WO2011124181A2

WO2011124181A2 - Relay control method, relay control device and train operation control system

Info

Publication number: WO2011124181A2
Application number: PCT/CN2011/074048
Authority: WO
Inventors: 刁阳彬; 张盛彬; 刘嘉; 方培沈
Original assignee: 华为技术有限公司
Priority date: 2011-05-13
Filing date: 2011-05-13
Publication date: 2011-10-13
Also published as: CN102858614A; CN102858614B; WO2011124181A3

Abstract

A relay control method, a relay control device and a train operation control system. The relay control device comprises a first data transmission channel (11) and a second data transmission channel (12). The first data transmission channel is provided with a first processor (13) and a first comparison module (15); the second data transmission channel is provided with a second processor (17) and a second comparison module (19). The device also includes a clock generation module (21) for generating a clock control signal. The first processor is used to output data at the first time of the clock control signal; the second processor is used to output data at the second time of the clock control signal. The first comparison module and the second comparison module are respectively used to compare the data of both of the data transmission channels and generate a compared pulse control signal according to the comparison result. The relay control device improves control safety.

Description

Relay control method, device and train operation control system

Embodiments of the present invention relate to industrial safety control technologies, and in particular, to a relay control method, device, and train operation control system. BACKGROUND OF THE INVENTION In the field of safety control, such as relay control of high speed trains, it is necessary to ensure the correct output of important signals. For this reason, the current widely used relay control device of 2 take 2 mode, the device includes two data transmission channels, and the signals are correctly outputted by synchronously comparing data in the two data transmission channels. Specifically, the prior art relay control device includes two independent channels of the same configuration, that is, a first data transmission channel and a second data transmission channel, the two channels having the same input and program settings, and processing the same Task. There are two storage units in each channel, and the two storage units are respectively allocated to two channels. For example, a first storage unit and a second storage unit are disposed in the first data transmission channel, and the first storage unit is allocated to the first data transmission channel, and the second storage unit can be used to write data to the first data transmission channel. Two data transmission channels can be used to write data to the second data transmission channel. The comparison module in the first data transmission channel may compare the data in the second storage unit with the data in the first storage unit, and output a corresponding control signal according to the comparison result. For example, if the result of the comparison is that the data of the two channels meets the consistency requirement, a high level control signal is output to control the relay. The structure and working principle of the second data transmission channel are the same as those of the first data transmission channel. The technical drawbacks of the above prior art are: If the comparison module in the relay control device fails, it may cause a high level control signal to be output even if the comparison result does not satisfy the consistency requirement, thereby causing the relay control error. , there is a security risk. Therefore, the safety control device of the prior art has low safety; and the above-described relay control device has a complicated structure. SUMMARY OF THE INVENTION It is an object of embodiments of the present invention to provide a relay control method, apparatus, and train operation control system to improve safety of relay control and to simplify the structure of the relay control apparatus. An embodiment of the present invention provides a relay control apparatus, including a first data transmission channel and a second data transmission channel. The first data transmission channel is provided with a connected first processor, a first transceiver module, and a first comparison. a module and a first output module; the second data transmission channel is provided with a second processor, a second transceiver module, a second comparison module, and a second output module; the first transceiver module is further connected to the second a comparison module, the second transceiver module is further connected to the first comparison module; the relay control device further includes: a clock generation module, configured to generate a clock control signal; the first processor is connected to the clock generation module, The first data transmission channel data is outputted at the first time according to the clock control signal; the first transceiver module is configured to receive the first data transmission channel data output by the first processor, and a data transmission channel data is respectively sent to the first comparison module and the second comparison module; the second processor, and the clock Generating a module connection, configured to output second data transmission channel data at a second time according to the clock control signal; and the second transceiver module is configured to connect Receiving, by the second processor, the second data transmission channel data, and sending the second data transmission channel data to the first comparison module and the second comparison module respectively; the first moment and the second moment The first comparison module is configured to compare the first data transmission channel data and the second data transmission channel data, output a first comparison pulse control signal according to the comparison result, and compare the first comparison pulse The control signal is input to the first output module, and the first output module controls the on and off of the first relay; the second comparison module is configured to use the first data transmission channel data and the second data transmission channel data Comparing, outputting a second comparison pulse control signal according to the comparison result; and inputting the second comparison pulse control signal to the second output module, and controlling the on and off of the second relay by the second output module.

An embodiment of the present invention provides a relay control method, including: a first processor receives a clock control signal generated by a clock generation module, and outputs first data transmission channel data at a first moment according to the clock control signal; Receiving, by the first processor, the first data transmission channel data, and transmitting the first data transmission channel data to the first comparison module and the second comparison module respectively; the second processor receiving the clock generation module generates a clock control signal, and outputting second data transmission channel data at a second time according to the clock control signal; the second transceiver module receives the second data transmission channel data output by the second processor, and the second The data transmission channel data is respectively sent to the first comparison module and the second comparison module; the first time is different from the second time; The first comparison module compares the first data transmission channel data with the second data transmission channel data, outputs a first comparison pulse control signal according to the comparison result, and inputs the first comparison pulse control signal to the first output module, Controlling, turning on and off the first relay by the first output module; comparing, by the second comparison module, the first data transmission channel data and the second data transmission channel data, and outputting a second comparison pulse control signal according to the comparison result; The second comparison pulse control signal is input to the second output module, and the second relay module controls the on and off of the second relay.

Embodiments of the present invention provide a train operation control system, an onboard subsystem, and a ground subsystem, wherein the onboard subsystem includes: a first relay and a second relay for controlling a train brake system, and for controlling the a relay control device of the first relay and the second relay; a first data transmission channel of the relay control device is connected to the first relay, and is configured to output a first comparison pulse control signal to control the passage of the first relay Broken

The second data transmission channel in the relay control device is connected to the second relay for outputting a second comparison pulse control signal to control the on and off of the second relay.

The relay control method and device and the train operation control system according to the embodiment of the present invention control the output data of the two processors when the clock is controlled by the clock control signal, and can generate the comparison pulse control signal, thereby solving the safety of the relay control existing in the prior art. Low-level problems, improve control safety; and the relay control device is simple in structure. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below, obviously, The drawings in the above description are some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.

1 is a schematic structural view of a first embodiment of a relay control device according to the present invention;

2 is a schematic diagram of data output timing in the second embodiment of the relay control device of the present invention; FIG. 3 is a schematic flow chart of the first embodiment of the relay control method according to the present invention;

4 is a schematic diagram of an application scenario of a second embodiment of a relay control method according to the present invention;

FIG. 5 is a schematic structural view of an embodiment of a train operation control system of the present invention. detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. Some embodiments, rather than all of the embodiments, are invented. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention. Embodiment 1 FIG. 1 is a schematic structural view of a first embodiment of a relay control device according to the present invention. The device is designed in a 2-mode 2 mode. As shown in FIG. 1, the device may include a first data transmission channel 1 1 and a second data. The transmission channel 12 has the same internal structure configuration of the first data transmission channel 11 and the second data transmission channel 12. The first data transmission channel 1 1 is provided with a first processor 13 , a first transceiver module 14 , a first comparison module 15 , and the like. The foregoing modules may be connected in series; the first comparison module 15 Connecting the first output module 16; the second data transmission channel 12 is provided with The second processor 17 , the second transceiver module 18 , the second comparison module 19 , and the like may be connected in series; the second comparison module 19 is connected to the second output module 20 . In addition, the first transceiver module 14 is further connected to the second comparison module 19, and the first transceiver module 14 can be configured to receive the first data transmission channel data output by the first processor 13, and output the first data transmission channel data to the first a comparison module 15 and a second comparison module 19; the second transceiver module 18 is further connected to the first comparison module 15, and the second transceiver module 19 can be configured to receive the second data transmission channel data output by the second processor 17, and The two data transmission channel data are output to the second comparison module 19 and the first comparison module 15, respectively. In this embodiment, the relay control device further includes a clock generation module 21. For example, the clock generating module 21 can be disposed in the first data transmission channel 11 or the second data transmission channel 12, and has a simple structure and is convenient to implement; the clock generating module 21 is respectively connected to the first processor 13 and the second processor 17. A clock control signal, such as a fixed frequency clock control signal, can be generated and supplied to the first processor 13 and the second processor 17 to control the data output of the two processors, respectively. The relay control device can synchronize the data output of the two channels by using the same clock control signal, so that the first data transmission channel 11 and the second data transmission channel 12 can realize data synchronization through the clock control signal. Compared with the way that one of the data transmission channels used in the prior art needs to wait for another data transmission channel to achieve synchronization, the design difficulty is reduced, the achievability is improved, and the waiting time of data transmission is reduced, and the time is greatly improved. The efficiency of data processing. In this embodiment, the first processor 13 can output at the first moment according to the clock control signal. The first data transmission channel data, the first transceiver module 14 can receive the first data transmission channel data output by the first processor 13, and send the first data transmission channel data to the first comparison module 15 and the second comparison module, respectively. 19. The second processor 17 can output the second data transmission channel data at the second time according to the clock control signal, and the second transceiver module 18 can receive the second data transmission channel data output by the second processor 17, and transmit the second data. The channel data is sent to the first comparison module 15 and the second comparison module 19 respectively; the second moment is different from the first moment. The first comparison module 15 can compare the first data transmission channel data and the second data transmission channel data, output a first comparison pulse control signal according to the comparison result, and input the first comparison pulse control signal into the first And an output module, wherein the first relay is controlled to be turned on and off by the first output module. For example, if the relay control device is working normally, when the comparison pulse control signal is output, the first output module can control the first relay to be closed according to the comparison pulse control signal; otherwise, if the relay control device fails and outputs a fixed level signal, The fixed level signal does not contribute to the first output module, and the first relay is in the off state. The second comparison module 19 may compare the first data transmission channel data and the second data transmission channel data, output a second comparison pulse control signal according to the comparison result, and input the second comparison pulse control signal into the second And an output module, wherein the second relay is controlled to be turned on and off by the second output module. Since the data output timings of the first processor 13 and the second processor 17 are different and have a time difference, the generated control signal is a comparison pulse control signal, and the comparison pulse control signal can be used for safety control. For example, the first output module 16 and the second output module 20 of the embodiment may be relay circuits controlled by dynamic safety circuits, and such dynamic safety circuits require dynamic State input control mode, that is, the dynamic pulse signal must be used as the input to control the output of the safety circuit. The fixed level signal is not applicable; thus the above comparison pulse control signal can control the output of the dynamic safety circuit, and then control the output of the relay circuit. . The safety of the relay control can be improved by using a relay circuit controlled by a dynamic safety circuit. The first data transmission channel 11 and the second data transmission channel 12 are controlled to output data at different times according to the clock control signal, so that the comparison pulse control signal can be generated according to the data comparison result of the two channels, and the comparison pulse control signal is dynamically controlled. The signal, which is relative to the single-level control signal method used in the prior art, can improve the security of the control. For example, in this embodiment, the output module relay of the relay control device is controlled by comparing the pulse control signal, thereby controlling the relay to be turned on and off; when the comparison module of the relay control device is faulty, the comparison module outputs a fixed level. Non-dynamic comparison pulse control signal, the fixed level signal will not affect the output module, thus avoiding the wrong control of the relay, thus effectively preventing the occurrence of single-point level failure and greatly improving the safety of the control. . It can be seen from the above analysis that the relay control device of the present embodiment can generate a comparison pulse control signal by setting a clock generation module and controlling the output data of the two processors according to the clock control signal generated by the module, thereby solving the prior art. The problem of low safety of the relay control exists in the relay, so that even if a fault occurs, the relay can be correctly controlled, thereby greatly improving the safety of the control; and the relay control device has a simple structure. Embodiment 2 The structure of the relay control device of this embodiment can be seen in FIG. 1. Based on the structure of the first embodiment, the structure of the relay control device is further limited in this embodiment. 2 is a schematic diagram of data output timing in the second embodiment of the relay control device of the present invention. As shown in FIG. 2, in the relay control device of the embodiment, the first processor 13 can generate a clock control signal according to the clock generation module 21. Outputting data at the rising edge of the pulse, the rising edge of the pulse is the first time; the second processor 17 can output data according to the clock control signal generated by the clock generating module 21 at the falling edge of the pulse, the falling edge of the pulse The moment is the second moment. Wherein, the pulse rising edge time and the pulse falling edge time may be located in the same pulse period. In a specific implementation, the first processor 13 and the second processor 17 may also be transmitted in different pulse periods. For example, the first processor 13 outputs data at the timing of the rising edge of the pulse in the first pulse period, and the second processor 17 outputs data or the like at the timing of the rising edge of the pulse in the second pulse period. As long as the first processor 13 can ensure that the output data is at the first time, and the second processor 17 outputs the data at the second time, so that the two channels output data have a time difference, the comparison pulse can be generated after the data comparison of the two channels is performed. control signal. In this embodiment, the first comparison module 15 and the second comparison module 19 for generating a comparison pulse control signal according to the comparison result may employ a combinational logic circuit. The combinational logic circuit can be a circuit structure such as a NAND gate, an AND gate, an OR gate, an exclusive OR gate, etc., and can generate a comparison pulse control signal according to data of two channels. For example, by using a NAND gate circuit as a comparison module, on the one hand, the NAND gate circuit can generate a comparison pulse control signal according to the comparison result of the data of the two channels, and the pulse control signal can make the control more secure; On the other hand, the NAND gate circuit can perform real-time comparison and processing on the received data of the two channels, that is, after the data output by the first transceiver module 14 and the second transceiver module 18 reaches the NAND gate circuit, the NAND gate circuit can be Real-time comparison, direct output ratio As a result, there is no cache process, so that it is not necessary to perform multiple writes for multiple memory modules as in the prior art, which reduces the storage space, reduces the cost, and improves the efficiency of data processing. In this embodiment, the first transceiver module 14 and the second transceiver module 18 may further perform cyclic redundancy check code on the data before transmitting the received data to the first comparison module 15 and the second comparison module 19, respectively. Cyclic Redundancy Check, referred to as CRC) processing (or CRC calculation), and the processed data is output to the first comparison module 15 and the second comparison module 19, respectively. For example, the first transceiver module 14 may include a first receiving unit, a first processing unit, and a first sending unit. The first receiving unit is configured to receive the first data transmission channel data output by the first processor, and the first processing unit is configured to perform cyclic redundancy check code processing on the first data transmission channel data; The first sending unit is configured to output the first data transmission channel data processed by the first processing unit to the first comparison module and the second comparison module, respectively. For example, the second transceiver module 18 may include a second receiving unit, a second processing unit, and a second transmitting unit. The second receiving unit is configured to receive the second data transmission channel data output by the second processor, and the second processing unit is configured to perform cyclic redundancy check code processing on the second data transmission channel data. And a second sending unit, configured to output the second data transmission channel data processed by the second processing unit to the first comparison module and the second comparison module, respectively. Specifically, a plurality of data to be compared are subjected to CRC calculation, and a plurality of data can be converted into Fixed-length data, so after processing the data by using the CRC calculation, the data can be completed only once by sending and comparing, thereby reducing the transmission data and the method of directly comparing the plurality of data directly in the prior art. The number of times the data is compared; meanwhile, the CRC algorithm ensures the correctness of the data and can improve the control accuracy of the relay control device. In addition, other data verification methods may be employed as long as a plurality of data can be converted into fixed length data. The working principle of the relay control device of the present embodiment will be described below with reference to FIG. 1. First, the first processor 13 and the second processor 17 perform data output according to a clock control signal generated by the clock generating module 21, wherein the first processor 13 transmits data to the first transceiver module 14 at the pulse rising edge of the clock control signal, and the second processor 17 transmits data to the second transceiver module 18 at the pulse falling edge of the same clock cycle of the clock control signal. Then, after receiving the data of the own channel, the first transceiver module 14 and the second transceiver module 18 respectively perform CRC calculation on the received data, and respectively send the calculation result to the comparison module of the channel and the counterpart channel. That is, it is output to the first comparison module 15 and the second comparison module 19, respectively. After the CRC calculation, the data is sent again, which reduces the number of transmissions and improves the efficiency of data processing. Then, the first comparison module 15 and the second comparison module 19 can compare the received two-party data in real time. When the comparison is passed (ie, the data of the two channels are consistent), the output is low; when the comparison fails (ie, the data of the two channels is inconsistent), the output is high. Specifically, under normal circumstances, the two data are the same, but since the time at which the two channels output data differ by half a clock cycle, the received data is half the same cycle, and the half cycle is different. Clock control signal There is only one data output during the high period from the rising edge to the falling edge, so the comparison is inconsistent, and the comparison result is high. When the falling edge of the clock control signal comes, the data is more consistent with the output of another data. The comparison result is low level, and thus the high and low level alternate comparison pulse control signals can be generated. The comparison pulse control signal is used to control the output of the output module. When the comparison module of the relay control device fails, the comparison module outputs a comparison level instead of a dynamic comparison pulse control signal; and the relay control device according to the embodiment The control mode, if the comparison pulse control signal disappears or is abnormal, the output of the output module will be turned off, that is, the fixed level will not affect the output module, thus ensuring that the error signal will not be output, which greatly improves the safety of the control. The relay control device of the present embodiment can generate a comparison pulse control signal by setting a clock generation module and controlling the output data of the two processors according to the clock control signal generated by the module, thereby solving the relay existing in the prior art. The problem of low safety control makes it possible to ensure correct control of the relay even in the event of a fault, thereby greatly improving the safety of the control; and the structure of the relay control device is simple. Embodiment 3 FIG. 3 is a schematic flowchart diagram of an embodiment of a relay control method according to the present invention. The security control method of this embodiment may be implemented by using a relay control apparatus according to any embodiment of the present invention. As shown in FIG. 3, the relay control method may include: Step 301: The relay control device outputs data according to the clock control signal, and sends the data to the first comparison module and the second data transmission channel of the first data transmission channel respectively. Two comparison modules; The relay control device includes a first data transmission channel and a second data transmission channel, and the clock control signal may be generated by a clock generation module disposed in the first data transmission channel or the second data transmission channel, and respectively output to the The processor of the first data transmission channel and the second data transmission channel. Specifically, the first processor receives the clock control signal generated by the clock generation module, and outputs the first data transmission channel data at the first time according to the clock control signal; the first transceiver module receives the first processor output a data transmission channel data, and the first data transmission channel data is respectively sent to the first comparison module and the second comparison module; the second processor receives a clock control signal generated by the clock generation module, and according to the clock The control signal outputs the second data transmission channel data at the second time; the second transceiver module receives the second data transmission channel data output by the second processor, and sends the second data transmission channel data to the first a comparison module and a second comparison module; the first moment is different from the second moment. For example, the first processor may output the first data transmission channel data at a pulse rising edge timing of the clock control signal, the pulse rising edge time being the first time; the second processor may output the pulse falling edge timing of the clock control signal The second data transmission channel data, wherein the pulse falling edge time is the second time. The first data transmission channel and the second data transmission channel pulse control signal are controlled according to the clock control signal, and the comparison pulse control signal is a dynamic control signal, which can be improved relative to the single-level control signal method used in the prior art. Control security. Further, before the first transceiver module outputs the first data transmission channel data to the first comparison module and the second comparison module, the first transceiver module may perform a cyclic redundancy check code on the first data transmission channel data in advance. Processing; before the second transceiver module outputs the second data transmission channel data to the first comparison module and the second comparison module, the second transceiver module may perform cyclic redundancy check code processing on the second data transmission channel data in advance . Specifically, a plurality of data to be compared are subjected to CRC calculation, and a plurality of data can be converted into fixed-length data. Therefore, after the data is processed by using the CRC calculation, the data can be completed and transmitted only once, thereby being relatively In the prior art, the method of directly comparing multiple data directly reduces the number of times of transmitting data and comparing data; meanwhile, the CRC algorithm ensures the correctness of the data, and the control accuracy of the relay control device can be improved. Step 302: The relay control device compares data of the first data transmission channel and the second data transmission channel, generates a comparison pulse control signal according to the comparison result, and controls the relay by using the comparison pulse control signal. Wherein, after outputting data to the first data transmission channel and the second data transmission channel respectively in step 301, the relay control device may compare data of the first data transmission channel and the second data transmission channel, and according to the comparison result Generate a control signal. Since the data output of the two channels has a time difference, the output control signal is a comparison pulse control signal, and the comparison pulse control signal can be used for safety control; the comparison pulse control signal is compared with the single level control used in the prior art. Signal, with higher security. Specifically, the first comparison module compares the first data transmission channel data with the second data transmission channel data, and outputs a first comparison pulse control signal according to the comparison result; The first comparison pulse control signal is input to the first output module, and the first output module controls the on/off of the first relay; the second comparison module compares the first data transmission channel data with the second data transmission channel data, And outputting a second comparison pulse control signal according to the comparison result; and inputting the first comparison pulse control signal to the second output module, and controlling the on and off of the second relay by the second output module. For example, the first comparison module and the second comparison module are combinational logic circuits; and/or, the first output module and the second output module are relay circuits controlled by dynamic safety circuits. Such a dynamic safety circuit requires a dynamic input control mode, that is, a dynamic pulse signal must be used as an input to control the output of the safety circuit, and a fixed level signal is not applicable; thus the above comparison pulse control signal can control the output of the dynamic safety circuit. , and then control the output of the relay circuit. The safety of the relay control can be improved by using a relay circuit controlled by a dynamic safety circuit. In the relay control method of the embodiment, by controlling the output data when the two processors are different according to the clock control signal, the comparison pulse control signal can be generated, which solves the problem that the safety of the relay control existing in the prior art is low, so that even In the event of a fault, the relay can be properly controlled, thereby greatly improving the safety of the control; and the relay control device has a simple structure. Embodiment 4 FIG. 4 is a schematic diagram of an application scenario of a relay control method according to an embodiment of the present invention. This embodiment uses a brake signal output control of a high-speed train as an example to apply the safety control method of the embodiment. In the brake signal output circuit of the high speed train, the method can be implemented by the relay control device of any embodiment of the present invention, and the specific control method description can be combined with any of the relay control device embodiments of the present invention. In the application scenario shown in FIG. 4, the A-set processor control module 31 and the B-set processor control module 32 respectively correspond to the first data transmission channel and the second data transmission channel in the relay control device of any embodiment of the present invention. The two channels can generate a comparison pulse signal for controlling the opening and closing of the corresponding two brake switches 33; the brake switch 33 is a relay that can be connected to the output module in the corresponding data transmission channel. The brake is cancelled only when the two brake switches 33 are simultaneously closed, and the brake output is ensured as long as one switch is opened. When the control method of the present embodiment is used for control, the A-set processor control module 31 and the B-set processor control module 32 can output data according to the clock control signal difference. For example, the A-set processor control module 31 can be pulsed. The rising edge time (first time) outputs data, and the B-set processor control module 32 can output data at the pulse falling edge time (second time); the pulse rising edge and the falling edge of the pulse can be located in the same pulse period of the clock control signal. The outputted data may be outputted to the comparison module of the A-set processor control module 31 and the B-set processor control module 32 after being subjected to CRC processing respectively, and the comparison module controls the A-set processor. The data of the module 31 and the B set of processor control modules 32 are compared; for example, the data can be compared in real time using the NAND gate circuit. Since the two channels output data when they are poor, the comparison pulse control signal can be output according to the comparison result, and the comparison pulse control signal is used for safety control.

The brake switch 33 must be closed under the control of the comparison pulse control signal, otherwise it is in the off state; the two brake switches 33 in series must also be in the A-set processor control module 31 and When the output of the B-set processor control module 32 is a comparison pulse control signal, the brake can be canceled; when the comparison module of the relay control device fails, the comparison result will output a fixed level signal instead of a dynamic comparison pulse. The control signal, at this time, as long as one pulse is lost, the entire path can be disconnected to ensure reliable output of the brake. The relay control method of the embodiment can also be applied to other security-critical scenarios, such as medical, nuclear power plants, and transportation, and can realize timely detection and shutdown of the output in the event of any abnormality in the system, and has high security. Sex. In the relay control method of the embodiment, by controlling the output data when the two processors are different according to the clock control signal, the comparison pulse control signal can be generated, which solves the problem that the safety of the relay control existing in the prior art is low, so that even In the event of a fault, the relay can be properly controlled, thereby greatly improving the safety of the control; and the relay control device has a simple structure. Embodiment 5 FIG. 5 is a schematic structural view of an embodiment of a train operation control system according to the present invention. The train operation control system of this embodiment may include an onboard subsystem 51 and a ground subsystem 52. The ground subsystem 52 is mainly composed of a train operation control center (referred to as a column control center) 521, a transponder 522 connected to the column control center 521, a track circuit 523, and a wireless blocking center 524. The in-vehicle subsystem 51 is mainly composed of a security computer 511, a transponder transmission module 512 connected to the security computer 511, a track circuit information receiving unit 513, a wireless transmission module 514, a human machine interface 515, a train interface unit 516, and the like. Wherein, the relay control device 54 in the embodiment of the present invention can be set in a security computer In 51, the first processor or the second processor in the relay control device 54 may receive input data of the transponder transmission module 512, the track circuit information receiving unit 513, the wireless transmission module 514, or the human machine interface 515, etc., the input. The data may be, for example, train operation information such as train running time and train running speed. The first processor or the second processor may process the train operation information and transmit the data in the corresponding data transmission channel, and output a corresponding control signal according to the comparison result of the two channels. It is to be understood that the specific types of data input to the processor are not limited in the embodiment of the present invention. In fact, according to the demand and design, the train operation information described above can be input, or other data can be input, as long as the control signal can be output according to the data comparison. The first interface and the second relay for controlling the brake system of the train may be included in the train interface unit 516. The first relay may be connected to the first output module in the first data transmission channel of the relay control device 54, and the second relay may The second output module of the second data transmission channel of the relay control device 54 is connected, and the relay control device 54 can control the relay through the corresponding output module. For example, the wireless occlusion center 524 of the ground subsystem 52 can communicate via the wireless communication network 53 and the wireless transmission module 514 of the onboard subsystem 51. The transponder 522 and track circuit 523 of the ground subsystem 52 can also be associated with the onboard subsystem 51, respectively. The transponder transmission module 512 and the track circuit information receiving unit 513 implement communication to input relevant information in the ground subsystem 52 to the relay control device 54 in the safety computer 51 1 of the in-vehicle subsystem 51. For example, the in-vehicle subsystem 51 is a control system based on the security computer 51 1 that controls train operation by exchanging information with the ground subsystem 52. The train interface unit 516 of the onboard subsystem 51 is a brake circuit including a relay 55 that is coupled to the brake system of the train, at the relay 55. When the switch is disconnected, the brake is output to stop the train. The embodiment of the present invention controls the on/off of the relay 55 by comparing the pulse control signals, improves the safety of the control of the relay 55, and better controls the brake system of the train. For the structure and working principle of the relay control device 54 and the control method for the relay 55 in the embodiment, reference may be made to the device embodiment and the method embodiment in the first to fourth embodiments of the present invention. The train operation control system of the embodiment can generate a comparison pulse control signal by controlling the output data when the two processors are different according to the clock control signal, thereby solving the problem that the safety of the relay control existing in the prior art is low, so that Even in the event of a fault, the correct control of the relay is guaranteed, which greatly increases the safety of the control. A person skilled in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by using hardware related to program instructions, and the foregoing program may be stored in a computer readable storage medium, and the program is executed when executed. The foregoing steps include the steps of the foregoing method embodiments; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

It should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A relay control device, comprising: a first data transmission channel and a second data transmission channel; wherein: the first data transmission channel is provided with a connected first processor, a first transceiver module, and a first a comparison module and a first output module; the second data transmission channel is provided with a second processor, a second transceiver module, a second comparison module, and a second output module; the first transceiver module is further connected to a second comparison module, the second transceiver module is further connected to the first comparison module; the relay control device further includes: a clock generation module, configured to generate a clock control signal; the first processor is connected to the clock generation module And the first transceiver module is configured to receive the first data transmission channel data at the first time according to the clock control signal, and the first transceiver module is configured to receive the first data transmission channel data output by the first processor, and The first data transmission channel data is respectively sent to the first comparison module and the second comparison module; the second processor, and the time And generating a module connection, configured to output, according to the clock control signal, the second data transmission channel data, where the first time is different from the second time; the second transceiver module is configured to receive the a second data transmission channel data output by the second processor, and the second data transmission channel data is respectively sent to the first comparison module and the second comparison module; the first comparison module is configured to: Comparing the first data transmission channel data and the second data transmission channel data, outputting a first comparison pulse control signal according to the comparison result; and inputting the first comparison pulse control signal to the first output module, by using the first The output module controls on and off of the first relay; The second comparison module is configured to compare the first data transmission channel data and the second data transmission channel data, output a second comparison pulse control signal according to the comparison result, and input the second comparison pulse control signal The second output module controls on and off of the second relay through the second output module.

The relay control device according to claim 1, wherein the first processor is configured to output the first data transmission channel data at a pulse rising edge timing of the clock control signal, The pulse rising edge time is a first time; the second processor is specifically configured to output the second data transmission channel data at a pulse falling edge time of the clock control signal; the pulse falling edge time is a second time .

The relay control device according to claim 1, wherein the first transceiver module comprises: a first receiving unit, configured to receive first data transmission channel data output by the first processor; a processing unit, configured to perform cyclic redundancy check code processing on the first data transmission channel data, where the first sending unit is configured to output the first data transmission channel data processed by the first processing unit to the The first comparison module and the second comparison module; the second transceiver module includes: a second receiving unit, configured to receive second data transmission channel data output by the second processor; a second processing unit, configured to perform cyclic redundancy check code processing on the second data transmission channel data, and a second sending unit, configured to separately output the second data transmission channel data processed by the second processing unit To the first comparison module and the second comparison module.

The relay control device according to any one of claims 1 to 3, wherein the first comparison module and the second comparison module are combinational logic circuits; and/or, the first output module and the second The output module is a relay circuit controlled by a dynamic safety circuit.

The relay control device according to any one of claims 1 to 3, wherein the clock generation module is disposed in the first data transmission channel or the second data transmission channel.

A relay control method executed by the relay control device of claim 1, comprising: receiving, by the first processor, a clock control signal generated by the clock generation module, and according to the clock control signal Outputting the first data transmission channel data at a time; the first transceiver module receives the first data transmission channel data output by the first processor, and sends the first data transmission channel data to the first comparison module and a second comparison module; the second processor receives the clock control signal generated by the clock generation module, and outputs the second data transmission channel data at the second time according to the clock control signal, where the first time and the second time are not The second transceiver module receives the second data transmission channel data output by the second processor, and sends the second data transmission channel data to the first comparison module and the second comparison module respectively; The first comparison module compares the first data transmission channel data with the second data transmission channel data, outputs a first comparison pulse control signal according to the comparison result, and inputs the first comparison pulse control signal to the first output module, Controlling, turning on and off the first relay by the first output module; comparing, by the second comparison module, the first data transmission channel data and the second data transmission channel data, and outputting a second comparison pulse control signal according to the comparison result; And inputting the second comparison pulse control signal to the second output module, and controlling the on and off of the second relay by the second output module.

The relay control method according to claim 6, wherein the first processor outputs the first data transmission channel data at the first time according to the clock control signal, the method includes: the first processor is Outputting, by the pulse rising edge of the clock control signal, the first data transmission channel data, where the rising edge of the pulse is the first time; the second processor outputs the second time according to the clock control signal at the second time The data transmission channel data includes: the second processor outputs the second data transmission channel data at a pulse falling edge timing of the clock control signal, where the pulse falling edge time is a second time.

The relay control method according to claim 6, wherein the first transceiver module further includes before the first data transmission channel data is output to the first comparison module and the second comparison module, respectively. The first transceiver module performs cyclic redundancy check code processing on the first data transmission channel data, and outputs the second data transmission channel data to the first comparison module in the second transceiver module And the second comparison module further includes: the second transceiver module paires the second The data transmission channel data is processed by cyclic redundancy check code.

The relay control method according to any one of claims 6-8, wherein the first comparison module and the second comparison module are combinational logic circuits; and/or, the first output module and the second The output module is a relay circuit controlled by a dynamic safety circuit.

10. A train operation control system, comprising: an onboard subsystem and a ground subsystem, the onboard subsystem comprising: a first relay and a second relay for controlling a train brake system, and a control station The relay control device according to any one of claims 1 to 5, wherein the first data transmission channel of the relay control device is connected to the first relay for output control first a first comparison pulse control signal of the relay being turned on and off;

The second data transmission channel in the relay control device is connected to the second relay for outputting a second comparison pulse control signal for controlling the on and off of the second relay.