WO2021073221A1 - 一种列控dmi数据冗余控制方法和系统 - Google Patents

一种列控dmi数据冗余控制方法和系统 Download PDF

Info

Publication number
WO2021073221A1
WO2021073221A1 PCT/CN2020/108331 CN2020108331W WO2021073221A1 WO 2021073221 A1 WO2021073221 A1 WO 2021073221A1 CN 2020108331 W CN2020108331 W CN 2020108331W WO 2021073221 A1 WO2021073221 A1 WO 2021073221A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
dmi
main
standby
heartbeat
Prior art date
Application number
PCT/CN2020/108331
Other languages
English (en)
French (fr)
Inventor
朱志承
王建敏
张友兵
于晓娜
Original Assignee
北京全路通信信号研究设计院集团有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 北京全路通信信号研究设计院集团有限公司 filed Critical 北京全路通信信号研究设计院集团有限公司
Priority to EP20785892.9A priority Critical patent/EP3828055B1/en
Priority to EA202092375A priority patent/EA202092375A1/ru
Priority to RS20221049A priority patent/RS63730B1/sr
Publication of WO2021073221A1 publication Critical patent/WO2021073221A1/zh

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0018—Communication with or on the vehicle or train
    • B61L15/0036—Conductor-based, e.g. using CAN-Bus, train-line or optical fibres
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0063—Multiple on-board control systems, e.g. "2 out of 3"-systems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0072—On-board train data handling
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/009—On-board display devices
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00—Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0081—On-board diagnosis or maintenance

Definitions

  • the invention belongs to the technical field of dual-machine hot backup, and particularly relates to a train control DMI data redundancy control method and system.
  • the main control unit of the vehicle equipment transmits data to the human-computer interaction unit through the bus, and the human-computer interaction unit also transmits the data to the vehicle main control unit through the bus.
  • multiple configurations can be configured on both the vehicle main control unit and the human-computer interaction unit as required.
  • the existing in-vehicle equipment is a single-line main control unit, and the main control unit performs data interactive transmission with the human-computer interaction unit through the bus, and does not have the function of dual-system hot standby;
  • Figure 1 shows the human-computer interaction unit and the human-computer interaction unit in the prior art.
  • the human-computer interaction unit reads the data sent by the vehicle-mounted main control unit from the corresponding port through the bus.
  • the human-computer interaction unit applies logic to unpack the read data.
  • the interaction unit simultaneously writes the data that needs to be transmitted to the corresponding port on the bus, and the on-board main control unit reads the data sent by the human-computer interaction unit from the port on the bus for processing.
  • the existing vehicle-mounted main control unit realizes dual-system hot standby, that is, two vehicle-mounted main control units are set up, and the two vehicle-mounted main control units are respectively used as the main system and the standby system, and the two vehicle-mounted main control units are communicatively connected with the human-computer interaction unit , But there is still a single communication between the on-board main control unit and the human-computer interaction unit, that is, the main control unit in use and the human-computer interaction unit carry out data interaction communication, and the standby main control unit does not carry out data with the human-computer interaction unit at this time
  • the on-board equipment needs to switch to another main control unit when the main control unit fails, then it is necessary to set up a special switching circuit to realize the switching function.
  • the existence of the switching circuit causes the switching efficiency to be reduced, and the real-time difference is easy to cause data lost.
  • the present invention proposes a train control DMI data redundancy control method
  • the DMI simultaneously receives and processes two sets of data in a master/backup relationship with each other, the DMI judges the master/backup relationship based on the analysis result of the data, and the DMI displays the master data.
  • the DMI stores backup system data.
  • the analysis result includes an identification of the active/standby system, and the identifier of the active/standby system dynamically changes based on the data state;
  • the DMI judges that the main and standby system identifiers are the main system identifier or the standby system identifier;
  • the DMI displays data with a primary system identifier, and the DMI stores data with a backup system identifier.
  • the active/standby system identification dynamically changes based on the data status, including:
  • the DMI receives the first heartbeat data sent by the main system, and the state of the first heartbeat data changes synchronously with the data state of the main system;
  • the DMI judges whether the first heartbeat data is normal, and executes the following steps based on the judgment result:
  • the DMI judges that the first heartbeat data is normal, and the primary and secondary system identifiers remain unchanged;
  • the DMI judges that the first heartbeat data is abnormal, the main system identification is converted to the backup system identification, and the backup system identification is converted to the main system identification.
  • the active/standby system identification dynamically changes based on the data status, including:
  • the standby system receives the second heartbeat data sent by the main system, and the state of the second heartbeat data changes synchronously with the data state of the main system;
  • the standby system judges whether the second heartbeat data is normal, and performs the following steps based on the judgment result:
  • the standby system judges that the second heartbeat data is normal, and the primary and standby system identification remains unchanged;
  • the standby system judges that the second heartbeat data is abnormal, the primary system identifier is converted to the standby system identifier, and the standby system identifier is converted to the primary system identifier.
  • the DMI receives the third heartbeat data sent by the main system, and the state of the third heartbeat data changes synchronously with the data state of the main system;
  • the DMI judges whether the third heartbeat data is normal, and executes the following steps based on the judgment result:
  • the DMI judges that the third heartbeat data is normal, and the active and standby systems remain unchanged
  • the DMI judges that the third heartbeat data is abnormal, the main system data is converted to the standby system data, and the standby system data is converted to the main system data.
  • the present invention also proposes a train control DMI data redundancy control system, including:
  • Two main control units are used to send data to DMI respectively, and the two sets of data are in a master/backup relationship with each other;
  • DMI is used to simultaneously receive and process two sets of data in the primary and standby relationship with each other, determine the primary and standby relationship based on the analysis result of the data, and display the primary system data.
  • the DMI is used to store backup system data.
  • the analysis result includes an identification of the active/standby system, and the identifier of the active/standby system dynamically changes based on the data state;
  • the DMI is used for judging the main system ID or the backup system ID of the main and standby system
  • the DMI is used to display the data with the main system identification and to store the data with the backup system identification.
  • the active/standby system identification dynamically changes based on the data status, including:
  • the DMI is used to receive the first heartbeat data sent by the main control unit as the main system, and the state of the first heartbeat data changes synchronously with the data state of the main system;
  • the DMI is used to judge whether the first heartbeat data is normal, and execute the following steps based on the judgment result:
  • the DMI judges that the first heartbeat data is normal, and the primary and secondary system identifiers remain unchanged;
  • the DMI judges that the first heartbeat data is abnormal, the main system identification is converted to the backup system identification, and the backup system identification is converted to the main system identification.
  • the active/standby system identification dynamically changes based on the data status, including:
  • the main control unit of the standby system receives the second heartbeat data sent by the main control unit of the main system, and the state of the second heartbeat data changes synchronously with the data state of the main system;
  • the standby system is used to judge whether the second heartbeat data is normal, and perform the following steps based on the judgment result:
  • the standby system judges that the second heartbeat data is normal, and the primary and standby system identification remains unchanged;
  • the standby system judges that the second heartbeat data is abnormal, the primary system identifier is converted to the standby system identifier, and the standby system identifier is converted to the primary system identifier.
  • the DMI is used to receive the third heartbeat data sent by the main control unit as the main system, and the third heartbeat data state changes synchronously with the data state of the main system;
  • the DMI is used to judge whether the third heartbeat data is normal, and perform the following steps based on the judgment result:
  • the DMI judges that the third heartbeat data is normal, and the active and standby systems remain unchanged
  • the DMI judges that the third heartbeat data is abnormal, the main system data is converted to the standby system data, and the standby system data is converted to the main system data.
  • the human-computer interaction unit simultaneously receives the data sent by the first main control unit and the second main control unit, and according to the first main-standby system identification and the second main-standby system identification
  • the first main control unit and the second main control unit are respectively used as the main system and the standby system.
  • the identification of the first main and standby system and the identification of the second main and standby system change, and the human-computer interaction unit recognizes the first main system.
  • the backup system identification and the second main backup system identification are changed, the main system and the backup system are switched, the content displayed by the human-computer interaction unit is not affected, and there is no need to configure a switching module, the structure is simple, and the switching efficiency is high.
  • Figure 1 shows a schematic diagram of the communication connection between a single-line main control unit and a human-computer interaction unit in the prior art
  • Figure 2 shows a schematic diagram of communication connections of a train control DMI data redundancy control system according to an embodiment of the present invention
  • FIG. 3 shows a schematic flowchart of a method for controlling DMI data redundancy in train control according to an embodiment of the present invention
  • FIG. 4 shows a schematic diagram of the structure of a data packet according to an embodiment of the present invention
  • FIG. 5 shows a schematic diagram of the monitoring process of the status of the main and standby systems in an embodiment of the present invention.
  • the human-machine interaction unit (DMI, driver machine interface) is used by the train driver, which is convenient for the driver to drive the train according to the displayed information and guide the driver to perform related operations according to the prompts.
  • This embodiment proposes a train control DMI data redundancy control system, which includes two main control units and a human-computer interaction unit.
  • the two main control units are called the first main control unit and the second main control unit. ;
  • One of the first main control unit and the second main control unit is used as the main system, and the other is used as the standby system;
  • the human-computer interaction unit includes a display module and a storage module.
  • the display module and the storage module are not shown.
  • the display module is used to display the data sent by the main system to the human-computer interaction unit
  • the storage module is used to store the data sent by the backup system to the human-computer interaction unit.
  • the data sent by the standby system to the human-computer interaction unit is not displayed.
  • the data sent by the master control unit as the main system is called the main system data
  • the data sent by the master control unit as the backup system is called the backup data.
  • the first main control unit and the second main control unit send data to the human-computer interaction unit at the same time.
  • the data sent by the main control unit of the main system is displayed on the display module and sent as the main control unit of the standby system.
  • the data is stored in the storage module, and the human-computer interaction unit feeds back the data to the first main control unit and the second main control unit at the same time.
  • the human-computer interaction unit has a sink port and a source port
  • the first main control unit has a sink port and a source port
  • the second main control unit has a sink port and a source port.
  • the control unit is provided with a sink port and a source port. Both the sink port and the source port are connected to a train bus.
  • the train bus may be a multifunctional vehicle bus, a stranded train bus, or the like.
  • the receiving port of the human-computer interaction unit is communicatively connected with the source port of the first main control unit and the source port of the second main control unit, and the source port of the human-computer interaction unit is connected with the receiving port of the first main control unit and the second main control unit
  • the receiving port of the unit receives, the first main control unit and the second main control unit respectively send data to the human-computer interaction unit via their respective source ports at the same time, and the sent data is received by the receiving port of the human-computer interaction unit.
  • the first main control unit is provided with a first heartbeat module
  • the second main control unit is provided with a second heartbeat module.
  • the first heartbeat module and the human-computer interaction unit are connected by heartbeat cable communication, and the second heartbeat module and the human-computer interaction unit are communicated through the heartbeat Line communication connection.
  • the first heartbeat module and the second heartbeat module respectively send the first heartbeat data to the human-computer interaction unit, so that the human-computer interaction unit can monitor the states of the first main control unit and the second main control unit.
  • the first main control unit is provided with a third heartbeat module
  • the second main control unit is provided with a fourth heartbeat module.
  • the third heartbeat module and the second main control unit are communicatively connected by a heartbeat line
  • the fourth heartbeat module and the first main control unit are communicatively connected by a heartbeat line
  • the third heartbeat module is used to send the second heartbeat data to the second main control unit
  • the second main control unit can monitor the state of the first main control unit
  • the fourth heartbeat module is used to send the second heartbeat data to the first main control unit
  • the first main control unit can monitor the state of the second main control unit.
  • This embodiment proposes a train control DMI data redundancy control method.
  • the first main control unit and the second main control unit send first heartbeat data to the human-computer interaction unit, if the human-computer interaction unit If two sets of first heartbeat data can be received, the heartbeat value is not 0 and the heartbeat value is normal, it means that the human-computer interaction unit is connected to the first main control unit and the second main control unit normally, and the subsequent main and backup systems can be performed. Configuration. If one or two groups of first heartbeat data are abnormal, it means that the connection between the human-computer interaction unit and the first main control unit or the second main control unit is abnormal, and the subsequent process is interrupted. At this time, the operator needs to check the equipment.
  • the human-computer interaction unit receives in real time the first data sent by the first main control unit and the second data sent by the second main control unit, and both the first data and the second data adopt data packets in a typical producer/consumer mode ,
  • the data packet structure includes the primary and backup system identifier, data and CRC code.
  • the primary and backup system identifier of the data packet of the first data is called the first primary and backup system identifier
  • the primary and backup system identifier of the data packet of the second data is called the second primary and backup system.
  • Identification, the CRC code of the first data is generated by the first main control unit, and the CRC code of the second data is generated by the second main control unit;
  • the human-computer interaction unit receives the first data sent by the first main control unit in real time, the first data has a first main-standby system identification, and the human-computer interaction unit analyzes the first main-standby system identification.
  • the result of the analysis of the identification of the first main and standby system is represented by 1 or 2. If the analysis result is 1, it indicates that the first main control unit should be used as the main system at this time, and if the analysis result is 2, it indicates this The first main control unit should be used as the backup system.
  • the human-computer interaction unit receives the second data sent by the second main control unit in real time, and the second data has a second master/backup system identifier; the human-computer interaction unit parses the second master/backup system identifier, and if the second master/backup system
  • the analytical result of the identification is 1, which indicates that the second main control unit should be used as the main system at this time, and if the analytical result is 2, it indicates that the second main control unit should be used as the backup system at this time.
  • the identification of the first primary and backup system and the identification of the second primary and backup system are that the result of the analysis of one of them is 1, and the result of the analysis of the other is 2. There will be no two primary and backup system identifiers are 1 or both. In the case of 2, ensure that one of the first main control unit and the second main control unit is used as the main system, and the other is used as the backup system in any case.
  • the human-computer interaction unit judges in real time whether the primary and secondary system identification of the source of the currently displayed data is 1, if it is 1, no adjustment is made, and if it is not 1, the secondary system is converted to the primary system.
  • the first master control unit and the second master control unit mutually agree that the first master/backup system identifier is 1, and the second master/backup system identifier is 2.
  • the first main control unit is the main system
  • the second main control unit is the standby system
  • the human-computer interaction unit displays the data sent by the first main control unit.
  • the data sent by the first main control unit is the main system data.
  • the interaction unit stores the data of the second main control unit, but does not display the data of the second main control unit.
  • the data sent by the second main control unit is the standby data; when the first main control unit fails, the state is not good , Communication is blocked, etc., the first master control unit cannot accurately and timely transmit data to the human-computer interaction unit.
  • the first master/backup system identification becomes 2
  • the second master/backup system identification becomes 1
  • the second master The control unit is upgraded to the main system, and the first main control unit is reduced to the standby system.
  • the human-computer interaction unit displays the data of the second main control unit, and the human-computer interaction unit stores but does not display the data of the first main control unit.
  • the data sent by the second main control unit is the main system data
  • the data sent by the first main control unit is the standby system data.
  • the information displayed by the human-computer interaction unit is not affected by the abnormality of the first main control unit. Repair the first main control unit, and continue to use the first main control unit as a backup system after the repair.
  • the human-computer interaction unit receives the data transmitted by the main system in real time.
  • the content displayed by the unit will not be affected.
  • the data redundancy method in this embodiment does not require additional hardware structure, and the switching efficiency of the main and standby systems is higher.
  • the human-computer interaction unit detects that the first heartbeat data is normal, it sets the valid flags of the first data and the second data to true.
  • the first data and the second data are Perform verification.
  • CRC cyclic redundancy check
  • the CRC code behind the data packet of the first data is calculated by the first main control unit
  • the CRC code behind the data packet of the second data is calculated by the second main control unit
  • the human-computer interaction unit recalculates the CRC code when receiving the first data and the second data, and compares the calculation result with the actually received CRC code. If the two CRC codes are equal, there is no error in the transmission. If the CRC codes are not equal, it is a transmission error.
  • the human-computer interaction unit is connected to the main and standby systems respectively, and the human-computer interaction unit displays the content transmitted from the main system. If there is an error during the transmission of the first data or the second data , The data transmission is stopped and the device is checked.
  • the human-computer interaction unit needs to judge the current status of the main system in real time to ensure that the standby system can be upgraded to the main system in time when the main system is abnormal.
  • the human-computer interaction unit receives the first heartbeat data sent by the main system in real time.
  • the human-computer interaction unit judges the main system state based on the first heartbeat data of the main system, and the first heartbeat data state changes synchronously with the main system data state. , Based on the result of the judgment, the first active/standby system identification and the second active/standby system identification are dynamically changed. If the first heartbeat data is normal, the primary and backup systems remain in the current state.
  • the backup system is upgraded to the primary system, and the primary system is reduced to the backup system. Department; At this time, the standby system can send the first heartbeat data to the human-computer interaction unit, or not send the first heartbeat data. If the standby system sends the first heartbeat data to the human-computer interaction unit, the human-computer interaction unit monitors at the same time The status of the primary and secondary systems.
  • the first main control unit is the main system
  • the second main control unit is the standby system
  • the first main control unit is identified as 1
  • the second main control unit is identified as 2
  • the first main control unit is Send the first heartbeat data to the human-computer interaction unit regularly.
  • the first main control unit sends the state of the machine in units of 100ms, including the normal state and the error state.
  • the human-computer interaction unit receives the error information of the first main control unit, or the first main control unit fails to receive the first five times in a row.
  • the human-computer interaction unit changes the first active/standby system identification to 2 and the second active/standby system identification to 1.
  • the human-computer interaction unit displays the first message sent by the second main control unit.
  • the second data is to store the first data sent by the first main control unit, the first main control unit is reduced to the standby system, and the second main control unit is promoted to the main system to realize the switch between the main and standby systems.
  • the standby system receives the second heartbeat data sent by the main system in real time, and the standby system judges the status of the main system based on the second heartbeat data, and dynamically changes the identification of the first active and standby system based on the judgment result. If the second heartbeat data is normal, the main and standby systems maintain the current status. If the second heartbeat data is abnormal, the first and second active and standby system identifications are changed, and the standby system is upgraded to The main system, the main system is reduced to the standby system.
  • the first main control unit is the main system
  • the second main control unit is the standby system
  • the first main control unit is identified as 1
  • the second main control unit is identified as 2
  • the first main control unit is Send the second heartbeat data to the second main control unit regularly.
  • the first main control unit sends the state of the machine in 100ms as a unit, including normal state and error state.
  • the second main control unit receives the error information of the first main control unit, or fails to receive the first main control unit for 5 consecutive times.
  • the second main control unit feeds back information to the first main control unit, and the human-computer interaction unit changes the first active/standby system identification to 2, the second active/standby system identification to 1, and the first main control unit down
  • the second main control unit is upgraded to the main system to realize the switch between the main and standby systems.
  • the data redundancy system can simultaneously adopt the above-mentioned two main and standby system status monitoring design solutions to ensure that the abnormal status of the main system can be detected in time, so that the main and standby systems can be switched in time, thereby ensuring that the content displayed by the human-computer interaction unit is not affected. influences.
  • the first data and the second data do not set the main and standby system identification
  • the human-computer interaction unit receives the third heartbeat data sent by the main system, and the third heartbeat data state changes synchronously with the main system data state;
  • the human-computer interaction unit judges whether the third heartbeat data is normal, and performs the following steps based on the judgment result:
  • the human-computer interaction unit judges that the third heartbeat data is normal, and the main and standby systems remain unchanged;
  • the human-computer interaction unit judges that the third heartbeat data is abnormal, the main system data is converted to the standby system data, and the standby system data is converted to the main system data.
  • the first main control unit is the main system
  • the second main control unit is the standby system
  • the first main control unit regularly sends third heartbeat data to the human-computer interaction unit.
  • the first main control unit The unit sends the status of the machine in 100ms units, including normal status and error status.
  • the human-computer interaction unit detects the third heartbeat data abnormality
  • the human-computer interaction unit no longer displays the data sent by the first main control unit, but displays it instead
  • the first main control unit is reduced to the standby system, and the second main control unit is promoted to the main system to realize the switching of the main and standby systems.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Hardware Redundancy (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)

Abstract

一种列控DMI数据冗余控制方法，DMI同时接收并处理互为主备关系的两组数据， DMI基于数据的解析结果判断主备关系， DMI显示主系数据；系统包括两个主控单元，用于分别向DMI发送数据，两组数据互为主备关系，DMI，用于同时接收并处理互为主备关系的两组数据，并基于数据的解析结果判断主备关系显示主系数据；DMI同时接收两个主控单元发送的数据，并根据两个主备系标识将两个主控单元分别作为主系和备系，当主系发生异常，两个主备系标识发生变化，DMI识别到两个主备系标识变化后切换主系和备系，DMI显示的内容不受影响，并且不需要配置切换模块，结构简单，切换效率高。还公开了列控DMI数据冗余控制系统。

Description

一种列控DMI数据冗余控制方法和系统 技术领域
本发明属于双机热备技术领域，特别涉及一种列控DMI数据冗余控制方法和系统。
背景技术
在列车通讯领域，人机交互单元(DMI，driver machine interface)和车载主控单元之间的数据包通过总线进行数据的传输；
车载设备主控单元通过总线将数据传输给人机交互单元，人机交互单元同样通过总线将数据传输给车载主控单元，其中根据需要可在车载主控单元和人机交互单元上均配置多个相对应的端口来进行数据的交互传输；
现有的车载设备为单系主控单元，主控单元通过总线和人机交互单元进行数据交互传输，不具备双系热备的功能；图1示出了现有技术中人机交互单元与车载主控单元的通讯连接关系示意图，人机交互单元通过总线从相应的端口读取车载主控单元发送的数据，人机交互单元应用逻辑对读取到的数据进行解包等处理，人机交互单元同时把需要传送的数据写入到总线上相应的端口，车载主控单元从总线上的端口读取人机交互单元发送的数据进行处理。
即使现有车载主控单元实现了双系热备，即设置两个车载主控单元，两个车载主控单元分别作为主系和备系，两个车载主控单元与人机交互单元通讯连接，但是车载主控单元和人机交互单元之间还是单系通信，即在用的主控单元与人机交互单元进行数据交互通信，备系主控单元此时不和人机交互单元进行数据通信传输，若在用主控单元故障时，车载设备需要切换到另一系主控单元，那么就需要专门设置切换电路实现切换功能，切换电电路的存在导致切换效率降低，实时差，容易导致数据丢失。
发明内容
针对上述问题，本发明提出一种列控DMI数据冗余控制方法，
所述DMI同时接收并处理互为主备关系的两组数据，所述DMI基于所述数据的解析结果判断主备关系，所述DMI显示主系数据。
优选地，所述DMI存储备系数据。
优选地，所述解析结果包含主备系标识，主备系标识基于数据状态动态变化；
所述DMI判断主备系标识为主系标识或备系标识；
所述DMI显示具有主系标识的数据，所述DMI存储具有备系标识的数据。
优选地，所述主备系标识基于数据状态动态变化，包括：
所述DMI接收主系发送的第一心跳数据，第一心跳数据状态随主系数据状态同步变换；
所述DMI判断第一心跳数据是否正常，并基于判断结果执行以下步骤：
所述DMI判断第一心跳数据正常，主备系标识保持不变；
所述DMI判断第一心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
优选地，所述主备系标识基于数据状态动态变化，包括：
备系接收主系发送的第二心跳数据，第二心跳数据状态随主系数据状态同步变换；
备系判断第二心跳数据是否正常，并基于判断结果执行以下步骤：
备系判断第二心跳数据正常，主备系标识保持不变；
备系判断第二心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
优选地，所述DMI接收主系发送的第三心跳数据，第三心跳数据状态随主系数据状态同步变换；
所述DMI判断第三心跳数据是否正常，并基于判断结果执行以下步骤：
所述DMI判断第三心跳数据正常，主备系保持不变；
所述DMI判断第三心跳数据异常，主系数据转换为备系数据，备系数据转换为主系数据。
本发明还提出了一种列控DMI数据冗余控制系统，包括：
两个主控单元，用于分别向DMI发送数据，两组数据互为主备关系；
DMI，用于同时接收并处理互为主备关系的两组数据，并基于所述数据的解析结果判断主备关系，显示主系数据。
优选地，所述DMI用于存储备系数据。
优选地，所述解析结果包含主备系标识，主备系标识基于数据状态动态变化；
所述DMI用于判断主备系标识为主系标识或备系标识；
所述DMI用于显示具有主系标识的数据，并存储具有备系标识的数据。
优选地，所述主备系标识基于数据状态动态变化，包括：
所述DMI用于接收作为主系的主控单元发送的第一心跳数据，第一心跳数据状态随主系数据状态同步变换；
所述DMI用于判断第一心跳数据是否正常，并基于判断结果执行以下步骤：
所述DMI判断第一心跳数据正常，主备系标识保持不变；
所述DMI判断第一心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
优选地，所述主备系标识基于数据状态动态变化，包括：
作为备系的主控单元接收作为主系的主控单元发送的第二心跳数据，第二心跳数据状态随主系数据状态同步变换；
备系用于判断第二心跳数据是否正常，并基于判断结果执行以下步骤：
备系判断第二心跳数据正常，主备系标识保持不变；
备系判断第二心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
优选地，所述DMI用于接收作为主系的主控单元发送的第三心跳数据，第三心跳数据状态随主系数据状态同步变换；
所述DMI用于判断第三心跳数据是否正常，并基于判断结果执行以下步骤：
所述DMI判断第三心跳数据正常，主备系保持不变；
所述DMI判断第三心跳数据异常，主系数据转换为备系数据，备系数据转换为主系数据。
本发明的列控DMI数据冗余控制方法和系统，人机交互单元同时接收第一主控单元和第二主控单元发送的数据，并根据第一主备系标识和第二主备系标识将第一主控单元和第二主控单元分别作为主系和备系，当主系发生异常，第一主备系标识和第二主备系标识发生变化，人机交互单元识别到第一主备系标识和第二主备系标识变化后切换主系和备系，人机交互单元显示的内容不受影响，并且不需要配置切换模块，结构简单，切换效率高。
本发明的其它特征和优点将在随后的说明书中阐述，并且，部分地从说明书中变得显而易见，或者通过实施本发明而了解。本发明的目的和其他优点可通过在说明书、权利要求书以及附图中所指出的结构来实现和获得。
附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1示出了现有技术中单系主控单元与人机交互单元通讯连接示意图；
图2示出了本发明实施例的列控DMI数据冗余控制系统的通讯连接示意图；
图3示出了本发明实施例的列控DMI数据冗余控制方法的流程示意图；
图4示出了本发明实施例的数据包的结构示意图；
图5示出了本发明实施例的主备系状态监控流程示意图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地说明，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
人机交互单元(DMI，driver machine interface)供列车司机使用，便于司机按照显示的信息驾驶列车运行，指导司机按照提示执行相关操作。
本实施例提出一种列控DMI数据冗余控制系统，包括两个主控单元和人机交互单元，本实施例中两个主控单元分别称为第一主控单元、第二主控单元；
第一主控单元和第二主控单元中的其中一个作为主系，另一个作为备系；
人机交互单元包括显示模块和存储模块，显示模块和存储模块未图示，显示模块用于显示主系发送至人机交互单元的数据，存储模块用于存储备系发送人机交互单元的数据，备系发送至人机交互单元的数据不显示。这里将作为主系的主控单元发送的数据称为主系数据，将作为备系的主控单元发送的数据称为备系数据。
工作状态下，第一主控单元和第二主控单元同时发送数据至人机交互单元，其中作为主系的主控单元发送的数据在显示模块上显示，作为备系的主控单元发送的数据存储在存储模块中，并且人机交互单元同时反馈数据至第一主控单元和第二主控单元。
具体地，参照图2，人机交互单元具有接收端口(sink port)和源端口(source port)， 第一主控单元设有接收端口(sink port)和源端口(source port)，第二主控单元设有接收端口(sink port)和源端口(source port)。上述接收端口(sink port)和源端口(source port)均连接在列车总线(bus)上，列车总线可以是多功能车辆总线、绞线式列车总线等。人机交互单元的接收端口与第一主控单元的源端口和第二主控单元的源端口通讯连接，人机交互单元的源端口与第一主控单元的接收端口和第二主控单元的接收端口通讯连接；工作状态下，人机交互单元经源端口同时向第一主控单元和第二主控单元发送数据，发送的数据经第一主控单元的接收端口和第二主控单元的接收端口接收，第一主控单元和第二主控单元分别经各自的源端口同时向人机交互单元发送数据，发送的数据经人机交互单元的接收端口接收。
第一主控单元设有第一心跳模块，第二主控单元设有第二心跳模块，第一心跳模块与人机交互单元通过心跳线通讯连接，第二心跳模块与人机交互单元通过心跳线通讯连接。第一心跳模块和第二心跳模块分别向人机交互单元发送第一心跳数据，从而人机交互单元得以监测第一主控单元和第二主控单元的状态。
第一主控单元设有第三心跳模块，第二主控单元设有第四心跳模块。第三心跳模块和第二主控单元通过心跳线通讯连接，第四心跳模块和第一主控单元通过心跳线通讯连接，第三心跳模块用于向第二主控单元发送第二心跳数据，第二主控单元得以监测第一主控单元的状态，第四心跳模块用于向第一主控单元发送第二心跳数据，第一主控单元得以监测第二主控单元的状态。
本实施例提出一种列控DMI数据冗余控制方法，参照图3，初始状态下，第一主控单元和第二主控单元向人机交互单元发送第一心跳数据，若人机交互单元能接收到两组第一心跳数据、心跳值均不为0且心跳值均正常，则说明人机交互单元与第一主控单元和第二主控单元连接正常，可进行后续的主备系配置。若存在一组或两组第一心跳数据异常，则说明人机交互单元与第一主控单元或第二主控单元连接异常，中断后续流程，操作人此时需要对设备进行检查。
所述人机交互单元实时接收第一主控单元发送的第一数据和第二主控单元发送的第二数据，第一数据和第二数据均采用典型的生产者/消费者模式的数据包，如图4所示，数据包结构包括主备系标识符、数据和CRC码。为了区分第一数据和第二数据，第一数据的数据包的主备系标识符称为第一主备系标识，第二数据的数据包的主备系标识 符称为第二主备系标识，第一数据的CRC码由第一主控单元生成，第二数据的CRC码由第二主控单元生成；
所述人机交互单元实时接收第一主控单元发送的第一数据，第一数据具有第一主备系标识，人机交互单元对第一主备系标识进行解析。本实施例中第一主备系标识解析后的结果以1或2表示，如果解析结果为1，则表明此时应当将第一主控单元作为主系，如果解析结果为2，则表明此时应当将第一主控单元作为备系。
所述人机交互单元实时接收第二主控单元发送的第二数据，第二数据具有第二主备系标识；人机交互单元对第二主备系标识进行解析，如果第二主备系标识的解析结果为1，则表明此时应当将第二主控单元作为主系，如果解析结果为2，则表明此时应当将第二主控单元作为备系。
第一主备系标识和第二主备系标识在任何时候，都是其中一个的解析结果为1，另一个的解析结果为2，不会出现两个主备系标识符均为1或均为2的情况，确保在任何情况下第一主控单元和第二主控单元中的一个作为主系，另一个作为备系。
人机交互单元实时判断当前显示数据的来源的主备系标识是否为1，如果为1则不作调整，如果不为1，则将备系转为主系。
示例性地，初始状态下，第一主控单元和第二主控单元相互约定第一主备系标识为1，第二主备系标识为2。第一主控单元作为主系，第二主控单元作为备系，人机交互单元显示第一主控单元发送的数据，此时第一主控单元发送的数据即为主系数据，人机交互单元存储第二主控单元的数据，但不显示第二主控单元的数据，此时第二主控单元发送的数据即为备系数据；当第一主控单元发生故障、状态不佳、通讯受阻等情况下，第一主控单元不能准确及时的将数据传输至人机交互单元，此时第一主备系标识变为2，第二主备系标识变为1，第二主控单元升为主系，第一主控单元降为备系，此时人机交互单元显示第二主控单元的数据，人机交互单元存储但不显示第一主控单元的数据，此时第二主控单元发送的数据即为主系数据，第一主控单元发送的数据即为备系数据，人机交互单元显示的信息不被第一主控单元异常而影响到，此时需要对第一主控单元进行修复，修复后第一主控单元作为备系继续使用。
通过上述分析可知，无论是第一主控单元作为主系，还是第二主控单元作为主系，人机交互单元实时接收主系传输过来的数据，在进行主备系切换时，人机交互单元显示 的内容不会受到影响，相对于现有技术中需要配置切换开关等结构的技术方案，本实施例中数据冗余方法，不需要另外配置硬件结构，主备系切换效率更高。
另外，人机交互单元监测到第一心跳数据正常后，设置第一数据和第二数据的有效标志为true，为了保证数据传输的准确性和完整性，对传输的第一数据和第二数据进行校验。本实施例中采用循环冗余校验(CRC)，第一数据的数据包后面的CRC码由第一主控单元计算得到，第二数据的数据包后面的CRC码由第二主控单元计算得到，人机交互单元在接收到第一数据和第二数据时重新计算CRC码，并将计算结果与实际接收到的CRC码相比较，如果两个CRC码相等，则传输没有出错，如果两个CRC码不相等，则为传输出错。
生成CRC码的过程为:
1.将一个16位的变量赋值为0xffff，这个变量称为CRC寄存器。
2.将报文的第一字节与CRC寄存器相异或保存到CRC寄存器中。
3.将CRC寄存器右移一位，高位补零。
4.判断被移掉的那一位是0还是1，如果是0，则回到3步骤；如果是1，则CRC寄存器与0xa001进行异或保存到CRC寄存器中。
5.重复3-4直到完成八次移位。
6.对下一个字节重复2-5步骤。
7.对报文每个字节进行计算后，就生成了CRC码了，不过需要注意的是：放置CRC码到报文中去的时候高低字节需要交换位置。
如果第一数据和第二数据传输过程中没有出错，则人机交互单元分别与主备系连接，人机交互单元显示主系传输过来的内容，如果第一数据或第二数据传输过程中出错，则停止数据传输，对设备进行检查。
人机交互单元需要实时判断当前主系的状态正常与否，以确保主系异常时备系能够及时升为主系。参照图5，人机交互单元实时接收主系发送的第一心跳数据，所述人机交互单元基于主系的第一心跳数据判断主系状态，第一心跳数据状态随主系数据状态同步变换，基于判断结果动态改变第一主备系标识和第二主备系标识。如果第一心跳数据正常，则主备系保持当前状态，如果第一心跳数据异常，则第一主备系标识和第二主备系标识改变，备系升为主系，主系降为备系；此时备系可以向人机交互单元发送第一心 跳数据，也可以不发送第一心跳数据，如果备系向人机交互单元发送第一心跳数据，则人机交互单元此时同时监测主备系的状态。
示例性地，当前状态下，第一主控单元为主系，第二主控单元为备系，第一主备系标识为1，第二主备系标识改为2，第一主控单元定时发送第一心跳数据至人机交互单元。具体地，第一主控单元以100ms为单位发送本机状态，包括正常状态和出错状态，当人机交互单元接收到第一主控单元的出错信息，或者是连续5次接收不到第一心跳数据时，人机交互单元将第一主备系标识改为2，将第二主备系标识改为1，主备系标识更改后，人机交互单元显示第二主控单元发送的第二数据，存储第一主控单元发送的第一数据，第一主控单元降为备系，第二主控单元升为主系，实现主备系的切换。
在主备系状态监控的另一种设计方式上，备系实时接收主系发送的第二心跳数据，备系基于第二心跳数据判断主系状态，基于判断结果动态改变第一主备系标识和第二主备系标识，如果第二心跳数据正常，则主备系保持当前状态，如果第二心跳数据异常，则第一主备系标识和第二主备系标识改变，备系升为主系，主系降为备系。
示例性地，当前状态下，第一主控单元为主系，第二主控单元为备系，第一主备系标识为1，第二主备系标识改为2，第一主控单元定时发送第二心跳数据至第二主控单元。具体地，第一主控单元以100ms为单位发送本机状态，包括正常状态和出错状态，当第二主控单元接收到第一主控单元的出错信息，或者是连续5次接收不到第二心跳数据时，第二主控单元反馈信息至第一主控单元，人机交互单元将第一主备系标识改为2，第二主备系标识改为1，第一主控单元降为备系，第二主控单元升为主系，实现主备系的切换。
数据冗余系统可以同时采用上述两种主备系状态监控的设计方案，以确保能够及时监测到主系状态异常，从而主备系能够及时切换，进而确保人机交互单元的显示的内容不受影响。
在另外一种设计方式上，第一数据和第二数据不设置主备系标识，人机交互单元接收主系发送的第三心跳数据，第三心跳数据状态随主系数据状态同步变换；
人机交互单元判断第三心跳数据是否正常，并基于判断结果执行以下步骤：
人机交互单元判断第三心跳数据正常，主备系保持不变；
人机交互单元判断第三心跳数据异常，主系数据转换为备系数据，备系数据转换为 主系数据。
示例性地，当前状态下，第一主控单元为主系，第二主控单元为备系，第一主控单元定时发送第三心跳数据至人机交互单元，具体地，第一主控单元以100ms为单位发送本机状态，包括正常状态和出错状态，当人机交互单元监测到第三心跳数据异常时，人机交互单元不再显示第一主控单元发送的数据，转而显示第二主控单元发送的数据，第一主控单元降为备系，第二主控单元升为主系，实现主备系的切换。
尽管参照前述实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。

Claims (12)

  1. 一种列控DMI数据冗余控制方法，其特征在于，
    所述DMI同时接收并处理互为主备关系的两组数据，所述DMI基于所述数据的解析结果判断主备关系，所述DMI显示主系数据。
  2. 根据权利要求1所述的列控DMI数据冗余控制方法，其特征在于，所述DMI存储备系数据。
  3. 根据权利要求1或2所述的列控DMI数据冗余控制方法，其特征在于，所述解析结果包含主备系标识，主备系标识基于数据状态动态变化；
    所述DMI判断主备系标识为主系标识或备系标识；
    所述DMI显示具有主系标识的数据，所述DMI存储具有备系标识的数据。
  4. 根据权利要求3所述的列控DMI数据冗余控制方法，其特征在于，
    所述主备系标识基于数据状态动态变化，包括：
    所述DMI接收主系发送的第一心跳数据，第一心跳数据状态随主系数据状态同步变换；
    所述DMI判断第一心跳数据是否正常，并基于判断结果执行以下步骤：
    所述DMI判断第一心跳数据正常，主备系标识保持不变；
    所述DMI判断第一心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
  5. 根据权利要求3所述的列控DMI数据冗余控制方法，其特征在于，
    所述主备系标识基于数据状态动态变化，包括：
    备系接收主系发送的第二心跳数据，第二心跳数据状态随主系数据状态同步变换；
    备系判断第二心跳数据是否正常，并基于判断结果执行以下步骤：
    备系判断第二心跳数据正常，主备系标识保持不变；
    备系判断第二心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
  6. 根据权利要求1或2所述的列控DMI数据冗余控制方法，其特征在于，
    所述DMI接收主系发送的第三心跳数据，第三心跳数据状态随主系数据状态同步变换；
    所述DMI判断第三心跳数据是否正常，并基于判断结果执行以下步骤：
    所述DMI判断第三心跳数据正常，主备系保持不变；
    所述DMI判断第三心跳数据异常，主系数据转换为备系数据，备系数据转换为主系数据。
  7. 一种列控DMI数据冗余控制系统，其特征在于，包括：
    两个主控单元，用于分别向DMI发送数据，两组数据互为主备关系；
    DMI，用于同时接收并处理互为主备关系的两组数据，并基于所述数据的解析结果判断主备关系，显示主系数据。
  8. 根据权利要求7所述的列控DMI数据冗余控制系统，其特征在于，所述DMI用于存储备系数据。
  9. 根据权利要求7或8所述的列控DMI数据冗余控制系统，其特征在于，所述解析结果包含主备系标识，主备系标识基于数据状态动态变化；
    所述DMI用于判断主备系标识为主系标识或备系标识；
    所述DMI用于显示具有主系标识的数据，并存储具有备系标识的数据。
  10. 根据权利要求9所述的列控DMI数据冗余控制系统，其特征在于，
    所述主备系标识基于数据状态动态变化，包括：
    所述DMI用于接收作为主系的主控单元发送的第一心跳数据，第一心跳数据状态随主系数据状态同步变换；
    所述DMI用于判断第一心跳数据是否正常，并基于判断结果执行以下步骤：
    所述DMI判断第一心跳数据正常，主备系标识保持不变；
    所述DMI判断第一心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
  11. 根据权利要求9所述的列控DMI数据冗余控制系统，其特征在于，
    所述主备系标识基于数据状态动态变化，包括：
    作为备系的主控单元用于接收作为主系的主控单元发送的第二心跳数据，第二心跳数据状态随主系数据状态同步变换；
    备系用于判断第二心跳数据是否正常，并基于判断结果执行以下步骤：
    备系判断第二心跳数据正常，主备系标识保持不变；
    备系判断第二心跳数据异常，主系标识转换为备系标识，备系标识转换为主系标识。
  12. 根据权利要求7或8所述的列控DMI数据冗余控制系统，其特征在于，
    所述DMI用于接收作为主系的主控单元发送的第三心跳数据，第三心跳数据状态随主系数据状态同步变换；
    所述DMI用于判断第三心跳数据是否正常，并基于判断结果执行以下步骤：
    所述DMI判断第三心跳数据正常，主备系保持不变；
    所述DMI判断第三心跳数据异常，主系数据转换为备系数据，备系数据转换为主系数据。
PCT/CN2020/108331 2019-10-17 2020-08-11 一种列控dmi数据冗余控制方法和系统 WO2021073221A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP20785892.9A EP3828055B1 (en) 2019-10-17 2020-08-11 Train control dmi data redundancy control method and system
EA202092375A EA202092375A1 (ru) 2019-10-17 2020-08-11 Способ и система управления избыточностью данных интерфейса dmi для управления поездами
RS20221049A RS63730B1 (sr) 2019-10-17 2020-08-11 Postupak i sistem za kontrolu redundantnosti dmi podataka upravljanja vozom

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910988880.0A CN110789569B (zh) 2019-10-17 2019-10-17 一种列控dmi数据冗余控制方法和系统
CN201910988880.0 2019-10-17

Publications (1)

Publication Number Publication Date
WO2021073221A1 true WO2021073221A1 (zh) 2021-04-22

Family

ID=69439325

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/108331 WO2021073221A1 (zh) 2019-10-17 2020-08-11 一种列控dmi数据冗余控制方法和系统

Country Status (6)

Country Link
EP (1) EP3828055B1 (zh)
CN (1) CN110789569B (zh)
EA (1) EA202092375A1 (zh)
HU (1) HUE060600T2 (zh)
RS (1) RS63730B1 (zh)
WO (1) WO2021073221A1 (zh)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110789569B (zh) * 2019-10-17 2022-04-22 北京全路通信信号研究设计院集团有限公司 一种列控dmi数据冗余控制方法和系统
DE102020105794B4 (de) * 2020-03-04 2022-02-03 Infineon Technologies Ag Vorrichtung, Steuerung für eine Vorrichtung und Verfahren zur Kommunikation
CN112249092A (zh) * 2020-10-30 2021-01-22 株洲中车时代电气股份有限公司 一种操纵台交互系统
CN112706801B (zh) * 2021-01-28 2023-07-11 苏州长风航空电子有限公司 列车网络信息的控制方法和控制系统
CN113568301B (zh) * 2021-09-26 2022-01-14 浙江中控技术股份有限公司 热备冗余方法及控制系统
CN114348049B (zh) * 2022-01-06 2024-01-19 北京全路通信信号研究设计院集团有限公司 一种ctcs列控系统多电台冗余控制方法及装置

Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102009025550A1 (de) * 2009-06-15 2010-12-16 Siemens Aktiengesellschaft Verfahren zur Zugdateneingabe bei einer Mehrsystemkonfiguration zur Zugsicherung und Mehrsystemkonfiguration
KR20130013794A (ko) * 2011-07-29 2013-02-06 현대로템 주식회사 철도차량용 이중화 인간기계인터페이스 장치
CN103019218A (zh) * 2012-12-26 2013-04-03 北京国铁路阳技术有限公司 采用双cpu冗余技术的铁路信号装置及其控制方法
CN105450446A (zh) * 2015-11-17 2016-03-30 绵阳市维博电子有限责任公司 一种双机热备份系统及仲裁切换方法
CN105539522A (zh) * 2015-12-21 2016-05-04 株洲南车时代电气股份有限公司 一种基于二乘二取二安全计算机架构的列车运行监控装置及用于该列车运行监控装置的方法
CN105790825A (zh) * 2014-12-25 2016-07-20 中兴通讯股份有限公司 一种分布式保护中控制器热备份的方法和装置
CN108092752A (zh) * 2017-11-14 2018-05-29 北京全路通信信号研究设计院集团有限公司 主控单元热备份的方法及装置、计算机存储介质
CN109367578A (zh) * 2018-09-28 2019-02-22 卡斯柯信号有限公司 一种适用于itcs车载设备的人机交互系统及方法
CN109649446A (zh) * 2018-12-21 2019-04-19 中国铁道科学研究院集团有限公司通信信号研究所 一种多重冗余网络化的计算机联锁人机交互系统
CN109720379A (zh) * 2018-12-31 2019-05-07 河南思维自动化设备股份有限公司 列控系统和列控系统四模切换显示方法
CN109739694A (zh) * 2019-01-03 2019-05-10 中国兵器装备集团自动化研究所 一种双机仲裁切换系统及方法
CN109823375A (zh) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 一种应用于列车自动运行系统的双系热备切换方法及系统
CN109946956A (zh) * 2019-03-27 2019-06-28 北京全路通信信号研究设计院集团有限公司 一种设备主备系同步和热备方法
CN110789569A (zh) * 2019-10-17 2020-02-14 北京全路通信信号研究设计院集团有限公司 一种列控dmi数据冗余控制方法和系统

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3911907A1 (de) * 1989-04-12 1990-10-18 Standard Elektrik Lorenz Ag Verfahren zur staendigen pruefung einer signaltechnisch sicheren bildschirmdarstellung
CN101277269A (zh) * 2008-05-06 2008-10-01 杭州华三通信技术有限公司 实现可靠通信的终端、终端切换方法及系统和适用该系统的方法
CN201321058Y (zh) * 2008-12-19 2009-10-07 中国铁道科学研究院通信信号研究所 列控车载设备的人机界面装置及列控车载设备
CN101890971B (zh) * 2009-05-18 2013-01-23 华为技术有限公司 一种列车运行控制方法、设备和系统
CN101923739B (zh) * 2010-08-19 2012-09-05 北京航空航天大学 飞行器发动机参数和空勤信息综合显示系统及其构建方法
CN102497429B (zh) * 2011-12-13 2014-08-06 南京恩瑞特实业有限公司 轨道交通中车地数据传输多重冗余处理方法
US9497099B2 (en) * 2013-12-16 2016-11-15 Artesyn Embedded Computing, Inc. Voting architecture for safety and mission critical systems
CN103780365B (zh) * 2014-01-26 2017-03-29 中国神华能源股份有限公司 动态的多链路冗余数据传输方法
CN105187248B (zh) * 2015-09-16 2018-10-23 浙江众合科技股份有限公司 一种冗余切换系统
CN205186191U (zh) * 2015-10-10 2016-04-27 河南思维自动化设备股份有限公司 一种列车运行监控系统
CN105471622B (zh) * 2015-11-12 2019-03-01 武汉噢易云计算股份有限公司 一种基于Galera的控制节点主备切换的高可用方法及系统
CN206193530U (zh) * 2016-10-28 2017-05-24 上海恒锦动力科技有限公司 一种柴油发电机组双冗余监控系统
CN109218096A (zh) * 2018-09-19 2019-01-15 新智能源系统控制有限责任公司 一种基于主备冗余的scada实时库访问系统
CN109306875B (zh) * 2018-09-25 2021-02-09 中国船舶重工集团公司第七0三研究所 一种汽轮机deh双控制器同步热备冗余切换装置及方法
CN208861155U (zh) * 2018-10-29 2019-05-14 北京交大思诺科技股份有限公司 热备冗余显示器

Patent Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102009025550A1 (de) * 2009-06-15 2010-12-16 Siemens Aktiengesellschaft Verfahren zur Zugdateneingabe bei einer Mehrsystemkonfiguration zur Zugsicherung und Mehrsystemkonfiguration
KR20130013794A (ko) * 2011-07-29 2013-02-06 현대로템 주식회사 철도차량용 이중화 인간기계인터페이스 장치
CN103019218A (zh) * 2012-12-26 2013-04-03 北京国铁路阳技术有限公司 采用双cpu冗余技术的铁路信号装置及其控制方法
CN105790825A (zh) * 2014-12-25 2016-07-20 中兴通讯股份有限公司 一种分布式保护中控制器热备份的方法和装置
CN105450446A (zh) * 2015-11-17 2016-03-30 绵阳市维博电子有限责任公司 一种双机热备份系统及仲裁切换方法
CN105539522A (zh) * 2015-12-21 2016-05-04 株洲南车时代电气股份有限公司 一种基于二乘二取二安全计算机架构的列车运行监控装置及用于该列车运行监控装置的方法
CN108092752A (zh) * 2017-11-14 2018-05-29 北京全路通信信号研究设计院集团有限公司 主控单元热备份的方法及装置、计算机存储介质
CN109367578A (zh) * 2018-09-28 2019-02-22 卡斯柯信号有限公司 一种适用于itcs车载设备的人机交互系统及方法
CN109649446A (zh) * 2018-12-21 2019-04-19 中国铁道科学研究院集团有限公司通信信号研究所 一种多重冗余网络化的计算机联锁人机交互系统
CN109720379A (zh) * 2018-12-31 2019-05-07 河南思维自动化设备股份有限公司 列控系统和列控系统四模切换显示方法
CN109739694A (zh) * 2019-01-03 2019-05-10 中国兵器装备集团自动化研究所 一种双机仲裁切换系统及方法
CN109823375A (zh) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 一种应用于列车自动运行系统的双系热备切换方法及系统
CN109946956A (zh) * 2019-03-27 2019-06-28 北京全路通信信号研究设计院集团有限公司 一种设备主备系同步和热备方法
CN110789569A (zh) * 2019-10-17 2020-02-14 北京全路通信信号研究设计院集团有限公司 一种列控dmi数据冗余控制方法和系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3828055A4 *

Also Published As

Publication number Publication date
EP3828055B1 (en) 2022-09-28
EA202092375A1 (ru) 2021-08-02
CN110789569B (zh) 2022-04-22
EP3828055A4 (en) 2021-08-25
HUE060600T2 (hu) 2023-03-28
RS63730B1 (sr) 2022-12-30
CN110789569A (zh) 2020-02-14
EP3828055A1 (en) 2021-06-02

Similar Documents

Publication Publication Date Title
WO2021073221A1 (zh) 一种列控dmi数据冗余控制方法和系统
US5218465A (en) Intelligent interconnects for broadband optical networking
CN110851392B (zh) 基于Modbus RTU协议的通讯方法及通讯系统
JP2771556B2 (ja) 車両用多重伝送装置
CN111754926B (zh) 一种led视频控制系统及其故障定位方法、led显示系统
CN107612800B (zh) 一种连接profibus冗余双总线网络与profibus单总线网络的y型转换设备的实现方法及控制装置
US8812759B2 (en) Bus subscriber device for connection to a line-redundant data bus, and method for controlling the communication of a bus subscriber with a line-redundant serial data bus
KR20180136645A (ko) 차량 네트워크에서 진단을 위한 통신 노드의 동작 방법
CN109947579A (zh) 轨道车辆通用网络控制器平台及控制方法
CN103941625B (zh) Can总线数据传输监控系统
US20020040452A1 (en) Method for producing a connection redundancy for a serial communication system having a master unit and a plurality of slave units, which are interconnected as a concatenation of point-to-point connections in line topology, and corresponding serial communication system
US20150358199A1 (en) Train-information management device and train-information management method
CN113259273B (zh) 交换机的控制方法、交换机、计算机设备和存储介质
CN110995533A (zh) 一种以太网打流测试系统
CN104579800A (zh) 一种诊断维护终端和车载主机的通信方法及诊断维护系统
CN108259130A (zh) 一种波特率奇偶校验位自适应的Modbus传输系统及方法
JP2009111911A (ja) 通信装置及び通信システム並びに通信方法
RU180923U1 (ru) Модуль ввода дискретных сигналов
CN112487749B (zh) 一种基于单片机的Profibus-DP和Modbus集成化从站装置
US20230230428A1 (en) Inspection apparatus and inspection method
CN114338265B (zh) 一种基于ttp/c总线的程序下载系统及方法
KR101329975B1 (ko) 네트워크 장치 및 그것의 링크 관리 방법
US7724642B2 (en) Method and apparatus for continuous operation of a point-of-sale system during a single point-of-failure
TWI728330B (zh) 交通號誌控制系統及其控制方法
CN116938630A (zh) 基于双can通讯实现通讯链路冗余方法及系统

Legal Events

Date Code Title Description
ENP Entry into the national phase

Ref document number: 2020785892

Country of ref document: EP

Effective date: 20201014

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20785892

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE