CN-116302715-B - Computer interlocking system and main and standby system redundancy switching method thereof

CN116302715BCN 116302715 BCN116302715 BCN 116302715BCN-116302715-B

Abstract

The invention belongs to the technical field of rail transit, and particularly relates to a computer interlocking system and a main and standby system redundancy switching method thereof, wherein the switching method comprises the steps of judging the health degree of a main and standby system according to the acquired communication states of an interlocking logic part double system, internal equipment of the interlocking system and external safety data network equipment; and executing the primary-backup switching according to the health degree of the primary-backup system. The main and standby redundancy switching method and the system of the embodiment of the invention do not need additional hardware equipment and save cost. Meanwhile, the flexibility of double-system switching is improved, the reliability of the interlocking system is guaranteed, and the usability and safety of the computer interlocking system in engineering are improved.

Inventors

LI CAN
ZHANG LIFENG
WANG JIAXING
JIAO WANLI
NIE ZHIGUO

Assignees

北京全路通信信号研究设计院集团有限公司
中国铁路通信信号股份有限公司

Dates

Publication Date: 20260508
Application Date: 20230220

Claims (6)

1. A method for switching redundancy of a main system and a standby system of a computer interlocking system is characterized by comprising the following steps: Judging the health degree of the main and standby systems according to the acquired communication states of the interlocking logic part double system, the interlocking system internal equipment and the external safety data network equipment, and executing main and standby switching according to the health degree of the main and standby systems; The health degree of the main and standby systems is judged according to the communication states of the interlocking logic double system, the internal equipment and the external safety data network equipment of the interlocking system, wherein the health degree of the main and standby systems is concretely as follows, according to the acquired communication states of the interlocking logic double system, the control display equipment, the IO equipment and the external safety data network equipment, a control display cutting system mark, an IO cutting system mark and a safety data network cutting system mark are set; Setting a control display switching system mark according to the acquired communication state of the interlocking logic part double system and the control display equipment, wherein the interlocking logic part double system is specifically as follows, when the system is the main system, if the communication interruption of the system, the control display A machine and the control display B machine exceeds the main system interruption tolerance timing and the system and the control display equipment are in normal communication, the control display switching system mark is set; Setting an IO cut-off mark according to the acquired communication state of the interlocking logic part double system and the IO equipment, wherein the interlocking logic part double system is used as a main system, and if the communication interruption of the main system and the IO equipment exceeds the main system interruption tolerance timing and the communication between the interlocking logic part double system and the IO equipment is normal, the IO cut-off mark is set; The method comprises the steps of setting a safety data network switching mark according to the acquired communication state of external safety data network equipment, wherein when the system is the main system, an interlocking logic part is used for setting the safety data network switching mark if the communication interruption time between the system and the external safety data network equipment exceeds the main system interruption tolerance timing and the communication between the system and the external safety data network equipment is normal, and when the system is not the main system, the interlocking logic part is used for setting the safety data network switching mark if the communication interruption time between the system and the external safety data network equipment exceeds the standby system interruption tolerance timing.
2. The method for switching redundancy between active and standby systems of a computer interlocking system according to claim 1, wherein the external security data network devices comprise a train control center device, a neighbor interlocking device, and a wireless block center device.
3. The redundancy switching method of a primary-backup system of a computer interlock system according to claim 1 or 2, wherein the performing primary-backup switching according to the health degree of the primary-backup system comprises the steps of: if the health degree is higher than that of the primary system, executing a primary-standby system switching operation, wherein the primary system is lowered to a standby state, the primary system is raised to the primary system, and if the primary system is synchronous with the current primary system after standby and the system has no fault, the primary system is switched to the secondary system; If it is the same as the health level of the system, the current main/standby system state is maintained without performing the main/standby system switching operation, and the standby system is reduced to the standby state.
4. The method of claim 1, wherein the master interrupt tolerance timer of the interlock logic is longer than the slave interrupt tolerance timer by 3 cycles.
5. A computer interlocking system is characterized by comprising an interlocking logic part double system and an interlocking system internal device; the interlocking logic part double system is used for judging the health degree of the main system and the standby system according to the communication states of the interlocking logic part double system, the internal equipment of the interlocking system and the external safety data network equipment; The interlocking logic part double system is also used for executing main-standby switching according to the health degree of the main-standby system, and the internal equipment of the interlocking system comprises control display equipment and IO equipment; The health degree of the main and standby systems is judged according to the communication states of the interlocking logic double system, the internal equipment and the external safety data network equipment of the interlocking system, wherein the health degree of the main and standby systems is concretely as follows, according to the acquired communication states of the interlocking logic double system, the control display equipment, the IO equipment and the external safety data network equipment, a control display cutting system mark, an IO cutting system mark and a safety data network cutting system mark are set; Setting a control display switching system mark according to the acquired communication state of the interlocking logic part double system and the control display equipment, wherein the interlocking logic part double system is specifically as follows, when the system is the main system, if the communication interruption of the system, the control display A machine and the control display B machine exceeds the main system interruption tolerance timing and the system and the control display equipment are in normal communication, the control display switching system mark is set; Setting an IO cut-off mark according to the acquired communication state of the interlocking logic part double system and the IO equipment, wherein the interlocking logic part double system is used as a main system, and if the communication interruption of the main system and the IO equipment exceeds the main system interruption tolerance timing and the communication between the interlocking logic part double system and the IO equipment is normal, the IO cut-off mark is set; The method comprises the steps of setting a safety data network switching mark according to the acquired communication state of external safety data network equipment, wherein when the system is the main system, an interlocking logic part is used for setting the safety data network switching mark if the communication interruption time between the system and the external safety data network equipment exceeds the main system interruption tolerance timing and the communication between the system and the external safety data network equipment is normal, and when the system is not the main system, the interlocking logic part is used for setting the safety data network switching mark if the communication interruption time between the system and the external safety data network equipment exceeds the standby system interruption tolerance timing.
6. The computer interlock system according to claim 5, wherein the interlock logic is configured to perform the primary-backup switching according to the health of the primary-backup system as follows: if the health degree is higher than that of the primary system, executing a primary-standby system switching operation, wherein the primary system is lowered to a standby state, the primary system is raised to the primary system, and if the primary system is synchronous with the current primary system after standby and the system has no fault, the primary system is switched to the secondary system; If it is the same as the health level of the system, the current main/standby system state is maintained without performing the main/standby system switching operation, and the standby system is reduced to the standby state.

Description

Computer interlocking system and main and standby system redundancy switching method thereof Technical Field The invention belongs to the technical field of rail transit, and particularly relates to a computer interlocking system and a main and standby system redundancy switching method thereof. Background The computer interlocking system has a three-taking-two structure, a two-taking-two structure and the like. Currently, an interlocking system widely applied in the railway field adopts a two-by-two-out-of-two structure. The computer interlocking system mainly comprises a control and display subsystem, a maintenance machine subsystem, an input and output subsystem (I/O subsystem) and an interlocking logic part. The interlocking logic part consists of an interlocking I system and an interlocking II system which are identical and interconnected, and the two systems of the interlocking logic part adopt the same hardware CPU and operate synchronously. The double systems of the interlocking logic part all receive command information from the control subsystem, signal machine of the I/O subsystem, indication information of equipment such as turnout, section and the like and related information of a safety data network through a network. The equipment for accessing the safety data network comprises equipment such as a train control center, neighbor station interlocking, a wireless blocking center and the like. When a serious unusable fault occurs in one of the systems, the system is shut down due to the fault. If the system is the primary system, the primary and standby systems are switched. The double-system of the interlocking logic part is the key for safe and usable computer interlocking system when a certain system fails. The existing double-system redundancy switching mode of the computer interlocking system mainly comprises a main-standby switching system arranged outside the computer interlocking system, wherein the system comprises a power supply module, a double-system switching board, a main-standby switching module, a communication module, a switching module, a lighting module and a watchdog module. The main and standby switching system acquires a switching command by collecting the state of an external switching button, sends the switching command to the interlocking logic part, and executes a double-system redundancy switching function by the interlocking logic part. The existing computer interlocking system double-system redundancy switching mode needs to add a set of hardware equipment outside the computer interlocking system to increase cost, and secondly, the system needs to communicate with an interlocking logic part to increase interlocking data processing pressure, so that the problem of unstable communication results in inflexible switching of a main system and a standby system, and the usability of the computer interlocking system is reduced. Therefore, it is urgent to improve the usability while ensuring the safety and reliability of the computer interlock. Disclosure of Invention In order to solve the above problems, the present invention provides a computer interlocking system and a redundancy switching method for a main system and a standby system thereof, which adopts the following technical scheme: A redundancy switching method for the primary and secondary systems of computer interlocking system includes such steps as judging the health of primary and secondary systems according to the communication state between the two systems of interlocking logic unit and internal and external safety data network devices, and executing primary and secondary switching. Further, the internal equipment of the interlocking system comprises control display equipment and IO equipment. Further, the external security data network device comprises a train control center device, a neighboring station interlocking device and a wireless block center device. Further, according to the communication states of the interlocking logic part dual-system, the internal equipment of the interlocking system and the external safety data network equipment, the health degree of the main system and the standby system is judged as follows: Setting a control display cut-line mark, an IO cut-line mark and a safety data network cut-line mark according to the obtained communication states of the interlocking logic part double-line, the control display device, the IO device and the external safety data network device; When the system is the main system and one or more of the control display system cutting mark, the IO system cutting mark and the safety data network cutting mark are adopted, if the system is synchronous with the main system and has no cutting mark, determining that the health degree of the system is higher than that of the system; When the line is the main line and has the cut line mark, if it is determined that the line also has the cut line mark, it is determined that the two lines have faults, and it is determi