JP7016229B2 - Railroad signaling system and control method - Google Patents

Description

The present invention relates to a railway signaling system and the like.

Signal security systems such as electronic interlocking devices, CTC (Centralized Traffic Control), and ATC (Automatic Train Control) in railways generally have a configuration in which a plurality of logical devices are connected to a LAN (Local Area Network). .. The logic device is also called a logic unit in the signal security system, but in this specification, one logic unit will be described as one logic device. There are various types of logic devices, and each logic device is configured to have a unique function according to its role and according to an electronic interlocking device, CTC, ATC, and the like. However, what can be said in common with any logical device is that it stores programs and data for realizing the functions unique to the logical device, and the CPU (Central Processing Unit) controls operations based on the programs and data. Is the point of doing. These programs and data may be updated (also called replacement) in response to improvements in functions or repairs to signaling safety equipment.

In Patent Document 1, regarding an electronic interlocking device which is a kind of signaling security system for railways, data (interlocking data) of each logic device is converted into data transmitted from a supervision device (monitor / test unit 3) via a LAN. The technology to be updated is disclosed.

Japanese Unexamined Patent Publication No. 2001-301619

However, the technique of Patent Document 1 described above is intended only for updating data, and does not assume updating of a program. In the case of electronic interlocking devices, for example, in operations such as implementing interlocking functions that are commonly used at each station as a common standard program and giving different interlocking conditions for each station as interlocking data to each interlocking device. This is because, in many cases, it can be dealt with only by updating the interlocking data without updating the program.

However, there may be cases where the program needs to be updated. When updating a program, not only rewriting the program stored in the memory, but also restarting the logical device (also called power reboot, hardware reset, etc.) to perform new arithmetic control based on the updated program. Need to start. Therefore, in order to update the program, a maintenance worker goes to the equipment room, collects the control board (also referred to as a CPU board) of the logical device, and then updates the program mounted on the control board. Then, after the control board is attached to the logic device again in the equipment room, the logic device is restarted. The current situation is that this series of work is being carried out.

In addition, since the program of the logic device is much larger than the data, there is a problem that the transmission itself takes a long time when trying to transmit the program by diverting the technique of Patent Document 1 described above. Is.

The present invention has been made in view of the above circumstances, and an object of the present invention is to enable a program of each logic device connected to a LAN to be updated via a LAN in a railway signaling security system. That is.

The first invention for solving the above problems is
As a communication field, the communication frame including at least an instruction unit in which an instruction from the supervising device to the logical device is set, a response unit in which a response from the logical device to the supervising device is set, and a communication information unit is described above. It is a railway signaling security system configured by communication connection by a communication method that circulates between a supervising device and a plurality of the above-mentioned logical devices.
The logic device is
A storage unit that stores the management program and the current main program,
A processor that executes management processing according to the management program and main processing related to signal security according to the current main program, and
Equipped with
The management program is
When the mode switching instruction included in the instruction unit in the received communication frame is set to the data management mode switching instruction when performing program loading (hereinafter abbreviated as "PL"), the operation mode is set. A mode switching step that controls switching to the data management mode,
When the switching in the mode switching step is completed, the mode switching completion response step for setting the mode switching completion response in the response unit and controlling the transmission of the communication frame, and the mode switching completion response step.
A PL step that controls acquisition of a new main program stored in the communication information unit in the communication frame when a PL instruction is set in the instruction unit in the received communication frame.
When the acquisition of the new main program is completed, the PL completion response step for setting the acquisition completion response in the response unit and controlling the transmission of the communication frame, and the PL completion response step.
When an approval instruction was set in the instruction unit in the received communication frame, control was performed to rewrite the current main program stored in the storage unit to the new main program for which acquisition was completed. After that, an update reset control step for controlling the hardware reset of the logical device, and
Is a program for causing the processor to execute the management process including the above.
The supervision device is
A mode switching instruction step for setting the mode switching instruction to the data management mode switching instruction and controlling transmission of the communication frame, and a mode switching instruction step.
When the mode switching completion response is set in the response unit in the received communication frame, the PL instruction is set in the instruction unit and the new main program is stored in the communication information unit. And the PL instruction step that controls the transmission of the communication frame,
When the acquisition completion response is set in the response unit in the received communication frame, the approval instruction step for setting the approval instruction in the instruction unit and controlling the transmission of the communication frame, and the approval instruction step.
To execute,
It is a signaling security system for railways.

Also, as another invention,
As a communication field, the communication frame including at least an instruction unit in which an instruction from the supervising device to the logical device is set, a response unit in which a response from the logical device to the supervising device is set, and a communication information unit is described above. It is a control method of a railway signal security system configured by communication connection by a communication method that circulates between a supervising device and a plurality of the above-mentioned logical devices.
The logic device is
A storage unit that stores the current main program,
A processor that executes management processing and main processing related to signal security according to the current main program, and
Equipped with
The management process is
When the mode switching instruction included in the instruction unit in the received communication frame is set to the data management mode switching instruction when performing program loading (hereinafter abbreviated as "PL"), the operation mode is set. A mode switching step that controls switching to the data management mode,
When the switching in the mode switching step is completed, the mode switching completion response step for setting the mode switching completion response in the response unit and controlling the transmission of the communication frame, and the mode switching completion response step.
A PL step that controls acquisition of a new main program stored in the communication information unit in the communication frame when a PL instruction is set in the instruction unit in the received communication frame.
When the acquisition of the new main program is completed, the PL completion response step for setting the acquisition completion response in the response unit and controlling the transmission of the communication frame, and the PL completion response step.
When an approval instruction was set in the instruction unit in the received communication frame, control was performed to rewrite the current main program stored in the storage unit to the new main program for which acquisition was completed. After that, an update reset control step for controlling the hardware reset of the logical device, and
Including
The supervision device is
A mode switching instruction step for setting the mode switching instruction to the data management mode switching instruction and controlling transmission of the communication frame, and a mode switching instruction step.
When the mode switching completion response is set in the response unit in the received communication frame, the PL instruction is set in the instruction unit and the new main program is stored in the communication information unit. And the PL instruction step that controls the transmission of the communication frame,
When the acquisition completion response is set in the response unit in the received communication frame, the approval instruction step for setting the approval instruction in the instruction unit and controlling the transmission of the communication frame, and the approval instruction step.
To execute,
The control method may be configured.

According to the first invention or the like, the logical device executes the management process according to the management program, so that the current main program for executing the main process related to signal security is acquired from the supervising device as a new main program. Program loading to be rewritten can be realized. In this program loading, after rewriting the current main program to a new main program by the management process according to the management program, the logic device is automatically reset by hardware and the new main process based on the new main program is started. be able to. That is, the program of each logical device connected to the LAN can be updated via the LAN.

In addition, the logical device switches to the data management mode in response to the mode switching instruction from the supervising device, sends the mode switching completion response, acquires the new main program from the supervising device, and checks the consistency of the acquired new main program (CRC). Check, check the program addressed to your own device, check the SUM value), send the acquisition completion response, and rewrite to a new main program by the approval instruction from the supervising device. Fail-safety can be ensured for communication between the device and each logical device.

In addition, since the program is transmitted in the data management mode, the communication information part of the communication frame can be stored by the allocation specialized for the transmission of the program, and the speed of the program transmission can be increased depending on the allocation design. It will be possible to realize it.

The second invention is the railway signaling system of the first invention.
The plurality of logical devices are target logical devices to which some or all of the logical devices are subject to PL.
The supervision device is
In the mode switching instruction step, the designation information for designating the target logical device among the plurality of logical devices is set in the instruction unit, and the mode switching instruction is set in the switching instruction to the data management mode. Controls to transmit the communication frame,
In the PL instruction step, when all the target logic devices receive the communication frame for which the mode switching completion response is set, the designated information is set in the instruction unit and the PL instruction is given to the instruction unit. It is set, and the communication information unit is controlled to store the new main program and transmit the communication frame.
In the approval instruction step, when all the target logical devices receive the communication frame for which the acquisition completion response is set, the designated information is set in the instruction unit, and the approval instruction is given to the instruction unit. Control to set and transmit the communication frame,
The management program is
The mode switching step, the PL step, and the said A program for causing the processor to execute the update reset control step.
It is a signaling security system for railways.

According to this second invention, program loading can be performed on a part or all of the logic devices among the plurality of logic devices. That is, the supervising device specifies the target logical device and instructs the switch to the data management mode, and only the logical device designated as the target logical device switches to the data management mode and acquires and rewrites the new main program. Program loading such as. The target logic device may be one or a plurality of units.

A block diagram of a railway signaling system. Schematic diagram of program loading. Schematic diagram of pinpoint loading. Configuration diagram of the communication frame. Communication frame setting example for pinpoint loading. Configuration diagram of the logical device. Program loading processing procedure.

[System configuration]
FIG. 1 is a configuration diagram of a railway signaling system 1 of the present embodiment. As shown in FIG. 1, the railway signaling system 1 is configured by connecting one supervising device 10 and a plurality of logic devices 20 to a LAN (Local Area Network) 30. In this railway signaling system 1, a fixed-length communication frame 40 (see FIG. 4) is connected as a communication field by a communication method in which a fixed-length communication frame 40 (see FIG. 4) is circulated between the supervising device 10 and each logic device 20 via a LAN 30 at a predetermined cycle. Has been done. Further, the communication between the supervising device 10 and each logical device 20 is ensured to be fail-safe by the technique of the present embodiment.

The railway signaling system 1 can be realized as an electronic interlocking device, an ATC (Automatic Train Control), or a CTC (Centralized Traffic Control) system. When the railway signaling system 1 is an electronic interlocking device, each device of the supervision device 10 and the logic device 20 corresponds to an interlocking logic unit, a course control logic unit, and a field equipment logic unit, and the LAN 30 is an Ei-W ( Interlocking wire). Further, in the case of an ATC system, each device of the supervision device 10 and the logic device 20 corresponds to the ATC logic unit, and the LAN 30 corresponds to the ATC-W (ATC wire). Further, in the case of a CTC system, each device of the supervision device 10 and the logic device 20 corresponds to the CTC central device and the CTC station device, and the LAN 30 corresponds to the CTC-W (CTC wire). As described above, each of the supervision device 10 and the logic device 20 is composed of a plurality of types of devices having unique functions related to signal security.

[mode]
The operation modes of the logic device 20 include a normal mode in which processing specific to the device related to signal security is performed according to the implemented current main program, and an update of the current main program implemented by stopping the processing related to signal security ( Hereinafter, there is a maintenance mode in which "program loading" or "PL") is performed. Signal security processing according to the main program is called main processing, and processing higher than the main processing, including mode switching, is called management processing. The management process is executed and controlled according to an instruction from the supervising device 10 via the LAN 30.

[Program loading]
Program loading will be described. The maintenance mode includes a plurality of modes including a data management mode, which is a mode for performing program loading, as a more detailed mode. After transitioning to the maintenance mode, the logic device 20 can perform program loading by further transitioning to the data management mode, which is a lower mode of the maintenance mode.

FIG. 2 is a schematic diagram of program loading. The logic device 20 has a ROM (Read Only Memory) of a working main program 124 for executing a main process related to signal security and a management program 122 for executing a management process for controlling the execution of program loading. I remember it in the area. Program loading is a process of updating the current main program 124 to a new program received from the supervising device 10 via the LAN 30.

That is, the logic device 20 acquires the new main program 126 transmitted from the control device 10 in the state of transition to the data management mode ((1) in FIG. 2). The acquired new main program 126 is temporarily stored in a predetermined area of RAM (Random Access Memory). Then, after confirming that the new main program 126 has been normally received by an error check or the like, the acquisition completion response is transmitted to the supervising device 10 ((2) in FIG. 2). After that, when an approval instruction for approving the rewriting of the program is received from the supervising device 10 ((3) in FIG. 2), the current main program 124 stored in the ROM is transferred to the new main program 126 stored in the RAM. Rewrite ((4) in FIG. 2). Then, the new main program 126 temporarily stored in the RAM is erased ((5) in FIG. 2). Subsequently, the logic device 20 resets its own device by hardware (also referred to as a power reboot) and restarts it ((6) in FIG. 2). By restarting, a new main process according to the new working main program 124 will be started.

[Pinpoint loading]
Program loading can be performed simultaneously for one or more devices of the same device type among a plurality of logical devices 20 connected to the same LAN 30. A device having the same device type is a device having the same function as a function related to signal security, that is, a device having the same current main program 124 implemented for performing signal security processing.

FIG. 3 is a schematic diagram of pinpoint loading. In FIG. 3, among the four logic devices 20 (first to fourth logic devices 20a to 20d) connected to the LAN 30, the first logic device 20a and the second logic device 20b have the device type ". The third logical device 20c has a device type of "type β", and the fourth logical device 20d has a device type of "type γ".

In this case, as shown in FIG. 3A, two devices, the first logical device 20a and the second logical device 20b, whose device types are both “type α” in one pinpoint loading, are used. It can be a target (first target). That is, the supervising device 10 shifts all the logical devices 20 (first to fourth logical devices 20a to 20d) to the maintenance mode, and further shifts all the logical devices 20 to the data management mode. Next, the supervising device 10 designates the first logical device 20a and the second logical device 20b as target logical devices to be pinpointed.

Subsequently, the supervising device 10 transmits a new main program 126a for the first target. The logic device 20 receives (acquires) the new main program 126a transmitted from the control device 10 when the own logic device is designated as the target logic device. That is, the first logical device 20a and the second logical device 20b designated as the target logical device receive and store the transmitted new main program 126a for the first target, and the current main program 124. The third logical device 20c and the fourth logical device 20d, which are not designated as the target logical devices, are put on standby as they are without any particular processing.

Further, as another pinpoint loading, as shown in FIG. 3B, pinpoint loading is performed only for the fourth logical device 20d whose device type is “type γ” (the second target). be able to. That is, the supervising device 10 similarly shifts all the logical devices 20 (first to fourth logical devices 20a to 20d) to the maintenance mode, and further shifts all the logical devices 20 to the data management mode. Next, the fourth logical device 20d is designated as the target logical device for pinpoint loading. When the pinpoint loading as shown in FIG. 3 (b) is performed following the pinpoint loading as shown in FIG. 3 (a), all the logical devices 20 have already transitioned to the data management mode. Therefore, the step of transitioning to the data management mode can be omitted, and the target logical device can be specified immediately.

Subsequently, the supervising device 10 transmits a new main program 126b for the second target. Then, the fourth logical device 20d designated as the target logical device receives (acquires) the transmitted new main program 126b for the second target, and program loading to update the stored current main program 124. I do. The first to third logic devices 20a to 20c, which are not designated as the target logic devices, stand by as they are without performing any particular processing.

[Communication frame]
FIG. 4 is a schematic diagram of the format of the communication frame 40. As shown in FIG. 4A, the communication frame 40 includes an instruction unit 42, a response unit 44, and a communication information unit 46 as communication fields, and the arrangement position and bit length of each unit are fixed. It is in the format. In addition, in FIG. 4, the communication fields of the instruction unit 42, the response unit 44, and the communication information unit 46 are arranged in a continuous manner, but the present invention is not limited to this example and the communication fields are not continuous. It may be divided into two and arranged. For example, the instruction unit 42 is divided into a plurality of parts and arranged in the communication frame 40.

The instruction unit 42 is a communication field used by the supervision device 10, and an instruction from the supervision device 10 to the logic device 20 is set. Specifically, as shown in FIG. 4B, the instruction unit 42 has an instruction content unit 42a for designating the content of the instruction to the logic device 20, and an instruction destination for designating the logic device 20 to be instructed. It has a portion 42b.

The instruction content unit 42a has a plurality of bits to which each mode such as a normal mode, a maintenance mode, and a data management mode is assigned, a mode switching instruction bit for instructing mode switching, and a PL (program loading) instruction or approval. It has a processing instruction bit having a plurality of bits to which each processing to be executed in each mode such as an instruction is assigned.

The instruction destination unit 42b has a plurality of device bits assigned to each of all the logical devices 20 such as those for the first device and the second device, and each device bit is designated by the mode switching instruction bit. It has a mode instruction destination bit that specifies that it is the target of mode switching, and a processing instruction destination bit that specifies that it is the target of processing specified by the processing instruction bit.

As described above, by providing the device bit for each logical device 20 as the instruction destination unit 42b, individual instructions can be given to each of the logical devices 20. Specifically, among the mode switching instructions to the logic device 20, for the mode switching instruction to the normal mode and the maintenance mode, the mode to be changed (normal mode or maintenance mode) in the mode switching instruction bit of the instruction content unit 42a. By setting the bit to which) is assigned to "1", a mode switching instruction is given to all the logical devices 20, and all the logical devices 20 can be simultaneously transitioned to the normal mode or the maintenance mode. Regarding the instruction to switch to the data management mode, after all the logical devices 20 are transitioned to the maintenance mode, the bit to which the data management mode of the mode switching instruction bit is assigned is set to "1" in the instruction content unit 42a. At the same time, by setting the mode instruction destination bit for the target logic device to "1" in the instruction destination unit 42b, only the target logic device 20 can be transitioned to the data management mode.

Similarly, for the processing instruction to the logic device 20, the bit to which the processing to be performed is assigned is set to "1" in the processing instruction bit of the instruction content unit 42a, and the target is set in the instruction destination unit 42b. This can be realized by setting the processing instruction destination bit for the logical device to be "1". By transmitting the communication frame 40 once, the same common instruction can be specified for a plurality of logical devices 20.

FIG. 5 is a diagram showing a bit transition set in the instruction unit 42 of the communication frame 40 when pinpoint loading is performed so that program loading is performed only for a part of the logic devices 20. First, as shown in FIG. 5A, all the logic is transmitted by transmitting the communication frame 40 in which the bit to which the maintenance mode is assigned is set to "1" in the mode switching instruction bit of the instruction content unit 42a. The device 20 is transitioned to the maintenance mode. After that, since the maintenance mode is continued, the bit to which the maintenance mode of the mode switching instruction bit is assigned is continuously set to "1".

Next, as shown in FIG. 5B, in the mode switching instruction bit of the instruction content unit 42a, each bit to which the maintenance mode and the data management mode are assigned is set to "1", and the instruction destination unit 42b sets the bit to "1". By transmitting the communication frame 40 in which the mode instruction destination bit for all the logical devices is set to "1", all the logical devices 20 are shifted to the data management mode. After that, since the data management mode is continued, each bit to which the maintenance mode and the data management mode are assigned is continuously set to "1" in the mode switching instruction bit of the instruction content unit 42a.

After that, as shown in FIG. 5C, in the mode switching instruction bit of the instruction content unit 42a, the setting of each bit to which the maintenance mode and the data management mode are assigned remains “1” in the processing instruction bit. , The bit to which the PL instruction is assigned is set to "1", and the instruction destination unit 42b transmits the communication frame 40 in which the setting of the processing instruction destination bit for the logical device to be the target of program loading is set to "1". As a result, the target logical device for program loading can be specified, and the instruction is to cause only the target logical device and the designated logical device 20 to perform program loading.

When program loading is performed, the setting of the instruction unit 42 changes as shown in FIGS. 5A to 5C. Therefore, by confirming the setting of the instruction unit 42 on the logic device 20 side, the setting of the instruction unit 42 can be confirmed. It will improve the fail-safeness of communication related to program loading. For example, as shown in FIG. 5C, the maintenance mode of the mode switching instruction bit is assigned even though the bit to which the PL instruction of the processing instruction bit is assigned is set to “1”. When the logical device 20 receives the communication frame 40 in which the bit is not set to "1", it is determined that a communication problem has occurred and the received communication frame 40 is ignored. As a result, it is possible to eliminate the communication frame 40, which can be said to be an error in which the bit value has changed, and realize program loading that ensures fail-safety.

Return to FIG. The response unit 44 of the communication frame 40 is a communication field used by the logic device 20, and a response (answer) from the logic device 20 to the control device 10 in response to an instruction from the control device 10 is set. In the railway signaling system 1 of the present embodiment, in order to realize fail-safe communication, the logic device 20 receives the instruction and completes the operation according to the instruction for each instruction from the supervision device 10. A response (answer) notifying that the operation has been completed (for example, the mode transition or the execution of the process has been completed) is to be transmitted to the supervising device 10. The response unit 44 is a communication field for setting this response.

That is, as shown in FIG. 4C, the response unit 44 has a plurality of device bits assigned to each of all the logical devices 20 such as those for the first device and the second device, and the bits for each device. Includes a response bit corresponding to each instruction bit of the instruction content unit 42a. Specifically, the response bits include a mode switching response bit having a response bit for each mode for responding to a switching instruction for each mode, and a completion response for each process executed in each mode. A bit for processing response is included.

The communication information unit 46 of the communication frame 40 is a communication field in which communication information transmitted between the supervision device 10 and each logical device 20 is stored. In the present embodiment, in the data management mode, the supervision device 10 is stored. Stores a new main program 126 that is transmitted from and replaced by the logical device 20. Of course, other communication information can be stored in the communication information unit 46.

[Logical device]
FIG. 6 is an internal configuration diagram of the logic device 20. As shown in FIG. 6, the logic device 20 is configured by connecting a CPU control unit 100, a LAN communication control unit 200, and an I / F (InterFace) control unit 300 so as to be communicable via an internal bus B. Will be done.

The CPU control unit 100 has an arithmetic control unit 110 and a storage unit 120, and is a unit called a control board, a CPU board, or the like. The arithmetic control unit 110 is configured to have a processor such as a CPU, and sequentially executes a main process related to signal security using the main data 128 and a management process according to the management program 122 according to the current main program 124. .. More specifically, the management process and the main process are executed by the arithmetic control unit 110 as an execution process, and the main process is executed on the process of the management process. Therefore, the management process controls whether or not the main process is executed. In particular, in the present embodiment, the management process performs integrated control of the entire logical device 20 according to the instruction from the supervising device 10. For example, mode switching is performed according to a mode switching instruction from the control device 10, or program loading is executed according to a PL instruction. Details will be described later with reference to FIG. 7.

The storage unit 120 is realized by a ROM or a RAM. The storage unit 120 contains the current main program 124 for executing the main process related to signal security, the main data 128 used for executing the main process, and the management program 122 for executing the management process including the program loading. And are stored, and an area for temporarily storing the new main program 126 acquired from the supervising device 10 is secured. The management program 122, the current main program 124, and the main data 128 are stored in a rewritable ROM such as a flash ROM.

The LAN communication control unit 200 controls to connect to the LAN 30 and communicate with other devices.

The I / F control unit 300 is a control unit for realizing an interface such as an input device 302 and a display device 304.

[PL processing procedure]
FIG. 7 is a diagram showing a processing procedure when program loading is performed in the railway signaling system 1, and the processing of the logic device 20 is a management process executed based on the management program 122. In FIG. 7, the direction from the upper side to the lower side is a time-series direction, the control device 10 is shown on the left side, the first target logic device 20 is shown in the center, and the second target logic device 20 is shown on the right side. Communication is also shown. Here, the "first target" refers to the logical device 20 that is the target of the first program loading, and the "second target" refers to the logical device 20 that is the target of the second program loading. Point to.

First, the supervising device 10 transmits a communication frame 40 in which a switching instruction to the maintenance mode is set for all the logical devices 20. That is, for example, as shown in FIG. 5A, the supervising device 10 is assigned a maintenance mode to the communication frame 40 in the mode switching instruction bit of the instruction content unit 42a of the instruction unit 42. Is set to "1".

When each logical device 20 receives the communication frame 40 for which the switching instruction is set, it transitions to the maintenance mode according to the instruction, and when the transition is completed, the communication frame 40 for which the switching response is set is transmitted to the supervising device 10. Specifically, in the received communication frame 40, each logical device 20 sets the bit to which the maintenance mode is assigned to "1" among the mode switching instruction bits of the instruction content unit 42a. Judges that the instruction to switch to the maintenance mode for the own device is set, and switches the own device to the maintenance mode. Then, when each logical device 20 completes the transition to the maintenance mode, the bit to which the maintenance mode is assigned among the mode switching response bits for the own device of the response unit 44 is set to "1" with respect to the communication frame 40. Set to ". At this time, the communication frame 40 remains in a state in which the instruction unit 42 is set to, for example, an instruction to switch to the maintenance mode for all the logical devices 20 as shown in FIG. 5A. Regarding the response unit 44, among the mode switching response bits for the logical device 20 for which the transition to the maintenance mode has been completed, the bit to which the maintenance mode is assigned is set to “1”.

In the received communication frame 40, the control device 10 is in a state in which the instruction unit 42 sets, for example, an instruction to switch to the maintenance mode for all the logic devices 20 as shown in FIG. 5A. Moreover, the response unit 44 confirms that the bit to which the maintenance mode is assigned is set to "1" among the mode switching response bits for all the logical devices 20. It is confirmed that the switching response to the switching instruction to the maintenance mode has been received from all the logical devices 20. This confirmation is shown in FIG. 7 (A).

Subsequently, the supervising device 10 transmits a communication frame 40 in which a switching instruction to the data management mode is set for all the logical devices 20. That is, in the instruction content unit 42a of the instruction unit 42, each bit to which the maintenance mode and the data management mode are assigned is set to "1" among the mode switching instruction bits, and all the logical devices are set in the instruction destination unit 42b. The communication frame 40 in which the mode instruction destination bit for 20 is set to "1" is transmitted. This corresponds to the mode switching instruction step. It is (B) of FIG.

When each logical device 20 receives the communication frame 40 in which the switching instruction is set, each logical device 20 transitions to the data management mode according to the switching instruction. That is, in each logical device 20, in the instruction unit 42 of the received communication frame 40, among the mode switching instruction bits of the instruction content unit 42a, each bit to which the maintenance mode and the data management mode are assigned is set to "1". Since it is set and the mode instruction destination bit of the bit for the self-logic device of the instruction destination unit 42b is set to "1", it is determined that the instruction to switch to the data management mode is set. This corresponds to the mode switching step.

Then, when the transition to the data management mode is completed, each logical device 20 transmits the communication frame 40 in which the switching response is set to the supervising device 10. That is, among the mode switching response bits for the self-logic device of the response unit 44, the communication frame 40 in which the bit to which the maintenance mode and the data management mode are assigned is set to "1" is transmitted. This corresponds to the mode switching completion response step.

Therefore, in the communication frame 40 at this time, the instruction unit 42 remains in a state where the instruction for switching to the data management mode is set for all the logical devices 20 as shown in FIG. 5B, for example. In the response unit 44, among the mode switching response bits for each logical device 20 for which the transition to the data management mode has been completed, the bit to which the maintenance mode and the data management mode are assigned is set to "1". It becomes.

In the received communication frame 40, the control device 10 is in a state where the instruction unit 42 sets, for example, an instruction to switch to the data management mode for all the logic devices 20 as shown in FIG. 5 (b). Yes, and the response unit 44 confirms that among the mode switching response bits of all the logical devices 20, the bits to which the maintenance mode and the data management mode are assigned are set to "1". By doing so, it is confirmed that all the logical devices 20 have completed the transition to the data management mode. This confirmation is shown in FIG. 7 (C).

After confirming that all the logical devices 20 have transitioned to the data management mode, the supervising device 10 transmits the communication frame 40 in which the PL instruction is set to the first target logical device 20. That is, in the instruction content unit 42a of the instruction unit 42, among the processing instruction bits, the bit to which the PL instruction is assigned is set to “1”, and in the instruction destination unit 42b, the processing for the first target logical device is performed. A communication frame in which the instruction destination bit is set to "1" is transmitted. The setting of the instruction unit 42 corresponds to the designated information for designating the target logical device for loading. Therefore, in the communication frame 40 at this time, for example, if the first target logic device 20 is only the first logic device, the instruction unit 42 is in the state shown in FIG. 5 (c).

When each of the first target logical devices 20 receives the communication frame 40 in which the PL instruction is set, it recognizes that the own logical device has been designated as the target logical device for loading, and sets an instruction response to the supervising device 10. The communication frame 40 is transmitted. That is, in each of the first target logical devices 20, in the instruction unit 42 of the received communication frame 40, among the processing instruction bits of the instruction content unit 42a, the bit to which the PL instruction is assigned is set to "1". Moreover, since the processing instruction destination bit of the own device bit of the instruction destination unit 42b is set to "1", it is determined that the designated information designated as the target logical device by the own logical device is set. Then, among the processing response bits for the self-logical device of the response unit 44, the communication frame 40 in which the bit to which the PL response is assigned is set to "1" is transmitted.

Further, in each of the second target logical devices 20, among the processing instruction bits of the instruction content unit 42a of the received communication frame 40, the bit to which the PL instruction is assigned is set to "1", and the instruction destination unit Since the processing instruction destination bit of the bit for the self-logical device of 42b is set to "0", it is recognized that the self-logical device is not designated as the target logical device for loading.

In the received communication frame 40, the control device 10 is in a state in which the instruction unit 42 sets the PL instruction to the first target logic device 20, and the response unit 44 sets all the logics of the first target. By confirming that the bit to which the PL response is assigned is set to "1" among the processing response bits for the device 20, PL from all the first target logical devices 20 Confirm that the instruction response to the instruction has been received.

Upon confirming that the instruction response to the PL instruction has been received from all the logical devices 20 of the first target, the supervising device 10 starts transmitting the new main program for the first target. That is, the communication frame 40 storing the new main program for the first target is transmitted to the communication information unit 46 while the PL instruction is set for the first target logic device in the instruction unit 42. This corresponds to the PL instruction step.

Therefore, in the communication frame 40 at this time, the instruction unit 42 is assigned the maintenance mode and the data management mode among the mode switching instruction bits of the instruction content unit 42a, for example, as shown in FIG. 5 (c). The bit is still set to "1", and among the processing instruction bits, the bit to which the PL instruction is assigned is set to "1", and all of the first targets are set in the instruction destination unit 42b. The processing instruction destination bit of the logical device 20 is set to "1".

When the capacity (size) of the new main program for the first target is large, the program is divided, for example, a sequence number is added and stored in the communication frame 40, and transmission of the communication frame 40 is repeated a plurality of times.

Each of the first target logical devices 20 sequentially receives the divided and transmitted programs for the first target, performs error checking and the like, restores them according to the sequence number, and acquires the program. This corresponds to the PL step. Then, when the acquisition of the program is completed, the acquisition response is transmitted to the supervising device 10. That is, the first target logic device 20 transmits a communication frame 40 in which the bit to which the PL completion response is assigned is set to “1” among the processing response bits for the own logic device of the response unit 44. This corresponds to the PL completion response step.

At this time, since the logical device 20 other than the first target recognizes that it is not designated as the target logical device for loading, nothing in particular is performed.

Therefore, in the communication frame 40 at this time, the instruction unit 42 remains in a state where the PL instruction to the first target logic device 20 is set, as shown in FIG. 5 (c), for example, and the response unit 44 remains. However, among the processing response bits of each of the first target logical devices 20 for which the acquisition of the new main program for the first target has been completed, the bit to which the PL completion response is assigned is set to "1", and the other bits are set to "1". Of the processing response bits of each logical device 20, the bit to which the PL completion response is assigned is set to “0”.

In the received communication frame 40, the control device 10 is in a state where the instruction unit 42 sets a PL instruction to the first target logic device 20 as shown in FIG. 5 (c), and responds. The unit 44 confirms that the bit to which the PL completion response is assigned is set to "1" among the processing response bits of all the first target logical devices 20. 1 It is confirmed that the acquisition completion response of the program for the first target has been received from all of the target logical devices 20. This confirmation is shown in FIG. 7 (D).

Upon confirming that the acquisition completion response has been received from all the logical devices 20 of the first target, the supervising device 10 subsequently transmits an approval instruction to the logical device 20 of the first target. That is, among the processing instruction bits of the instruction content unit 42a of the instruction unit 42, the bit to which the approval instruction is assigned is set to "1", and the instruction destination unit 42b sets the processing instruction for the first target logical device 20. By setting the destination bit to "1", the communication frame 40 in which the designated information for designating the target logical device is set is transmitted. This corresponds to the approval instruction step.

Therefore, in the communication frame 40 at this time, in the instruction content unit 42a of the instruction unit 42, among the mode switching instruction bits, the bit to which the maintenance mode and the data management mode are assigned is set to “1”, and the bit is set to “1” for processing instruction. Of the bits, the bit to which the approval instruction is assigned is set to "1", and the processing instruction destination bit for the first target logical device is set to "1" in the instruction destination unit 42b. ..

Upon receiving this approval instruction, the first target logical device 20 updates the stored current main program to the acquired new main program, and sends an approval response to the supervising device 10. That is, since the processing instruction bit for the own device of the instruction destination unit 42b of the instruction unit 42 is set to "1" in the received communication frame 40, the first target logical device 20 has its own device. It is determined that the specified information specified as the target logical device is set. Further, since the bit to which the approval instruction is assigned is set to "1" among the processing instruction bits of the instruction content unit 42a of the instruction unit 42, it is determined that the approval instruction is set.

Then, when the update of the program is completed, the first target logical device 20 sets the communication frame 40 in which the bit to which the approval response is assigned among the processing response bits for the own device of the response unit 44 is set to “1”. To send.

Further, the first target logic device 20 performs a hardware reset of its own device and restarts. By restarting, a new main process according to the updated current main program will be started. This corresponds to the update reset control step.

On the other hand, in the supervising device 10, in the received communication frame 40, the instruction unit 42 is in a state where, for example, an approval instruction for the first target logic device 20 is set, and the response unit 44 is in a state where all of the first targets are set. Of the processing response bits of the logical device 20 of the above, by confirming that the bit to which the approval response is assigned is set to "1", all of the first target logical devices 20 can be selected. Confirm that the approval response has been received. This confirmation is shown in FIG. 7 (E). After the confirmation, subsequently, the second target logic device 20 is designated as the target logic device, and similarly, the program loading for transmitting and updating the program for the second target is performed.

[Action effect]
As described above, according to the railway signal security system 1 of the present embodiment, the current main program 124 for executing the main process related to signal security by the management process according to the management program 122 in the logic device 20 is provided. Program loading that rewrites to a new main program acquired from the supervising device 10 via the LAN 30 becomes possible. Further, in this program loading, after rewriting the current main program 124 to a new main program, the logic device 20 can be automatically reset by hardware to start the new main program. That is, the program of each logical device 20 connected to the LAN 30 can be updated via the LAN 30.

Further, in the logical device 20, switching to the data management mode in response to the mode switching instruction from the supervising device 10, transmission of the mode switching completion response, loading instruction and its response from the supervising device, acquisition of the new main program, and acquisition of the new main program. By taking steps such as program consistency check (CRC check, program check addressed to own device, SUM value check), transmission of the acquisition completion response, and rewriting to a new main program by the approval instruction from the supervising device 10, the LAN 30 is set. Fail-safety can be ensured for communication between the control device 10 and each logic device 20 via the system.

Further, only the logical device 20 designated by the supervising device 10 as the target logical device can perform program loading such as acquisition and rewriting of a new main program to obtain a part or all of the logical devices 20 among the plurality of logical devices 20. Pinpoint loading is possible, such as program loading as a target.

It should be noted that the applicable embodiment of the present invention is not limited to the above-described embodiment, and of course, it can be appropriately changed without departing from the spirit of the present invention.

For example, in the above-described embodiment, all the logical devices 20 are transitioned to the data management mode when performing pinpoint loading, but only the logical device 20 to be loaded is transitioned to the data management mode. The logic device 20 that is not the target of loading other than the above may not be transitioned to the data management mode.

1 Railroad signal security system 10 Supervision device 20 Logic device 100 CPU control unit, 110 Arithmetic control unit, 120 Storage unit 122 Management program 124 Current main program, 128 Main data 200 LAN communication control unit 300 I / F control unit, 302 input Device, 304 Display device 30 LAN
40 communication frames

Claims (3)

As a communication field, the communication frame including at least an instruction unit in which an instruction from the supervising device to the logical device is set, a response unit in which a response from the logical device to the supervising device is set, and a communication information unit is described above. It is a railway signaling security system configured by communication connection by a communication method that circulates between a supervising device and a plurality of the above-mentioned logical devices.
The logic device is
A storage unit that stores the management program and the current main program,
A processor that executes management processing according to the management program and main processing related to signal security according to the current main program, and
Equipped with
The management program is
When the mode switching instruction included in the instruction unit in the received communication frame is set to the data management mode switching instruction when performing program loading (hereinafter abbreviated as "PL"), the operation mode is set. A mode switching step that controls switching to the data management mode,
When the switching in the mode switching step is completed, the mode switching completion response step for setting the mode switching completion response in the response unit in the received communication frame and controlling the transmission of the communication frame, and the mode switching completion response step.
A PL step that controls acquisition of a new main program stored in the communication information unit in the communication frame when a PL instruction is set in the instruction unit in the received communication frame.
When the acquisition of the new main program is completed, the PL completion response step for setting the acquisition completion response in the response unit in the received communication frame and controlling the transmission of the communication frame, and the PL completion response step.
When an approval instruction was set in the instruction unit in the received communication frame, control was performed to rewrite the current main program stored in the storage unit to the new main program for which acquisition was completed. After that, an update reset control step for controlling the hardware reset of the logical device, and
Is a program for causing the processor to execute the management process including the above.
The supervision device is
A mode switching instruction step for setting the mode switching instruction to the data management mode switching instruction and controlling transmission of the communication frame, and a mode switching instruction step.
When the instruction unit for switching to the data management mode is set in the received communication frame, and the mode switching completion response is set for the response unit in the communication frame, the mode switching completion response is set. A PL instruction step for setting a switching instruction to the data management mode and a PL instruction in the instruction unit, and controlling the communication information unit to store the new main program and transmit the communication frame.
The instruction for switching to the data management mode and the PL instruction are set in the instruction unit in the received communication frame, and the acquisition completion response is set in the response unit in the communication frame. In this case, an approval instruction step for setting the approval instruction in the instruction unit and controlling transmission of the communication frame, and
To execute,
Railroad signaling system. The plurality of logical devices are target logical devices to which some or all of the logical devices are subject to PL.
The supervision device is
In the mode switching instruction step, the designation information for designating the target logical device among the plurality of logical devices is set in the instruction unit, and the mode switching instruction is set in the switching instruction to the data management mode. Controls to transmit the communication frame,
In the PL instruction step, an instruction to switch to the data management mode is set in the instruction unit in the received communication frame, and the response unit in the communication frame is from all the target logic devices. When the mode switching completion response is set , the designated information is set in the instruction unit, and the instruction unit for switching to the data management mode and the PL instruction are set in the instruction unit, and the communication information unit is used. Controls to store the new main program and transmit the communication frame.
In the approval instruction step, the instruction for switching to the data management mode and the PL instruction are set in the instruction unit in the received communication frame, and all the above in the response unit in the communication frame. When the acquisition completion response from the target logic device is set , the designated information is set in the instruction unit, and the approval instruction is set in the instruction unit to control transmission of the communication frame. ,
The management program is
The mode switching step, the PL step, and the said A program for causing the processor to execute the update reset control step.
The railway signaling system according to claim 1. As a communication field, the communication frame including at least an instruction unit in which an instruction from the supervising device to the logical device is set, a response unit in which a response from the logical device to the supervising device is set, and a communication information unit is described above. It is a control method of a railway signal security system configured by communication connection by a communication method that circulates between a supervising device and a plurality of the above-mentioned logical devices.
The logic device is
A storage unit that stores the current main program,
A processor that executes management processing and main processing related to signal security according to the current main program, and
Equipped with
The management process is
When the mode switching instruction included in the instruction unit in the received communication frame is set to the data management mode switching instruction when performing program loading (hereinafter abbreviated as "PL"), the operation mode is set. A mode switching step that controls switching to the data management mode,
When the switching in the mode switching step is completed, the mode switching completion response step for setting the mode switching completion response in the response unit in the received communication frame and controlling the transmission of the communication frame, and the mode switching completion response step.
A PL step that controls acquisition of a new main program stored in the communication information unit in the communication frame when a PL instruction is set in the instruction unit in the received communication frame.
When the acquisition of the new main program is completed, the PL completion response step for setting the acquisition completion response in the response unit in the received communication frame and controlling the transmission of the communication frame, and the PL completion response step.
When an approval instruction was set in the instruction unit in the received communication frame, control was performed to rewrite the current main program stored in the storage unit to the new main program for which acquisition was completed. After that, an update reset control step for controlling the hardware reset of the logical device, and
Including
The supervision device is
A mode switching instruction step for setting the mode switching instruction to the data management mode switching instruction and controlling transmission of the communication frame, and a mode switching instruction step.
When the instruction unit for switching to the data management mode is set in the received communication frame, and the mode switching completion response is set for the response unit in the communication frame, the mode switching completion response is set. A PL instruction step for setting a switching instruction to the data management mode and a PL instruction in the instruction unit, and controlling the communication information unit to store the new main program and transmit the communication frame.
The instruction for switching to the data management mode and the PL instruction are set in the instruction unit in the received communication frame, and the acquisition completion response is set in the response unit in the communication frame. In this case, an approval instruction step for setting the approval instruction in the instruction unit and controlling transmission of the communication frame, and
To execute,
Control method.

Images