CN217305726U - Hot standby safety module, local control device and electrical control system - Google Patents
Hot standby safety module, local control device and electrical control system Download PDFInfo
- Publication number
- CN217305726U CN217305726U CN202221162143.9U CN202221162143U CN217305726U CN 217305726 U CN217305726 U CN 217305726U CN 202221162143 U CN202221162143 U CN 202221162143U CN 217305726 U CN217305726 U CN 217305726U
- Authority
- CN
- China
- Prior art keywords
- board
- communication
- input
- main control
- output
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Safety Devices In Control Systems (AREA)
Abstract
The embodiment of the utility model discloses safety module, local controlling means and electrical control system are equipped with to heat, include: the power supply board comprises a back board, and a wiring board, a main control board, a communication board, a power supply board and an input/output board which are arranged on the back board; the master control board, the power supply board and the input and output board are respectively provided with at least two groups to form a redundancy design; the wiring board transmits external input and output signals to the back plate through the Harting connector; the main control board, the communication board, the power board and the input and output board are connected through a bus to carry out data communication. Each part in the hot standby safety module has respective hot standby redundancy backup, self-checking and mutual checking can be achieved, the fact that the hot standby safety module is in a normal working state is guaranteed as far as possible, faults are found timely, when the faults occur, the hot standby safety module can be seamlessly switched to backup hardware, and normal work of the whole system is guaranteed.
Description
Technical Field
The utility model relates to a safety control field especially relates to a hot standby safety module, local controlling means and electrical control system.
Background
The existing site control device of the current train is in a safety mode, the system is complex, the system structure is single, and when a certain unit in the system breaks down, the whole system cannot work normally. Moreover, for the local control device, the safety performance level of the SIL4 needs to be met, and it is also necessary to ensure that self-checking can be performed between the functional module assemblies, and to ensure the operation of the whole system when a fault occurs.
SUMMERY OF THE UTILITY MODEL
In view of the above, the present application provides a hot standby security module, including: the power supply board comprises a back board, and a wiring board, a main control board, a communication board, a power supply board and an input/output board which are arranged on the back board; the main control board, the power supply board and the input/output board are respectively provided with at least two groups to form a redundancy design;
the wiring board transmits external input and output signals to the back plate through the Harting connector;
and data communication is carried out among the main control board, the communication board, the power supply board and the input/output board through a bus in the backboard.
Furthermore, the main control board and the input/output board adopt a two-by-two-out-of-two architecture design.
Further, the back plate comprises a CAN bus, a power bus and an IO signal bus;
the master control board, the power supply board, the communication board, the input/output board and respective backups are connected with each other through a CAN bus to perform data interaction and synergy;
the power supply board supplies power to the main control board, the communication board, the input/output board and the back board through the power bus;
the input and output board is connected with the wiring board through the IO signal bus for signal transmission.
Further, the input and output board performs data interaction with the main control board through a CAN bus, and receives a safe drive control command from the main control board to perform fail-safe drive output.
Further, the communication board comprises a communication gateway board and a communication record board.
Furthermore, the communication gateway board comprises a CAN gateway board, and the CAN gateway board is in data connection with other hot standby security modules to perform data interaction.
Further, the communication board further includes an ethernet gateway board, the ethernet gateway board is provided with at least two independent and redundant ethernet interfaces, and the ethernet interfaces use a TRDP protocol.
Furthermore, the main control board, the communication board, the power board and the input/output board are installed in a pluggable manner.
Further, an embodiment of the present application further provides a local control device, which is provided with the hot standby safety module as described in any of the above embodiments.
Further, the embodiment of the present application also provides an electrical control system, and the electrical control system is provided with the local control device according to the above embodiment.
The embodiment of the utility model discloses safety module, local controlling means and electrical control system are equipped with to heat, include: the power supply board comprises a back board, and a wiring board, a main control board, a communication board, a power supply board and an input/output board which are arranged on the back board; the main control board, the power supply board and the input/output board are respectively provided with at least two groups to form a redundancy design; the wiring board transmits external input and output signals to the back plate through the Harting connector; the main control board, the communication board, the power board and the input and output board are connected through a bus to carry out data communication. Each part in the hot standby safety module has respective hot standby redundancy backup, self-checking and mutual checking can be achieved, the fact that the hot standby safety module is in a normal working state is guaranteed as far as possible, faults are found timely, when the faults occur, the hot standby safety module can be seamlessly switched to backup hardware, and normal work of the whole system is guaranteed. Different from the LCU case using the safety relay, when a fault occurs, the safety relay can stop the whole system to work until the problem is eliminated, so that the safety of the whole system can be protected, but the safety work of the system can not be continuously guaranteed when the fault occurs, and great inconvenience is brought to passengers and workers of a train. The hot standby safety module enables the main functional modules in the whole system to be provided with the hot standby redundant module, and the modules are arranged in the system in a hot pluggable mode, so that when a certain functional board breaks down, the functional board can be switched to the backup board in time, and for workers, as long as the fault board is positioned, the fault board can be taken down for repair when the system still works, and a new normal board is replaced, so that great convenience is provided for the workers to remove faults.
Drawings
In order to illustrate the technical solution of the present invention more clearly, the attached drawings needed to be used in the embodiments are briefly introduced below, and it should be understood that the following drawings only show some embodiments of the present invention, and therefore should not be considered as limiting the scope of the present invention. Like components are numbered similarly in the various figures.
FIG. 1 is a schematic diagram illustrating a hot standby security module according to the present application;
FIG. 2 illustrates a topological schematic of a hot standby security module of the present application;
fig. 3 shows a timing chart of information interaction when the main control board and the redundant board of the present application actually operate.
Detailed Description
The technical solutions in the embodiments of the present invention will be described clearly and completely below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only some embodiments of the present invention, not all embodiments.
The components of embodiments of the present invention, as generally described and illustrated in the figures herein, may be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the present invention, presented in the accompanying drawings, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. Based on the embodiment of the present invention, all other embodiments obtained by the person skilled in the art without creative work belong to the protection scope of the present invention.
Hereinafter, the terms "including", "having", and their derivatives, which may be used in various embodiments of the present invention, are only intended to indicate specific features, numbers, steps, operations, elements, components, or combinations of the foregoing, and should not be construed as first excluding the existence of, or adding to, one or more other features, numbers, steps, operations, elements, components, or combinations of the foregoing.
Furthermore, the terms "first," "second," "third," and the like are used solely to distinguish one from another and are not to be construed as indicating or implying relative importance.
Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the various embodiments of the present invention belong. The terms (such as terms defined in a commonly used dictionary) will be construed to have the same meaning as the contextual meaning in the related art and will not be construed to have an idealized or overly formal meaning unless expressly so defined in various embodiments of the present invention.
The technical scheme of the application is applied to the LCU (local control unit) installed on the train, and mainly provides a hot standby safety module, which is used for ensuring that the local control unit can safely and reliably operate in the whole management system, on one hand, the data safety of self interaction with the outside is ensured, on the other hand, the normal operation of the system can be ensured even if a certain part of the local control unit fails, and the local control unit is used as a substitute of a safety relay, so that the whole system does not need to stop even if the whole system fails, and the working efficiency is increased.
The technical solution of the present application is explained with specific examples.
Example 1
Fig. 1 is a schematic structural diagram of a hot standby security module according to the present application.
The hot standby security module comprises a backboard 100, and a wiring board 200, a main control board 300, a communication board 400, a power supply board 500 and an input/output board 600 which are arranged on the backboard 100.
The wiring board 200 transmits external input and output signals to the back panel 100 through the Harting connector 700.
The main control board 300, the power supply board 500 and the input/output board 600 are each provided with at least two sets to form a redundant design. Specifically, as shown in the topological diagram of fig. 2, two main control boards 300, two power supply boards 500, and two output boards 600 are respectively arranged in fig. 2, and each group of the main control board 300, the communication board 400, the power supply board 500, and the input/output board 600 performs data communication through a bus in the backplane.
Taking the main control board 300 as an example, the main control board 300 in fig. 2 is divided into a main control board a and a main control board B, where the board a may be regarded as a board mainly used in system operation, but at the same time, the board B may also synchronize the board a to perform the same operation and may also perform communication through the CAN bus, where only the board a may undertake the output control task of the whole assembly, and the board B may not undertake the control output task and may only be used for mutual inspection with the board a.
Specifically, as shown in fig. 3, which is a timing chart of information interaction when the main control board a and the main control board B actually work, the main control board a and the main control board B will receive and collect the same data and commands at the same time, and perform the same data processing, then data sharing is carried out, the configuration of the main control board A and the main control board B is identical, the carried programs are also identical, and under the condition of identical operating environment, the two boards should obtain identical output results, therefore, the self-check of the main control board A and the mutual check of the main control board A and the main control board B can be realized through the synchronous output result each time, meanwhile, the main control board A can synchronize the data thereof into the main control board B to ensure that when the main control board A is abnormal, the system can be seamlessly switched to the main control board B, so that the main control board B can immediately take over the current work to continue to keep the normal work of the whole system or assembly.
Except for the main control board 300, other function boards are similar hot standby redundancy logic, even if one group fails, normal work of other groups cannot be influenced, for example, if the main control board 300 fails, only the main control board is switched, the currently used main control board A is switched into the main control board B, other normal function boards continue to run, switching of the main control board 300 cannot be caused, switching of the input/output board 600 or the power supply board 500 is caused, the whole system is influenced, disturbance is generated, and normal work of the whole system is guaranteed.
Further, the backplane 100 includes a CAN bus, a power bus, and an IO signal bus;
the main control board 300, the power supply board 500, the communication board 400, the output board 600 and respective backups are connected to each other through the CAN bus to perform data interaction and cooperation.
The power board 500 supplies power to the main control board 300, the communication board 400, the input/output board 600, and the backplane 100 through the power bus.
The input/output board 600 is connected to the wiring board through the IO signal bus to perform IO signal transmission.
The input/output board 600 may perform data interaction with the main control board 300 through the CAN bus to receive the safety driving control command from the main control board 300 to perform fail-safe driving output.
The input/output board 600 is further provided with a signal acquisition interface for receiving an externally accessed safety input signal, and then performs data interaction with the main control board 300 through the redundant CAN bus of the intranet, so as to realize information interaction between the external safety input signal and the internal main control board.
The main control board 300, the power board 500, the communication board 400, and the output board 600 are all designed according to the standard of SIL4 to ensure the safety of the internal hardware of each board, and when the input/output board 600 and the main board perform data interaction, a safe pass protocol may also be used to ensure the data safety in the communication process.
The communication board 400 includes a communication gateway board and a communication record board, and the communication record board is configured to record a communication log to record communication inside the component and communication records with the outside, so that the communication board can perform root tracing on the communication records when a subsequent failure occurs.
And the communication gateway board comprises a CAN gateway board and an Ethernet gateway board.
The CAN gateway board is used for being in data connection with other hot standby safety modules so as to carry out data interaction. It CAN be known from the above embodiments that the main control board 300, the power board 500, the communication board 400, the output board 600 and their respective backups are connected to each other through the CAN bus to perform data interaction and cooperation, where the CAN gateway board mainly manages communication with each functional module inside the whole hot standby security module, and is equivalent to a gateway processor of an internal lan. And the localization of the fault is much simpler.
In addition, the CAN gateway board CAN be used for communicating with other LCUs (local control units) of the train, so that communication connection among all system modules in the train is realized.
The Ethernet gateway board is used for connecting the local control device with the Internet, and the LCU performs data interaction with the Ethernet bus of the train through the Ethernet gateway board so as to realize local Internet access of the LCU. Meanwhile, the Ethernet gateway board can transmit the state monitoring data and the maintenance data of each functional module in the system to the operation and maintenance control system at the cloud end through the Ethernet port. Because the LCU chassis is arranged in each carriage of the train, the targeted monitoring of each carriage of the train can be realized so as to collect data and provide effective help for positioning when a fault occurs.
Furthermore, the ethernet gateway board is also provided with dual redundant channels to realize the hot standby redundancy in the ethernet gateway board, and when one channel fails, the ethernet gateway board can also work normally.
The hot standby safety module serves as a part of the LCU installed on the electrical control system, the resistance of the LCU to failure is realized besides the functions of all the function boards and the whole monitoring feedback function of the whole LCU are met, the capabilities of failure self-checking, troubleshooting and positioning are improved, the whole system is stable and safe, even if a certain function board fails, backup switching can be used in time, hot standby online switching is realized, and the work of the whole system cannot be influenced. Be different from the LCU machine case that uses safety relay, when breaking down, safety relay can make entire system stop work to get rid of the problem, though can protect entire system's safety, can not guarantee when breaking down, can continue the safe work of guarantee system, brings very big inconvenience for the passenger and the staff of train. The hot standby safety module enables the main functional modules in the whole system to be provided with the hot standby redundant module, and the modules are arranged in the system in a hot pluggable mode, so that when a certain functional board breaks down, the functional board can be switched to the backup board in time, and for workers, as long as the fault board is positioned, the fault board can be taken down for repair when the system still works, and a new normal board is replaced, so that great convenience is provided for the workers to remove faults.
Further, an embodiment of the present application further provides a local control device, which is provided with the hot standby safety module as described in any of the above embodiments.
Further, the embodiment of the present application also provides an electrical control system, and the electrical control system is provided with the local control device according to the above embodiment.
This electrical control system is applied to rail train for monitoring feedback to the operating condition of train, and then carry out further control, and is specific, this electrical control system can be set up on rail train such as train, motor car, high-speed railway and subway, and further can set up on every section carriage of these trains, and the data of gathering finally send well accuse, is unified management and control by well accuse.
In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other manners. The apparatus embodiments described above are merely illustrative and, for example, the flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
In addition, each functional module or unit in the embodiments of the present invention may be integrated together to form an independent part, or each module may exist alone, or two or more modules may be integrated to form an independent part.
The above description is only for the specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto, and any person skilled in the art can easily think of the changes or substitutions within the technical scope of the present invention, and all should be covered within the protection scope of the present invention.
Claims (10)
1. A hot-standby security module, comprising: the power supply board comprises a back board, and a wiring board, a main control board, a communication board, a power supply board and an input/output board which are arranged on the back board; the main control board, the power supply board and the input/output board are respectively provided with at least two groups to form a redundancy design;
the wiring board transmits external input and output signals to the back plate through the Harting connector;
and data communication is carried out among the main control board, the communication board, the power supply board and the input/output board through a bus in the backboard.
2. A hot standby security module according to claim 1, wherein the main control board and the input/output board are designed in a two-by-two-out-of-two architecture.
3. The hot standby security module of claim 1, wherein the backplane comprises a CAN bus, a power bus, and an IO signal bus;
the master control board, the power supply board, the communication board, the input/output board and respective backups are connected with each other through a CAN bus to perform data interaction and synergy;
the power supply board supplies power to the main control board, the communication board, the input/output board and the back board through the power bus;
the input and output board is connected with the wiring board through the IO signal bus for signal transmission.
4. The hot standby safety module according to claim 1, wherein the input/output board performs data interaction with the main control board through a CAN bus, receives a safety drive control command from the main control board, and performs fail-safe drive output.
5. A hot-standby security module according to claim 1, wherein the communication board comprises a communication gateway board and a communication record board.
6. The hot-standby security module according to claim 5, wherein the communication gateway board comprises a CAN gateway board, and the CAN gateway board is in data connection with other hot-standby security modules for data interaction.
7. The hot standby security module according to claim 6, wherein the communication board further comprises an ethernet gateway board, and at least two independent and redundant ethernet interfaces are disposed on the ethernet gateway board, and the ethernet interfaces use a TRDP protocol.
8. A hot standby security module according to claim 1, wherein the main control board, the communication board, the power board and the input/output board are pluggable.
9. An in-situ control apparatus, characterised in that a hot standby safety module according to any of claims 1 to 8 is provided.
10. An electrical control system, characterized in that the electrical control system is provided with an in-situ control device according to claim 9.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202221162143.9U CN217305726U (en) | 2022-05-13 | 2022-05-13 | Hot standby safety module, local control device and electrical control system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202221162143.9U CN217305726U (en) | 2022-05-13 | 2022-05-13 | Hot standby safety module, local control device and electrical control system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN217305726U true CN217305726U (en) | 2022-08-26 |
Family
ID=82918406
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202221162143.9U Active CN217305726U (en) | 2022-05-13 | 2022-05-13 | Hot standby safety module, local control device and electrical control system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN217305726U (en) |
-
2022
- 2022-05-13 CN CN202221162143.9U patent/CN217305726U/en active Active
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107187465B (en) | ATO system architecture of unit-level hot standby redundancy | |
| EP3690657B1 (en) | Computer-based interlocking system and redundancy switching method thereof | |
| CN110361979B (en) | Safety computer platform in railway signal field | |
| EP2723623B1 (en) | Railway signaling system with redundant controllers | |
| CN205068381U (en) | A secure computer platform for track traffic | |
| CN110351174B (en) | Module redundancy safety computer platform | |
| CN110376876B (en) | Double-system synchronous safety computer platform | |
| US8620497B2 (en) | Computer interlocking system and code bit level redundancy method therefor | |
| CN104503272A (en) | Automatic train driving system based on double-system hot standby redundancy | |
| CN103645715A (en) | Dual-machine hot standby train automatic operation (ATO) system | |
| CN106444553B (en) | Scattered acquisition driving system based on two-by-two-out-of-two architecture | |
| CN110488597B (en) | Dual-redundancy control method for main processing unit of locomotive | |
| CN111186463A (en) | Board-level redundant full-electronic computer interlocking system | |
| CN110293999B (en) | Safe LKJ brake control mode | |
| CN111831507B (en) | TCMS-RIOM control unit with safety level design | |
| CN101700783A (en) | Train control center system platform | |
| KR102029735B1 (en) | High-speed railway track side function module dual automatic transfer system | |
| CN110758489A (en) | Automatic protection system of train | |
| CN111874049A (en) | Brake control system for safety computer of train control | |
| CN203732945U (en) | Hot-standby train automatic driving system | |
| CN217305726U (en) | Hot standby safety module, local control device and electrical control system | |
| CN102156669B (en) | Arbitration system of vehicle-mounted train control equipment | |
| KR100673535B1 (en) | The method of multi-monitoring and automatic switching system for trackside signal processing modules in railroad | |
| CN109976208A (en) | A kind of interlocking I/O system and control method | |
| CN111781881A (en) | Man-machine interaction unit for train operation monitoring device and method for controlling on man-machine interaction unit |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| GR01 | Patent grant | ||
| GR01 | Patent grant |