JP4429261B2 - LAN repeater and LAN relay system - Google Patents

Description

  The present invention relates to a LAN relay and a LAN relay system that perform information relay processing between LANs, and in particular, a device connected to one LAN and a device connected to the other LAN operate in a coordinated manner. It is related to the relay technology to guarantee.

  In railway station premises, signal devices are used to connect the field equipment such as traffic lights, turnovers, signs, etc. to the electronic interlocking device, and to link these with the electronic interlocking device to open the train route safely and quickly. Is configured.

  In recent years, such a signal device is configured by connecting various devices to a LAN. However, in a vehicle base or the like, the signal device becomes large-scale, and the amount of data exchanged between the devices increases. Then, the amount of data may exceed the upper limit of the design value. Therefore, the system is configured by dividing the hall into a plurality of areas, installing LANs in each area, and connecting these LANs with a fail-safe LAN repeater (see Patent Document 1).

  For example, as shown in FIG. 5, the vehicle base is divided into a main line part and a base part, and the electronic interlocking system is composed of a main line LAN 111 in charge of the main line and a base LAN 121 in charge of the base, and the main line LAN 111 and the base LAN 121. The system is configured such that the LAN repeater 101 relays between the two. Since the trains travel between the main line and the base, a chain relationship occurs between the main LAN 111 and the base LAN 121, and the necessary interlocking information 112 and 122 are relayed to the other LAN via the LAN relay 101. The

  Since such a chain relationship occurs, the interlocking data loaded to the electronic interlocking device 113 (such as the interlocking logic unit and the interlocking monitoring unit) 113 on the main LAN 111 side and the interlocking data loaded to the electronic interlocking device 123 on the base LAN side are always. Must be consistent. Therefore, in general, the linkage data 103 is created from one linkage chart 102 for the entire vehicle base, and is divided by the data creation tool 104 to load the main LAN side loading data (linkage data) 114 and the base LAN side. The procedure of creating loading data (linked data) 124 and loading each from the linked monitors 115 and 125 of each LAN is adopted.

JP 2001-308892 A

  In the case of a large-scale renovation such as changing the interlocking chart, the interlocking data for each LAN will be created based on one interlocking chart according to the procedure described above. Since data also exists, it is difficult to completely avoid that the versions of data loaded into each LAN device are inconsistent due to human error.

  Also, if all LAN data changes are made for remediation that only affects one LAN, such as the addition of output to field equipment, the scope of influence associated with the data change increases, ensuring safety. There is also a problem that a large amount of confirmation work is required.

  The present invention is intended to solve the above-described problem, and avoids abnormal operation due to version mismatch between data loaded in one LAN-side device and data loaded in the other LAN-side device. An object of the present invention is to provide a LAN relay device and a LAN relay system that can be used.

The invention according to claim 1 is a LAN relay that is connected between a first LAN (20) and a second LAN (30), and executes a relay process of information between these LANs.
First receiving means (11) for receiving verification information from the first LAN (20);
Second receiving means (13) for receiving verification information from the second LAN (30);
Control means (15) for comparing the collation information received from the first LAN (20) with the collation information received from the second LAN (30) and controlling the continuation and cancellation of the relay processing according to the comparison result A LAN repeater characterized by comprising:

  According to the above invention, the collation information is received from both LANs, and the continuation and cancellation of the relay process are controlled according to the comparison results. The collation information may be any information as long as it relates to the items whose consistency should be confirmed in both LANs. For example, in addition to data loaded in each LAN device, software version information, attribute information such as update date and time, the management number of the device itself may be used. The verification information may be information independent of the data to be relayed or may be added to the data to be relayed. It should be noted that the collation information may be transmitted from a specific device arranged in each LAN to the LAN, or may be configured to transmit each device connected to the LAN to the LAN. Further, comparison of the collation information may be always performed, or may be performed only at a specific time such as initialization.

According to a second aspect of the present invention, the control means (15) performs relay processing when the collation information received from the first LAN (20) and the collation information received from the second LAN (30) completely match. 2. The LAN repeater according to claim 1, wherein the relay processing is stopped when a part of them does not coincide with each other.

  According to the above invention, the relay process is executed only when the collation information completely matches, and the relay process is stopped when even a part of the matching information does not match.

In the invention according to claim 3, the control means (15) matches a predetermined part of the collation information received from the first LAN (20) with the collation information received from the second LAN (30). 2. The LAN repeater according to claim 1, wherein the relay processing is continued if the relay processing is performed, and the relay processing is stopped if the predetermined part does not match.

  According to the above invention, the relay process is continued when a predetermined part of the collation information matches, and the relay process is stopped when the predetermined part of the collation information does not match. For example, when collation information is hierarchically configured with a plurality of digits, relay processing is executed if the upper digits match even if the lower digits do not match, and the relay processing is stopped if the upper digits do not match. It is possible to control the continuation / cancellation of relay processing in various ways.

The invention according to claim 4 is characterized in that the collation information is version information of data loaded in a device connected to the LAN (20, 30). It is a repeater.

  According to the above invention, when the versions of data loaded in the devices of both LANs (20, 30) are inconsistent, the relay process is stopped.

In the invention according to claim 5, when the relay processing is stopped, the logic unit connected to each LAN (20, 30) receives by stopping output of relay data to each LAN (20, 30). The LAN repeater according to claim 1, 2, 3 or 4, wherein it is determined that the data is abnormal and is replaced with a safe value.

  According to the above invention, when the collation information such as the version is inconsistent and the relay process is stopped, the logic unit connected to the receiving LAN replaces it with the safe value data. Thereby, even if the relay process is stopped, the operation of the devices on each LAN is controlled to the safe side.

The invention according to claim 6 sends the cause information to one or both LANs (20, 30) when relay processing is stopped. It is a LAN repeater of description.

  According to the above invention, the cause of the suspension of the relay process is notified to one or both of the LANs (20, 30), and appropriate and prompt action can be taken. Sending the cause information to the LAN (20, 30) means sending the cause information to a specific device connected to the LAN (20, 30) and sending the cause information so that all the devices can receive it. Also good.

The invention according to claim 7 is the LAN repeater (10) according to claim 1, 2, 3, 4, 5 or 6,
A first device (21) connected to a first LAN (20) and transmitting verification information to the LAN repeater (10);
A LAN relay system comprising: a second device (31) connected to a second LAN (30) and transmitting verification information to the LAN relay (10).

  According to the said invention, the 1st apparatus (21) which transmits collation information is connected to 1st LAN (20), and the 2nd apparatus (31) which transmits collation information is connected to 2nd LAN (30). The LAN repeater (10) receives the verification information received from the first device (21) of the first LAN (20) and the verification information received from the second device (31) of the second LAN (30). The continuation and cancellation of relay processing are controlled by comparing with the information. Since the first device (21) and the second device (31) for transmitting the verification information are provided, other devices connected to each LAN (20, 30) do not need to have a function for transmitting the verification information. The verification information may be transmitted periodically, for example, or may be transmitted only at initialization or in response to a request from the LAN repeater (10).

  According to the LAN repeater and the LAN relay system according to the present invention, the verification information is received from both LANs, and the continuation and cancellation of the relay process are controlled according to the comparison result of the verification information. It is possible to reliably avoid abnormal operation due to inconsistency of the loaded data version and other conditions to be verified, and to ensure consistent operation of the entire system.

  In addition, strict consistency is ensured when the matching of matching information is required. In addition, in the case where the determination is made based on the matching / non-coincidence of a predetermined part, it is possible to variously control the continuation / stop of the relay process.

  When the relay process is stopped, the predetermined safety data for which the operation of the device is controlled to the safe side is transmitted to each LAN. Even when the relay process is stopped and the information on the other LAN side cannot be obtained, The operation of the devices on each LAN is controlled to the safe side to ensure safety.

  In the case where the cause information of the relay stop is transmitted to one or both LANs, it is possible to take an appropriate and prompt action according to the cause.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 shows a configuration of an electronic interlocking system 2 including a LAN repeater 10 according to the present embodiment. The electronic interlocking system 2 divides a vehicle base into a main line and a base, and includes a main LAN 20 in charge of the main line, a base LAN 30 in charge of the base, and a LAN repeater 10 connected between these LANs. . Various devices such as a main link interlocking logic unit 21 and a link monitoring unit 22 are connected to the main line LAN 20. In addition, an interlock monitor 23 as an input / output terminal having a display device, a keyboard, and the like is connected to the interlock monitor unit 22. Similarly, the base LAN 30 is connected to various devices such as a base interlocking logic unit 31 and an interlocking monitoring unit 32, and an interlocking monitor 33 is connected to the interlocking monitoring unit 32.

  The interlocking logic units 21 and 31 collect on-line information of trains in each track circuit and state information of on-site equipment such as traffic lights and switchboards, and based on these information and pre-loaded interlocking data. It is a device that performs the interlocking logic and performs the function of controlling the chained machines, traffic lights, etc. in a chained manner so that the course of the train can be secured safely and quickly. The interlock monitoring units 22 and 32 are equipped with a control panel that simulates the premises, and is a device that sets the course, displays the position of the train, the locked state of the course, the signal display status, and the like. is there.

  Data such as interlocking data is loaded to the devices 21 and 22 on the main LAN 20 side through the interlocking monitor 23. The same version of data is loaded on each device on the main LAN 20 side. The interlocking logic unit 21 performs a function of periodically sending version information (collation information) of data loaded in the own device to the main LAN 20. Similarly, data such as linked data is loaded into the devices 31 and 32 on the base LAN 30 side through the linked monitor 33, and the same version of data is loaded on each device on the base LAN 30 side. In addition, the interlocking logic unit 31 periodically sends version information (collation information) of data loaded in its own device to the base LAN 30. Note that the version of the loaded data can be confirmed by the interlock monitors 23 and 33 connected to the interlock monitoring units 22 and 32 of the LANs 20 and 30, respectively.

  The LAN repeater 10 has a function of relaying link information and the like between the main LAN 20 and the base LAN 30. For example, when the course of a train is set from a predetermined location on the main line to a predetermined location on the base, interlocking information (main link interlocking information 41 in the figure) for securing the route is obtained from the interlocking logic unit 21 of the main LAN 20. The data is transmitted to the interlocking logic unit 31 of the base LAN 30 via the LAN relay 10. On the contrary, when the train travels from the base to the main line, the link information (base link information 42 in the figure) for securing the route is transferred from the link logic unit 31 of the base LAN 30 via the LAN relay 10 to the main LAN 20. The data is transmitted to the interlocking logic unit 21.

  Further, the LAN repeater 10 compares the version information (verification information) received from the main LAN 20 and the version information (verification information) received from the base LAN 30, and if they match, the relay processing is continued. Has a function to cancel relay processing. The main LAN 20, the base LAN 30, the LAN repeater 10, the interlocking logic units 21 and 31, the interlocking monitoring units 22 and 32, etc. are all configured in a duplex system for ensuring safety.

  FIG. 2 shows a schematic configuration of the LAN repeater 10. The LAN repeater 10 includes a first receiving unit 11 and a first transmitting unit 12 connected to the main LAN 20, a second receiving unit 13 and a second transmitting unit 14 connected to the base LAN 30, continuation / stop of relay processing, etc. And control means 15 for controlling.

  The first receiving means 11 receives data flowing through the main LAN 20, and the first transmitting means 12 functions to send data to the main LAN 20. The second receiving unit 13 receives data flowing through the base LAN 30, and the second transmitting unit 14 functions to send data to the base LAN 30. The control means 15 determines whether or not the data received by the first receiving means 11 or the second receiving means 13 is version information (collation information), and if it is version information (collation information), stores it in the internal memory. The temporary storage is performed, and when the version information from the main LAN 20 and the version information from the base LAN 30 are prepared, the functions are compared to check the consistency.

  Here, two types of inspection levels are prepared. One is that the version information (collation information) is determined to be consistent only when it is completely matched, and the relay process is executed. If any part of the version information is different, the relay process is determined to be inconsistent. The exact match level. The other is that if a predetermined part of the version information (collation information) matches, it is determined that the version matches and relay processing is executed. If the predetermined part does not match, it is determined that the part does not match and relays. This is the partial match level at which processing is stopped. In the present embodiment, the version information (collation information) is in the format of “XY” including an integer part and a decimal part, and the partial match level is related to the match / mismatch of the decimal part “Y”. If the integer part “X” matches, the relay process is executed. If the integer part “X” does not match, the relay process is stopped.

  In addition, when the relay process is stopped, the control unit 15 has a function of sending predetermined safety data to the LANs 20 and 30 so that the operation of devices such as the interlocking logic units 21 and 31 is controlled to the safe side. I have. Information flowing through each of the LANs 20 and 30 is represented by “0” or “1”, and “0” is defined as a value indicating a safe side, a fault side, and meaningless. Therefore, when the relay unit 10 stops the relay process due to inconsistency of version information (collation information), each logical unit processes the data to be received from the LAN by replacing it with “0”.

  Further, the control means 15 is configured to send the cause information to each of the LANs 20 and 30 when the relay process is stopped. For example, if relay processing is canceled due to inconsistency in version information (collation information), “the relay processing has been stopped”, “the cause is version information inconsistency”, and “both version information "Is sent to each of the LANs 20 and 30. Here, based on the information transmitted by the LAN repeater 10, the cause of suspension of the relay process is displayed on the interlock monitors 23 and 33 of the interlock monitoring units 22 and 32 of the main LAN 20 and the base LAN 30.

  FIG. 3 shows an example of the operation of the LAN repeater 10 when checking the consistency of version information at the exact match level. Before the modification of linked data (a), the version of data loaded in a device such as the linked logic unit 21 on the main LAN 20 side and the version of data loaded on a device such as the linked logic unit 31 on the base LAN 30 side. And “3.0” are completely matched, and the LAN repeater 10 executes a relay process.

  If only the main LAN 20 side interlocking data is renovated (b) and the version becomes “4.0”, the version “4.0” of the main LAN 20 side data is obtained. And the data version “3.0” on the base LAN 30 side do not completely match, so the LAN repeater 10 stops the relay process.

  In addition, even when only the interlocking data on the main LAN 20 side is modified (c) and the version is changed to “3.1” with respect to the state before (a), the version of the data on the main LAN 20 side “ Since “3.1” does not completely match the data version “3.0” on the base LAN 30 side, the LAN repeater 10 stops the relay process. In this way, when checking the consistency of the version information at the complete match level, even if minor modification is added only to the data on one LAN side, both the main LAN 20 and the base LAN 30 are updated. I need it. Therefore, even if it is a minor modification, if the minor modification affects the chain relationship with the other LAN side, the inspection at the complete match level is effective.

  FIG. 4 shows an example of the operation of the LAN repeater 10 when checking the consistency of version information at the partial match level. At the partial match level, relay processing is executed if the integer part “X” matches regardless of the match / mismatch of the decimal part “Y” in the version information in the “XY” format, and the integer part “X” If they do not match, the relay process is stopped. That is, in the version information, the integer part “X” is a digit part that is updated when a modification that affects both the main LAN 20 and the base LAN 30 is performed, and the decimal part “Y” is affected by the modification. It is determined in the digit part that is updated when renovation is performed only within the LAN range. When the integer part “X” is updated, the decimal part “Y” is updated to “0”.

  If only the interlocking data on the main LAN 20 side is largely modified (b) with respect to the state before modification (a) in FIG. 4, the integer part “X” of the version information is changed to “4”. As a result, the data version “4.0” on the main LAN 20 side and the data version “3.0” on the base LAN 30 side do not match (match) even at the partial match level determined only by the integer part “X”. The LAN repeater 10 stops the relay process.

  On the other hand, when only the interlocking data on the main LAN 20 side is modified (c) and the version is changed to “3.1” with respect to the state before the repair (a), the data version “3” on the main LAN 20 side is changed. .1 ”and the version“ 3.0 ”of the data on the base LAN 30 side match in the integer part, so the LAN repeater 10 continues the relay process. Consistency check at the partial match level is effective when refurbishing that only affects one LAN, such as adding output to field equipment. There is an advantage that the confirmation work for ensuring safety remains within the LAN and does not spread to the other LAN.

  When the relay processing is stopped, the LAN relay 10 stops data relay to the LANs 20 and 30. Thereby, even when the relay process is stopped and the interlocking information from the other LAN side cannot be obtained, the operation of the devices on each LAN is controlled to the safe side, and the safety of the train is ensured.

  When the relay process is stopped, the LAN repeater 10 sends the cause information to the LANs 20 and 30. As a result, the interlock monitors 23 and 33 connected to the interlock monitoring units 22 and 32 of the LANs 20 and 30 indicate “cancel relay processing” and “the cause is version mismatch” and “both versions. Warning display including “information” is performed, and appropriate and prompt action can be taken.

  The embodiment of the present invention has been described with reference to the drawings. However, the specific configuration is not limited to that shown in the embodiment, and there are changes and additions within the scope of the present invention. Are also included in the present invention.

  For example, in the embodiment, version information is used as collation information, but other information may be used as collation information. Moreover, the format of collation information is not limited to what was illustrated by embodiment, You may comprise with a character, a number, or the combination of a character and a number. In addition, the partial location where the match is confirmed at the partial match level is not limited to the integer portion, and can be set at an arbitrary location.

  In the embodiment, when the relay process is stopped, the cause information is sent to both LANs 20 and 30, but only one LAN may be used. In addition, the cause information may be transmitted only to specific devices connected to the LANs 20 and 30, for example, the interlock monitoring units 22 and 32, or all devices may be transmitted so as to be receivable.

  In the embodiment, an example in which two LANs 20 and 30 are connected by the LAN repeater 10 has been shown. However, a system configuration may be adopted in which more LANs are connected by using a plurality of LAN repeaters 10. The number of LANs and the number of LAN repeaters 10 are not limited.

  In the embodiments, the electronic interlocking system has been described as an example. However, the present invention is not limited to this, and the LAN relay and the LAN relay system according to the present invention may be applied to other data processing systems.

It is explanatory drawing which shows the structure of the electronic interlocking | linkage system containing the LAN repeater concerning embodiment of this invention. It is a block diagram which shows the structure of the LAN repeater concerning embodiment of this invention. It is explanatory drawing which shows an example of operation | movement of a LAN repeater in the case of test | inspecting the consistency of version information by a perfect coincidence level. It is explanatory drawing which shows an example of operation | movement of a LAN repeater in the case of test | inspecting the consistency of version information by a partial matching level. It is explanatory drawing which shows the structure of the conventional electronic interlocking | linkage system using multiple LAN, and the preparation procedure of the interlocking | linkage data loaded to each apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 2 ... Electronic interlocking | linkage system 10 ... LAN repeater 11 ... 1st receiving means 12 ... 1st sending means 13 ... 2nd receiving means 14 ... 2nd sending means 15 ... Control means 20 ... Main line LAN
21 ... Interlocking logic unit 22 ... Interlocking monitoring unit 23 ... Interlocking monitor 30 ... Base LAN
31 ... Interlocking logic part 32 ... Interlocking monitoring part 33 ... Interlocking monitor

Claims (7)

In a LAN repeater that is connected between the first LAN and the second LAN and executes information relay processing between these LANs,
First receiving means for receiving verification information from the first LAN;
Second receiving means for receiving verification information from the second LAN;
Control means for comparing verification information received from the first LAN and verification information received from the second LAN, and controlling continuation and cancellation of relay processing according to the comparison result Repeater. The control means continues the relay process when the collation information received from the first LAN and the collation information received from the second LAN completely match, and cancels the relay process when any part does not match. The LAN repeater according to claim 1. The control means continues the relay process when the predetermined part of the collation information received from the first LAN and the collation information received from the second LAN match, and the predetermined part matches. The LAN repeater according to claim 1, wherein the relay processing is stopped when not performed. The LAN repeater according to claim 1, 2 or 3, wherein the verification information is version information of data loaded in a device connected to the LAN. When the relay process is stopped, the output of the relay data to each LAN is stopped, so that the logic unit connected to each LAN determines that the received data is abnormal and processes it by replacing it with a safe value. Item 5. The LAN repeater according to item 1, 2, 3 or 4. The LAN repeater according to claim 1, 2, 3, 4, or 5, wherein when the relay process is stopped, the cause information is transmitted to one or both of the LANs. The LAN repeater according to claim 1, 2, 3, 4, 5 or 6,
A first device connected to a first LAN and transmitting verification information to the LAN relay;
A LAN relay system comprising: a second device connected to a second LAN and transmitting verification information to the LAN relay.

Images