JPH0263961A - Parallel multiple electronic interlock and system rising method thereof - Google Patents

Abstract

PURPOSE:To make a speedy reset to parallel operation performable by writing rising data of each system in a storage part of at least one terminal periodically, and making it reset to the parallel processing after securing the rising data from the terminal at the time of rising after power interruption of one system. CONSTITUTION:At the time of normal operation of one side in both first and second electronic interlocking control systems 2, 3, when the other side is tried to be restored at an optional point of time after its maintenance, data of a system during normal operation at present is fed to a rising system as the rising data. Accordingly, data requisite for rising is periodically transmitted to at least one of the terminals 8, 9 from a system during the normal operation, and the latest rising data is stored in a memory means all the time in advance. When a trouble has occurred in one system, the rising data are demanded to these terminals 8, 9 at the time of rising the system after maintenance of the system, and the said terminal transmits the rising data stored to the demand system in response to this demand. Thus, after competition of maintenance, the rising system is made possible to be reset to a parallel process so speedily.

Description

DETAILED DESCRIPTION OF THE INVENTION "Field of Industrial Application" The present invention relates to an electronic interlocking device, and more particularly to a parallel multiple electronic interlocking device having a plurality of electronic interlocking control systems that perform parallel processing.

``Conventional technology'' In order for vehicles to operate safely on tracks that include traffic lights and switches, certain orders and restrictions must be applied to the control and operation of these signals and switches. There is a need for this, and there is an electronic interlocking device as a device for this purpose.

Due to the role of such an electronic interlocking device, interruption of operation is not allowed, so conventionally two electronic interlocking control systems are used to cause both systems to operate in parallel. In other words, 1) both systems perform exactly the same operation, and 2) one system is normally used, and if a failure occurs in that system, it is immediately switched to the other system to ensure that there is no problem with the system. I'm here.

By the way, for the system in which R damage has occurred, it is necessary to immediately normalize the machine and return to parallel processing.In this case, both systems must be restarted without stopping the operation of the normally operating system. It is necessary to make the operating state of the two devices the same. Conventionally, when starting up one system after it goes down, a special device (hardware) is used as an intermediary to bring up the data that is currently being used by the other system and send it to the startup system as data. The system was designed to start up after confirming that the data for one car matched, or after confirming that there was no train and that all signals were stopped.

``Problem to be Solved by the Invention'' However, the former method not only requires special equipment, but also has the problem of lowering system reliability due to failure of this special equipment itself. Ta. Further, the second method has a problem in that it is not possible to start up the system at any desired time, and the timing requires manual judgment.

The present invention was made in view of these conventional problems, and uses the conventional system to start up the system at any time and perform parallel operation without using any special equipment. It is an object of the present invention to provide a method for starting up a parallel multiplex electronic interlocking device whose turning point is a quick recovery of the system, and a parallel multiplex electronic interlocking device that implements this startup method.

"Means for Solving Problem v1" The gist of the present invention for achieving the above object is as follows: 1. First and second electronic interlocking control systems, and the first and second electronic interlocking control systems. and at least one terminal having a storage section connected to a parallel multiplex electronic interlocking device that performs parallel processing of the first and second interlocking control systems, the method comprising: The startup data necessary for startup is periodically written to the storage section of the at least one terminal, and when starting up one system after power is cut off,
The first method is to start up a system of a parallel multiplex electronic interlocking device, characterized in that the start-up data is acquired from the terminal and the process returns to parallel processing.

2. A parallel multiplex electronic interlocking device comprising first and second electronic interlocking control systems to which at least one terminal is commonly connected, the first and second systems performing parallel processing, synchronization signal generation means for supplying a synchronization signal to the systems; first and second lines for transmitting control data from the first and second systems to the terminals, respectively; and a third line that is commonly transmitted to the second system, and the first and second systems periodically transmit startup data necessary for system startup to the first and second lines. have the means to do so.

At least one of the terminals includes means for receiving and storing start-up data sent from the system, and in response to a start-up data request from any system, the start-up data stored in the storage means The present invention resides in a parallel multiplex electronic interlocking device characterized by having means for transmitting data to a third line.

"Operation" When one of the first and second electronic interlocking control systems is operating normally, if you wish to restore the other control system at any time after its maintenance, the above-mentioned procedure will apply. In this case, the data of the system currently in normal operation must be supplied to the startup system as startup data.This startup data is
This is not fixed data, but data that changes as the system operates.

Therefore, in the present invention, by periodically transmitting the startup data necessary for startup from a normally operating system to at least one terminal, the latest startup data is always stored in the storage means inside the terminal. If a failure occurs in one of the systems in which data is stored, and when that system is started up after maintenance, that system will request startup data from the above terminal, and this request will be sent to the terminal. In response, the terminal transmits startup data stored in its internal storage means to the requesting system.

Preferably, the startup system acquires the startup data and processes it, then retrieves the startup data again from the terminal, compares the processed data with the startup data that was acquired again, and checks whether the two data match. After confirming that, regular parallel processing begins.

As a result, under normal conditions, the system can be started up in a few cycles at most.

The amount of startup data required during startup is approximately the same amount as the data used by the electronic terminal group, and the data dedicated to startup, such as internal timer values and processing counter values, is compared to the amount of data normally used. The amount of data is negligible. therefore.

The fact that the period becomes somewhat longer due to the increase in the amount of data and the time required for the terminal to transmit start-up data can be sufficiently absorbed with the current period margin.

``Embodiment'' An embodiment of the present invention will be described below with reference to one drawing, taking a parallel double interlocking device as an example.

FIG. 1 is a schematic block diagram of a parallel double interlock device according to the present invention. This device includes a synchronization signal generator 2, interlocking control systems 3 and 4 (I system and ■ system) that receive a common synchronization signal from the synchronization signal generator 2, and a plurality of terminals 8, 9,
..., control lines 5, 6 that transmit control data from systems 3 and 4 to each terminal, and a display line 7 that commonly transmits data from each terminal to both systems. Systems 3 and 4
teeth.

They are electronic computers with the same hardware configuration, and their operating programs are also the same. At least one terminal (terminal 8 in this embodiment) is a terminal having a storage unit, such as a personal computer, CT C (
Centralized traffic controller
ol) equipment, electronic track relays, etc.

In this embodiment, data is exchanged between the system and the terminal using a polling/selection method. Further, the line is a serial data transmission line. In the polling/selection method, system 3.4, which is a control station, centrally controls a group of terminals, and when transmitting data from a system to a terminal, the system sends a selection code that includes the other party's address. In order to transmit data from a terminal to the system, the system sends a polling code containing the destination address to each terminal in turn within one system cycle to prompt the terminal to send data. It is.

FIG. 2 shows a block diagram of the terminal 8 to which the present invention is applied.

This terminal 8 includes a data receiving section 81 that receives and temporarily holds data on the control lines 5 and 6;
A failure detection unit 82 detects the occurrence of a failure in either system 3 or 4 from the output of the system, a system switching unit 83 selects data of one system from the data reception unit 81, and control data from the system and polling data are detected. A processing unit 84 that detects that the own terminal is specified and performs processing according to the type of terminal and processing for storing and reading start-up data, and the processing data and start-up data of this processing unit 84 are stored. storage unit 85;
It consists of a data transmitting section 86 that transmits a display code or start-up data, which is a processing result of the terminal, to the display line 7.

The data receiving unit 81 has a two-channel serial data input terminal, and holds received data in a temporary buffer for each channel. In current electronic interlocking systems that use bus-synchronous or phase-synchronous computers, which are unlikely to have the same failure at the same time, the system with the problem will always go down. No data is sent to the control line of the failure detection unit 82.
According to the presence or absence of significant data in the data receiving section 81, it is possible to easily detect the occurrence of a failure in the system.

Note that in this embodiment, fault detection may be performed based on the output of the data receiving section 81, or may be directly detected from the line 5.6 in the preceding stage of the data receiving section 81.

When the failure detection unit 82 detects the occurrence of a failure in one system, the system switching unit 83 switches to select the system without the failure. The system switching unit 83 is also switched by instructions from the processing unit 84, as will be described later. Note that the system switching section 83 is shown as a functional block, and is not limited to a hardware switch.
It is also possible to selectively read out one of the buffers.

The processing unit 84 receives data from systems 3 and 4, detects unspecified self-ends from the systems, performs processing according to the control data, and receives start-up data for each cycle and stores the data in the storage unit. 85. Further, the processing unit 84 provides the processing FW result as display data to the data transmitting unit 86 during self-end unspecified polling, or during start-up polling (described later).
Then, start-up data is given from the storage section 85 to the data transmitting section 86. The data transmitter 86 sends these data to the display line 7.
The data on the 1 display line 7 sent to the 1 display line 7 is used by both systems 3 and 4, or the start-up data is used only by the start-up system.

The storage unit 85 is usually configured as a rewriteable memory (RAM). The start-up data can be stored by using a partial area of the existing memory as a start-up data storage area, or by providing a separate memory.

Next, an example of the operation of the apparatus of this embodiment will be explained with reference to FIG.

FIG. 3 shows the timing of data transmission and reception on each line 5, 6 and 7 of FIG. 1.

In the figure, "control" is the control data output from system 3.4.
``Bo'' indicates a polling signal, ``Table'' indicates a display code that is the output of the processing result of the terminal, and ``Rise'' indicates a start-up data request polling signal.

First, during normal operation, as shown in FIG. 3(a), systems 3 and 4 start their system cycles at the same time using synchronization signals, perform the same processing, and use the same control code every cycle. Output. This control code includes control information attached with the address of the other party's terminal. In particular, for specific terminals, data necessary for startup (startup data)
mosquito.

Sent every cycle. The number of specific terminals may be multiple, taking into consideration reliability degradation due to terminal failure, etc.
Following the transmission of the control code, system 3.4 sequentially performs polling to designate each terminal in order to receive data from each terminal. In response, each terminal outputs a display code.

During normal operation, the control line data for both systems is the same, so each terminal may use the data from either line. However, in this embodiment, as described later, the control line data for system 3 and 4 control line data is used.

After one system 4 went down for some reason.

A timing chart when system 4 is returned to parallel processing after maintenance is shown in FIG. 3(b).

Assume that the power to system 4 is turned on at time to while only system 3 is performing one-sided processing. Upon this power-on, the yarn 4 either starts operating or requires start-up data for normal parallel processing with the system 3. At time t2 following the last polling of the cycle starting at 1t+, the system 4 issues a start-up data request polling signal to the particular terminal mentioned above. In response, the specific terminal outputs the start-up data stored in its storage section to the display line 7.

The start-up data request polling is performed again at the next cycle starting at time t3, and the start-up data received at the T2 cycle is received. The data after this processing is the next time t
The start-up data is compared with the start-up data taken in by the start-up data polling of the T3 cycle in the cycle starting from 4. This gives system 4
It is confirmed that the operating data of system 3 completely coincides with the operating data of system 3. The normal parallel processing state starts from the next cycle starting at time t5 when this coincidence is confirmed. In this case, the start-up data taken in the T4 period is not used, and if for some reason the start-up data taken in the T1 period and the processed data of the own system do not match, it is used for comparison again.

As a result, under normal conditions, it is possible to start up the system in at most three cycles. The current electronic interlocking cycle is 100 to 6
Since the distance is about 00m5, it takes a maximum of 2 seconds to recover to parallel operation.

Next, FIG. 4 shows a flowchart of the operation of the terminal in FIG. 2.

In this terminal, the data receiving unit 81 receives control codes from the control lines 5 and 6 of both systems at the beginning of the system cycle (Sl). From this received content, it is detected whether any system is down or not. (S1) If both systems are normal, the variable F is set to O (S3). If it is detected that one of the systems is down, the system switching unit 83 is controlled to select the normal system (521), and the variable F is set to 1 (S22).
), next, the processing unit 84 reads the buffer in the data receiving unit 81, determines whether the own end is unspecified, and if the own end is unspecified, performs processing according to the control code, Furthermore, the processing unit 84 stores startup data in the storage unit 85, and outputs the result of the above processing to the display line 7 in response to polling of the own terminal (S4). After the output of display data for the system is completed, a command is issued to the system switching unit 83 to reverse the selected system (S5). This reversal is performed to detect the occurrence of startup polling from the startup system during one-system processing It is. The processing unit 84 reads the buffer of the other system in the data receiving unit 81 (S6),
The presence or absence of the start-up bow link is checked (S7). If it is not detected within a predetermined time during start-up polling, the variable F or 1
It is checked whether or not (S23), and if F#l (that is, both systems are normal), the process directly returns to the first process of the next cycle.

Therefore, if both systems are normal, one system will be selected alternately. If F=1 (that is, one system is down), the system switched in step S5 is reversed again (S9), and then the process returns to the first process. The existence of this step S9 is due to the following reason. Even if it is determined that there is no start-up polling, the determined system may be normal or down, and if it is normal, the system scale in step S5 may remain the same. If it is down, see Figure 3 (b)
As in the case after time 0, if the j and q systems are determined to be normal in the next cycle and the systems are held as they are, there will be an inconvenience that system 4, which outputs dummy data, will be selected. System inversion in step S9 corrects this inconvenience.

In step S7, if start-up polling is detected, start-up data is output from tqi85.
8), the system is reversed (S9) and the process returns to the beginning. The system reversal in step S9 here is to deal with the fact that, as can be seen from the third step (21(b)), the parallel processing state is not necessarily normal after the start-up bow link.

Incidentally, since the transmission and reception of storage data in systems 3 and 4 can be handled by modifying the existing block diagram, no particular means for this purpose is shown.

The above is a preferred embodiment of the present invention! Did you only explain example A?
Modifications may be made without departing from the spirit of the invention.

"Effects of the Invention" According to the system startup method and parallel multiplex electronic interlocking device of the present invention, the electronic interlocking control system can be started up via an existing terminal, and a special It is possible to start up the startup system immediately after maintenance is completed and quickly return to parallel processing without the need for any equipment or manual judgment of startup timing, and it is possible to quickly return the startup system to parallel processing. The reliability of the device can be significantly improved.

[Brief explanation of the drawing]

FIG. 1 is a schematic block diagram of a parallel double interlocking device which is an embodiment of the present invention, FIG. 2 is a schematic block diagram of a terminal device of 1I21, and FIG. 3 is a timing diagram of the operation of the device of FIG. 1. , 412I is a flowchart of the operation of the terminal of FIG. 2... Synchronous signal generator 3.4... Electronic interlocking control system 5.6... Control line 7... Display line Figure 2

Claims (1)

[Scope of Claims] 1. The first and second electronic interlocking control systems, and at least one terminal having a storage unit connected to the first and second electronic interlocking control systems, and a system start-up method for a parallel multiplex electronic interlocking device in which a second interlock control system performs parallel processing, wherein each of the systems periodically stores start-up data necessary for start-up in the storage section of the at least one terminal. When starting up one system after power-off,
A system start-up method for a parallel multiplex electronic interlocking device, characterized in that the system acquires the start-up data from the terminal and returns to parallel processing. 2. A parallel multiplex electronic interlocking device comprising first and second electronic interlocking control systems to which at least one terminal is commonly connected, the first and second systems performing parallel processing, synchronization signal generating means for supplying a synchronization signal to the system; first and second lines that transmit control data from the first and second systems to the terminal, respectively; and transmitting data from the terminal to the first system. and a third line that is commonly transmitted to the second system, and the first and second systems periodically transmit startup data necessary for system startup to the first and second lines. at least one of said terminals has means for receiving and storing start-up data sent from said system, and said terminal having means for receiving and storing start-up data sent from said system, and said terminal having means for receiving and storing start-up data sent from said system, and said terminal receiving and storing start-up data in said storage means in response to a start-up data request from any system. A parallel multiplex electronic interlocking device comprising means for transmitting the start-up data to the third line.