阅读说明：本技术 一种分布式智能转辙机控制系统 (Distributed intelligent switch machine control system ) 是由 徐成闻 周旭东 马勇剑 戴胜男 于 2021-01-27 设计创作，主要内容包括：本发明公开了一种分布式智能转辙机控制系统,远程转辙机控制单元由互为冗余的远程转辙机控制单元A系和远程转辙机控制单元B系组成,所述远程转辙机控制单元A系和B系均包括安全监控单元1、安全监控单元2、安全控制器1、安全控制器2、安全采集单元1、安全采集单元2、安全驱动单元；所述安全采集单元1、安全采集单元2分别独立采集转辙机的表示信号,并分别通过通信通道1和通信通道2实时上传给全电子联锁控制单元。本发明的分布式智能转辙机远程控制降低了系统的故障概率和维护成本,提升了系统可用性,并通过多种安全机制,安全性高,确保系统的安全性。(The invention discloses a distributed intelligent switch machine control system.A remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant with each other, wherein the remote switch machine control unit A system and the remote switch machine control unit B system respectively comprise a safety monitoring unit 1, a safety monitoring unit 2, a safety controller 1, a safety controller 2, a safety acquisition unit 1, a safety acquisition unit 2 and a safety driving unit; the safety acquisition unit 1 and the safety acquisition unit 2 respectively and independently acquire the representation signals of the point switch and respectively upload the representation signals to the full electronic interlocking control unit through the communication channel 1 and the communication channel 2 in real time. The distributed intelligent point switch remote control reduces the fault probability and maintenance cost of the system, improves the availability of the system, and ensures the safety of the system through various safety mechanisms and high safety.)

1. A distributed intelligent switch machine control system is characterized in that: the system comprises a full electronic interlocking control unit and a plurality of remote switch machine control units which are distributed close to corresponding switch machines, wherein the full electronic interlocking control unit and the remote switch machine control units are in communication connection through optical fibers and are provided with a communication channel 1 and a communication channel 2 in parallel;

the all-electronic interlocking control unit consists of an all-electronic interlocking control unit A system and an all-electronic interlocking control unit B system which are redundant with each other, wherein the all-electronic interlocking control unit A system and the all-electronic interlocking control unit B system respectively comprise a safety control panel 1, a safety control panel 2 and a safety monitoring panel, the safety control panel 1 and the safety control panel 2 adopt two channels 2 to 2 for synchronous comparison and are responsible for data information exchange with a remote switch control unit, the safety monitoring panel monitors the states of the safety control panel 1 and the safety control panel 2 in real time, and if the safety control panel 1 and/or the safety control panel 2 fails, output communication is closed;

the remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant with each other, wherein the remote switch machine control unit A system and the remote switch machine control unit B system respectively comprise a safety monitoring unit 1, a safety monitoring unit 2, a safety controller 1, a safety controller 2, a safety acquisition unit 1, a safety acquisition unit 2 and a safety driving unit;

the safety driving unit controls the switch machine according to a control signal sent by the all-electronic interlocking control unit, the safety monitoring unit 1 and the safety monitoring unit 2 respectively perform safety monitoring on the all-electronic interlocking control unit and the remote switch machine control unit, and the output of the safety driving unit is cut off when the all-electronic interlocking control unit and/or the remote switch machine control unit fails;

the safety acquisition unit 1 and the safety acquisition unit 2 respectively and independently acquire the representation signals of the point switch and respectively upload the representation signals to the full electronic interlocking control unit through the communication channel 1 and the communication channel 2 in real time;

the safety controller 1 and the safety controller 2 respectively receive control signals of the all-electronic interlocking control unit to the switch machine, control the positive end and the negative end of the switch machine drive, and realize the normal drive of the switch machine when the two control signals are simultaneously effective: the safety controller 1 and the safety controller 2 report the switch machine representation information collected by the safety collection unit 1 and the safety collection unit 2 in real time; the safety controller 1 and the safety controller 2 report the monitoring information of the safety monitoring unit 1 and the safety monitoring unit 2 in real time, detect the health state of the safety monitoring unit 1 and the safety monitoring unit 2, and inform the all-electronic interlocking control unit when the safety monitoring unit 1 and/or the safety monitoring unit 2 is abnormal.

2. The distributed intelligent switch machine control system of claim 1, wherein: the remote switch machine control unit is mounted inside a switch machine.

3. The distributed intelligent switch machine control system of claim 1, wherein: the safety monitoring unit 1, the safety monitoring unit 2, the safety controller 1, the safety controller 2, the safety acquisition unit 1 and the safety acquisition unit 2 are arranged on the same single board.

4. A distributed intelligent switch machine control system according to any one of claims 1 to 3, characterized by: the full electronic interlocking control unit and the remote point switch control unit are communicated with each other through an Ethernet through a switch, and a railway safety communication protocol is adopted to guarantee communication safety.

Technical Field

The invention relates to the technical field of rail transit, in particular to a point switch control system.

Background

The point switch is a trackside basic device of railway and urban rail traffic, and is used for reliably switching the position of a turnout, changing the opening direction of the turnout, locking a turnout switch rail and reflecting the position of the turnout. The point switch not only ensures the driving safety, but also improves the transportation efficiency and the labor intensity of the driving personnel. At present, most of existing switch machine control schemes are centralized interlocking schemes, namely, an interlocking system is deployed in a control center and is connected with a switch machine beside a track through a large number of outdoor cables. However, along with the rapid development of rail transit in China, new requirements on the design of a railway system are provided for shortening the construction period, reducing the construction cost, reducing the later-stage field maintenance cost and improving the operation efficiency.

The existing full-electronic interlocking system generally adopts a centralized control framework installed in a cage type, and is not beneficial to a scene with low distribution density of point switches.

The centralized architecture is characterized in that: the safety power panel, safety control panel and safety input and output panel of the system are all placed in a cage, and the output of the switch board is connected with the switch machine through long-distance wires, as shown in figure 1.

In order to solve the problem of long distance routing of a control line of a point switch, the prior art also provides a better solution: "trackside switch machine control units" are used. As shown in fig. 2, the biggest difference from the method 1 is that long-distance cabling is changed into a communication unit, and the method can break through the limit of the length of the output control line of the output board of the switch machine, and change the long-distance communication into a method of network and the like, so that the usage amount of outdoor cables is reduced. But the biggest disadvantages of this method are: each system of trackside switch machine control unit needs 1 power supply safety board, 2 safety control boards and at least 1 switch machine drive board, if two systems need 2 power supply safety boards, 4 safety control boards and 2 switch machine drive boards, the cost is extremely high, and the system is particularly characterized in that one trackside switch machine control unit only controls 1 switch machine.

Disclosure of Invention

The invention aims to provide a distributed intelligent switch machine control system, which reduces the use of relays and outdoor cables, reduces the cost and ensures the safety and the usability.

In order to solve the technical problems, the invention adopts the following technical scheme: a distributed intelligent switch machine control system comprises a full electronic interlocking control unit and a plurality of remote switch machine control units which are distributed close to corresponding switch machines, wherein the full electronic interlocking control unit and the remote switch machine control units are in communication connection through optical fibers and are provided with a communication channel 1 and a communication channel 2 in parallel;

the all-electronic interlocking control unit consists of an all-electronic interlocking control unit A system and an all-electronic interlocking control unit B system which are redundant with each other, wherein the all-electronic interlocking control unit A system and the all-electronic interlocking control unit B system respectively comprise a safety control panel 1, a safety control panel 2 and a safety monitoring panel, the safety control panel 1 and the safety control panel 2 adopt two channels 2 to 2 for synchronous comparison and are responsible for data information exchange with a remote switch control unit, the safety monitoring panel monitors the states of the safety control panel 1 and the safety control panel 2 in real time, and if the safety control panel 1 and/or the safety control panel 2 fails, output communication is closed;

the remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant with each other, wherein the remote switch machine control unit A system and the remote switch machine control unit B system respectively comprise a safety monitoring unit 1, a safety monitoring unit 2, a safety controller 1, a safety controller 2, a safety acquisition unit 1, a safety acquisition unit 2 and a safety driving unit;

the safety driving unit controls the switch machine according to a control signal sent by the all-electronic interlocking control unit, the safety monitoring unit 1 and the safety monitoring unit 2 respectively perform safety monitoring on the all-electronic interlocking control unit and the remote switch machine control unit, and the output of the safety driving unit is cut off when the all-electronic interlocking control unit and/or the remote switch machine control unit fails;

the safety acquisition unit 1 and the safety acquisition unit 2 respectively and independently acquire the representation signals of the point switch and respectively upload the representation signals to the full electronic interlocking control unit through the communication channel 1 and the communication channel 2 in real time.

The safety controller 1 and the safety controller 2 respectively receive control signals of the all-electronic interlocking control unit to the switch machine, control the positive end and the negative end of the switch machine drive, and realize the normal drive of the switch machine when the two control signals are simultaneously effective: the safety controller 1 and the safety controller 2 report the switch machine representation information collected by the safety collection unit 1 and the safety collection unit 2 in real time; the safety controller 1 and the safety controller 2 report the monitoring information of the safety monitoring unit 1 and the safety monitoring unit 2 in real time, detect the health state of the safety monitoring unit 1 and the safety monitoring unit 2, and inform the all-electronic interlocking control unit when the safety monitoring unit 1 and/or the safety monitoring unit 2 is abnormal.

Preferably, the remote switch machine control unit is mounted inside a switch machine.

Preferably, the safety monitoring unit 1, the safety monitoring unit 2, the safety controller 1, the safety controller 2, the safety acquisition unit 1, and the safety acquisition unit 2 are disposed on the same single board.

Preferably, the all-electronic interlocking control unit and the remote switch machine control unit are communicated with each other through an Ethernet through a switch, and a railway safety communication protocol is adopted to guarantee the communication safety.

By adopting the technical scheme, the invention has the following beneficial effects:

1. the distributed intelligent point switch remote control greatly reduces the use of relays and outdoor cables, shortens the construction period, reduces the construction process requirements, reduces the construction cost, reduces the fault probability and the maintenance cost of the system, and improves the availability of the system.

2. In order to meet the availability of the system, all units in the system are backed up, namely, the all-electronic interlocking control unit consists of an all-electronic interlocking control unit A system and an all-electronic interlocking control unit B system which are redundant mutually, the remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant mutually, and the safety monitoring unit, the safety controller and the safety acquisition unit in the remote switch machine control unit A system and the remote switch machine control unit B system are also provided with the backup.

3. In the all-electronic interlocking control unit, an external communication port of the safety control board is controlled by the safety monitoring board, when the safety monitoring board monitors that the danger is invalid, the all-electronic interlocking control unit is informed in time, the system is in an uncertain dangerous state, and at the moment, the all-electronic interlocking control unit only receives and processes external information and does not control and output a point switch.

The safety power supply is the core of the safety driving power supply, all the functional safety related parts of the system are powered by the controlled safety power supply, if and only if the system functions normally, the safety power supply is powered, and only if the safety power supply is effective, the driving unit can normally respond to the instructions of the safety controller 1 and the safety controller 2. If the system function is abnormal, the safety power supply is in a safe state of power failure. After the safe power supply is cut off, the switch machine driver can not rotate, thereby preventing the switch machine from generating unexpected action. Whether the safe power supply supplies power is controlled by the safety monitoring unit. The safety monitoring unit is the core for guaranteeing the safety of the point switch, and the safety monitoring unit monitors whether the system fails in real time. Whether the external full electronic interlocking unit fails or the internal failure of the remote switch machine control unit occurs, the safety monitoring unit cuts off the output of the switch machine control safety power supply and simultaneously transmits a signal back to the full electronic interlocking control unit through the safety controller. And when the safety monitoring unit 1 and the safety monitoring unit 2 are both in an effective state, the output of the safety power supply is in an effective state. When the safety monitoring power supply has a fault, the safety power supply stops outputting.

In summary, through various safety mechanisms, the safety is high, and the requirement of the safety integrity level SIL4 is met.

4. In addition to the above-described safety mechanism of "safe power down", the correct acquisition and transmission of switch machine representative circuits is also very important. In the aspect of representing circuit acquisition, the system adopts an independent safety acquisition unit 1 and an independent safety acquisition unit 2 to respectively and independently acquire representing signals of the switch machine so as to ensure the acquisition independence. For improved safety, the collected representative signals are not voted on the switch machine. And the two groups of representation signals are uploaded to the full electronic interlocking control unit in real time through the communication channel 1 and the communication channel 2 respectively, and the full electronic interlocking system receives and judges whether the two groups of representation signals are consistent or not. And if the two groups of signals are found to indicate that the number of times of inconsistency of the signals exceeds a set value, determining that the system is in fault. At this time, the communication link adopts a strategy of receiving and transmitting only, namely, the all-electronic interlocking control unit only receives and processes external information and does not output control output to the point switch any more, so that the safety of the system is ensured finally.

The following detailed description of the present invention will be provided in conjunction with the accompanying drawings.

Drawings

The invention is further described with reference to the accompanying drawings and the detailed description below:

FIG. 1 is a schematic diagram of a switch machine control system with a centralized architecture;

FIG. 2 is a schematic diagram of a trackside switch machine control unit architecture;

fig. 3 is a schematic diagram of a system architecture of a distributed intelligent switch machine control system according to the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

As shown in fig. 3, a distributed intelligent switch machine control system includes an all-electronic interlocking control unit and a plurality of remote switch machine control units distributed near corresponding switch machines, where the all-electronic interlocking control unit and the remote switch machine control units are connected in communication through optical fibers and are provided with a communication channel 1 and a communication channel 2 in parallel.

The all-electronic interlocking control unit comprises an all-electronic interlocking control unit A system and an all-electronic interlocking control unit B system which are redundant with each other, the all-electronic interlocking control unit A system and the all-electronic interlocking control unit B system respectively comprise a safety control panel 1, a safety control panel 2 and a safety monitoring panel, the safety control panel 1 and the safety control panel 2 adopt two channels 2 to 2 for synchronous comparison and are responsible for data information exchange with a remote switch machine control unit, and the safety monitoring panel monitors the states of the safety control panel 1 and the safety control panel 2 in real time. When the safety monitoring board monitors that the danger is invalid, namely the safety control board 1 and/or the safety control board 2 is failed, the all-electronic interlocking control unit is informed in time to indicate that the system is in an uncertain dangerous state, at the moment, the all-electronic interlocking control unit only receives and processes external information, and the point switch is not controlled and output any more.

The remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant with each other, wherein the remote switch machine control unit A system and the remote switch machine control unit B system respectively comprise a safety monitoring unit 1, a safety monitoring unit 2, a safety controller 1, a safety controller 2, a safety acquisition unit 1, a safety acquisition unit 2 and a safety driving unit.

The safety driving unit controls the switch machine according to a control signal sent by the all-electronic interlocking control unit, the safety monitoring unit 1 and the safety monitoring unit 2 respectively monitor the all-electronic interlocking control unit and the remote switch machine control unit, and the output of the safety driving unit is cut off when the all-electronic interlocking control unit and/or the remote switch machine control unit break down.

The safety monitoring unit is the core for guaranteeing safe driving of the switch, and the safety monitoring unit can cut off the output of the switch machine control safety power supply no matter whether an external all-electronic interlocking unit fails or an internal failure of the remote switch machine control unit occurs, and simultaneously, the safety controller transmits a signal back to the all-electronic interlocking unit.

And when the safety monitoring unit 1 and the safety monitoring unit 2 are both in an effective state, the output of the safety power supply is in an effective state. When the safety monitoring power supply has a fault, the safety power supply stops outputting.

The safe power supply is the core of the safe driving power supply, only when the safe power supply is effective, the driving unit can normally respond to the instructions of the safe controller 1 and the safe controller 2, and when the safe power supply is cut off, the switch machine driver cannot rotate, so that the switch machine can be prevented from generating unexpected actions.

Meanwhile, the safety acquisition unit 1 and the safety acquisition unit 2 both acquire the safety state with the information of 'abnormal'.

The safety acquisition unit 1 and the safety acquisition unit 2 respectively and independently acquire the indication signals (turnout position information) of the point switch and respectively upload the indication signals to the full electronic interlocking control unit through the communication channel 1 and the communication channel 2 in real time. And the all-electronic interlocking control unit considers that the acquisition result is correct and reliable if and only if the acquired information of the safety acquisition unit 1 is consistent with that of the safety acquisition unit 2.

The safety controller 1 and the safety controller 2 respectively receive control signals of the all-electronic interlocking control unit to the switch machine, control the positive end and the negative end of the switch machine, and only when the control signals are effective at the same time, the switch machine can be normally driven. The safety controller 1 and the safety controller 2 report the switch machine representation information collected by the safety collection unit 1 and the safety collection unit 2 in real time; the safety controller 1 and the safety controller 2 report the monitoring information of the safety monitoring unit 1 and the safety monitoring unit 2 in real time, detect the health state of the safety monitoring unit 1 and the safety monitoring unit 2, and inform the all-electronic interlocking control unit when the safety monitoring unit is abnormal.

The remote switch machine control unit is arranged on the back of the switch machine, is provided with and only has an Ethernet port connected with the all-electronic interlocking control unit, and adopts RSSP-II (remote service center-to-local) which is a railway safety communication protocol II to ensure the communication safety. An all electronic interlocking control unit can be connected to N remote switch control units to control N switches, the performance of the all electronic interlocking control unit and the performance of the switch determines the total number of switches that the system can control.

In conclusion, the distributed point switch remote control system adopts the distributed point switch remote control, greatly reduces the use of relays and outdoor cables, shortens the construction period, reduces the construction process requirement, reduces the construction cost, reduces the fault probability and the maintenance cost of the system, and improves the availability of the system.

In order to meet the availability of the system, all units in the system are backed up, namely, the all-electronic interlocking control unit consists of an all-electronic interlocking control unit A system and an all-electronic interlocking control unit B system which are redundant mutually, a remote switch machine control unit consists of a remote switch machine control unit A system and a remote switch machine control unit B system which are redundant mutually, and the safety monitoring unit, the safety controller and the safety acquisition unit in the remote switch machine control unit A system and the remote switch machine control unit B system are also backed up. Thus, with the various safety settings described above, the present invention meets the requirements of safety integrity level SIL 4.

Other embodiments of the present invention than the preferred embodiments described above, and those skilled in the art can make various changes and modifications according to the present invention without departing from the spirit of the present invention, should fall within the scope of the present invention defined in the claims.