CN111891192B - Train overspeed protection equipment, control method and dual-machine hot standby system - Google Patents

Train overspeed protection equipment, control method and dual-machine hot standby system Download PDF

Info

Publication number
CN111891192B
CN111891192B CN202010824199.5A CN202010824199A CN111891192B CN 111891192 B CN111891192 B CN 111891192B CN 202010824199 A CN202010824199 A CN 202010824199A CN 111891192 B CN111891192 B CN 111891192B
Authority
CN
China
Prior art keywords
overspeed protection
train
train overspeed
equipment
atp
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010824199.5A
Other languages
Chinese (zh)
Other versions
CN111891192A (en
Inventor
李乐
张溢斌
张瑶
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qingdao Hisense Wechat Signal Co ltd
Original Assignee
Qingdao Hisense Wechat Signal Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qingdao Hisense Wechat Signal Co ltd filed Critical Qingdao Hisense Wechat Signal Co ltd
Priority to CN202010824199.5A priority Critical patent/CN111891192B/en
Publication of CN111891192A publication Critical patent/CN111891192A/en
Application granted granted Critical
Publication of CN111891192B publication Critical patent/CN111891192B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/20Trackside control of safe travel of vehicle or train, e.g. braking curve calculation
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/20Trackside control of safe travel of vehicle or train, e.g. braking curve calculation
    • B61L2027/204Trackside control of safe travel of vehicle or train, e.g. braking curve calculation using Communication-based Train Control [CBTC]

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)

Abstract

The embodiment of the application provides train overspeed protection equipment, a control method and a dual-locomotive hot standby system, and relates to the technical field of rail transit. The train overspeed protection device provided by the embodiment of the application is directly connected with another train overspeed protection device in a dual-machine hot-standby system, the two devices send state information mutually, when the device meets the condition of switching to the primary device, whether the device is switched to the primary device or not is determined according to the state information of the other device, and the primary-standby switching is realized without an intermediate switching unit. Therefore, the double-machine hot standby system does not need to be provided with a middle machine reversing unit, so that the equipment cost can be reduced. Meanwhile, as the double-host hot standby system does not need to be provided with a middle host reversing unit, the situation of double hosts can not occur, and the reliability of the system is improved.

Description

Train overspeed protection equipment, control method and dual-machine hot standby system
Technical Field
The embodiment of the application relates to the technical field of rail transit, in particular to train overspeed protection equipment, a control method and a dual-machine hot standby system.
Background
An Automatic Train Protection System (ATP), also called as a Train overspeed Protection System, is a safety core of a Communication Based Train Control System (CBTC) for urban rail transit, and is responsible for all aspects of safety of the whole CBTC System. The ATP system is responsible for train-to-train safety interval and overspeed protection, as well as train positioning, speed measurement, calculating movement authorization and performing speed supervision.
In order to ensure the stability and reliability of the ATP system, a backup of system devices is a commonly selected scheme. Namely, two train overspeed protection devices are arranged, when one train overspeed protection device fails, the other train overspeed protection device can be switched to a main device, so that the reliable and stable operation of the whole system is ensured. Therefore, the ATP system may also be referred to as a dual-system hot-standby system.
The switching of the existing dual-computer hot standby system requires an intermediate hardware device, such as a switch unit (switch) shown in fig. 1, to assist the decision. The train switching unit can acquire the relay states of the first train overspeed protection device and the second train overspeed protection device in the dual-locomotive hot standby system, and determines the working state of the train overspeed protection device through the relay states.
The first train overspeed protection device and the second train overspeed protection device can transmit the working states of the first train overspeed protection device and the second train overspeed protection device to the reversing unit through the relay state, and the reversing unit is responsible for completing the switching function of the main device and returning the switching result to the first train overspeed protection device and the second train overspeed protection device. Specifically, the switching unit may implement a logic of the master-slave switching according to the collected relay state, determine which device may be switched to the master device, and return a switching result to the first train overspeed protection device and the second train overspeed protection device through the switching unit state information, so as to drive corresponding relays in the first train overspeed protection device and the second train overspeed protection device, thereby implementing the master-slave switching.
The dual-computer hot standby system needs to adopt the host-standby switching by the host-standby unit, so that the cost is higher. Moreover, once the unit for switching the machine fails, the situation of double hosts may occur, which will affect the operation of the whole system and reduce the availability of the system.
Disclosure of Invention
In order to solve the existing technical problem, embodiments of the present application provide train overspeed protection equipment, a control method, and a dual-locomotive hot standby system, which can effectively reduce equipment cost and improve system reliability.
In order to achieve the above purpose, the technical solution of the embodiment of the present application is implemented as follows:
in a first aspect, an embodiment of the present application provides a train overspeed protection device, where the train overspeed protection device is applied to a dual-machine hot-standby system, and the dual-machine hot-standby system further includes a second train overspeed protection device connected to the train overspeed protection device; the train overspeed protection device comprises a processor, a memory and a speed sensor;
the speed sensor is used for detecting the running speed of the train in real time;
the memory is used for storing program codes and data information generated when the train overspeed protection equipment operates;
the processor is used for determining whether the train is overspeed or not according to the train running speed detected by the speed sensor;
the processor is further configured to: executing the program code to realize the following processes: when the condition of switching to the main equipment is determined to be met, pre-rising main state information is sent to the second train overspeed protection equipment; if the pre-rising main state information sent by the second train overspeed protection equipment is not received within a first preset time after the pre-rising main state information is sent, switching to main equipment; or, if the pre-ascending main state information sent by the second train overspeed protection equipment is received within a first preset time after the pre-ascending main state information is sent, whether to continue to be switched to the main equipment is determined according to the equipment grade.
The train overspeed protection device provided by the embodiment of the application is directly connected with another train overspeed protection device in a dual-machine hot-standby system, the two devices send state information mutually, when the device meets the condition of switching to the primary device, whether the device is switched to the primary device or not is determined according to the state information of the other device, and the primary-standby switching is realized without an intermediate switching unit. Therefore, the double-machine hot standby system does not need to be provided with a middle machine reversing unit, so that the equipment cost can be reduced. Meanwhile, as the double-host hot standby system does not need to be provided with a middle reversing unit, the double-host situation can not occur, and the reliability of the system is improved.
In one possible implementation, the processor is specifically configured to:
if the current equipment is the preset first-level equipment, continuing to switch to the main equipment; or,
and if the second-level equipment is preset, stopping switching to the main equipment.
In this embodiment, since the preset level of the train overspeed protection device is preset, the active-standby state switching of the train overspeed protection device can be determined when the train overspeed protection device sends the pre-increased main state information according to the preset level, so that the availability of the device and the reliability of the system are improved.
In one possible implementation, the processor is further configured to:
monitoring state information sent by the second train overspeed protection equipment in real time;
and determining whether to switch the current state according to whether the state information sent by the second train overspeed protection device is monitored or not or according to the monitored state information sent by the second train overspeed protection device.
In this embodiment, the train overspeed protection devices in the dual-machine hot-standby system can send status information to each other, and determine the current status switching of the train overspeed protection devices according to the sent status information, without making a main-standby switching decision through an intermediate backup unit, so that the difficulty in information processing of the devices can be reduced.
In one possible implementation manner, the train overspeed protection device is connected with the second train overspeed protection device through a network cable; the processor is specifically configured to:
if state information sent by the second train overspeed protection device through a network cable is received and the state information indicates that the second train overspeed protection device is a non-primary device, determining that the condition of switching to the primary device is met;
and sending pre-rising main state information to the second train overspeed protection equipment.
In this embodiment, the train overspeed protection devices in the dual-machine hot-standby system send status information to each other through the connected network cable, and the condition for meeting the status switching is determined by the indication of the status information, so that the master-standby status switching of the train overspeed protection devices is determined, and the availability of the system can be increased.
In one possible implementation manner, a data transmission device is arranged between the train overspeed protection device and the second train overspeed protection device, and the train overspeed protection device and the second train overspeed protection device transmit status information through the data transmission device; the processor is further configured to:
if the train is in the standby state and receives state information sent by the second train overspeed protection device through a network cable or the data transmission device, and the state information indicates that the second train overspeed protection device is in the off-line state, determining that the condition of switching to the main device is met; or if the train is in the standby state and a synchronization signal sent by the second train overspeed protection device through the network cable is not received within a second preset time, determining that the second train overspeed protection device is in the disconnected state through the data transmission device, and determining that the condition of switching to the main device is met;
and sending pre-rising main state information to the second train overspeed protection equipment.
In the embodiment, the data transmission device is additionally arranged between the train overspeed protection devices in the dual-machine hot-standby system, the state information is transmitted through the data transmission device, and the master-standby state switching of the train overspeed protection devices is determined through the indication of the state information, so that the risk caused by the disconnection of the train overspeed protection devices and a network cable can be reduced, and the stability and the reliability of the system are improved.
In one possible implementation, the train overspeed protection device is connected with the second train overspeed protection device through a hard wire; the processor is further configured to:
if the train is in the standby state and the communication with the second train overspeed protection equipment and the data transmission equipment is interrupted, determining that the state of the second train overspeed protection equipment is an off-line state through the hard line, and determining that the condition of switching to the main equipment is met;
and sending pre-rising main state information to the second train overspeed protection equipment.
In the embodiment, a hard wire is additionally arranged between the train overspeed protection devices in the dual-machine hot-standby system for connection, and the master-standby state switching of the train overspeed protection devices is determined through the hard wire, so that the condition that the train overspeed protection devices, the network cable and the data transmission device are interrupted can be avoided, and the availability of the system is improved.
In one possible implementation, the processor is further configured to:
if the train overspeed protection device is the main device and the communication with the second train overspeed protection device and the data transmission device is interrupted, the state of the second train overspeed protection device is determined to be a non-offline state through the hard wire, and then the train overspeed protection device is switched to an offline state.
In this embodiment, when the train overspeed protection device is the master device and the train overspeed protection device is interrupted with the network cable and the data transmission device, the state information of the second train overspeed protection device is determined by hardware, so as to determine the master-slave state switching of the train overspeed protection device, thereby avoiding the occurrence of a double-master situation and increasing the reliability of the system.
In a second aspect, an embodiment of the present application provides a method for controlling devices in a dual-machine hot-standby system, where the dual-machine hot-standby system includes a first train overspeed protection device and a second train overspeed protection device that are connected to each other; the method comprises the following steps:
when the first train overspeed protection device determines that the condition of switching to the main device is met, the first train overspeed protection device sends pre-rising main state information to the second train overspeed protection device;
if the first train overspeed protection device does not receive the pre-rising main state information sent by the second train overspeed protection device within a first preset time after the pre-rising main state information is sent, the first train overspeed protection device is switched to be a main device; or,
and if the first train overspeed protection device receives the pre-ascending main state information sent by the second train overspeed protection device within a first preset time after the pre-ascending main state information is sent, determining whether to continue switching to the main device according to the device grade of the first train overspeed protection device.
In a possible implementation manner, determining whether to continue switching to the active device according to the device class of the first train overspeed protection device includes:
if the first train overspeed protection equipment is preset first-grade equipment, the first train overspeed protection equipment is continuously switched to main equipment; or,
and if the first train overspeed protection equipment is preset second-level equipment, the first train overspeed protection equipment stops being switched to the main equipment.
In one possible implementation, the method further includes:
the first train overspeed protection equipment monitors state information sent by the second train overspeed protection equipment in real time;
and the first train overspeed protection equipment determines whether to switch the current state according to whether the state information sent by the second train overspeed protection equipment is monitored or not or according to the monitored state information sent by the second train overspeed protection equipment.
In one possible implementation manner, the first train overspeed protection device is connected with the second train overspeed protection device through a network cable; when the first train overspeed protection device determines that the condition of switching to the main device is met, the method for sending the pre-upgrade main state information to the second train overspeed protection device comprises the following steps:
if the first train overspeed protection device receives state information sent by a second train overspeed protection device through a network cable, and the state information indicates that the second train overspeed protection device is not a main device, the first train overspeed protection device determines that the condition of switching to the main device is met;
and the first train overspeed protection equipment sends pre-lifting main state information to the second train overspeed protection equipment.
In one possible implementation manner, a data transmission device is arranged between the first train overspeed protection device and the second train overspeed protection device, and the first train overspeed protection device and the second train overspeed protection device transmit status information through the data transmission device; when the first train overspeed protection device determines that the condition of switching to the main device is met, the first train overspeed protection device sends pre-rising main state information to the second train overspeed protection device, and the method further comprises the following steps:
if the first train overspeed protection device is in a standby state and receives state information sent by the second train overspeed protection device through a network cable or the data transmission device, and the state information indicates that the second train overspeed protection device is in an offline state, the first train overspeed protection device determines that the condition of switching to the main device is met; or if the first train overspeed protection device is in a standby state and does not receive a synchronization signal sent by the second train overspeed protection device through a network cable within a second preset time, the first train overspeed protection device determines that the second train overspeed protection device is in a disconnected state through the data transmission device, and then the first train overspeed protection device determines that the condition of switching to the primary device is met;
and the first train overspeed protection equipment sends pre-lifting main state information to the second train overspeed protection equipment.
In one possible implementation, the first train overspeed protection device is connected with the second train overspeed protection device through a hard wire; when the first train overspeed protection device determines that the condition of switching to the main device is met, the first train overspeed protection device sends pre-rising main state information to the second train overspeed protection device, and the method further comprises the following steps:
if the first train overspeed protection device is in a standby state, and the first train overspeed protection device is in communication interruption with the second train overspeed protection device and the data transmission device, and the first train overspeed protection device determines that the second train overspeed protection device is in an off-line state through the hard line, the first train overspeed protection device determines that the condition of switching to the primary device is met;
and the first train overspeed protection equipment sends pre-lifting main state information to the second train overspeed protection equipment.
In one possible implementation, the method further includes:
if the first train overspeed protection device is a master device, the first train overspeed protection device is in communication interruption with the second train overspeed protection device and the data transmission device, and the first train overspeed protection device determines that the second train overspeed protection device is in a non-offline state through the hard line, the first train overspeed protection device is switched to an offline state.
In a third aspect, an embodiment of the present application provides a dual-locomotive hot-standby system, where the dual-locomotive hot-standby system includes a first train overspeed protection device and a second train overspeed protection device that are connected to each other.
The technical effect brought by any implementation manner of the second aspect or the third aspect may be referred to the technical effect brought by the implementation manner of the first aspect, and is not described herein again.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.
Fig. 1 is a schematic structural diagram of a dual-computer hot standby system in the prior art;
FIG. 2 is a schematic structural diagram of a train overspeed protection apparatus provided by an embodiment of the present application;
fig. 3 is a schematic structural diagram of a dual-computer hot-standby system according to an embodiment of the present disclosure;
fig. 4 is a schematic structural diagram of another dual-computer hot standby system according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of another dual-computer hot standby system according to an embodiment of the present application;
fig. 6 is a schematic flowchart of a method for controlling devices in a dual-computer hot-standby system according to an embodiment of the present application;
FIG. 7 is a schematic flow chart of the state switching of the overspeed protection apparatus of a train according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application clearer, the present application will be described in further detail with reference to the accompanying drawings, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The train overspeed protection device provided by the embodiment of the application is applied to a dual-machine hot-standby system and is connected with a second train overspeed protection device in the dual-machine hot-standby system, wherein the first train overspeed protection device is called as a first ATP device, and the second train overspeed protection device is called as a second ATP device. The train overspeed protection device can be the first ATP device 100 shown in fig. 3. The schematic structural diagram of the train overspeed protection apparatus is specifically shown in fig. 2, and the first ATP apparatus includes a speed sensor 101, a memory 102, and a processor 103.
And the speed sensor 101 is used for detecting the running speed of the train in real time.
A memory 102, configured to store data information generated by the first ATP device 100 during operation and a program code used by the processor 103 during operation, such as a program code of a control method of a device in a dual-server hot standby system provided in an embodiment of the present application, where the program code may be executed by the processor 103.
The processor 103 may include one or more Central Processing Units (CPUs), or digital processing units, etc. And the processor 103 is used for determining whether the train is overspeed or not according to the running speed of the train detected by the speed sensor 101. A processor 103, further configured to call the program code stored in the memory 102 to implement the following processes: when the condition of switching to the primary equipment is determined to be met, pre-rising main state information is sent to second ATP equipment; if the pre-rising main state information sent by the second ATP equipment is not received within a first preset time after the pre-rising main state information is sent, switching to the main equipment; or, if the pre-upgrade master state information sent by the second ATP device is received within a first preset time after the pre-upgrade master state information is sent, determining whether to continue switching to the master device according to the device class.
The specific connection medium among the speed sensor 101, the memory 102, and the processor 103 is not limited in the embodiments of the present application. In the embodiment of the present application, in fig. 2, the speed sensor 101, the memory 102, and the processor 103 are connected by the bus 104, and the connection manner among other components is only schematically illustrated and is not limited thereto. The bus 104 may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 2, but it is not intended that there be only one bus or one type of bus.
In one embodiment, the processor 103 in the first ATP device 100 may specifically determine whether to continue to switch to the active device according to the device class of the first ATP device. The device class is preset, that is, the first ATP device and the second ATP device are preset as devices of different classes. For example, a first ATP device may be set as a first tier device, a second ATP device may be set as a second tier device; the second ATP device may also be set as the first level device and the first ATP device may be set as the second level device. When the first-level device and the second-level device are both pre-upgrading masters, the first-level device may upgrade to a master device, and the second-level device withdraws the pre-upgrading masters and does not upgrade to the master device any more.
In this embodiment, when determining that the first ATP device meets the condition of switching to the active device, the processor 103 needs to first send the pre-upgrade master state information of the first ATP device to the second ATP device in the dual-device hot standby system. If the pre-upgrade master state information sent by the second ATP equipment is not received within a first preset time after the pre-upgrade master state information is sent, the first ATP equipment can be switched to be the master equipment. If the pre-upgrade master state information sent by the second ATP device is received within a first preset duration after the pre-upgrade master state information is sent, when the first ATP device is a preset first-level device, the first ATP device may continue to be switched to the master device, and when the first ATP device is a preset second-level device, the first ATP device needs to stop being switched to the master device.
The processor 103 may also monitor status information sent by the second ATP device in real time, and determine whether to switch the current status of the first ATP device according to whether to monitor status information sent by the second ATP device or according to monitored status information sent by the second ATP device.
In one embodiment, as shown in fig. 3, the dual-server hot-standby system includes a first ATP device 100 and a second ATP device 300 connected to each other. The first ATP device 100 and the second ATP device 300 are connected by a network cable 301. The first ATP device 100 and the second ATP device 300 may transmit the state of the train overspeed protection device through the network cable 301, and may also transmit a synchronization signal. The first ATP device 100 and the second ATP device 300 may perform active/standby switching according to their states and states of the opposite end devices. The processes of the primary-secondary switching of the first ATP device 100 and the second ATP device 300 are basically the same. The following describes a specific process of performing the primary/standby switching by taking the first ATP device 100 as an example.
Specifically, the processor 103 of the first ATP device 100 may determine whether the first ATP device switches the current state according to the current state information of the first ATP device and the received state information sent by the second ATP device through the network cable.
In this embodiment, if the processor 103 receives status information sent by the second ATP device through the network cable, and the status information indicates that the second ATP device is a non-active device, and it is determined that the first ATP device meets the condition of switching to an active device, the first ATP device may send pre-upgrade master status information to the second ATP device.
After the processor 103 sends the pre-upgrade master state information to the second ATP device, if the pre-upgrade master state information sent by the second ATP device is received within the first preset time length, the first ATP device may continue to be switched to the master state when the first ATP device is a preset first-level device, and the first ATP device needs to stop being switched to the master device and switch to the offline state when the first ATP device is a preset second-level device.
After the processor 103 sends the pre-upgrade master status information to the second ATP device, if the status information sent by the second ATP device through the network cable is received and indicates that the second ATP device is in the master status, the first ATP device needs to stop switching to the master device and switch to the offline status.
After the processor 103 sends the pre-rising main state information to the second ATP device, if the information that the current running speed of the train detected by the speed sensor 101 is not zero is received, it is determined that the first ATP device stops being switched to the active device, and the first ATP device is switched to the offline state.
In an alternative embodiment, if the first ATP device is currently in the offline state, the processor 103 receives status information sent by the second ATP device through the network cable, and the status information indicates that the second ATP device is in the standby state or the pre-boot master state, and the first ATP device may continue to maintain the offline state.
In an alternative embodiment, if the first ATP device is currently in the active state, the processor 103 receives status information sent by the second ATP device through the network cable, and simultaneously sends status information to the second ATP device, where the status information is communication status information of the first ATP device and the external device, for example, communication status between the first ATP device and the ground device, the interlock device, and the like, and the status information indicates that the first ATP device fails to communicate with the external device, and the first ATP device may switch to the offline state.
In an optional embodiment, if the first ATP device is currently in the standby state, the processor 103 receives state information sent by the second ATP device through the network cable, and the state information indicates that the second ATP device is in the active state, and the processor 103 fails to analyze a synchronization signal sent by the second ATP device through the network cable within a third preset time period, and the first ATP device may switch to the offline state.
In another embodiment, as shown in fig. 4, a data transmission device 401 is further disposed between the first ATP device 100 and the second ATP device 300, and status information between the two devices is transmitted through the data transmission device 401. The data transfer device 401 may be a hardware system having a processor and a communication interface. The processor 103 in the first ATP device 100 may also determine whether the first ATP device switches current state based on current state information of the first ATP device and received state information sent by the second ATP device via the data transmission device.
In this embodiment, if the first ATP device is currently in an offline state, the processor 103 receives information that the current running speed of the train detected by the speed sensor 101 is zero, and receives state information sent by the second ATP device through a network cable or a data transmission device, where the state information indicates that the second ATP device is in the offline state, it is determined that the first ATP device meets the condition of switching to the active device, and the processor 103 sends pre-upgrade master state information to the second ATP device.
In an optional embodiment, if the first ATP device is currently in an offline state, the processor 103 receives information that the current running speed of the train detected by the speed sensor 101 is zero, and does not receive a synchronization signal sent by the second ATP device through the network cable within a second preset time period, and determines that the second ATP device is in an off state through the data transmission device, it is determined that the first ATP device meets the condition of being switched to the active device, and the processor 103 sends pre-upgrade master state information to the second ATP device.
After the processor 103 sends the pre-upgrade master state information to the second ATP device, if the pre-upgrade master state information sent by the second ATP device is received within the first preset time length, the first ATP device may continue to be switched to the master state when the first ATP device is a preset first-level device, and the first ATP device needs to stop being switched to the master device and switch to the offline state when the first ATP device is a preset second-level device.
After the processor 103 sends the pre-upgrade master status information to the second ATP device, if the status information sent by the second ATP device through the network cable is received and indicates that the second ATP device is in the master status, the first ATP device needs to stop switching to the master device and switch to the offline status.
After the processor 103 sends the pre-rising main state information to the second ATP device, if the information that the current running speed of the train detected by the speed sensor 101 is not zero is received, it is determined that the first ATP device stops being switched to the active device, and the first ATP device is switched to the offline state. In an optional embodiment, when it is determined that the first ATP device meets the condition of switching to the active device, the processor 103 may send the pre-upgrade master state information to the second ATP device through the network cable and the data transmission device. If the pre-rising main state information or the main state information sent by the second ATP equipment is not received within the first preset time length, the first ATP equipment can be switched to the main state.
In an optional embodiment, if the first ATP device is currently in an offline state, the processor 103 receives state information sent by the second ATP device through a network cable or a data transmission device, where the state information indicates that the second ATP device is in an active state, determines that the first ATP device and the second ATP device are successfully synchronized according to a synchronization signal sent by the network cable, and the processor 103 receives information that a current running speed of the train detected by the speed sensor 101 is zero, and the first ATP device may switch to a standby state.
In an alternative embodiment, if the first ATP device is currently in the standby state, the processor 103 receives status information sent by the second ATP device through the network cable or the data transmission device, where the status information indicates that the second ATP device is in the offline state, and the first ATP device may switch to the active state.
In an optional embodiment, if the first ATP device is currently in the standby state, the processor 103 does not receive a synchronization signal sent by the second ATP device through the network cable within a second preset time period, and determines that the second ATP device is in the disconnected state through the data transmission device, and the first ATP device may be switched to the active state.
In another embodiment, as shown in fig. 5, the first ATP device 100 and the second ATP device 300 are further connected via a hardwire 501. The hard wire 501 may be a single wire of conductive solid metal with a diameter of more than 1 mm, and is used for transmitting pulse signals.
The processor 103 in the first ATP device 100 may also determine whether the first ATP device switches current state based on the current state information of the device and the current state information of the second ATP device determined via the hardwire 501.
Specifically, as shown in fig. 7, after the ATP system on the train is powered on or restarted, both the first ATP device 100 and the second ATP device 200 enter an offline state, and both the first ATP device and the second ATP device may switch between different states according to the conditions shown in fig. 7 and table 1.
Taking the first ATP device 100 as an example, the processor 103 may switch the state of the first ATP device according to the state information switching condition shown in fig. 7 and table 1.
TABLE 1
Before/after conversion Off-line Pre-lifting main Main use For standby Shutdown
Off-line Condition 1 Condition 2 \ Condition 3 Condition 9\ Condition 10
Main use Condition 4 \ \ \ Condition 10
For standby Condition 5 \ Condition 6 \ Condition 10
Pre-lifting main Condition 7 \ Condition 8 \ Condition 10
Shutdown \ \ \ \ \
If the first ATP device is currently in the offline state, the first ATP device maintains the offline state when the first ATP device state information switching condition satisfies condition 1 in table 1.
Condition 1 may include: when the first ATP device receives the status information sent by the second ATP device through the network cable, and the status information indicates that the second ATP device is in the standby state or the pre-boost main state, the first ATP device may continue to maintain the offline state.
The first ATP device is currently in an offline state, the first ATP device, the second ATP device and the data transmission device are in communication interruption, and the first ATP device continues to maintain the offline state.
If the first ATP device is currently in the offline state, the first ATP device may switch to the pre-boot master state when the first ATP device state information switching condition satisfies condition 2 in table 1.
Condition 2 may include: the first ATP device is currently in an off-line state, a speed sensor of the first ATP device detects that the current running speed of the train is zero, the first ATP device receives state information sent by the second ATP device through a network cable or data transmission device, the state information indicates that the second ATP device is in the off-line state, and the first ATP device can be switched to a pre-rising main state.
The method comprises the steps that a first ATP device is currently in an off-line state, a speed sensor of the first ATP device detects that the current running speed of a train is zero, a synchronization signal sent by a second ATP device through a network cable is not received within a set time length, the second ATP device is determined to be in a disconnected state through data transmission equipment, and the first ATP device can be switched to a pre-rising main state. The disconnection state refers to interruption of communication between the second ATP device and the data transmission device, that is, if the data transmission device does not receive the information sent by the second ATP device for more than a set time length, the second ATP device is marked as a disconnection state.
If the first ATP device is currently in the offline state, the first ATP device may switch to the standby state when the first ATP device state information switching condition satisfies condition 3 in table 1.
Condition 3 may include: the first ATP device is currently in an off-line state, a speed sensor of the first ATP device detects that the current running speed of the train is zero, the first ATP device receives state information sent by the second ATP device through a network cable or a data transmission device, the state information indicates that the second ATP device is in a primary state, the first ATP device and the second ATP device are successfully synchronized according to a synchronization signal sent by the network cable, and the first ATP device can be switched to a standby state.
If the first ATP device is currently in the active state, the first ATP device may switch to the offline state when the switching condition of the state information of the first ATP device matches condition 4 in table 1.
Condition 4 may include: the first ATP device is currently in a primary state, receives state information sent by the second ATP device through a network cable, and simultaneously sends the state information to the second ATP device, wherein the state information is communication state information of the first ATP device and the external device, the state information indicates that the first ATP device fails to communicate with the external device, and the first ATP device can be switched to an offline state. The first ATP device is currently in a master state, the first ATP device, the second ATP device and the data transmission device are all in communication interruption, the state of the second ATP device is determined to be a non-offline state through a hard wire, and the first ATP device can be switched to an offline state.
If the first ATP device is currently in the standby state, the first ATP device may switch to the offline state when the first ATP device state information switching condition meets condition 5 in table 1.
Condition 5 may include: the first ATP device receives state information sent by the second ATP device through the network cable, the state information indicates that the second ATP device is in a primary state, analysis of a synchronous signal sent by the second ATP device through the network cable fails within a preset time period, and the first ATP device can be switched to an off-line state.
The first ATP device is currently in a standby state, the first ATP device is interrupted in communication with both the second ATP device and the data transfer device, and the first ATP device may switch to an offline state.
If the first ATP device is currently in the standby state and the first ATP device state information switching condition meets condition 6 in table 1, the first ATP device may switch to the active state.
Condition 6 may include: the first ATP device receives state information sent by the second ATP device through the network cable or the data transmission device, the state information indicates that the second ATP device is in an offline state, and the first ATP device can be switched to a primary state.
The first ATP equipment is currently in a standby state, the first ATP equipment does not receive a synchronization signal sent by the second ATP equipment through a network cable within a second preset time length, the second ATP equipment is determined to be in a disconnected state through the data transmission equipment, and the first ATP equipment can be switched to an active state.
The first ATP device is currently in a standby state, the first ATP device, the second ATP device and the data transmission device are all in communication interruption, the second ATP device is determined to be in an off-line state through a hard wire, and the first ATP device can be switched to a main state.
If the first ATP device is currently in the pre-upgrade master state and the switching condition of the state information of the first ATP device meets condition 7 in table 1, the first ATP device needs to stop switching to the master device, and may be switched to the offline state.
Condition 7 may include: the first ATP equipment is currently in a pre-ascending main state, receives pre-ascending main state information sent by the second train overspeed protection equipment within a first preset time length, and when the first ATP equipment is a preset first-level equipment, the first ATP equipment can be continuously switched to the main state, and when the first ATP equipment is a preset second-level equipment, the first ATP equipment needs to be stopped being switched to the main equipment and can be switched to an off-line state.
The first ATP device receives state information sent by the second ATP device through a network cable, the state information indicates that the second ATP device is in a primary state, the first ATP device needs to stop switching to the primary device, and the first ATP device can be switched to an offline state.
The first ATP equipment is currently in a pre-rising main state, the first ATP equipment, the second ATP equipment and the data transmission equipment are in communication interruption, the second ATP equipment is determined to be in a disconnected state through a hard line, the first ATP equipment needs to stop switching to be the main equipment, and the first ATP equipment can be switched to an offline state.
The first ATP equipment is currently in a pre-rising main state, the speed sensor of the first ATP equipment detects that the current running speed of the train is not zero, the first ATP equipment needs to be stopped to be switched into the main equipment, and the first ATP equipment can be switched to an off-line state.
If the first ATP device is currently in the pre-upgrade master state and the first ATP device state information switching condition meets condition 8 in table 1, the first ATP device may switch to the master state.
Condition 8 may include: the first ATP device is currently in a pre-rising main state, the first ATP device sends pre-rising main state information to the second ATP device through the network cable and the data transmission device, the pre-rising main state information or the main state information sent by the second ATP device is not received within a first preset time length, and the first ATP device can be switched to the main state. The first preset time period may be 1s, or may be configured according to actual needs.
If the switching condition of the state information of the first ATP device meets the condition 9 in the table 1, the first ATP device, the second ATP device and the data transmission device are in communication interruption, the second ATP device is determined to be in a disconnected state through a hard line, and the first ATP device can be switched to a shutdown state when the disconnected state lasts for a fourth preset time. The fourth preset time period may be 1.5s, or may be 1500 communication cycles.
If the condition 10 in table 1 is met in the switching condition of the state information of the first ATP device, it is determined that the first ATP device has a fault due to software and hardware, and the first ATP device may be switched to a shutdown state. The phenomenon of dual active may occur if the synchronization signal between the first ATP device and the second ATP device cannot be normally transmitted or received, that is, both the first ATP device and the second ATP device operate in an active state. In order to avoid the dual-active phenomenon, in one embodiment, when the first ATP device is currently in an active state and the second ATP device is also monitored to be in an active state, if the first ATP device is a preset first-level device, the first ATP device is switched to a shutdown state after a fifth preset duration; and if the first ATP equipment is preset second-level equipment, the first ATP equipment is switched to a shutdown state after a sixth preset time. The fifth preset time period may be 10 communication cycles, and the sixth preset time period may be 5 communication cycles.
Based on the same inventive concept, the embodiment of the invention also provides a control method of equipment in the dual-machine hot-standby system, the dual-machine hot-standby system comprises a first ATP equipment and a second ATP equipment which are connected with each other, and the control method of the equipment in the dual-machine hot-standby system can be executed by the train overspeed protection equipment. Because the control method of the equipment in the dual-machine hot standby system corresponds to the method corresponding to the train overspeed protection equipment in the embodiment of the invention, and the principle of solving the problem of the method is similar to that of the train overspeed protection equipment, the implementation of the method can refer to the implementation of the train overspeed protection equipment, and repeated parts are not repeated.
Fig. 6 shows a flowchart illustrating a method for controlling devices in a dual-computer hot-standby system according to an embodiment of the present application. As shown in fig. 6, the method for controlling devices in the dual-computer hot-standby system specifically includes the following steps:
step S601, when it is determined that the condition for switching to the primary device is satisfied, sending the pre-upgrade primary state information to the second ATP device.
Step S602, monitoring the pre-upgrade master status information sent by the second ATP device within a first preset time after sending the pre-upgrade master status information.
Step S603, judging whether pre-rising main state information sent by second ATP equipment is received; if yes, go to step S604; if not, executing step S605;
and step S604, determining whether to continue switching to the active device according to the device grade of the first ATP device.
In step S605, the first ATP device is switched to the active device.
In a possible implementation manner, the connection between the first ATP device and the second ATP device is through a network cable, and when the first ATP device determines that a condition of switching to the active device is satisfied, the sending the pre-upgrade main state information to the second ATP device includes:
if the first ATP equipment receives the state information sent by the second ATP equipment through the network cable and the state information indicates that the second ATP equipment is non-primary equipment, the first ATP equipment determines that the condition of switching to primary equipment is met, and the first ATP equipment sends pre-rising primary state information to the second ATP equipment.
In one possible implementation manner, a data transmission device is further disposed between the first ATP device and the second ATP device, and the first ATP device and the second ATP device transmit the status information through the data transmission device, and the method further includes:
if the first ATP device is in the standby state, the first ATP device receives state information sent by the second ATP device through the network cable or the data transmission device, and the state information indicates that the second ATP device is in the offline state, the first ATP device determines that the condition of switching to the primary device is met, and the first ATP device sends pre-rising primary state information to the second ATP device.
If the first ATP equipment is in a standby state and does not receive the synchronization signal sent by the second ATP equipment through the network cable within a second preset time length, the first ATP equipment determines that the second ATP equipment is in a disconnected state through the data transmission equipment, the first ATP equipment determines that the condition of switching to the primary equipment is met, and the first ATP equipment sends pre-rising main state information to the second ATP equipment.
In one possible implementation, the first ATP device and the second train overspeed protection device are further connected by a hard wire, and the method further includes:
if the first ATP device is in the standby state currently, the first ATP device, the second ATP device and the data transmission device are in communication interruption, and the first ATP device determines that the state of the second ATP device is the off-line state through the hard wire, the first ATP device determines that the condition of switching to the primary device is met, and the first ATP device sends pre-upgrade master state information to the second ATP device.
If the first ATP device is a master device, the first ATP device, the second ATP device and the data transmission device are in communication interruption, and the first ATP device determines that the second ATP device is in a non-off-line state through a hard line, the first ATP device is switched to an off-line state.
In a possible implementation manner, determining whether to continue switching to the active device according to a device class of the first ATP device includes:
and if the first ATP equipment is the preset first-grade equipment, the first ATP equipment is continuously switched to be the main equipment.
And if the first ATP equipment is the preset second-level equipment, the first ATP equipment stops being switched to the main equipment.
Based on the same inventive concept, an embodiment of the present invention further provides a dual-server hot-standby system, and a structural block diagram of the dual-server hot-standby system may be as shown in fig. 3, where the dual-server hot-standby system includes a first ATP device 100 and a second ATP device 300 interconnected with the first ATP device 100. The first ATP device 100 and the second ATP device 300 may each implement the various functions implemented by the train overspeed protection device 100 in fig. 2.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and so forth) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
It will be apparent to those skilled in the art that various changes and modifications may be made in the present application without departing from the spirit and scope of the application. Thus, if such modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is intended to include such modifications and variations as well.

Claims (10)

1. The train overspeed protection equipment is characterized in that the train overspeed protection equipment is applied to a dual-machine hot standby system, and the dual-machine hot standby system further comprises second train overspeed protection equipment connected with the train overspeed protection equipment; the train overspeed protection device comprises a processor, a memory and a speed sensor;
the speed sensor is used for detecting the running speed of the train in real time;
the memory is used for storing program codes and data information generated when the train overspeed protection equipment operates;
the processor is used for determining whether the train is overspeed or not according to the train running speed detected by the speed sensor;
the processor is further configured to: executing the program code to realize the following processes: if the train overspeed protection device is in an off-line state and the condition of switching to the main device is determined to be met, pre-rising main state information is sent to the second train overspeed protection device; if the pre-ascending main state information or the main state information sent by the second train overspeed protection equipment is not received within a first preset time after the pre-ascending main state information is sent, switching to the main equipment; or, if the pre-ascending main state information sent by the second train overspeed protection equipment is received within a first preset time after the pre-ascending main state information is sent, whether to continue to be switched to the main equipment is determined according to the equipment grade.
2. The train overspeed protection apparatus of claim 1, wherein said processor is specifically configured to:
if the current equipment is the preset first-level equipment, continuing to switch to the main equipment; or,
and if the second-level equipment is preset, stopping switching to the main equipment.
3. The train overspeed protection apparatus of claim 1 wherein said processor is further configured to:
monitoring state information sent by the second train overspeed protection equipment in real time;
and determining whether to switch the current state according to whether the state information sent by the second train overspeed protection device is monitored or not or according to the monitored state information sent by the second train overspeed protection device.
4. The train overspeed protection apparatus of claim 1 wherein said train overspeed protection apparatus is connected to said second train overspeed protection apparatus by a network cable; the processor is specifically configured to:
if state information sent by the second train overspeed protection device through a network cable is received and the state information indicates that the second train overspeed protection device is a non-primary device, determining that the condition of switching to the primary device is met;
and sending pre-rising main state information to the second train overspeed protection equipment.
5. The train overspeed protection apparatus of claim 1, wherein a data transmission apparatus is provided between said train overspeed protection apparatus and said second train overspeed protection apparatus, said train overspeed protection apparatus and said second train overspeed protection apparatus transmitting status information through said data transmission apparatus; the processor is further configured to:
if the train is in the standby state and receives the state information sent by the second train overspeed protection equipment through the network cable or the data transmission equipment, and the state information indicates that the second train overspeed protection equipment is in the off-line state, switching to the main state;
and if the train is in the standby state and the synchronous signal sent by the second train overspeed protection device through the network cable is not received within a second preset time, determining that the second train overspeed protection device is in the disconnection state through the data transmission device, and switching to the active state.
6. The train overspeed protection apparatus of claim 5 wherein said train overspeed protection apparatus is further hard-wired to said second train overspeed protection apparatus; the processor is further configured to:
and if the train is in the standby state and the communication with the second train overspeed protection equipment and the data transmission equipment is interrupted, determining that the second train overspeed protection equipment is in the off-line state through the hard line, and switching to the active state.
7. The train overspeed protection apparatus of claim 5 wherein said processor is further configured to:
if the train overspeed protection device is the main device and the communication with the second train overspeed protection device and the data transmission device is interrupted, the state of the second train overspeed protection device is determined to be a non-offline state through a hard wire, and then the train overspeed protection device is switched to an offline state.
8. A control method of equipment in a dual-machine hot-standby system is characterized in that the dual-machine hot-standby system comprises a first train overspeed protection device and a second train overspeed protection device which are connected with each other; the method comprises the following steps:
if the first train overspeed protection equipment is in an off-line state and the condition of switching to the main equipment is determined to be met, transmitting pre-lifting main state information to the second train overspeed protection equipment;
if the first train overspeed protection device does not receive the pre-lifting main state information or the main state information sent by the second train overspeed protection device within a first preset time after the pre-lifting main state information is sent, the first train overspeed protection device is switched to be the main device; or,
and if the first train overspeed protection device receives the pre-ascending main state information sent by the second train overspeed protection device within a first preset time after the pre-ascending main state information is sent, determining whether to continue switching to the main device according to the device grade of the first train overspeed protection device.
9. The method of claim 8, wherein determining whether to continue switching to the active device based on the device class of the first train overspeed protection device comprises:
if the first train overspeed protection equipment is preset first-grade equipment, the first train overspeed protection equipment is continuously switched to main equipment; or,
and if the first train overspeed protection equipment is preset second-level equipment, the first train overspeed protection equipment stops being switched to the main equipment.
10. A dual-computer hot standby system is characterized in that: the dual-locomotive hot standby system comprises a first train overspeed protection device and a second train overspeed protection device which are connected with each other, wherein the first train overspeed protection device and the second train overspeed protection device adopt the train overspeed protection device as claimed in any one of claims 1 to 7.
CN202010824199.5A 2020-08-17 2020-08-17 Train overspeed protection equipment, control method and dual-machine hot standby system Active CN111891192B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010824199.5A CN111891192B (en) 2020-08-17 2020-08-17 Train overspeed protection equipment, control method and dual-machine hot standby system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010824199.5A CN111891192B (en) 2020-08-17 2020-08-17 Train overspeed protection equipment, control method and dual-machine hot standby system

Publications (2)

Publication Number Publication Date
CN111891192A CN111891192A (en) 2020-11-06
CN111891192B true CN111891192B (en) 2022-06-03

Family

ID=73230112

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010824199.5A Active CN111891192B (en) 2020-08-17 2020-08-17 Train overspeed protection equipment, control method and dual-machine hot standby system

Country Status (1)

Country Link
CN (1) CN111891192B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112477919B (en) * 2020-12-11 2022-12-02 交控科技股份有限公司 Dynamic redundancy backup method and system suitable for train control system platform

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101556473A (en) * 2008-04-10 2009-10-14 卡斯柯信号有限公司 Control method of double-machine heat preparation switching control device
CN205945768U (en) * 2016-07-21 2017-02-08 中铁二院重庆勘察设计研究院有限责任公司 On -vehicle two -node cluster hot backup system of guide rail trolley -bus

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101458496B (en) * 2008-12-22 2010-11-03 卡斯柯信号有限公司 Double mainframe backup control method
CN102001348B (en) * 2010-12-06 2012-05-23 南京恩瑞特实业有限公司 Realization method based on CPCI bus technology of dual module hot spare system switching
KR101309751B1 (en) * 2011-06-24 2013-09-17 김효상 System for control On Board Computer System
CN103057572B (en) * 2012-10-25 2015-06-10 中国铁道科学研究院 Control switch method of main machine and standby machine
CN104401365A (en) * 2014-10-16 2015-03-11 北京交控科技有限公司 Realization method of ATO (automatic train operation) hot standby and ATO hot standby
CN109823375A (en) * 2019-01-07 2019-05-31 北京全路通信信号研究设计院集团有限公司 Dual-system hot standby switching method and system applied to automatic train operation system

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101556473A (en) * 2008-04-10 2009-10-14 卡斯柯信号有限公司 Control method of double-machine heat preparation switching control device
CN205945768U (en) * 2016-07-21 2017-02-08 中铁二院重庆勘察设计研究院有限责任公司 On -vehicle two -node cluster hot backup system of guide rail trolley -bus

Also Published As

Publication number Publication date
CN111891192A (en) 2020-11-06

Similar Documents

Publication Publication Date Title
CN101072125B (en) Cluster structure and its control unit
US20220075698A1 (en) Method and Apparatus for Redundancy in Active-Active Cluster System
US10102163B2 (en) Bus participant device and method for operating a bus subscriber device
CN111331619B (en) Safety control device for robot, control method for robot, and robot
CN107390511A (en) For the method for the automated system for running redundancy
CN107957692B (en) Controller redundancy method, device and system
CN110427283B (en) Dual-redundancy fuel management computer system
CN103955188A (en) Control system and method supporting redundancy switching function
CN110488597B (en) Dual-redundancy control method for main processing unit of locomotive
CN113867129A (en) Redundancy control method, device and system, computer equipment and storage medium
CN104440923A (en) Sudden stop signal control system used for robot and robot
CN111891192B (en) Train overspeed protection equipment, control method and dual-machine hot standby system
CN101903864A (en) Node system, server switching method, server device, and data transfer method
CN114355760A (en) Main control station and hot standby redundancy control method thereof
CN205068150U (en) Redundant control system
CN113682348A (en) Novel interlocking dual-computer switching method based on communication
CN105426171A (en) Synchronization and switching method and system for multiple two-out-of-two systems
CN114594672A (en) Control system, control method thereof, and computer-readable storage medium
CN113625540A (en) Dual-computer hot standby control method and device and dual-computer hot standby system
US9003067B2 (en) Network and method for operating the network
CN110247809B (en) Communication control method of double-ring network control system
CN105573869B (en) System controller fault tolerant control method based on I2C bus
CN112083646A (en) Redundancy control method, device and control system
CN114884803B (en) Method, device, equipment and medium for processing multiple redundant states
CN113911168B (en) Multi-node feedback central control unit redundancy method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant