CN114546499B - Railway safety computer platform communication board card configuration management method and system - Google Patents
Railway safety computer platform communication board card configuration management method and system Download PDFInfo
- Publication number
- CN114546499B CN114546499B CN202210012362.7A CN202210012362A CN114546499B CN 114546499 B CN114546499 B CN 114546499B CN 202210012362 A CN202210012362 A CN 202210012362A CN 114546499 B CN114546499 B CN 114546499B
- Authority
- CN
- China
- Prior art keywords
- communication
- control module
- configuration
- main control
- auxiliary control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000004891 communication Methods 0.000 title claims abstract description 310
- 238000007726 management method Methods 0.000 title claims abstract description 45
- 238000000034 method Methods 0.000 claims abstract description 20
- 238000012545 processing Methods 0.000 claims abstract description 6
- 238000012795 verification Methods 0.000 claims description 45
- 230000004044 response Effects 0.000 claims description 35
- 230000008569 process Effects 0.000 description 11
- 238000010586 diagram Methods 0.000 description 6
- 238000013461 design Methods 0.000 description 5
- 230000007704 transition Effects 0.000 description 4
- 238000012423 maintenance Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 238000006243 chemical reaction Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000001960 triggered effect Effects 0.000 description 2
- 206010048669 Terminal state Diseases 0.000 description 1
- 238000004458 analytical method Methods 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
- G06F9/4411—Configuring for operating with peripheral devices; Loading of device drivers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
- H04L41/0823—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Train Traffic Observation, Control, And Security (AREA)
Abstract
The invention provides a railway safety computer platform communication board card configuration management method and a system, wherein the method comprises the following steps: the auxiliary control module is communicated with the main control module to send configuration information to the communication module when judging that the first condition is met; the communication module is used for carrying out parameter configuration of the communication module according to the configuration information and running according to the parameter configuration so as to provide communication data for the main control module. The configuration files are separated and deployed, the unsafe auxiliary control module is introduced to assist the main control module to distribute and manage various communication board card configuration data, unsafe functions in a safe logic unit in the main control module are reduced, the functions of the main control module for maintaining the communication board card configuration are reduced, the safety and the processing efficiency of the main control module are improved, and the independent release of each module board card is facilitated.
Description
Technical Field
The invention belongs to the technical field of safety computers, and particularly relates to a railway safety computer platform communication board card configuration management method and system.
Background
In the track traffic signal control system, a safety computer platform mostly adopts a two-by-two-out-of-two design to ensure that the system is not affected by faults. The safe computer platform can bear various application products, such as computer interlocking, infinite block center, temporary speed limiting server, area control, vehicle-mounted automatic protection and other products. Different bus types are needed for external communication of various products, such as an Ethernet bus, a CAN bus, an RS422 bus, an MVB bus and the like. In order to support different external communication buses of different products, each bus protocol is integrated in an unsafe communication board card of a safe computer, so that the external communication buses of the safe platform of the computer are flexible and various. The design is convenient for various products to flexibly configure the external communication interface of the safety computer platform according to the communication requirement.
In the existing railway safety computer systems, a double-set redundancy design is adopted. As shown in fig. 1, the common platform implementation is: two sets of systems, namely an I system and a I I system which are redundant are arranged; each system (each set of system) comprises a main control unit A, a main control unit B and a plurality of communication boards which are arranged in a redundant way; the main control unit A and the main control unit B are used for bearing the safety function, and the communication board is used for bearing non-safety functions such as communication processing instead of bearing the safety function. And the main control unit and the communication unit perform data interaction in an Ethernet mode. The main control unit A/B is responsible for managing and distributing the configuration of the communication board.
In the existing platform products, aiming at different platform structures, all communication boards are completely managed and configured by the security computer main control unit A/B. The development or modification of the main control unit configuration module is required to expand other communication boards and revise the existing communication board configuration data, which brings unpredictable risks and increases design and maintenance costs.
Therefore, a need exists for a secure, efficient, and flexible railway security computer platform communication board card configuration management scheme.
Disclosure of Invention
In order to solve the above problems, the present invention provides a method for managing configuration of a communication board card of a railway safety computer platform, comprising:
the auxiliary control module is communicated with the main control module to send configuration information to the communication module when judging that the first condition is met;
The communication module is used for carrying out parameter configuration of the communication module according to the configuration information and running according to the parameter configuration so as to provide communication data for the main control module.
Further, the method comprises the steps of,
The communication module provides communication data for the main control module through the auxiliary control module;
The main control module is used for processing communication data and executing a safety logic function.
Further, the auxiliary control module communicating with the main control module to determine that the first condition is met includes:
The auxiliary control module checks whether the attribute parameters of the communication board card of the main control module are consistent with those of the communication board card of the main control module.
Further, the checking by the auxiliary control module whether the communication board card attribute parameters of the main control module are consistent includes:
The auxiliary control module is used for sending the communication board attribute parameters of the auxiliary control module to the main control module;
receiving a verification result sent by the main control module through the auxiliary control module;
and the verification result is a feedback result after the main control module receives the communication board card attribute parameters from the auxiliary control module and compares the communication board card attribute parameters with the communication board card attribute parameters stored on the main control module.
Further, transmitting the configuration information to the communication module includes:
The auxiliary control module sends the configuration information of the communication module to the communication module according to the configuration request of the communication module.
Further, after the auxiliary control module receives the configuration request of the communication module, the communication module is judged to be in an unconfigured state;
and after the auxiliary control module receives the heartbeat and/or the data frame of the communication module, judging the running state of the communication module.
Further, the auxiliary control module also receives a configuration response frame from the communication module to determine that the communication module enters a configured state;
the configuration response frame is a data frame sent after the communication module is successfully configured.
Further, the method comprises the steps of:
The main control module comprises a main control board; and/or
The auxiliary control module comprises an auxiliary control board; and/or
The communication module includes a communication board.
The invention also provides a railway safety computer platform communication board card configuration management system, which comprises: the device comprises a main control module, an auxiliary control module and a communication module;
The main control module is used for executing a safety logic function;
The communication module provides communication data for the main control module;
the auxiliary control module is connected with the main control module and the communication module and is used for sending configuration information to the communication module;
And the communication module performs parameter configuration of the communication module according to the configuration information and then operates.
Further, the main control module is configured to receive the configuration data frame sent by the auxiliary control module, and verify the attribute parameters of the communication board card in the configuration data frame: if the verification is successful, the main control module sends a configuration verification success response frame to the auxiliary control module; if the verification fails, the main control module is shut down.
Further, after the verification of the main control module is successful, if the heartbeat frame and/or the data frame sent by the auxiliary control module are received, the auxiliary control module is considered to have received the configuration verification success response frame sent by the main control module, the configuration ending state is entered, and the verification of the configuration data frame is restarted until the configuration data frame sent by the auxiliary control board is received again.
Further, the auxiliary control module is configured to:
After starting, sending self configuration information to the main control module, and waiting for receiving a configuration check success response frame of the main control module.
Further, after the auxiliary control module receives the configuration verification success response frame sent by the main control module, the auxiliary control module enters an operation state and starts to receive a configuration request frame of the communication module;
when the auxiliary control module receives the configuration request frame of the communication module, the auxiliary control module sends configuration data to the communication board;
and then, the auxiliary control module receives the configuration response frame of the communication module, and considers that the communication module enters a configured state.
Further, after the auxiliary control module receives the configuration verification success response frame sent by the main control module, if the auxiliary control module receives the heartbeat frame and/or the data frame sent by the communication board, the auxiliary control module judges that the communication module is in an operated state.
Further, the auxiliary control module acquires the state information of the communication module according to the received configuration request frame and/or heartbeat frame of the communication module, and sends the state information to the main control module.
Further, the auxiliary control module is configured to send configuration information to a plurality of related communication modules, and manage configuration states of the communication modules respectively.
Further, the main control module comprises a main control module; and/or
The auxiliary control module comprises an auxiliary control module; and/or
The communication module includes a communication board.
Further, the system adopts a redundant architecture, comprises a first system and a second system which are identical in structure,
Wherein the first system comprises: a set of safety module, auxiliary control module and communication module;
The safety module comprises a first main control board and a second main control board;
the first main control board is in communication connection with the second main control board, and is arranged in a redundant way;
The auxiliary control module comprises an auxiliary control board, and the first main control board and the second main control board are both connected with the auxiliary control board;
the auxiliary control board is also connected with one or more communication boards of the communication module.
According to the invention, the configuration files are separated and deployed by a hardware architecture mode based on the (security board) computer main control A/B machine and the (non-security board) auxiliary control machine, the non-security auxiliary control board is introduced to assist the main control board to distribute and manage various communication board card configuration data, the non-security function in the security logic unit is reduced, the main control A/B machine maintenance communication board card configuration function is reduced, and the configuration modules are separated and deployed. When the configuration function of the safety board card and the non-safety board card is changed, the non-safety board card is independently distributed, and engineering implementation and deployment are facilitated.
The invention can flexibly expand and modify various bus interface boards aiming at different railway signal products. On the premise that the logic of the main control A/B machine of the safety computer is increasingly approaching to maturity and stability, the configuration files are separated and deployed, the auxiliary control board is introduced to manage the communication board card, the main control calculation pressure of the safety computer is reduced, and therefore the two-by-two-taking efficiency is improved.
The configuration of the communication board card of the computer security platform is separated and deployed, and the configuration checking, requesting and distributing mechanism is adopted, so that the system configuration integrity can be ensured, the hot plug of the non-security board card is supported, and the on-site flexible deployment is realized.
Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions of the prior art, the following description will briefly explain the drawings used in the embodiments or the description of the prior art, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 shows a schematic diagram of a railway security computer platform structure according to the prior art;
FIG. 2 illustrates a schematic diagram of a secure computer platform architecture according to an embodiment of the present invention;
FIG. 3 shows a schematic diagram of a profile structure according to an embodiment of the invention;
FIG. 4 is a schematic diagram illustrating a state machine transition process of profile management of a main control board according to an embodiment of the present invention;
FIG. 5 is a schematic diagram illustrating a state machine transition process for configuration file management of a slave board according to an embodiment of the present invention;
Fig. 6 shows a state machine transition process diagram of profile management of a communication board according to an embodiment of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The embodiment of the invention provides a communication board card configuration management method for a railway safety computer platform, which adopts the separation and deployment of communication board card configuration functions to implement flexible and safe communication board card configuration management. The method comprises the following steps: the auxiliary control module is communicated with the main control module to send configuration information to the communication module when judging that the first condition is met; the communication module is used for carrying out parameter configuration of the communication module according to the configuration information and running according to the parameter configuration so as to provide communication data for the main control module. The communication module provides communication data for the main control module through the auxiliary control module; the main control module is used for processing communication data and executing a safety logic function. The auxiliary control module can send configuration information to one or more related communication modules and respectively manage the configuration states of the communication modules. A plurality of related communication modules refers to a group of communication modules that provide communication data for the same main control module. Without loss of generality, the configuration information is managed through a configuration file.
Without loss of generality, the railway safety computer platform communication board card configuration management method of the embodiment of the invention can be realized through a railway safety computer platform communication board card configuration management system, but is not limited to the system of the embodiment of the invention.
The railway safety computer platform communication board card configuration management system adopts a new architecture mode, introduces an unsafe auxiliary control board to assist the main control board to distribute and manage configuration data of various communication boards, reduces unsafe functional modules of a safety logic unit, reduces maintenance of communication board card configuration functions of a main control A/B machine, and enables the configuration modules to be separated and deployed. When the configuration function of the safety board card and the non-safety board card is changed, the non-safety board card is independently distributed, and engineering implementation and deployment are facilitated.
As shown in fig. 2, the railway safety computer platform communication board card configuration management system according to the embodiment of the present invention includes a safety module and a non-safety module, wherein the safety module is used for executing a safety logic function. Taking a computer interlocking system as an example, the security logic functions include interlocking business logic operations and the like. The non-safety function module comprises an auxiliary control module and a communication module. The auxiliary control module is arranged between the safety module and the communication module and is used for managing the configuration function of the communication module according to the requirement of the safety module. The safety module, the auxiliary control module and the communication module are independently arranged in hardware, the safety module is connected with the auxiliary control module through a communication line, and the auxiliary control module is connected with the communication module through the communication line. Without loss of generality, the security module, the auxiliary control module and the communication module respectively comprise a board card or a machine provided with the board card, and the board card is taken as an example for illustration of the embodiment of the invention. The communication line is a CAN communication line, an ethernet, or the like.
Illustratively, the security module includes a main control board (referred to as a main control board), the auxiliary control module includes an auxiliary control board (referred to as an auxiliary control board), and the communication module includes one or more communication boards. The auxiliary control board is respectively connected with the main control board and the communication board. The secure computer platform employs a redundant architecture. The secure computer platform comprises at least a first system (I-train) comprising a set of security modules, an auxiliary control module and a communication module. The security module comprises a first main control board (main control A) and a second main control board (main control B); the master control A is in communication connection with the master control B, and redundancy is set. The auxiliary control module comprises an auxiliary control board, and a main control A and a main control B of the system (namely a first system) are connected with the auxiliary control board; the auxiliary control board is also connected with one or more communication boards of the communication module.
Further, the secure computer platform may further include a second system (II system) that is redundant with the first system, where the architecture of the second system is the same as that of the first system, and also includes its own master control a, master control B, slave control board, and communication board. The connection relation of each board card in the system is the same as I.
In the embodiment of the invention, the configuration management of the communication board card is realized through the management configuration file. In the railway safety computer platform communication board card configuration management system, a configuration file management module realizes configuration file management. The configuration file management module relates to a main control board, an auxiliary control board and a communication board, and jointly realizes configuration file management and communication parameter configuration of the communication board through management functions integrated in each board. The main content is as follows:
The system adopts a design of separating deployment configuration files, and the same communication attribute parameter information is set and managed on the main control board and the auxiliary control board, so that the system configuration integrity is ensured. Such as: the train control center system is provided with 4 communication module slots, wherein an Ethernet board 1 and an Ethernet board 2 are respectively inserted into a slot 1 and a slot 2, and a CAN board 1 and a CAN board 2 are respectively inserted into a slot 3 and a slot 4. When the same system increases and decreases the board card, the master control and auxiliary control configuration checking function can ensure the integrity and the safety of the system. The auxiliary control board configuration file covers all communication board card configuration data of the system, and the communication board card does not store configuration. When the number of communication boards of the system is increased or decreased, the auxiliary control configuration file format supports the dynamic adjustment of the number of the communication boards and the length of the configuration file.
Illustratively, the types of communication boards include: network boards, multi-function communication boards, and the like. The network board internally comprises 4 network ports, and the multifunctional communication board also comprises 4 CAN (Controller Area Network ) channels, 4 RS422 channels and 1 MVB (Multifunction Vehicle Bus, multifunctional vehicle bus) channels. The boards are randomly inserted into 4 slots of a system according to different products, an integrator configures the boards according to system requirements, and a configuration tool is used for generating a configuration file for a main control board and a configuration file for an auxiliary control board. Both configuration files contain communication board attribute parameters. The auxiliary control board card contains all communication board card configuration data of the system, and besides the attribute parameters of the communication board card, the auxiliary control board card also comprises the configuration file length, the configuration file CRC, the configuration data information and the like of the communication board.
As shown in fig. 3, the configuration file of the main control board includes a file header, main control board system configuration parameters, the number of used communication boards, communication board attribute parameters and a file trailer. Wherein, the communication board attribute parameter corresponds to each communication board, and each communication board corresponds to a group of communication board attribute parameters (board attribute 1-board attribute n). The number of groups of the attribute parameters of the communication boards is dynamically adjusted according to the number of the communication boards. The configuration file of the auxiliary control board comprises a file header, auxiliary control board system configuration parameters, the number of used communication boards, the configuration data length of all the communication boards, the configuration data of the communication boards and a file tail. The communication board card configuration data comprises the same communication board card attribute parameters as the configuration file of the main control board, the length of the board card configuration file, the CRC of the board card configuration file and the information of the board card configuration data. The number of sets of communication board configuration data is dynamically adjusted according to the number of communication boards used. The management process adopts a configuration information verification distribution management mechanism. The configuration information verification and distribution management mechanism relates to a main control board, an auxiliary control board and a communication board. Before the auxiliary control board manages and distributes the communication board card configuration, the auxiliary control board needs to check the consistency of the attribute parameters of the communication board card with the main control board. After the consistency is checked successfully, the auxiliary control board distributes configuration data of each communication board card according to the request condition of each communication board.
The configuration file management module of the main control board is used for checking the attribute parameters of the communication board card of the auxiliary control board, and if the communication board card is checked successfully, a response data frame is sent to the auxiliary control board. And if the verification fails, not sending response data, and stopping.
The function of the configuration file management module of the main control board is described below through the state machine conversion process of the configuration file management of the main control board.
As shown in fig. 4, after the main control board is started, the active board works normally. If the configuration data frame sent by the auxiliary control board is received, entering an unverified auxiliary control board configuration state. The configuration data frame contains the communication board attribute parameters. In this state, the main control board analyzes the configuration data frame sent by the auxiliary control board and performs verification.
If the verification is successful, the active board sends a configuration verification success response frame to the auxiliary control board, and enters a verification auxiliary control board configuration success state; if the verification fails, the main control board is stopped, and the auxiliary control board enters a configuration failure state.
After the main control board enters the configuration success state of the auxiliary control board, if a heartbeat frame/data frame sent by the auxiliary control board is received, the auxiliary control board card is considered to receive a configuration check success response frame sent by the main control board, the configuration ending state is entered, until the configuration data frame sent by the auxiliary control board is received again, and the configuration state of the auxiliary control board which is not checked is entered from the configuration ending state.
Specifically, the main control board performs state transition and action execution through the monitoring event, and when the configuration data frame event sent by the auxiliary control is triggered, the main control board starts to perform the verification. When triggering and receiving a heartbeat frame/data frame event sent by the auxiliary control board. If the verification is successful, triggering a verification success event, and then sending a configuration verification success response frame to the auxiliary control board by the main control board. If the verification fails, a verification failure event is triggered. In the embodiment of the invention, the event processing mode for the verification failure is that the main control board is stopped.
The main control board state table is as follows:
The master control board event table is as follows:
| Event(s) | Description of the invention |
| Receiving configuration data frame sent by auxiliary control | The auxiliary control board configures data frame to the main control board |
| Receiving heartbeat frame/data frame sent by auxiliary control board | Heartbeat frame/data frame from auxiliary control board to main control board |
| Check success | The main control board and the auxiliary control board are consistent in configuration |
| Failure of verification | The configuration of the main control board and the auxiliary control board is inconsistent |
The auxiliary control board configuration file management module mainly comprises the following functions: after the auxiliary control board is started, the auxiliary control board sends the local communication board card attribute parameters to the main control board, and can send the whole communication board card configuration data without losing generality, wherein the communication board card attribute parameters are included, and after the main control board is successfully checked, the communication board card configuration data are distributed to the communication board card. If the master control board fails to check, a configuration check success response frame is not sent to the auxiliary control board, the auxiliary control board does not operate a configuration function (namely a configuration file management module), and the auxiliary control board does not respond to the configuration request of the communication board.
If the master control board successfully checks the attribute parameters of the communication board card sent by the auxiliary control board, the auxiliary control board sends corresponding configuration data of the communication board card to the communication board sending the request after receiving the configuration data of the communication board card. That is, the auxiliary control board transmits corresponding communication board configuration data according to the request of the communication board.
If the auxiliary control board receives the heartbeat frame/data frame of the communication board after being started, the communication board is considered to be configured and operated, and reconfiguration is not needed. In the embodiment of the invention, the auxiliary control board supports hot plug, when the auxiliary control board is restarted in the operation process (such as being plugged or restarted after being crashed by a fault), after the auxiliary control board is started and operated, if a heartbeat frame/data frame of the communication board is received, the communication board is not required to be configured, and the communication board is considered to be in an operated state. The communication board directly forwards the received data frame of the communication board to the main control board, so that the restarting action of the auxiliary control board is realized without affecting the operation of the communication board.
The auxiliary control board manages the communication function board state machine and dynamically adjusts according to the configuration quantity of the communication function boards, and the expansibility is strong.
The function of the configuration file management module of the auxiliary control board is described below through the state machine conversion process of configuration file management of the auxiliary control board.
As shown in fig. 5, after the auxiliary control board is started, configuration information is sent to the main control board, and the auxiliary control board enters a local configuration state sent to the main control board, at this time, the auxiliary control board does not accept a communication board configuration request, and waits for receiving a main control board configuration check success response frame. Specifically, the sending configuration information is that the auxiliary control board sends local configuration, namely communication board card configuration data, to the main control board.
When the auxiliary control board receives the configuration verification success response frame sent by the main control board, the auxiliary control board enters an operation state of the auxiliary control board, and in the operation state of the auxiliary control board, the auxiliary control board starts to receive the communication board configuration request and opens a data channel of the main control board. Wherein the main control board data channel can be used for the auxiliary control board to forward the data frame received from the communication board. The configuration verification success response frame sent by the main control board is specifically received by the auxiliary control board: after the configuration information is sent, a response frame sent by the main control board is received, the auxiliary control board analyzes the response frame, and if the analysis result is that the main control board checks the configuration information successfully, the received response frame is a response frame with successful configuration check.
After the configuration check of the auxiliary control board and the main control board is successful, the auxiliary control board starts to process the configuration request of the communication board. When receiving the configuration request frame of the communication board, the communication board enters an unconfigured state. Specifically, the plurality of communication boards perform respective status management. Taking the nth communication board as an example, the auxiliary control board enters an unconfigured state of the communication board n. In this state, the auxiliary control board transmits a configuration data frame to the communication board, the configuration data frame containing communication board card configuration data. And the auxiliary control board sends a heartbeat frame to the main control board and sends the state information of the communication board to the main control board. Specifically, the auxiliary control board acquires the state information of the communication board through the configuration request frame and/or the heartbeat frame sent by the communication board, and sends the state information to the main control board. Without losing generality, the auxiliary control board sends the state information to the main control board in a heartbeat frame mode. The auxiliary control board sends configuration data to the communication board and then enters a configuration state of the communication board sent by the auxiliary control board, specifically, the state of the auxiliary control board is a configuration state of the communication board n sent by the auxiliary control board aiming at the communication board.
And then, the auxiliary control board receives the configuration response frame of the communication board, and enters a configured state of the communication board. Specifically, after receiving the configuration response frame of the communication board n, the communication board n enters a configured state. In this state, the slave board transmits a heartbeat frame/data frame (i.e., a heartbeat frame and/or a data frame) to the master board. The auxiliary control board is in communication connection with the main control board through the heartbeat frame, and the received information is forwarded to the main control board through the data frame.
And after the communication board is configured successfully, starting to operate, and transmitting a heartbeat frame/data frame to the auxiliary control board in the operation process. When the auxiliary control board receives the heartbeat frame/data frame sent by the communication board, the auxiliary control board enters an operating state of the communication board. Specifically, when a heartbeat frame/data frame of the communication board n is received, the operation state of the communication board n is entered. Thus, the communication board configuration management process is ended and enters a final state.
If the auxiliary control board receives the configuration request frame sent by the communication board again after the communication board operates, the auxiliary control board enters the unconfigured state of the communication board again, and sends the configuration data frame to the communication board again.
In the embodiment of the invention, the information which can be sent to the auxiliary control board by the communication board comprises: configuration request frames, configuration reply frames, heartbeat frames, and data frames. The data frame is a data packet containing service information, the heartbeat frame can be used for bearing the state information of the board card, and the configuration request frame and the configuration response frame are used for expressing the state of the configuration process and can also bear the state information.
The state description table of the auxiliary control board is as follows:
The auxiliary control board event description table is as follows:
The main function of the card configuration module of the communication board is to configure a request frame to the auxiliary control board after the board is started, and to reply a configuration response frame to the auxiliary control board after the configuration is successful, if the verification fails, the communication board does not reply and stops.
The communication board requests to receive the configuration state machine as shown in fig. 6:
After the communication board is started, a configuration request frame is sent to the auxiliary control board to request configuration information, and the configuration state of the requested auxiliary control board is entered. In this state, if the communication board does not receive the configuration information transmitted by the auxiliary control board, the configuration request frame is continuously transmitted to the auxiliary control board.
And after the communication board receives the configuration data frame sent by the auxiliary control board, entering a configuration state of the received auxiliary control board, and checking configuration information in the configuration data frame.
If the configuration information is successfully checked, entering a state of checking the configuration success of the auxiliary control board, and sending a configuration response frame to the auxiliary control board.
If the verification of the configuration information fails, entering a verification auxiliary control board configuration failure state, and stopping.
After receiving the configuration response frame sent by the communication board, the auxiliary control board converts the configuration state of the auxiliary control board into the configured state of the communication board, and after the communication board is successfully configured according to the configuration information sent by the auxiliary control board, the auxiliary control board starts to operate, sends a data frame to the auxiliary control board, and forwards the data frame to the main control board. The communication board receives the data frame sent by the main control board from the auxiliary control board, and the communication board receives the data frame sent by the auxiliary control board, so that normal data communication between the boards is started, and the terminal state is entered.
The communication board status table is as follows:
The communications board event table is as follows:
Although the invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.
Claims (16)
1. The railway safety computer platform communication board card configuration management method is characterized by comprising the following steps of:
Setting an unsafe auxiliary control module; the unsafe auxiliary control module configuration file contains configuration data of all communication boards, and all communication boards do not store the configuration data; the configuration data comprises communication board attribute parameters;
setting and managing attribute parameters of the same communication board card in the main control module and the non-safety auxiliary control module;
Transmitting local communication board card attribute parameters to a main control module through an unsafe auxiliary control module;
receiving a verification result sent by a main control module through an unsafe auxiliary control module;
The verification result is a feedback result after the main control module receives the communication board card attribute parameters from the unsafe auxiliary control module and compares the communication board card attribute parameters with the communication board card attribute parameters stored on the main control module;
When the verification result shows that the attribute parameters of the communication board card of the main control module are consistent with those of the non-safety auxiliary control module, the non-safety auxiliary control module sends configuration information to the communication module;
The communication module is used for carrying out parameter configuration of the communication module according to the configuration information and running according to the parameter configuration to provide communication data for the main control module.
2. The method for managing the configuration of a communications board card for a railway security computer platform of claim 1,
The communication module provides communication data for the main control module through the unsafe auxiliary control module;
The main control module is used for processing communication data and executing a safety logic function.
3. The method of claim 1, wherein transmitting configuration information to the communication module comprises:
And the unsafe auxiliary control module sends the configuration information of the communication module to the communication module according to the configuration request of the communication module.
4. The method for managing the configuration of a communication board card for a railway safety computer platform according to claim 3,
After receiving the configuration request of the communication module, the unsafe auxiliary control module judges that the communication module is in an unconfigured state;
and after receiving the heartbeat and/or the data frame of the communication module, the unsafe auxiliary control module judges the running state of the communication module.
5. The method for managing the configuration of a communication board card for a railway safety computer platform according to claim 3,
The non-secure auxiliary control module also receives a configuration response frame from the communication module to determine that the communication module enters a configured state;
the configuration response frame is a data frame sent after the communication module is successfully configured.
6. The railway safety computer platform communication board card configuration management method according to any one of claims 1 to 5, wherein:
The main control module comprises a main control board; and/or
The unsafe auxiliary control module comprises an auxiliary control board; and/or
The communication module includes a communication board.
7. A railway security computer platform communication board card configuration management system, comprising: the system comprises a main control module, an unsafe auxiliary control module and a communication module;
the main control module is used for executing a safety logic function;
The communication module provides communication data for the main control module;
the unsafe auxiliary control module configuration file contains configuration data of all communication boards, and all communication boards do not store the configuration data; the configuration data comprises communication board attribute parameters;
the unsafe auxiliary control module is respectively connected with the main control module and the communication module and is used for sending local communication board attribute parameters to the main control module and receiving a verification result sent by the main control module; the verification result is a feedback result after the main control module receives the communication board card attribute parameters from the unsafe auxiliary control module and compares the communication board card attribute parameters stored on the main control module, and when the verification result shows that the main control module is consistent with the communication board card attribute parameters of the unsafe auxiliary control module, the unsafe auxiliary control module sends configuration information to the communication module;
And the communication module performs parameter configuration of the communication module according to the configuration information and then operates.
8. The railway security computer platform communication board card configuration management system of claim 7, wherein,
The main control module is used for receiving the configuration data frame sent by the unsafe auxiliary control module and checking the attribute parameters of the communication board card in the configuration data frame: if the verification is successful, the main control module sends a configuration verification success response frame to the unsafe auxiliary control module; if the verification fails, the main control module is shut down.
9. The railway security computer platform communication board card configuration management system of claim 8, wherein,
After the verification of the main control module is successful, if the heartbeat frame and/or the data frame sent by the unsafe auxiliary control module are received, the unsafe auxiliary control module is considered to have received the configuration verification success response frame sent by the main control module, the configuration ending state is entered, and the verification of the configuration data frame is restarted until the configuration data frame sent by the unsafe auxiliary control module is received again.
10. The railway security computer platform communication board card configuration management system of claim 7, wherein the non-secure auxiliary control module is configured to:
After starting, sending self configuration information to the main control module, and waiting for receiving a configuration check success response frame of the main control module.
11. The railway security computer platform communication board card configuration management system of claim 10, wherein,
When the unsafe auxiliary control module receives the configuration verification success response frame sent by the main control module, the unsafe auxiliary control module enters an operating state and starts to receive a configuration request frame of the communication module;
when the unsafe auxiliary control module receives the configuration request frame of the communication module, the unsafe auxiliary control module sends configuration data to the communication board;
and then, the unsafe auxiliary control module receives the configuration response frame of the communication module, and the communication module is considered to enter a configured state.
12. The railway security computer platform communication board card configuration management system of claim 10, wherein,
And after the unsafe auxiliary control module receives the configuration verification success response frame sent by the main control module, if the unsafe auxiliary control module receives the heartbeat frame and/or the data frame sent by the communication board, judging that the communication module is in an operated state.
13. The system according to claim 11, wherein the unsafe auxiliary control module obtains the status information of the communication module according to the received configuration request frame and/or heartbeat frame of the communication module, and sends the status information to the main control module.
14. The railway security computer platform communication board card configuration management system of any of claims 7 to 13,
The unsafe auxiliary control module is used for sending configuration information to a plurality of related communication modules and respectively managing the configuration states of the communication modules.
15. The railway security computer platform communication board card configuration management system of any of claims 7 to 13,
The main control module comprises a main control board; and/or
The unsafe auxiliary control module comprises an auxiliary control board; and/or
The communication module includes a communication board.
16. The system for managing the configuration of a communications board card for a railway security computer platform according to any one of claims 7 to 13, wherein the system adopts a redundant architecture, and comprises a first system and a second system which are identical in structure,
Wherein the first system comprises: a set of safety module, non-safety auxiliary control module and communication module;
The safety module comprises a first main control board and a second main control board;
the first main control board is in communication connection with the second main control board, and is arranged in a redundant way;
the unsafe auxiliary control module comprises an auxiliary control board, and the first main control board and the second main control board are connected with the auxiliary control board;
the auxiliary control board is also connected with one or more communication boards of the communication module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210012362.7A CN114546499B (en) | 2022-01-07 | 2022-01-07 | Railway safety computer platform communication board card configuration management method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210012362.7A CN114546499B (en) | 2022-01-07 | 2022-01-07 | Railway safety computer platform communication board card configuration management method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114546499A CN114546499A (en) | 2022-05-27 |
| CN114546499B true CN114546499B (en) | 2024-06-21 |
Family
ID=81670149
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210012362.7A Active CN114546499B (en) | 2022-01-07 | 2022-01-07 | Railway safety computer platform communication board card configuration management method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114546499B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115208712B (en) * | 2022-06-13 | 2024-06-21 | 深圳市科陆电子科技股份有限公司 | Control method, cell stack management system, device and medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110389871A (en) * | 2019-07-24 | 2019-10-29 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform having system integrity confirmation function |
| CN110493052A (en) * | 2019-08-22 | 2019-11-22 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform communication construction of compatible different communication protocol |
| CN112698939A (en) * | 2020-12-01 | 2021-04-23 | 武汉虹信科技发展有限责任公司 | Operation maintenance method and system for ATCA architecture core network |
Family Cites Families (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101694588B (en) * | 2009-10-14 | 2012-04-18 | 北京全路通信信号研究设计院有限公司 | Double 2 vote 2 active/standby control switching system and method |
| CN102486766A (en) * | 2010-12-01 | 2012-06-06 | 北京旋极信息技术股份有限公司 | Board configuration method and board configuration device |
| DE102012102187C5 (en) * | 2012-03-15 | 2016-11-03 | Phoenix Contact Gmbh & Co. Kg | Control device for controlling safety-critical processes in an automated system and method for parameterizing the control device |
| CN106201971B (en) * | 2016-07-01 | 2019-07-02 | 中国铁道科学研究院集团有限公司 | A kind of railway signal safety computer platform based on bus synchronous verification |
| CN108011848B (en) * | 2017-10-24 | 2020-12-15 | 北京全路通信信号研究设计院集团有限公司 | Data exchange system based on railway security computer |
| EP3644145A1 (en) * | 2018-10-25 | 2020-04-29 | ABB Schweiz AG | Control system for controlling safety-critical and non-safety-critical processes |
| CN110554978B (en) * | 2019-08-30 | 2022-02-15 | 北京交大思诺科技股份有限公司 | Safety computer platform realized by universal I/O module |
| CN111181829A (en) * | 2019-12-24 | 2020-05-19 | 中国铁道科学研究院集团有限公司 | Train Ethernet data transmission equipment and train Ethernet data transmission method |
-
2022
- 2022-01-07 CN CN202210012362.7A patent/CN114546499B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110389871A (en) * | 2019-07-24 | 2019-10-29 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform having system integrity confirmation function |
| CN110493052A (en) * | 2019-08-22 | 2019-11-22 | 北京交大思诺科技股份有限公司 | A kind of safety computer platform communication construction of compatible different communication protocol |
| CN112698939A (en) * | 2020-12-01 | 2021-04-23 | 武汉虹信科技发展有限责任公司 | Operation maintenance method and system for ATCA architecture core network |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114546499A (en) | 2022-05-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1863081B (en) | Managing system and method based on intelligent platform managing interface | |
| CN106375072B (en) | Redundancy control method for locomotive communication network | |
| CN205068381U (en) | A secure computer platform for track traffic | |
| CN103248514A (en) | Fault detection and mitigation for in-vehicle LAN network management | |
| DE102011005515B4 (en) | A communication network system having a high-ranked network and low-ranked networks, an exchange port for connecting the high-ranking network and a low-ranked network, microcomputers for controlling connection between a low-ranking network transmission line and a high-level network transmission line, and communication transceivers which is connected to the transmission line of a low-rank network and the transmission line of the high-order network | |
| CN114546499B (en) | Railway safety computer platform communication board card configuration management method and system | |
| CN110979404B (en) | Dual-machine hot standby system and method of automatic train supervision system | |
| CN105159863A (en) | Secure computer platform used for rail transit | |
| CN107948063B (en) | Method for establishing aggregation link and access equipment | |
| CN113242273A (en) | Train network, communication method, train, electronic device, and storage medium | |
| EP3179674A1 (en) | Configurable gateway apparatus and method for an integrated brake control system in a railway vehicle | |
| CN104401365A (en) | Realization method of ATO (automatic train operation) hot standby and ATO hot standby | |
| CN110877628B (en) | Train redundancy communication system and method | |
| CN113114551B (en) | Dual-redundancy LIN bus communication device | |
| WO2022241992A1 (en) | Data synchronization method for main and standby machines of station application server | |
| CN101944954A (en) | Method and system for realizing main /standby switch of single boards | |
| CN113859321A (en) | Train communication-based train automatic control system based on cloud computing | |
| CN109800197B (en) | Hot plug method for communication board of trackside safety platform | |
| CN108616591B (en) | Interface device and method for data exchange | |
| CN114598594B (en) | Method, system, medium and equipment for processing application faults under multiple clusters | |
| CN111522698A (en) | Automatic switching system and method of front-end processor | |
| CN114528242A (en) | Computer platform dual-system synchronization method, device, equipment and medium | |
| CN215268308U (en) | Two data communication integrated circuit boards of two of high reliability | |
| CN111176108A (en) | Method, system and equipment for main and standby redundancy of drive test unit | |
| CN115378557B (en) | Hot standby implementation method, device, system, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |