JPH10340102A - Serial communication device - Google Patents

Abstract

(57) [Problem] To provide a serial communication device with an increased probability of detecting a failure of a triple control device or an abnormality of data. SOLUTION: Data received from a partner device of serial communication is distributed to respective receiving units 13 of a triple control device 11 by a distributor 12, and data received by each receiving unit 13 is transmitted to a collation line 15 through a collating line 15. The data is transmitted to the control devices 11 of the other systems via each other. Then, each control unit 14 of the triple control device 11 determines the validity of the data and the failure of the device based on the data obtained via the matching line 15 and the data received by the reception unit 13 of the own system. Make a decision.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a serial communication device which ensures a fail-safe property by increasing a failure detection rate in a railway signal system.

[0002]

2. Description of the Related Art For example, in a railway system, data is transmitted between various control devices in order to carry out transportation operations safely and efficiently. On the other hand, among the various control devices, there are a device having a triple system configuration in order to ensure the fail-safe property of the system, and a single or double system control device.

In order to connect various control devices to other devices by serial communication, it is necessary to properly connect these single, double, and triple control devices. Therefore, when connecting various control devices by serial communication, 1: 1 connection is performed, or in the case of 1: n connection, connection is performed by a connection procedure such as a boring process using a communication protocol.

[0004]

However, if the self-device is a triple system and the partner device is also a triple system, one-to-one connection can be performed. However, if the partner device is a single system or a double system, One-on-one
Even if the above connection is made, there is no point in having a triple system. That is, fail-safeness of the system cannot be ensured. On the other hand, in serial communication, a large percentage of abnormalities in data to be communicated are caused by abnormalities in data caused by a failure in the control device.

An object of the present invention is to provide a serial communication device having an increased probability of detecting a failure of a triple control device or an abnormality of data.

[0006]

According to a first aspect of the present invention, there is provided a triple control device comprising three control devices, and a triple control device for receiving data received from a partner device of serial communication. A distribution unit for distributing to each receiving unit, a matching line for transmitting data received by each receiving unit to each other's control device, and a matching line provided in each of the triple control devices via a matching line And a control unit for judging the validity of the data and determining the failure of the device based on the data obtained by the above and the data received by the receiving unit of the own system.

According to the first aspect of the invention, the data received by each of the three control devices is sent to the other two control devices, and the data received by the own system is compared with the data received by the other two devices. Based on the result, the validity of the data received by the own system and the failure determination of the device are confirmed.

According to a second aspect of the present invention, a triple control device including three control devices and a triple control device for transmitting data to a partner device for serial communication are provided. A collation line for transmitting data to each other's control device, a collation unit for collating the data received from the other control device with the data of the own system via the collation line,
A failure detection unit provided in each of the triple control devices for detecting a failure of the control device of the own system, and a control for transmitting data to a partner device based on a collation result from the collation unit and a signal from the failure detection unit And a transmission right selecting unit for selecting a device.

According to the second aspect of the present invention, the data to be transmitted is transmitted to the other two control devices, and the own system compares the data to be transmitted with the data received from the other two control devices. When the data of the system and the date from the other system match, and also in the other system, the data of the other system and the data of the own system match, and the data of the own system controller is Send

According to a third aspect of the present invention, a triple control device including three control devices and a triple control device for transmitting data to a partner device for serial communication are provided. A collation device for receiving data and transmitting the data when at least two of the three data match.

According to the third aspect of the present invention, the collation device receives data from three control devices, collates the three received data, and transmits the data when at least two data match. As a result, data normality and 3
Detects the soundness of the control units.

According to a fourth aspect of the present invention, in the third aspect of the present invention, two collation devices are provided, one is a main system, and the other is a sub system. The slave collating device is used as the master.

According to the fourth aspect of the invention, each of the master and slave collators collates the data received from the three control devices, and when the data coincides with each other, the data collated from the master collation device. Is transmitted, and for the data for which the inconsistency is detected, the control device that sent the data is determined to be abnormal.
If an abnormality is detected in the main collation device, the main collation device is stopped by the switching signal and the slave collation device 42 is used.

According to a fifth aspect of the present invention, there is provided a triple control device including three control devices and one of the triple control devices when transmitting data to a partner device for serial communication.
A matching line for transmitting data prepared by one control device to two other control devices, a holding delay unit for holding or delaying data from one control device, and a matching line obtained via the matching line. And a logic unit for providing a data transmission permission signal to the holding delay unit when the received data matches data prepared by one of the two other control devices.

According to the fifth aspect of the present invention, when data is transmitted to a partner device of the serial communication, data of one of the triple control devices is input to the holding delay unit and immediately transmitted. Not be done. In the meantime, the data prepared by the other two control devices is compared with the data from one control device, and the logic unit confirms the normality of the data and sends a transmission permission signal to the holding delay unit, and The data from the two control devices is transmitted to the partner device.

According to a sixth aspect of the present invention, in the fifth aspect of the present invention, a transmission permission switch is provided in place of the holding delay section, and the logic section receives two data obtained via the collation line from another control device. When the data coincides with the data prepared by one of the other control devices, the control device instructs one control device to output the data and turns on the transmission permission switch.

According to a sixth aspect of the present invention, when data is transmitted to a partner device of serial communication, a transmission permission switch is turned off on a transmission line, and one of the three control devices is controlled. The data output from is not transmitted immediately. In the meantime, the data prepared by the other two control devices is compared with the data from one control device, and the logic unit confirms the normality of the data, turns on the transmission permission switch, and sets one It instructs the control device to output data, and transmits data from one of the control devices to the partner device.

[0018]

Embodiments of the present invention will be described below. FIG. 1 is a configuration diagram showing a first embodiment of the present invention. In the first embodiment, serially transmitted data is transferred to a triple control device 11a, 11b, 11c.
This is for the case of receiving by.

The data from the partner device of the serial communication is received by the distributor 12, and the distributor 12 receives the data from the receiving units 13a, 13a,
13b and 13c. And each receiving unit 1
The data input to 3a, 13b, and 13c are stored in the control unit 14 of each of the control devices 11a, 11b, and 11c.
a, 14b, and 14c, and the matching line 15
Control devices 11a, 11b, 11c of other systems via
Sent to.

That is, the data received by the receiving unit 13a is input to the control unit 14a of the own system and also to the control unit 14b of the other system and the control unit 14c of the other system. Similarly, the data received by the receiving unit 13b is transmitted to the control unit 1 of the own system.
4b, the data received by the control unit 14a of the other system and the control unit 14c of the other system, and received by the receiving unit 13c are input to the control unit 14c of the own system and the control unit 14a of the other system. These are input to the control unit 14b of the other system.

Each of the control units 14a, 14b, and 14c determines the validity of the data based on the data from the other system's receiving unit and the data received by the own system's receiving unit via the collation line 15. And equipment failure judgment. For example, the control unit 14a collates the data from the receiving units 13b and 13c of the other system with the data received by the receiving unit 13a of the own system, and compares the data from the receiving unit 13a of the own system with the receiving unit 13b of the other system. , 13c, it is determined that the data from the own receiver 13a is normal. Of course, when both match, the data from the receiving unit 13a of the own system is naturally determined to be normal. On the other hand, when both data do not match, the data from the receiving unit 13a of the own system is determined to be abnormal.

Also, by judging the normality of this data,
Receivers 13a, 13 of control devices 11a, 11b, 11c
The failures of b and 13c are also determined. That is, the receiving unit 1 of the own system
If the data from the receiving unit 13a of the other system matches the data of the receiving unit 13b of the other system but does not match the data of the receiving unit 13c of the other system, the receiving unit 13a of the own system and the receiving unit of the other system 13b is normal, and the receiving unit 13c of the other system is determined to be faulty.

In the first embodiment, each control device of the triple system performs comparison and collation of the data from the partner device of the serial communication, so that the failure of the control device 11, especially the failure of the receiving unit 13, It is possible to prevent the received data from being adopted as abnormal data and to detect a failure of the receiving unit 13.

That is, when the receiving unit 13 is out of order, the received data is adopted as erroneous data by the control unit 14 of the control device 11, but in the first embodiment, The control unit 14 of the control device 11 performs comparison and collation of the received data, thereby preventing the data received due to the failure of the receiving unit 13 from being adopted as erroneous data and detecting the failure of the receiving unit 13. be able to.

Next, a second embodiment of the present invention will be described. FIG. 2 is a configuration diagram showing a second embodiment of the present invention. In this second embodiment, a triple control device 11
In this case, data is transmitted by serial transmission from a, 11b, and 11c to a partner device of serial communication.

In FIG. 2, each control device 11a, 1
1b and 11c are control units 14a for creating transmission data,
14b, 14c, failure detectors 16a, 16b, 16c for confirming that the own control device is normal, and data from the other control device obtained through the collation line 15 and the data of the own control device. A first matching unit 17a, 17b, 17c for matching with data and a second matching unit 18a,
18b and 18c.

Each of the control devices 11a of the triple system
First collation units 17a, 17b, 17c of 11b, 11c
, Sab, Sac, Sba from the second collating units 18a, 18b, 18c
c, Sca, Scb, and failure detectors 16a, 16
The normal signals Ta, Tb, Tc indicating the normality of the control devices 11a, 11b, 11c from b, 16c are input to the transmission right selecting unit 19. The transmission right selecting unit 19 selects a first data from the control device 11a based on these signals.
Selection signal R for turning on the selection switch 20 of
1 or the second to select data from the control device 11b
Selection signal R for turning on the selection switch 21
2 is output.

That is, in the first embodiment, data is normally transmitted from the control device 11a, and at that time, the control devices 11b and 11c of the other systems are transmitted.
The data is compared with, and the data is transmitted after confirming the normality of the data. Then, when the control device 11a is out of order or when the data from the control device 11a is determined to be abnormal, the data from the control device 11b is transmitted.

The control device 11a which normally transmits data passes the data to be transmitted to the other control devices 11b and 11c via the collation line 15. The control device 11a compares the data received from the control device 11b with the transmission data of the own system by the first collation unit 17a. As a result of the collation, when they match, it is determined to be normal, and the matching result signal Sab of A = B matching is output to the transmission right selecting unit 19. If they do not match, an unmatched matching result signal Sab is output.

Similarly, the control device 11a is controlled by the control device 11c.
And the transmission data of the own system are compared by the second matching unit 18a. As a result of the collation, when they match, it is determined that they are normal, and the collation result signal Sa of A = C match
c to the transmission right selecting unit 19. If they do not match, the matching result signal Sac is output. When the failure of the control device 11a is determined to be normal by the failure detection unit 16a, the control unit 11a outputs a normal signal Ta of A normal to the transmission right selection unit 19.

Each of the other two control devices 11b and 11c similarly outputs each signal. That is, the control device 11b compares the data received from the control device 11a with the transmission data by the first matching unit 17b. If the result of the collation is normal, a collation result signal Sba of B = A match is output to the transmission right selecting unit 19. If they do not match, the matching result signal Sba is output. Similarly, the control device 11
The data received from c and the transmission data are compared by the second matching unit 18b. If the collation is normal, B =
The matching result signal Sbc of C match is output to the transmission right selecting unit 19. If they do not match, an unmatched matching result signal Sbc is output. In addition, the failure detection unit 16b uses the control device 1
When it is determined that 1b is normal, a normal signal Tb of B normal is output to the transmission right selecting unit 19.

The control unit 11c compares the data received from the control unit 11a with the transmission data by the first collation unit 17c. If the result of the collation is normal, a collation result signal Sca of C = A match is output to the transmission right selecting unit 19. If they do not match, an unmatched matching result signal Sca is output.
Similarly, the data received from the control device 11b and the transmission data are compared by the second matching unit Scb. If the result of the collation is normal, a collation result signal Scb of C = B match is output to the transmission right selecting unit 19. If they do not match, the matching result signal Scb is output. Further, the failure detection unit 16
In c, when it is determined that the control device 11c is normal, a normal signal Tc of C normal is output to the transmission right selecting unit 19.

These six signals, that is, the control device 11
a, the matching result signal Sab, Sac, the normal signal Ta,
The comparison result signals Sba and Sbc from the control device 11b, the normal signal Tb, and the comparison result signals Sca and S from the control device c.
cb and the normal signal Tc are input to the transmission right selecting unit 19,
The transmission right selection circuit 6 logically determines and outputs a first selection signal R1 for turning on the first selection switch 20 or a second selection signal R2 for selecting the second selection switch 21. .

FIG. 3 is an explanatory diagram of the selection logic of the transmission right selecting section 19. FIG. 3A is represented by a relay logic, and FIG. 3B is represented by a logic circuit.
In FIG. 3, A is the control device 11a, B is the control device 11b,
C is a notation related to the control device 11c.

In FIG. 3A, the failure detector 16a has established that the control device 11a is normal (A
Normal), the transmission data of the control device 11a and the transmission data from the control device 11b match (A = B match) in the determination by the first collation unit 17a of the control device 11a, 1 by the collation unit 17b
When the transmission data of 1b matches the transmission data from the control device 11a (B = A match) and the failure detection unit 16b holds that the control device 11b is normal (B normal). , The transmission right selection unit 19 is the first selection switch 2
0 is turned on to select transmission data from the control device 11a (A selection).

The failure detecting unit 16a controls the controller 11
a is normal (A normal), and the control device 1a is determined by the second collating unit 18a of the control device 11a.
1a and the transmission data from the control device 11c match (A = C match), and the first data of the control device 11c
The transmission data from the control device 11c and the transmission data from the control device 11a match (C = A match) as determined by the collation unit 17c, and the failure detection unit 16c determines
Is normal (C normal), the transmission right selection unit 19 turns on the first selection switch 20 and selects transmission data from the control device 11a (A selection).

On the other hand, the condition of the selection of A is not satisfied, and the transmission data of the control device 11b and the transmission data from the control device 11c match according to the determination by the second collating unit 18b of the control device 11b. Yes (B = C match), control device 1
The control device 11c is determined by the second collating unit 18c of FIG.
And the transmission data from the control device 11b match (C = B match), the failure detection unit 16b holds that the control device 11b is normal (B normal), and the failure detection When it is determined that the control device 11c is normal (C normal) in the unit 16c, the transmission right selection unit 19 turns on the second selection switch 21 and turns the control device 11 on.
The transmission data from b is selected (B selection).

FIG. 3B is a representation of FIG. 3A by a logic circuit. In FIG. 3A, serial elements are indicated by AND conditions, and parallel elements are indicated by OR conditions. . The negative element is indicated by a NOT condition.

As described above, in the second embodiment, when data is transmitted from the triple control device to the partner device of the serial communication, the data to be transmitted from one control device is transmitted to the other two devices. The data to be transmitted is compared with the data received from the other two devices in the own system, and as a result, the data in the own system matches the data in the other system, and the control device of the other system However, when the data of the own system matches, the transmission right selecting unit 19 transmits the data from the one control device.

That is, the other two control devices determine the normality of the transmission data generated by one control device, so that the abnormality of the transmission data and the abnormality of the control device can be detected. . Therefore, it is possible to detect an abnormality that the failure detection unit 16 misses, and it is possible to transmit data with higher reliability and improve the reliability of the device.

Next, a third embodiment of the present invention will be described. FIG. 4 is a block diagram showing a third embodiment of the present invention. In the third embodiment, data is transmitted by serial transmission from the triple control devices 11a, 11b, and 11c to a partner device of serial communication, and a fail-safe verification with a high failure detection rate is performed. The device 22 is provided.

In FIG. 5, when data is transmitted to the partner device of the serial communication, each of the three control devices 11
a, 11b, and 11c output the respective transmission data to the matching device 22. The collation device 22 includes three control devices 11
a, 11b, and 11c, when each of the received data is received, the three received data are collated and at least 2
When the two data match, the data is transmitted to the other device of the serial communication. In this case, the matching device 22
For the data for which the inconsistency is detected, the control device 11 that has sent the data is determined to be abnormal.

As a result, the normality of the transmission data is ensured, and it is possible to detect an abnormality of the control device whose data does not match. That is, the normality of the transmission data and 3
And the soundness of the control unit of the vehicle can be detected.

In the above description, when at least two pieces of data match, the data is transmitted. However, when all three pieces of data match, the data is transmitted to the partner apparatus of the serial communication. You may make it transmit. In that case, data reliability is further improved.

The data transmitted from the collation device 22 to the partner device of the serial communication is transmitted to the three control devices 11a and 11
b, 11c, and each control device 11a, 11b,
At 11c, the data transmitted from the collation device 22 to the partner device of the serial communication and the respective control devices 11a, 11b, 1
1c may collate the data output to the collation device 22. In this case, it is possible to check the soundness of the matching device 22.

As described above, in the third embodiment, by providing the matching device 22 having a high failure detection rate,
The normality of the transmission data and the soundness of the three control devices can be detected. In the control devices 11a, 11b, and 11c,
It is not necessary to perform data collation or determine an abnormality.

Next, a fourth embodiment of the present invention will be described. FIG. 5 is a block diagram showing a fourth embodiment of the present invention. This fourth embodiment is different from the third embodiment shown in FIG. 4 in that two collation devices 22a and 22b are used.
Is provided, one is set as the main system, the other is set as the subordinate system, and when the collation device 22a of the main system breaks down, the collation device 22b of the subordinate system is set as the main system.

In FIG. 5, when data is transmitted to a partner device of serial communication, each of the three control devices 11
a, 11b, and 11c output the respective transmission data to the two matching devices 22a and 22b. Collation devices 22a, 2
2b includes three control devices 11a, 11b, 11
When the transmission data is received from c, the three received data are collated. Then, as a result of the data collation, when at least two data coincide or all three data coincide, the main collation device 22a transmits the data to the partner device of the serial communication. In this case, the collation device 22 determines that the control device 11 that has transmitted the data is abnormal for the data for which the mismatch is detected.

On the other hand, the slave collation device 11b performs the same collation operation as the master collation device 11a, but does not output the serial communication to the partner device. In addition, the main collation device 2
2a transmits the data transmitted to the partner device of the serial communication to 3
Are input to the control devices 11a, 11b and 11c and the collation device 22b of the slave system. And each control device 11
In a, 11b, and 11c, the data transmitted from the collation device 22 to the partner device of the serial communication and the control device 11
a, 11b, and 11c collate the data output to the collation device 22. Further, the slave collating device 22b collates the transmission data transmitted by the master collating device 22a to the partner device of the serial communication with the transmission data determined to be output by itself. This makes it possible to check the soundness of the matching device 22a. In addition, each collation device 22a,
22b has a failure detection function.

That is, when an abnormality of the device is detected by the failure detection function in the main verification device 22a,
The collation device 22a is switched to the collation device 22b by the switching signal S1.
Switch to use. Further, the collation device 22b monitors the transmission data of the collation device 22a. Even when an abnormality that is not detected in the collation device 22a occurs, the collation device 2b.
The use is switched from 2a to the matching device 22b. Thus, when the primary collation device 22a fails, data transmission is continued using the secondary collation device 22b as the primary system.

As described above, in the fourth embodiment, the master collation device 22a and the slave collation device 22b are provided, and the slave collation device 22b collates the transmission data of the master collation device 22a. By doing so, a higher error detection rate can be secured.

Next, a fifth embodiment of the present invention will be described. FIG. 6 is a block diagram showing a fifth embodiment of the present invention. In the fifth embodiment, data is transmitted by serial transmission from the triple control devices 11a, 11b, and 11c to a partner device of serial communication, and a holding delay for holding or delaying transmission data. Part 23
And a logic unit 24 for giving a transmission permission signal to the transmission data of the holding delay unit 23, and the triple control devices 11a, 11b, 1
And a collation line 15 for collating data between 1c.

In FIG. 6, a triple control device 11a,
When data is transmitted from the communication devices 11b and 11c to the partner device of the serial communication, the control devices 11a, 11b,
The data prepared by one of the control devices 11a out of 11c is transmitted to two other control devices 11b and 11c via the collation line 15. The data prepared by one control device 11a is transmitted to the holding delay unit 23, and the data is temporarily stored in the holding delay unit 23.

On the other hand, two other control devices 11b and 11c
Then, the data input via the collation line 15 is collated with the data prepared respectively by the two other control devices 11b and 11c. The comparison result signal is output to the logic unit 24. In the logic unit 24, two other control devices 11b, 11
When any of the comparison result signals from c is satisfied, the data output permission signal is output to the holding delay unit 23.

That is, when the data prepared by the control device 11a matches the data prepared by the control device 11b,
Alternatively, the data prepared by the control device 11a
When the data matches the data prepared in c, the holding delay unit 23
To output a data output enable signal. As a result, the holding delay unit 23 transmits the data temporarily held to the partner device of the serial communication.

As described above, in the fifth embodiment, when data is transmitted from the triple control device to the partner device of the serial communication, the transmission data from one control device 11a is held and delayed. 23, so as not to be transmitted immediately, and in the meantime, the other two control devices 11b,
In step 11c, the transmission data is collated. Then, by judging the normality of the data, the soundness of one control device 11a to be transmitted is confirmed, and if it is sound, the transmission permission signal is given to the holding delay unit 23 to transmit the data. I do.

Next, a sixth embodiment of the present invention will be described. FIG. 7 is a block diagram showing a sixth embodiment of the present invention. In the sixth embodiment, a transmission permission switch 25 is provided in place of the holding delay unit 23 of the fifth embodiment shown in FIG. When the data matches the data prepared by one of the two other control devices 11b and 11c, it instructs one of the control devices 11a to output data and sets the transmission permission switch 25 to It is turned on.

In FIG. 7, a triple control device 11a,
When data is transmitted from 11b, 11c to the partner device of the serial communication, the transmission permission switch 25 is turned off, and the transmission data is output from the control device 11a in that state. This transmission data is transmitted to other control devices 11b and 11c.
And is compared with transmission data prepared by the other control devices 11b and 11c. As a result of the comparison and collation, when the data prepared by the control device 11a and the data prepared by the control device 11b or the control device 11c match, it is determined that the data is normal, and the verification result signal is established.

The logic unit 24 turns on the transmission permission switch 25 when the collation result signal is established, and the control unit 1
1a is instructed to transmit data. The control device 11a receives the instruction signal and transmits the same data again. Therefore, the data from the control device 11a is transmitted to the partner device of the serial communication. At this time, the other control devices 11b and 11c also receive and collate the data output from the control device 11a again.
Thereby, the soundness of the transmission data and the soundness of the control device 11a that has output the transmission data are determined.

As described above, in the sixth embodiment,
By providing the transmission permission switch 25, transmission permission can be easily given, and transmission data can be collated twice during data transmission on the first floor.

[0061]

As described above, according to the present invention, 3
When serial communication is performed by a heavy-duty control device, transmitted / received data is collated between the triple-duty control devices, so that the reliability of the transmitted / received data can be improved and the device can be configured based on abnormalities in transmitted / received data. Can be determined.

That is, it is possible to obtain a serial communication device having an increased probability of detecting a failure or data abnormality.
It is possible to reduce the probability of causing a malfunction due to transmission / reception data.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing a first embodiment of the present invention.

FIG. 2 is a configuration diagram showing a second embodiment of the present invention.

FIG. 3 is an explanatory diagram of a transmission right selecting unit according to a second embodiment of the present invention. FIG.
FIG. 3B is a logic circuit diagram.

FIG. 4 is a block diagram showing a third embodiment of the present invention.

FIG. 5 is a block diagram showing a fourth embodiment of the present invention.

FIG. 6 is a block diagram showing a fifth embodiment of the present invention.

FIG. 7 is a block diagram showing a sixth embodiment of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 11 control device 12 distributor 13 reception unit 14 control unit 15 verification line 16 failure detection unit 17 first verification unit 18 second verification unit 19 transmission right selection unit 20 first selection switch 21 second selection switch 22 verification Device 23 Holding delay unit 24 Logic unit 25 Transmission permission switch

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Masataka Kono 1 Toshiba-cho, Fuchu-shi, Tokyo Toshiba Corporation Fuchu Plant

Claims (6)

[Claims] 1. A triple control device including three control devices, and a distribution unit that distributes data received from a partner device of serial communication to respective receiving units of the triple control device. A verification line for transmitting the data received by each of the receiving units to a control device of another system; and a data line provided in each of the triple control devices and obtained through the verification line, and A serial communication device comprising: a control unit that performs data validity determination and device failure determination based on data received by a system receiving unit. 2. When transmitting data to a triple-system control device composed of three control devices and a partner device for serial communication, the data prepared by the triple-system control device is mutually different. A verification line for transmitting to the control device of the system; a verification unit for verifying the data received from the control device of the other system via the verification line with the data of the own system; A failure detection unit provided for performing failure detection of the control device of the own system, and a transmission device for selecting a control device for transmitting data to the partner device based on a verification result from the verification unit and a detection signal from the failure detection unit. A serial communication device comprising a right selecting unit. 3. When transmitting data to a triple control device composed of three control devices and a partner device for serial communication, the data prepared by the triple control device is received. And a collating device for transmitting the data when at least two of the three data match. 4. Two collation devices are provided, one is a main system, the other is a slave system, and if the main system collation device fails, the sub system collation device is the main system. 4. The serial communication device according to claim 3, wherein: 5. A triple control device comprising three control devices and one of the triple control devices when transmitting data to a partner device of serial communication. A matching line for transmitting the prepared data to two other control devices, a holding delay unit for holding or delaying the data from the one control device, and data obtained via the matching line. And a logic unit for providing a data transmission permission signal to the holding delay unit when the data matches one prepared by one of the two other control devices. Serial communication device. 6. A transmission permission switch is provided in place of the holding delay unit, and the logic unit transmits data obtained via the collation line to another one of the two other control devices. 6. The serial communication device according to claim 5, wherein when the data matches the data prepared by the control device, the control device instructs the one control device to output the data and turns on the transmission permission switch. .