WO2020143243A1 - Dual-system hot backup switching method and system applied to automatic running system of train - Google Patents

Dual-system hot backup switching method and system applied to automatic running system of train Download PDF

Info

Publication number
WO2020143243A1
WO2020143243A1 PCT/CN2019/105218 CN2019105218W WO2020143243A1 WO 2020143243 A1 WO2020143243 A1 WO 2020143243A1 CN 2019105218 W CN2019105218 W CN 2019105218W WO 2020143243 A1 WO2020143243 A1 WO 2020143243A1
Authority
WO
WIPO (PCT)
Prior art keywords
unit
logic unit
logical unit
logical
logic
Prior art date
Application number
PCT/CN2019/105218
Other languages
French (fr)
Chinese (zh)
Inventor
周荣
黄彬彬
郭荣
严敢
李旭
Original Assignee
北京全路通信信号研究设计院集团有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 北京全路通信信号研究设计院集团有限公司 filed Critical 北京全路通信信号研究设计院集团有限公司
Publication of WO2020143243A1 publication Critical patent/WO2020143243A1/en

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/04Automatic systems, e.g. controlled by train; Change-over to manual control

Definitions

  • the present disclosure belongs to the field of rail transit, and particularly relates to a dual-system hot backup switching method and system applied to an automatic train running system.
  • the existing dual-machine hot backup structure of the automatic train running system includes a main system, a backup system, and a reverse (management) unit. Therefore, the switching method of the dual-system hot backup is: when the main system fails, the reverse cutting unit cuts off the output of the main system, and the backup system is upgraded to the main system. However, when the communication between the host, the backup machine and the reverse cutting unit is faulty and other functions are normal, the reverse (management) unit cuts off the output of the main backup system and exits the ATO, or when the communication failure of the removal unit itself also affects the system function , Which leads to withdrawal from ATO, so the existing dual-machine hot backup has low reliability.
  • the technical problem to be solved by the present disclosure is to overcome the shortcomings of the prior art, and provides a dual-system hot backup switching method and system applied to the train automatic operation system, and realizes the main-standby system switching through the functions between the dual-system hot backup, There is no need to add a reverse cutting (management) unit or a device with a function similar to a reverse cutting (management) unit to improve the reliability of the system.
  • the purpose of the present disclosure is to provide a dual-system hot standby switching method applied to the automatic train running system, adopting the following technical solutions:
  • a dual-system hot backup switching method applied to an automatic train running system includes:
  • the logical unit of this department competes with the main logical unit of the logical unit;
  • the logical unit of the local system or the logical unit of the opposing system competes for the primary system, it controls output and communication, and outputs the status signal of the primary system.
  • the logical unit of the system is the backup system, and the logical unit of the system is not the backup system, then the logical unit of the system is to determine whether the logical unit of the system is competing for the main system;
  • the logical unit of the local system determines whether the logical unit of the local system is competing for the primary and backup systems.
  • the competition between the logical unit of the system and the logical unit of the system through the card identification number includes:
  • the board identification number of the logical unit of this system corresponds to the main system, then the logical unit of this system is the main system.
  • the logical unit of the system can determine whether the logical unit of the system is competing for the main system and the primary system includes,
  • the logical unit of the opposite system is the main system, the logical unit of the system is the standby system;
  • the native logic unit detects whether the communication with the opposite logic unit is interrupted, and if the communication is not interrupted, the native logic unit continues to acquire the If the communication is interrupted, the logical unit of the system will detect whether the logical unit of the system outputs the status signal of the primary system. If the status signal of the primary system is detected, the logical unit of the system will be the standby system. If the status signal of the primary system is not detected , The logical unit of this department is upgraded to the main department.
  • the logical unit of the local system determines whether the logical unit of the primary system is competing for the primary and secondary systems by determining whether the logical unit of the primary system includes,
  • the dual logical unit is the primary system, the dual-system hot standby is in a fault state, and both the local logical unit and the dual logical unit perform downtime;
  • the logical unit of the opposite system is not the main system, the logical unit of the current system is the main system.
  • the logical unit of the system and the logical unit of the corresponding system respectively obtain one or more of the following operating information of the system,
  • the native logic unit and the twin logic unit obtain their own board identification numbers, the native logic unit and twin logic unit respectively acquire their respective communication information with the twin system, the native logic unit and twin system The logic unit self-tests itself.
  • the initialization states of the logical unit of the local system and the logical unit of the corresponding system are both standby systems.
  • the method further includes,
  • the logical unit as the main system When the logical unit of the corresponding system or the logical unit of the corresponding system fails as the main system, the logical unit as the main system performs automatic shutdown and cuts off the output and communication. At the same time, the logical unit as the backup system detects whether the main system outputs the main unit If the system status signal cannot be detected, the logical unit as the backup system is upgraded to the main system, taking over control output and communication and generating and outputting the main system status signal.
  • the self-checking of the logic unit of the department and the logic unit of the department includes,
  • the output and communication of the own logic unit and/or pair logic unit are cut off, and downtime is executed.
  • the purpose of the present disclosure is also to provide a dual-system hot standby system applied to an automatic train operation system, which includes a local logic unit and a counterpart logic unit that are mutually redundant, wherein the local logic unit and the counterpart logic Units include,
  • the main-standby competition module is used for the main-standby competition between the logical unit of the department and the logical unit of the department;
  • the signal generation module is used to generate and output the status signal of the main system when the logical unit of the corresponding system or the logical unit of the corresponding system competes for the main system.
  • the logical unit of the system and the logical unit of the system also include,
  • the board identification acquisition module is used to obtain the board identification number of the logic unit of the system and the logic unit of the system;
  • the first communication module is used to realize the communication between the logical unit of the system and the logical unit of the system and the system of the system;
  • the self-check module is used for self-check of the logic unit of this department and the logic unit of this department.
  • the logical unit of the system and the logical unit of the system also include,
  • the fault processing module is used to cut off the output and communication of the logic unit of the system and the logic unit of the system, and perform downtime.
  • the logical unit of the system and the logical unit of the system also include,
  • the second communication module is used to realize the output and communication between the logic unit of the system and the logic unit of the system.
  • the purpose of the present disclosure is also to provide an automatic train running system, which includes an output unit, a communication unit, an interface unit, and the above-mentioned logic unit and counterpart logic unit described above.
  • the logic unit, output unit, and communication unit are all connected to the interface unit, where,
  • the local logic unit and the counterpart logic unit are used to implement the above-mentioned switching method
  • the output unit is used to realize the output between the logic unit of the current department and the logic unit of the opposite department;
  • the communication unit is used to realize the communication between the logic unit of the current department and the logic unit of the opposite department;
  • the interface unit is used to realize the output and communication between the logic unit of the system and the logic unit of the system and the output unit and the communication unit, respectively.
  • the automatic operation system further includes a power supply unit, an input unit, and a recording unit connected to the interface unit, wherein,
  • the power supply unit is used to supply power to the automatic operation system
  • the input unit is used to realize input collection of the automatic operation system
  • the recording unit is used to realize data recording of the automatic operation system.
  • the interface unit includes a 2-way power bus, a 2-way communication bus that are mutually redundant, and a board identification.
  • the dual-system hot backup of the present disclosure realizes the switching method of the dual-system hot backup only by the logical judgment of the logical unit of the system and the logical unit of the system, which improves the reliability of the switching of the dual-system hot backup.
  • Both the logical unit of the standby system can generate the status signal of the primary system, and the logical unit as the primary system outputs the status signal of the primary system, and the logical unit of the standby system or the downtime unit does not output the status signal of the primary system.
  • the relationship between the main logic unit and the backup logic unit is further determined by detecting the main system status signal, so that the switching method of the dual system hot standby is more logical, and the dual system thermal Switching safety.
  • FIG. 1 shows a schematic flowchart of a dual-system hot standby switching method applied to an automatic train running system in an embodiment of the present disclosure
  • FIG. 2 shows a schematic flow chart of a method for switching a logic unit of a local system in a dual-system hot backup in an embodiment of the present disclosure
  • FIG. 3 shows a schematic diagram of a dual-system hot backup system applied to an automatic train running system in an embodiment of the present disclosure
  • FIG. 4 shows a schematic structural diagram of a train automatic operation system in an embodiment of the present disclosure.
  • an embodiment of the present disclosure introduces a dual-system hot standby switching method applied to an automatic train running system.
  • the switching method includes, first, the main logic unit and the counter logic unit
  • the standby system competes; then, when the logical unit of the local system or the logical unit of the opposing system competes for the primary system, it controls output and communication, and outputs the status signal of the primary system.
  • the logic unit of the main system controls the output unit and the communication unit to realize the operation control of the automatic train running system.
  • the main logical unit and the main logical unit compete for the main logical unit, it also includes obtaining one or more operating information of the main unit respectively.
  • the main logical unit and the main logical unit respectively obtain their own The board identification number.
  • the local logic unit and the counterpart logic unit respectively obtain the communication information of the counterpart system, and then, the local logic unit and the counterpart logic unit respectively perform self-checks on themselves.
  • the local logic unit and the counterpart logic unit respectively obtain their own board identification numbers, and the board identification number is used to distinguish the local logic unit from the counterpart logic unit.
  • the board identification number is acquired
  • the logic unit of the system and the system logic unit read the backplane board identification number through the 4 IO pins of the CPU.
  • the system logic unit and the system logic unit are obtained if the system logic unit and the system logic unit are not inserted into the backplane
  • the board identification number is 1111.
  • the logic unit of this department and the counterpart logic unit are inserted into the backplane, the logic unit of this department and the logic unit of the other department are distinguished by grounding different pins, such as the board of the logic unit of the said department
  • the identification number is 1110, and the board identification number of the logic unit is 1101.
  • the communication information includes (but is not limited to) the active/standby state, the number of platform synchronization cycles, the application task cycle, and application cycle synchronization data.
  • the logic unit of the system and the logic unit of the system perform self-test on the system.
  • the self-test includes (but not limited to) FRAM self-test, Flash self-test, RTC read-write self-test, external communication initialization self-test, and the system Communication initialization self-test, when the logical unit of the system and/or the logical unit of the system fails the self-test, the logical unit of the system and/or the logical unit of the system cuts off the communication and output between itself and the external unit And communication with itself and the counterpart system, and perform downtime; when the native logic unit and/or the counterpart logic unit passes the self-test, the native logic unit competes with the counterpart logic unit .
  • the primary logical unit state of the primary logical unit is determined first, and then the primary logical unit state of the primary logical unit is determined.
  • the states of the primary and secondary logical units of the logical units of the corresponding system and the logical units of the corresponding system include one or more of the following: the logical units of the logical system and the logical system of the primary system are both the logical units of the primary system, the logical units of the logical system and the logical system of the logical system All of them are backup systems.
  • the logical units of this system are backup systems.
  • the logical units of this system cannot determine the status of the primary and secondary systems of the logical units of this system.
  • the logical units of this system are the backup systems.
  • the logical units of this system are the primary systems.
  • the logical unit of the system is the main system, and the logical unit of the system is the standby system. among them,
  • Both the local logic unit and the counterpart logic unit are the master system, then the dual-system hot standby is a failure mode, and the local logic unit and the counterpart logic unit both perform downtime.
  • the local logic unit and the counterpart logic unit are both backup systems, and the local logic unit and the counterpart logic unit compete for the primary and secondary systems through the board identification number.
  • the board identification number of the local logic unit is Corresponding to the main department, the logical unit of this department is the main department.
  • the board identification number corresponding to the main system is 1110 and the board identification number corresponding to the standby system is 1101, if the board identification number of the logical unit of the system is 1110, the system defaults to the Department of logical units is the main department.
  • the native logic unit is a standby system, and the native logic unit cannot determine the status of the active and standby systems of the opposite logic unit.
  • the native logic unit determines whether the communication with the opposite logic unit is interrupted. If the communication between the logic unit and the counterpart logic unit is not interrupted, the native logic unit re-executes the above-mentioned switching method.
  • the native logic unit reacquires the communication information with the counterpart system; If the communication between the logical unit of the system and the logical unit of the system is interrupted, the logical unit of the system detects whether the logical unit of the system outputs the status signal of the main system, and if the logical unit of the logical system detects the output of the logical unit of the system
  • the main system status signal, the opposite logic unit is the main system, and the local logic unit is the backup system; if the main system status signal output from the opposite system logic unit is not detected, the local logic unit is upgraded to the main system .
  • the status signal of the primary system is not generated and output. Therefore, when the logical unit of the corresponding system or the logical unit of the corresponding system detects whether the respective system outputs the status signal of the main system, if the status signal of the main system of the system is detected, it means that the system is the main system, if the system is not detected If the main system status signal exists, the other functions of the system are invalid.
  • the system is upgraded to the main system, taking over control output and communication, and implementing the redundant switching function of dual-system hot standby; preferably, the main system status signal can It is a pulse signal issued by a logic unit competing for the main system.
  • the pulse signal may be (but not limited to) a PWM vital signal.
  • the initial states of the primary logical unit and the secondary logical unit are both standby systems.
  • the logic unit as the main system collects the state signal of the main system as the logic unit of the standby system in real time. If the frequency of the state signal of the collected main system is consistent with the preset frequency, it indicates that the logic unit as the standby system is the main system. .
  • the logic unit of this department is taken as an example for illustration.
  • the steps of the switching method of the logic unit of this department are as follows,
  • the logic unit of this department obtains the board identification number of this department
  • the logic unit of the department acquires the communication information between the department and the counterpart;
  • step S3 The logic unit of this department performs a self-check. If the self-check fails, step S3-1 is executed; if the self-check passes, step S4 is executed;
  • step S4-1 determines whether the system is the backup system. If the logic unit of the system is not the backup system, step S4-1 is executed; if the logic unit of the system is the backup system, step S5 is executed;
  • step S4-1 the logic unit of this department is the main department, then step S4-2 is executed;
  • step S4-2 The logic unit of the system determines whether the opposite system is the main system. If the opposite system is the main system, the dual-system hot standby is a failure mode, and the logic unit of the corresponding system and the opposite logic unit perform downtime; If the logical unit of the opposite system is not the main system, step S7 is executed;
  • the logical unit of the system determines whether the logical unit of the system is a backup system. If the logical unit of the system is not a backup system, step S5-1 is executed; if the logical unit of the system is a backup system, step S6 is executed. ;
  • the logical unit of the system determines whether the logical unit of the system is the main system. If the logical unit of the system is the main system, the logical unit of the system is the standby system; if the logical unit of the system is not the main system, step S5 is executed. -2;
  • step S5-2 The logical unit of the system determines whether the communication between the logical unit of the system and the logical unit of the system is interrupted. If the communication between the logical unit of the system and the logical unit of the system is not interrupted, step S2 is executed; If the communication state of the logic unit is interrupted, step S5-3 is executed;
  • the logical unit of the system determines whether the main logic state signal is generated by the corresponding logical unit. If the main logic state signal is not generated by the corresponding logical unit, step S7 is executed; The logical unit is the standby system;
  • the logic unit of this system controls output and communication, and generates and outputs the status signal of the main system.
  • the above-mentioned logical units of the system and the pair of logic units, the series and the pair of systems, the main system and the standby system are relative concepts, and any of the logic units of the dual-system hot standby is relative to It is the logical unit or the corresponding system of itself, and it is the logical unit or the corresponding system of the other logical unit.
  • the logical unit of this system and the logical unit of the opposite system are the opposite system.
  • the logical units of the system and the system of the system determine the status of the system or the system of the main system and the system of the system, it also includes the use of global variables to define the system and the system of the system, for example, the main system is 0xAA, the system of the system 0x55, the logical unit of the system and/or the logical unit of the system are all the backup system 0x55 during initialization. If the logical unit of the system or the logical unit of the backup system becomes the main system after the main-standby competition, it will be the logical unit of the main system The global variable is modified to 0xAA. At the same time, the logical unit of the corresponding department or the logical unit of the opposite department communicates with the opposite department to obtain the global variable data of the opposite department and determine the status of the active and standby systems of the opposite department.
  • the main system is 0xAA
  • the system of the system 0x55 the system of the system 0x55
  • an embodiment of the present disclosure introduces a dual-system hot-standby system applied to an automatic train operation system, which includes a local logic unit and a counterpart logic unit that are mutually redundant.
  • Both the logic unit and the counterpart logic unit include: the main and standby system competition module is used for the local logic unit and the counterpart logic unit to compete with the counterpart system; the signal generation module is used to generate and output the local logic unit and the counterpart system The main system status signal of the logic unit. Further, the signal generation module is also used to collect the main system status signal output from the system. Therefore, the signal generation module of the logic system unit and the signal generation module of the system logic unit Communicate through wireless signals.
  • the signal generation module is used to generate the main system status signal of the own department and collect the main system status signal of the opposite system.
  • the frequency of the collected main system status signal is consistent with the preset value, it indicates that the opposite system is The main system, further, the signal is directly generated and checked by the CPU of the logic unit, and the signal is output when the logic unit of the own department or the logic unit of the opposite system competes for the master system, and the signal is not generated when it is down or as a standby system.
  • the main system status signal may be a PWM pulse signal.
  • the local logic unit and the counterpart logic unit also include a board identification acquisition module, a first communication module, and a self-test module, wherein the board identification acquisition module is used to acquire the local logic unit and the counterpart logic unit.
  • the board identification number is used to distinguish the relationship between the main logical unit and the backup logical unit, and further used to distinguish other functional units connected externally by the main logical unit.
  • the first communication module is used to realize the communication between the logic unit of the system and the logic unit of the system and the system of the logic system of the system, further, the A communication channel.
  • the first communication channel is a redundant 2-way SBP communication bus, and the 2-way SBP communication buses are SBP1 and SBP2, respectively.
  • the self-inspection module is used for self-inspection of the logic unit of the system and the logic unit of the system.
  • the self-inspection includes (but not limited to) FRAM self-inspection, Flash self-inspection, RTC read-write self-inspection, external CAN communication initialization self-inspection, and initial SBP communication initiation self-inspection; when the logic unit of the department and/or When the system logic unit fails the self-check, the system logic unit and/or the system logic unit cuts off the output and communication of the system department, and performs downtime.
  • the logical unit of the system and the logical unit of the system also include a fault processing module and a second communication module.
  • the fault processing module is used to cut off the output and communication of the logical unit of the system and the logical unit of the system, and perform downtime;
  • second The communication module is used to realize the output and communication between the logic unit of the system and the logic unit of the system.
  • the dual-system hot standby implements functions such as input data collection, external output control, and external communication.
  • the active-standby system competition module performs the active-standby system based on one or a combination of a signal generation module, a board identification acquisition module, a first communication module, a self-test module, a fault processing module, and a second communication module Competition, the logic unit of the main system of competition gets control of output and communication, and the logic unit of the competition of the standby system is in hot standby state.
  • an embodiment of the present disclosure also introduces an automatic train operation system.
  • the automatic train operation system includes an output unit, a communication unit, an interface unit, and the above-mentioned logic unit and alignment logic Unit, the local logic unit, the counterpart logic unit, the output unit, and the communication unit are all connected to the interface unit, wherein the local logic unit and the counterpart logic unit are mutually redundant and used to realize the claims The mentioned switching method.
  • the logic unit of the local system and the logic unit of the opposite system are connected to each other through two redundant SBP buses to realize data exchange between the active and standby systems.
  • the two SBP communication buses are SBP1.
  • SBP2 With SBP2.
  • the native logic unit and the counterpart logic unit also communicate wirelessly.
  • the native logic unit and the counterpart logic unit can output and collect the master system status signal output by the counterpart system.
  • the master The system status signal is the PWM life dynamic signal.
  • the output unit is used to realize the external output of the logic unit of the system and the logic unit of the system;
  • the communication unit is used to communicate between the logic unit of the system and the logic unit of the system and the outside;
  • the interface unit includes Two-way power bus, two-way redundant communication bus and board identification are used to realize the output and communication between the logic unit of this system and the logic unit of the system and the output unit and communication unit respectively.
  • the power bus includes 5V and 24V power buses; the two redundant communication buses that are mutually redundant are two CAN communication buses that are mutually redundant, preferably, the two mutually redundant CAN buses
  • the communication buses are CAN0 and CAN1 respectively, where CAN0 is the main bus and CAN1 is the backup bus.
  • CAN0 is the main bus
  • CAN1 is the backup bus.
  • the logic unit of the system is connected to the output unit and input through the CAN0 communication bus.
  • Unit, communication unit and other units to control the output and communication of the automatic train running system as the system's counterpart logic unit, it connects the output unit, input unit, and communication unit through the CAN1 communication bus, and the system receives communication information from the input unit and communication unit , But no data is sent.
  • the system further includes a power supply unit connected to the interface unit, an input unit, and a recording unit, wherein the power supply unit is used to supply power to the train automatic operation system; the input unit is used to implement the train automatic Input collection of the running system; the recording unit is used to realize data recording of the automatic train running system.
  • the local logic unit, the counterpart logic unit, the output unit, the communication unit, the input unit, and the recording unit are all connected to the 2-way power bus, the redundant 2-way communication bus, and the interface identification bus of the interface unit ,
  • the power supply units are respectively connected to the power supply bus of the interface unit to realize the control of the automatic train running system.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Hardware Redundancy (AREA)

Abstract

A dual-system hot backup switching method and system applied to an automatic running system of a train. The method comprises: first, a present-system logical unit and a peer-system logical unit perform primary/backup system contention; then, when becoming a primary system by means of the contention, the present-system logical unit or the peer-system logical unit controls outputs and communications, and outputs a primary system state signal. Primary/backup system switching is implemented by means of dual-system hot backup switching, without adding a reverse switching unit or a device having a function similar to that of the reverse switching unit, thereby improving system reliability.

Description

一种应用于列车自动运行系统的双系热备切换方法及系统Double-system hot backup switching method and system applied to train automatic operation system
本申请要求在2019年01月07日在中国专利局递交的、申请号为“201910012599.3”、发明名称为“一种应用于列车自动运行系统的双系热备切换方法及系统”的优先权,其全部内容通过引用结合在本申请中。This application requires the priority of the application number "201910012599.3" and the invention title "a dual-system hot standby switching method and system applied to the automatic train operation system" filed on January 7, 2019 at the China Patent Office, The entire contents are incorporated by reference in this application.
技术领域Technical field
本公开属于轨道交通领域,特别涉及一种应用于列车自动运行系统的双系热备切换方法及系统。The present disclosure belongs to the field of rail transit, and particularly relates to a dual-system hot backup switching method and system applied to an automatic train running system.
背景技术Background technique
现有的列车自动运行系统双机热备结构包括主系、备系、倒机(管理)单元等。从而双机热备的切换方法为:当主系故障时,倒切单元切除主系输出,备系升级为主系。但存在当主机、备机与倒切单元的通信均故障而其他功能正常时,倒机(管理)单元切除主备系的输出并退出ATO,或者当切除单元本身通信故障时也会影响系统功能,从而导致退出ATO,因此现有的双机热备可靠性较低。The existing dual-machine hot backup structure of the automatic train running system includes a main system, a backup system, and a reverse (management) unit. Therefore, the switching method of the dual-system hot backup is: when the main system fails, the reverse cutting unit cuts off the output of the main system, and the backup system is upgraded to the main system. However, when the communication between the host, the backup machine and the reverse cutting unit is faulty and other functions are normal, the reverse (management) unit cuts off the output of the main backup system and exits the ATO, or when the communication failure of the removal unit itself also affects the system function , Which leads to withdrawal from ATO, so the existing dual-machine hot backup has low reliability.
发明内容Summary of the invention
本公开要解决的技术问题在于克服现有技术的不足,提供了一种应用于列车自动运行系统的双系热备切换方法及系统,通过双系热备之间的功能实现主备系切换,无需增加倒切(管理)单元或功能类似倒切(管理)单元的设备,提升系统的可靠性。The technical problem to be solved by the present disclosure is to overcome the shortcomings of the prior art, and provides a dual-system hot backup switching method and system applied to the train automatic operation system, and realizes the main-standby system switching through the functions between the dual-system hot backup, There is no need to add a reverse cutting (management) unit or a device with a function similar to a reverse cutting (management) unit to improve the reliability of the system.
有鉴于此,本公开的目的在于提供一种应用于列车自动运行系统的双系热备切换方法,采用以下技术方案:In view of this, the purpose of the present disclosure is to provide a dual-system hot standby switching method applied to the automatic train running system, adopting the following technical solutions:
一种应用于列车自动运行系统的双系热备切换方法,所述切换方法包括,A dual-system hot backup switching method applied to an automatic train running system. The switching method includes:
本系逻辑单元与对系逻辑单元进行主备系竞争;The logical unit of this department competes with the main logical unit of the logical unit;
所述本系逻辑单元或对系逻辑单元竞争为主系时,控制输出与通信,并输出主系状态信号。When the logical unit of the local system or the logical unit of the opposing system competes for the primary system, it controls output and communication, and outputs the status signal of the primary system.
进一步地,包括进行以下一种或多种主备系竞争:Further, it includes competition for one or more of the following primary and backup systems:
所述本系逻辑单元与对系逻辑单元均为备系时,则所述本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争;When both the local logic unit and the counterpart logic unit are backup systems, the primary logic unit and the counterpart logic unit compete with each other through the board identification number;
所述本系逻辑单元为备系,对系逻辑单元不为备系时,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争;If the logical unit of the system is the backup system, and the logical unit of the system is not the backup system, then the logical unit of the system is to determine whether the logical unit of the system is competing for the main system;
所述本系逻辑单元为主系,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争。If the logical unit of the local system is the primary system, the logical unit of the local system determines whether the logical unit of the local system is competing for the primary and backup systems.
进一步地,所述本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争包括,Further, the competition between the logical unit of the system and the logical unit of the system through the card identification number includes:
默认本系逻辑单元的板卡识别号对应主系,则本系逻辑单元为主系。By default, the board identification number of the logical unit of this system corresponds to the main system, then the logical unit of this system is the main system.
进一步地,所述本系逻辑单元为备系,对系逻辑单元不为备系时,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争包括,Further, if the logical unit of the system is the backup system, and the logical unit of the system is not the backup system, then the logical unit of the system can determine whether the logical unit of the system is competing for the main system and the primary system includes,
所述对系逻辑单元为主系,则本系逻辑单元为备系;If the logical unit of the opposite system is the main system, the logical unit of the system is the standby system;
所述对系逻辑单元不为主系,则所述本系逻辑单元检测与对系逻辑单元之间的通信是否为中断,若通信未中断,则本系逻辑单元继续获取与对系的之间的通信信息;若通信中断,则本系逻辑单元检测对系逻辑单元是否输出主系状态信号,若检测到主系状态信号,则本系逻辑单元为备系,若未检测到主系状态信号,则本系逻辑单元升级为主系。If the opposite logic unit is not the main department, the native logic unit detects whether the communication with the opposite logic unit is interrupted, and if the communication is not interrupted, the native logic unit continues to acquire the If the communication is interrupted, the logical unit of the system will detect whether the logical unit of the system outputs the status signal of the primary system. If the status signal of the primary system is detected, the logical unit of the system will be the standby system. If the status signal of the primary system is not detected , The logical unit of this department is upgraded to the main department.
进一步地,所述本系逻辑单元为主系,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争包括,Further, if the logical unit of the local system is the primary system, then the logical unit of the local system determines whether the logical unit of the primary system is competing for the primary and secondary systems by determining whether the logical unit of the primary system includes,
所述对系逻辑单元为主系,则所述双系热备为故障状态,所述本系逻辑单元与对系逻辑单元均执行宕机;If the dual logical unit is the primary system, the dual-system hot standby is in a fault state, and both the local logical unit and the dual logical unit perform downtime;
所述对系逻辑单元不为主系,则本系逻辑单元为主系。If the logical unit of the opposite system is not the main system, the logical unit of the current system is the main system.
进一步地,所述主备系竞争之前还包括本系逻辑单元与对系逻辑 单元分别获取本系的以下一种或多种运行信息,Further, before the main-standby system competes, the logical unit of the system and the logical unit of the corresponding system respectively obtain one or more of the following operating information of the system,
所述本系逻辑单元与对系逻辑单元分别获取自身的板卡识别号、所述本系逻辑单元与对系逻辑单元分别获取各自与对系的通信信息、所述本系逻辑单元与对系逻辑单元对自身进行自检。The native logic unit and the twin logic unit obtain their own board identification numbers, the native logic unit and twin logic unit respectively acquire their respective communication information with the twin system, the native logic unit and twin system The logic unit self-tests itself.
进一步地,所述本系逻辑单元与对系逻辑单元的初始化状态均为备系。Further, the initialization states of the logical unit of the local system and the logical unit of the corresponding system are both standby systems.
进一步地,所述方法还包括,Further, the method further includes,
当所述本系逻辑单元或对系逻辑单元作为主系发生故障时,则作为主系的逻辑单元执行自动宕机并切除输出与通信,同时,作为备系的逻辑单元检测主系是否输出主系状态信号,若检测不到,作为备系的逻辑单元升级为主系,接管控制输出与通信并生成、输出主系状态信号。When the logical unit of the corresponding system or the logical unit of the corresponding system fails as the main system, the logical unit as the main system performs automatic shutdown and cuts off the output and communication. At the same time, the logical unit as the backup system detects whether the main system outputs the main unit If the system status signal cannot be detected, the logical unit as the backup system is upgraded to the main system, taking over control output and communication and generating and outputting the main system status signal.
进一步地,所述本系逻辑单元与对系逻辑单元对本系进行自检包括,Further, the self-checking of the logic unit of the department and the logic unit of the department includes,
所述本系逻辑单元和/或对系逻辑单元对本系的自检不通过,则所述本系逻辑单元和/或对系逻辑单元切除输出与通信,并执行宕机。If the self-test of the own logic unit and/or the pair logic unit fails the own department, the output and communication of the own logic unit and/or pair logic unit are cut off, and downtime is executed.
本公开的目的还在于提供一种应用于列车自动运行系统的双系热备系统,包括互为冗余的本系逻辑单元和对系逻辑单元,其中,所述本系逻辑单元与对系逻辑单元均包括,The purpose of the present disclosure is also to provide a dual-system hot standby system applied to an automatic train operation system, which includes a local logic unit and a counterpart logic unit that are mutually redundant, wherein the local logic unit and the counterpart logic Units include,
主备系竞争模块,用于本系逻辑单元与对系逻辑单元进行主备系竞争;The main-standby competition module is used for the main-standby competition between the logical unit of the department and the logical unit of the department;
信号发生模块,用于本系逻辑单元或对系逻辑单元竞争为主系时,生成、输出主系状态信号。The signal generation module is used to generate and output the status signal of the main system when the logical unit of the corresponding system or the logical unit of the corresponding system competes for the main system.
进一步地,所述本系逻辑单元与对系逻辑单元还均包括,Further, the logical unit of the system and the logical unit of the system also include,
板卡标识获取模块,用于获取本系逻辑单元、对系逻辑单元的板卡识别号;The board identification acquisition module is used to obtain the board identification number of the logic unit of the system and the logic unit of the system;
第一通信模块,用于实现本系逻辑单元和对系逻辑单元与对系之 间的通信;The first communication module is used to realize the communication between the logical unit of the system and the logical unit of the system and the system of the system;
自检模块,用于本系逻辑单元与对系逻辑单元进行自检。The self-check module is used for self-check of the logic unit of this department and the logic unit of this department.
进一步地,所述本系逻辑单元与对系逻辑单元还均包括,Further, the logical unit of the system and the logical unit of the system also include,
故障处理模块,用于本系逻辑单元和对系逻辑单元切除输出与通信,并执行宕机。The fault processing module is used to cut off the output and communication of the logic unit of the system and the logic unit of the system, and perform downtime.
进一步地,所述本系逻辑单元与对系逻辑单元还均包括,Further, the logical unit of the system and the logical unit of the system also include,
第二通信模块,用于实现本系逻辑单元和对系逻辑单元对外之间的输出与通信。The second communication module is used to realize the output and communication between the logic unit of the system and the logic unit of the system.
本公开的目的还在于提供一种列车自动运行系统,所述自动运行系统包括,输出单元、通信单元、接口单元以及上述所述的本系逻辑单元与对系逻辑单元,所述本系逻辑单元、对系逻辑单元、输出单元、通信单元均连接至接口单元,其中,The purpose of the present disclosure is also to provide an automatic train running system, which includes an output unit, a communication unit, an interface unit, and the above-mentioned logic unit and counterpart logic unit described above. , The logic unit, output unit, and communication unit are all connected to the interface unit, where,
所述本系逻辑单元与对系逻辑单元用于实现上述所述的切换方法;The local logic unit and the counterpart logic unit are used to implement the above-mentioned switching method;
所述输出单元,用于实现本系逻辑单元与对系逻辑单元对外之间的输出;The output unit is used to realize the output between the logic unit of the current department and the logic unit of the opposite department;
所述通信单元,用于实现本系逻辑单元与对系逻辑单元对外之间的通信;The communication unit is used to realize the communication between the logic unit of the current department and the logic unit of the opposite department;
所述接口单元,用于实现本系逻辑单元、对系逻辑单元分别与输出单元、通信单元之间的输出、通信。The interface unit is used to realize the output and communication between the logic unit of the system and the logic unit of the system and the output unit and the communication unit, respectively.
进一步地,所述自动运行系统还包括,与接口单元连接的电源单元、输入单元、记录单元,其中,Further, the automatic operation system further includes a power supply unit, an input unit, and a recording unit connected to the interface unit, wherein,
所述电源单元,用于实现对所述自动运行系统供电;The power supply unit is used to supply power to the automatic operation system;
所述输入单元,用于实现所述自动运行系统的输入采集;The input unit is used to realize input collection of the automatic operation system;
所述记录单元,用于实现所述自动运行系统的数据记录。The recording unit is used to realize data recording of the automatic operation system.
进一步地,所述接口单元包括2路电源总线、互为冗余的2路通信总线、板卡标识。Further, the interface unit includes a 2-way power bus, a 2-way communication bus that are mutually redundant, and a board identification.
本公开的双系热备仅通过本系逻辑单元与对系逻辑单元的逻辑判断实现双系热备的切换方法,提高了双系热备切换的可靠性,进一步地,所述本系逻辑单元与备系逻辑单元均能够生成主系状态信号,且作为主系的逻辑单元输出主系状态信号,备系或宕机的逻辑单元则不输出主系状态信号,从而所述双系热备之间的通信状态出现异常时,通过检测主系状态信号进一步地确定本系逻辑单元与备系逻辑单元的主备系关系,使得双系热备的切换方法更具有逻辑性,提高了双系热备切换的安全性。The dual-system hot backup of the present disclosure realizes the switching method of the dual-system hot backup only by the logical judgment of the logical unit of the system and the logical unit of the system, which improves the reliability of the switching of the dual-system hot backup. Both the logical unit of the standby system can generate the status signal of the primary system, and the logical unit as the primary system outputs the status signal of the primary system, and the logical unit of the standby system or the downtime unit does not output the status signal of the primary system. When the communication state between the two is abnormal, the relationship between the main logic unit and the backup logic unit is further determined by detecting the main system status signal, so that the switching method of the dual system hot standby is more logical, and the dual system thermal Switching safety.
本公开的其它特征和优点将在随后的说明书中阐述,并且,部分地从说明书中变得显而易见,或者通过实施本公开而了解。本公开的目的和其他优点可通过在说明书、权利要求书以及附图中所指出的结构来实现和获得。Other features and advantages of the present disclosure will be explained in the subsequent description, and partly become obvious from the description, or be understood by implementing the present disclosure. The objects and other advantages of the present disclosure can be realized and obtained by the structures indicated in the description, claims, and drawings.
附图说明BRIEF DESCRIPTION
为了更清楚地说明本公开实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图是本公开的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly explain the embodiments of the present disclosure or the technical solutions in the prior art, the following will briefly introduce the drawings used in the description of the embodiments or the prior art. Obviously, the drawings in the following description These are some embodiments of the present disclosure. For those of ordinary skill in the art, other creative drawings can be obtained based on these drawings without creative efforts.
图1示出了本公开实施例中的一种应用于列车自动运行系统的双系热备切换方法流程示意图;FIG. 1 shows a schematic flowchart of a dual-system hot standby switching method applied to an automatic train running system in an embodiment of the present disclosure;
图2示出了本公开实施例中的一种双系热备中本系逻辑单元切换方法流程示意图;FIG. 2 shows a schematic flow chart of a method for switching a logic unit of a local system in a dual-system hot backup in an embodiment of the present disclosure;
图3示出了本公开实施例中的一种应用于列车自动运行系统的双系热备系统结构示意图;3 shows a schematic diagram of a dual-system hot backup system applied to an automatic train running system in an embodiment of the present disclosure;
图4示出了本公开实施例中的一种列车自动运行系统结构示意图。FIG. 4 shows a schematic structural diagram of a train automatic operation system in an embodiment of the present disclosure.
具体实施方式detailed description
为使本公开实施例的目的、技术方案和优点更加清楚,下面将结合本公开实施例中的附图,对本公开实施例中的技术方案进行清楚、完整地说明,显然,所描述的实施例是本公开一部分实施例,而不是全部的实施例。基于本公开中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本公开保护的范围。To make the objectives, technical solutions, and advantages of the embodiments of the present disclosure more clear, the technical solutions in the embodiments of the present disclosure will be clearly and completely explained below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments It is a part of the embodiments of the present disclosure, but not all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present disclosure.
如图1所示,本公开实施例中介绍了一种应用于列车自动运行系统的双系热备切换方法,所述切换方法包括,首先,所述本系逻辑单元与对系逻辑单元进行主备系竞争;然后,所述本系逻辑单元或对系逻辑单元竞争为主系时,控制输出与通信,并输出主系状态信号。竞争为主系的逻辑单元控制输出单元与通信单元,实现列车自动运行系统的运行控制。As shown in FIG. 1, an embodiment of the present disclosure introduces a dual-system hot standby switching method applied to an automatic train running system. The switching method includes, first, the main logic unit and the counter logic unit The standby system competes; then, when the logical unit of the local system or the logical unit of the opposing system competes for the primary system, it controls output and communication, and outputs the status signal of the primary system. The logic unit of the main system controls the output unit and the communication unit to realize the operation control of the automatic train running system.
所述本系逻辑单元与对系逻辑单元进行主备系竞争之前,还包括分别获取本系的一种或多种运行信息,首先,所述本系逻辑单元与对系逻辑单元分别获取自身的板卡识别号,其次,所述本系逻辑单元与对系逻辑单元分别获取与对系的通信信息,然后,所述本系逻辑单元与对系逻辑单元分别对自身进行自检。Before the main logical unit and the main logical unit compete for the main logical unit, it also includes obtaining one or more operating information of the main unit respectively. First, the main logical unit and the main logical unit respectively obtain their own The board identification number. Secondly, the local logic unit and the counterpart logic unit respectively obtain the communication information of the counterpart system, and then, the local logic unit and the counterpart logic unit respectively perform self-checks on themselves.
具体的,所述本系逻辑单元与对系逻辑单元分别获取自身的板卡识别号,所述板卡识别号用于区分本系逻辑单元和对系逻辑单元,优选地,获取板卡识别号时,本系逻辑单元和对系逻辑单元通过CPU的4个IO管脚读取背板板卡识别号,进一步地,本系逻辑单元和对系逻辑单元若未插入背板时获取的本系板卡识别号均为1111,当本系逻辑单元和对系逻辑单元插入背板时,通过不同管脚接地对本系逻辑单元和对系逻辑单元进行区分,比如所述本系逻辑单元的板卡识别号为1110,所述对系逻辑单元的板卡识别号为1101。Specifically, the local logic unit and the counterpart logic unit respectively obtain their own board identification numbers, and the board identification number is used to distinguish the local logic unit from the counterpart logic unit. Preferably, the board identification number is acquired At this time, the logic unit of the system and the system logic unit read the backplane board identification number through the 4 IO pins of the CPU. Further, the system logic unit and the system logic unit are obtained if the system logic unit and the system logic unit are not inserted into the backplane The board identification number is 1111. When the logic unit of this department and the counterpart logic unit are inserted into the backplane, the logic unit of this department and the logic unit of the other department are distinguished by grounding different pins, such as the board of the logic unit of the said department The identification number is 1110, and the board identification number of the logic unit is 1101.
进一步地,所述通信信息包括(但不限于)主备状态、平台同步 周期次数、应用任务周期、应用周期同步数据。本系逻辑单元与备系逻辑单元通过获取各自与对系的通信信息,既能够确保双系热备的之间的通信信息保持一致,又进一步地检测了双系热备间的通信是否正常,保证了双系热备工作时的可靠性。Further, the communication information includes (but is not limited to) the active/standby state, the number of platform synchronization cycles, the application task cycle, and application cycle synchronization data. By acquiring the communication information between each logical unit and the standby logical unit, the logical information between the dual-system hot standby and the dual-system hot standby can be ensured to be consistent, and the communication between the dual-system hot standby is further detected. Ensure the reliability of the dual-system hot backup.
所述本系逻辑单元与对系逻辑单元对本系进行自检,所述自检包括(但不限于)FRAM自检、Flash自检、RTC读写自检、对外通信初始化自检、与对系通信初始化自检,当所述本系逻辑单元和/或对系逻辑单元未通过自检时,则所述本系逻辑单元和/或对系逻辑单元切断自身与对外单元之间的通信、输出以及与自身与对系之间的通信,并执行宕机;所述本系逻辑单元和/或对系逻辑单元通过自检时,所述本系逻辑单元与对系逻辑单元进行主备系竞争。The logic unit of the system and the logic unit of the system perform self-test on the system. The self-test includes (but not limited to) FRAM self-test, Flash self-test, RTC read-write self-test, external communication initialization self-test, and the system Communication initialization self-test, when the logical unit of the system and/or the logical unit of the system fails the self-test, the logical unit of the system and/or the logical unit of the system cuts off the communication and output between itself and the external unit And communication with itself and the counterpart system, and perform downtime; when the native logic unit and/or the counterpart logic unit passes the self-test, the native logic unit competes with the counterpart logic unit .
所述本系逻辑单元与对系逻辑单元进行主备系竞争时还包括,首先判断本系逻辑单元的主备系状态,再判断对系逻辑单元的主备系状态。具体的,所述本系逻辑单元与对系逻辑单元的主备系状态包括以下一种或多种:本系逻辑单元与对系逻辑单元均为主系、本系逻辑单元与对系逻辑单元均为备系、所述本系逻辑单元为备系,本系逻辑单元无法判断对系逻辑单元的主备系状态、所述本系逻辑单元为备系,所述对系逻辑单元为主系、所述本系逻辑单元为主系,所述对系逻辑单元为备系。其中,When the primary logical unit competes with the primary logical unit in the primary logical unit, the primary logical unit state of the primary logical unit is determined first, and then the primary logical unit state of the primary logical unit is determined. Specifically, the states of the primary and secondary logical units of the logical units of the corresponding system and the logical units of the corresponding system include one or more of the following: the logical units of the logical system and the logical system of the primary system are both the logical units of the primary system, the logical units of the logical system and the logical system of the logical system All of them are backup systems. The logical units of this system are backup systems. The logical units of this system cannot determine the status of the primary and secondary systems of the logical units of this system. The logical units of this system are the backup systems. The logical units of this system are the primary systems. The logical unit of the system is the main system, and the logical unit of the system is the standby system. among them,
所述本系逻辑单元与对系逻辑单元均为主系,则所述双系热备为故障模式,所述本系逻辑单元与对系逻辑单元均执行宕机。Both the local logic unit and the counterpart logic unit are the master system, then the dual-system hot standby is a failure mode, and the local logic unit and the counterpart logic unit both perform downtime.
所述本系逻辑单元与对系逻辑单元均为备系,所述本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争,其中,若本系逻辑单元的板卡识别号对应主系,则本系逻辑单元为主系。优选地,所述主系对应的板卡识别号为1110,备系对应的板卡识别号为1101,则若所述本系逻辑单元的板卡识别号为1110时,则系统默认所述本系逻辑单元为主系。The local logic unit and the counterpart logic unit are both backup systems, and the local logic unit and the counterpart logic unit compete for the primary and secondary systems through the board identification number. If the board identification number of the local logic unit is Corresponding to the main department, the logical unit of this department is the main department. Preferably, the board identification number corresponding to the main system is 1110 and the board identification number corresponding to the standby system is 1101, if the board identification number of the logical unit of the system is 1110, the system defaults to the Department of logical units is the main department.
所述本系逻辑单元为备系,本系逻辑单元无法判断对系逻辑单元的主备系状态,所述本系逻辑单元判断与对系逻辑单元之间的通信是否中断,若所述本系逻辑单元与对系逻辑单元之间的通信未中断,则所述本系逻辑单元重新执行上述所述切换方法,具体的,所述本系逻辑单元重新获取与对系的通信信息;若所述本系逻辑单元与对系逻辑单元的之间的通信中断,则所述本系逻辑单元检测对系逻辑单元是否输出主系状态信号,若所述本系逻辑单元检测到对系逻辑单元输出的主系状态信号,则所述对系逻辑单元为主系,所述本系逻辑单元为备系;若未检测到对系逻辑单元输出的主系状态信号,则本系逻辑单元升级为主系。The native logic unit is a standby system, and the native logic unit cannot determine the status of the active and standby systems of the opposite logic unit. The native logic unit determines whether the communication with the opposite logic unit is interrupted. If the communication between the logic unit and the counterpart logic unit is not interrupted, the native logic unit re-executes the above-mentioned switching method. Specifically, the native logic unit reacquires the communication information with the counterpart system; If the communication between the logical unit of the system and the logical unit of the system is interrupted, the logical unit of the system detects whether the logical unit of the system outputs the status signal of the main system, and if the logical unit of the logical system detects the output of the logical unit of the system The main system status signal, the opposite logic unit is the main system, and the local logic unit is the backup system; if the main system status signal output from the opposite system logic unit is not detected, the local logic unit is upgraded to the main system .
进一步地,所述本系逻辑单元和/或对系逻辑单元处于宕机或备系时,不生成、输出主系状态信号。因此,当本系逻辑单元或对系逻辑单元检测各自的对系是否输出主系状态信号时,若检测到对系的主系状态信号,则说明对系是主系,若检测不到对系的主系状态信号存在,则对系的其它功能已失效,本系升级为主系,接管控制输出与通信,实现双系热备的冗余切换功能;优选地,所述主系状态信号可以为竞争为主系的逻辑单元发出的脉冲信号,所述脉冲信号可以是(但不限于)PWM生命动态信号。Further, when the logical unit of the local system and/or the logical unit of the opposing system is in a downtime or standby system, the status signal of the primary system is not generated and output. Therefore, when the logical unit of the corresponding system or the logical unit of the corresponding system detects whether the respective system outputs the status signal of the main system, if the status signal of the main system of the system is detected, it means that the system is the main system, if the system is not detected If the main system status signal exists, the other functions of the system are invalid. The system is upgraded to the main system, taking over control output and communication, and implementing the redundant switching function of dual-system hot standby; preferably, the main system status signal can It is a pulse signal issued by a logic unit competing for the main system. The pulse signal may be (but not limited to) a PWM vital signal.
本实施例中,所述本系逻辑单元与对系逻辑单元进行主备系竞争之前,所述本系逻辑单元与对系逻辑单元的初始化状态均为备系。In this embodiment, before the primary logical unit and the primary logical unit compete for the primary and secondary logical units, the initial states of the primary logical unit and the secondary logical unit are both standby systems.
进一步地,当所述本系逻辑单元或对系逻辑单元作为主系发生故障时,则作为主系的逻辑单元执行自动宕机并切除输出与通信,同时,作为备系的逻辑单元检测主系是否输出主系状态信号,若检测不到,作为备系的逻辑单元升级为主系,接管控制输出与通信并生成、输出主系状态信号。优选地,作为主系的逻辑单元实时采集作为备系的逻辑单元的主系状态信号,若采集到的主系状态信号的频率与预设频率一致,则表明作为备系的逻辑单元为主系。Further, when the logical unit of the local system or the logical unit of the secondary system fails as the primary system, the logical unit of the primary system performs automatic shutdown and cuts off output and communication, and at the same time, the logical unit of the standby system detects the primary system Whether to output the main system status signal. If it cannot be detected, the logical unit as the backup system is upgraded to the main system, taking over control output and communication and generating and outputting the main system status signal. Preferably, the logic unit as the main system collects the state signal of the main system as the logic unit of the standby system in real time. If the frequency of the state signal of the collected main system is consistent with the preset frequency, it indicates that the logic unit as the standby system is the main system. .
如图2所示,以本系逻辑单元为例进行示例性说明,所述本系逻辑单元执行切换方法的步骤如下所示,As shown in FIG. 2, the logic unit of this department is taken as an example for illustration. The steps of the switching method of the logic unit of this department are as follows,
S1、本系逻辑单元获取本系的板卡识别号;S1. The logic unit of this department obtains the board identification number of this department;
S2、本系逻辑单元获取本系与对系之间的通信信息;S2. The logic unit of the department acquires the communication information between the department and the counterpart;
S3、本系逻辑单元进行自检,若自检不通过,则执行步骤S3-1;若自检通过,则执行步骤S4;S3. The logic unit of this department performs a self-check. If the self-check fails, step S3-1 is executed; if the self-check passes, step S4 is executed;
S3-1、本系逻辑单元切断输出与通信,并执行宕机;S3-1. The logic unit of this department cuts off output and communication, and executes downtime;
S4、本系逻辑单元判断本系是否为备系,本系逻辑单元若不为备系,则执行步骤S4-1,本系逻辑单元若为备系,则执行步骤S5;S4. The logic unit of the system determines whether the system is the backup system. If the logic unit of the system is not the backup system, step S4-1 is executed; if the logic unit of the system is the backup system, step S5 is executed;
S4-1、本系逻辑单元为主系,则执行步骤S4-2;S4-1, the logic unit of this department is the main department, then step S4-2 is executed;
S4-2、本系逻辑单元判断对系是否为主系,若对系为主系,则所述双机热备为故障模式,所述本系逻辑单元与对系逻辑单元执行宕机;若所述对系逻辑单元不为主系,则执行步骤S7;S4-2. The logic unit of the system determines whether the opposite system is the main system. If the opposite system is the main system, the dual-system hot standby is a failure mode, and the logic unit of the corresponding system and the opposite logic unit perform downtime; If the logical unit of the opposite system is not the main system, step S7 is executed;
S5、本系逻辑单元判断对系逻辑单元是否为备系,若所述对系逻辑单元不为备系,则执行步骤S5-1;若所述对系逻辑单元为备系,则执行步骤S6;S5. The logical unit of the system determines whether the logical unit of the system is a backup system. If the logical unit of the system is not a backup system, step S5-1 is executed; if the logical unit of the system is a backup system, step S6 is executed. ;
S5-1、本系逻辑单元判断对系逻辑单元是否为主系,若对系逻辑单元为主系,则本系逻辑单元为备系;若本系逻辑单元不为主系,则执行步骤S5-2;S5-1. The logical unit of the system determines whether the logical unit of the system is the main system. If the logical unit of the system is the main system, the logical unit of the system is the standby system; if the logical unit of the system is not the main system, step S5 is executed. -2;
S5-2、本系逻辑单元判断与对系逻辑单元之间的通信是否中断,若本系逻辑单元与对系逻辑单元之间的通信未中断,则执行步骤S2;若本系逻辑单元与对系逻辑单元的通信状态中断,则执行步骤S5-3;S5-2. The logical unit of the system determines whether the communication between the logical unit of the system and the logical unit of the system is interrupted. If the communication between the logical unit of the system and the logical unit of the system is not interrupted, step S2 is executed; If the communication state of the logic unit is interrupted, step S5-3 is executed;
S5-3、本系逻辑单元判断对系逻辑单元是否生成主系状态信号,若对系逻辑单元未生成主系状态信号,则执行步骤S7;若对系逻辑单元生成主系状态信号,则本系逻辑单元为备系;S5-3. The logical unit of the system determines whether the main logic state signal is generated by the corresponding logical unit. If the main logic state signal is not generated by the corresponding logical unit, step S7 is executed; The logical unit is the standby system;
S6、本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争,通过板卡识别号默认本系逻辑单元为主系;S6. The logical unit of the system and the logical unit of the system compete with each other through the card identification number, and the logical unit of the system defaults to the main system through the card identification number;
S7、本系逻辑单元为主系;S7, the logic unit of this department is the main department;
S8、本系逻辑单元控制输出与通信,并生成、输出主系状态信号。S8. The logic unit of this system controls output and communication, and generates and outputs the status signal of the main system.
本实施例中,上述所述的本系逻辑单元与对系逻辑单元、本系与对系、主系与备系均为相对概念,所述双系热备中的任一系逻辑单元相对于自身为本系逻辑单元或本系,相对于另一逻辑单元为对系逻辑单元或对系,本申请中,本系逻辑单元与对系逻辑单元互为对系。In this embodiment, the above-mentioned logical units of the system and the pair of logic units, the series and the pair of systems, the main system and the standby system are relative concepts, and any of the logic units of the dual-system hot standby is relative to It is the logical unit or the corresponding system of itself, and it is the logical unit or the corresponding system of the other logical unit. In this application, the logical unit of this system and the logical unit of the opposite system are the opposite system.
本实施例中,所述本系逻辑单元与对系逻辑单元判断本系或对系的主备系状态时还包括,采用全局变量对本系与备系进行定义,比如主系为0xAA,备系为0x55,初始化时本系逻辑单元和/或对系逻辑单元均为备系0x55,如果通过主备竞争后本系逻辑单元或备系逻辑单元变为主系,则将作为主系的逻辑单元的全局变量修改为0xAA。同时,本系逻辑单元或对系逻辑单元通过与对系进行通信,获取对系的全局变量数据,确定对系的主备系状态。In this embodiment, when the logical units of the system and the system of the system determine the status of the system or the system of the main system and the system of the system, it also includes the use of global variables to define the system and the system of the system, for example, the main system is 0xAA, the system of the system 0x55, the logical unit of the system and/or the logical unit of the system are all the backup system 0x55 during initialization. If the logical unit of the system or the logical unit of the backup system becomes the main system after the main-standby competition, it will be the logical unit of the main system The global variable is modified to 0xAA. At the same time, the logical unit of the corresponding department or the logical unit of the opposite department communicates with the opposite department to obtain the global variable data of the opposite department and determine the status of the active and standby systems of the opposite department.
如图3所示,本公开实施例中介绍了一种应用于列车自动运行系统的双系热备系统,包括互为冗余的本系逻辑单元和对系逻辑单元,其中,所述本系逻辑单元与对系逻辑单元均包括,主备系竞争模块用于本系逻辑单元和对系逻辑单元与对系进行主备系竞争;信号发生模块用于生成、输出本系逻辑单元和对系逻辑单元的主系状态信号,进一步地,所述信号发生模块还用于采集对系输出的主系状态信号,因此,所述本系逻辑单元的信号发生模块与对系逻辑单元的信号发生模块之间通过无线信号进行通信。As shown in FIG. 3, an embodiment of the present disclosure introduces a dual-system hot-standby system applied to an automatic train operation system, which includes a local logic unit and a counterpart logic unit that are mutually redundant. Both the logic unit and the counterpart logic unit include: the main and standby system competition module is used for the local logic unit and the counterpart logic unit to compete with the counterpart system; the signal generation module is used to generate and output the local logic unit and the counterpart system The main system status signal of the logic unit. Further, the signal generation module is also used to collect the main system status signal output from the system. Therefore, the signal generation module of the logic system unit and the signal generation module of the system logic unit Communicate through wireless signals.
优选的,所述信号发生模块用于生成本系的主系状态信号及采集对系的主系状态信号,当采集到的主系状态信号的频率与预设值一致时,则表明对系为主系,进一步地,信号由逻辑单元的CPU直接产生和检查,当所述本系逻辑单元或对系逻辑单元竞争为主系时输出该信号,宕机或者作为备系时不生成该信号,所述主系状态信号可以是PWM脉冲信号。Preferably, the signal generation module is used to generate the main system status signal of the own department and collect the main system status signal of the opposite system. When the frequency of the collected main system status signal is consistent with the preset value, it indicates that the opposite system is The main system, further, the signal is directly generated and checked by the CPU of the logic unit, and the signal is output when the logic unit of the own department or the logic unit of the opposite system competes for the master system, and the signal is not generated when it is down or as a standby system. The main system status signal may be a PWM pulse signal.
所述本系逻辑单元与对系逻辑单元还均包括板卡标识获取模块、第一通信模块、自检模块,其中,板卡标识获取模块,用于获取本系逻辑单元、对系逻辑单元的板卡识别号,具体的,所述板卡识别号用于区分本系逻辑单元与备系逻辑单元的主备系关系,进一步地,还用于区分主备系对外连接的其他功能性单元。第一通信模块,用于实现本系逻辑单元和对系逻辑单元与对系的之间的通信,进一步地,所述本系逻辑单元和对系逻辑单元的第一通信模块之间还包括第一通信通道,优选的,所述第一通信通道为互为冗余的2路SBP通信总线,所述2路SBP通信总线分别为SBP1与SBP2。所述自检模块,用于对本系逻辑单元与对系逻辑单元进行自检。所述自检包括(但不限于)FRAM自检、Flash自检、RTC读写自检、对外CAN通信初始化自检、与对系SBP通信初始化自检;当所述本系逻辑单元和/或对系逻辑单元未通过自检时,则所述本系逻辑单元和/或对系逻辑单元切断本系的输出与通信,并执行宕机。The local logic unit and the counterpart logic unit also include a board identification acquisition module, a first communication module, and a self-test module, wherein the board identification acquisition module is used to acquire the local logic unit and the counterpart logic unit. The board identification number. Specifically, the board identification number is used to distinguish the relationship between the main logical unit and the backup logical unit, and further used to distinguish other functional units connected externally by the main logical unit. The first communication module is used to realize the communication between the logic unit of the system and the logic unit of the system and the system of the logic system of the system, further, the A communication channel. Preferably, the first communication channel is a redundant 2-way SBP communication bus, and the 2-way SBP communication buses are SBP1 and SBP2, respectively. The self-inspection module is used for self-inspection of the logic unit of the system and the logic unit of the system. The self-inspection includes (but not limited to) FRAM self-inspection, Flash self-inspection, RTC read-write self-inspection, external CAN communication initialization self-inspection, and initial SBP communication initiation self-inspection; when the logic unit of the department and/or When the system logic unit fails the self-check, the system logic unit and/or the system logic unit cuts off the output and communication of the system department, and performs downtime.
所述本系逻辑单元与对系逻辑单元还均包括故障处理模块与第二通信模块,故障处理模块,用于本系逻辑单元和对系逻辑单元切除输出与通信,并执行宕机;第二通信模块,用于实现本系逻辑单元和对系逻辑单元对外之间的输出与通信,通过所述第二通信模块,双系热备实现输入数据采集、对外输出控制、对外通信等功能。The logical unit of the system and the logical unit of the system also include a fault processing module and a second communication module. The fault processing module is used to cut off the output and communication of the logical unit of the system and the logical unit of the system, and perform downtime; second The communication module is used to realize the output and communication between the logic unit of the system and the logic unit of the system. Through the second communication module, the dual-system hot standby implements functions such as input data collection, external output control, and external communication.
本实施例中,所述主备系竞争模块根据信号发生模块、板卡标识获取模块、第一通信模块、自检模块、故障处理模块、第二通信模块中的一种或组合进行主备系竞争,竞争为主系的逻辑单元则得到输出与通信的控制权,竞争为备系的逻辑单元则处于热备状态。In this embodiment, the active-standby system competition module performs the active-standby system based on one or a combination of a signal generation module, a board identification acquisition module, a first communication module, a self-test module, a fault processing module, and a second communication module Competition, the logic unit of the main system of competition gets control of output and communication, and the logic unit of the competition of the standby system is in hot standby state.
如图4所示,本公开实施例中还介绍了一种列车自动运行系统,所述列车自动运行系统包括,输出单元、通信单元、接口单元以及上述所述的本系逻辑单元与对系逻辑单元,所述本系逻辑单元、对系逻辑单元、输出单元、通信单元均连接至接口单元,其中,所述本系逻 辑单元与对系逻辑单元互为冗余,用于实现权利要求上述所述的切换方法。图4中,所述本系逻辑单元与对系逻辑单元通过互为冗余的2路SBP总线进行通信连接,以实现主备系间数据交互,其中,所述2路SBP通信总线分别为SBP1与SBP2。进一步地,所述本系逻辑单元与对系逻辑单元还进行无线通信,所述本系逻辑单元与对系逻辑单元能够输出、并采集对系输出的主系状态信号,优选地,所述主系状态信号为PWM生命动态信号。所述输出单元,用于实现本系逻辑单元与对系逻辑单元的对外输出;所述通信单元,用于实现本系逻辑单元、对系逻辑单元与对外之间进行通信;所述接口单元包括2路电源总线、互为冗余的2路通信总线、板卡标识,用于实现本系逻辑单元、对系逻辑单元分别与输出单元、通信单元之间的输出、通信。具体的,所述电源总线包括5V、24V电源总线;所述互为冗余的2路通信总线为2路互为冗余的CAN通信总线,优选的,所述2路互为冗余的CAN通信总线分别为CAN0与CAN1,其中,所述CAN0为主系总线,CAN1为备系总线,例如当本系逻辑单元为主系时,则本系逻辑单元通过CAN0通信总线连接至输出单元、输入单元、通信单元等其他单元,控制列车自动运行系统的输出与通信;作为备系的对系逻辑单元通过CAN1通信总线连接输出单元、输入单元、通信单元,备系接收输入单元、通信单元通信信息,但不发送数据。As shown in FIG. 4, an embodiment of the present disclosure also introduces an automatic train operation system. The automatic train operation system includes an output unit, a communication unit, an interface unit, and the above-mentioned logic unit and alignment logic Unit, the local logic unit, the counterpart logic unit, the output unit, and the communication unit are all connected to the interface unit, wherein the local logic unit and the counterpart logic unit are mutually redundant and used to realize the claims The mentioned switching method. In FIG. 4, the logic unit of the local system and the logic unit of the opposite system are connected to each other through two redundant SBP buses to realize data exchange between the active and standby systems. Among them, the two SBP communication buses are SBP1. With SBP2. Further, the native logic unit and the counterpart logic unit also communicate wirelessly. The native logic unit and the counterpart logic unit can output and collect the master system status signal output by the counterpart system. Preferably, the master The system status signal is the PWM life dynamic signal. The output unit is used to realize the external output of the logic unit of the system and the logic unit of the system; the communication unit is used to communicate between the logic unit of the system and the logic unit of the system and the outside; the interface unit includes Two-way power bus, two-way redundant communication bus and board identification are used to realize the output and communication between the logic unit of this system and the logic unit of the system and the output unit and communication unit respectively. Specifically, the power bus includes 5V and 24V power buses; the two redundant communication buses that are mutually redundant are two CAN communication buses that are mutually redundant, preferably, the two mutually redundant CAN buses The communication buses are CAN0 and CAN1 respectively, where CAN0 is the main bus and CAN1 is the backup bus. For example, when the logic unit of the system is the main system, the logic unit of the system is connected to the output unit and input through the CAN0 communication bus. Unit, communication unit and other units to control the output and communication of the automatic train running system; as the system's counterpart logic unit, it connects the output unit, input unit, and communication unit through the CAN1 communication bus, and the system receives communication information from the input unit and communication unit , But no data is sent.
所述系统还包括与接口单元连接的电源单元、输入单元、记录单元,其中,所述电源单元,用于实现对所述列车自动运行系统供电;所述输入单元,用于实现所述列车自动运行系统的输入采集;所述记录单元,用于实现所述列车自动运行系统的数据记录。The system further includes a power supply unit connected to the interface unit, an input unit, and a recording unit, wherein the power supply unit is used to supply power to the train automatic operation system; the input unit is used to implement the train automatic Input collection of the running system; the recording unit is used to realize data recording of the automatic train running system.
所述本系逻辑单元、对系逻辑单元、输出单元、通信单元、输入单元、记录单元均连接至所述接口单元的2路电源总线、互为冗余的2路通信总线以及接口标识总线上,所述电源单元分别连接至接口单元的电源总线上,以实现控制所述列车自动运行系统。The local logic unit, the counterpart logic unit, the output unit, the communication unit, the input unit, and the recording unit are all connected to the 2-way power bus, the redundant 2-way communication bus, and the interface identification bus of the interface unit , The power supply units are respectively connected to the power supply bus of the interface unit to realize the control of the automatic train running system.
尽管参照前述实施例对本公开进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本公开各实施例技术方案的精神和范围。Although the present disclosure has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments, or equivalently replace some of the technical features; and these Modifications or substitutions do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present disclosure.

Claims (16)

  1. 一种应用于列车自动运行系统的双系热备切换方法,其中,所述切换方法包括,A dual-system hot standby switching method applied to an automatic train running system, wherein the switching method includes,
    本系逻辑单元与对系逻辑单元进行主备系竞争;The logical unit of this department competes with the main logical unit of the logical unit;
    所述本系逻辑单元或对系逻辑单元竞争为主系时,控制输出与通信,并输出主系状态信号。When the logical unit of the local system or the logical unit of the opposing system competes for the primary system, it controls output and communication, and outputs the status signal of the primary system.
  2. 根据权利要求1所述的双系热备切换方法,其中,包括进行以下一种或多种主备系竞争:The dual-system hot-standby switching method according to claim 1, comprising one or more of the following main-standby system competitions:
    所述本系逻辑单元与对系逻辑单元均为备系时,则所述本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争;When both the local logic unit and the counterpart logic unit are backup systems, the primary logic unit and the counterpart logic unit compete with each other through the board identification number;
    所述本系逻辑单元为备系,对系逻辑单元不为备系时,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争;If the logical unit of the system is the backup system, and the logical unit of the system is not the backup system, then the logical unit of the system is to determine whether the logical unit of the system is competing for the main system;
    所述本系逻辑单元为主系,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争。If the logical unit of the local system is the primary system, the logical unit of the local system determines whether the logical unit of the local system is competing for the primary and backup systems.
  3. 根据权利要求2所述的双系热备切换方法,其中,所述本系逻辑单元与对系逻辑单元通过板卡识别号进行主备系竞争包括,The dual-system hot-standby switching method according to claim 2, wherein the competition between the logical unit of the local system and the logical unit of the primary system through the card identification number includes,
    若本系逻辑单元的板卡识别号对应主系,则本系逻辑单元为主系。If the board identification number of the logical unit of this department corresponds to the main system, the logical unit of this system is the main system.
  4. 根据权利要求2所述的双系热备切换方法,其中,所述本系逻辑单元为备系,对系逻辑单元不为备系时,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争包括,The dual-system hot standby switching method according to claim 2, wherein the local logic unit is a standby system, and when the opposite logic unit is not a standby system, the local logic unit determines whether the opposite logic unit is the master Competing in the main and standby departments includes,
    所述对系逻辑单元为主系,则本系逻辑单元为备系;If the logical unit of the opposite system is the main system, the logical unit of the system is the standby system;
    所述对系逻辑单元不为主系,则所述本系逻辑单元检测与对系逻辑单元之间的通信是否为中断,若通信未中断,则本系逻辑单元继续获取与对系的之间的通信信息;若通信中断,则本系逻辑单元检测对系逻辑单元是否输出主系状态信号,若检测到主系状态信号,则本系逻辑单元为备系,若未检测到主系状态信号,则本系逻辑单元升级为主系。If the logical unit of the opposite system is not the primary system, the logical unit of the native system detects whether the communication with the logical unit of the native system is interrupted. If the communication is not interrupted, the logical unit of the native system continues to acquire the If the communication is interrupted, the logical unit of the system will detect whether the logical unit of the system outputs the status signal of the primary system. If the status signal of the primary system is detected, the logical unit of the system will be the standby system. If the status signal of the primary system is not detected , The logical unit of this department is upgraded to the main department.
  5. 根据权利要求2所述的双系热备切换方法,其中,所述本系逻辑单元为主系,则本系逻辑单元通过判断对系逻辑单元是否为主系进行主备系竞争包括,The dual-system hot-standby switching method according to claim 2, wherein the logical unit of the local system is the primary system, and then the logical unit of the local system by judging whether the logical unit of the primary system is competing for the primary and secondary systems includes,
    所述对系逻辑单元为主系,则所述双系热备为故障状态,所述本系逻辑单元与对系逻辑单元均执行宕机;If the dual logical unit is the primary system, the dual-system hot standby is in a fault state, and both the local logical unit and the dual logical unit perform downtime;
    所述对系逻辑单元不为主系,则本系逻辑单元为主系。If the logical unit of the opposite system is not the main system, the logical unit of the current system is the main system.
  6. 根据权利要求1-5任一所述的双系热备切换方法,其中,所述主备系竞争之前还包括本系逻辑单元与对系逻辑单元分别获取本系的以下一种或多种运行信息,The dual-system hot-standby switching method according to any one of claims 1 to 5, wherein before the main-standby system competes, the system logic unit and the system logic unit respectively obtain one or more of the following operations of the system information,
    所述本系逻辑单元与对系逻辑单元分别获取自身的板卡识别号、所述本系逻辑单元与对系逻辑单元分别获取各自与对系的通信信息、所述本系逻辑单元与对系逻辑单元对自身进行自检。The native logic unit and the twin logic unit obtain their own board identification numbers, the native logic unit and twin logic unit respectively acquire their respective communication information with the twin system, the native logic unit and twin system The logic unit self-tests itself.
  7. 根据权利要求1-5任一所述的双系热备切换方法,其中,所述本系逻辑单元与对系逻辑单元的初始化状态均为备系。The dual-system hot backup switching method according to any one of claims 1 to 5, wherein the initialization states of the logical unit of the local system and the logical unit of the dual system are both backup systems.
  8. 根据权利要求1-5任一所述的双系热备切换方法,其中,所述方法还包括,The dual-system hot standby switching method according to any one of claims 1-5, wherein the method further comprises,
    当所述本系逻辑单元或对系逻辑单元作为主系发生故障时,则作为主系的逻辑单元执行自动宕机并切除输出与通信,同时,作为备系的逻辑单元检测主系是否输出主系状态信号,若检测不到,作为备系的逻辑单元升级为主系,接管控制输出与通信并生成、输出主系状态信号。When the logical unit of the local system or the logical unit of the secondary system fails as the primary system, the logical unit of the primary system performs automatic shutdown and cuts off output and communication. At the same time, the logical unit of the standby system detects whether the primary system outputs the primary unit If the system status signal cannot be detected, the logical unit as the backup system is upgraded to the main system, taking over control output and communication and generating and outputting the main system status signal.
  9. 根据权利要求6所述的双系热备切换方法,其中,所述本系逻辑单元与对系逻辑单元对本系进行自检包括,The dual-system hot-standby switching method according to claim 6, wherein the self-test of the local logic unit and the parallel logic unit to the local department includes,
    所述本系逻辑单元和/或对系逻辑单元对本系的自检不通过,则所述本系逻辑单元和/或对系逻辑单元切除输出与通信,并执行宕机。If the self-test of the native logic unit and/or the pair logic unit fails the own department, the native logic unit and/or the pair logic unit cut output and communication, and perform downtime.
  10. 一种应用于列车自动运行系统的双系热备系统,其中,包括互为冗余的本系逻辑单元和对系逻辑单元,其中,所述本系逻辑单元 与对系逻辑单元均包括,A dual-system hot backup system applied to an automatic train running system, which includes mutually redundant primary logic units and counterpart logic units, wherein both the local logic units and the counterpart logic units include,
    主备系竞争模块,用于本系逻辑单元与对系逻辑单元进行主备系竞争;The main-standby system competition module is used for the main-standby system logical unit to compete with the main-standby logic unit;
    信号发生模块,用于本系逻辑单元或对系逻辑单元竞争为主系时,生成、输出主系状态信号。The signal generation module is used to generate and output the status signal of the main system when the logical unit of the corresponding system or the logical unit of the corresponding system competes for the main system.
  11. 根据权利要求10所述的双系热备系统,其中,所述本系逻辑单元与对系逻辑单元还均包括,The dual-system hot backup system according to claim 10, wherein the logic unit of the local system and the logic unit of the opposite system further include,
    板卡标识获取模块,用于获取本系逻辑单元、对系逻辑单元的板卡识别号;The board identification acquisition module is used to obtain the board identification numbers of the logical units of the corresponding department and the logical units of the corresponding department;
    第一通信模块,用于实现本系逻辑单元和对系逻辑单元与对系之间的通信;The first communication module is used to realize communication between the logic unit of the system and the logic unit of the system and the system of the system;
    自检模块,用于本系逻辑单元与对系逻辑单元进行自检。The self-check module is used for self-check of the logic unit of this department and the logic unit of this department.
  12. 根据权利要求10-11任一所述的双系热备系统,其中,所述本系逻辑单元与对系逻辑单元还均包括,The dual-system hot backup system according to any one of claims 10-11, wherein the logical unit of the local system and the logical unit of the dual system further include,
    故障处理模块,用于本系逻辑单元和对系逻辑单元切除输出与通信,并执行宕机。The fault processing module is used to cut off the output and communication of the logic unit of the system and the logic unit of the system, and perform downtime.
  13. 根据权利要求10-11任一所述的双系热备系统,其中,所述本系逻辑单元与对系逻辑单元还均包括,The dual-system hot backup system according to any one of claims 10-11, wherein the logical unit of the local system and the logical unit of the dual system further include,
    第二通信模块,用于实现本系逻辑单元和对系逻辑单元对外之间的输出与通信。The second communication module is used to realize the output and communication between the logic unit of the system and the logic unit of the system.
  14. 一种列车自动运行系统,其中,所述自动运行系统包括,输出单元、通信单元、接口单元以及权利要求10-13任一所述的本系逻辑单元与对系逻辑单元,所述本系逻辑单元、对系逻辑单元、输出单元、通信单元均连接至接口单元,其中,An automatic train operation system, wherein the automatic operation system includes an output unit, a communication unit, an interface unit, and the logic unit of the corresponding system and the logic unit of the corresponding system according to any one of claims 10-13, the logic of the corresponding system The unit, system logic unit, output unit, and communication unit are all connected to the interface unit, where,
    所述本系逻辑单元与对系逻辑单元用于实现权利要求1-9任一所述的切换方法;The local logic unit and the counterpart logic unit are used to implement the switching method according to any one of claims 1-9;
    所述输出单元,用于实现本系逻辑单元与对系逻辑单元对外之间 的输出;The output unit is used to realize the output between the logic unit of the current department and the logic unit of the opposite department;
    所述通信单元,用于实现本系逻辑单元与对系逻辑单元对外之间的通信;The communication unit is used to realize the communication between the logic unit of the current department and the logic unit of the opposite department;
    所述接口单元,用于实现本系逻辑单元、对系逻辑单元分别与输出单元、通信单元之间的输出、通信。The interface unit is used to realize the output and communication between the logic unit of the system and the logic unit of the system and the output unit and the communication unit, respectively.
  15. 根据权利要求14所述的列车自动运行系统,其中,所述自动运行系统还包括,与接口单元连接的电源单元、输入单元、记录单元,其中,The train automatic operation system according to claim 14, wherein the automatic operation system further includes a power supply unit, an input unit, and a recording unit connected to the interface unit, wherein,
    所述电源单元,用于实现对所述自动运行系统供电;The power supply unit is used to supply power to the automatic operation system;
    所述输入单元,用于实现所述自动运行系统的输入采集;The input unit is used to realize input collection of the automatic operation system;
    所述记录单元,用于实现所述自动运行系统的数据记录。The recording unit is used to realize data recording of the automatic operation system.
  16. 根据权利要求14或15所述的列车自动运行系统,其中,所述接口单元包括2路电源总线、互为冗余的2路通信总线、板卡标识。The automatic train operating system according to claim 14 or 15, wherein the interface unit includes a 2-way power bus, a 2-way communication bus that are mutually redundant, and a board identification.
PCT/CN2019/105218 2019-01-07 2019-09-10 Dual-system hot backup switching method and system applied to automatic running system of train WO2020143243A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910012599.3A CN109823375A (en) 2019-01-07 2019-01-07 A kind of applied to the double of automatic train operation system is hot standby switch method and system
CN201910012599.3 2019-01-07

Publications (1)

Publication Number Publication Date
WO2020143243A1 true WO2020143243A1 (en) 2020-07-16

Family

ID=66860176

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/105218 WO2020143243A1 (en) 2019-01-07 2019-09-10 Dual-system hot backup switching method and system applied to automatic running system of train

Country Status (2)

Country Link
CN (1) CN109823375A (en)
WO (1) WO2020143243A1 (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109823375A (en) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 A kind of applied to the double of automatic train operation system is hot standby switch method and system
CN110380911B (en) * 2019-08-14 2022-05-31 北京交大思诺科技股份有限公司 Method for identifying main and standby redundant systems
CN110789569B (en) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 Column control DMI data redundancy control method and system
CN111003024B (en) * 2020-03-06 2020-07-31 北京全路通信信号研究设计院集团有限公司 Train interface data processing method for hot standby vehicle-mounted equipment
CN111891192B (en) * 2020-08-17 2022-06-03 青岛海信微联信号有限公司 Train overspeed protection equipment, control method and dual-machine hot standby system
CN115158402A (en) * 2022-07-05 2022-10-11 河南思维自动化设备股份有限公司 Programmable logic control system and control method for subway train
CN115276922B (en) * 2022-07-15 2023-10-31 卡斯柯信号有限公司 Main and standby state control method suitable for all-electronic system

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101794142A (en) * 2009-11-02 2010-08-04 三一重机有限公司 Dual-computer redundancy control method and control device thereof
CN102541697A (en) * 2010-12-31 2012-07-04 中国航空工业集团公司第六三一研究所 Switching method for processing fault of dual-redundancy computer
CN102710402A (en) * 2012-05-25 2012-10-03 王可中 Method for forming hot standby redundant main station
CN103457879A (en) * 2013-08-27 2013-12-18 福建星网锐捷网络有限公司 Method for master-slave election of management module, management module and modularized equipment
CN103955188A (en) * 2014-04-24 2014-07-30 清华大学 Control system and method supporting redundancy switching function
CN105974879A (en) * 2016-06-27 2016-09-28 北京广利核系统工程有限公司 Redundancy control equipment of digital instrument control system, digital instrument control system and control method
KR20170122502A (en) * 2016-04-27 2017-11-06 한국전자통신연구원 System for device control on N+1 redundant switch cards using serial interface
CN109823375A (en) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 A kind of applied to the double of automatic train operation system is hot standby switch method and system

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103530200B (en) * 2012-07-04 2018-01-26 腾讯科技(深圳)有限公司 A kind of server hot backup system and method
CN104401365A (en) * 2014-10-16 2015-03-11 北京交控科技有限公司 Realization method of ATO (automatic train operation) hot standby and ATO hot standby
RU2612053C1 (en) * 2015-12-25 2017-03-02 Открытое Акционерное Общество "Научно-Исследовательский И Проектно-Конструкторский Институт Информатизации, Автоматизации И Связи На Железнодорожном Транспорте" Centralised system for monitoring vocal frequency rail circuits for high-speed movement
CN107968718B (en) * 2016-10-20 2022-02-25 浙江大华技术股份有限公司 Method, device and equipment for confirming main standby state
CN109005070B (en) * 2018-08-31 2021-09-10 北京计算机技术及应用研究所 Dual-computer redundant hot standby equipment based on shared memory

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101794142A (en) * 2009-11-02 2010-08-04 三一重机有限公司 Dual-computer redundancy control method and control device thereof
CN102541697A (en) * 2010-12-31 2012-07-04 中国航空工业集团公司第六三一研究所 Switching method for processing fault of dual-redundancy computer
CN102710402A (en) * 2012-05-25 2012-10-03 王可中 Method for forming hot standby redundant main station
CN103457879A (en) * 2013-08-27 2013-12-18 福建星网锐捷网络有限公司 Method for master-slave election of management module, management module and modularized equipment
CN103955188A (en) * 2014-04-24 2014-07-30 清华大学 Control system and method supporting redundancy switching function
KR20170122502A (en) * 2016-04-27 2017-11-06 한국전자통신연구원 System for device control on N+1 redundant switch cards using serial interface
CN105974879A (en) * 2016-06-27 2016-09-28 北京广利核系统工程有限公司 Redundancy control equipment of digital instrument control system, digital instrument control system and control method
CN109823375A (en) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 A kind of applied to the double of automatic train operation system is hot standby switch method and system

Also Published As

Publication number Publication date
CN109823375A (en) 2019-05-31

Similar Documents

Publication Publication Date Title
WO2020143243A1 (en) Dual-system hot backup switching method and system applied to automatic running system of train
CN107187465B (en) ATO system architecture of unit-level hot standby redundancy
CN103425553B (en) Duplicated hot-standby system and method for detecting faults of duplicated hot-standby system
CN100555234C (en) Dual redundant fault-tolerant system and redundancy switching method thereof
CN201909961U (en) Redundancy control system
JPH08255115A (en) Method and equipment for fault detection and fault- tolerant digital data processing
CN102315966B (en) Service single board, fault detection and reporting method and system thereof
CN110488597B (en) Dual-redundancy control method for main processing unit of locomotive
CN110095978A (en) One kind 2 multiplies 2 and takes 2 systems and its security diagnostics method
CN110293999B (en) Safe LKJ brake control mode
JP3445270B2 (en) Fault-tolerant clock capable of operating in multiple faults
JP2008097164A (en) Fault monitoring method for system composed of a plurality of function element
US9952579B2 (en) Control device
JP2011043957A (en) Fault monitoring circuit, semiconductor integrated circuit, and faulty part locating method
CN109301919B (en) Uninterrupted power supply bypass connection control method
CN110427283A (en) A kind of fuel management computer system of double redundancy
CN110758489A (en) Automatic protection system of train
CN113791937A (en) Data synchronous redundancy system and control method thereof
US10621024B2 (en) Signal pairing for module expansion of a failsafe computing system
CN116048192A (en) Clock backup circuit, control method, system, device, medium and server
CN114200855A (en) Centerless arbitration redundancy control system
CN104299301A (en) Nonporous electronic control security door fault-tolerant control system
CN115408240A (en) Redundant system active/standby method, device, equipment and storage medium
CN106656437A (en) Redundant hot standby platform
CN110825666B (en) Fault switching method and system based on ARINC659 protocol

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19908591

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19908591

Country of ref document: EP

Kind code of ref document: A1