Ground Object Controller in Train Operation Control System

Abstract

An embodiment of the invention provides a ground object controller in a train operation control system. The controller includes two sets of hot-standby ground target control units, and each set of ground target control units includes: main control circuit, signal light control circuit, turnout control circuit, signal light state monitoring circuit and turnout state monitoring circuit; the main control circuit includes heterogeneous MCU circuit and FPGA circuit, after the MCU circuit and FPGA circuit send out the same signal light control command and turnout control command, the final signal light control command after the two-out-of-two vote is transmitted to the signal light control circuit, and the final turnout control command after the two-out-of-two vote The control commands are transmitted to the turnout control circuit. In the embodiment of the present invention, by selecting a heterogeneous two-out-of-two security architecture in the main control circuit of the ground target control unit, it can ensure that the turnout or the signal machine will not operate incorrectly, satisfy the fail-safe principle, avoid the accumulation of faults, and improve the safety of the system. Security, can meet extremely stringent security requirements.

Description

technical field [0001] The invention relates to the technical field of rail traffic control, in particular to a ground target controller in a train operation control system. Background technique [0002] In recent years, with the advancement of technology and the development of economy, rail transit has developed rapidly. Train operation control (hereinafter referred to as train control) system, as the basis of rail transit safety guarantee, provides a solid technical support for high-speed passenger transportation, heavy freight transportation, and high-density and low-interval urban rail. [0003] The on-board rail transit train control system monitors the running speed of the train in real time, and automatically controls the train braking system according to the train operating constraints, so as to realize the train overspeed protection, ensure the safety of the train, and improve the efficiency of the train operation. [0004] The patent application number 20131060367...

AI Technical Summary

Problems solved by technology

[0007] (1) The current all-electronic execution unit has shifted from a relay logic circuit based on an electromagnetic gravity safety relay based on an asymmetric failure mode to a symmetrical mode based on a microprocessor or a programmable logic device, based on an embedded software The control circuit designed and realized by hardware development technology, but the safety of its control logic has not been proved;

[0008] (2) The main control circuit switch of the current all-electronic execution unit generally chooses SSR (Solid State Relay, solid state relay) and small contact capacity safety relay. Although SSR is a non-contact switch, it is a power device that cannot be completely shut down. , even if it is in the off state, there will be a weak leakage current. At present, both the switch machine and the signal machine are controlled objects of higher voltage and higher current type.

When the SSR is used in conjunction with a small safety relay, even in the off state, from the perspective of voltage and current, there is still a problem of exceeding the limit parameters of the small contact capacity safety relay;

[0009] (3) The current all-electronic execution unit still uses the anti-mixed connection circuit used in the traditional relay interlock, such as double-break method, position method, power isolation method, etc., but in the current implementation of SSR and small safety relay In the all-electronic execution unit, due to the change of the traditional relay logic-hard-wired circuit configuration, there is a possibility of danger due to mixed wiring

The current all-electronic execution unit is generally based on a 2-out-2 safety architecture. Once a fault occurs, it will be directed to the safety side and the output will be disconnected. This will not meet the above special technical requirements and will cause equipment failures that affect driving safety.

Images