RU2692739C1 - Microprocessor centralization system mpc-el - Google Patents

Abstract

FIELD: railway automatics.SUBSTANCE: invention relates to railway automation for centralized control of objects of railway automation and telemechanics. System includes at least one AWS of duty in a subsystem of local and/or remote control and surveillance, also comprising the AWS of operational personnel, a control computer included in the subsystem of the central processor, configured to determine the state of the monitoring and control objects with the possibility of generating control commands for the object controller subsystem to change the state of the monitored objects, processor core of the control computer consists of two functionally identical modules and has a “two of two” structure with providing hot backup, and electronic control and monitoring devices, which directly control objects of lower level of local railway automation and telemechanics, are part of the subsystem of object controllers, which is an interface for floor equipment.EFFECT: enabling possibility of microprocessor centralization of railway automation and telemechanics objects.2 cl, 1 dwg

Description

The invention relates to railway automation, in particular, to a microprocessor centralization system, designed for centralized control of arrows, traffic lights and other objects at railway stations, hauls.

Currently, for the organization of train movement, shunting work and traffic safety, railway stations are equipped mainly with various systems of relay electrical interlocking (EC), the control and monitoring objects of which are:

- arrows, electric track circuits, traffic lights and their combination;

- crossings, shunting columns or towers;

- UKSPS devices;

- means of notification working on the tracks and turnouts;

- device fencing compositions.

In the prior art, systems (EC-EM, MPC-MPL, MPC-I) are widely known.

The centralization data allows, along with remote control, to monitor compliance with the technology of the transportation process and is an information basis for the control of technological discipline.

The technical problem of the claimed invention is the expansion of the arsenal of tools for a specific purpose with the provision of the technical result consisting in the implementation of the assignment, which is achieved in a microprocessor centralization system for railway automation and telemechanics consisting of at least one duty workstation containing tools for diagnosing the state and entering control commands objects of railway automation and remote control in real time nor a controlling computer connected to at least one duty station, an I / O device for interfacing the controlling computer with railway automation and remote control objects, electronic control and monitoring devices that directly monitor and control low-level objects of local railway automation and telemechanics, characterized in that at least one automated workplace on duty is included in the subsist local and / or remote control and surveillance, containing also automated workplaces of operating personnel, a controlling computing computer is included in the central processor subsystem having a hot reserve consisting of two synchronized processor devices and configured to determine the state of objects of monitoring and control, as well as with the possibility of generating control commands for the object controller subsystem on changing the state of controlled objects, and electronic control and monitoring devices that directly monitor and control low-level objects of local railway automation and remote control, are part of the object controller subsystem, which is an interface for outdoor equipment, while this subsystem is designed to receive control signals from the central processor subsystem, as well as with the possibility of continuous monitoring of objects of control and management, transfer of actual actual information in the subsystem CPU.

A distinctive feature is also the fact that the microprocessor system for centralizing objects of railway automation and remote control contains a subsystem of protection against unauthorized access and penetration of malicious programs, made with the ability to interact with all of these subsystems.

This technical result is achieved by a microprocessor centralization system MPC-EL, consisting of:

- the subsystem of the central processor, consisting of at least two (main and redundant) processor modules (channels) with power supply and switching for each. At the same time, an increase in system performance is allowed by adding additional control computers (CPUs);

- input-output devices (UVV) for interfacing with control and monitoring devices;

- subsystems of object controllers containing control and monitoring devices (CCM) for automation objects of the lower level - arrows, traffic lights, etc .; outdoor equipment (BUT) automation objects of the lower level (arrows, traffic lights, track circuits, level crossings, etc.);

- subsystems of local and / or remote control and monitoring, containing, in addition to the automated workplace of the operator;

- control unit and control station duty officer (DSP), which forms an automated workplace - AWP DSP;

- power supply devices (UE);

- means of protection against unauthorized access and penetration of malicious programs (NCC-EL).

The subsystems of local and / or remote control and observation provide the conversion of mnemonic commands entered by the operator into instructions recognized by the central processor. In addition, this subsystem, receiving indication variables from the CPU, converts them into a mnemonic indication in the workplace that the operator understands. Also, this subsystem provides receiving, converting and displaying diagnostic information about the state and performance of the system.

The central processor subsystem receives instructions from the automated workplace, determines, based on them, the required state of the control and monitoring objects, evaluates the possibility of bringing the monitoring and control objects into the required state, in accordance with the rules of traffic organization and the actual train situation (calculation of dependencies) and generates orders for the object controllers to change the state of controlled objects. On the other hand, the central processor subsystem receives information on the actual state of the objects of monitoring and control and diagnostic information from the object controller subsystem in order to update information on the state of the object being monitored and inform the operator. The subsystem also controls the actual time and relevance of the information.

The object controller subsystem, which is the interface for floor equipment, takes orders from the central processor subsystem and in accordance with them puts the controlled equipment into the required state. On the other hand, the object controller subsystem continuously monitors the objects of control and management and transmits the actual, actual information (statuses and diagnostic information) to the central processor subsystem.

The protection subsystem interacts with all subsystems, at all levels and, without affecting the performance of functions for its intended purpose, provides control over the available connection nodes and their activity, informing about unauthorized and / or malicious connections that may lead to disruption of the entire system.

The functions of centralization performed by the proposed system include: remote centralized control of arrows, traffic lights and other objects of outdoor equipment at railway stations with the purpose of organizing train traffic, as well as monitoring the state of technical equipment involved in the process of implementing and managing train traffic, issuing to the station duty officer (DSP) operational, archival and regulatory information, as well as the formation of protocols for the operation of devices (events and states) and actions personnel, monitoring the state of railway automation facilities and managing the state of facilities, diagnosing the technical condition of devices, self-diagnosing equipment, logging system operation, monitoring and managing the system in an interactive mode, which significantly improves the operational performance of railway sections and improves train safety.

The use of the microprocessor centralization system MPC-EL allows you to organize remote control of adjacent stations, as well as implement the functions of the interval control systems automatic locking (AB), semi-automatic locking (PAB), automatic locomotive signaling (ALSO).

The system MPC-EL is equipped with means to increase protection against unauthorized access and the penetration of malicious programs, which is becoming especially important today for all computerized control systems.

The system complex of the system, besides the floor equipment, can be located both centrally at the EC post and distributed, for example, in transportable modules, depending on the design solutions used and the functional tasks to be solved.

The microprocessor centralization system can be scaled by connecting additional workstations, control computers and device control devices of the lower level, providing centralization functions for monitoring and controlling switches, traffic lights and other objects of railway automation and telemechanics in compliance with the requirements of train traffic safety. existing devices of interval regulation for objects of various sizes and technical equipment and I.

The microprocessor centralization of the MPC-EL has a three-level structure and is shown in FIG. one:

- the top level is the “operator-system” interaction level and is a subsystem of local and / or remote control and monitoring (ПУН) (1), contains automated workplaces of the station attendant and service personnel, containing means for entering commands for controlling railway automation objects and telemechanics, diagnostics of the state of objects of railway automation and telemechanics, the conversion of mnemonic commands entered by the operator into control commands (2) recognized by the subsystem second CPU (3), and the transformation of indicator variables (4) derived from the CPU (3) in mnemonic display on an operator to providing status display control and management of objects (5) and diagnostic information (10);

- the information processing level contains a centrally-redundant CPU subsystem (3) that provides centralization functions with route dependencies on the state of railway automation and telemechanics objects and / or control of arrows, traffic lights and other railway automation and telemechanics objects. This subsystem receives signals (2) from the AWS, determines on their basis the state of objects of monitoring and control, assesses the possibility of bringing the objects of monitoring and control (5) into the required state, in accordance with the rules of traffic organization and the actual train situation (calculation of dependencies) and forms orders (6) for a subsystem of object controllers (7) to change the state of controlled objects. In addition, the central processor subsystem (3) receives information on the actual state (8) of the control and monitoring objects (5) and diagnostic information (9) from the object controller subsystem (7) in order to update information on the state of the monitored object and inform the operator;

- the lower level of control and monitoring of railway automation and remote control objects, consisting of control and monitoring devices (5), which are the object controllers subsystem (PCS) (7), is an interface for outdoor equipment, receives control commands (6) from the central processor subsystem ( 3) and, in accordance with them, puts the controlled equipment in the required state, forming an electrical signal (12). In addition, the PCS (7) continuously monitors the objects of control and management (5) and transfers the actual factual information (statuses (8), diagnostic information (9)) to the PCP (3). The hardware architecture of the microprocessor centralization system of the MPC-EL is a complex of components that allows you to create any system configuration in accordance with the specific project of the station, automatic blocking system, or their combinations, followed by reconfiguration when the track development changes, if necessary.

The time of submission of information on changes in the state of monitored objects (from the moment of occurrence of this change to the time of the appearance of the corresponding display on the monitor screen) does not exceed 1.8 s.

The upper level of information support may contain an automated workplace of the station duty officer (AWP chipboard) and, if necessary, the engineer of the signaling system (AWP SHN), database and application servers with functions of displaying the process of train movement, diagnostics of the state of objects and regulatory information, as well as additional devices for interfacing with information systems for various purposes. Interactive subsystem should provide a complete display of information and interaction of chipboard and signaling engineers with the system, as well as communication with higher-level systems.

The automated workplaces of the station duty officer (ARM DSP) and the signaling engineer (ARM ShN) provide a display of the state of objects of control and management, allow collecting and processing diagnostic information about the technical state of automation devices at the station, predicting the occurrence of failures and optimizing the maintenance process. In addition, the automated workplace of a chipboard forms the tasks of managing objects in the interactive mode, in real time (without checking dependencies and security conditions — the responsible commands), as well as maintaining and reading the event archive.

Input of control commands on all AWP chipboard is carried out using standard computer hardware (alphanumeric keyboard, mouse-type manipulators).

Control of the state of objects at the station and adjacent spans and train situation is carried out on the image on the monitors.

Control commands are entered with the exception of unauthorized access.

The system units of the station attendant (AWP chipboard), the signaling engineer (AWS SHN) and communication with remote monitoring systems are organized using Ethernet equipment and TCP / IP protocol.

The permissible response time of the system to the effects on the information input device of the automated workplace (keyboard, manipulator) does not exceed 0.5 s.

The total time of transfer of control commands from the automated workplace of a chipboard to executive devices does not exceed 1 s.

To improve the reliability of the system, you can use additional AWP chipboard. Then the control is performed from one of the automated workplaces of chipboard, which is in control mode, the other in this case is in reserve. To expand the functionality of the system, additional workplaces can be organized, for example, management of shunting areas, individual station parks, shared use boards, etc.

Commands from the automated workplace of the chipboard are processed and processed at the level of logical information processing by the control computer of the central processing unit subsystem (3), built on the basis of the control computer, which performs the functions of centralizing and blocking arrows and signals in order to ensure high throughput of the station under the necessary security conditions .

PCP (3) represents a complex of processor devices that provides installation, closure and opening of routes at the station while observing the requirements of train traffic safety by checking the required interdependencies of software and hardware, with the provision of hot redundancy.

The control computer is made on the basis of the modules of the existing specialized computer for the implementation of the centralization system.

The control computer is located at the electric centralization post in a relay or separate room, or transportable module.

The hardware part of the control computer is located in 19 "computer cabinets and consists of the following elements and components:

- 19 "rack for installing computer modules;

- computer power supply modules;

- modules of centralization computer processors;

- modules for data exchange and information storage;

- communication modules;

- switching connections.

The cabinet is a metal frame with removable side walls made of sheet steel. Sheet metal doors are installed on the front and back sides; the front door of the computer cabinet is equipped with a transparent viewing window.

The cabinet is equipped with a 19 '' rack for installing computer modules, computer power supply modules, centralization computer processor modules, data exchange and information storage modules, communication modules, overvoltage protection devices, communication equipment, switching terminals, and fixing cables for switching cables.

The processor core of the control computer consists of two functionally identical modules and has a “two of two” structure with diversified software and data presentation.

The processor core of the control computer consists of two functionally identical modules and has the structure of "two of two" with the provision of hot redundancy and diversified hardware and software and data presentation inside the cores to ensure the safety integrity level 4 (UPB 4 according to GOST R IEC 61508 -1-7-2012).

The modules of the processor core perform data processing according to technological algorithms (logic to ensure dependencies of centralization) and system software.

On the front panel of the processor core module are the local control, switching and display.

The “two out of two” structure consists of two independent, identical in design and software, taking into account diversification, processor modules, which are synchronized by the hardware and software method.

Identical data is entered into each processor module from the point of view of logical representation, but diversified in its physical representation.

The results of processing and intermediate calculations in the processor modules are compared in two independent channels, and a decision is made to issue a command to the control devices.

Channel check is performed cyclically in the background. If there are discrepancies between the results of the processor modules or the detection of diagnostic failures, the processor modules are transferred to safe mode, and the system goes to the hot-stand kit. In this case, the switching time is not more than 0.6 seconds.

This structure of the centralization processor allows you to maintain a fully functional operability of the control computer, even if a single processor module fails, and to identify and disable a faulty processor module based on the results of calculations in the process of their comparison.

The control actions in the MTS-EL system are carried out through the object controller subsystem (7) - the level of a safe I / O interface, made in the form of input / output devices (object controllers), which provide direct control and monitoring of lower level automation objects (switches, traffic lights , relay interfaces, etc.).

I / O devices are specialized controllers, with diversified software, for direct control of lower-level hardware. There are three types of input / output devices for: controlling / controlling dial drives, controlling / controlling traffic lights, and controlling / controlling relay elements.

To obtain reliable information about the state of objects that directly affect the safety of trains and their management, a two-channel diversified data entry scheme (two-channel input with information representation using a modified Hamming code) is applied.

The implementation of the principle is that when reading information from the module inputs, the status of both inputs of the two-channel input is analyzed.

Channels must provide information in accordance with the principles of diversification, otherwise the input is considered faulty.

With two-channel control, the command is perceived only if the control order received from two control channels at the same time is correct.

The power supplies of the system are powered from the primary source of alternating current (UE), which ensures the choice of the feed feeder, and the emergency power supply when the input voltage on the feeders is lost.

The software MPC-EL contains data on the station's station development, algorithms and programs that implement the functions of the system. Technical algorithms and procedures that make up the mathematical software of the system do not depend on the station's track development. Binding of software to a specific station is performed in the design process, at the level of object-oriented technological software.

Data exchange in the system and outside it occurs through the hardware of the automated workplace, which may include:

- AWP of the station duty officer (with reservation);

- AWS engineer signaling.

AWP chipboard or dedicated server contains an archive application server and database, designed to monitor the process at the station.

Information is exchanged with the PCP via the TCP-IP network. To protect information from distortion and to maintain the integrity of data structures in case of unforeseen interference, a checksum calculation using the CRC-8, CRC-16 algorithm and counting the sequence numbers of all incoming and outgoing packets is used.

Using the TCP-IP network, the MPC-EL microprocessor centralization system has the ability to organize interaction with the corresponding upper level ZHAT software and hardware, ensuring the safety of train traffic (centralized traffic control room), information systems (ACS of a large station, etc.), as well as single-level compressed - self-locking, semi-automatic locking. To ensure information security requirements, external systems should be connected through devices of an integrated cyber security enhancement system (11) (KSPK-EL) (13), which ensures information security requirements and meets train traffic safety requirements.

In the route control mode, the microprocessor centralization system provides installation of train and shunting routes, opening of traffic lights protecting the route, while ensuring all safety conditions by checking the necessary interdependencies and interlocking arrows and traffic lights.

In the individual control mode, the system provides individual control of objects (arrows, traffic lights, etc.) with the check of all dependencies related to this object.

The software MPC-EL contains all the necessary information on the implementation of interdependencies and binding to a specific object.

In addition, it should be noted that the stated microprocessor centralization system of MPTs-EL is implemented in accordance with GOST R IEC 61508 -1-7-2012 with UPB not lower than level 4 or EN 50129, EN 50128, EN 50126 with a level not lower than SIL 4. To build the system, specialized hardware and software solutions were used. Removing or replacing any subsystem will lead to the termination of the functioning of the entire system for its intended purpose.

Claims (2)

1. A microprocessor system for centralizing objects of railway automation and remote control, consisting of at least one automated workstation on duty, containing means for diagnosing the state and entering commands for controlling objects of railway automation and remote control in real time, a control computer connected to at least one automated workplace duty, input-output devices for interfacing the control computer with the objects road automation and remote control, electronic control and monitoring devices that directly monitor and control low-level objects of local railway automation and remote control, characterized in that at least one automated duty station is included in the subsystem of local and / or remote control and monitoring, containing also automated workplaces of the operating personnel, the control computer is included in the subsystem processor with the ability to determine the state of objects of control and management and the possibility of generating control commands for the object controller subsystem to change the state of controlled objects, the processor core of the control computer consists of two functionally identical modules and has a “two of two” structure with hot backup , and electronic control and monitoring devices that directly monitor and control low-level local objects railway automation and remote control, are part of the object controller subsystem, which is an interface for outdoor equipment, and this subsystem is designed to receive control signals from the central processor subsystem, as well as to continuously monitor objects of control and management, to transfer actual factual information into the central processor subsystem. 2. The microprocessor system according to claim 1, characterized in that it contains a subsystem of protection against unauthorized access and penetration of malicious programs, made with the ability to interact with all of these subsystems.

Images