JP2011000981A - Atc transmitter - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an ATC transmitter, which improves operation frequency of a CPU while securing safety.SOLUTION: The ATC transmitter includes at least two sets of CPU and memory; a comparator 13 which compares an arithmetic result of each CPU; a D/A 14 which converts signals computed by CPUs 11A and 11B; and a power amplifier 19. The transmitter is connected to a host device in which the safety of the operation result is secured by a network. In a process in which each CPU which receives an ATC aspect telegram computed by the host device generates an ATC signal according to the aspect, setting data of carrier wave frequency and signal wave frequency for ATC signal and ATC signal wave data discretely formed by modulation processing of carrier wave and signal wave are mutually compared by the comparator 13. When the both are matched as a result of comparison, the ATC signal is output to a track circuit through the D/A and a power amplifier, and when the both are mismatched, output of the ATC signal is stopped.

Description

  The present invention relates to an ATC (Automatic Train Control) transmitter of a railway control security system.

  The ATC system, which is a railway security device, detects a train using a track circuit (rail) and a loop coil, and transmits the speed limit information and stop target track position (ATC signal) in the section (track) to the train. This system guarantees safe operation by preventing train derailments and collisions.

  Therefore, the system is required to have high safety, and must be a system capable of fail-safe operation / highly safe operation when a hardware constituting the system fails. The current ATC system has two configurations: an analog ATC system whose signal is analog information and a digital ATC system whose signal is digital information. Here, a typical configuration example of both systems is shown.

  FIG. 2 shows a typical configuration example of a digital ATC system that has been put into practical use in recent years. 21 is an ATC logic unit, 22 is an ATC transmitter, 23 is a protector, 24 is a rail (track circuit), 25 is an on-vehicle reception control unit, and 26 is an ATC-LAN. The ATC logic unit 21 is a control device configured in a duplex system or a triple system, and the safety and validity of all information processed and transmitted / received therein are guaranteed. A digital ATC telegram, which is control information including the stop target track circuit etc. for the train, is generated here, and predetermined control data (destination track circuit information, serial number or time stamp information indicating continuity / newness of control, transmission) (Cyclic redundancy code information for determining the presence or absence of an error) is output to the ATC-LAN 26 together.

  The ATC transmitter 22 receives the ATC telegram transmitted from the ATC-LAN to itself, converts the telegram to an analog waveform by a predetermined modulation method, and outputs the analog waveform to the rail 24 via the protector 23. On the other hand, the on-vehicle reception control unit 25 is a control device configured by a duplex system or a triple system, and the safety and validity of all information processed and transmitted / received here is guaranteed.

  The on-vehicle reception control unit receives the ATC signal flowing through the rail in an electromagnetic induction manner via a power receiver (not shown), demodulates the ATC number based on a predetermined modulation method, and obtains the obtained ATC message data. Check the predetermined control data (destination track circuit information, serial number or time stamp information indicating continuity / newness of control, cyclic redundant code information for determining whether there is a transmission error), and determine the validity. If there is no problem in the determination result, the ATC telegram is adopted for train control.

  As described above, in the digital ATC system, the ATC logic unit and the on-board reception control unit guarantee the safety and validity of the information processed by the ATC logic unit and the on-board reception control unit, thereby transmitting and receiving ATC messages and messages. Since the validity of the content is checked, a general-purpose device that does not require safety can be applied to the ATC-LAN, ATC transmitter, and protector, which are ATC message transmission paths.

Next, the analog ATC system will be described with reference to FIG.
Similar to the description of the digital ATC system, all information processed / transmitted / received by the ATC logic unit 21 is guaranteed to be safe and valid. Analog ATC telegrams, which are control information including speed limits for trains, are generated here, and predetermined control data (destination track circuit information, serial number or time stamp information indicating continuity / update of control, transmission error, etc.) (Cyclic redundancy code information for determining presence / absence) is output to the ATC-LAN together.

  The ATC transmitter 22 receives the ATC message transmitted from the ATC-LAN to itself, and receives predetermined control data (destination track circuit information, serial number or time stamp information indicating continuity / update of control, transmission error) The cyclic redundancy code information for determining the presence or absence of the signal is checked to determine its validity, and an analog waveform of the frequency indicated by the telegram is generated by a predetermined modulation method and output to the rail 24 via the protector 23 To do.

  On the other hand, the safety and legitimacy of all information processed / transmitted / received by the on-vehicle reception control unit 25 are guaranteed, and the on-vehicle reception control unit transmits the ATC signal flowing on the rail via a power receiver (not shown). The ATC signal is demodulated based on a predetermined modulation method, the frequency of the obtained ATC signal is checked to determine the validity, and if there is no problem in the determination result, the ATC signal is train-controlled. To adopt.

  As described above, in the analog ATC system, the ATC signal after being modulated by a predetermined method contains only analog information (frequency information) and the amount of information is small. It is impossible to determine the safety / validity of the ATC signal, that is, the validity of the received track circuit, the continuity of the control, and the latest / validity of the control. Therefore, it is necessary that the ATC transmitter as the last device capable of grasping the ATC message before the modulation determines the safety / validity of the message, modulates without error, and generates an ATC signal in which safety is guaranteed.

  In order to ensure the safety and validity of the ATC signal, (1) to guarantee the safety of the ATC signal display generation process, specifically, the hardware for performing the display generation is a multiplex system. (2) Whether a sensor is provided in the transmission path of the ATC signal that has been generated and output, and the sensor output signal is demodulated and modulated at a predetermined frequency. The idea of checking this has been taken.

  As a concrete means for realizing the above (1), a bus verification type processing device described in Patent Document 1 shown in FIG. 3 is known, followed by a modulation processing unit, D / A unit, analog circuit unit, amplification. Is provided.

  As a specific means for realizing the above (2), a failure detection device for a track circuit transmitter described in Patent Document 2 shown in FIG. 4 is known, and a voltage detection circuit 21 and a current are connected to an output transmission path of the transmitter 10. A configuration including a detection circuit 22, filters 23a and 23b and rectifiers 24a and 24b for detecting and demodulating signals at each circuit output unit is disclosed.

JP-A-7-302207 Japanese Patent Laid-Open No. 3-611166

In this way, in the conventional analog ATC system, the ATC transmitter is a bus verification type dual CPU device, and a voltage / current detection circuit is provided in the signal output, and the signal obtained therefrom is detected and demodulated. A measure was taken to check the validity of the obtained frequency. As a result, the following problems occur.
(1) In the bus verification type CPU device, since the input / output data of the CPUs of each system is always compared by the comparator, the CPU operating frequency cannot be increased depending on the performance of the comparator.
(2) In the detection / demodulation part of the output signal of the voltage / current detection circuit, it is necessary to distinguish signals with a small frequency at intervals of several Hz from the beginning. There is a possibility that the on-board controller may operate based on incorrect information during the time period.

  On the other hand, in an analog ATC system, a signal obtained by modulating a carrier frequency with a signal wave frequency is used. At this time, the carrier frequency is assigned a unique value to the uplink / downlink of the target route, and the signal wave frequency is discretely assigned as many specific frequencies as are necessary for the display.

  In the on-board device, the carrier frequency and the signal wave frequency are demodulated and detected from the received ATC signal, and when each frequency is a value not assigned to the target route, the section is regarded as no signal. Judgment is performed and train stop control is performed, and a safe operation is performed. On the other hand, if the signal wave frequency becomes another value that should not be displayed in the section due to some failure of the ATC transmitter, normal demodulation / detection is performed by the on-board device, and the wrong train Since the control is performed, a dangerous operation is performed.

  That is, the ATC transmitter only needs to generate an ATC signal of the current signal frequency without error, and generating a signal of a frequency that does not match any of the current signals is a safe operation. It becomes the operation which is done. And, it is not the failure of analog circuits and modulation processing after D / A that the signal frequency to be shown as described above is wrong, but the failure of a specific part that indicates the frequency of the ATC signal in the digital circuits such as CPU and memory. This is the case.

  Based on the above background, an object of the present invention is to provide an ATC transmitter that improves the operating frequency of a CPU while ensuring safety.

  An ATC transmitter according to the present invention is an ATC transmitter that receives an ATC presenting message from a higher-order device that guarantees the safety of a calculation result via a network, and transmits an ATC signal according to the present from the ATC presenting message. At least two sets of CPU and memory to be generated, D / A for converting the signal calculated by the CPU into an analog signal, a power amplifier for amplifying the signal from the D / A, and calculation by each set of CPUs A comparator that compares the carrier frequency of the ATC signal and the setting data of the signal wave frequency with the ATC signal wave data discretely generated by the modulation processing of the carrier wave and the signal wave. The ATC signal is output to the track circuit via the D / A and the power amplifier, and the output of the ATC signal is stopped when the comparison does not match. To.

  Further, each CPU in the ATC transmitter performs a validity check on the ATC indication message received from the host device, and the check result is compared by the comparator. The ATC signal is output to the track circuit through the D / A and the power amplifier, and the output of the ATC signal is stopped when the comparison does not match.

  Further, intentional mismatch data is periodically input to the comparator as a test pattern, and when the comparator itself is normal, the comparison match signal output is an alternating signal that repeats 'H' and 'L'. It is characterized by.

  The ATC transmitter according to the present invention can improve the operating frequency of the CPU while ensuring safety.

FIG. 1 shows an ATC transmitter according to the present invention. FIG. 2 is a configuration diagram of a conventional ATC system. FIG. 3 is a configuration diagram of an ATC transmitter in a conventional ATC system. FIG. 4 is a configuration diagram of an ATC transmitter in another conventional ATC system.

Hereinafter, specific embodiments will be described with reference to the drawings.
FIG. 1 is a configuration diagram of an ATC transmitter to which the present invention is applied in an analog ATC system. In FIG. 1, 11A and 11B are CPUs, 12A and 12B are memories, 13 is a comparator, 14 is D / A, 15A and 15B are A / D, 16 is a communication controller, 19 is PA, and 20 is a relay. Yes.

  The CPU 11A and the memory 12A are connected to the A system bus 17A, the CPU 11B and the memory 12B are connected to the B system bus 17B, and the A system / B system bus is connected to the comparator 13. The comparator 13 also functions as a bus bridge, and the A bus and the B bus are connected to the common bus 18 as outputs. D / A 14 and A / D 15A are connected to the A system bus 17A, and A / D 15B is connected to the B system bus 17B. The communication controller 16 is connected to the common bus 18.

  The communication controller 16 is connected to an ATC-LAN (not shown), and receives an ATC message created and transmitted by an ATC logic unit that is a higher-level device of the ATC transmitter.

  The received ATC message data is taken into the CPU, 11A / 11B, and memories 12A / 12B via the comparator 13. The CPU 11A / 11B uses predetermined control data (transmission destination track circuit information, serial number or time stamp information indicating continuity / newness of control, cyclic redundancy code for determining presence / absence of transmission error from the captured ATC message data. Information) and check its validity. Then, the check result is written in the comparator 13. Further, the carrier frequency and signal wave frequency information are extracted from the present information of the ATC message data and written to the comparator 13.

  Next, modulation processing is performed according to a predetermined modulation method. At this time, the CPUs 11A and 11B calculate the instantaneous value of the ATC signal wave to be output next by a predetermined algorithm based on the carrier frequency information and the signal wave frequency information, and write the calculation result to the comparator 13. Thereafter, appropriate filter processing is performed to obtain final processing result data, and this data is also written to the comparator 13. Then, only the CPU 11A writes the data of the final processing result to the D / A 14, and outputs an ATC signal.

  The ATC signal output from the D / A 14 is amplified by the power amplifier 19 and then output to the track circuit via the protector. Further, each feedback signal is taken in from the A / D 15A / 15B from the output voltage / output current sensor of the power amplifier 19, and the level and frequency of the output signal of the power amplifier 19 are monitored and output control is performed.

  On the other hand, a mechanism for generating intentional mismatch data is mounted inside the comparator 13, and the mismatch data is output to the comparator at a constant period. If the comparator is normal, the output indicates “mismatch” when mismatch data is input, and “match” when other data is input. For example, “mismatch” indicates logical value “H” and “match” indicates logic. When the value is “L”, an alternating signal that repeats “H” L ”is output.

  The relay unit 20 is driven by a signal obtained by rectifying the alternating signal. When the alternating signal is stopped, that is, fixed to 'H' or fixed to 'L', the relay 20 falls.

  In the above description, the data written to the comparator 13 by the CPUs 11A and 11B are all compared by the comparator 13, and if the comparison does not match, the output signal of the comparator is fixed to 'L'. Thus, the relay 20 is dropped, the output of the power amplifier 19 is cut off from the track circuit, and the output of the ATC signal is stopped. Therefore, an ATC signal that gives an incorrect indication is not output, and safe train control is possible.

  Embodiments of the present invention are not limited to the above. For example, a TD signal (train detection signal) transmitter / receiver can also be used as an ATC transmitter. Since it is not a bus verification type, it is possible to increase the processing capacity and operating frequency of the CPU, and it is possible to implement a plurality of signal processing with a single CPU, which is safe. Even if the A / D for TD reception is connected to the A system bus and the B system bus to improve the performance, the A / D read operation can be performed independently in each system, so the bus verification It is possible to shorten the processing time than the mold.

  The ATC transmitter according to the present embodiment does not have a bus collation type structure, the ATC signal carrier wave and signal wave frequency setting data, and ATC signal wave data generated discretely by the modulation processing of the carrier wave and the signal wave. By the comparator, when the comparison is coincident, the ATC signal is output to the track circuit via the D / A and the power amplifier, and when the comparison is not coincident, the ATC signal output is stopped, The CPU operating frequency and ATC transmitter performance can be improved while ensuring safety. Furthermore, since intentional discrepancy data is periodically input to the comparator, the health of the comparator itself is diagnosed, thereby improving safety.

  The ATC transmitter of the present invention is mainly applied to a railway control security system (ATC system).

11A CPU
11B CPU
12A memory 12B memory 13 comparator 14 D / A
15A A / D
15B A / D
16 Communication controller 19 Power amplifier

Claims (3)

An ATC transmitter that receives an ATC indication message from a host device that guarantees the safety of operation results via a network,
At least two sets of CPU and memory for generating an ATC signal according to the indication from the ATC indication telegram,
D / A for converting the signal calculated by the CPU into an analog signal;
A power amplifier for amplifying a signal from the D / A;
A comparator that compares the carrier frequency and signal wave frequency setting data of the ATC signal calculated by each set of CPUs with ATC signal wave data discretely generated by modulation processing of the carrier wave and the signal wave. And comprising
An ATC transmission that outputs an ATC signal to the track circuit via the D / A and the power amplifier when the comparison coincides, and stops outputting the ATC signal when the comparison does not coincide. vessel. The ATC transmitter according to claim 1.
Each set of CPUs performs a validity check on the ATC indication message received from the host device, and the comparator compares the validity check results,
If the comparison coincides, the ATC signal is output to the track circuit via the D / A and the power amplifier,
An ATC transmitter characterized by stopping output of an ATC signal in case of comparison mismatch. The ATC transmitter according to claim 1.
In the comparator, intentional discrepancy data is periodically input as a test pattern,
When the comparator is normal, the comparison match signal output is an alternating signal,
An ATC transmitter characterized in that the comparison coincidence signal output is a constant signal when the comparator is faulty or the calculation results of the CPU are inconsistent.

Images