WO2018113761A1 - 基于轨道交通的计算机平台 - Google Patents

基于轨道交通的计算机平台 Download PDF

Info

Publication number
WO2018113761A1
WO2018113761A1 PCT/CN2017/117888 CN2017117888W WO2018113761A1 WO 2018113761 A1 WO2018113761 A1 WO 2018113761A1 CN 2017117888 W CN2017117888 W CN 2017117888W WO 2018113761 A1 WO2018113761 A1 WO 2018113761A1
Authority
WO
WIPO (PCT)
Prior art keywords
processing unit
communication interface
computer platform
controller
rail transit
Prior art date
Application number
PCT/CN2017/117888
Other languages
English (en)
French (fr)
Inventor
薄云览
卓开阔
王发平
Original Assignee
比亚迪股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 比亚迪股份有限公司 filed Critical 比亚迪股份有限公司
Publication of WO2018113761A1 publication Critical patent/WO2018113761A1/zh

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or vehicle train for signalling purposes ; On-board control or communication systems
    • B61L15/0063—Multiple on-board control systems, e.g. "2 out of 3"-systems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or vehicle train for signalling purposes ; On-board control or communication systems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or vehicle train for signalling purposes ; On-board control or communication systems
    • B61L15/0072—On-board train data handling
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements

Definitions

  • the invention relates to the technical field of vehicle control, and in particular to a computer platform based on rail transit.
  • the signal system In rail transit, the signal system is the central control system that controls the operation of the train. In order to ensure the safe operation of the signal system in the vehicle operating environment, the signal system is generally based on a safety computer that satisfies the SIL4 security level.
  • the security computer adopts a chassis plug-in structure. That is to say, its product form is a standardized 3U, 4U or 6U chassis and plug-in board architecture, where the chassis needs to be installed in the electrical cabinet of the train, but with the continuous development of train control technology, the safety is continuously improved, and As the user's requirements for ride comfort are improved, the space on the train that can be used to install the electrical cabinet is becoming smaller and smaller.
  • the in-vehicle equipment cabinet in the prior art cannot be installed in a suitable position in the vehicle, and thus cannot meet the requirements of the in-vehicle operating environment.
  • the present invention aims to solve at least one of the technical problems in the related art to some extent.
  • an object of the present invention is to provide a computer platform based on rail transit to solve the technical problem of requiring a large installation space in the prior art.
  • an embodiment of an aspect of the present invention provides a rail transit based computer platform including a plurality of modular controllers interconnected by a communication cable; the controller includes a safety power source, a communication interface, a first processing unit, and a second processing unit; the first processing unit is connected to the communication interface, configured to acquire external input data, and perform data processing synchronously with the second processing unit to obtain output data, And performing an exchange vote on the output data, and when the output data generated by the first processing unit and the output data generated by the second processing unit are voted to be consistent, the safe power supply is disconnected.
  • the power supply of the communication interface includes a safety power source, a communication interface, a first processing unit, and a second processing unit; the first processing unit is connected to the communication interface, configured to acquire external input data, and perform data processing synchronously with the second processing unit to obtain output data, And performing an exchange vote on the output data, and when the output data generated by the first processing unit and the output data generated by the second processing unit are voted to be consistent, the safe power supply is
  • the second processing unit is connected to the first processing unit, configured to perform data processing, exchange voting, and control of the secure power source in synchronization with the first processing unit;
  • the secure power source is coupled to the first processing unit, the second processing unit, and the communication interface, for communicating the communication interface under control of the first processing unit and the second processing unit powered by;
  • the communication interface is configured to output the output data.
  • the safety power source is used to supply power to the communication interface under the control of the first processing unit and the second processing unit, and the first processing unit and the second processing unit are configured to acquire external input data. Thereafter, the data processing is performed synchronously, and when the output data generated by the first processing unit is inconsistent with the output data voting result generated by the second processing unit, the control power supply is powered off to prevent the communication interface from outputting the output data. Since the controller adopts a modular structure, the controllers can be installed in a suitable position of the train in a distributed manner, and it is not necessary to install each controller in the chassis, thereby solving the technical problem that the installation space in the prior art is occupied.
  • FIG. 1 is a schematic structural diagram of a computer platform according to an embodiment of the present invention.
  • FIG. 2 is a schematic structural diagram of a computer platform according to another embodiment of the present invention.
  • FIG. 3 is a schematic structural diagram of a controller according to an embodiment of the present invention.
  • Figure 4 is a schematic structural view of the main controller
  • FIG. 5 is a schematic structural diagram of a communication control module
  • FIG. 6 is a schematic structural diagram of an IO control module
  • Figure 7 is a schematic diagram of the product architecture of the modular controller.
  • the rail transit based computer platform includes a plurality of modular controllers 10 interconnected by communication cables.
  • the plurality of controllers 10 included in the computer platform have one master controller and the other slave controllers.
  • the main controller polls each slave controller in turn through a communication cable, thereby completing data transmission and reception with each slave controller.
  • the communication cable here includes a CAN bus and/or an Ethernet.
  • FIG. 1 is a schematic structural diagram of a computer platform according to an embodiment of the present invention. As shown in FIG. 1 , each controller 10 is connected through an Ethernet switch, so that each controller 10 can Interconnection via Ethernet.
  • FIG. 2 is a schematic structural diagram of a computer platform according to another embodiment of the present invention. As shown in FIG. 2, each controller 10 is connected to a CAN bus, so that between the controllers 10, Interconnection can be achieved via the CAN bus.
  • Ethernet mode is suitable for an application scenario with a large amount of communication data, such as a train signal system and Communication connection between ground signal systems
  • CAN bus mode is suitable for low-cost, small data input and output (IO) type control signals, such as communication between train signal system and train traction controller, brake controller .
  • IO data input and output
  • the controller adopts a modular structure, the controllers can be installed in a suitable position of the train in a distributed manner, and it is not necessary to install each controller in the chassis, thereby solving the technical problem that the installation space in the prior art is occupied.
  • FIG. 3 is a controller 10 according to an embodiment of the present invention. Schematic diagram of the structure, as shown in FIG. 3, the controller 10 includes a secure power source 11, a communication interface 12, a first processing unit 13, and a second processing unit 14.
  • the secure power source 11 is connected to the first processing unit 13, the second processing unit 14, and the communication interface 12 for communicating to the communication interface 12 under the control of the first processing unit 13 and the second processing unit 14. powered by.
  • the first processing unit 13 is connected to the communication interface 12 for acquiring external input data through the communication interface 12, and performing data processing in synchronization with the second processing unit 14, when the output data generated by the first processing unit 13 is When the result of the voting of the output data generated by the second processing unit 14 is inconsistent, the secure power source 11 is controlled to power off the communication interface 12.
  • the second processing unit 14 is connected to the first processing unit 13 for performing data processing, exchanging voting, and controlling the secure power source 11 in synchronization with the first processing unit 13.
  • the communication interface 12 is configured to output the output data.
  • first processing unit 13 and the second processing unit 14 are further configured to: when the output data generated by the first processing unit 13 and the output data generated by the second processing unit 14 vote, the result is When consistent, the secure power source 11 is controlled to supply power to the communication interface 12 to output the output data through the communication interface 12.
  • the safety power source 11 is configured to power off the communication interface 12 when any one of the first processing unit 13 and the second processing unit 14 controls to disconnect the power of the communication interface 12; When the first processing unit 13 and the second processing unit 14 both control the power supply to the communication interface 12, the communication interface 12 is powered.
  • the rail transit based computer platform includes a plurality of modular controllers interconnected by communication cables, the controller including a secure power source, a communication interface, a first processing unit, and a second processing unit.
  • the safety power source is configured to supply power to the communication interface under the control of the first processing unit and the second processing unit, and the first processing unit and the second processing unit are configured to perform data processing synchronously after acquiring external input data, when the first processing is performed.
  • the control power supply is powered off to prevent the communication interface from outputting the output data. Since the controller adopts a modular structure, the controllers can be installed in a proper position of the train, and the controllers are not required to be installed in the chassis, which solves the technical problem that the installation space in the prior art is large.
  • the controller 10 is specifically a main controller. Since the controller 10 adopts a modular design, the main controller In the specific implementation form, the main control module, FIG. 4 is a schematic diagram of the main controller.
  • the first processing unit 13 includes a first CPU 131 for performing data processing, a first memory 132 for buffering data of the first CPU 131, and a The first power source 133 powered by the first CPU 131 is described.
  • the second processing unit 14 includes a second CPU 141 for performing data processing in synchronization with the first CPU 131, a second memory 142 for buffering data of the second CPU 141, and a pair.
  • the second power source 143 is powered by the second CPU 141.
  • the first CPU 131 and the second CPU 141 each include an operator 151, a synchronizer 152, a data switch 153, and a voter 154.
  • the arithmetic unit 151 is connected to a synchronizer 152, a data switch 153, and a voter 154, respectively; the synchronizer 152 is connected to the arithmetic unit 151; the data switch 153 and the arithmetic unit 151 and the vote
  • the 154 is connected to the player 151 and the data converter 153.
  • the data exchanger corresponding to the first CPU 131 and the data exchanger corresponding to the second CPU 141 are connected to each other.
  • the synchronizer corresponding to the first CPU 131 and the synchronizer corresponding to the second CPU 141 are connected to each other.
  • the communication interface 12 is specifically configured to perform external communication between the plurality of controllers 10 and external devices. As shown in FIG. 3, the communication interface 12 can include an Ethernet interface 121 and a CAN interface 122.
  • the secure power source 11 is connected to the Ethernet interface 121 and the CAN interface 122 for use under the control of the first CPU 131 of the first processing unit 13 and the second CPU 141 of the second processing unit 14 to the Ethernet interface for external communication. 121 and CAN interface 122 are powered.
  • the first CPU 131 acquires external input data from the communication interface 12, and transmits the data to the second CPU 141 via the communication channel between the two CPUs, and the first CPU 131 and the second CPU 141 synchronize the protocol analysis and logical operation of the communication data.
  • the generated output data is exchanged for voting, and if the voting is correct, the output is performed by the first CPU 131 and the communication interface 12. If the voting results of any of the CPUs are inconsistent, the control safety power source 11 supplies power to the output communication interface 12 to prevent erroneous data output.
  • the rail transit based computer platform includes a plurality of modular controllers interconnected by communication cables.
  • the controller includes a secure power source, a communication interface, a first processing unit, and a second processing unit.
  • the safety power source is configured to supply power to the communication interface under the control of the first processing unit and the second processing unit, and the first processing unit and the second processing unit are configured to perform data processing synchronously after acquiring external input data, when the first processing is performed.
  • the control power supply is powered off to prevent the communication interface from outputting the output data. Since the controller adopts a modular structure, the controllers can be installed in a suitable position of the train in a distributed manner, and it is not necessary to install each controller in the chassis, thereby solving the technical problem that the installation space in the prior art is occupied.
  • the controller 10 may be a slave controller, and the slave controller is also referred to as a peripheral controller.
  • the slave controller may include a communication control module and/or an IO control module.
  • FIG. 5 is a schematic structural diagram of the communication control module. As shown in FIG. 5, the first processing unit 13 and the second processing unit 14 in the communication control module.
  • the specific structure is the same as that of the main controller shown in FIG. 4, and is not described in detail in this embodiment. For details, refer to the related description in the foregoing embodiment.
  • the communication interface 12 includes an external communication interface 123 for performing external communication between the controller and an external device.
  • the first processing unit 13 is configured to perform data processing in synchronization with the second processing unit 14, and perform a result of voting when the output data generated by the first processing unit 13 and the output data generated by the second processing unit 14 are voted.
  • the safety power source 11 is controlled to power off the external communication interface 123; when the output data generated by the first processing unit 13 and the output data generated by the second processing unit 14 are voted
  • the secure power source 11 is controlled to supply power to the external communication interface 123 to output the output data through the external communication interface 123.
  • the second processing unit 14 is connected to the first processing unit 13 for performing data processing, exchange voting, and control of the secure power source 11 in synchronization with the first processing unit 13.
  • the secure power source 11 can be used to supply power to the external communication interface 123 for external communication under the control of the first CPU 131 of the first processing unit 13 and the second CPU 141 of the second processing unit 14.
  • the safety power source 11 turns off the external communication interface 123 when any one of the first processing unit 13 and the second processing unit 14 controls to disconnect the external communication interface 123;
  • the first processing unit 13 and the second processing unit 14 both control the power supply to the external communication interface 123, the external communication interface 123 is powered.
  • FIG. 6 is a schematic structural diagram of the IO control module. As shown in FIG. 6, the first processing unit 13 and the second processing unit in the IO control module.
  • the specific structure of the main controller is the same as that of the main controller shown in FIG. 4, and is not described in detail in this embodiment. For details, refer to the related description in the foregoing embodiment.
  • the communication interface 12 includes an IO interface 124 for external communication between the controller and external devices.
  • the first processing unit 13 is configured to perform data processing in synchronization with the second processing unit 14, and perform a result of voting when the output data generated by the first processing unit 13 and the output data generated by the second processing unit 14 are voted.
  • the safety power source 11 is controlled to power off the IO interface 124; when the output data generated by the first processing unit 13 and the output data generated by the second processing unit 14 are voted, the result is
  • the secure power source 11 is controlled to supply power to the IO interface 124 to output the output data through the IO interface 124.
  • the second processing unit 14 is coupled to the first processing unit 13 for performing data processing, exchange voting, and control of the secure power source 11 in synchronization with the first processing unit 13.
  • the secure power source 11 can be used to supply power to the IO interface 124 for external communication under the control of the first CPU 131 of the first processing unit 13 and the second CPU 141 of the second processing unit 14.
  • the security power supply 11 powers down the IO interface 124 when any one of the first processing unit 13 and the second processing unit 14 controls to power off the IO interface 124;
  • the first processing unit 13 and the second processing unit 14 both control the power supply to the IO interface 124, the IO interface 124 is powered.
  • FIG. 7 is a schematic diagram of the product architecture of the modular controller.
  • the controllers in each module form are With the structure of the independent module, different hardware communication interfaces and hardware IO interfaces can be configured for each of the foregoing controllers according to specific requirements, thereby maintaining good scalability of the controller.
  • each modular controller can be fixed by rail or wall, which is convenient for fixing the module to the proper position of the vehicle body according to actual needs under the condition that the cabinet is not suitable for installation.
  • the modular controller can also be installed outside the train.
  • the structure of the modular controller for installation outside the train needs to meet the requirements of outdoor waterproof, dustproof, anti-vibration and heat dissipation.
  • the front panel may include a power interface, an Ethernet interface, a CAN and IO type interface, a power supply and an IO interface using a plug connector, an Ethernet using an M12 connector, and a CAN bus using a D-SUB type connection.
  • the back of the car can be fixed in the proper position of the car body.
  • the main control module can be installed under the seat of the train, and each slave controller includes a communication control module and/or an IO control module, and is installed on the bottom of the train, such as near the bogie. .
  • the rail transit based computer platform includes a plurality of modular controllers interconnected by communication cables.
  • the controller includes a secure power source, a communication interface, a first processing unit, and a second processing unit.
  • the safety power source is configured to supply power to the communication interface under the control of the first processing unit and the second processing unit, and the first processing unit and the second processing unit are configured to perform data processing synchronously after acquiring external input data, when the first processing is performed.
  • the control power supply is powered off to prevent the communication interface from outputting the output data. Since the controller adopts a modular structure, the controllers can be installed in a suitable position of the train in a distributed manner, and it is not necessary to install each controller in the chassis, thereby solving the technical problem that the installation space in the prior art is occupied.
  • first and second are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or implicitly indicating the number of technical features indicated.
  • features defining “first” or “second” may include at least one of the features, either explicitly or implicitly.
  • the meaning of "a plurality” is at least two, such as two, three, etc., unless specifically defined otherwise.
  • a "computer-readable medium” can be any apparatus that can contain, store, communicate, propagate, or transport a program for use in an instruction execution system, apparatus, or device, or in conjunction with the instruction execution system, apparatus, or device.
  • computer readable media include the following: electrical connections (electronic devices) having one or more wires, portable computer disk cartridges (magnetic devices), random access memory (RAM), Read only memory (ROM), erasable editable read only memory (EPROM or flash memory), fiber optic devices, and portable compact disk read only memory (CDROM).
  • the computer readable medium may even be a paper or other suitable medium on which the program can be printed, as it may be optically scanned, for example by paper or other medium, followed by editing, interpretation or, if appropriate, other suitable The method is processed to obtain the program electronically and then stored in computer memory.
  • portions of the invention may be implemented in hardware, software, firmware or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware and in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: discrete with logic gates for implementing logic functions on data signals Logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), and the like.
  • each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.
  • the above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Abstract

一种基于轨道交通的计算机平台，包括：通信线缆互联的多个模块化的控制器（10），控制器（10）包括安全电源（11）、通信接口（12）、第一处理单元（13）和第二处理单元（14）。其中，安全电源（11）用于在第一处理单元（13）和第二处理单元（14）的控制下向通信接口（12）供电，第一处理单元（13）和第二处理单（14）元用于获取外部输入数据之后，同步进行数据处理，当第一处理单元（13）所生成的输出数据与第二处理单元（14）所生成的输出数据表决结果不一致时，控制安全电源（11）对通信接口（12）断电，以避免通信接口（12）输出该输出数据。由于控制器（10）采用了模块化结构，从而可以将各个控制器（10）分散安装于列车的适宜位置，无需将各个控制器（10）均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。

Description

基于轨道交通的计算机平台
相关申请的交叉引用
本申请基于申请号为201611204322.3，申请日为2016年12月23日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此引入本申请作为参考。
技术领域
本发明涉及车辆控制技术领域，尤其涉及一种基于轨道交通的计算机平台。
背景技术
在轨道交通中，信号系统是控制列车运行的中枢控制系统。为了保障信号系统在车载运行环境下的运行安全，信号系统一般基于满足SIL4安全等级的安全计算机。
在现有技术中，安全计算机采用机箱插板式结构。也就是说，其产品形态为标准化的3U，4U或6U机箱和插板架构，这里的机箱需要安装在列车的电气柜中，但随着列车控制技术的不断发展，安全性的不断提升，以及用户对于乘坐舒适性要求的提高，列车的车上能够用于安装电器柜的空间越来越狭小。
因此，现有技术中的车载设备机柜无法在车内找到合适的位置安装，从而无法满足车载运行环境的要求。
发明内容
本发明旨在至少在一定程度上解决相关技术中的技术问题之一。
为此，本发明的一个目的在于提出一种基于轨道交通的计算机平台，以解决现有技术中所需安装空间较大的技术问题。
为达上述目的，本发明一方面的实施例提出了一种基于轨道交通的计算机平台，所述计算机平台包括通过通信线缆互联的多个模块化的控制器；所述控制器包括安全电源、通信接口、第一处理单元和第二处理单元；所述第一处理单元，与所述通信接口连接，用于获取外部输入数据，并与所述第二处理单元同步进行数据处理得到输出数据，以及对所述输出数据进行交换表决，当所述第一处理单元所生成的输出数据与所述第二处理单元所生成的输出数据进行表决的结果为一致时，控制所述安全电源断开所述通信接口的供电；
所述第二处理单元，与所述第一处理单元连接，用于与所述第一处理单元同步进行数据处理、交换表决和对所述安全电源的控制；
所述安全电源，与所述第一处理单元、所述第二处理单元和所述通信接口连接，用于在所述第一处理单元和所述第二处理单元的控制下对所述通信接口供电；
所述通信接口，用于输出所述输出数据。
本发明实施例的基于轨道交通的计算机平台中，安全电源用于在第一处理单元和第二处理单元的控制下向通信接口供电，第一处理单元和第二处理单元用于获取外部输入数据之后，同步进行数据处理，当第一处理单元所生成的输出数据与第二处理单元所生成的输出数据表决结果不一致时，控制安全电源对通信接口断电，以避免通信接口输出该输出数据。由于控制器采用了模块化结构，从而可以将各个控制器分散安装于列车的适宜位置，无需将各个控制器均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。
本发明附加的方面和优点将在下面的描述中部分给出，部分将从下面的描述中变得明显，或通过本发明的实践了解到。
附图说明
本发明上述的和/或附加的方面和优点从下面结合附图对实施例的描述中将变得明显和容易理解，其中：
图1为本发明一个实施例的计算机平台的架构示意图；
图2为本发明另一实施例的计算机平台的架构示意图；
图3为本发明实施例所提供的一种控制器的结构示意图；
图4为主控制器的结构示意图；
图5为通信控制模块的结构示意图；
图6为IO控制模块的结构示意图；以及
图7为模块化控制器的产品架构示意图。
具体实施方式
下面详细描述本发明的实施例，所述实施例的示例在附图中示出，其中自始至终相同或类似的标号表示相同或类似的元件或具有相同或类似功能的元件。下面通过参考附图描述的实施例是示例性的，旨在用于解释本发明，而不能理解为对本发明的限制。
下面参考附图描述本发明实施例的基于轨道交通的计算机平台。
基于轨道交通的计算机平台包括通过通信线缆互联的多个模块化的控制器10。计算机平台所包括的多个控制器10中，具有一个主控制器，其他为从控制器。在计算机平台内部，主控制器通过通信线缆依次轮询各个从控制器，从而完成与各从控制器之间的数据收发。其中，这里的通信线缆包括CAN总线和/或以太网。
作为一种可能的实现方式，图1为本发明一个实施例的计算机平台的架构示意图，如图1所示，各个控制器10均通过以太网交换机连接，从而使得各个控制器10之间，可以通过以太网实现互联。
作为另一种可能的实现方式，图2为本发明另一个实施例的计算机平台的架构示意图，如图2所示，各个控制器10均与CAN总线连接，从而使得各个控制器10之间，可以通过CAN总线实现互联。
控制器10的以上两种互联方式，即以太网方式和控制器局域网络(controller area network,CAN)总线方式，其中，以太网方式，适用于通信数据量大的应用场景，如列车信号系统与地面信号系统之间的通信连接；而CAN总线方式则适用于低成本，小数据量的输入输出(IO)类控制信号，如列车信号系统与列车牵引控制器，制动控制器之间的通信。
由于控制器采用了模块化结构，从而可以将各个控制器分散安装于列车的适宜位置，无需将各个控制器均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。
为了清楚说明控制器10的结构，本公开还提供了一种控制器10，控制器10采用二取二的安全架构，具体来说，图3为本发明实施例所提供的一种控制器10的结构示意图，如图3所示，控制器10包括：安全电源11、通信接口12、第一处理单元13和第二处理单元14。
其中，安全电源11与第一处理单元13、第二处理单元14和通信接口12连接，用于在所述第一处理单元13和所述第二处理单元14的控制下向所述通信接口12供电。
第一处理单元13与通信接口12连接，用于通过通信接口12获取外部输入数据，并与所述第二处理单元14同步进行数据处理，当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为不一致时，控制所述安全电源11对所述通信接口12断电。
第二处理单元14，与所述第一处理单元13连接，用于与所述第一处理单元13同步进行数据处理、交换表决和对所述安全电源11的控制。
所述通信接口12，用于输出所述输出数据。
需要说明的是，图3中实线代表控制信号的流向，虚线代表输出数据的流向。
进一步，第一处理单元13与所述第二处理单元14，还用于当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为一致时，控制所述安全电源11对所述通信接口12供电，以通过所述通信接口12输出所述输出数据。
具体来说，安全电源11用于在所述第一处理单元13和所述第二处理单元14中任一个处理单元控制断开所述通信接口12供电时，对所述通信接口12断电；在所述第一处理单元13和所述第二处理单元14均控制接续对所述通信接口12供电时，对所述通信接口12供电。
本实施例中，基于轨道交通的计算机平台包括通信线缆互联的多个模块化的控制器，控制器包括安全电源、通信接口、第一处理单元和第二处理单元。其中，安全电源用于在第一处理单元和第二处理单元的控制下向通信接口供电，第一处理单元和第二处理单元用于获取外部输入数据之后，同步进行数据处理，当第一处理单元所生成的输出数据与第二处理单元所生成的输出数据表决结果不一致时，控制安全电源对通信接口断电，以避免通信接口输出该输出数据。由于控制器采用了模块化结构，从而可以将各个 控制器分散安装于列车的适宜位置，无需将各个控制器均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。
为了清楚说明上一实施例，本实施例提供了一种可能的应用场景，具体来说，控制器10具体为主控制器，由于控制器10均采用了模块化的设计，因而，主控制器在具体实现形式上为主控模块，图4为主控制器的结构示意图。
如图4所示，该主控制器中，第一处理单元13包括用于进行数据处理的第一CPU131、用于对所述第一CPU131的数据进行缓存的第一内存132和用于对所述第一CPU131供电的第一电源133。
该主控制器中，第二处理单元14包括用于与所述第一CPU131同步进行数据处理的第二CPU141、用于对所述第二CPU141的数据进行缓存的第二内存142和用于对所述第二CPU141供电的第二电源143。
其中，第一CPU131和所述第二CPU141均各自包括：运算器151、同步器152、数据交换器153和表决器154。
所述运算器151分别与同步器152、数据交换器153和表决器154相连；所述同步器152与所述运算器151相连；所述数据交换器153与所述运算器151和所述表决器154相连；所述表决器154与所述运算器151和所述数据交换器153相连。同时，对应于第一CPU131的数据交换器和对应于第二CPU141的数据交换器相互连接。对应于第一CPU131的同步器和对应于第二CPU141的同步器相互连接。
在控制器10为主控制器时，通信接口12具体用于进行多个控制器10与外部设备之间的外部通信。如图3所示，通信接口12可包括：以太网接口121和CAN接口122。
安全电源11与以太网接口121和CAN接口122连接，用于在第一处理单元13的第一CPU131以及第二处理单元14的第二CPU141的控制下，向用于进行外部通信的以太网接口121和CAN接口122供电。
具体来说，第一CPU131从通信接口12获取外部输入数据，经过两个CPU之间的通信通道传到第二CPU141，由第一CPU131与第二CPU141同步进行通信数据的协议解析，逻辑运算，对生成的输出数据进行交换表决，表决正确，则通过第一CPU131和通信接口12进行输出。如果任何一个CPU的表决结果不一致，则控制安全电源11对输出通信接口12供电断电，防止错误的数据输出。
本实施例中，基于轨道交通的计算机平台包括：通过通信线缆互联的多个模块化的控制器。控制器包括安全电源、通信接口、第一处理单元和第二处理单元。其中，安全电源用于在第一处理单元和第二处理单元的控制下向通信接口供电，第一处理单元和第二处理单元用于获取外部输入数据之后，同步进行数据处理，当第一处理单元所生成的输出数据与第二处理单元所生成的输出数据表决结果不一致时，控制安全电源对通信接口断电，以避免通信接口输出该输出数据。由于控制器采用了模块化结构，从而可以将各个控制器分散安装于列车的适宜位置，无需将各个控制器均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。
为了清楚说明上一实施例，本实施例提供了一种可能的应用场景，具体来说，控制器10可为从控制器，从控制器也称为外设控制器。按照功能进行划分，从控制器可以包括通信控制模块和/或IO控制模块。
作为一种可能的实现形式，本实施例提供了一种通信控制模块，图5为通信控制模块的结构示意图，如图5所示，通信控制模块中第一处理单元13和第二处理单元14的具体结构，与图4所示的主控制器的结构相同，本实施例中对此不再赘述，具体参见前述实施例中的相关描述。
在通信控制模块中，通信接口12包括用于进行控制器与外部设备之间外部通信的外部通信接口123。
第一处理单元13用于与所述第二处理单元14同步进行数据处理，当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为不一致时，控制所述安全电源11对所述外部通信接口123断电；当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为一致时，控制所述安全电源11对所述外部通信接口123供电，以通过所述外部通信接口123输出所述输出数据。
第二处理单元14与所述第一处理单元13连接，用于与所述第一处理单元13同步进行数据处理、交换表决和对所述安全电源11的控制。
安全电源11可以用于在所述第一处理单元13的第一CPU131以及第二处理单元14的第二CPU141的控制下向用于进行外部通信的外部通信接口123供电。
具体来说，安全电源11在所述第一处理单元13和所述第二处理单元14中任一个处理单元控制断开所述外部通信接口123供电时，对所述外部通信接口123断电；在所述第一处理单元13和所述第二处理单元14均控制接续对所述外部通信接口123供电时，对所述外部通信接口123供电。
作为另一种可能的实现形式，本实施例提供了一种IO控制模块，图6为IO控制模块的结构示意图，如图6所示，IO控制模块中第一处理单元13和第二处理单元14的具体结构与图4所示的主控制器的结构相同，本实施例中对此不再赘述，具体参见前述实施例中的相关描述。
在IO控制模块中，通信接口12包括用于进行控制器与外部设备之间外部通信的IO接口124。
第一处理单元13用于与所述第二处理单元14同步进行数据处理，当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为不一致时，控制所述安全电源11对所述IO接口124断电；当所述第一处理单元13所生成的输出数据与所述第二处理单元14所生成的输出数据进行表决的结果为一致时，控制所述安全电源11对所述IO接口124供电，以通过所述IO接口124输出所述输出数据。
第二处理单元14与所述第一处理单元13连接，用于与所述第一处理单元13同步 进行数据处理、交换表决和对所述安全电源11的控制。
安全电源11可以用于在所述第一处理单元13的第一CPU131以及第二处理单元14的第二CPU141的控制下向用于进行外部通信的IO接口124供电。
具体来说，安全电源11在所述第一处理单元13和所述第二处理单元14中任一个处理单元控制断开所述IO接口124供电时，对所述IO接口124断电；在所述第一处理单元13和所述第二处理单元14均控制接续对所述IO接口124供电时，对所述IO接口124供电。
为了清楚说明前述的控制器，本实施例提供了控制器的外部结构示意图，图7为模块化控制器的产品架构示意图，如图7所示，在计算机平台中，各个模块形式的控制器均采用独立模块的结构，可以根据具体需求对前述的各个控制器配置不同的硬件通信接口、硬件IO接口，从而保持了控制器良好的扩展性。
各个模块化的控制器的安装方式，具体可以采用导轨式固定或墙体固定方式，便于在不适合安装机柜的条件下，根据实际需求将模块固定在车体适当位置。
模块化的控制器也可以安装在列车外部，此时，用于安装在列车外部的模块化的控制器的结构需满足室外的防水，防尘，抗振，散热等要求。作为一种可能的实现方式，前面板可包括电源接口，以太网接口，CAN和IO类接口，电源和IO接口采用航插连接器，以太网采用M12连接器，CAN总线采用D-SUB类连接器，背部可以固定在车体的适当位置。
例如：各个模块形式的控制器中，可以将主控模块安装于列车的座位下方，将各个从控制器包括通信控制模块和/或IO控制模块，安装于列车的车底，如转向架附近等。
本实施例中，基于轨道交通的计算机平台包括：通信线缆互联的多个模块化的控制器。控制器包括安全电源、通信接口、第一处理单元和第二处理单元。其中，安全电源用于在第一处理单元和第二处理单元的控制下向通信接口供电，第一处理单元和第二处理单元用于获取外部输入数据之后，同步进行数据处理，当第一处理单元所生成的输出数据与第二处理单元所生成的输出数据表决结果不一致时，控制安全电源对通信接口断电，以避免通信接口输出该输出数据。由于控制器采用了模块化结构，从而可以将各个控制器分散安装于列车的适宜位置，无需将各个控制器均安装于机箱内，解决了现有技术中安装空间占用较大的技术问题。
在本说明书的描述中，参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本发明的至少一个实施例或示例中。在本说明书中，对上述术语的示意性表述不必须针对的是相同的实施例或示例。而且，描述的具体特征、结构、材料或者特点可以在任一个或多个实施例或示例中以合适的方式结合。此外，在不相互矛盾的情况下，本领域的技术人员可以将本说明书中描述的不同实施例或示例以及不同实施例或示例的特征进行结合和组合。
此外，术语“第一”、“第二”仅用于描述目的，而不能理解为指示或暗示相对重 要性或者隐含指明所指示的技术特征的数量。由此，限定有“第一”、“第二”的特征可以明示或者隐含地包括至少一个该特征。在本发明的描述中，“多个”的含义是至少两个，例如两个，三个等，除非另有明确具体的限定。
流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为，表示包括一个或更多个用于实现定制逻辑功能或过程的步骤的可执行指令的代码的模块、片段或部分，并且本发明的优选实施方式的范围包括另外的实现，其中可以不按所示出或讨论的顺序，包括根据所涉及的功能按基本同时的方式或按相反的顺序，来执行功能，这应被本发明的实施例所属技术领域的技术人员所理解。
在流程图中表示或在此以其他方式描述的逻辑和/或步骤，例如，可以被认为是用于实现逻辑功能的可执行指令的定序列表，可以具体实现在任何计算机可读介质中，以供指令执行系统、装置或设备(如基于计算机的系统、包括处理器的系统或其他可以从指令执行系统、装置或设备取指令并执行指令的系统)使用，或结合这些指令执行系统、装置或设备而使用。就本说明书而言，"计算机可读介质"可以是任何可以包含、存储、通信、传播或传输程序以供指令执行系统、装置或设备或结合这些指令执行系统、装置或设备而使用的装置。计算机可读介质的更具体的示例(非穷尽性列表)包括以下：具有一个或多个布线的电连接部(电子装置)，便携式计算机盘盒(磁装置)，随机存取存储器(RAM)，只读存储器(ROM)，可擦除可编辑只读存储器(EPROM或闪速存储器)，光纤装置，以及便携式光盘只读存储器(CDROM)。另外，计算机可读介质甚至可以是可在其上打印所述程序的纸或其他合适的介质，因为可以例如通过对纸或其他介质进行光学扫描，接着进行编辑、解译或必要时以其他合适方式进行处理来以电子方式获得所述程序，然后将其存储在计算机存储器中。
应当理解，本发明的各部分可以用硬件、软件、固件或它们的组合来实现。在上述实施方式中，多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或固件来实现。如，如果用硬件来实现和在另一实施方式中一样，可用本领域公知的下列技术中的任一项或他们的组合来实现：具有用于对数据信号实现逻辑功能的逻辑门电路的离散逻辑电路，具有合适的组合逻辑门电路的专用集成电路，可编程门阵列(PGA)，现场可编程门阵列(FPGA)等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，该程序在执行时，包括方法实施例的步骤之一或其组合。
此外，在本发明各个实施例中的各功能单元可以集成在一个处理模块中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。所述集成的模块如果以软件功能模块的形式实现并作为独立的产品销售或使用时，也可以存储在一个计算机可读取存储介质中。
上述提到的存储介质可以是只读存储器，磁盘或光盘等。尽管上面已经示出和描述 了本发明的实施例，可以理解的是，上述实施例是示例性的，不能理解为对本发明的限制，本领域的普通技术人员在本发明的范围内可以对上述实施例进行变化、修改、替换和变型。

Claims (11)

  1. 一种基于轨道交通的计算机平台，其特征在于，
    所述计算机平台包括通过通信线缆互联的多个模块化的控制器；
    所述控制器包括安全电源、通信接口、第一处理单元和第二处理单元；
    所述第一处理单元与所述通信接口连接，用于获取外部输入数据，并与所述第二处理单元同步进行数据处理得到输出数据，以及对所述输出数据进行交换表决，当所述第一处理单元所生成的输出数据与所述第二处理单元所生成的输出数据进行表决的结果为一致时，控制所述安全电源断开所述通信接口的供电；
    所述第二处理单元与所述第一处理单元连接，用于与所述第一处理单元同步进行数据处理、交换表决和对所述安全电源的控制；
    所述安全电源与所述第一处理单元、所述第二处理单元和所述通信接口连接，用于在所述第一处理单元和所述第二处理单元的控制下对所述通信接口供电；
    所述通信接口用于输出所述输出数据。
  2. 根据权利要求1所述的基于轨道交通的计算机平台，其特征在于，
    所述第一处理单元和所述第二处理单元还用于当所述第一处理单元所生成的输出数据与所述第二处理单元所生成的输出数据进行表决的结果为一致时，控制所述安全电源对所述通信接口供电。
  3. 根据权利要求1或2所述的基于轨道交通的计算机平台，其特征在于，
    所述第一处理单元包括用于进行数据处理的第一CPU、用于对所述第一CPU的数据进行缓存的第一内存和用于对所述第一CPU供电的第一电源；
    所述第二处理单元包括用于与所述第一CPU同步进行数据处理的第二CPU、用于对所述第二CPU的数据进行缓存的第二内存和用于对所述第二CPU供电的第二电源。
  4. 根据权利要求3所述的基于轨道交通的计算机平台，其特征在于，所述第一CPU和所述第二CPU均包括：
    运算器，所述运算器分别与同步器、数据交换器、表决器相连；
    所述同步器与所述运算器相连；
    所述数据交换器与所述运算器和所述表决器相连；
    所述表决器与所述运算器和所述数据交换器相连。
  5. 根据权利要求1-4中任一项所述的基于轨道交通的计算机平台，其特征在于，当所述控制器为主控制器时，所述通信接口用于进行多个控制器之间的内部通信，所述通信接口包括以太网接口和/或CAN接口；
    所述安全电源用于在所述第一处理单元的控制下向用于进行内部通信的通信接口供电。
  6. 根据权利要求5所述的基于轨道交通的计算机平台，其特征在于，所述主控制器实现为主控模块。
  7. 根据权利要求1-4中任一项所述的基于轨道交通的计算机平台，其特征在于，当所述控制器为从控制器时，所述通信接口还用于进行多个控制器与外部设备之间的外部通信；
    所述安全电源用于在所述第一处理单元的控制下向用于进行外部通信的通信接口供电。
  8. 根据权利要求7所述的基于轨道交通的计算机平台，其特征在于，所述从控制器实现为通信控制模块和/或IO控制模块。
  9. 根据权利要求1-8中任一项所述的基于轨道交通的计算机平台，其特征在于，所述安全电源用于在所述第一处理单元和所述第二处理单元中任一个处理单元控制断开所述通信接口供电时，对所述通信接口断电。
  10. 根据权利要求1-9中任一项所述的基于轨道交通的计算机平台，其特征在于，所述通信线缆包括CAN总线和/或以太网线缆。
  11. 根据权利要求1-10中任一项所述的基于轨道交通的计算机平台，其特征在于，所述控制器配置为通过导轨式固定或墙体固定方式，与列车本体固定连接。
PCT/CN2017/117888 2016-12-23 2017-12-22 基于轨道交通的计算机平台 WO2018113761A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201611204322.3A CN108238065B (zh) 2016-12-23 2016-12-23 基于轨道交通的计算机平台
CN201611204322.3 2016-12-23

Publications (1)

Publication Number Publication Date
WO2018113761A1 true WO2018113761A1 (zh) 2018-06-28

Family

ID=62624557

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/117888 WO2018113761A1 (zh) 2016-12-23 2017-12-22 基于轨道交通的计算机平台

Country Status (2)

Country Link
CN (1) CN108238065B (zh)
WO (1) WO2018113761A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110775099B (zh) * 2019-11-07 2022-01-25 交控科技股份有限公司 一种列车中通信系统的集成方法
CN112550363B (zh) * 2020-12-10 2022-08-26 卡斯柯信号有限公司 一种兼容性车载信号系统的车辆接口控制系统及方法

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102789166A (zh) * 2011-05-16 2012-11-21 铁道部运输局 基于二乘二取二安全冗余系统的安全控制装置及系统
CN105398472A (zh) * 2015-11-06 2016-03-16 株洲南车时代电气股份有限公司 一种平台主机插件
CN105739299A (zh) * 2016-04-29 2016-07-06 固安信通信号技术股份有限公司 基于二乘二取二安全冗余系统的控制装置

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102789166A (zh) * 2011-05-16 2012-11-21 铁道部运输局 基于二乘二取二安全冗余系统的安全控制装置及系统
CN105398472A (zh) * 2015-11-06 2016-03-16 株洲南车时代电气股份有限公司 一种平台主机插件
CN105739299A (zh) * 2016-04-29 2016-07-06 固安信通信号技术股份有限公司 基于二乘二取二安全冗余系统的控制装置

Also Published As

Publication number Publication date
CN108238065A (zh) 2018-07-03
CN108238065B (zh) 2020-06-19

Similar Documents

Publication Publication Date Title
US7194663B2 (en) Protective bus interface and method
US5475818A (en) Communications controller central processing unit board
US9244454B2 (en) Control system for controlling safety-critical and non-safety-critical processes
US20130179622A1 (en) System and method for transmitting and receiving data using an industrial expansion bus
WO2018113761A1 (zh) 基于轨道交通的计算机平台
ITMI20082068A1 (it) Sistema elettronico per il rilevamento di un guasto
US20200218333A1 (en) Operation methods of communication node in network
US5317751A (en) Method and apparatus for placing a trainline monitor system in a layup mode
JP2008009795A (ja) 診断装置，回線診断方法及び回線診断プログラム
EP2855232B1 (en) Automatic and vital determination of train length configuration
KR101802858B1 (ko) 자동차용 통합데이터 처리 제어 시스템 및 방법
US20160164718A1 (en) Method and system for repairing communication disruption using gateway
US20160075355A1 (en) System and method for communication in a vehicle consist
BRPI1005949B1 (pt) Arquitetura de painel de controle híbrido de cockpit de aeronave e método para processar sinais de um painel de controle de cockpit de aeronave
WO2019113910A1 (zh) 一种车辆管理控制vcu柜
JP7030742B2 (ja) 通信システム、および通信制御方法
EP3179674A1 (en) Configurable gateway apparatus and method for an integrated brake control system in a railway vehicle
US5289176A (en) Multi-master resolution of a serial bus
RU2572284C1 (ru) Система обмена данными локомотивных систем с сервером ответственной информации с использованием электронной подписи
WO2014188487A1 (ja) 列車情報管理装置および列車情報管理方法
US20200198805A1 (en) Electrical adapter, display system for an aircraft and aircraft
US20130311695A1 (en) Flexray Gateway and Method for Operating a Flexray Gateway
CN108255085B (zh) 基于片上系统的控制器及轨道车辆
US20230261961A1 (en) System and method for simulation and testing of multiple virtual ecus
KR20140141068A (ko) 전동차의 엠브이비 통신용 액티브 리피터 장치

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17884965

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17884965

Country of ref document: EP

Kind code of ref document: A1