WO2019134490A1 - 车载设备控制系统的异常处理方法、装置和系统 - Google Patents

车载设备控制系统的异常处理方法、装置和系统 Download PDF

Info

Publication number
WO2019134490A1
WO2019134490A1 PCT/CN2018/121164 CN2018121164W WO2019134490A1 WO 2019134490 A1 WO2019134490 A1 WO 2019134490A1 CN 2018121164 W CN2018121164 W CN 2018121164W WO 2019134490 A1 WO2019134490 A1 WO 2019134490A1
Authority
WO
WIPO (PCT)
Prior art keywords
vobc
standby
restart
module
remote
Prior art date
Application number
PCT/CN2018/121164
Other languages
English (en)
French (fr)
Inventor
吴丹丹
王发平
吴智利
薄云览
卓开阔
Original Assignee
比亚迪股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 比亚迪股份有限公司 filed Critical 比亚迪股份有限公司
Publication of WO2019134490A1 publication Critical patent/WO2019134490A1/zh

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0072—On-board train data handling
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0081—On-board diagnosis or maintenance

Definitions

  • the present disclosure relates to the field of rail transit technologies, and in particular, to an abnormality processing method, apparatus, and system for an in-vehicle device control system.
  • VOBCs vehicle onboard controllers
  • main system fails, the system is cut, and the original backup system is upgraded to the main system.
  • the original main system remains faulty and becomes the standby system. If the main system after the switchover also fails, the backup system is still in a fault state, and the system cannot be cut again.
  • the system may perform downtime processing, and the train performs emergency braking and cannot continue driving.
  • the present disclosure aims to solve at least one of the technical problems in the related art to some extent.
  • the first object of the present disclosure is to provide an abnormality processing method for an in-vehicle device control system, which is implemented by powering off the standby VOBC and then powering on the standby VOBC to realize the automatic unmanned driving scene.
  • the abnormal VOBC is restored to normal by remote processing, and the repeated cut processing is realized, the system availability is improved, the manual processing probability is reduced, and the automatic unmanned train can be prevented from continuing to travel due to VOBC failure, causing passengers to be trapped.
  • the need for emergency rescue in the interval occurs.
  • a second object of the present disclosure is to provide an abnormality processing apparatus of an in-vehicle device control system.
  • a third object of the present disclosure is to propose an ATS workstation.
  • a fourth object of the present disclosure is to provide an abnormality processing system of an in-vehicle device control system.
  • a fifth object of the present disclosure is to propose a non-transitory computer readable storage medium.
  • a sixth object of the present disclosure is to propose a computer program product.
  • the first aspect of the present disclosure provides an abnormality processing method for an in-vehicle device control system, where the in-vehicle device control system includes at least two on-board controllers VOBC, and the method includes:
  • the abnormal VOBC is taken as the primary VOBC, and the abnormal VOBC is taken as the standby VOBC;
  • the power supply of the standby VOBC is first disconnected and then restored to restart the standby VOBC.
  • the abnormality processing method of the in-vehicle device control system of the embodiment of the present disclosure by using one of the at least two VOBCs of the train as a failure, and using the VOBC that has not failed as the main VOBC, the abnormal VOBC is used as the backup VOBC, and the acquisition is performed.
  • the restart command for restarting the standby VOBC according to the restart command, first disconnects and restores the power of the standby VOBC to restart the standby VOBC.
  • the standby VOBC is restarted, so that in the case of no automatic processing in the fully automatic unmanned scene, the abnormal VOBC is restored to normal by remote processing, and the repeated cutting process is realized.
  • the second aspect of the present disclosure provides an abnormality processing apparatus for an in-vehicle device control system.
  • the in-vehicle device control system includes at least two on-board controllers VOBC, and the device includes:
  • a switching module if an abnormality occurs in one of the at least two of the VOBCs of the train, the VOBC in which no abnormality occurs as the primary VOBC, and the abnormal VOBC as the standby VOBC;
  • An obtaining module configured to acquire a restart instruction for restarting the standby VOBC
  • a control module configured to first disconnect and resume power supply of the standby VOBC according to the restart instruction, so that the standby VOBC is restarted.
  • the abnormality processing apparatus of the in-vehicle device control system of the embodiment of the present disclosure uses the VOBC that has not failed as the main VOBC when one of the at least two VOBCs of the train fails, and uses the abnormal VOBC as the standby VOBC for acquisition.
  • the restart command for restarting the standby VOBC according to the restart command, first disconnects and restores the power of the standby VOBC to restart the standby VOBC.
  • the standby VOBC system is restarted, so that in the case of no automatic processing in the fully automatic unmanned scene, the abnormal VOBC system is restored to normal by remote processing, and the repetition is realized.
  • the system is processed to improve the system availability, reduce the probability of manual processing, and avoid the situation that the automatic driverless train cannot continue to drive due to the failure of the VOBC system, causing the passenger to be trapped in the interval and need emergency rescue.
  • an embodiment of the third aspect of the present disclosure provides an ATS workstation including a memory, a processor, and a computer program stored on the memory and operable on the processor, when the processor executes the program, An abnormality processing method of the in-vehicle device control system as described in the first aspect of the present invention is implemented.
  • the fourth aspect of the present disclosure provides an abnormal processing system for an in-vehicle device control system, including: an automatic train monitoring ATS workstation, a remote restart module, a relay, and at least two onboard controllers VOBC;
  • the ATS workstation is connected to the remote restart module for performing the method described in the first aspect embodiment
  • the remote restart module is connected to the relay, and is configured to control the relay to disconnect and restore the power supply of the standby VOBC according to the indication of the ATS workstation;
  • the relay is electrically connected to each of the VOBC and the power source for disconnecting and restoring the power supply of the standby VOBC specified by the remote restart module under the control of the remote restart module;
  • the VOBC is used to restart when the power is turned off and resumed.
  • the abnormality processing system of the in-vehicle device control system of the embodiment of the present disclosure connects the automatic train monitoring ATS workstation to the remote restart module, and when an abnormality occurs in one of the at least two VOBCs of the train, the VOBC having no abnormality is regarded as the main VOBC.
  • the abnormal VOBC is used as the standby VOBC, and the restart command for restarting the standby VOBC is acquired. According to the restart command, the power supply of the standby VOBC is first disconnected and restored, so that the standby VOBC is restarted; the remote restart module is connected with the relay.
  • the control relay first disconnects and restores the power supply of the standby VOBC; the relay is electrically connected with each VOBC and the power source, and is used to disconnect and restore the standby specified by the remote restart module under the control of the remote restart module.
  • VOBC power supply VOBC is used to restart when power is restored after disconnection.
  • a fifth aspect of the present disclosure provides a non-transitory computer readable storage medium having stored thereon a computer program, which is executed by a processor to implement the vehicle as described in the first aspect of the present invention.
  • the exception handling method of the device control system is executed by a processor to implement the vehicle as described in the first aspect of the present invention.
  • a sixth aspect of the present disclosure provides a computer program product, when an instruction in the computer program product is executed by a processor, executing an in-vehicle device control system according to the first aspect of the present invention. Exception handling method.
  • FIG. 1 is a schematic flowchart of an abnormality processing method of an in-vehicle device control system according to Embodiment 1 of the present disclosure
  • FIG. 2 is a schematic flowchart of an abnormality processing method of an in-vehicle device control system according to Embodiment 2 of the present disclosure
  • FIG. 3 is a schematic flowchart of an abnormality processing method of an in-vehicle device control system according to Embodiment 3 of the present disclosure
  • FIG. 4 is a schematic structural diagram of an abnormality processing apparatus of an in-vehicle device control system according to Embodiment 1 of the present disclosure
  • FIG. 5 is a schematic structural diagram of an abnormality processing apparatus of an in-vehicle device control system according to Embodiment 2 of the present disclosure
  • FIG. 6 is a schematic structural diagram of an abnormality processing apparatus of an in-vehicle device control system according to Embodiment 3 of the present disclosure
  • FIG. 7 is a schematic structural diagram of an ATS workstation according to Embodiment 1 of the present disclosure.
  • FIG. 8 is a schematic structural diagram of an abnormality processing system of an in-vehicle device control system according to Embodiment 1 of the present disclosure
  • FIG. 9 is a schematic structural diagram of an abnormality processing system of an in-vehicle device control system according to Embodiment 2 of the present disclosure.
  • FIG. 1 is a schematic flowchart of an abnormality processing method of an in-vehicle device control system according to Embodiment 1 of the present disclosure, which may be performed by an Automatic Train Supervision (ATS) workstation.
  • the in-vehicle device control system includes at least two on-board controllers VOBC to switch to other VOBCs when an abnormality occurs in one VOBC to ensure normal running of the train.
  • the abnormal processing method of the in-vehicle device control system includes the following steps:
  • Step 101 If an abnormality occurs in one of the at least two VOBCs of the train, the VOBC in which no abnormality occurs is taken as the main VOBC, and the abnormal VOBC is taken as the standby VOBC.
  • At least two VOBCs can be set for the train redundancy, one of which is the main VOBC, and the remaining one is the standby VOBC, and when the main VOBC is abnormal, it switches to the standby VOBC.
  • the train is redundantly set with two VOBCs, which are called A system and B system, respectively, and A system is the main system and B system is the standby system.
  • a system is the main system
  • B system is the standby system.
  • the A system fails, the system is cut, the A system keeps the fault state changed to the standby system, and the B system upgrades to the main system.
  • the main VOBC sends the cut information to the ATS workstation, and the ATS workstation displays the received cut information on the display interface.
  • the cut information may include status information of at least two VOBCs. If the ATS workstation learns from the cut information that one of the at least two VOBCs of the train is abnormal, the VOBC that does not have an abnormality is regarded as the main VOBC, and an abnormality occurs. VOBC is used as a backup VOBC.
  • the status information of the VOBC may include a normal synchronization state, an asynchronous state, and a fault state. Only the VOBC in the normal synchronization state can be upgraded to the primary VOBC after the system is cut, and the VOBC in the asynchronous state or the fault state can only serve as the standby VOBC. Therefore, in a possible implementation manner of the embodiment of the present disclosure, the standby VOBC may be determined according to the state information of the VOBC.
  • the display interface of the ATS workstation can display the status information of VOBC in real time.
  • the ATS workstation determines the VOBC in the fault state as the standby VOBC; or, when it detects that a VOBC is in the asynchronous state, the VOBC is counted.
  • the VOBC in the asynchronous state reaches the preset duration and is determined as the standby VOBC, wherein the preset duration can be preset, for example, 3 minutes, 5 minutes, and the like.
  • Step 102 Acquire a restart instruction for restarting the standby VOBC.
  • a restart command for restarting the standby VOBC may be acquired to restart the standby VOBC according to the restart command.
  • step 103 according to the restart instruction, the power supply of the standby VOBC is first disconnected and restored, so that the standby VOBC is restarted.
  • the ATS workstation After the ATS workstation acquires the restart command, it can restart the power supply of the standby VOBC according to the restart command, and then resume the power supply to restart the standby VOBC.
  • the abnormality processing method of the in-vehicle device control system of the present embodiment acquires an abnormal VOBC as a backup VOBC as a backup VOBC by using one of the at least two VOBCs of the train as a failure, and acquiring the VOBC as an alternate VOBC.
  • the restart command for restarting the standby VOBC according to the restart command, first disconnects and restores the power supply of the standby VOBC to restart the standby VOBC.
  • the standby VOBC is restarted, so that in the case of no automatic processing in the fully automatic unmanned scene, the abnormal VOBC is restored to normal by remote processing, and the repeated cutting process is realized.
  • the ATS workstation can also receive the status information of the standby VOBC, and the status information of the standby VOBC is abnormal. The status is updated to the status information received.
  • the power-on self-test is performed. If the self-test is successful, the standby VOBC can communicate with the primary VOBC. If the standby VOBC does not complete the data synchronization with the primary VOBC, the primary VOBC received by the ATS workstation is sent. In the status information, the status information of the standby VOBC is asynchronous; if the standby VOBC completes the data synchronization with the primary VOBC, the status information of the standby VOBC is the normal synchronization status in the status information sent by the primary VOBC received by the ATS workstation; If the check fails, the standby VOBC is down and cannot communicate with the primary VOBC system. In the status information sent by the primary VOBC received by the ATS workstation, the status information of the standby VOBC is the fault status.
  • the ATS workstation acquires a restart command to restart the standby VOBC to restore the standby VOBC to the normal synchronization state.
  • the standby VOBC is restarted to return to normal, without the need for technicians to go to the site for processing, which reduces the manual processing probability and processing difficulty.
  • the embodiment of the present disclosure provides another abnormality processing method of the in-vehicle device control system
  • FIG. 2 is an embodiment of the present disclosure.
  • step 102 may include the following steps:
  • Step 201 When detecting a restart operation performed by the user on the standby VOBC through the interface of the ATS workstation, acquire the system identifier of the standby VOBC and the train identifier of the train where the standby VOBC is located.
  • the display information of the train can display the status information of the VOBC of the train for the user to observe the status of each VOBC in real time.
  • the user can restart the abnormal VOBC through the interface of the ATS workstation.
  • the display interface of the ATS workstation can set the corresponding restart button for the abnormal VOBC.
  • the user can trigger the restart button by touch selection or remote selection to achieve the restart operation of the standby VOBC.
  • the ATS workstation When the ATS workstation detects the user performing a restart operation on the standby VOBC through the interface of the ATS workstation, that is, when the ATS workstation detects that the restart button is triggered, the ATS workstation acquires the system identifier of the standby VOBC for the restart operation and the train of the train where the standby VOBC is located. logo.
  • the train identification of all trains belonging to the ATS workstation may be pre-stored in the ATS workstation, and the correspondence between the train identification of the train and the system identification of the VOBC of the train may be stored for each train.
  • the system identifier of the VOBC and the corresponding status information are displayed on the display interface of the ATS workstation.
  • the ATS workstation can obtain the system identifier of the VOBC according to the standby VOBC for the restart operation, and then query the stored Corresponding relationship, the train identification of the train to which the VOBC belongs can be obtained.
  • the train identification of the train and the system identifier of the standby VOBC may be carried, and the ATS workstation extracts the train identification after receiving the information.
  • the system identification and status information are displayed on the display interface.
  • the users in this embodiment and the subsequent embodiments refer to the dispatchers of the ATS workstation, so that the dispatcher can implement the restart of the standby VOBC through remote control.
  • Step 202 Generate a restart instruction according to the system identifier and the train identifier.
  • the ATS workstation may generate a restart command according to the system identifier and the train identifier, according to the system identifier and the train identifier carried in the restart command, and conform to the train identifier. Restart with the alternate VOBC identified by the system.
  • the abnormality processing method of the in-vehicle device control system of the embodiment acquires the system identifier of the standby VOBC and the train identification of the train in which the train is located when detecting the restart operation performed by the user on the standby VOBC through the interface of the ATS workstation, according to the system identification and the train identification Generate a restart command to enable remote restart of the standby VOBC with an abnormality, reducing the probability of manual on-site processing.
  • FIG. 3 is a schematic flowchart diagram of an abnormality processing method of an in-vehicle device control system according to Embodiment 3 of the present disclosure.
  • step 103 may include the following steps:
  • Step 301 Send a restart instruction to the remote restart module, where the restart command is used to indicate that the standby VOBC is restarted.
  • the remote restart module is configured to control the power supply system to disconnect or restore power to at least two VOBCs.
  • the power supply system may include at least two relays, and each relay has only one VOBC connected in series.
  • the restart command is sent to the remote restart module, so that the remote restart module controls the power supply system to disconnect or restore the power supply to the standby VOBC according to the restart command.
  • Step 302 Receive a restart command replied by the remote restart module, and display a restart command replied to the remote restart module on the ATS workstation interface.
  • the restart command replied by the remote restart module may be the same as the restart command received by the remote restart module, that is, after receiving the restart command, the remote restart module returns the received restart command to the ATS workstation, so that the user can determine the restart command sending process. Whether there is an error in the middle.
  • the remote restart module After receiving the restart command sent by the ATS workstation, the remote restart module feeds back the received restart command to the ATS workstation. After receiving the restart command replied by the remote restart module, the ATS workstation displays the restart command in the display interface, so that the user confirms the system identifier and the train identifier included in the restart command received by the ATS workstation.
  • Step 303 When the user confirmation command is detected, the restart command is sent to the remote restart module again, so that when the remote restart module determines that the received restart command is the same, the power supply of the standby VOBC indicated by the restart command is first disconnected.
  • the ATS workstation can display the restart command on the display interface, and can provide an "confirm” button, and the user confirms the system identifier and the train identifier in the displayed restart command.
  • the user can trigger the "confirm” button when the system identification and train identification in the displayed restart command coincide with the system identification of the alternate VOBC where the abnormality occurs and the train identification of the corresponding train.
  • an acknowledgment command is generated, and the ATS workstation can detect the user acknowledgment command, and then send a restart command to the remote restart module again.
  • the remote restart module checks the train identifier and the system identifier in the two received restart commands. When the check result is consistent, the power supply of the standby VOBC indicated by the restart command is disconnected and resumed.
  • the hard-wire remote restart command may be sent to the standby VOBC indicated by the system identifier in the restart command, and the restart relay of the VOBC is hard-wired, hard-wired.
  • the remote restart command lasts for a certain period of time (for example, 6 seconds, which can be set as needed).
  • the restart relay may be a normally closed relay in series with each VOBC power supply.
  • Step 304 Receive error information sent by the remote restart module, where the error information is generated when the remote restart module determines that the restart commands received twice are different.
  • the remote restart module After receiving the restart command sent by the ATS workstation again, the remote restart module compares the system identifier and the train identifier in the two restart commands. If at least one is inconsistent, the two restart commands are considered to be different, and the remote restart module sends the ATS workstation to the ATS workstation. Error message.
  • Step 305 issuing a prompt according to the error information.
  • the ATS workstation can issue a prompt according to the error message.
  • the prompt message "Restart command verification failure, please restart and restart operation” can be displayed on the display interface of the ATS workstation to remind the user to restart the standby VOBC and regain the restart command.
  • the user may be prompted by a voice broadcast to remind the user to perform the restart operation again.
  • the user by sending a restart command to the remote restart module and receiving the restart command returned by the remote restart module, the user re-sends the restart command after confirming the received restart command, thereby avoiding errors.
  • the error restart caused by an error during operation or transmission improves the accuracy of VOBC restart.
  • receiving the error message sent by the remote restart module and issuing a prompt according to the error message enables the user to take appropriate measures for the error information in time to ensure that the standby VOBC successfully completes the restart.
  • the present disclosure also provides an abnormality processing apparatus of an in-vehicle device control system, wherein the in-vehicle device control system includes at least two on-board controllers VOBC.
  • FIG. 4 is a schematic structural diagram of an abnormality processing apparatus of an in-vehicle device control system according to Embodiment 1 of the present disclosure.
  • the abnormality processing device 40 of the in-vehicle device control system includes a switching module 410, an acquisition module 420, and a control module 430. among them,
  • the switching module 410 is configured to: if an abnormality occurs in one of the at least two VOBCs of the train, the VOBC in which no abnormality occurs as the primary VOBC, and the abnormal VOBC as the standby VOBC.
  • the obtaining module 420 is configured to acquire a restart instruction for restarting the standby VOBC.
  • the control module 430 is configured to first disconnect and restore the power of the standby VOBC according to the restart instruction, so that the standby VOBC is restarted.
  • the switching module 410 may determine the VOBC in the fault state as the standby VOBC; or determine the VOBC in the asynchronous state to reach the preset duration as the standby VOBC.
  • the abnormality processing apparatus 40 of the in-vehicle device control system may further receive status information of the standby VOBC after the standby VOBC is restarted, and update the status information of the standby VOBC from the abnormal status to the abnormal status. Status information received.
  • the maintenance personnel can know the status of the system in time, and take corresponding measures for the status information to implement timely processing of the faulty VOBC.
  • the obtaining module 420 includes:
  • the obtaining unit 421 is configured to acquire the system identifier of the standby VOBC and the train identifier of the train where the standby VOBC is located when detecting a restart operation performed by the user on the standby VOBC through the interface of the ATS workstation.
  • the generating unit 422 is configured to generate a restart instruction according to the system identifier and the train identifier.
  • the remote VOBC of the abnormality can be realized. Restart to reduce the probability of manual on-site processing.
  • control module 430 includes:
  • the sending unit 431 is configured to send a restart instruction to the remote restart module, where the restart command is used to indicate that the standby VOBC is restarted.
  • the remote restart module is configured to control the power supply system to disconnect or restore power to at least two VOBCs.
  • the receiving unit 432 is configured to receive a restart command replied by the remote restart module, and display a restart command replied to the remote restart module on the ATS workstation interface.
  • the restart command replied by the remote restart module may be the same as the restart command received by the remote restart module.
  • the control unit 433 is configured to send a restart command to the remote restart module again when the user confirms the instruction, to disconnect and resume the standby VOBC indicated by the restart command when the remote restart module determines that the received restart command is the same twice. Power supply.
  • the user By sending a restart command to the remote restart module and receiving the restart command returned by the remote restart module, the user re-sends the restart command after confirming the received restart command, thereby avoiding an erroneous operation or a false restart caused by an error during transmission, thereby improving The accuracy of the VOBC restart.
  • control module 430 may further include:
  • the prompting unit 434 is configured to receive the error information sent by the remote restart module after sending the restart command to the remote restart module again, where the error information is generated when the remote restart module determines that the restart command received twice is different, according to the error information. Prompt.
  • the user can take appropriate measures for the error information in time to ensure that the standby VOBC successfully completes the restart.
  • the abnormality processing apparatus of the in-vehicle device control system of the present embodiment acquires an abnormal VOBC as a backup VOBC as a backup VOBC by using one of the at least two VOBCs of the train as a failure, and acquiring the VOBC as an alternate VOBC.
  • the restart command for restarting the standby VOBC according to the restart command, first disconnects and restores the power supply of the standby VOBC to restart the standby VOBC.
  • the standby VOBC system is restarted, so that in the case of no automatic processing in the fully automatic unmanned scene, the abnormal VOBC system is restored to normal by remote processing, and the repetition is realized.
  • the system is processed to improve the system availability, reduce the probability of manual processing, and avoid the situation that the automatic driverless train cannot continue to drive due to the failure of the VOBC system, causing the passenger to be trapped in the interval and need emergency rescue.
  • the present disclosure also proposes an ATS workstation.
  • FIG. 7 is a schematic structural diagram of an ATS workstation according to Embodiment 1 of the present disclosure.
  • the ATS workstation 90 includes a memory 901, a processor 902, and a computer program 903 stored on the memory 901 and operable on the processor 902.
  • the processor 902 executes the program, the implementation is as described above.
  • the present disclosure also proposes an abnormality processing system of an in-vehicle device control system.
  • FIG. 8 is a schematic structural diagram of an abnormality processing system of an in-vehicle device control system according to Embodiment 1 of the present disclosure.
  • the abnormality processing system 70 of the in-vehicle device control system includes an automatic train monitoring ATS workstation 710, a remote restart module 720, a relay 730, and at least two onboard controllers VOBC 740. among them,
  • the ATS workstation 710 is in communication with the remote restart module 720 for performing the abnormal processing method of the in-vehicle device control system described in the foregoing embodiments.
  • the working process of the ATS workstation 710 can be referred to the foregoing description of the embodiment of the abnormal processing method for the in-vehicle device control system. To avoid repetition, details are not described herein again.
  • the remote restart module 720 is coupled to the relay 730 for controlling the relay 730 to open and resume powering the alternate VOBC in accordance with an indication from the ATS workstation 710.
  • the relay 730 is electrically connected to each VOBC 740 and the power source for disconnecting and restoring the power supply of the standby VOBC designated by the remote restart module 720 under the control of the remote restart module 720.
  • VOBC740 used to restart when power is restored after disconnection.
  • each of the relays 730 is electrically connected to the corresponding VOBC 740 and the corresponding power source.
  • the remote restart module 720 receives the restart command sent by the ATS workstation 710, the hard disk drive command is sent to the relay 730 corresponding to the standby VOBC 740 within a pre-configured time period (for example, 6 seconds) according to the standby VOBC 740 indicated by the restart command.
  • the relay 730 After receiving the hard-wire drive command, the relay 730 turns off the power supply to the standby VOBC 740 and resumes power supply when the hard-wire drive command is not received.
  • the remote restart module 720 returns a restart command to the ATS workstation 710 after receiving the restart command sent by the ATS workstation 710 for the first time.
  • the ATS workstation 710 displays the received restart command on the display interface for the user to confirm, and after detecting the user's confirmation command, sends a restart command to the remote restart module 720 again.
  • the remote restart module 720 compares the two received restart commands, and sends a hard drive command to the relay 730 corresponding to the standby VOBC 740 indicated by the restart command when the two received restart commands are the same.
  • the hard drive command is stopped after the hard drive command is continued for a predetermined period of time.
  • the abnormality processing system of the in-vehicle device control system of the embodiment is connected to the remote restart module by setting an automatic train monitoring ATS workstation, and when an abnormality occurs in one of the at least two VOBCs of the train, the VOBC having no abnormality is regarded as the main VOBC.
  • the abnormal VOBC is used as the standby VOBC, and the restart instruction for restarting the standby VOBC is acquired.
  • the power supply of the standby VOBC is disconnected and restored to restart the standby VOBC;
  • the remote restart module is connected with the relay for The indication of the ATS workstation, the control relay is disconnected and the power supply of the standby VOBC is restored;
  • the relay is electrically connected to each VOBC and the power source, and is used to disconnect and restore the power supply of the standby VOBC specified by the remote restart module under the control of the remote restart module;
  • VOBC is used to restart when power is restored after disconnection.
  • the standby VOBC By powering off the standby VOBC and then powering on, the standby VOBC is restarted, so that in the case of no automatic processing in the fully automatic unmanned scene, the abnormal VOBC is restored to normal by remote processing, and the repeated cutting process is realized.
  • Improve system availability reduce manual processing probability, and avoid the situation that automatic driverless trains cannot continue to drive due to VOBC failure, causing passengers to be trapped in the interval and need emergency rescue.
  • FIG. 9 is a schematic structural diagram of an abnormality processing system of an in-vehicle device control system according to Embodiment 2 of the present disclosure.
  • each VOBC 740 is electrically connected to a relay 730 and a power source.
  • the standby VOBC 740-B is in communication with the primary VOBC 740-A.
  • the standby VOBC 740-B interacts with the primary VOBC 740-A to cause the primary VOBC 740-A to notify the ATS workstation 710 of the state after the standby VOBC 740-B is restarted. information.
  • the primary VOBC 740-A is in communication with the ATS workstation 710.
  • the primary VOBC 740-A interacts with the alternate VOBC 740-B, the primary VOBC 740-A notifies the ATS workstation 710 that the alternate VOBC 740-B is in an asynchronous state.
  • the ATS workstation 710 is configured to receive status information of the alternate VOBC 740-B transmitted by the primary VOBC 740-A.
  • the status information of the alternate VOBC 740-B is updated from the abnormal status to the received asynchronous status.
  • the standby VOBC 740-B performs data synchronization with the primary VOBC 740-A, so that the primary VOBC 740-A notifies the ATS workstation 710 after the data synchronization is completed.
  • Status information of the standby VOBC 740-B in a normal synchronization state After receiving the status information of the standby VOBC 740-B transmitted by the primary VOBC 740-A, the ATS workstation 710 updates the status information of the standby VOBC 740-B currently displayed in the display interface from the abnormal state to the normal synchronization state.
  • the main VOBC 740-A fails, the system performs the cut processing, the restart is completed, and the standby VOBC 740-B is upgraded to the main VOBC after the data synchronization is completed, and can communicate with the ATS workstation 710, and the faulty main The VOBC 740-A is downgraded to the standby VOBC, and the standby VOBC is again restarted to restore the standby VOBC to normal.
  • the ATS workstation is connected to the main VOBC by making the communication connection between the two VOBCs, and the standby VOBC is restarted and interacts with the main VOBC, so that the main VOBC will restart the standby VOBC.
  • the status information is fed back to the ATS workstation, so that the ATS workstation updates the status information of the standby VOBC in the interface, so that the maintenance personnel can know the status of the system in time, and take corresponding measures for the system status to realize timely processing of the faulty VOBC.
  • the present disclosure also proposes a non-transitory computer readable storage medium having stored thereon a computer program that, when executed by the processor, implements exception handling of the in-vehicle device control system as described in the foregoing embodiments method.
  • the present disclosure also proposes a computer program product that, when executed by a processor, executes an exception handling method of the in-vehicle device control system as described in the foregoing embodiments.
  • first and second are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or implicitly indicating the number of technical features indicated.
  • features defining “first” or “second” may include at least one of the features, either explicitly or implicitly.
  • the meaning of "a plurality” is at least two, such as two, three, etc., unless specifically defined otherwise.
  • Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code comprising one or more executable instructions for implementing the steps of a custom logic function or process.
  • the scope of the preferred embodiments of the present disclosure includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an inverse order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present disclosure pertain.
  • a "computer-readable medium” can be any apparatus that can contain, store, communicate, propagate, or transport a program for use in an instruction execution system, apparatus, or device, or in conjunction with such an instruction execution system, apparatus, or device.
  • computer readable media include the following: electrical connections (electronic devices) having one or more wires, portable computer disk cartridges (magnetic devices), random access memory (RAM), Read only memory (ROM), erasable editable read only memory (EPROM or flash memory), fiber optic devices, and portable compact disk read only memory (CDROM).
  • the computer readable medium may even be a paper or other suitable medium on which the program can be printed, as it may be optically scanned, for example by paper or other medium, followed by editing, interpretation or, if appropriate, other suitable The method is processed to obtain the program electronically and then stored in computer memory.
  • portions of the present disclosure can be implemented in hardware, software, firmware, or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware and in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: discrete with logic gates for implementing logic functions on data signals Logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), and the like.
  • each functional unit in various embodiments of the present disclosure may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.
  • the above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like. While the embodiments of the present disclosure have been shown and described above, it is understood that the foregoing embodiments are illustrative and are not to be construed as limiting the scope of the disclosure The embodiments are subject to variations, modifications, substitutions and variations.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Safety Devices In Control Systems (AREA)

Abstract

一种车载设备控制系统的异常处理方法、装置和系统，其中，车载设备控制系统包括至少两个车载控制器VOBC（740），方法包括：若列车的至少两个VOBC（740）中的一个出现异常，将未出现异常的VOBC作为主VOBC（740-A），将出现异常的VOBC作为备用VOBC（740-B）（101）；获取用于对备用VOBC（740-B）进行重启的重启指令（步骤102）；根据重启指令，先断开再恢复备用VOBC（740-B）的供电，以使备用VOBC（740-B）重启（步骤103）。实现重复切系处理，提高系统可用性，降低人工处理概率。

Description

车载设备控制系统的异常处理方法、装置和系统
相关申请的交叉引用
本公开要求比亚迪股份有限公司于2018年01月03日提交的、发明名称为“车载设备控制系统的异常处理方法、装置和系统”的、中国专利申请号为“201810005891.8”的优先权。
技术领域
本公开涉及轨道交通技术领域，尤其涉及一种车载设备控制系统的异常处理方法、装置和系统。
背景技术
在轨道交通领域，为保证列车的正常运行，通常为列车冗余设置两个车载控制器(Vehicle On Board Controller，VOBC)，其中一个作为主系，另一个作为备系。当主系发生故障时进行切系处理，原来的备系升级为主系，原来的主系保持故障状态变为备系。若切换后的主系也发生故障，由于切换后的备系仍处于故障状态，无法再次进行切系处理，系统可能进行宕机处理，列车进行紧急制动，无法继续行驶。
在全自动无人驾驶的场景下，若列车在区间运行中主备系均发生故障无法再次进行切系，列车紧急制动，乘客可能被滞留在区间内，需要技术人员上车处理并对乘客进行紧急救援。由于轨道交通区间的接触轨一般带有高压电，若是轻轨或单轨，列车还会处于高空中，增大了救援难度，危及人身安全。
可见，上述采用冗余设置两个VOBC来保证列车运营的方式，仅能进行一次切系处理而不能重复切系，系统可用性不高，且在无人驾驶场景下，存在乘客被滞留在运行区间内的风险，救援难度大。
发明内容
本公开旨在至少在一定程度上解决相关技术中的技术问题之一。
为此，本公开的第一个目的在于提出一种车载设备控制系统的异常处理方法，通过对备用VOBC进行断电后再上电，使备用VOBC重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC故障无法继续行驶导 致乘客被困在区间内需要紧急救援的情况发生。
本公开的第二个目的在于提出一种车载设备控制系统的异常处理装置。
本公开的第三个目的在于提出一种ATS工作站。
本公开的第四个目的在于提出一种车载设备控制系统的异常处理系统。
本公开的第五个目的在于提出一种非临时性计算机可读存储介质。
本公开的第六个目的在于提出一种计算机程序产品。
为达上述目的，本公开第一方面实施例提出了一种车载设备控制系统的异常处理方法，所述车载设备控制系统包括至少两个车载控制器VOBC，方法包括：
若列车的至少两个所述VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC；
获取用于对备用VOBC进行重启的重启指令；
根据所述重启指令，先断开再恢复所述备用VOBC的供电，以使所述备用VOBC重启。
本公开实施例的车载设备控制系统的异常处理方法，通过在列车的至少两个VOBC中的一个出现故障时，将未出现故障的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。通过对备用VOBC进行断电后再上电，使备用VOBC重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
为达上述目的，本公开第二方面实施例提出了一种车载设备控制系统的异常处理装置，车载设备控制系统包括至少两个车载控制器VOBC，装置包括：
切换模块，用于若列车的至少两个所述VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC；
获取模块，用于获取用于对备用VOBC进行重启的重启指令；
控制模块，用于根据所述重启指令，先断开再恢复所述备用VOBC的供电，以使所述备用VOBC重启。
本公开实施例的车载设备控制系统的异常处理装置，通过在列车的至少两个VOBC中的一个出现故障时，将未出现故障的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。通过对备用VOBC系统进行断电后再上电，使备用VOBC系统重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使 发生异常的VOBC系统恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC系统故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
为达上述目的，本公开第三方面实施例提出了一种ATS工作站，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，所述处理器执行所述程序时，实现如第一方面实施例所述的车载设备控制系统的异常处理方法。
为达上述目的，本公开第四方面实施例提出了一种车载设备控制系统的异常处理系统，包括：自动列车监控ATS工作站、远程重启模块、继电器和至少两个车载控制器VOBC；
所述ATS工作站，与所述远程重启模块连接，用于执行第一方面实施例所述的方法；
所述远程重启模块，与所述继电器连接，用于根据所述ATS工作站的指示，控制所述继电器先断开再恢复所述备用VOBC的供电；
所述继电器，与各所述VOBC和电源电性连接，用于在所述远程重启模块的控制下，先断开再恢复所述远程重启模块指定的所述备用VOBC的供电；
所述VOBC，用于供电断开后恢复时，进行重启。
本公开实施例的车载设备控制系统的异常处理系统，通过设置自动列车监控ATS工作站与远程重启模块连接，在列车的至少两个VOBC中的一个出现异常时，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启；远程重启模块与继电器连接，用于根据ATS工作站的指示，控制继电器先断开再恢复备用VOBC的供电；继电器与各VOBC和电源电性连接，用于在远程重启模块的控制下，先断开再恢复远程重启模块指定的备用VOBC的供电；VOBC用于供电断开后恢复时，进行重启。通过对备用VOBC进行断电后再上电，使备用VOBC重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
为达上述目的，本公开第五方面实施例提出了一种非临时性计算机可读存储介质，其上存储有计算机程序，该程序被处理器执行时实现如第一方面实施例所述的车载设备控制系统的异常处理方法。
为了实现上述目的，本公开第六方面实施例提出了一种计算机程序产品，当所述计算机程序产品中的指令由处理器执行时，执行如第一方面实施例所述的车载设备控制系统的异常处理方法。
本公开附加的方面和优点将在下面的描述中部分给出，部分将从下面的描述中变得明 显，或通过本公开的实践了解到。
附图说明
本公开上述的和/或附加的方面和优点从下面结合附图对实施例的描述中将变得明显和容易理解，其中：
图1为本公开实施例一所提供的车载设备控制系统的异常处理方法的流程示意图；
图2为本公开实施例二所提供的一种车载设备控制系统的异常处理方法的流程示意图；
图3为本公开实施例三所提供的车载设备控制系统的异常处理方法的流程示意图；
图4为本公开实施例一所提供的车载设备控制系统的异常处理装置的结构示意图；
图5为本公开实施例二所提供的车载设备控制系统的异常处理装置的结构示意图；
图6为本公开实施例三所提供的车载设备控制系统的异常处理装置的结构示意图；
图7为本公开实施例一所提供的ATS工作站的结构示意图；
图8为本公开实施例一所提供的车载设备控制系统的异常处理系统的结构示意图；
图9为本公开实施例二所提供的车载设备控制系统的异常处理系统的结构示意图。
具体实施方式
下面详细描述本公开的实施例，所述实施例的示例在附图中示出，其中自始至终相同或类似的标号表示相同或类似的元件或具有相同或类似功能的元件。下面通过参考附图描述的实施例是示例性的，旨在用于解释本公开，而不能理解为对本公开的限制。
下面参考附图描述本公开实施例的车载设备控制系统的异常处理方法、装置和系统。
图1为本公开实施例一所提供的车载设备控制系统的异常处理方法的流程示意图，该方法可以由自动列车监控(Automatic Train Supervision，ATS)工作站执行。该方法中，车载设备控制系统包括至少两个车载控制器VOBC，以在一个VOBC出现异常时能够切换到其他VOBC，保证列车的正常行驶。
如图1所示，该车载设备控制系统的异常处理方法包括以下步骤：
步骤101，若列车的至少两个VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC。
在轨道交通领域，为保证列车的正常运行，可以为列车冗余设置至少两个VOBC，其中一个作为主VOBC，剩余的作为备用VOBC，当主VOBC出现异常时，切换至备用VOBC。假设列车冗余设置了两个VOBC，分别称为A系和B系，且A系为主系，B系为备系。当A系出现故障时进行切系处理，A系保持故障状态变为备系，B系升级为主系。
本实施例中，当列车的至少两个VOBC发生切系时，主VOBC将切系信息发送给ATS工作站，ATS工作站将接收的切系信息显示在展示界面上。切系信息中可以包括至少两个VOBC的状态信息，若ATS工作站从切系信息中获知列车的至少两个VOBC中的一个出现异常，则将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC。
VOBC的状态信息可以包括正常同步状态、异步状态和故障状态，只有处于正常同步状态的VOBC才能在切系后升级为主VOBC，处于异步状态或故障状态的VOBC仅能作为备用VOBC。从而，在本公开实施例一种可能的实现方式中，可以根据VOBC的状态信息确定备用VOBC。ATS工作站的显示界面可以实时显示VOBC的状态信息，当监测到一个VOBC出现故障时，ATS工作站将处于故障状态的VOBC确定为备用VOBC；或者，当监测到一个VOBC处于异步状态时，统计该VOBC处于异步状态的持续时长，将处于异步状态达到预设时长的VOBC确定为备用VOBC，其中，预设时长可以预先设定，比如可以是3分钟、5分钟等。
步骤102，获取用于对备用VOBC进行重启的重启指令。
ATS工作站从列车的VOBC中确定了备用VOBC之后，可以获取用于对备用VOBC进行重启的重启指令，以根据重启指令对备用VOBC进行重启。
需要说明的是，获取用于对备用VOBC进行重启的重启指令的具体实现过程将在后续内容中给出，为避免重复，此处不作详细描述。
步骤103，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。
ATS工作站获取了重启指令之后，可以根据重启指令，断开备用VOBC的电源之后再恢复供电，以使备用VOBC重启。
本实施例的车载设备控制系统的异常处理方法，通过在列车的至少两个VOBC中的一个出现故障时，将未出现故障的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。通过对备用VOBC进行断电后再上电，使备用VOBC重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
为了便于观察重启后的备用VOBC的状态信息，在本公开实施例一种可能的实现方式中，在备用VOBC重启后，ATS工作站还可以接收备用VOBC的状态信息，将备用VOBC的状态信息从异常状态更新为接收到的状态信息。
备用VOBC进行重启后，再进行上电自检，如果自检成功，则备用VOBC能够与主 VOBC进行通信，若备用VOBC未完成与主VOBC的数据同步，则ATS工作站接收到的主VOBC发送的状态信息中，备用VOBC的状态信息为异步状态；若备用VOBC完成与主VOBC的数据同步，则ATS工作站接收到的主VOBC发送的状态信息中，备用VOBC的状态信息为正常同步状态；如果自检失败，则备用VOBC宕机，无法与主VOBC系统进行通信，ATS工作站接收到的主VOBC发送的状态信息中，备用VOBC的状态信息为故障状态。
对于处于故障状态的备用VOBC，以及处于异步状态达到预设时长的备用VOBC，ATS工作站获取重启指令以对备用VOBC进行重启，以使备用VOBC恢复正常同步状态。
通过远程控制，使备用VOBC重启以恢复正常，无需技术人员到现场处理，降低了人工处理概率和处理难度。
为了更加清楚地描述前述实施例中获取用于对备用VOBC进行重启的重启指令的具体实现过程，本公开实施例提出了另一种车载设备控制系统的异常处理方法，图2为本公开实施例二所提供的一种车载设备控制系统的异常处理方法的流程示意图。
如图2所示，在如图1所示实施例的基础上，步骤102可以包括以下步骤：
步骤201，当探测到用户通过ATS工作站的界面对备用VOBC执行的重启操作时，获取备用VOBC的系统标识和备用VOBC所在列车的列车标识。
ATS工作站的显示界面上可以显示列车的VOBC的状态信息，以供用户实时观察各VOBC的状态。当用户观测到有VOBC出现异常上，用户可以通过ATS工作站的界面对出现异常的VOBC进行重启。ATS工作站的显示界面上可以针对出现异常的VOBC设置对应的重启按键，用户可以通过触摸选择或者遥控选择等方式触发重启按键，以实现对备用VOBC的重启操作。当ATS工作站探测到用户通过ATS工作站的界面对备用VOBC执行的重启操作时，即ATS工作站监测到重启按键被触发时，ATS工作站获取重启操作针对的备用VOBC的系统标识和备用VOBC所在列车的列车标识。
作为一种示例，ATS工作站中可以预先存储隶属于该ATS工作站监控的所有列车的列车标识，并针对每个列车，存储该列车的列车标识与该列车的VOBC的系统标识之间的对应关系。ATS工作站的显示界面上显示VOBC的系统标识以及对应的状态信息，当用户对备用VOBC执行重启操作时，ATS工作站根据重启操作针对的备用VOBC，可以获取该VOBC的系统标识，再通过查询存储的对应关系，可以获取该VOBC所隶属的列车的列车标识。
作为另一种示例，列车的主VOBC向ATS工作站发送切系信息或者备用VOBC的状态信息时，可以携带该列车的列车标识以及备用VOBC的系统标识，ATS工作站接收到信息后从中提取出列车标识、系统标识以及状态信息显示在显示界面上。当ATS工作站探测 到用户通过ATS工作站的界面对备用VOBC执行重启操作时，根据重启操作针对的备用VOBC，可以获取到该备用VOBC的系统标识以及所在列车的列车标识。
此处需要说明的是，本实施例以及后续实施例中所述的用户指的是ATS工作站的调度人员，以使调度人员通过远程控制实现备用VOBC的重启。
步骤202，根据系统标识和列车标识，生成重启指令。
本实施例中，ATS工作站获取到备用VOBC的系统标识和对应列车的列车标识之后，可以根据系统标识和列车标识生成重启指令，以根据重启指令中携带的系统标识和列车标识，对符合列车标识和系统标识的备用VOBC进行重启。
本实施例的车载设备控制系统的异常处理方法，通过在探测到用户通过ATS工作站的界面对备用VOBC执行的重启操作时获取备用VOBC的系统标识和所在列车的列车标识，根据系统标识和列车标识生成重启指令，能够实现对出现异常的备用VOBC的远程重启，减少人工现场处理的概率。
为了更加清楚地描述前述实施例中根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启的具体实现过程，本公开实施例提出了另一种车载设备控制系统的异常处理方法，图3为本公开实施例三所提供的车载设备控制系统的异常处理方法的流程示意图。
如图3所示，在如图1所示实施例的基础上，步骤103可以包括以下步骤：
步骤301，向远程重启模块发送重启指令，重启指令用于指示备用VOBC重启。
其中，远程重启模块，用于控制供电系统对至少两个VOBC的断开或恢复供电，供电系统中可以包括至少两个继电器，每个继电器仅有一个VOBC与之串联。
本实施例中，ATS工作站获取了用于对备用VOBC进行重启的重启指令之后，将重启指令发送给远程重启模块，以使远程重启模块根据重启指令控制供电系统对备用VOBC断开供电或恢复供电。
步骤302，接收远程重启模块回复的重启指令，并在ATS工作站界面对远程重启模块回复的重启指令进行显示。
其中，远程重启模块回复的重启指令可以与远程重启模块接收到的重启指令相同，即远程重启模块接收到重启指令后，再将接收的重启指令返回给ATS工作站，以使用户判断重启指令发送过程中是否出现错误。
远程重启模块接收到ATS工作站发送的重启指令之后，再将接收到的重启指令反馈给ATS工作站。ATS工作站接收到远程重启模块回复的重启指令之后，将重启指令显示在显示界面中，以使用户对ATS工作站接收到的重启指令中包含的系统标识和列车标识进行确认。
步骤303，当探测到用户确认指令时，再次向远程重启模块发送重启指令，以在远程重启模块确定两次接收到的重启指令相同时，先断开再恢复重启指令指示的备用VOBC的供电。
ATS工作站接收到远程重启模块发送的重启指令之后，可以将重启指令显示在显示界面上，并可以提供“确认”按键，用户对显示的重启指令中的系统标识和列车标识进行确认。当显示的重启指令中的系统标识和列车标识与出现异常的备用VOBC的系统标识和对应列车的列车标识一致时，用户可以触发“确认”按键。用户触发“确认”按键后，生成确认指令，ATS工作站可以探测到用户确认指令，之后，再次向远程重启模块发送重启指令。远程重启模块再次接收到重启指令之后，对两次接收的重启指令中的列车标识和系统标识进行校验，当校验结果一致时，则断开并恢复重启指令指示的备用VOBC的供电。
作为一种示例，当远程重启模块确定两次接收到的重启指令相同时，可以向重启指令中系统标识指示的备用VOBC发送一次硬线远程重启指令，硬线驱动该VOBC的重启继电器，硬线远程重启指令持续一定时长(比如6秒，可根据需要设定)后结束。本示例中，重启继电器可以是常闭继电器，与每个VOBC的电源串联，当远程重启模块通过硬线驱动重启指令中系统标识指示的备用VOBC对应的重启继电器时，该重启继电器的常闭触点断开，与之对应的VOBC断电。硬线远程重启指令持续时长结束后，远程重启模块停止驱动该VOBC的重启继电器，常闭触点闭合，该VOBC再次与电源接通，恢复供电，该VOBC重新启动。
进一步地，在本公开实施例一种可能的实现方式中，如图3所示，ATS工作站再次向远程重启模块发送重启指令之后，当远程重启模块确定两次接收到的重启指令不相同时，还可以包括以下步骤：
步骤304，接收远程重启模块发送的错误信息，错误信息是远程重启模块确定两次接收到的重启指令不相同时生成的。
远程重启模块再次接收到ATS工作站发送的重启指令后，将两次重启指令中的系统标识和列车标识进行比较，如果至少一个不一致，则认为两次重启指令不相同，远程重启模块向ATS工作站发送错误信息。
步骤305，根据错误信息发出提示。
ATS工作站接收到远程重启模块发送的错误信息后，可以根据错误信息发出提示。比如，可以在ATS工作站的显示界面上显示“重启指令校验失败，请检查后重新执行重启操作”的提示信息，以提醒用户重新对备用VOBC执行重启操作，进而重新获得重启指令。或者，也可以采用语音播报的方式向用户发出提示信息，以提醒用户重新执行重启操作。
本实施例的车载设备控制系统的异常处理方法，通过向远程重启模块发送重启指令， 并接收远程重启模块返回的重启指令，用户对接收到的重启指令进行确认后再次发送重启指令，能够避免误操作或传输过程中发生错误导致的误重启，提高VOBC重启的准确性。当远程重启模块确定两次接收的重启指令不相同时，通过接收远程重启模块发送的错误信息，根据错误信息发出提示，能够使用户及时针对错误信息采取合适的措施，保证备用VOBC成功完成重启。
为了实现上述实施例，本公开还提出一种车载设备控制系统的异常处理装置，其中，车载设备控制系统包括至少两个车载控制器VOBC。
图4为本公开实施例一所提供的车载设备控制系统的异常处理装置的结构示意图。
如图4所示，该车载设备控制系统的异常处理装置40包括：切换模块410、获取模块420，以及控制模块430。其中，
切换模块410，用于若列车的至少两个VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC。
获取模块420，用于获取用于对备用VOBC进行重启的重启指令。
控制模块430，用于根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。
在本公开实施例一种可能的实现方式中，切换模块410可以将处于故障状态的VOBC确定为备用VOBC；或者，将处于异步状态达到预设时长的VOBC确定为备用VOBC。
在本公开实施例一种可能的实现方式中，该车载设备控制系统的异常处理装置40还可以在备用VOBC重启后，接收备用VOBC的状态信息，并将备用VOBC的状态信息从异常状态更新为接收到的状态信息。通过在备用VOBC重启后更新系统的状态信息，能够使维护人员及时获知系统的状态情况，并针对状态信息采取对应的措施，实现对故障VOBC的及时处理。
进一步地，在本公开实施例的一种可能的实现方式中，如图5所示，在如图4所示实施例的基础上，获取模块420包括：
获取单元421，用于当探测到用户通过ATS工作站的界面对备用VOBC执行的重启操作时，获取备用VOBC的系统标识和备用VOBC所在列车的列车标识。
生成单元422，用于根据系统标识和列车标识，生成重启指令。
通过在探测到用户对备用VOBC执行的重启操作时获取重启操作针对的备用VOBC的系统标识和所在列车的列车标识，根据系统标识和列车标识生成重启指令，能够实现对出现异常的备用VOBC的远程重启，减少人工现场处理的概率。
进一步地，在本公开实施例的一种可能的实现方式中，如图6所示，在如图4所示实施例的基础上，控制模块430包括：
发送单元431，用于向远程重启模块发送重启指令，重启指令用于指示备用VOBC重启。
其中，远程重启模块，用于控制供电系统对至少两个VOBC的断开或恢复供电。
接收单元432，用于接收远程重启模块回复的重启指令，并在ATS工作站界面对远程重启模块回复的重启指令进行显示。
其中，远程重启模块回复的重启指令可以与远程重启模块接收到的重启指令相同。
控制单元433，用于当探测到用户确认指令时，再次向远程重启模块发送重启指令，以在远程重启模块确定两次接收到的重启指令相同时，先断开再恢复重启指令指示的备用VOBC的供电。
通过向远程重启模块发送重启指令，并接收远程重启模块返回的重启指令，用户对接收到的重启指令进行确认后再次发送重启指令，能够避免误操作或传输过程中发生错误导致的误重启，提高VOBC重启的准确性。
进一步地，在本公开实施例一种可能的实现方式中，如图6所示，控制模块430还可以包括：
提示单元434，用于再次向远程重启模块发送重启指令之后，接收远程重启模块发送的错误信息，其中，错误信息是远程重启模块确定两次接收到的重启指令不相同时生成的，根据错误信息发出提示。
通过接收远程重启模块发送的错误信息，根据错误信息发出提示，能够使用户及时针对错误信息采取合适的措施，保证备用VOBC成功完成重启。
需要说明的是，前述对车载设备控制系统的异常处理方法实施例的解释说明也适用于该实施例的车载设备控制系统的异常处理装置，其实现原理类似，此处不再赘述。
本实施例的车载设备控制系统的异常处理装置，通过在列车的至少两个VOBC中的一个出现故障时，将未出现故障的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，先断开再恢复备用VOBC的供电，以使备用VOBC重启。通过对备用VOBC系统进行断电后再上电，使备用VOBC系统重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC系统恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC系统故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
为了实现上述实施例，本公开还提出一种ATS工作站。
图7为本公开实施例一所提供的ATS工作站的结构示意图。如图7所示，该ATS工作站90包括：存储器901、处理器902及存储在存储器901上并可在处理器902上运行的计 算机程序903，处理器902执行所述程序时，实现如前述实施例所述的车载设备控制系统的异常处理方法。
为了实现上述实施例，本公开还提出一种车载设备控制系统的异常处理系统。
图8为本公开实施例一所提供的车载设备控制系统的异常处理系统的结构示意图。
如图8所示，该车载设备控制系统的异常处理系统70包括：自动列车监控ATS工作站710、远程重启模块720、继电器730和至少两个车载控制器VOBC 740。其中，
ATS工作站710，与远程重启模块720通信连接，用于执行前述实施例所述的车载设备控制系统的异常处理方法。
需要说明的是，ATS工作站710的工作过程可以参见前述有关车载设备控制系统的异常处理方法实施例的描述，为避免重复，此处不再赘述。
远程重启模块720，与继电器730连接，用于根据ATS工作站710的指示，控制继电器730断开并恢复备用VOBC的供电。
继电器730，与各VOBC740和电源电性连接，用于在远程重启模块720的控制下，断开并恢复远程重启模块720指定的备用VOBC的供电。
VOBC740，用于供电断开后恢复时，进行重启。
本实施例中，继电器730可以为多个，每一个继电器730分别与对应的VOBC740和对应的电源电性连接。远程重启模块720接收到ATS工作站710发送的重启指令时，根据重启指令指示的备用VOBC740，在预先配置的时长内(比如6秒)，向备用VOBC740对应的继电器730发送硬线驱动指令。继电器730接收到硬线驱动指令之后，断开对备用VOBC740的供电，并在未接收到硬线驱动指令时，恢复供电。
作为一种示例，远程重启模块720第一次接收到ATS工作站710发送的重启指令后，将重启指令返回给ATS工作站710。ATS工作站710将接收到的重启指令显示在显示界面上供用户确认，并在探测到用户的确认指令后，再次向远程重启模块720发送重启指令。远程重启模块720再次接收到重启指令后，对两次接收的重启指令进行比较，并在两次接收的重启指令相同时，向重启指令指示的备用VOBC740对应的继电器730发送硬线驱动指令，并使硬线驱动指令持续预先配置的时长后停止发送硬线驱动指令。通过二次确认的方式，能够避免误操作或传输过程中发生错误导致的误重启。
本实施例的车载设备控制系统的异常处理系统，通过设置自动列车监控ATS工作站与远程重启模块连接，在列车的至少两个VOBC中的一个出现异常时，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC，获取用于对备用VOBC进行重启的重启指令，根据重启指令，断开并恢复备用VOBC的供电，以使备用VOBC重启；远程重启模块与继电器连接，用于根据ATS工作站的指示，控制继电器断开并恢复备用 VOBC的供电；继电器与各VOBC和电源电性连接，用于在远程重启模块的控制下，断开并恢复远程重启模块指定的备用VOBC的供电；VOBC用于供电断开后恢复时，进行重启。通过对备用VOBC进行断电后再上电，使备用VOBC重启，以实现在全自动无人驾驶场景中无人工处理的情况下，通过远程处理使发生异常的VOBC恢复正常，实现重复切系处理，提高系统可用性，降低人工处理概率，避免全自动无人驾驶列车因VOBC故障无法继续行驶导致乘客被困在区间内需要紧急救援的情况发生。
图9为本公开实施例二所提供的车载设备控制系统的异常处理系统的结构示意图。
如图9所示，该车载设备控制系统的异常处理系统70中，VOBC740为两个，包括：出现异常的备用VOBC740-B和未出现异常的主VOBC740-A。继电器730也为两个，每个VOBC740与一个继电器730和电源电性连接。
本实施例中，备用VOBC740-B与主VOBC740-A通信连接，当备用VOBC740-B重启后，与主VOBC740-A交互，以使主VOBC740-A通知ATS工作站710备用VOBC740-B重启后的状态信息。主VOBC740-A与ATS工作站710通信连接，当主VOBC740-A与备用VOBC740-B交互后，主VOBC740-A通知ATS工作站710备用VOBC740-B处于异步状态的状态信息。
ATS工作站710用于接收主VOBC740-A发送的备用VOBC740-B的状态信息，在界面中，将备用VOBC740-B的状态信息从异常状态更新为接收到的异步状态。
在本公开实施例一种可能的实现方式中，当备用VOBC740-B重启后，备用VOBC740-B与主VOBC740-A进行数据同步，以使主VOBC740-A在数据同步完成后，通知ATS工作站710备用VOBC740-B处于正常同步状态的状态信息。ATS工作站710接收到主VOBC740-A发送的备用VOBC740-B的状态信息后，将显示界面中当前显示的备用VOBC740-B的状态信息从异常状态更新为正常同步状态。
此处需要说明的是，当主VOBC740-A出现故障时，进行切系处理，重启完成且数据同步完成后的备用VOBC740-B升级为主VOBC，并可以与ATS工作站710进行通信，出现故障的主VOBC740-A降级为备用VOBC，再次对备用VOBC执行重启操作，以使备用VOBC恢复正常。
本实施例的车载设备控制系统的异常处理系统，通过使两个VOBC之间通信连接，ATS工作站与主VOBC通信连接，备用VOBC重启后与主VOBC交互，以使主VOBC将重启后的备用VOBC的状态信息反馈给ATS工作站，使ATS工作站在界面中对备用VOBC的状态信息进行更新，能够使维护人员及时获知系统的状态情况，并针对系统状态采取对应的措施，实现对故障VOBC的及时处理。
为了实现上述实施例，本公开还提出一种非临时性计算机可读存储介质，其上存储有 计算机程序，该程序被处理器执行时实现如前述实施例所述的车载设备控制系统的异常处理方法。
为了实现上述实施例，本公开还提出一种计算机程序产品，当计算机程序产品中的指令由处理器执行时，执行如前述实施例所述的车载设备控制系统的异常处理方法。
在本说明书的描述中，参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本公开的至少一个实施例或示例中。在本说明书中，对上述术语的示意性表述不必须针对的是相同的实施例或示例。而且，描述的具体特征、结构、材料或者特点可以在任一个或多个实施例或示例中以合适的方式结合。此外，在不相互矛盾的情况下，本领域的技术人员可以将本说明书中描述的不同实施例或示例以及不同实施例或示例的特征进行结合和组合。
此外，术语“第一”、“第二”仅用于描述目的，而不能理解为指示或暗示相对重要性或者隐含指明所指示的技术特征的数量。由此，限定有“第一”、“第二”的特征可以明示或者隐含地包括至少一个该特征。在本公开的描述中，“多个”的含义是至少两个，例如两个，三个等，除非另有明确具体的限定。
流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为，表示包括一个或更多个用于实现定制逻辑功能或过程的步骤的可执行指令的代码的模块、片段或部分，并且本公开的优选实施方式的范围包括另外的实现，其中可以不按所示出或讨论的顺序，包括根据所涉及的功能按基本同时的方式或按相反的顺序，来执行功能，这应被本公开的实施例所属技术领域的技术人员所理解。
在流程图中表示或在此以其他方式描述的逻辑和/或步骤，例如，可以被认为是用于实现逻辑功能的可执行指令的定序列表，可以具体实现在任何计算机可读介质中，以供指令执行系统、装置或设备(如基于计算机的系统、包括处理器的系统或其他可以从指令执行系统、装置或设备取指令并执行指令的系统)使用，或结合这些指令执行系统、装置或设备而使用。就本说明书而言，“计算机可读介质”可以是任何可以包含、存储、通信、传播或传输程序以供指令执行系统、装置或设备或结合这些指令执行系统、装置或设备而使用的装置。计算机可读介质的更具体的示例(非穷尽性列表)包括以下：具有一个或多个布线的电连接部(电子装置)，便携式计算机盘盒(磁装置)，随机存取存储器(RAM)，只读存储器(ROM)，可擦除可编辑只读存储器(EPROM或闪速存储器)，光纤装置，以及便携式光盘只读存储器(CDROM)。另外，计算机可读介质甚至可以是可在其上打印所述程序的纸或其他合适的介质，因为可以例如通过对纸或其他介质进行光学扫描，接着进行编辑、解译或必要时以其他合适方式进行处理来以电子方式获得所述程序，然后将其 存储在计算机存储器中。
应当理解，本公开的各部分可以用硬件、软件、固件或它们的组合来实现。在上述实施方式中，多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或固件来实现。如，如果用硬件来实现和在另一实施方式中一样，可用本领域公知的下列技术中的任一项或他们的组合来实现：具有用于对数据信号实现逻辑功能的逻辑门电路的离散逻辑电路，具有合适的组合逻辑门电路的专用集成电路，可编程门阵列(PGA)，现场可编程门阵列(FPGA)等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，该程序在执行时，包括方法实施例的步骤之一或其组合。
此外，在本公开各个实施例中的各功能单元可以集成在一个处理模块中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。所述集成的模块如果以软件功能模块的形式实现并作为独立的产品销售或使用时，也可以存储在一个计算机可读取存储介质中。
上述提到的存储介质可以是只读存储器，磁盘或光盘等。尽管上面已经示出和描述了本公开的实施例，可以理解的是，上述实施例是示例性的，不能理解为对本公开的限制，本领域的普通技术人员在本公开的范围内可以对上述实施例进行变化、修改、替换和变型。

Claims (14)

  1. 一种车载设备控制系统的异常处理方法，其特征在于，所述车载设备控制系统包括至少两个车载控制器VOBC，包括以下步骤：
    若列车的至少两个所述VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC；
    获取用于对所述备用VOBC进行重启的重启指令；
    根据所述重启指令，先断开再恢复所述备用VOBC的供电，以使所述备用VOBC重启。
  2. 根据权利要求1所述的异常处理方法，其特征在于，所述根据所述重启指令，先断开再恢复所述备用VOBC的供电，以使所述备用VOBC重启，包括：
    向远程重启模块发送所述重启指令，所述重启指令用于指示所述备用VOBC重启；所述远程重启模块，用于控制供电系统对所述至少两个VOBC的断开或恢复供电；
    接收所述远程重启模块回复的重启指令，并在ATS工作站界面对所述远程重启模块回复的重启指令进行显示；
    当探测到用户确认指令时，再次向远程重启模块发送所述重启指令，以在所述远程重启模块确定两次接收到的所述重启指令相同时，先断开再恢复所述重启指令指示的备用VOBC的供电。
  3. 根据权利要求2所述的异常处理方法，其特征在于，所述再次向远程重启模块发送所述重启指令之后，还包括：
    接收所述远程重启模块发送的错误信息，所述错误信息是所述远程重启模块确定两次接收到的重启指令不相同时生成的；
    根据所述错误信息发出提示。
  4. 根据权利要求1-3任一项所述的异常处理方法，其特征在于，所述获取用于对所述备用VOBC进行重启的重启指令，包括：
    当探测到用户通过所述ATS工作站的界面对所述备用VOBC执行的重启操作时，获取所述备用VOBC的系统标识和所述备用VOBC所在列车的列车标识；
    根据所述系统标识和列车标识，生成所述重启指令。
  5. 根据权利要求1-4任一项所述的异常处理方法，其特征在于，所述至少两个所述VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC系统，将出现异常的VOBC作为备用VOBC，包括：
    将处于故障状态的VOBC，确定为所述备用VOBC；
    将处于异步状态且达到预设时长的VOBC，确定为所述备用VOBC。
  6. 根据权利要求1-5任一项所述的异常处理方法，其特征在于，所述根据所述重启指令，先断开再恢复所述备用VOBC系统的供电之后，还包括：
    在所述备用VOBC重启后，接收所述备用VOBC的状态信息；
    将所述备用VOBC的状态信息从异常状态更新为接收到的所述状态信息。
  7. 一种车载设备控制系统的异常处理装置，其特征在于，车载设备控制系统包括至少两个车载控制器VOBC，所述装置包括：
    切换模块，用于若列车的至少两个所述VOBC中的一个出现异常，将未出现异常的VOBC作为主VOBC，将出现异常的VOBC作为备用VOBC；
    获取模块，用于获取用于对所述备用VOBC进行重启的重启指令；
    控制模块，用于根据所述重启指令，先断开再恢复所述备用VOBC的供电，以使所述备用VOBC重启。
  8. 一种ATS工作站，其特征在于，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，所述处理器执行所述程序时，实现如权利要求1-6中任一项所述的车载设备控制系统的异常处理方法。
  9. 一种车载设备控制系统的异常处理系统，其特征在于，包括：自动列车监控ATS工作站、远程重启模块、继电器和至少两个车载控制器VOBC；
    所述ATS工作站，与所述远程重启模块通信连接，用于执行权利要求1-6任一项所述的方法；
    所述远程重启模块，与所述继电器连接，用于根据所述ATS工作站的指示，控制所述继电器断先开再恢复所述备用VOBC的供电；
    所述继电器，与各所述VOBC和电源电性连接，用于在所述远程重启模块的控制下，先断开再恢复所述远程重启模块指定的所述备用VOBC的供电；
    所述VOBC，用于供电断开后恢复时，进行重启。
  10. 根据权利要求9所述的异常处理系统，其特征在于，所述继电器为多个，每一个继电器分别与对应的VOBC和对应的电源电性连接；
    所述远程重启模块，具体用于当接收到所述ATS工作站发送的重启指令时，根据所述重启指令指示的所述备用VOBC，在预先配置的时长内，向所述备用VOBC对应的继电器发送硬线驱动指令；
    所述继电器，具体用于当接收到所述硬线驱动指令时，断开供电，并在未接收到所述硬线驱动指令时，恢复供电。
  11. 根据权利要求9所述的异常处理系统，其特征在于，所述VOBC为两个，包括： 出现异常的备用VOBC和未出现异常的主VOBC；
    所述备用VOBC，与所述主VOBC通信连接，还用于在重启后，与所述主VOBC交互；
    所述主VOBC，与所述ATS工作站通信连接，还用于与所述备用VOBC交互后，通知所述ATS工作站所述备用VOBC处于异步状态的状态信息；
    所述ATS工作站，用于接收所述备用VOBC的状态信息，在界面中，将所述备用VOBC的状态信息从异常状态更新为接收到的所述异步状态。
  12. 根据权利要求11所述的异常处理系统，其特征在于，
    所述备用VOBC，还用于与所述主VOBC数据同步；
    所述主VOBC，还用于在数据同步完成后，通知所述ATS工作站所述备用VOBC处于正常同步状态的状态信息。
  13. 一种非临时性计算机可读存储介质，其上存储有计算机程序，其特征在于，该程序被处理器执行时实现如权利要求1-6中任一项所述的车载设备控制系统的异常处理方法。
  14. 一种计算机程序产品，其特征在于，当所述计算机程序产品中的指令由处理器执行时，执行如权利要求1-6中任一项所述的车载设备控制系统的异常处理方法。
PCT/CN2018/121164 2018-01-03 2018-12-14 车载设备控制系统的异常处理方法、装置和系统 WO2019134490A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201810005891.8 2018-01-03
CN201810005891.8A CN109987118A (zh) 2018-01-03 2018-01-03 车载设备控制系统的异常处理方法、装置和系统

Publications (1)

Publication Number Publication Date
WO2019134490A1 true WO2019134490A1 (zh) 2019-07-11

Family

ID=67129056

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/121164 WO2019134490A1 (zh) 2018-01-03 2018-12-14 车载设备控制系统的异常处理方法、装置和系统

Country Status (2)

Country Link
CN (1) CN109987118A (zh)
WO (1) WO2019134490A1 (zh)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110597666B (zh) * 2019-09-19 2022-11-15 广州视源电子科技股份有限公司 智能交互平板的系统还原方法和装置
CN112874582B (zh) * 2019-11-29 2023-02-10 比亚迪股份有限公司 列车及其的控制方法、控制装置和车载控制设备
CN111516728A (zh) * 2020-05-08 2020-08-11 湖南中车时代通信信号有限公司 一种列车的车载控制系统
CN111694688B (zh) * 2020-06-11 2023-10-13 阿波罗智联(北京)科技有限公司 车载系统恢复处理方法、装置及电子设备
CN112092868A (zh) * 2020-09-07 2020-12-18 交控科技股份有限公司 全自动运行列车的远程重启装置，列车及重启方法
CN112278016A (zh) * 2020-10-22 2021-01-29 上海电气泰雷兹交通自动化系统有限公司 车载控制器的故障恢复系统及故障恢复方法
CN112550362B (zh) * 2020-12-03 2022-08-30 卡斯柯信号有限公司 一种列车控制器的重启方法
CN113665631A (zh) * 2021-07-20 2021-11-19 交控科技股份有限公司 一种联锁主机设备远程重启方法及装置
CN114932926A (zh) * 2022-06-15 2022-08-23 交控科技股份有限公司 全自动列车的远程双端同步重启方法及系统
CN115416721A (zh) * 2022-07-19 2022-12-02 卡斯柯信号有限公司 一种首尾冗余结构的车载控制器故障处理方法及装置

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102407856A (zh) * 2011-09-21 2012-04-11 中国北车股份有限公司大连电力牵引研发中心 列车中央控制单元的热备冗余方法及系统
JP2013084121A (ja) * 2011-10-11 2013-05-09 Hitachi Ltd 多重系制御装置
CN104268037A (zh) * 2014-09-10 2015-01-07 上海自仪泰雷兹交通自动化系统有限公司 热冗余联锁子系统及其主备切换方法
CN104503272A (zh) * 2014-11-20 2015-04-08 北京交控科技有限公司 基于双系热备冗余的列车自动驾驶系统
CN106375072A (zh) * 2016-08-29 2017-02-01 中车大连机车车辆有限公司 机车通信网络冗余控制方法
CN206374759U (zh) * 2016-12-19 2017-08-04 比亚迪股份有限公司 列车中央控制单元的冗余控制系统及列车
CN107054414A (zh) * 2017-04-18 2017-08-18 卡斯柯信号有限公司 用于城市轨道交通信号设备的远程重启控制方法及装置

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101734265B (zh) * 2009-12-23 2012-02-29 卡斯柯信号有限公司 一种嵌入式车载信号设备状态监视方法及装置
CN103369573A (zh) * 2012-03-29 2013-10-23 苏州工业园区新宏博通讯科技有限公司 无线局域网智能控制系统
CN106059725A (zh) * 2016-07-21 2016-10-26 中铁二院重庆勘察设计研究院有限责任公司 一种导轨电车车载双机热备系统

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102407856A (zh) * 2011-09-21 2012-04-11 中国北车股份有限公司大连电力牵引研发中心 列车中央控制单元的热备冗余方法及系统
JP2013084121A (ja) * 2011-10-11 2013-05-09 Hitachi Ltd 多重系制御装置
CN104268037A (zh) * 2014-09-10 2015-01-07 上海自仪泰雷兹交通自动化系统有限公司 热冗余联锁子系统及其主备切换方法
CN104503272A (zh) * 2014-11-20 2015-04-08 北京交控科技有限公司 基于双系热备冗余的列车自动驾驶系统
CN106375072A (zh) * 2016-08-29 2017-02-01 中车大连机车车辆有限公司 机车通信网络冗余控制方法
CN206374759U (zh) * 2016-12-19 2017-08-04 比亚迪股份有限公司 列车中央控制单元的冗余控制系统及列车
CN107054414A (zh) * 2017-04-18 2017-08-18 卡斯柯信号有限公司 用于城市轨道交通信号设备的远程重启控制方法及装置

Also Published As

Publication number Publication date
CN109987118A (zh) 2019-07-09

Similar Documents

Publication Publication Date Title
WO2019134490A1 (zh) 车载设备控制系统的异常处理方法、装置和系统
US11623670B2 (en) Train control method, apparatus, and system
US9740178B2 (en) Primary controller designation in fault tolerant systems
KR20140039235A (ko) 리던던트 제어장치를 갖는 철도 신호처리 시스템
CN112550362B (zh) 一种列车控制器的重启方法
WO2022242091A1 (zh) 自动唤醒方法和车辆
US20160149532A1 (en) Motor control device and motor control system
CN112947257A (zh) 一种无人驾驶矿车的远程控制装置及方法
WO2019011164A1 (zh) 换电站及其保护系统
CN108725521B (zh) 一种轨道交通主备控制中心热备冗余管理系统及方法
CN111003024B (zh) 一种用于热备车载设备的列车接口数据的处理方法
CN108238034B (zh) 制动控制方法及装置
CN109383472B (zh) 轨道车辆用空压机控制方法及系统
CN112492046A (zh) 一种列车分布式tcms主备冗余管理方法及系统
CN114228791A (zh) 全自动运行列车远程重启后升级远程rm的方法和装置
CN112659892A (zh) 一种车辆异常断电熄火的应急控制方法、装置及车辆
US20220306149A1 (en) Device for controlling a steering angle or braking of an autonomous motor vehicle and vehicle including the device
CN109664902A (zh) 一种轨道车辆及其人机交互系统
CN103738366A (zh) 计算机系统
CN104901839A (zh) 动车组主处理器mpu冗余方法
KR101201357B1 (ko) 열차의 이중 도어제어장치
CN113282039B (zh) 自检控制方法、车辆和tcms
US10202134B2 (en) Train information managing apparatus
CN113859200B (zh) 一种轨道车辆线控制动方法及装置
CN116714645B (zh) 列车测试方法、系统、存储介质及电子设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18898757

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18898757

Country of ref document: EP

Kind code of ref document: A1