JP2013088826A - Data input method in redundant system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize a method for distributing the same input data to an active system and a standby system in a redundantly configurated signal protective device by a hot standby system in which each of the active system and the standby system comprises a controller unit and a communication unit, even when a plurality of communication lines cannot be connected between a partner device and the redundant device due to restriction of the partner device or a network.SOLUTION: In a redundantly configured signal protective device by a hot standby system, communication units of an active system and a standby system are provided with a function to transfer a received telegraphic message in order to transfer a telegraphic message received by one system to the other system (active system or standby system), so that both system can obtain the same input data.

Description

  The present invention relates to a railway signal security device.

  Conventionally, it is desirable that signal safety equipment for railways should not interfere with train operation even if the signal safety equipment breaks down, ensuring a high operating rate so that it can operate without any trouble even in the event of a malfunction. There is a need to. As a means for ensuring the operating rate, there is a means called a redundant configuration. A redundant signal security device generally has a plurality of control devices that perform the same processing, and even if a failure occurs in one of the control devices, the control device that operates normally outputs information, And the operation rate is secured by continuing processing.

  Further, when the one-to-one communication is adopted in the signal security device 101 having a redundant configuration as shown in FIG. 1, the external connection device 108 is connected to the control device 102A via the network 107A and the control device via the network 107B. Each telegram is transmitted to 102B. However, 102A cannot receive a message addressed to 102B via 107A and the node 106, and similarly, 102B cannot receive a message addressed to 102A via 107B and 106. Therefore, as a method of receiving the same message in the active system and the standby system, by providing a device for distributing the received message, the message addressed from 108 to 102A is also transmitted to 102B, and the message addressed to 102B is transmitted. There is a method in which 102A and 102B obtain the same message by transmitting to 102A. Alternatively, a method of exchanging messages received by 102A and 102B by providing a dedicated inter-system communication path and confirming that the messages received by each other's system are the same message is adopted.

JP 2008-152552 A

  A hot standby redundant signal protection device, which consists of a controller and a communication unit for the active system and the standby system, respectively, is generally composed of an active system and a standby system. The standby system immediately transitions to the active system and the control is continued to ensure the operating rate. At this time, the active system and the standby system perform the same processing based on the same input data, so that continuous control can be continued when the active system is switched.

  However, when the active system and standby system communicate with the partner device using data communication based on one-to-one communication, the redundant partner device and the communication line are connected due to restrictions on the partner device and the network. In some cases, the same input data cannot be obtained. In this case, in order to obtain the same input data in the active system and the standby system, an apparatus that distributes the input data between the redundant apparatuses and an inter-system communication path that connects the redundant apparatuses are required.

  The present invention relates to a hot standby type redundant signal security device in which an active system and a standby system are each composed of a control controller unit and a communication unit, and the redundant device with the counterpart device due to restrictions of the counterpart device and the network. Even when multiple communication lines cannot be connected, a method to distribute the same input data to the active system and standby system without providing a dedicated inter-system communication path or dedicated device for distributing input data To do.

  The present invention provides a signal security device having a redundant configuration including a control controller unit and a communication unit, and has a function of transferring a received message to a communication unit of an active system and a standby system. By transferring the message to another system (active system or standby system), it is possible to obtain the same input data in both systems.

  The present invention provides a hot standby type redundant signal security device having a function of transferring a received message to a communication unit of an active system and a standby system of the signal security device, and receiving a message received by one system to another system. Thus, it is possible to obtain the same input data in both systems without providing a dedicated inter-system communication path or a device for distributing the input data to the active system and the standby system.

1 is a configuration diagram of a hot standby redundant signal security device. FIG. Data flow of redundant signal protection device of hot standby system. Flow of processing of control device. Transfer function flowchart. Port number management table.

  FIG. 1 shows a system configuration of a redundant signal protection device of a hot standby system according to the present invention. The redundantly configured signal security device 101 has a dual system configuration of an A-system control device 102A and a B-system control device 102B. The control unit 102A includes a control controller unit 103A and a communication unit 104A, and communicates with the external connection device 108 via the cable 105A, the node 106, and the network 107A. The node 106 relays a message between the external connection device 108, the A-system control device 102A, and the B-system control device 102B.

  Similarly, 102B includes a control controller unit 103B and a communication unit 104B, and communicates with the external connection device 108 via the cable 105B, the node 106, and the network 107B.

  Next, the data flow in the system configuration of the present invention will be described with reference to FIG. The signal security device 101 receives the telegram 202A and the telegram 202B from the external connection device 108. The communication unit 104A executes the transfer function 201A and transfers the received telegram 202A to the communication unit 104B via the node 106.

  Similarly, the communication unit 104 </ b> B executes the transfer function 201 </ b> B and transfers the received telegram 202 </ b> B to the node 104 </ b> A via the node 106. Then, it is confirmed by the controller unit 103A and the controller unit 103B that the message 202A and the message 202B are the same message.

  Next, the processing flow of the control devices 102A and 102B will be described with reference to FIG. When the communication unit 104 </ b> A receives the message 301, the communication unit 104 </ b> A stores the message in the reception buffer 303 via the LAN controller 302.

  The transfer function 304 performs a process of reading a message from the reception buffer 303, determining a transfer destination of the message and storing it in the transmission buffer 312, and a process of executing the reception process 305. In the transfer function 304, the received telegram 301 for which the transfer destination has been determined is transferred to the transfer destination via the transmission buffer 312 and the LAN controller 302. In addition, the received telegram 301 read from the transfer function 304 to the reception process 305 is stored by the data storage process 306 after the reception process 305 ends, and is read by the reception process 307. After completion of the reception process 307, the CPU 308 reads the reception message 301, whereby the reception of the reception message 301 is completed. Thereafter, the CPU 308 performs arithmetic processing according to the received message 301.

  On the other hand, when transmitting the transmission message 313, the CPU 308 sends data necessary for creating the transmission message 313 to the transmission process 309. After completion of the transmission process 309, the data acquisition process 310 reads the transmission message 313 created by the transmission process 309. The transmission process 311 stores the transmission message 313 read by the data acquisition process 310 in the transmission buffer 312. Thereafter, the transmission buffer 312 transmits 313 to the partner apparatus via 302. Also, 102B performs 301 reception and 313 transmission in the same processing flow as 102A.

  Next, processing of the transfer function will be described using the flowchart of FIG. 4 and the port number management table of FIG. The transfer function first confirms that a message is stored in the reception buffer 303 (401). If a message is stored in the reception buffer 303, the message is acquired from the reception buffer 303 (402). After the process of 402 is completed, 0 is substituted for the initial value of the number of ports M (403).

Next, it is confirmed whether or not the port number set in the port number management table of FIG. 5 matches the port number set in the received message (404, 405). The processing contents 404 and 405 will be described by taking as an example a case where the port number of the received message is 20. First, in the process of 404, the value of M is M = 0 by the process of 403, so the value of M is 1 in the process of 404. If the result of adding 1 to M does not exceed the maximum value M _{MAX of the} number of ports, the process of 405 is executed. In the process 405, it is confirmed whether the port number set in the message port number matches the port number. Since M = 1 this time, the port number is 10 from FIG. Since the value of the port number of the received message is 20, the process of 405 is not established, and the process of 404 is executed again. In the second process 404, the value of M is 2. In the second process 405, the port number 20 of the received message and the port number set to M = 2 from FIG. 5 are 20, so the process 405 is established. If the message port number matches the port number N value in the process of 405, the transfer destination number corresponding to the port number 20 matched in the port number management table of FIG. The message received using the matched port number 20 is transferred to the transfer destination number 200, and the process 401 is executed again.

On the other hand, if the port numbers do not match in the process 405 as a result of repeating the processes 404 and 405 and the value of the number of ports M exceeds M _MAX in the process 404, the process 407 is executed and received. Discard the sent message. Thereafter, the process 401 is executed again. If the received message cannot be confirmed in 303 in the process 401, the transfer function process is terminated.

  As described in the present embodiment, the communication unit 104 has a transfer function and is configured to transfer a received message to another system control device via a node. It is possible to distribute the same input data to the active system and standby system without providing a dedicated device for distribution.

Claims (2)

In a redundant signal security device that includes a multiplex system control device and performs the same processing in each multiplex system control device,
A node connected to the control device of each system and the external connection device, and relaying a message between the external connection device and the control device of each system,
Each control device of the multiplex system is
A communication unit that receives a message from the external connection device via the node;
A control controller unit that performs arithmetic processing according to the message received by the communication unit,
The signal security device, wherein the communication unit includes means for transferring the received electronic message to the communication unit of another system via the node. The signal security device according to claim 1,
The signal security device, wherein the communication unit transfers the message to a predetermined transfer destination according to a port number set in the received message.