技股份有限公司 一种冗余切换系统
CN205186191U (zh) * 2015-10-10 2016-04-27 河南思维自动化设备股份有限公司 一种列车运行监控系统
CN105471622B (zh) * 2015-11-12 2019-03-01 武汉噢易云计算股份有限公司 一种基于Galera的控制节点主备切换的高可用方法及系统
CN105450446A (zh) * 2015-11-17 2016-03-30 绵阳市维博电子有限责任公司 一种双机热备份系统及仲裁切换方法
CN105539522A (zh) * 2015-12-21 2016-05-04 株洲南车时代电气股份有限公司 一种基于二乘二取二安全计算机架构的列车运行监控装置及用于该列车运行监控装置的方法
CN206193530U (zh) * 2016-10-28 2017-05-24 上海恒锦动力科技有限公司 一种柴油发电机组双冗余监控系统
CN108092752B (zh) * 2017-11-14 2020-10-23 北京全路通信信号研究设计院集团有限公司 一种基于列车运行控制系统的主控单元热备份方法及装置
CN109218096A (zh) * 2018-09-19 2019-01-15 新智能源系统控制有限责任公司 一种基于主备冗余的scada实时库访问系统
CN109306875B (zh) * 2018-09-25 2021-02-09 中国船舶重工集团公司第七0三研究所 一种汽轮机deh双控制器同步热备冗余切换装置及方法
CN109367578A (zh) * 2018-09-28 2019-02-22 卡斯柯信号有限公司 一种适用于itcs车载设备的人机交互系统及方法
CN208861155U (zh) * 2018-10-29 2019-05-14 北京交大思诺科技股份有限公司 热备冗余显示器
CN109649446B (zh) * 2018-12-21 2024-05-31 中国铁道科学研究院集团有限公司通信信号研究所 一种多重冗余网络化的计算机联锁人机交互系统
CN109720379B (zh) * 2018-12-31 2021-04-27 河南思维自动化设备股份有限公司 列控系统和列控系统四模切换显示方法
CN109739694A (zh) * 2019-01-03 2019-05-10 中国兵器装备集团自动化研究所 一种双机仲裁切换系统及方法
CN109823375A (zh) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 一种应用于列车自动运行系统的双系热备切换方法及系统
CN109946956B (zh) * 2019-03-27 2020-11-24 北京全路通信信号研究设计院集团有限公司 一种设备主备系同步和热备方法
CN110789569B (zh) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 一种列控dmi数据冗余控制方法和系统

Also Published As

Publication number Publication date
EP3828055A1 (fr) 2021-06-02
HUE060600T2 (hu) 2023-03-28
EP3828055A4 (fr) 2021-08-25
CN110789569B (zh) 2022-04-22
WO2021073221A1 (fr) 2021-04-22
EA202092375A1 (ru) 2021-08-02
RS63730B1 (sr) 2022-12-30
CN110789569A (zh) 2020-02-14

Similar Documents

Publication Publication Date Title
EP3828055B1 (fr) Procédé et système de commande de redondance de données dmi de commande de train
CN101694588B (zh) 一种二乘二取二主备控制切换系统和方法
JPH10161735A (ja) 重装備の分散制御システム
CN107070731B (zh) 一种主从仲裁方法及系统
CN108551397A (zh) 网桥装置及应用以及多plc主站与多plc从站的通信控制方法
CN103941625B (zh) Can总线数据传输监控系统
CN108255123B (zh) 基于三取二软硬件表决的列车lcu控制设备
CN104781792B (zh) 判断在工业控制系统中的故障的冗余设备单元和方法，工业控制系统和包括冗余设备单元的工业系统
US20140188253A1 (en) Method and system for reprogramming
CN102687122A (zh) 自动化系统和自动化系统的操作方法
KR100448709B1 (ko) 데이터 버스 시스템 및 그 제어방법
US10659536B2 (en) Method of controlling inverters
US20150234769A1 (en) Backplane bus structure of communication system and board recognition method using same
US9003067B2 (en) Network and method for operating the network
CN113348649B (zh) 致动执行单元的方法以及对应设置的系统
CN109649446B (zh) 一种多重冗余网络化的计算机联锁人机交互系统
CN109460326B (zh) 一种分布式显示方法、系统、设备及计算机可读存储介质
CN112650168A (zh) 分布式控制系统及其动态调度资源的方法
US20240054093A1 (en) Method for performing data transmission
CN112769603B (zh) 带外管理切换装置、方法、服务器
CN110035007A (zh) 数据传输方法及系统、存储介质、电子装置
JP2000250770A (ja) 多重化計装システム
CN112487749B (zh) 一种基于单片机的Profibus-DP和Modbus集成化从站装置
JPS63131693A (ja) 遠方監視制御装置の信号伝送装置
CN113619647B (zh) 车载显示装置和列车

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20201014

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

A4 Supplementary search report drawn up and despatched

Effective date: 20210728

RIC1 Information provided on ipc code assigned before grant

Ipc: B61L 15/00 20060101AFI20210722BHEP

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
INTG Intention to grant announced

Effective date: 20220520

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602020005400

Country of ref document: DE

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1521075

Country of ref document: AT

Kind code of ref document: T

Effective date: 20221015

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: RO

Ref legal event code: EPE

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG9D

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20221228

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20220928

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20221229

REG Reference to a national code

Ref country code: HU

Ref legal event code: AG4A

Ref document number: E060600

Country of ref document: HU

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20230130

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20230128

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602020005400

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20230629

REG Reference to a national code

Ref country code: AT

Ref legal event code: UEP

Ref document number: 1521075

Country of ref document: AT

Kind code of ref document: T

Effective date: 20220928

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: RO

Payment date: 20230802

Year of fee payment: 4

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: SE

Payment date: 20230811

Year of fee payment: 4

Ref country code: RS

Payment date: 20230809

Year of fee payment: 4

Ref country code: HU

Payment date: 20230803

Year of fee payment: 4

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230811

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230811

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230831

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20230831

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220928

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230811

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230811

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230831

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20240819

Year of fee payment: 5

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20240802

Year of fee payment: 5