WO2017203927A1

WO2017203927A1 - Signal security system

Info

Publication number: WO2017203927A1
Application number: PCT/JP2017/016551
Authority: WO
Inventors: 佑介中西; 勝田　敬一; 景示前川; 浩行谷
Original assignee: 株式会社日立製作所
Priority date: 2016-05-24
Filing date: 2017-04-26
Publication date: 2017-11-30
Also published as: JP6657012B2; JP2017210068A

Abstract

A signal security system for performing train exclusive control by circulating a security telegram, including track occupancy right information, to a train security device and switch security devices and sharing the security telegram therebetween. This system can be achieved by adding the prohibition of the entry into a maintenance work zone (closure of track) to a security telegram as track closure information. Unfortunately, since there are cases when some devices are turned off during maintenance work, a maintenance terminal to which the maintenance work zone where the entry of the train is prohibited is input needs to search for a device that allows the addition to the security telegram on a case-by-case basis. Furthermore, it takes time to add the track closure information to the security telegram unless the progress of circulation of the security telegram is considered. To address this problem, the maintenance terminal issues, to the train security device and all switch security devices, a request to return information relating to the possession of the security telegram or information relating to the transmission time of the circulated security telegram, identifies the device possessing the security telegram on the basis of the information returned from the devices, and sends a control telegram to the device.

Description

Signal security system

The present invention relates to a signal security system.

Patent Document 1 relates to a signal security system: “A track circuit device electrically isolates a rail, connects a power supply to one end, and connects a relay to the other end to detect a short circuit between the rails due to a train. The cost of maintenance and maintenance of the equipment is high ”(see paragraph [0006] of Patent Document 1), etc., and as means for solving the problem,“ the safety of a train traveling in a predetermined section is based on the security message. In the signal security system that is secured in advance, the security telegram circulates the trains and equipment along the line in a predetermined section, and the right to occupy the train can be set for each block divided into multiple sections It is disclosed that “the configuration has such block occupation right information” (see paragraph [0010] of Patent Document 1).

Japanese Patent Laid-Open No. 2006-232106

In the signal system described in Patent Document 1, the central control device on the ground side does not control the train or the switch, but the safety message in which each train safety device or switch safety device is circulated. This is a mechanism for autonomous control based on this. Therefore, in order to prevent maintenance personnel from entering the maintenance work section in order to safely perform maintenance work on the track, it is necessary to add information that suppresses the entry of the train to the security message that is circulated. is there.
However, since the security message is always circulated between the train security device and the switch safety device, the following two problems exist.

The first issue is that trains equipped with train security devices may advance to other routes or enter the main line, and switch protection devices may be installed before or during maintenance work. Therefore, a maintenance terminal to which a maintenance work section that suppresses entry of a train is input must search for a device that can add the information to the security message each time.

The second problem is that when selecting a device to be actually added from the searched devices, if the circulation situation of the security message is not taken into consideration, it may take time until the information is added to the security message. Is to occur. For example, if the device that has received an instruction from the maintenance terminal has just circulated the security message to the next device, the security message circulates to the device in order to add the instructed information to the security message. I will wait until it comes.

The maintenance terminal to which the maintenance work section that suppresses the entry of the train is input requests the device that circulates the security message to transmit the circulation status of the security message, and each device that receives the request sends the security message circulation status. Respond. The maintenance terminal selects a device that adds information on a maintenance work section that suppresses the entry of the train to the security message based on the circulation status received from each device, and gives an instruction to the selected device.

According to the present invention, the apparatus for receiving the instruction to close the track from the maintenance terminal is not limited, and the track can be closed without taking extra time. Problems, configurations, and effects other than those described above will be clarified by the following description of examples.

FIG. 1 is a diagram showing a configuration of a signal security system according to the present invention. FIG. 2 is a diagram showing an example of the configuration (format) of a security message for realizing line closure in the present invention. FIG. 3 is a diagram showing an example of the configuration of the train security device according to the present invention. FIG. 4 is a diagram showing an example of the configuration of the switch protection device according to the present invention. FIG. 5 is a diagram showing an example of the configuration of the maintenance terminal according to the present invention. FIG. 6 is a diagram illustrating a transmission / reception sequence of a message for instructing line closure in the first embodiment. FIG. 7 is a diagram illustrating an example of a configuration of a security message for realizing an emergency stop. FIG. 8 is a diagram illustrating an example of a configuration of a security message for realizing the switch of the switch. FIG. 9 is a diagram illustrating an example of a configuration of a security message for realizing the temporary speed limit. FIG. 10 is a diagram illustrating a telegram transmission / reception sequence for instructing line closure in the second embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In addition, the Example described below as embodiment is the illustration for demonstrating this invention, and this invention is not limited only to these Examples. Therefore, the present invention can be implemented in various forms without departing from the gist thereof. In addition, the uses and terms of the invention in the following embodiments are not limited to these unless they depart from the gist of the invention.

FIG. 1 is a diagram showing a configuration of a signal security system according to the present invention.
The signal security system according to the present invention includes a train security device 101 installed in a train 100, a switch security device 201 installed or connected to a switch 200, the train security device 101 and a switch security device. A security message 300 that is a message that circulates between 201, a maintenance terminal 400 in which a maintenance person gives an instruction to close the track, and a transmission from the maintenance terminal 400 to the train security device 101 and all the devices of the switch security device 201. The status confirmation message 500, the train safety device 101 that has received the status confirmation message 500, the status response message 501 transmitted from the switch security device 201 to the maintenance terminal 400, and the status response message 501 from the maintenance terminal 400 It consists of a control instruction message 502 transmitted to one selected train security device 101 or switch safety device 201. Hereinafter, the three messages of the status confirmation message 500, the status response message 501, and the control instruction message 502 are collectively referred to as a control message.

FIG. 2 is a diagram showing an example of a configuration (format) for realizing line closure as the security message 300. In this example, the security telegram 300 includes an occupation range column 301 in which the occupancy range of each train line is written, a switch direction indication column 302 in which switch direction indication information is written, and a switch direction. It is composed of a switch direction state field 303 in which state information is written, a member list field 304 in which member list information for circulating a security message is written, and a line closing information field 305 in which a section for setting the line closing is written. The

In the occupation range column 301, information on the occupation range of the track by each train is entered. Since the train exists on the track, the occupation range of the track must be secured for the train to enter the track. In the occupation range of this track, only trains that ensure the occupation range can exist, and other trains cannot enter. If there is a track whose occupation range is not secured by another train and is not a track closed section in the track closure information column 305, the own train can secure the occupation range. The occupation range is defined by information obtained by dividing the line into a plurality of blocks and using the block as a unit, or by an absolute position or a relative position from a predetermined reference point. In that case, the occupation range of the train can be defined dynamically.

In the turning device direction instruction column 302, instruction information for instructing the direction of the turning device is entered by a train that secures the occupation range of the track including the turning device. The switch protection device 201 controls the direction of the switch according to this instruction.

In the rolling device direction state column 303, the turning device security device 201 enters the direction information of the turning device. The train recognizes the opening direction of the switch by checking the switch direction state column 303.

In the member list column 304, the identification information of the train and the switch that circulates the security message 300 is entered in the order of circulation.

In the track closing information column 305, a range for setting the track closing is entered. However, if the occupied range already reserved for the train in the occupied range column 301 is included in the range for setting the closed track, the closed track cannot be set. As for the range of the track closure to be entered, the track is divided into a plurality of blocks as in the occupation range column 301 and specified by information in units of the blocks, or relative to an absolute position or a predetermined reference point. Specify by position.

Also, a plurality of track closing information may be set so that the range for closing the track can be overlapped. By mounting in this way, even when a plurality of maintenance work teams perform maintenance work in the same section, the maintenance work teams can overlap each other to set the track closure. Then, even if one maintenance work team releases the track closure of the section set by itself, if the other maintenance work team does not release the track closure of the section set by itself, the track closure for the section Is not released. Therefore, it is only necessary to manage the line closure of the maintenance work that each maintenance work team is in charge of.

Note that the configuration (format) of the security message 300 is not limited to the above. With regard to the track closing information, a format in which track closing information is added for each block in the occupation range column 301 may be used.

Next, processing contents in this embodiment will be described with respect to the train security device 101, the switch safety device 201, and the maintenance terminal 400.
FIG. 3 is a diagram illustrating an example of the configuration of the train security device 101. The train security device 101 includes a security message update unit 102, a train control unit 103, a control message processing unit 104, and a radio control unit 105.

When the security message is input from the wireless control unit 105, the security message update unit 102 updates the occupation range column 301 and the switch direction indication column 302 of the security message 300 based on the train operation plan information. When updating the occupation range column 301, it is confirmed whether or not the track closure is set in the track closure information column 305, and if it is set, the occupation range is entered so as not to include the track closure range. .

If the range for setting the line closure is input from the control message processing unit 104, the security message update unit 102 enters the range in the line closure information field 305, and conversely, from the control message processing unit 104 to the line If release of the closing is requested, the line closing information is deleted from the line closing information column 305.
Furthermore, when the control message processing unit 104 requests the control message processing unit 104 to output the range of the transmission / reception state of the security message and the range in which the occupation right is already secured in the occupation range column 301, the security message update unit 102 The information of is output.

The train control unit 103 acquires the occupation range column 301 and the switch direction state column 303 of the security message 300 from the security message update unit 102, and the occupation right is not secured or the switch is locked. Control the train so that it does not enter the section that is not. Moreover, when the train position is requested | required from the security message update part 102, the train control part 103 outputs the information to the safety message update part 102.

When the status confirmation message 500 is input from the wireless control unit 105, the control message processing unit 104 acquires the “possession” state of the security message 300 from the security message update unit 102, and creates a status response message 501 including the information. And output to the wireless control unit 105. Here, the “possession” of the security message 300 refers to a state in which only the own device can rewrite the security message 300, and a state other than that represents “non-possession”.

In addition, if the control instruction message 502 input from the wireless control unit 105 is an instruction to set the line closure, the control message processing unit 104 has already occupied the occupation right in the occupation range column 301 of the security message 300 from the security message update unit 102. Is acquired, and it is confirmed whether or not the acquired range is included in the setting range of the line closure indicated by the control instruction message 502. If it is included, the control message processing unit 104 cannot set the line closing and transmits the information to the maintenance terminal 400 via the wireless control unit 105. If not included, the control message processing unit 104 outputs the range for setting the line closure to the security message update unit 102. If it is an instruction to cancel the line closing, the control message processing unit 104 outputs the line closing information to be released to the security message updating unit 102.

The wireless control unit 105 is a device in which the security message 300 output from the security message update unit 102 and the control message output from the control message processing unit 104 are designated by the security message update unit 102 or the control message processing unit 104, respectively. Is transmitted wirelessly. In addition, the radio control unit 105 outputs a security message 300 to the security message update unit 102 and a control message to the control message processing unit 104 for a message transmitted from another device to the train security device 101 wirelessly. .

FIG. 4 is a diagram illustrating an example of the configuration of the switch protection device 201. The switch device security device 201 includes a security message update unit 202, a switch device control unit 203, a control message processing unit 204, and a wireless control unit 205. Structurally, the train security device 101 and the train control unit 203 are different from the train security device 101. Functionally, the security message update unit 102 of the train security device 101 mainly updates the occupation range column 301 and the switch direction instruction column 302 of the security message 300, but the switch security device 201. The security message update unit 202 also updates the switch direction state column 303 of the security message 300 as the switch control state.

The security message update unit 202 switches the indicated direction to the switch control unit 203 based on the switch direction instruction field 302 of the security message 300 input from the wireless control unit 205. Also, the security message update unit 202 acquires the status information of the switch from the switch control unit 203 and enters the status information in the switch direction state column 303 of the security message 300. Further, when the security message updating unit 202 receives an input of the range for setting the line closing from the control message processing unit 204, the security message updating unit 202 enters the range in the line closing information column 305.

The switch control unit 203 acquires the switch direction instruction field 302 of the security message 300 from the security message update unit 202, and switches the switch in the designated direction. Also, the switch control unit 203 acquires the state of the switch from the switch and outputs the state information to the security message update unit 102.

Since the functions of the control message processing unit 204 and the radio control unit 205 are the same as those of the control message processing unit 104 and the radio control unit 105 of the train security device 101, description thereof will be omitted.

FIG. 5 is a diagram illustrating an example of the configuration of the maintenance terminal 400. The maintenance terminal 400 includes a transmission destination determination unit 401, a control information input unit 402, and a radio control unit 403.
When the instruction to close the line is input from the control information input unit 402, the transmission destination determination unit 401 creates a state confirmation message 500 including a range in which setting / canceling of the line closing is specified, and outputs the state confirmation message 500 to the wireless control unit 403. To do. In addition, when the status response message 501 of each device is input from the wireless control unit 403, the transmission destination determination unit 401 determines the device that “has” the security message 300 as the transmission destination of the control instruction message 502. Further, the transmission destination determination unit 401 outputs the setting status of the line closure to the control information input unit 402.

The control information input unit 402 outputs the content of the line closure instructed by the maintenance staff to the transmission destination determination unit 401. In addition, the control information input unit 402 displays the setting status of the track closure acquired from the transmission destination determination unit 401 to the maintenance staff.

The wireless control unit 403 wirelessly transmits the state confirmation message 500 output from the transmission destination determination unit 401 to all the devices of the train security device 101 and the switch security device 201, and outputs from the transmission destination determination unit 401. The transmitted control instruction message 502 is transmitted wirelessly to the device specified by the transmission destination determination unit 401. In addition, the wireless control unit 403 outputs a status response message 501 transmitted from another device to the maintenance terminal 400 wirelessly, to the transmission destination determination unit 401.

Next, Example 1 which is an example of a mechanism for instructing a line closing from the maintenance terminal 400 by the signal security system according to the present invention will be described.
FIG. 6 is a diagram illustrating a transmission / reception sequence of a message for instructing a line closure in the first embodiment. The vertical axis is time (the time has elapsed downward), the horizontal axis direction is arranged, the messages sent and received are written on the arrows between the devices, the train security device 101 or the switch security device 201 shows the time during which the security message 300 is “held” by a bold line in the vertical axis.

Step 601 (S601): The maintenance terminal 400 transmits a status confirmation message 500 to all the train security device 101 and the switch protection device 201, and possession information (“possession” or “non-retention” of the security message 300). Requests a reply of the status response message 501 in which “possession”) is entered.

Step 602 (S602): The device that has received the status confirmation message 500 from the maintenance terminal 400 transmits a status response message 501 including the possession status (“possession” or “non-possession”) of the security message 300 to the maintenance terminal 400. In addition, the device that “has” the security message 300 stops sending the security message 300 to the next device. In FIG. 6, the switch security device A201 responds with a status response message 501 to the state of “possessed”, and the train security device 101 and the switch protection device B201 respond to the status response of “not possessed”. It responds with the electronic message 501.

Step 603 (S603): The maintenance terminal 400 identifies a device that “holds” the security message 300 from the status response message 501 returned from each device, and then designates the device that “holds” the device. In response, a control instruction message 502 is transmitted. In FIG. 6, the control instruction message 502 is transmitted to the switch protection device A201. If there is no “possessed” response in the status response message 501 from any device, the process returns to step 601 to retransmit the status confirmation message 500. Alternatively, the control instruction message 502 may be transmitted to the device with the fastest response without retransmitting the status confirmation message 500.

Step 604 (S604): The apparatus that has received the control instruction message 502 from the maintenance terminal 400 has already secured the occupation right in the occupation range column 301 of the security message 300 for the setting range of the line closure instructed by the control instruction message 502. If the occupation right is not secured, the setting range of the line closing is entered in the line closing information column 305 of the security message 300. In FIG. 6, the switch protection device A201 fills in the setting range of the line closing. When the occupation right is secured in the setting range of the track closing, the receiving device determines that the track closing setting is not possible, and notifies the maintenance terminal 400 of that.

Step 605 (S605): The device that has entered the setting range of the line closing in the line closing information column 305 of the security message 300 transmits the security message 300 to the next device based on the member list column 304. In FIG. 6, the security message 300 is transmitted from the switch protection device A201 to the switch protection device B201.

Step 606 (S606): The train security device 101 to which the security message 300 has been circulated confirms the track closure information column 305 when updating the occupation range column 301 of the security message 300, and the range in which the track closure is set The line can be closed by controlling so as not to occupy.

By performing the above transmission / reception sequence, the signal security system according to the first embodiment transmits the status confirmation message 500, and receives the status response message 501 including the circulation status information of the security message 300 as a response. From the train security device 101 and the switch safety device 201, it is possible to specify a device that has not been turned off and that can add an instruction to close the track to the security message, and can instruct the track to be closed. . Furthermore, the maintenance staff specifies the device holding the safety message from the circulation status of the security message 300 included in the status confirmation message 500 and instructs the device to close the track, so that the maintenance staff The time from when the closing instruction is issued until the instruction is reflected in the security message 300 can be shortened.

In the first embodiment, the case where the track is closed is described as the content to be instructed from the maintenance terminal 400. However, the case may be an emergency stop, a switch of a switch or a temporary speed limit. For these instructions, as shown in FIGS. 7 to 9, an emergency stop column 306, a switch change instruction column 307, or a temporary speed limit column 308 indicating the contents of each control instruction is provided in the security message 300. Is possible.

FIG. 7 is a diagram showing an example of the configuration of a security message for realizing an emergency stop. An emergency stop column 306 is added to the security message 300. When setting and canceling an emergency stop, the train identification number is entered in the emergency stop column 306 when the train is designated and instructed, and the section is designated when instructing the train on the section. The train security device 101 confirms the train and section for which the setting and release of the emergency stop are designated in the control instruction message 502 or the security message 300, and performs necessary control.

FIG. 8 is a diagram showing an example of a configuration of a security message for realizing the switch of the switch. A switch device conversion instruction field 307 is added to the security message 300. When the switch is to be changed, the switch number identification direction and the change direction are entered in the switch change instruction field 307. The switch protection device 201 that controls the corresponding switch device confirms the occupation range column 301 and the line closing information column 305 of the security message 300, and switches the direction of the switch device if it is convertible. .

FIG. 9 is a diagram showing an example of a configuration of a security message for realizing the temporary speed limit. A temporary speed limit column 308 is added to the security message 300. When setting and canceling the temporary speed limit, the temporary speed limit setting section and its speed limit are entered in the temporary speed limit field 308. The train security device 101 checks the temporary speed limit column 308 of the security telegram 300, and when traveling through a section in which the temporary speed limit is set, performs control so that the speed limit is less than the instructed speed limit.

In the first embodiment, when receiving a request for transmitting possession information from the maintenance terminal 400, each device stops sending the security message 300 to the next device. However, in order to improve the reliability of the system, when the transmission / reception timeout time of the security message 300 is set to be short in each device and a mechanism for detecting a communication error in the security message is implemented quickly, a communication error is erroneously detected. It is desirable not to stop the transmission of the security message 300 so as not to. In this case, the maintenance terminal 400 can deal with the request for the transmission time of the security message 300 that has been sent to the latest circulation instead of the possession information of the security message 300. In the second embodiment, an instruction is issued from the maintenance terminal based on this countermeasure. A mechanism for instructing the line closing from the maintenance terminal according to the second embodiment will be described below.

FIG. 10 is a diagram showing a message transmission / reception sequence for instructing line closure in the second embodiment. As in FIG. 6, the vertical axis indicates time (the time elapses downward), the horizontal axis indicates each device, the message transmitted / received is written on the arrow between the devices, and the security message 300 is “ The possessed time is indicated by a thick line in the vertical axis.

Step 1001 (S1001): The maintenance terminal 400 transmits a status confirmation message 500 to all the train security device 101 and the switch protection device 201, and a status response in which the previous transmission time of the security message 300 is entered. Request a reply of the message 501.

Step 1002 (S1002): All devices that have received the status confirmation message 500 from the maintenance terminal 400 transmit to the maintenance terminal 400 a status response message 501 including the transmission time of the security message 300 that was most recently routed to circulation. In the second embodiment, the security message 300 is transmitted to the next device according to the member list field 304 without stopping the transmission of the security message 300 to the next device.

Step 1003 (S1003): The maintenance terminal 400 identifies the location of the security message 300 from the previous transmission time of the status response message 501 returned from each device, and transmits a control instruction message 502 to the identified device. To do. In FIG. 10, the maintenance terminal 400 transmits a control instruction message 502 to the switch protection device B201.

Step 1004 (S1004): In the device that has received the control instruction message 502 from the maintenance terminal 400, the occupation right has already been secured in the occupation range column 301 of the security message 300 in the line closing setting range indicated by the control instruction message 502. If the occupation right is not secured, the setting range of the line closing is entered in the line closing information column 305 of the security message 300. In FIG. 10, the switch protection device B <b> 201 fills in the setting range of the line closing. When the occupation right is secured in the setting range of the track closing, the receiving device determines that the track closing setting is not possible, and notifies the maintenance terminal 400 of that.

Step 1005 (S1005): The device that has entered the setting range of the line closing in the line closing information column 305 of the security message 300 transmits the security message 300 to the next device based on the member list column 304. In FIG. 10, the security message 300 is transmitted from the switch security device B 201 to the train security device 101.

Step 1006 (S1006): The train security device 101 to which the security message 300 has been circulated confirms the track closure information column 305 when updating the occupation range column 301 of the security message 300, and the range in which the track closure is set The line can be closed by controlling so as not to occupy.

By performing the above transmission / reception sequence, the signal security system according to the second embodiment has the same effect as that explained in the first embodiment, and it is not necessary to stop the transmission of the security message 300. It is possible to give an instruction to close the track without affecting the circulation of 300.

In addition, regarding the identification of the location of the security message 300, the accuracy can be improved by using other information in addition to the previous transmission time. For example, how much communication delay occurs after issuing an instruction from the maintenance terminal to each device by sending each device the time it takes to receive the response from the maintenance terminal. Can be calculated. Further, by transmitting not only the previous transmission time but also several past transmission times, it is also possible to identify a device that gives an instruction by grasping the communication status between the devices. Further, in combination with the first embodiment, the possession information and the transmission time may be returned. In this case, unlike the first embodiment, since the circulation of the security message 300 is continued without stopping, there is a possibility that there is a response of “possession” from a plurality of devices due to a communication delay or the like. It is possible to identify the device that possesses the security message.

DESCRIPTION OF SYMBOLS 100 ... Train, 101 ... Train security device, 200 ... Rolling device, 201 ... Rolling device security device, 300 ... Safety message, 301 ... Occupied range column, 302 ... Rolling device direction indication column, 303 ... Roll Tektronix direction state column, 304 ... Member list column, 305 ... Track closing information column, 306 ... Emergency stop column, 307 ... Teggle switch instruction column, 308 ... Temporary speed limit column, 400 ... Maintenance terminal, 500 ... Status confirmation message, 501 ... Status response message, 502 ... Control instruction message

Claims

It is a signal security system that circulates a security message including occupation area information of a track section where the train travels between a train safety device that controls a train and a switch safety device that controls a switch. And
Equipped with a maintenance terminal,
The maintenance terminal transmits a control telegram including control information for controlling travel of the train to the train security device or the switch security device,
The train security device or the switch security device adds the control information from the received control message to the security message.
The signal security system according to claim 1,
The maintenance terminal requests the train security device and the switch security device to return a circulation status of the security message, and transmits the control message from the returned status of the train security device or A signal security system, wherein the switch security device is determined.
The signal security system according to claim 1 or 2,
The maintenance terminal requests the train security device and the switch security device to return the possession information of the security message, and the train security device or the switch that has replied the possession of the security message. A signal security system, wherein the control message is transmitted to a device security device.
The signal security system according to any one of claims 1 to 3,
The maintenance terminal requests the train security device and the switch security device to return the transmission time when the security message was circulated, and the transmitted transmission time or the possessed information returned. The signal security system, wherein the control message is transmitted from the transmission time to the train security device or the switch security device possessing the security message.
The signal security system according to claim 1 or 2,
The maintenance terminal requests a response to the train security device and the switch security device that circulates the security message, and the train security device or the switch that responded the earliest response. A signal security system, wherein the control message is transmitted to a security device.
A signal security system according to any one of claims 1 to 5,
Corresponding to the plurality of control messages transmitted by the maintenance terminal, each of the control information included for each of the plurality of control messages is added to the security message.
The signal security system according to any one of claims 1 to 6,
The signal security system according to claim 1, wherein the control information is information for preventing the train from entering the designated track section.
The signal security system according to any one of claims 1 to 6,
The signal security system, wherein the control information is information for stopping the train.
The signal security system according to any one of claims 1 to 6,
The signal security system according to claim 1, wherein the control information is information for switching the switch.
The signal security system according to any one of claims 1 to 6,
The signal security system according to claim 1, wherein the control information is information on speed limitation of the train in the designated track section.