JP6151148B2 - Signal security system - Google Patents

Description

The present invention relates to a signal security system that allows a train to travel safely.

  The railway signal security system is one of the most complex and robust systems in the railway infrastructure, and its installation and maintenance require high costs. Among the signal systems, devices that require a particularly high cost are expensive, such as a ground ATP device that controls the distance between trains between stations, and an interlocking device that performs exclusive control of trains and route control in stations where routes are complicated. It is a signal device on the ground side that requires arithmetic processing capability.

  These devices are track circuit devices that detect the presence of trains, switch devices that switch and lock the switch, signal devices that turn on signal lights and transmit progress permission to train operators, etc. It requires a lot of equipment along the line, and the cables and interfaces connecting them are enormous.

Therefore, in recent years, signal security systems have been developed that can reduce the number of ground-side signal devices that require high-performance arithmetic processing units and the equipment along the lines connected to these devices from the configuration of existing signal systems. It was. For example, as disclosed in Patent Document 1, a message is circulated between trains and switchboards existing in a certain control area, and the occupancy right for each block obtained by dividing the control area into a plurality of switchboards, switchboards A signal security system has been devised that shares information such as the state of the vehicle, instructions for switching to a switch, etc., and performs train interval control, exclusive control, and route configuration control in the control area.

JP 2006-232106 A

  In the signal security system of Patent Document 1, when a message circulated between a train and a switch is lost due to a device failure or radio abnormality, it is shared between the train and the switch. Since the information such as the block occupation right cannot be updated, the system stops. In that case, it is possible to restore the system by grasping all the train positions in the section by the commander and station staff, and reissuing the message reflecting the current situation, but this requires manpower and time. As a result, the operating rate falls.

On the other hand, if the message is reissued without grasping the current situation, there is a possibility that the train interval control, exclusive control, and route configuration control realized by one security message may be disrupted. You will not be able to drive safely.

  In order to solve the above-described object, the present invention provides a security message including occupancy right information of a road in order between trains existing on the road composed of one or more blocks in which the occupancy right information is set. In a signal security system that shares safety messages between trains by ensuring circulation, ensuring the safety of train travel, each train defines the time from when a security message is sent until the next security message is received. If time has passed, stop the control based on the security message that is held, and at least one of the trains is a member with the order information to circulate the message based on the security message sent or received immediately before It has a list, block occupancy right information that is the occupancy right of each block on the road composed of one or more blocks, and update time information of the security message sent or received immediately before Create a recovery for the message, characterized in that it be circulated to recover for the message according to the members list.

In addition, the present invention includes a security message including occupancy right information of the traveling road, instruction information for instructing the opening direction of the switch, and lock state information indicating whether the switch is fixed, By sharing the safety message between the train and the switch by circulating between the train and the switch that exists on the road composed of one or more blocks where the occupation right information is set, In a signal security system that ensures safety, each train or switchboard has its own security message when the specified time elapses between the transmission of a security message and the reception of the next security message. And at least one of the train or the switch is based on a security message sent or received immediately before, and a member list including order information for circulating the message and one or more In the road composed of blocks Block occupancy right information that is the occupancy right of each block, switch direction indication information in which instruction information indicating the opening direction of the train to the switch is written, and the direction state of the switch And creating a restoration message having the switch state information with the lock state and the update time information of the security message sent or received immediately before, and circulating the restoration message according to the member list. Features.

Even when the security message that guarantees train interval control, exclusive control, and route configuration control disappears, the security message can be safely reissued and the system can be restored.

The conceptual diagram which shows one Embodiment in Example 1 Route map showing area range and block section in embodiment 1 The conceptual diagram which shows each block on the course in Example 1, and the direction of a switch Configuration diagram of security message in Example 1 The conceptual diagram which showed the situation where recovery of the security message in Example 1 is required The conceptual diagram which showed the mode of the circulation at the time of the recovery | restoration of the security message in Example 1 The conceptual diagram which showed the update condition of the message | telegram for recovery at the time of recovery in Example 1 The conceptual diagram which showed the condition at the time of recovery in Example 2

Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 shows a configuration of a signal security system according to an embodiment of the present invention. The signal security system of the present embodiment includes a train security device A102 installed on a train A101, a switch security device A202 installed or connected to a switch A201, a switch B211 and a switch C221. , A switch safety device B212, a switch security device C222, and a security message 301 that is a message that circulates between the train security device and the switch security device by radio. Naturally, there may be a case where there are a plurality of trains, or a case where there are four or more switches and four safety devices.

  As shown in FIG. 2, in the present embodiment, the entire route on which the train travels is divided into a plurality of predetermined areas. Next, one area is further divided into units that can be occupied by one train, and this divided section is called a block. In FIG. 2, area 2 is divided into 11 blocks. In the case of division as shown in FIG. 2, each block includes a block where a switch is present and a block where it does not exist. The unit on which the train travels is called a course, and it consists of continuous blocks.

  FIG. 3 is a diagram showing the course of a train in area 2. In the present embodiment, there are paths 1R, 2R, 3R, 4L, 5L, and 6L. Here, the path of 4L includes the block 11, the block 10 having the switch 3 with the reverse direction of the path 4L, the block 5 having the switch 2 with the reverse direction of the path 4L, and the path 4L. Is composed of five blocks, a block 4 having a switch 1 with an inverted opening direction and a block 1. The occupation right of all the blocks 11, 10, 5, 4, 1 is secured by one train, the direction of the switch on each block is all directed to the opening direction of the route 4L, and the lock ( When it is confirmed that the state is fixed, the travel permission of the route 4L is given to the train. Localization / inversion / bra is a term indicating the direction of the tip. Localization refers to the steady opening direction, inversion refers to the reverse direction of localization, and bra refers to a state that is neither localized nor inverted.

  In the present embodiment, the occupation right of all the blocks in one area, the direction instruction for all the switchboards, and the state of all the switchboards are managed by one security message 301, and the security message 301 Circulate and share between all trains that have already entered the area, all trains that are about to enter the area, and all the switches in the area. Of course, as long as the contents to be managed do not overlap, they may be managed by a plurality of security messages. In addition, the train which is going to enter the area transmits an entry notice to the safety device of the train in the area or the tipping device security device and notifies the fact.

  Next, an embodiment of a security message will be described with reference to FIG. In this embodiment, as shown in FIG. 4, the security message 301 includes an area identification field 311, a member list field 312, a block occupation right information field 313, a switch direction instruction field 314, and a switch state information. A column 315, a message type column 316, and an update time column 317 are configured.

  In the area identification column 311, identification information of an area managed by the security message is entered.

  In the member list column 312, a list of devices that circulate the security message and the order of transmission are entered.

  In the block occupation right information column 313, the identification information of the train having the block occupation right is entered. The block occupation right is a right that must be secured in order for the train to enter the block. One block occupancy right exists for one block, and when there is no entry by other trains, the block occupancy right can be secured by entering the identification information of the own train.

  In the switch direction instruction column 314, instruction information for indicating the direction of the switch is entered by a train having the block occupation right to which the switch belongs. The switch uses the instructions to control the direction of the switch.

  In the switching device direction state column 315, information on the direction state and locking state of the switching device is entered by the switching device. The train recognizes the opening direction of the switch and the locked state by checking the columns of the direction state and the locked state.

  In the message type column 316, whether the security message is for control or recovery is entered.

  In the update time column 317, the time when each device updated the security message is entered.

  Also, when communicating a security message, a method can be used to confirm that the message has been reliably transmitted to the other party so that there is no interception or obstruction of the communication, or falsification, copying, or loss of data. For example, encryption and decryption of communication, addition of serial number, addition of time information, check of communication time, advance confirmation and subsequent confirmation of transmission or reception source, data return, data validity check by error detection code for data Etc.

  As mentioned above, the security message is circulated in the area, the block occupancy right of the route requested by each train and the state of the switch are confirmed, and if possible, the message is updated to secure the block occupancy right and transfer. Instructs the switch of the lever. With such a mechanism, each train can travel safely by realizing train interval control, exclusive control, and route configuration control.

  Next, a method for restoring the security message 301 when a communication error or the like occurs and the security message disappears as shown in FIG. 5 will be described with reference to FIG. First, all devices in the area, when the control security message circulation waiting time has elapsed, that is, until each device in the area transmits the immediately preceding security message and receives the next security message. When the specified time elapses, it is considered that the security message has been lost, and the security message transmitted or received immediately before is not used for controlling the train or the switch. Thus, to stop performing the train control based on the security message that is held, for example, if the train is running, the brake control is performed, and if the train is stopped, the brake control is maintained. Moreover, what is necessary is just to maintain the present state if it is a tipping device. However, the security message information is stored. The time until this security message is deemed to have disappeared may be set in advance for each device, may be entered by a device in the message, or the number of devices in the member list, etc. It is good also as a variable value according to the information of a message. In addition, when the specified time has elapsed, a flag may be added to the security message so that the security message is not used for control. In addition, you may preserve | save in the data area different from the data area used by train control, and delete from the data area used by train control.

  A method for recovering the system after the communication error will be described according to the time series of FIG. A device that creates the recovery message 401 is called a master device. In this embodiment, for the sake of simplicity, a case where there is one master device will be described.

  Time series 501: A master device determined in advance creates a recovery message 401. In this embodiment, the switch protection device A202 will be described as a master device. The master device creates the recovery message 401 with the message type “recovery”, the switch status information “bra / unlocked”, and other fields blank.

  Time series 502: The master device enters the information of the security message transmitted or received immediately before, including the update time column, into the recovery message 401 as it is, except for the message type column and the switch status information column. The recovery message 401 created in this way is circulated to the member list. On the other hand, each switch status information is “bra / unlocked”, and the switch security device writes the current status of the own device. In this embodiment, the area identification field, member list, block occupancy right information field, switch direction instruction field, switch state information field of switch A, message type, and update time are entered. Become. In addition, when creating a recovery message using the information of the security message received immediately before instead of the security message transmitted immediately before, the position where the train can exist is estimated based on the set circulation waiting time. Safety can be ensured by combining with other methods such as recovery.

  Time series 503: The train security device A102 compares the update message 401 with the update time of the security message transmitted or received immediately before. If the update time of the security message sent or received immediately before is newer, the area identification column, member list, block occupancy right information column, switch direction instruction column, switch A switch Regarding the status information column, message type, and update time, the previously transmitted security message information is updated. In this embodiment, the security message is lost between the train security device A102 and the switch security device B212, and the update time of the security message transmitted or received immediately before is newer. It will be updated.

  Time series 504: Similar to the time series 503, the switch protection device B212 compares the restoration message 401 with the update time of the security message sent or received immediately before, and determines whether or not to update the restoration message 401 decide. This embodiment is a case where the security message is lost between the train security device A102 and the switch security device B212, and the recovery message 401 is not updated because the update time of the recovery message 401 is newer. However, the switch status information of the switch B211 is updated according to the current situation.

  Time series 505: Similar to the time series 504, the switch protection device C222 compares the restoration message 401 with the update time of the security message transmitted or received immediately before, and determines whether or not to update the restoration message 401 decide. As a result, since the update time of the recovery message 401 is newer, only the switch state information of the switch C221 is updated according to the current situation.

  In this way, the recovery message 401 is circulated among the devices. When the recovery message 401 returns to the switch protection device A 202, which is the master device, the master device reissues the security message based on the information of the recovery message 401. In this embodiment, if the message type of this message is for control and the update time is the current time, it becomes a security message. By doing in this way, the information of the security message before the security message disappears can be restored, the latest status information of the switch can be grasped, and the system can be safely restored.

  In addition, although the case where the security message is lost due to the failure of the apparatus may be considered, in such a case, when the recovery message 401 is transmitted or received, it can be considered that there is no response from the other party. In this case, the information that the device has failed is added to the recovery message 401 and removed from the member list to be transmitted, or the recovery message 401 is transmitted to the next device of the failed device included in the member list. The recovery message 401 and the subsequent security message can be circulated.

  In some embodiments, communication between apparatuses is premised on wireless communication. However, the effect of the present invention is not limited to wireless communication, and can be realized by wired communication.

  In the first embodiment, it is assumed that the number of master devices is one. However, a plurality of devices can be set as master devices by setting priorities individually as master devices to a plurality of devices in advance. . In that case, with each device's priority determined in advance, each device creates and circulates a recovery message in which the priority is entered. If the device issues a recovery message, it prioritizes itself. When a recovery message for a device with a lower value is received, the recovery message with the highest priority among the devices that have not failed can be circulated to all devices by stopping the circulation of the recovery message.

  FIG. 8 shows recovery means when the train security device A fails. As for the priority, the first is the device security device A202, the second is the train security device A102, the third is the device security device B212, the fourth is the device security device C222. In this case, when each non-failed device issues a restoration message, as described in the first embodiment, the restoration message is circulated except for the failed switch protection device A202. As a result, the recovery messages 403 and 404 issued by the train security device A102 and the switch protection device C222 are not circulated by the switch security device B212 having the highest priority among the devices that have not failed. Only the restoration message 402 of the switch protection device B212 is circulated to all the devices that have not failed.

  By implementing the process as described above, it is possible to safely reissue the security message and restore the system even when the security message that guarantees the train interval control, exclusive control, and route configuration control is lost. I can do it.

The priority order may be determined in advance, or may be changed periodically based on reliability. Furthermore, the concept of priority may be based on the reliability of the device, or may be a simple ranking.

101 Train 102 Train security device 201, 211, 221 Switch device 202, 212, 222 Switch device security device 301 Security message 401-404 Recovery message

Claims (8)

A security message that includes occupancy rights information of the road,
The safety telegram is shared between the trains by ensuring that the trains circulate in order among the trains that exist on the travel path composed of one or more blocks in which the occupancy rights information is set, thereby ensuring the safety of train travel. In the signal security system,
Each of the trains
If the specified time elapses after sending the security message until receiving the next security message, stop the control based on the security message you have,
Furthermore, at least one of the trains
Based on the security message you sent or received immediately before,
A member list with order information for circulating messages,
Block occupancy right information which is the location of the occupancy right of each block in the road composed of the one or more blocks;
Create a recovery message with the update time information of the security message sent or received immediately before,
A signal security system, wherein the recovery message is circulated according to the member list.
Occupancy rights information of the road,
Instruction information for instructing the turning device to open,
A security message containing the lock status information indicating whether or not the switch is fixed,
Sharing the security message between the train and the switch by having it circulate between the train and the switch that exist on the travel path configured by one or more blocks in which the occupation right information is set, In the signal security system to ensure the safety of train running,
Each of the train or the switch, when the time from transmission of the security message to reception of the next security message has elapsed, stops control based on the security message that is held,
Furthermore, at least one of the train or the switch is
Based on the security message you sent or received immediately before,
A member list with order information for circulating messages,
Block occupancy right information which is the location of the occupancy right of each block in the road composed of the one or more blocks;
Roller direction instruction information in which instruction information indicating the opening direction of the train to the switch is written,
Roller state information in which the direction state and the locked state of the switch are written,
Create a recovery message with the update time information of the security message sent or received immediately before,
A signal security system, wherein the recovery message is circulated according to the member list.
The signal security system according to claim 2,
When the switch that exists on the travel path receives the restoration message,
Based on the state of the switch under control, the switch state information is written in the recovery message.
A signal security system, wherein the restoration message is transmitted to the next train or switch according to a member list of the restoration message.
In the signal security system according to any one of claims 1 to 3,
When the train or switch that exists on the travel path receives the restoration message,
Update time information included in the recovery message;
Compared to the update time information of the security message sent or received immediately before the train that received the recovery message,
When the update time information of the security message is newer than the update time information of the recovery message,
In the recovery message, write the member list, block occupancy information, switch direction indication information, or update time information that the security message sent or received immediately before,
A signal security system, wherein the restoration message is transmitted to the next train or switch according to a member list of the restoration message.
In the signal security system according to any one of claims 1 to 4,
The train or switch that created the restoration message is the block exclusive right information or the switch direction that is described in the restoration message when the restoration message is circulated and returned. A signal security system characterized by creating a security message based on instruction information and switch state information and circulating it.
In the signal security system according to any one of claims 1 to 5,
Each of the trains or switchboards existing on the travel path composed of one or more blocks in which the occupation right information is set,
The priority for creating a recovery message is set,
The train or switch device stops the circulation when receiving a restoration message created by a device having a lower priority than the own device after the device creates a restoration message. .
In the signal security system according to any one of claims 1 to 6,
The specified time is determined by the number of devices in the member list.
In the signal security system according to any one of claims 1 to 7,
The signal security system characterized in that the specified time is written in a security message.