Fault tolerant safety processor in railway signaling system

Abstract

The invention relates to a security processor for fault-tolerant in a railway signal system. The security processor includes a hardware platform and a software architecture, wherein the hardware platform comprises an operation platform with double CPUs, and information is shared by the double CPUs through a double-port RAM; the security input implements the security collection of the same input signal by adopting independent and dissimilar design modes for two channels; the security output monitors the status of an output port of the system to ensure the security of the system output by adopting a retraced-collection mode; and the system security is guaranteed by generated check words, which are transmitted to a security monitor board by the CPUs, the security monitor board provides the electric power for an output board when the security monitor receives the correct security check words, otherwise the security monitor cuts off the power supply to the output board, thereby achieving fault-safety. Compared with the prior art, the invention can implement security protection for an onboard ATP during the calculating process, so that the risk probability of malfunction is lower than the design requirement of the system, and the operational security of the system is further ensured.

Description

technical field [0001] The present invention relates to a method for realizing safe operation designed for the need of safe processing in railway signal system, which uses multi-channels to carry out operation processing on safe input variables, and adopts safety verification channel to carry out safety monitoring, so as to ensure that the processor is in the operation process In addition to the railway transportation system, the main application fields are also suitable for aviation, nuclear power and other fields with high safety processing requirements, especially involving fault-tolerant safety processors in railway signaling systems. Background technique [0002] In the field of railway signaling, in order to ensure the driving safety of the system, it is necessary to adopt a computer processing system with high reliability, high availability, high maintainability, and high security, that is, to meet the RAMS requirements of the system; security must be realized during t...

AI Technical Summary

Problems solved by technology

[0003] Ordinary industrial computers do not guarantee the security of the system, so the processor system used must be designed in terms of security to ensure the security of the system; currently, the modes adopted abroad mainly include coded monoprocessor, 3 2 and 2 × 2 to take 2 processors, etc., these types of processor systems have their unique design concepts; the encoding processor uses information redundancy encoding to realize the processing of security operations, which is a good solution to the system processor. During the operation process, the possible errors in operands, operation codes, data fetching, storage and program structure are monitored by a dynamic controller; Data security checking, but it makes the structure of the program complex and the difficulty of calculation increases, which will increase the error (non-dangerous side) probability of program operation, thereby reducing the reliability of the system. In addition, its operating platform is a single processor. It will also reduce the reliability of the system; 2 out of 3 security processor is a fault-tolerant design technology commonly used in security computers at present. The output of the module is voted by a large number, and the majority of the same output is used as the correct output of the system, so as to realize the error correction principle of "minority obeys the majority"; the safety of the system is increased through the multi-mode redundant design mode; the disadvantage is that multiple The clock (task) synchronization, multi-channel communication, and single-channel exit and addition mechanisms between processors and simultaneous computing systems are more complicated to implement, which has an adverse impact on system availability.

Images