JP3754773B2 - Electronic level crossing control device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a railroad crossing safety device, and more particularly to an electronic railroad crossing control device that controls a railroad crossing warning device in response to a train entering a double-track or single-wire warning section.
[0002]
[Prior art]
Conventionally, a level crossing control device that has been widely used has been constituted by a relay. However, instead of this relay type crossing control device, an electronic type using a CPU has already been developed and put into practical use. This has two logic systems, and the signals of the same parts of the two logic systems are compared, and if there is a mismatch between the signals, a failure is determined.
[0003]
[Problems to be solved by the invention]
However, since an electronic level crossing control device using a CPU realizes logic by software, a bug of software becomes a problem, but eradication of software is difficult. As a countermeasure against this, the present inventor considers that two logic systems are configured by hardware logic circuits. If the logic is composed entirely of hardware, the failsafe property can be confirmed by the hardware test, so that it can be made excellent in the failsafe property. However, when the data from the level crossing controller installed at the start point and the end point is taken in, the fetch output may be transiently shifted between the two logical systems configured by hardware. If it is determined that there is a failure due to the deviation, there is a possibility that the system will be down with a relatively high frequency.
[0004]
The object of the present invention is to detect data inconsistency between two logical systems due to a shift even if there is a shift in the fetch output when fetching data from a level crossing controller installed at the starting point and the end point for a level crossing. It is an object of the present invention to provide an electronic level crossing control device that can be relieved.
[0005]
[Means for Solving the Problems]
In order to achieve the above object, the present invention takes in data from a level crossing controller installed at a start point and an end point for a level crossing, and uses the data within an alarm section between the start point and the end point. A first logic system that detects whether or not a train is present in the vehicle and outputs a signal according to the detection result; a second logic system having the same configuration as the first logic system; and the first logic system and the first logic system An electronic level crossing control device comprising a comparator that compares signals of the same parts of two logic systems and determines that a failure occurs if the signals do not match, the first logic system and the second logic system Is constituted by a hardware logic circuit, and when the data from the crossing controller at the starting point is fetched, if there is a mismatch in fetched data between the first logic system and the second logic system, The data is matched with the train approach data, and the data from the end point crossing control When there is a mismatch in the captured data between the first logical system and the second logical system when the data is captured, a mismatch absorbing unit that matches the data with the train non-arrival data is provided in the first logical system. It is provided in the input circuit of the system and the second logic system.
[0006]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 is a diagram showing the positions of the start point and the end point. A descending starting point A and an ascending starting point C are determined at a predetermined distance in front of the level crossing 1, and closed-circuit-type level crossing controllers 2 and 4 are installed there. Further, a descending end point B and an ascending end point D are determined behind the level crossing 1, and open-circuit type level crossing controllers 3 and 5 are installed there. A down warning section is formed between the down start point A and the down end point B, and an up warning section is formed between the up start point C and the up end point D. 6 is an orbit.
[0007]
FIG. 2 is a diagram showing an example of the connection between the electronic level crossing control device of the present invention and an external circuit. On the input side of the electronic level crossing control device 7, a DC 24V power input, data from the reaction relays APR, BPR, CPR, DPR of the level crossing controllers 2 to 5, and data from the approaching lock relay ASR are input. On the output side, downstream tracking R (R is a relay meaning, the same shall apply hereinafter) and upstream tracking R are connected, and an R circuit is concentrated on a normal R (built-in) contact that is de-energized when a failure is determined. A monitoring control device and an operation storage device are connected to each other. The R circuit is a circuit of an alarm relay R that operates a railroad crossing alarm (not shown).
[0008]
FIG. 3 shows an R circuit. When there is no train in the alarm section, the reaction relays APR and CPR are in the energized state and the reaction relays BPR and DPR are in the unenergized state. The tracking R is energized together, and the contacts of these relays in FIG. 3 are both closed. Since the other contacts in FIG. 3 are also closed, the alarm relay R is in an energized state, thereby causing the level crossing alarm to be inoperative. Now, for example, when the operation of the level crossing controller 2 is cut off when the down train enters the down start point A, the electronic level crossing control device 7 determines that there is a train, and cuts off the energization of the down tracking R. As a result, the contact point of the downward tracking R in FIG. 3 is opened, the energization of the alarm relay R is cut off, and the downward crossing alarm is started accordingly. When the descending train reaches the descending end point B, the level crossing controller 3 operates, the electronic level crossing control device 7 determines that there is no train, and energizes the down tracking R. However, at this time, the contact of the reaction relay BPR in FIG. 3 is in an open state because the train is passing, and the de-energized state of the alarm relay R is maintained. When the descending train passes the descending end point B, the contact of the reaction relay BPR in FIG. 3 is closed, the alarm relay R returns to the energized state, and the descending level crossing alarm operates accordingly. Stop.
[0009]
FIG. 4 is a block diagram of the electronic level crossing control device 7 according to an embodiment of the present invention. The first logic system 8 composed of hardware logic circuits, the second logic system 9 having the same configuration as the first logic system 8, and the signals of the same parts of the first logic system 8 and the second logic system 9 Compare these, and if there is a discrepancy between these signals, the fail-safe comparator circuit 10 determines that a failure has occurred, and the clock generation that supplies clock pulses to the first logic system 8, the second logic system 9, and the fail-safe comparator circuit 10 The circuit 11 includes the output tracking circuit 12 (relay driver) that controls the downstream tracking R and the upstream tracking R described in FIG. 2 and controls the built-in normal R, the normal R, and the LED display circuit 13.
[0010]
The logic systems 8 and 9 include a photocoupler input circuit 14 having a capturing unit 14a, a mismatch absorbing unit 14b, and a checking unit 14c, a switching circuit 15, a two-stage operation mask circuit 16, a train count circuit 17, a sequence error detection circuit 18, and The inspection pattern generation circuit 19 is composed of each hardware logic circuit.
[0011]
Next, the overall operation of the electronic level crossing control device 7 will be described.
(1) Train approach (start tracking)
For example, when the down train enters the down start point A, the photocoupler input circuit 14 takes in data from the level crossing controllers 2 to 5 at a predetermined time interval (100 ms), and the data passes through the switching circuit 15. The two-stage operation (tilting) of the level crossing controller is removed by the mask process in the two-stage operation mask circuit 16 and input to the train count circuit 17.
[0012]
The train count circuit 17 counts “one train” in response to data input from the two-stage operation mask circuit 16. As a result, the output control circuit 12 cuts off the energization of the downward tracking R, cuts off the energization of the alarm relay R, and operates the railroad crossing alarm. At the same time, the train count circuit 17 displays “one down” on the LED display circuit 13 and suppresses switching of the inspection pattern generation circuit 19 so as not to shift to the inspection mode.
(2) End point reached (end of tracking)
When the head of the down train reaches the down end point B, the railroad crossing controller 3 operates and the data is input to the train count circuit 17 to set the train count number to zero. As a result, the output control circuit 12 energizes the downstream tracking R. At the same time, the LED display circuit 13 displays “no train”. However, since the two-stage operation mask circuit 16 is still in operation, the transition to the inspection mode remains inhibited.
(3) When the tail of the train passing train passes the descending end point B, the railroad crossing controller 3 stops its operation and the energization to the alarm relay R is restored. In addition, the two-stage operation mask circuit 16 cancels the inhibition of switching to the test pattern generation circuit 19 when the mask time ends. Thus, the electronic level crossing control device 7 has returned to the normal position.
(4) Localization (before entering the train)
When there is no train and the checking unit 14c of the photocoupler input circuit 14 is in operation (described later), the test pattern generation circuit 19 switches the switching circuit 15 to the test pattern generation circuit 19 side and stores the test pattern stored in the EPROM. The signal is read out and supplied to the circuits after the two-stage operation mask circuit 16 to cause the first logic system 8 and the second logic system 9 to perform the operation according to the test pattern signal. The fail-safe comparator circuit 10 compares the signals of the respective parts after the two-stage operation mask circuit 16 of the first logic system 8 and the second logic system 9, and when a mismatch is detected, it is determined as a failure, and the output control circuit 12 Thus, the energization of the normal R, the downlink tracking R, and the uplink tracking R are all stopped. As a result, the alarm relay R is de-energized and the railroad crossing alarm operates. In the inspection mode, the LED display circuit 13 blinks to indicate that it is in the inspection mode. In the inspection mode, since the inspection pattern signal is instantaneously injected, the energization state of the downstream tracking R and the upstream tracking R is not affected.
(5) In case of sequence abnormality The sequence error detection circuit 18 stores a normal sequence pattern, and when a sequence different from the normal sequence pattern is performed due to an abnormality in the external input, this is detected and the output control circuit 12, energization of only normal R is stopped.
[0013]
Next, details of the photocoupler input circuit 14 will be described with reference to FIGS.
[0014]
In FIG. 5, the data from the reaction relays APR, BPR, CPR, DPR of the level crossing controllers 2 to 5 and the input of the approaching lock relay ASR are the photocoupler 20 of the first logic system 8 (hereinafter referred to as 1 system) and the second logic. Each is input to a photocoupler 21 of system 9 (hereinafter referred to as system 2), is electrically isolated, and is cleared in synchronization with clock pulses by synchronous clear units 22 and 23. (100 ms). The captured data is input to the mismatch absorption units 26 and 27. Specifically, the non-coincidence absorbing units 26 and 27 are circuits as shown in FIG. 6. For the data of the downlink starting point, the OR gates 28 and 29 and the EX OR gates 30 and 31 are provided. Are provided with AND gates 32 and 33, EX OR gates 34 and 35, and inverters 36 and 37, and with respect to the data of the upstream starting point, OR gates 38 and 39 and EX OR gates 40 and 41 are provided. AND gates 42 and 43, EX OR gates 44 and 45, and inverters 46 and 47 are provided.
[0015]
When the start point data is taken in by the latches 24 and 25 and the take-in data does not match, the non-coincidence absorbing units 26 and 27 make the data coincide with the train entry data and the end point data. When there is a mismatch in the captured data when the train is captured, the data is matched with the train non-arrival data. Specifically, in FIG. 6, when the data of the 1st system and the 2nd system of the descending start point captured by the capture latches 24 and 25 match, the outputs of the EX OR gates 30 and 31 are low level. Therefore, the outputs of the OR gates 28 and 29 are in accordance with the data of the downward starting point. In addition, for example, if the first line data of the downward start point is “train not entered” (low level) and the second line data of the downward start point is “train approach” (high level), and there is a mismatch, EX Since the outputs of the OR gates 30 and 31 are at a high level, the outputs of the OR gates 28 and 29 are at a high level (train entry) regardless of the fetched data. In other words, if the starting point data do not match, the data is processed into a “train approach” on the safe side.
[0016]
When the data of the down end points 1 and 2 captured by the capture latches 24 and 25 coincide with each other, the outputs of the EX OR gates 34 and 35 are at a low level, and the outputs of the inverters 36 and 37 are Since it is at a high level, the outputs of the AND gates 32 and 33 are in accordance with the data at the downstream end point. Also, for example, if the first line data of the descending end point is “train arrival” (high level) and the second line data of the descending end point is “train not arrived” (low level), and there is a mismatch Since the outputs of the EX OR gates 34 and 35 are at a high level and the outputs of the inverters 36 and 37 are at a low level, the outputs of the AND gates 32 and 33 are low level (no train Reach). In other words, when the data at the end point does not match, the data is processed into “safe train non-arrival”.
[0017]
In the case of a photocoupler input circuit of a conventional electronic level crossing control device using a CPU, if the data of system 1 and system 2 do not match at the time of data capture, the data is discarded and the next captured data However, when the photocoupler input circuit is configured by the hardware logic circuit as in the present invention, the mismatched data cannot be discarded. Therefore, as described above, the inconsistent data is processed and used on the safe side.
[0018]
Returning to FIG. 5 again, the verification of the photocouplers 20 and 21 will be described. The verification is a function for detecting a secondary side short-circuit failure of the photocouplers 20 and 21, and has already been used in railway signal electronic devices such as an electronic interlocking device and an electronic level crossing control device. The verification unit 14 c (FIG. 4) includes verification photocouplers 44 and 45, synchronous clear units 22 and 23, and verification registers 46 and 47. In the verification operation, a verification signal having a width of 50 ms is input to the verification photocouplers 44 and 45 in a cycle of 100 ms, and the secondary side is turned off to turn off the primary side of all the photocouplers 20 and 21. And At this time, the secondary side outputs of the photocouplers 20 and 21 are at a high level if normal, and are at a low level if short circuit failure occurs. These check data are taken into the fetch latches 24 and 25, subjected to parallel-serial conversion by the check registers 46 and 47, and output to the fail-safe comparator circuit 10. Thereafter, the verification data fetched into the fetch latches 24 and 25 are cleared by the synchronous clear units 22 and 23, and a state for fetching the controller data is prepared. If the 1-system and 2-system verification data do not match, the fail-safe comparator circuit 10 determines that a failure has occurred. Since the secondary side open failure of the photocouplers 20 and 21 is on the safe side, there is no problem even if it is not detected.
[0019]
According to the illustrated embodiment, since the first logic system 8 and the second logic system 9 are configured by the hardware logic circuits (14 to 19), it is possible to achieve software-less operation and fail safe by hardware. It can be made excellent in properties. When the starting point data does not match between the 1st system and the 2nd system, the inconsistency absorbing units 26 and 27 process the data into the “train approach” on the safe side, and the end point data is converted to the 1st system and the 2nd system. If there is a discrepancy, the data is processed to the “train not reached” on the safe side, so there is a difference in the capture output of the 1st and 2nd systems when the start point and end point data are captured. However, it is possible to relieve data inconsistency due to the deviation.
[0020]
【The invention's effect】
As described above, according to the present invention, since the first logic system and the second logic system are configured by hardware logic circuits, it is possible to achieve software-less and excellent hardware safety. It can be. And, when the data from the crossing controller at the starting point is taken in, if there is a mismatch in the fetched data between the first logical system and the second logical system, the data is matched with the train approach data, When the data from the crossing controller at the end point is captured, if there is a mismatch in the captured data between the first logical system and the second logical system, the data is matched with the train non-arrival data. Therefore, even if there is a deviation in the fetch output when fetching data from the level crossing controller installed at the starting point and the end point for the level crossing, the data mismatch between the two logical systems due to the deviation is remedied. be able to.
[Brief description of the drawings]
FIG. 1 is a diagram showing positions of a start point and an end point.
FIG. 2 is a diagram showing an example of a connection between an electronic level crossing control device of the present invention and an external circuit.
FIG. 3 is a diagram showing a circuit of an alarm relay.
FIG. 4 is a block diagram of an electronic level crossing control apparatus according to an embodiment of the present invention.
5 is a block diagram showing an example of the photocoupler input circuit of FIG. 4. FIG.
6 is a circuit diagram showing a specific example of the mismatch absorbing unit in FIG. 5;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Level crossing 2, 4 Closed circuit type crossing controller 3, 5 Open circuit type crossing controller 6 Track 7 Electronic level crossing control device 8 1st logic system 9 2nd logic system 10 Fail safe comparator circuit 11 Clock generation circuit DESCRIPTION OF SYMBOLS 12 Output control circuit 13 LED display circuit 14 Photocoupler input circuit 15 Switching circuit 16 Two-stage operation mask circuit 17 Train count circuit 18 Sequence error detection circuit 19 Inspection pattern generation circuit 20, 21 Photocoupler 24, 25 Capture latch 26, 27 Mismatch Absorber A Downstream Start Point B Downstream End Point C Upstream Start Point D Upstream End Point APR, BPR, CPR, DPR Reaction Relay R Alarm Relay

Claims (1)

Taking in data from the level crossing controller installed at the starting point and the end point for the level crossing, and detecting whether there is a train in the alarm section between the starting point and the end point by the data, The first logic system that outputs a signal according to the detection result, the second logic system having the same configuration as the first logic system, and the signals of the same parts of the first logic system and the second logic system are compared. An electronic level crossing control device including a comparator that determines that a failure occurs if the signals do not match, wherein the first logic system and the second logic system are configured by hardware logic circuits, and the starting point When the data from the level crossing controller is fetched, if there is a mismatch in the fetched data between the first logic system and the second logic system, the data is matched with the train approach data, and the final When the data from the point crossing controller is fetched, the first logical system When there is a discrepancy in the fetched data with the second logic system, a discrepancy absorption unit is provided in the input circuits of the first logic system and the second logic system to match the data with the train non-arrival data. An electronic level crossing control device characterized by that.

Images