RU2751923C1 - Winding control module of railway automation relay and method for controlling railway automation relay windings - Google Patents

Abstract

FIELD: railway automation.SUBSTANCE: invention relates to control means for relay windings of railway automation. The technical solution is a module for controlling relay windings of railway automation, made with the ability to safely determine the position of the relay contacts using the encoded signal of the external control module and safely control the relay windings, containing comparators for monitoring the integrity of the winding of controlled relays, the module is equipped with four galvanically isolated converters of input DC voltage to output DC voltage with the ability to control four safe comparators, and the safe comparators are designed to receive a control signal through an address decoder and a control word encoder.EFFECT: provided is possibility to realize control of relay windings of railway automatics without determining the position of the contacts of the relay for monitoring the integrity of the winding with an increase in the safety of control circuits.2 cl, 5 dwg

Description

The invention relates to railway automation, namely to methods and devices for controlling a relay of railway automation, and can be used at railway stations to control a relay of railway automation .

From the prior art, a device is known for turning on the actuators of railway automation and telemechanics systems, containing an amplifier, to the outputs of which the primary winding of the transformer is connected, the secondary winding of which is connected to a capacitor through a diode, a pulse generator, the output of which is connected to the input of the amplifier, characterized in that in Two converters of pulse signals into constant voltage are introduced into it, the outputs of which are connected, respectively, to the input of the pulse generator and to the second input of the amplifier. (see patent for a useful model of the Russian Federation No. 114017, class B61L 19/00, publ. 2012) The device for switching on actuators of railway automation and telemechanics systems differs in that the converters of pulse signals to DC voltage contain an optocoupler consisting of an LED and a phototransistor, a bipolar transistor, two diodes, two capacitors, four resistors and two power supplies, the input of the pulse-to-constant voltage converter is connected to the cathode of the LED, the anode of which is connected through the first resistor to the positive pole of the first power supply, the base of the bipolar transistor is connected to the collector phototransistor, the base of the phototransistor through the second resistor is connected to its emitter, which through the third resistor is connected to the common pole of the first and second power supplies, which through the fourth resistor is connected to the collector of the bipolar transistor, the collector of the phototransistor through the fifth resistor is connected to p The positive pole of the second power supply, which is connected to the emitter of the bipolar transistor, to the anode of the first diode and through the first capacitor to the output of the pulse signal to DC voltage converter, which is connected to the cathode of the second diode, the anode of which is connected to the cathode of the first diode, and through the second capacitor - to the collector of the bipolar transistor. This design is not efficient enough to safely control the relay windings of the railway automation.

There is a known system and method for providing critical interface inputs and outputs of a railway signal processor for signaling and controlling a railway, made using diodes and transistors, while the input interface is designed to convert a railway signal, for example, from a closed relay contact into a multi-bit serial digital signal that produces the inhibiting state of the input signal in the event of any failure in the input interface, and the output interface is designed to operate in the output power-on mode when there is no detector current passing through the saturable transformer connected to the output line, which provides the operating current for the rail signal and control devices such as relay of machines and signal lamps, and disconnecting the safety relay controlled by the processor when a failure is detected in the absence of detector current either in the processor or in the control system itself when the operating power is disconnected from the output one interface (see. patent US4611291 with the name "Vital interface system for railway signaling", IPC B61L7 / 08, publ. 1986). The device according to patent No. US4611291 is a microprocessor device, but the calculations are performed by one processor. This approach does not exclude systematic and random errors in the logic of the device. The safe operation of determining the state of the relay is ensured by a coded signal, but when the relay contact is open, it is not possible to check the operability of the circuit, which can lead to the accumulation of failures and reduce the availability of the device as a whole. In the known device, it is possible to control the relay coils by opening the key directly, supplying a supply voltage to the relay coils. Safety is ensured by the introduction of a monitoring relay into the power circuit of the unit, which allows the circuit to be de-energized in the event of a malfunction of both the processor and the analog elements of the circuit. When a command is given to turn on the relay, switch 56 (transistor) opens and remains open all the time while the command is given. When key 56 is broken through, this failure is not detected until the command is changed, which leads to an accumulation of failures. When a failure is detected, relay 20 is de-energized, de-energizing all controlled relays on all channels. This reduces the reliability and availability of the device. The presence of relay 20 requires periodic maintenance of the device.

The closest analogue is a relay object controller for railway automatics and telemechanics, including an information processing processor, configured to safely determine the position of relay contacts using an encoded processor signal and safely control relay windings, while it is made in the form of modules with independent channels, equipped with a safe communication module with additional processors for diversifying information processing, as well as modules for safe inputs and safe outputs with additional processors for diversifying information processing and independent input and output stages, as well as additional modules for hot backup, while the module of safe inputs is made with the ability to connect several groups of contacts, and the module of safe outputs is equipped with comparators for monitoring the integrity of the winding of controlled relays (see RF patent No. 2679754, IPC B61L 7/08 (2006.01), publ. 2019). This device is designed with functional redundancy. It is aimed at polling the state of the contacts of safe relays, determining the presence of a relay coil in the line, as well as implementing the hot backup function, which, in turn, leads to the need to program the device, complicate the implementation and increase the cost of the device.

The present invention is aimed at solving the technical problem of simplifying the implementation of safe control of relay windings of railway automation.

And it solves the technical problem of safe control of the relay windings of railway automation.

The solution to this technical problem is achieved through the use of typical comparator and voltage converter circuits without the use of processors, as well as software-adaptable modules, blocks for interrogating the state of relay contacts and the function of checking the presence of relay windings.

To achieve the set technical task, the module for controlling the windings of the railway automation relay, made with the possibility of safely determining the position of the relay contacts using the encoded signal of the processor and safely controlling the relay windings and containing comparators for monitoring the integrity of the winding of the controlled relays, is equipped with four galvanically isolated converters of the input DC voltage to the output constant voltage with the ability to control four safe comparators, and the safe comparators are made with the possibility of receiving a control signal through the address decoder and the control word encoder.

And also due to the fact that in the method of controlling the relay windings of railway automation, which includes safe determination of the position of the relay contacts using the encoded signal of the external control module and safe control of the relay windings, safe determination of the position of the relay contacts is provided by providing a constant voltage at four galvanically isolated outputs of voltage converters and by double conversion of a constant input voltage into a constant output voltage, and the safe determination of the position of the relay contacts is carried out depending on the signal supplied to the input of the voltage converter, generated by the safe comparator from the signal issued by the address decoder, and checking the correctness of the signal by coding the signal issued by the address a decoder using a control word encoder, an external control module.

The invention is illustrated by drawings.

FIG. 1 shows a functional diagram of a relay coil control module for railway automation. FIG. 2 shows a functional diagram of a safety comparator. FIG. 3 is a schematic diagram of a safety comparator. FIG. 4 shows a diagram of the operation of the safety comparator nodes. FIG. 5 shows a schematic diagram of a voltage converter.

Functionally, the control module of the relay windings of the railway automation is the circuit shown in FIG. 1. The module includes galvanically isolated outputs 1 ₁ , 1 ₂ , 1 ₃ and 1 _{4 of} converters 2 ₁ , 2 ₂ , 2 ₃ and 2 ₄ voltages, depending on the address data coming from the external control unit to the address decoder 3. The output signal of the safe comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ is the signal to excite the operation of the _{voltage converter 2 1} , 2 ₂ , 2 ₃ and 2 ₄ , and the input signal of the safety comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ is the signal, from the output of the address decoder 3. Encoder 5 of the control word is intended to ensure the safety of the module for controlling the windings of the railway automation relay, intended for issuing information about the data received by the address decoder 3 to the external control module.

The logical unit 6 for checking the settings is connected with the decoder 7. The logical unit 8 for checking the settings, which is part of the encoder 5 of the control word, is intended to perform functions similar to the logical unit 6 for checking the settings, which is part of the address decoder 3. The logical unit 8 is connected with its output the input of the encoder 9. The encoder 9 is connected with its output to the input of the control word generator 10.

The comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ consists of monostable and bistable multivibrators 11, 12, 13, 14, 15, 16 and 17 shown in FIG. 2. The basic design of the safety comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 _{4 is} shown in Fig. 3 using the example of the comparator 4 ₁ . The safety comparators 4 ₂ , 4 ₃ and 4 _{4 are} designed in the same way. Multivibrator 11 consists of a circuit with transistors 19 and 20. Multivibrator 12 consists of a circuit with transistors 21 and 22. Multivibrator 13 consists of a circuit with a capacitor 23 and a resistor 24. Multivibrator 14 consists of a circuit with a capacitor 25 and a resistor 26. Multivibrator 15 consists of circuits with transistors 27 and 28. Multivibrator 16 consists of a circuit with transistors 29 and 30. Multivibrator 17 consists of a circuit with transistors 31 and 32. Comparator inputs 33 and 34 are designed to start the safe comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ .

The transistor 21 in the open state is designed to power the transistor 27 through the capacitor 35. The transistor 36 in the open state is needed to attract a positive potential to the base of the transistor 27. Capacitor 37 and diode 38 are part of the interaction system of multivibrators 13 and 15 and are designed to open transistor 39, and transistor 40 serves to switch the state of multivibrator 11. Capacitor 41, located between multivibrators 14 and 16, is designed to turn on multivibrator 14. Timer 42, designed Turns on transistor 43, resistor 44, and capacitor 45 to keep the output off during power-up.

Shown in FIG. 5, a schematic diagram _{of the} voltage converter 2 1 includes a diode 47, a pump capacitor 48, a transistor 49, a resistor 50, a transformer 51, a gate 52, diodes 53 and 54 and a capacitor 55.

The relay winding control module for railway automation is used as follows. When applying to outputs 1 ₁ , 1 ₂ , 1 ₃ and 1 _{4 a} constant voltage from 12 to 60 V, generated by converters 2 ₁ , 2 ₂ , 2 ₃ and 2 ₄ , depending on the address data coming from the external control unit to address decoder 3. The signal that excites the operation of the _{voltage converter 2 1} , 2 ₂ , 2 ₃ and 2 ₄ is the output signal of the safe comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ , the input signal of which, in turn, is the signal coming from the output address decoder 3. To ensure the safety of the module for controlling the windings of the railway automation relay, a control word encoder 5 is provided, which sends information about the data received by the address decoder 3 to the external control module.

If the composition of the data transmitted to the external control module does not correspond to the data transmitted to the input of the address decoder 3, or the data is not output within the specified time intervals, the external control module stops outputting data to the input of the address decoder 3.

Address decoder 3 receives the sequence of the four least significant bits of the address via the ADD (7: 0) address bus, and also polls the tuning keys located on the backplane via the POSR bus (2: 0) and keys located on the front connector via the POSF bus (2 : 0). This procedure is performed by the logic unit 6 for checking the settings. If the settings match, the signal from the output of the settings check unit 6 is fed to the input of the decoder 7 (4/16 bit). If the settings do not match, the signal from the output of the unit 6 for checking the settings is not received at the input of the decoder 7.

The logical unit 8 for checking the settings, which is part of the encoder 5 of the control word, performs functions similar to the logical unit 6 for checking the settings, which is part of the address decoder 3. input X of the logical block 8 checks of settings with data about the settings on the front connector coming via the POSF bus (5: 3) to the input Y of the logical block 8 checks of settings, the signal from its output X = Y goes to the input EN of encoder 9 (16/4 bit). The input of the control word generator 10 via bus A receives a four-bit signal from encoder 9 (A (3: 0)), a two-bit NR (1: 0) signal from the front connector, which determines the module number in the controller, and a five-bit BoardID signal, which determines the type module. The control word generator 10, based on the information received at its input via the A bus, forms a control word at the D output and transmits it via the CON (7: 0) bus to the control module for comparison with the data transmitted to the relay coil control module. In the event of a discrepancy between the data transmitted to the relay winding control module via the ADD bus (7: 0) and received from it via the CON (7: 0) bus, the external control module stops generating the address bits and transferring them to the ADD bus (7: 0) ... Thus, the pumping scheme is realized.

From the output of the decoder 7 of the address decoder 3, the signal is fed to the A-B inputs of one of the four safe comparators 4 ₁ , 4 ₂ , 4 ₃ and 4 ₄ . To start generating a pulse voltage at the output of the safe comparator 4 ₁ , 4 ₂ , 4 ₃ and 4 _4, it is necessary to receive the correct sequence of four pulses (A-B-A-B) at the input.

The operation shown in FIG. 2 monostable and bistable multivibrators 11, 12, 13, 14, 15, 16 and 17 safety comparators 4 ₁ , 4 ₂ , 4 ₃ and 4 _{4 is} disclosed in FIG. 3. With the correct alternation of pulses at inputs 33 and 34, multivibrator 11 and multivibrator 12 are triggered alternately. If the sequence of pulses stops, they become stable after 11 ms. Starting the multivibrator 15 requires turning on the multivibrator 12 and turning off the multivibrator 11 (state II in Fig. 4). When the multivibrator 11 is off, the transistor 21 is open and supplies the transistor 27 through the capacitor 35. This causes the multivibrator 15 to turn off. Automatic shutdown of multivibrator 12 resets multivibrator 15. Transistor 36 opens and attracts a positive potential to the base of transistor 27. Which leads to the shutdown of the multivibrator 15.

Turning off the multivibrator 15 starts the multivibrator 13, which remains on for 6.6 ms (state IV in Fig. 4). During the time when the multivibrator 15 was turned on, the capacitor 37 was charged. When multivibrator 15 is turned off, the charge passes through diode 38 to capacitor 23. Then the voltage across capacitor 23 rises to about 10 V. Capacitor 23 discharges through resistor 24, and after 6.6 ms, the voltage across it drops to the usual level of about 0.6 V and transistor 39 turns on.

Turning on the multivibrator 16 requires turning on the multivibrator 13 and turning off the multivibrator 11 (state V in Fig. 4). When the multivibrator 13 is on, the transistor 39 is off. When the multivibrator 11 turns off, the transistor 40 turns on. When the multivibrator 13 is automatically turned off, the transistor 39 opens and raises the potential of the base of the transistor 29. When the multivibrator 13 is automatically turned off, it switches the multivibrator 16. The transistor 39 opens and raises the potential of the base of the transistor 29.

When the multivibrator 16 is turned off, the multivibrator 14 is turned on, which remains on for 6.6 ms (state VII in Fig. 4). The charge moves from the capacitor 41 to the capacitor 25. Turning on the multivibrator 17 requires turning on the multivibrator 14 and turning off the multivibrator 12 (state VIII in Fig. 4). When multivibrator 14 is automatically turned off, it switches multivibrator 17. Transistor 43, resistor 44, and capacitor 45, which are timer circuitry 42, are designed to keep the output off during power-up to avoid spurious output pulses during this phase. The circuit switches off by itself after the delay time has elapsed and does not affect normal operation.

Safe comparator 4 ₁ outputs a pulse voltage to the output until the sequence - 33-34-33-34- is received at inputs 33 and 34. Requirements for pulses arriving at input 33-34logs are as follows:

- Telegrams from inputs 33 and 34 must be received alternately;

- The pulses of inputs 33 and 34 must have the following timing:

Period between pulses of inputs 33-33 and 34-34 - 6.9 ms <t <11.3 ms

Period between pulses of inputs 33-34 and 34-33 - 3.45 ms <t <5.65 ms

The duration of one telegram is 2 μs <t <3 ms.

The signal from the output of the safety comparator 4 _{1 is} applied to the input of the voltage converter 2 ₁ , opening the diode 47 and charging the pump capacitor 48. Transistor 49 provides fast charging of pump capacitor 48 at low voltage (-12 V). The oscillation frequency is determined by the resistance of the resistor 50, the inductance of the transformer 51 and the capacitance of the gate 52 (see Fig. 5).

The alternating signal is applied to the gate 52, which acts as an external DC voltage switch. The external voltage switched by the gate 52 is transmitted through the transformer 51 and through the rectifier, assembled on diodes 53 and 54, as well as the capacitor 55, to the output 1 ₁ (see Fig. 5).

The operation of converters 2 ₂ , 2 ₃ and 2 ₄ voltage occurs in a similar way.

The safe state of the outputs is "deactivated", which means that no voltage is supplied to outputs 1 ₁ - 1 ₄ of the relay winding control module of the railway automation.

Security is achieved through external control as well as a secure internal architecture. Address decoder 3 and control word encoder 5 are built on the principle of controlled hardware. The safety comparators 4 ₁ - 4 ₄ and the voltage converters 2 ₁ - 2 ₄ are based on a safe internal architecture.

The consequence of errors in the address decoder 3 and encoder 5 of the control word will be that the control word transmitted to the external control module, as a response to the sequence of pumping pulses, will be incorrect, after which the pumping of addresses to the address of the module in question is stopped and all outputs are deactivated.

Failure of safety comparator components 4 ₁ to 4 ₄ will result in output deactivation due to the safe internal architecture.

Due to the permissible extremely rare activation of the outputs of the module for controlling the windings of the relay of railway automation, the safety analysis of the controlled hardware device shows the need for constant monitoring of the performance of the safety function. This is done by running a control word test every hour.

The technical result achieved using this invention without realizing the possibility of determining the position of the contacts of the relay for monitoring the integrity of the winding consists in:

- increasing the safety of control circuits through the use of double conversion of the input DC voltage into the output DC voltage using a voltage converter, a safety comparator and a control word encoder that transmits the check word to an external control module;

- elimination of the functional redundancy of the relay coil control module for railway automation due to the refusal to use processors, programmable components, as well as the elimination of the function of polling the state of relay contacts and the function of determining the presence of a relay coil;

- achieving the result of increasing safety by simpler and more reliable means.

Claims (2)

1. The module for controlling the windings of the relay of railway automatics, made with the possibility of safely determining the position of the relay contacts using the encoded signal of the external control module and safe control of the relay windings and containing comparators for monitoring the integrity of the winding of the controlled relays, characterized in that it is equipped with four galvanically isolated input converters. DC voltage into an output DC voltage with the ability to control four safe comparators, and the safe comparators are made with the ability to receive a control signal through an address decoder and a control word encoder. 2. A method for controlling relay coils of railway automatics, including safe determination of the position of relay contacts using a coded signal from an external control module and safe control of relay coils, characterized in that it provides for safe determination of the position of relay contacts by providing a constant voltage at four galvanically isolated outputs of voltage converters and by double conversion of a constant input voltage into a constant output voltage, and the safe determination of the position of the relay contacts is carried out depending on the signal supplied to the input of the voltage converter, generated by the safe comparator from the signal issued by the address decoder, and checking the correctness of the signal by coding the signal issued by the address decoder by means of a control word encoder, by an external control unit.

Images