阅读说明：本技术 一种安全驱动单元主备同驱继电器防电磁感应的处理方法 (Processing method for preventing electromagnetic induction of main and standby driving relays of safety driving unit ) 是由 程思远 张涛 季志均 许明旺 宁丽敏 李超 朱明玲 尹立凡 于 2021-06-22 设计创作，主要内容包括：本发明公开了一种安全驱动单元主备同驱继电器防电磁感应的处理方法,其包含：S102、周期性获取并检测驱动命令；S103、当所述驱动命令变化时,检测安全驱动单元的输出端口的端口状态；S104、根据输出端口的端口状态执行对应处理操作；重复步骤S102～S104。其优点是：该方法根据端口状态进行下一步处理操作,在端口状态无异常后安全驱动单元才会对外驱动,对端口状态检测发现异常后导向安全侧方法,进一步保证了驱动安全。(The invention discloses a processing method for preventing electromagnetic induction of a main and standby driving relay of a safety driving unit, which comprises the following steps: s102, periodically acquiring and detecting a driving command; s103, detecting the port state of an output port of the safety driving unit when the driving command changes; s104, executing corresponding processing operation according to the port state of the output port; steps S102 to S104 are repeated. The advantages are that: according to the method, the next processing operation is carried out according to the port state, the safety driving unit can drive outwards only after the port state is not abnormal, and the safety side method is guided after the port state is detected and abnormal, so that the driving safety is further ensured.)

1. A processing method for preventing electromagnetic induction of a main and standby driving relay of a safety driving unit is characterized by comprising the following steps:

s102, periodically acquiring and detecting a driving command;

s103, detecting the port state of an output port of the safety driving unit when the driving command changes;

s104, executing corresponding processing operation according to the port state of the output port; steps S102 to S104 are repeated.

2. The method for processing electromagnetic induction prevention of a main/standby co-driven relay of a safety drive unit as claimed in claim 1, wherein the step S104 comprises:

and when the port state is detected to be abnormal, all switches at the output port of the safety driving unit execute actions, the safety driving unit outputs the actions outwards, and the detection processing steps are repeated.

3. The method for processing electromagnetic induction prevention of a main/standby driving relay of a safety driving unit according to claim 2,

the safety driving unit outputs externally, specifically, the safety driving unit drives or stops driving externally according to a driving command.

4. The method for processing electromagnetic induction prevention of a main/standby driving relay of a safety driving unit as claimed in claim 1,

the safety driving unit comprises a safety driving unit main system and a safety driving unit standby system, the safety driving unit main system is connected with the first coil through an output switch A1 and an output switch B1, the safety driving unit standby system is connected with the second coil through an output switch A2 and an output switch B2, and the control logics of the safety driving unit main system and the safety driving unit standby system are the same.

5. The method for processing electromagnetic induction prevention of a main/standby co-driven relay of a safety drive unit as claimed in claim 4, wherein the step S104 comprises:

in the safety driving unit main system, when the port state is detected to be abnormal, if the driving command is changed from 'drop' to 'suck', the output switch a1 is closed and the output switch B1 is opened within the preset forgiveness period, ignoring the detection result of this time in this period, and the safety driving unit main system does not output to the outside and waits for the next period to detect again.

6. The method for preventing electromagnetic induction in a main/standby driving relay of a safety driving unit as claimed in claim 5,

in the main system of the safety driving unit, when the port status is detected to be normal in the set forgiveness period, the output switch B1 is closed, and the main system of the safety driving unit outputs the external signal.

7. The method for processing electromagnetic induction prevention of a main/standby co-driven relay of a safety drive unit as claimed in claim 4, wherein the step S104 comprises:

in the safety drive unit master system, when the port state is detected as abnormal, if the drive command is changed from "drop" to "suck", the output switch a1 and the output switch B1 are turned off outside the set forgiveness period in this period, and the safety drive unit master system cuts off the output into an unusable state.

8. The method for processing electromagnetic induction prevention of a main/standby co-driven relay of a safety drive unit as claimed in claim 4, wherein the step S104 comprises:

in the safety drive unit master, when the port state is detected as abnormal, if the drive command is changed from "suck" to "drop", the output switch a1 and the output switch B1 are turned off, and the safety drive unit master cuts off the output into an unavailable state.

9. The method for processing electromagnetic induction prevention of a main/standby co-driven relay of a safety drive unit as claimed in claim 1, wherein before periodically acquiring and detecting a drive command, the method further comprises:

s101, loading configuration data by the security drive unit, and initializing software and hardware resources.

10. The method for processing electromagnetic induction prevention of a main/standby driving relay of a safety driving unit as claimed in claim 1,

the first coil connected with the safety driving unit in a main system and the second coil connected with the safety driving unit in a standby system are wound on the same iron core, any one safety driving unit outputs the output signals outwards, and the relay can be driven.

Technical Field

The invention relates to the field of relay driving, in particular to a processing method for preventing electromagnetic induction of a master-slave driving relay of a safety driving unit.

Background

In a railway signal system, a trackside safety driving unit is used for executing an interlocking machine control command and outputting 24V voltage to drive a 6502 relay circuit gravity type relay.

In order to improve the response speed, the two mutually redundant safety driving units do not generally carry out delay driving, and immediately output driving electricity to the outside at the same time after receiving a driving command. The traditional gravity type relay is limited by cost, two paths of driving electric coils are usually wound on the same iron core, so that when the redundant system main system board card drives the relay, after the armature is sucked up, the conducted 24V electricity can enable the iron core to generate induced electromotive force, and the port state of an output port is detected abnormally if the safety driving unit standby system and the main system are driven simultaneously.

Disclosure of Invention

The invention aims to provide a processing method for preventing electromagnetic induction of a main and standby driving relay of a safety driving unit.

In order to achieve the purpose, the invention is realized by the following technical scheme:

a processing method for preventing electromagnetic induction of a main and standby driving relay of a safety driving unit comprises the following steps:

s102, periodically acquiring and detecting a driving command;

s103, detecting the port state of an output port of the safety driving unit when the driving command changes;

s104, executing corresponding processing operation according to the port state of the output port; steps S102 to S104 are repeated.

Optionally, the step S104 includes:

and when the port state is detected to be abnormal, all switches at the output port of the safety driving unit execute actions, the safety driving unit outputs the actions outwards, and the detection processing steps are repeated.

Optionally, the safety driving unit outputs externally, specifically, the safety driving unit drives externally or stops driving according to the driving command.

Optionally, the safety driving unit includes a safety driving unit main system and a safety driving unit auxiliary system, the safety driving unit main system is connected to the first coil through an output switch a1 and an output switch B1, the safety driving unit auxiliary system is connected to the second coil through an output switch a2 and an output switch B2, and the safety driving unit main system and the safety driving unit auxiliary system have the same control logic.

Optionally, the step S104 includes:

in the safety driving unit main system, when the port state is detected to be abnormal, if the driving command is changed from 'drop' to 'suck', the output switch a1 is closed and the output switch B1 is opened within the preset forgiveness period, ignoring the detection result of this time in this period, and the safety driving unit main system does not output to the outside and waits for the next period to detect again.

Optionally, in the main system of the safety driving unit, in a set forgiveness period, when the port status is detected to be normal, the output switch B1 is closed, and the main system of the safety driving unit outputs the external output.

Optionally, the step S104 includes:

in the safety drive unit master system, when the port state is detected as abnormal, if the drive command is changed from "drop" to "suck", the output switch a1 and the output switch B1 are turned off outside the set forgiveness period in this period, and the safety drive unit master system cuts off the output into an unusable state.

Optionally, the step S104 includes:

in the safety drive unit master, when the port state is detected as abnormal, if the drive command is changed from "suck" to "drop", the output switch a1 and the output switch B1 are turned off, and the safety drive unit master cuts off the output into an unavailable state.

Optionally, before the periodically acquiring and detecting the driving command, the method further includes:

s101, loading configuration data by the security drive unit, and initializing software and hardware resources.

Optionally, the first coil connected to the main system of the safety driving unit and the second coil connected to the standby system of the safety driving unit are wound on the same iron core, any one safety driving unit outputs the output signals, and the relay can be driven.

Compared with the prior art, the invention has the following advantages:

in the processing method for preventing electromagnetic induction of the main and standby driving relays of the safety driving unit, the safety driving unit firstly detects the port state of the output port when a driving command changes, carries out the next processing operation according to the port state, drives the safety driving unit outwards after the port state is not abnormal, and leads to a safety side method after the port state is detected and abnormal is found, so that the driving safety is further ensured, the method can lead a redundant system to drive the same relay at the same time without delay, and the abnormal port detection is avoided.

Drawings

FIG. 1 is a schematic diagram of a gravity-type relay driven by a safety driving unit according to the present invention;

FIG. 2 is a schematic diagram of the output port of the main system of the safety driving unit according to the present invention;

FIG. 3 is a schematic diagram of a main flow of a processing method for preventing electromagnetic induction of a main/standby driving relay of a safety driving unit according to the present invention;

fig. 4 is a partial flow diagram of a processing method for preventing electromagnetic induction of a main/standby driving relay of a safety driving unit according to the present invention.

Detailed Description

In order to facilitate understanding of the features, contents, and advantages of the present invention and the efficacy achieved thereby, the present invention will be described in detail with reference to the accompanying drawings in the form of embodiments, wherein the drawings are provided for illustration and description, and not for the purpose of limiting the invention to the actual scale and precise configuration after the practice of the invention, and the drawings are not to be construed as being limited to the scale and the configuration of the drawings.

It is to be noted that the drawings are in a very simplified form and are all used in a non-precise ratio for the purpose of facilitating and distinctly aiding in the description of the embodiments of the invention.

As shown in fig. 1 and 2, in the present embodiment, the safety driving unit drives the gravity relay, the safety driving unit includes a main safety driving unit system and a backup safety driving unit system, which are in a redundant parallel driving mode, the main safety driving unit system is connected to the first coil (output switch a1 is on the P-terminal line, and output switch B1 is on the N-terminal line) (each switch is not shown in fig. 1) through an output switch a1 and an output switch B1, respectively, and the backup safety driving unit system is connected to the second coil (output switch a2 is on the P-terminal line, and output switch B2 is on the N-terminal line) through an output switch a2 and an output switch B2, respectively. The safety driving unit main system and the safety driving unit standby system are both in double-break output, the safety driving unit main system can drive the outside only after the output switch A1 and the output switch B1 are closed, and the safety driving unit standby system is the same. The two ends of the same port of the safety driving unit main system and the safety driving unit standby system are connected to different driving electric coils of the same relay, and a first coil, namely a coil 1, connected with the safety driving unit main system and a second coil, namely a coil 2, connected with the safety driving unit standby system are wound on the same iron core. Any one safety driving unit outputs to the outside, and the relay can be driven. The control logics of the safety driving unit main system and the safety driving unit standby system are the same.

As shown in fig. 3 and fig. 4, a processing method for preventing electromagnetic induction of a main/standby driving relay of a safety driving unit according to the present invention includes:

s101, loading configuration data by the security drive unit, and initializing software and hardware resources.

And S102, periodically acquiring and detecting a driving command from the safety communication module.

And S103, detecting the port state of the output port of the safety driving unit when the driving command changes.

And S104, executing corresponding processing operation according to the port state of the output port. Steps S102 to S104 are repeated.

In the present embodiment, the port state detection of the output port of the safety drive unit is determined based on the open/close states of the output switch a1 and the output switch B1, taking the safety drive unit as an example. The levels on the hardware read-back output switch a1 and the output switch B1 determine whether the switches can be opened/closed normally according to the permutation combination. For example, when both output switch A1 and output switch B1 are closed, there is a high on both; the output switch a1 is closed, the output switch B1 is open, the output switch a1 has a low level, and the output switch B1 has a high level. Therefore, the outer detection loop is affected by the induced electromotive force of the other system, and a positive/negative level is superimposed in the detection loop, resulting in an error of the read-back level.

Specifically, the step S104 includes:

s201, in a main system of a safety driving unit, namely taking the main system of the safety driving unit as an example, when the port state is detected to be abnormal, all switches at an output port of the safety driving unit, namely an output switch A1 and an output switch B1, execute actions, the main system of the safety driving unit outputs to the outside, and the safety output unit is in a standby mode. Namely, when the port state is abnormal, the safe driving unit executes the corresponding operation according to the driving command.

Specifically, the safety driving unit outputs the external drive or stop driving of the corresponding relay according to the driving command.

When the driving command at the safety communication module is changed from 'falling' to 'sucking', no matter whether the main system of the safety driving unit or the standby system of the safety driving unit firstly carries out port state detection, because the relay is not sucked, no induced electromotive force is generated at the iron core, the relay is driven by external output. The post-reaction safety driving unit is driven without time delay, and is interfered by a magnetic core during port state detection, so that the detection result is abnormal.

Further, the processing method for preventing electromagnetic induction of the main/standby driving relay of the safety driving unit further includes a safety side processing method, that is, step S104 further includes:

s202, taking the safety driving unit as an example, in the safety driving unit master system, when the port state is detected to be abnormal, if the driving command is changed from 'drop' to 'suck', the current detection result of the current period is ignored within the set forgiveness period, the output switch A1 is closed, the output switch B1 is opened, the safety driving unit master system does not output outwards, and the next period is waited for re-detection; the safety driving unit is similar to the above-mentioned safety driving unit.

Further, taking the primary system of the safety driving unit as an example, in the primary system of the safety driving unit, when the port status is detected to be normal within the set forgiveness period, the output switch B1 is closed, and the primary system of the safety driving unit outputs the external signal; the safety driving unit is similar to the above-mentioned safety driving unit.

In the invention, the forgiveness period is introduced, the duration of the forgiveness period is N detection periods, and different forgiveness period times can be set according to different types of relays. Taking the safety driving unit as an example, when the port state is detected to be abnormal and the driving command is changed from < drop > to < suck >, the state that the output switch A1 is kept closed and the output switch B1 is opened is allowed to be kept within a certain time limit (N detection periods), the safety driving unit main system does not enter the unavailable state, and the next period is waited for detecting again; the safety driving unit is similar to the above-mentioned safety driving unit.

S203, taking the safety driving unit master as an example, in the safety driving unit master, when the port status is detected as abnormal, if the driving command is changed from < drop > to < suck >, the output switch a1 and the output switch B1 are turned off outside the set forgiveness period, and the safety driving unit master cuts off all outputs and enters an unavailable state; the safety driving unit is similar to the above-mentioned safety driving unit.

Therefore, in the forgiveness period, part of switches of the safety driving unit keep an output closed state, repeated opening and closing steps are removed, noise is reduced, and the service life of the onboard relay is prolonged.

S204, taking the safety driving unit master system as an example, in the safety driving unit master system, when the port state is detected to be abnormal, if the driving command is changed from < suck > to < drop >, the output switch A1 and the output switch B1 are switched off, and the safety driving unit master system cuts off the output and enters an unavailable state; the safety driving unit is similar to the above-mentioned safety driving unit.

In summary, in the processing method for preventing electromagnetic induction of the active-standby driven relay of the safety driving unit, when the driving command changes, the safety driving unit first detects the port state of the output port, performs the next processing operation according to the port state, the safety driving unit drives the external device only after the port state is not abnormal, the safety driving unit directs to the safety side method after the port state detection finds the abnormality, the external output is cut off, and the safety output of the safety driving unit is realized through further judgment.

Furthermore, in the processing method for preventing electromagnetic induction of the main and standby co-drive relays of the safety drive unit, a forbidden period is set, and when a drive command is changed from < drop > to < suck >, in order to further ensure safety, in the forbidden period, if the port state is abnormal, the detection result of the period is ignored and is not output externally, and outside the forbidden period, if the port state is abnormal, the board card enters an unavailable state. The method only takes effect when the port is attracted, does not take effect when the port is disconnected, does not increase the safety response time, and further ensures the driving safety.

While the present invention has been described in detail with reference to the preferred embodiments, it should be understood that the above description should not be taken as limiting the invention. Various modifications and alterations to this invention will become apparent to those skilled in the art upon reading the foregoing description. Accordingly, the scope of the invention should be determined from the following claims.