KR101347244B1 - Multi controller for safety running train - Google Patents

Abstract

The present invention relates to a multi-controller processing a signal safely in an electronic device formed for safe operation of a train, such as driving control, inner communication control, inner environment control, and distance between trains control. The multi-controller includes an input module receiving an input value from a terminal of a train; a plurality of processors connected in a parallel way to receive the input value from the input module and including a CPU (central processing unit) calculating the input value and outputting a calculation value, a inner power-monitoring unit converting output electricity of a power supplier into a valid voltage to drive the processor, monitoring it, and transmitting an error signal when checking an error, a sensing unit transmitting a stop signal to stop driving the CPU when receiving the error signal from the inner power-monitoring unit, communicating with the CPU by a certain period, and transmitting a management signal, and a reset unit transmitting a reset signal to initialize the processor when receiving the management signal; and a processing module checking the calculation value of the processor and determining a output value . [Reference numerals] (122) Memory; (123) Inner power monitoring unit; (124) Power-monitoring unit; (125) Temperature monitoring unit; (126) Sensing unit; (127) Reset unit; (128) Power control unit; (129) Bus interface; (AA) Power supply

Description

Multi controller for safety running train

The present invention relates to a multiple control apparatus for stably processing signals in an electronic device configured for safe driving of a train, such as driving control of a train, in-vehicle communication control, in-vehicle environment control, distance control between cars, and the like.

As is well known, a train is a means of movement driven by a locomotive, which is a power source, or a driving motor (in the case of an electric train) installed in each vehicle by a plurality of vehicles connected in a row. The train is variously named according to the power generation source of the locomotive, and also variously named according to the use of the train and the moving place.

Trains can be divided into freight trains and passenger trains, depending on their purpose of transportation. By the way, the train is the largest capacity of the land-only means of transport having a transport function, so the movement speed also belongs to the fastest means of transportation, once an accident occurs, not only property damage but also life loss. Therefore, the train must be equipped with a complete infrastructure for the safety of the driving facilities and various devices, thereby ensuring the safe operation of the train.

On the other hand, the driver which is an engine part of a train, the setting part which controls the environment of an engine, etc., the control part which controls the vehicle state of a train, etc. interlock with the electronic device provided with a processor so that it can be operated electronically by an engineer. In general, as can be found in Patent Publication Nos. 10-2006-0019229, 10-2008-0015469, 10-2007-0046972, and the like, various mechanical devices are interlocked with the corresponding electronic devices, The user who uses the electronic device performs a state check and operation control on the mechanical equipment by operating the electronic device. In particular, the electric railway vehicles such as trains, the control electronic devices such as TCMS (Train Control & Monitoring System) to control and monitor the mechanical equipment configured in the electric railway vehicle.

As a result, in order for the machinery that runs the train to operate stably, the control electronics interworking with the machinery must be guaranteed a stable operation. For this purpose, the output value of the arithmetic processing of the control electronics is reliable. Should be guaranteed.

To this end, as shown in FIG. 1 (a block diagram of a conventional multiple control device of a train), the control electronic device (hereinafter, 'control device') includes a plurality of processors 12 and 12 'and has the same input value. A multiprocessing scheme has been proposed.

Referring to the conventional multiple control device 10 in more detail, the conventional multiple control device 10 is an input module for receiving an input value from the terminal 20 consisting of a mechanical device or electronic equipment for driving and / or driving a train. (11), a processor (12, 12 ') which receives the input value from the input module (11) and performs arithmetic processing, and a processing module (10) that checks arithmetic values of the processors (12, 12') and determines a final output value ( 13) and an output module 14 for outputting the output value through a display 30 or the like so that the train driver can check the output value. Here, two or more processors 12 and 12 'are configured, and receive input values separately from the input module 11 to perform arithmetic processing, and the processing module 13 processes from each of the processors 12 and 12'. Check the final computed value and output the reliable final computed value as an output value.

For example, when there are two processors 12 and 12 ', the processing module 13 processes the operation value to be output as an output value only when the calculation values of the processors 12 and 12' match. When (12, 12 ') is three, only two or more matching calculation values among the calculation values of the processor 12, 12' are processed to be output as output values.

Through this processing method, the operation reliability of the input value is increased, and thus the safety of train operation based on this is improved.

However, an error occurs in the operation process due to a problem in the processor 12, 12 'itself, a problem in the operation value due to this operation error, the operation that a number of processors (12, 12') has a problem If the values matched and were finally output to the output, the train could malfunction due to the problematic output and cause problems. Of course, the malfunction of these trains would lead to catastrophic accidents, which would result in numerous casualties and property damages, which necessitated to fundamentally block the possibility of computational errors on the processors 12, 12 'itself.

Patent Document 1. Publication No. 10-2006-0019229 (published Mar. 03, 2006)

Patent Document 2. Publication No. 10-2008-0015469 (published Feb. 19, 2008)

Patent Document 3. Publication No. 10-2007-0046972 (published May 3, 2007)

Therefore, the present invention has been invented to solve the above problems, and in a multi-system system environment in which a plurality of processors independently process input values, the processor is prevented from malfunctioning, thereby ensuring safe train operation. An object of the present invention is to solve the provision of multiple control devices for safe train operation.

According to an aspect of the present invention,

An input module for receiving an input value from a component terminal of the train;

A central processing unit (CPU) for arithmetic processing the input value and outputting an arithmetic value, an internal power monitoring unit for transforming and monitoring the output electricity of the power supply to an effective voltage for driving the processor, and for transmitting an abnormal signal when an abnormality is confirmed; A detection unit which transmits a stop signal for stopping the operation of the CPU when receiving an abnormal signal of an internal power monitoring unit, communicates with the CPU at regular intervals, and transmits a management signal; and sends a reset signal to initialize the processor when the management signal is received. A plurality of processors each having a reset unit configured to be connected in parallel to receive the input values separately from the input module; And

A processing module for determining an output value by checking an operation value of the processor;

It is a multi-control device for safe train operation including a.

Since the present invention checks whether the processor is abnormal and stops its operation before a calculation error, the possibility of the train operating according to a problem output value can be prevented in advance, so that a large accident due to a train malfunction There is an effect that can be minimized.

1 is a block diagram of a conventional multiple control device of a train,
2 is a block diagram showing a configuration of a processor configured in a multiple control apparatus according to the present invention;
Figure 3 is a block diagram showing the configuration of the internal power monitoring unit according to the present invention,
Figure 4 is a block diagram showing another embodiment of a multiple control apparatus according to the present invention.

The above-described features and effects of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, and thus, those skilled in the art to which the present invention pertains may easily implement the technical idea of the present invention. Could be.

The present invention is capable of various modifications and various forms, and specific embodiments are illustrated in the drawings and described in detail in the text. It should be understood, however, that the invention is not intended to be limited to the particular forms disclosed, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

2 is a block diagram showing the configuration of a processor configured in a multiple control apparatus according to the present invention.

The processor 120 in the multi-control apparatus according to the present invention includes a central processing unit (121) for computing an input value of the input module 11 (refer to FIG. 1) and various operations for supporting the operation of the CPU 121. A memory 122 for storing data, an internal power monitoring unit 123 for transforming and supplying electricity for driving the processor 120, and detecting a generated electric state, and a power monitoring unit for detecting a power state of the processor 120. 124 and the temperature monitoring unit 125 for detecting the generated temperature of the processor 120, the internal power monitoring unit 123, the power monitoring unit 124, and the abnormal signal of the temperature monitoring unit 125 after checking the processor The sensing unit 126 for controlling the driving of the 120, the reset unit 127 for checking the stop of the processor 120 and initializing the configuration of the processor 120, and supplying power according to the control of the processor 120. Interlocking between the power control unit 128 and the processor 120 and other modules And a bus interface 129 to Lee.

The CPU 121 processes the input value of the input module 11 in accordance with the specified calculation process to derive the calculation value. In addition, the CPU 121 controls a signal while communicating with each component included in the processor 120, and thereby operates the component to accurately perform its function.

The memory 122 stores the driving program data of the CPU 121, the control program data for controlling the configuration included in the processor 120, various log data generated while the CPU 121 is being driven, and the like. ) Can operate normally, and can be composed of SDRAM, Flash Memory, and the like.

The internal power monitoring unit 123 detects an electric state applied in the processor 120, generates an abnormal signal when the electric state is out of a specified range, and disconnects power so that no electricity is applied to the processor 120.

Figure 3 is a block diagram showing the configuration of the internal power monitoring unit according to the present invention, will be described with reference to this.

The internal power monitoring unit 123 according to the present invention includes a transformer 1231 and 1231 'for converting high voltage electricity drawn from a power source into a voltage that can be consumed by the processor 120, and a transformer 1231 and 1231'. Switches 1232 and 1232 'for controlling the output of the transformed electricity, monitors 1233 and 1233' for checking the power state of electricity output from the transformers 1231 and 1231 ', and monitors 1233 and 1233'. And a drive controller 1234 for controlling the switches 1232 and 1232 'according to the detected signal and transmitting an abnormal signal to the sensing unit 126 to guide the abnormal state of the internal power.

Since the devices configured in the processor 120 operate while communicating signals with each other, relatively low voltage electricity is required. Therefore, a relatively high voltage of DC 24V is applied and supplied to the power supply, and the transformers 1231 and 1231 'convert the high voltage of the power supply into a relatively low voltage of DC 5V or DC 3.3V. In the embodiment according to the present invention, the first transformer 1231 for converting the electricity of the power source to 5V is electrically connected to the power source, and the second transformer for converting the electricity output from the first transformer 1231 to 3.3V. The two transformers 1231 ′ are electrically connected in parallel with the first transformer 1231.

In general, since electrical and electronic components are standardized to be implemented at DC 5V and DC 3.3V, in an embodiment according to the present invention, electricity of DC 24V is 5V and 3.3V by the first and second transformers 1231 and 1231 ', respectively. Although the transformer is illustrated, the number of transformers and the magnitude of the transformer are not limited to the above examples. For reference, as described above, the second transformer 1231 ′ is connected in parallel to the lead wire of the first transformer 1231 to convert the 5V voltage electricity output from the first transformer 1231 to 3.3V. The present invention is not limited thereto, and may be directly connected to the power supply to directly convert 24V electricity into 3.3V voltage electricity.

The electricity transformed through the first and second transformers 1231 and 1231 'is supplied to the corresponding unit of the processor 120 through the first and second switches 1232 and 1232', and the processor 120 is normally driven. do.

Meanwhile, the first monitor 1233 measures the voltage of electricity output from the first transformer 1231 in real time, and the second monitor 1233 'measures the voltage of electricity output from the second transformer 1231' in real time. Measure with The first and second monitors 1233 and 1233 'check whether the voltage of the electricity output from the first and second transformers 1231 and 1231' is over voltage or under voltage, respectively. When the voltage of electricity output from ') is out of the allowable range, the corresponding detection signal is generated and output.

When the drive controller 1234 receives the detection signals from the first and second monitors 1233 and 1233 ', the driving controller 1234 controls all of the corresponding first and second switches 1232 and 1232' to control switching so that electricity is not output, An abnormal signal is sent to the unit 126. When at least one or more of the first and second transformers 1231 and 1231 'are confirmed to have a transformer abnormality by the first and second monitors 1233 and 1233', both the first and second switches 1232 and 1232 'are controlled. Thus, no electricity is applied to the inside of the processor 120, and at the same time, the CPU 121 transmits an abnormal signal to the detection unit 126 so as to perform a subsequent operation such as driving stop in response to the abnormal state.

The power monitoring unit 124 monitors an output voltage of a power source configured independently for each processor 120, and transmits an abnormal signal to the detection unit 126 when the output electricity is determined to be over voltage or under voltage. In the multiple control apparatus according to the present invention, a plurality of processors 120 are independently configured, and a power source, which is a power source for driving thereof, is also independently configured, and the power monitoring unit 124 is a high voltage (DC 24V) output from the power source. Check the status of.

The power monitoring unit 124 monitors the output electricity of the power in response to a confirmation signal periodically transmitted by the detector 126, and detects an abnormal signal when the output electricity is identified as over voltage or under voltage. To be sent. Of course, the power monitoring unit 124 independently monitors the output electricity of the power source irrespective of the control of the sensing unit 126, and detects an abnormal signal when the output electricity is identified as over voltage or under voltage. Can be sent out.

The temperature monitoring unit 125 checks the temperature in the board of the processor 120 on which the CPU 121 is mounted, and forcibly stops the operation of the CPU 121 when the temperature of the board is outside the standard temperature of the CPU 121. Let's do it. The CPU 121 is mounted on the board which is a conventional PCB board, and the board receives the operating temperature of the CPU 121 as it is. Therefore, the temperature monitoring unit 125 may indirectly check the temperature of the CPU 121 by measuring the temperature of the board, and thus may determine whether the CPU 121 is out of the standard temperature.

Subsequently, when it is determined that the board is out of a specified temperature (standard temperature), the temperature monitoring unit 125 directly controls the CPU 121 to stop driving of the CPU 121 or abnormally detects the detection unit 126. The signal is sent so that the detection unit 126 controls the driving of the CPU 121. Since the board is made of a material having excellent thermal conductivity, an arrangement position of the temperature sensor constituting the temperature monitoring unit 125 will not be limited, but adjacent to the CPU 121 in order to respond sensitively to thermal changes of the CPU 121. It would be desirable to be a location.

When the abnormality signal is transmitted from the internal power monitoring unit 123, the power monitoring unit 124, or the temperature monitoring unit 125, the detection unit 126 assumes that a problem occurs in the corresponding processor 120, and the CPU 121. A stop signal is sent to the CPU 121 to control the CPU 121 to be forcibly stopped. In addition, the detector 126 periodically communicates with the CPU 121 and transmits a management signal, which is a watchdog, to the reset unit 127.

The sensing unit 126 is a device for forcibly controlling the CPU 121 while communicating with the CPU 121. The sensing unit 126 may be a program for performing the above-described functions, recorded in the memory 122, and executed. It may be configured to perform the above-described function.

When the reset unit 127 does not receive the management signal from the detector 126 due to the communication disconnection between the detector 126 and the CPU 121, the reset unit 127 may detect the CPU 121, the memory 122, and the detector 126. And a reset signal is sent to the power supply controller 128 and the bus interface 129 to be initialized. As described above, when the sensing unit 126 stops driving the CPU 121 in response to the abnormal signal, each of the components of the processor 120 is stopped in a different driving state, and reboots in this state. In such a case, the system may crash due to a conflict between the configurations. Therefore, by resetting each configuration of the processor 120 to an initial state, the processor 120 can start to operate stably upon rebooting.

The power controller 128 controls the electrical output of the power when the reset signal of the reset unit 127 is received. The power outputs a high voltage of DC 24V to the internal power monitoring unit 123. Since the output electricity is monitored in real time by the power monitoring unit 124, the detection unit 126 as described above when checking for abnormality. Stops the driving of the CPU 121, and the reset unit 127 sends a reset signal so that the power control unit 128 controls the power to prevent electrical output. As a result, the processor 120 is stopped from applying electricity, through which the possibility of abnormality of the processor 120 due to high voltage or the like is fundamentally blocked.

On the other hand, the power control unit 128 includes a starting unit (not shown). The starting unit is composed of an electrical isolation logic, and controls the electrical output of the power when the internal power monitoring unit 123 and the power monitoring unit 124 perform normal monitoring or normal communication of a management signal. . As a result, when a reboot of the processor 120 is stopped and a normal driving environment is created, the power controller 128 controls the starting unit for driving the processor 120 to continue the electric output of stopping the power. Do it.

The bus interface 129 processes interworking between the processor 120 and other modules. For this purpose, the bus interface 129 may exchange information with boards on which the CPU 121 is mounted to perform other functions. To be relayed. For reference, since the bus interface 129 relays communication with the processing module 13, the operation value calculated by the processor 120 is transmitted to the processing module 13 through the bus interface 129.

Figure 4 is a block diagram showing another embodiment of a multi-control device according to the present invention, will be described with reference to this.

The multiple control apparatus 10 'according to the present invention includes three or more processors 120, 120', 120 "connected in parallel to receive the input values separately from the input module 11, and the processing module 130 Determines the final output value by checking the arithmetic value computed by the processors 120, 120 ', 120 ".

In general, the internal electrical application of the processors 120, 120 ', and 120 "configured in the multiple control apparatus 10' is made separately by the internal power monitoring unit 123 configured in each, but the power is integrated into one. That is, since a plurality of processors (120, 120 ', 120 ") is supplied with electricity from one power source, when a problem occurs in the power source, all of the processors (120, 120', 120") should be stopped.

However, the processor 120, 120 ', 120 "according to the present invention, as described above, the power is individually configured for each processor (120, 120', 120"), to monitor the abnormality of the output electricity of each power source The power monitoring unit 124 is configured to allow only the driving of the corresponding processors 120, 120 ′, and 120 ″ having a problem in case of emergency, thereby enabling efficient operation of the multiple control apparatus 10 ′.

In addition, the processing module 130 checks the arithmetic values of the processors 120, 120 ', and 120 ", and finally, if the same arithmetic values are equal to or greater than a specified number, finalizes them as output values. That is, the three processors 120, 120' are determined. , 120 "), if the calculated values of two or more processors match, the calculated values are set to be outputted. If two processors output the same calculated value even if one processor is stopped due to malfunction, The processing module 130 of the control device 10 'is to allow the train to run stably while outputting the corresponding calculated value as an output value without stopping.

Of course, the problem processor is indicated and notified separately, and the processor resolves and repairs the problem through supplementation. In addition, when the number of coincidences of the calculated values of other processors does not satisfy the specified number or more during the recovery process, the output of the output value is stopped and the operation of the corresponding train is stopped.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

10,10 '; Multiple controller 11; Input module
12,12 ', 120,120,120 "; processor
14; Output module 20; A terminal 30; Displayer
121; CPU 122; Memory 123; Internal Power Monitoring
124; A power monitoring unit 125; Temperature monitoring part
126; A detector 127; A reset unit 128; Power control unit
129; Bus interface 1231,1231 '; First and second transformer
1232,1232 '; First and second switches 1233 and 1233 '; 1st, 2nd monitor
1234; Drive controller

Claims (6)

An input module for receiving an input value from a component terminal of the train;
A central processing unit (CPU) for arithmetic processing the input value and outputting an arithmetic value, an internal power monitoring unit for transforming and monitoring the output electricity of the power supply to an effective voltage for driving the processor, and for transmitting an abnormal signal when an abnormality is confirmed; A detection unit which transmits a stop signal for stopping the operation of the CPU when receiving an abnormal signal of an internal power monitoring unit, communicates with the CPU at regular intervals, and transmits a management signal; and sends a reset signal to initialize the processor when the management signal is received. A plurality of processors each having a reset unit configured to be connected in parallel to receive the input values separately from the input module; And
A processing module for determining an output value by checking an operation value of the processor;
Multiple control device for safe train operation comprising a. The method of claim 1,
The internal power monitoring unit,
A transformer for transforming the output electricity of the power source to an effective voltage, a monitor for monitoring the electricity output from the transformer and transmitting a detection signal when an abnormality is confirmed, a switch for switching the output of electricity output from the transformer, and the monitor And a drive controller for controlling the switch to be disconnected upon receiving a detection signal and transmitting an abnormal signal to the detection unit.
Multiple control device for safe train operation, characterized in that. 3. The method according to claim 1 or 2,
The processor comprising:
The apparatus may further include a power monitoring unit for monitoring the electricity output from the power supply and transmitting an abnormal signal to the sensing unit when an abnormality is confirmed.
Multiple control device for safe train operation, characterized in that. The method of claim 3, wherein
The power source is individually configured for each processor;
The processor further includes a power control unit for controlling the power of the processor to limit the electrical output upon receiving the reset signal;
Multiple control device for safe train operation, characterized in that. 3. The method according to claim 1 or 2,
The processor comprising:
And a temperature monitoring unit configured to detect a temperature of a board on which the CPU is mounted and to stop driving of the CPU or to transmit an abnormal signal to the detection unit when sensing a temperature other than a predetermined temperature.
Multiple control device for safe train operation, characterized in that. The method of claim 1,
The processing module checks each operation value transmitted from the plurality of processors, and sets the operation value as an output value when the number of matching operation values is greater than or equal to the specified number.
Multiple control device for safe train operation, characterized in that.

Images