JP6435256B2 - Railway security system - Google Patents

Description

  The present invention relates to a railway security system that controls on-site equipment arranged at each station and manages the operation of trains at each station.

  Railway security systems for railways are required to have high reliability. For this reason, a hot standby system in which two devices are installed and operated as a fault-tolerant dual system (main system / secondary system) is adopted to improve reliability. In the event of a failure of the main system, the slave system is switched to the main system, taking over the processing and continuing the train operation.

  However, in the conventional railway security system, two interlocking logic units capable of operating a train are installed at the same station, which is inefficient from the viewpoint of economy.

  As an improvement measure for this problem, for example, as described in Patent Document 1, a device having a virtualization processing unit is installed at each station, and the processing of the control unit of the main system at its own station and the subordinate system at another station There is a system that configures a dual system between its own station and another station, although the number of devices installed in each station is one in parallel with the processing of the control unit.

  In this system, when an apparatus at a certain station stops, the apparatus at another station needs to control the station where the apparatus stopped and the station where the apparatus stopped in parallel. A device installed at each station is required to have a processing capacity capable of controlling two stations in parallel.

JP 2011-235682 A

  In the conventional technology, when the device stops, the device at the other station independently controls the station where the device has stopped instead of the stopped device. Therefore, it was necessary to install a device having a processing capacity capable of performing control for two stations in parallel at each station.

  The object of the present invention is to stop two or more interlocking logic units when a part of the interlocking logic units of a plurality of interlocking logic units that control the field devices arranged at each station as control targets are stopped. In other words, the control of the field device that was the control target of the interlocking logic unit is shared and executed.

  In order to solve the above problems, the present invention is arranged at each of a plurality of stations, and manages a plurality of field device control terminals that manage the operation of the devices belonging to the field devices at each station. A logic for controlling a device belonging to a field device that is connected to a field device control terminal via an information transmission path and is normally arranged at least at each station as a control target is selected, and each station is based on the selected logic. A plurality of interlocking logic units that control the devices belonging to the field device via each field device control terminal, and each of the link logic units is a device belonging to the field device of the own station among the stations. Control range information indicating the range of devices to be controlled is mutually transmitted / received via the information transmission path, and after transmitting / receiving the control range information to / from each other, one of the link logic units of other station link logic units When the control range information cannot be received, the interlocking logic unit that cannot receive the control range information is managed as a stopped interlocking logic unit, and the stopped interlocking logic unit is managed among the plurality of interlocking logic units 2 The management interlocking logic unit selects the logic for sharing and controlling the equipment belonging to the field equipment of the other station to which the stopped interlocking logic part belongs in addition to the equipment belonging to the field equipment of the own station. And controlling the equipment belonging to the local equipment at the station based on the selected logic, and sharing and controlling the equipment belonging to the local equipment at the other station to which the stopped interlocking logic unit belongs.

  According to the present invention, when some of the interlocking logic units are stopped, the other two or more interlocking logic units share the control of the field device that was controlled by the stopped interlocking logic unit. Can do.

It is a lineblock diagram of a railroad security system showing one example of the present invention. It is a block diagram of the field equipment installed in each station. It is the block diagram which showed the logic block structure of each interlocking logic part. It is a flowchart for demonstrating the content of the logic determination by an interlocking logic part. It is a flowchart for demonstrating the determination process at the time of normal by an interlocking logic part. It is a block diagram for demonstrating the interlocking logic part control range of each station. It is a block diagram for demonstrating the control range at the time of the stop of A station interlocking | linkage logic part. It is a block diagram for demonstrating the control range at the time of a stop of a B station interlocking | linkage logic part. It is a block diagram for demonstrating the control range at the time of the stop of a C station interlocking | linkage logic part. It is a time chart of the control range information transmission / reception process of an interlocking logic part. It is a time chart at the time of each interlocking logic part switching to B station stop time logic at the time of a stop of an interlocking logic part. It is a time chart when the interlocking logic part of each station is switched to normal logic after the interlocking logic part recovers from the stop. It is a time chart when the interlocking logic unit controls the machine.

  In the following embodiments, a case where there are three stations will be described in order to simplify the description.

  Example 1 is an example in which the present invention is applied to a route having three stations. FIG. 1 is a block diagram of a railway security system showing an embodiment of the present invention. In FIG. 1, the railway security system according to the present embodiment performs route control to each station (A station, B station, and C station) of a train, and manages a track control device 1 that manages train location information at each station; Interlocking logic unit 2A installed at a station, Interlocking logic unit 2B installed at a station B, Interlocking logic unit 2C installed at a station C, a network 10 connecting them, and in-station networks 3A, 3B, 3C and field device control terminals 4A, 5A, 4B, 5B, 4C, and 5C.

  The course control device 1 is composed of a computer device (all not shown) having information processing resources such as a CPU (Central Processing Unit), a memory, and an input / output interface, and each interlocking logic unit 2A, 2B, 2C and network Information is transmitted and received via 10 to control the route of the train traveling through each station and to manage the train track information at each station.

  The interlocking logic part 2A of the A station is connected to the on-site equipment control terminals 4A and 5A installed at the A station via the in-station network 3A, and the interlocking logic part 2B of the B station is the on-site equipment installed at the B station. The control logic 4C is connected to the control terminals 4B and 5B via the intra-station network 3B, and the interlocking logic unit 2C of the C station is connected to the field device control terminals 4C and 5C installed at the C station via the intra-station network 3C.

  The intra-station network 3 </ b> A and the intra-station network 3 </ b> B are connected to each other via the inter-station communication path 11, and the intra-station network 3 </ b> B and the intra-station network 3 </ b> C are connected to each other via the inter-station communication path 12.

  The field device control terminals 4A and 5A are connected to field devices 6A (signals, turning machines, track circuits, etc.) installed at the station A. Similarly, a field device 6B installed at station B is connected to field device control terminals 4B and 5B, and a field device 6C installed at station C is connected to field device control terminals 4C and 5C. Each field device control terminal 4A, 5A, 4B, 5B, 4C, and 5C manages the operation for each of the plurality of devices that belong to the field devices 6A, 6B, and 6C arranged at each station, for each device. The in-station networks 3A, 3B, 3C and the inter-station communication paths 11, 12 are configured as information transmission paths. At this time, each interlocking logic unit 2A, 2B, 2C manages a plurality of devices respectively belonging to the field devices 6A, 6B, 6C arranged at each station as control objects, and each control object is managed as an information transmission path and each field. Control is performed via the device control terminals 4A, 5A, 4B, 5B, 4C, and 5C.

  FIG. 2 is a configuration diagram of field equipment installed at each station. In FIG. 2, the on-site equipment 6A installed at station A is composed of traffic lights 510 and 511, turning machines 530 and 531, and track circuits 550, 551, 552, and 553, and is installed at station B. The equipment 6B is composed of traffic lights 512 and 513, a turning machine 532, and track circuits 554, 555, 556, 557, and 558. The field equipment 6C installed at the station C includes traffic lights 514 and 515, and a track. The circuits 559, 560, 561, 562, 563, and 564 are configured.

  FIG. 3 is a block diagram showing the logical block structure of the interlocking logic units 2A, 2B, and 2C. In FIG. 3, the interlocking logic units 2A, 2B, and 2C are configured as logic blocks of a computer device (all not shown) including information processing resources such as a CPU, a memory, and an input / output interface, and are stored in the memory. Various logic operations are executed according to the various programs. In the interlocking logic unit 2A, control range information received from the interlocking logic unit 2B (B station interlocking logic unit control range indicating the range of devices belonging to the field device 6B and controlled by the interlocking logic unit 2B) Information) and control range information received from the interlocking logic unit 2C (information on the C station interlocking logic unit control range indicating the range of devices belonging to the field device 6C and controlled by the interlocking logic unit 2C). There is a determination logic 201A for determining and switching logic, and as a plurality of logics to be switched by the determination logic 201A, normal logic 8A and B station stop logic 9A and C station stop logic as other station stop logic There is a time logic 10A and a standby logic 11A. In the interlocking logic unit 2B and the interlocking logic unit 2C, the same determination logics 201B and 201C, normal logics 8B and 8C, other station stop logic (A station stop logic 9B and 9C, B station stop logic 10C, C station stop logic 10B) and standby logics 11B and 11C exist.

  When each station is in a normal state and can receive control range information from the interlocking logic unit 2B and the interlocking logic unit 2C, the determination logic 201A selects the normal logic 8A, and from the interlocking logic unit 2B or the interlocking logic unit 2C. When the control range information is not received for a certain period, the stop of the interlocking logic unit that has not received the control range information is detected, and the other station stop logic corresponding to the station to which the stopped interlocking logic unit belongs is detected as the stop of the B station. Select logic 9A or logic 10A when station C stops. When operating in the other station stop logic, the interlocking logic unit 2A controls the field device 6B or 6C of the station where the interlocking logic unit is stopped in addition to the field device 6A of the station where the station is installed. The determination logic 201A selects the standby logic 11A for a certain period after the interlocking logic unit 2A recovers from the stop. Similar determination processing is performed in the determination logics 201B and 201C.

  The normal logic 8A is a logic that controls only the field device 6A of the own station (A station) when each station is in a normal state. Similarly, the normal-time logics 8B and 8C are logics that control only the on-site equipment 6B or 6C of the own station (B station or C station) when each station is in a normal state. The B station stop logic 9A and the C station stop logic 10A as the other station stop logic at the A station are used to control the on-site equipment 6A of the A station when another station (B station or C station) stops. In addition, this is logic for controlling a part of the on-site equipment 6B or 6C at the station (B station or C station) where the interlocking logic unit 2B or 2C is stopped. In the B station, the A station stop logic 9B and the C station stop logic 10B, in addition to the control of the on-site equipment 6B at the B station, when the other station (A station or C station) stops, This is logic for controlling a part of the on-site equipment 6A or 6C at the station (A station or C station) where 2C is stopped. When the other station (A station or B station) stops, the logic 9C when the station A stops at the station C and the logic 10C when the station B stops, in addition to the control of the on-site equipment 6C at the station C, This is logic for controlling a part of the on-site equipment 6A or 6B at a station (A station or B station) where 2B is stopped.

  The standby logic 11A performs communication only with the interlocking logic units 2B and 2C of other stations (B station and C station) without controlling the on-site equipment 6A after the interlocking logic unit 2A recovers from the stopped state. It is logic. The standby logic 11B performs communication only with the interlocking logic units 2A and 2C of other stations (A station and C station) without controlling the field device 6B after the interlocking logic unit 2B recovers from the stopped state. It is logic. The standby logic 11C performs communication only with the interlocking logic units 2A and 2B of other stations (A station and B station) without controlling the field device 6C after the interlocking logic unit 2C recovers from the stopped state. It is logic.

  That is, when the interlocking logic part of a certain station stops, the interlocking logic part of a plurality of stations switches to the logic when other stations are stopped. The interlocking logic unit that is switched to the logic when the other station is stopped controls the field device of the station where the interlocking logic unit is stopped in addition to the field device of the station where the station is installed. The on-site equipment that is controlled when switching to the logic when other stations are stopped is assigned management to the interlocking logic section of each station so that the train operation is possible at the station where the interlocking logic section is stopped.

  FIG. 4 is a flowchart for explaining the contents of the logic determination by the interlocking logic unit. In FIG. 4, when the interlocking logic unit 2A at the station A recovers from the stop, the interlocking logic unit 2A at the station A starts the determination logic (step 301), and after recovering from the stop, the interlocking logic unit 2B and the interlocking logic unit 2B. It is checked whether both of the control range information of the unit 2C have been received (step 302), and it is determined whether both of the control range information of the interlocking logic unit 2B and the interlocking logic unit 2C have been received (step 303).

  If the determination result in step 303 is YES, the interlocking logic unit 2A confirms whether the interlocking logic unit 2B or the interlocking logic unit 2C controls the field equipment at station A (step 304), and the interlocking logic unit 2B. Alternatively, it is determined whether or not the interlocking logic unit 2C controls the field device at station A (step 305). On the other hand, if the determination result in step 303 is NO, the interlocking logic unit 2A confirms whether it has not received either the control range information of the interlocking logic unit 2B or the control range information of the interlocking logic unit 2C for a certain period of time. (Step 306), it is determined whether there is no reception for a certain period (Step 307).

  When the interlocking logic unit 2A obtains a NO determination result in Step 305 or obtains a YES determination result in Step 307, the interlocking logic unit 2A performs the normal determination contents (Step 308), and determines YES in Step 305. When the result is obtained, or when the determination result of NO is obtained at step 307, the operation is performed by the standby logic 11A (step 309), and after step 308 or step 309, the control range determination process is terminated, and in this routine The process is terminated (step 310).

  FIG. 5 is a flowchart for explaining normal determination processing by the interlocking logic unit. This process is the specific content of step 308 in FIG. In FIG. 5, the interlocking logic unit 2A starts processing for acquiring the determination contents at the normal time (step 321), and checks whether control range information has been received from the interlocking logic unit 2B for a certain period of time (step 321). 322), it is determined whether or not there is no reception for a certain period (step 323). When the NO determination result is obtained in step 323, the interlocking logic unit 2A confirms whether or not the control range information has been received from the interlocking logic unit 2C for a certain period (step 324), and whether or not there is no reception for a certain period. Determination is made (step 325).

  When the determination result of NO is obtained in step 325, the interlocking logic unit 2A operates with the normal logic 8A (step 326), and when the determination result of YES is obtained with step 325, the interlock logic 2A operates with the logic 10A when the station C is stopped. (Step 327). On the other hand, when the determination result of YES is obtained in step 323, the interlocking logic unit 2A operates with the logic 9A when the station B is stopped (step 328). Thereafter, the interlocking logic unit 2A ends the processing of the determination contents at the normal time and ends the processing in this routine (step 329).

  FIG. 6 is a block diagram for explaining the interlock logic unit control range of each station. In FIG. 6, the control range of the interlocking logic unit 2A (A station interlocking logic unit control range) 581A at the normal time (normal time) of the station A is a device belonging to the field device 6A and is connected to the traffic lights 510 and 511. The control machines 530 and 531 and the track circuits 550, 551, 552, and 553, and the control range of the interlocking logic unit 2B at the normal time of the B station (B station interlocking logic unit control range) 581B belongs to the field device 6B. Thus, the traffic lights 512 and 513, the turning machine 532, and the track circuits 554, 555, 556, 557, and 558, the control range of the interlocking logic unit 2C at the normal time of the C station (C station interlocking logic unit control) (Range) 581C is a device belonging to the field device 6C, and includes traffic lights 514, 515 and track circuits 559, 560, 561, 562, 563, 564.

  At this time, the interlocking logic unit 2A of the station A takes in information related to devices belonging to the field device 6A via the field device control terminals 4A and 5A and the network 3A in the station, and the devices belonging to the field device 6A are normally controlled. Manage as. The interlocking logic unit 2B of the B station takes in information related to devices belonging to the field device 6B via the field device control terminals 4B and 5B and the in-station network 3B, and manages the devices belonging to the field device 6B as normal control targets. . The interlocking logic unit 2C of the C station takes in information related to the device belonging to the field device 6C via the field device control terminals 4C and 5C and the in-station network 3C, and manages the device belonging to the field device 6C as a normal control target. . The interlocking logic units 2A, 2B, and 2C normally select logics (normal logics 8A, 8B, and 8C) that control at least the devices belonging to the field devices at each station, and based on the selected logic, the site of each station. Devices belonging to the device are controlled via each field device control terminal.

  In addition, the interlock logic units 2A, 2B, and 2C provide state information (display information) that indicates the state of field equipment other than the station where the interlock logic unit other than itself is stopped, for example, a train Information indicating the current position, the switchover direction, and the like is periodically acquired from the field device via the in-station networks 3A, 3B, and 3C and the inter-station communication paths 11 and 12.

  If each interlocking logic unit starts to acquire the status information (display information) of the field equipment at the station where the interlocking logic unit has stopped after the other interlocking logic unit has stopped, It takes about several minutes before sufficient state information (display information) can be acquired to control field devices. In this case, the train operation stops for several minutes after the interlocking logic unit stops.

  Therefore, the interlocking logic units 2A, 2B, and 2C acquire the state information (display information) of the field device before the interlocking logic unit other than itself stops. Thereby, it is possible to shorten the time from when the interlocking logic unit stops until the train operation is resumed.

  At this time, for example, the interlocking logic unit 2A periodically acquires status information (display information) of devices belonging to the A station interlocking logic unit control range 581A, and at the same time, the B station interlocking logic unit control range 581B and the C station interlocking logic. Status information (display information) of devices belonging to the section range 581C is periodically acquired. Similarly, the interlocking logic unit 2B periodically acquires the status information (display information) of the devices belonging to the B station interlocking logic unit control range 581B, and the A station interlocking logic unit control range 581A and the C station interlocking logic unit range The link logic unit 2C periodically acquires the status information (display information) of the devices belonging to 581C, and periodically acquires the status information (display information) of the devices belonging to the C station link logic unit control range 581C. Status information (display information) of devices belonging to the A station interlocking logic part control range 581A and the B station interlocking logic part range 581B is periodically acquired.

  FIG. 7 is a configuration diagram for explaining a control range when the A station interlocking logic unit is stopped. In FIG. 7, the control range of the interlocking logic unit 2B (B station interlocking logic unit control range) 582B when the interlocking logic unit 2A of the A station is stopped is mainly an uplink device among the devices belonging to the field device 6A. There are traffic lights 511, switch machines 530, 531, track circuits 551, 553, and equipment belonging to the field equipment 6B, which are traffic lights 512, 513, switch machines 532, track circuits 554, 555, 556, 557, 558, and the control range of the interlocking logic unit 2C (the C station interlocking logic unit control range) 582C when the interlocking logic unit 2A at the station A is stopped is mainly a down link among the devices belonging to the field device 6A. Devices for wires, which are traffic lights 510, turning machines 530, 531, track circuits 550, 552, and equipment belonging to the field equipment 6C, which are traffic lights 514, 515, track circuits 559, The 60,561,562,563,564. Note that the switch machines 530 and 531 belong to the control range 582B of the interlocking logic unit 2B and the control range 582C of the interlocking logic unit 2C, because they are used for both the up and down train operations at station A. Managed as equipment.

  At this time, the station B interlocking logic unit 2B controls the devices belonging to the control range (B station interlocking logic unit control range) 582B so that the train operation can be continued even when the station A interlocking logic unit 2A stops. It is operated as a logic 9B when the station A stops at the station B, and controls a part of the field device 6A in addition to the control of the field device 6B at the station B. The interlocking logic unit 2C of the C station manages devices belonging to the control range (C station interlocking logic unit control range) 582C as control targets, and is the A station stop logic 9C at the C station, which is the on-site device 6C of the C station. In addition to the above control, the operation is performed by logic for controlling a part of the field device 6A. That is, the interlocking logic units 2B and 2C transmit and receive control range information to and from the interlocking logic unit 2A, and when the control range information cannot be received from the interlocking logic unit 2A, the interlocking logic unit 2A is stopped. It functions as a management interlocking logic unit that manages as a device, and shares and controls devices belonging to the field device of the other station (station A) to which the stopped interlocking logic unit 2A belongs in addition to the devices belonging to the field device of the own station Select the logic (A station stop logic 9B, 9C) to control the equipment belonging to the local equipment at the station based on the selected logic, and share the equipment belonging to the stopped interlocking logic section 2A field equipment Control.

  FIG. 8 is a configuration diagram for explaining a control range when the B station interlocking logic unit is stopped. In FIG. 8, when the interlocking logic unit 2B at the B station is stopped, the control range of the interlocking logic unit 2A (A station interlocking logic unit control range) 582A is a device belonging to the on-site equipment 6A, and traffic lights 510, 511, Switch machines 530 and 531; track circuits 550, 551, 552, and 553; and equipment mainly belonging to the on-site equipment 6B, which are equipment for an up line, a traffic light 513, a switch machine 532, Track circuits 555 and 557, and the control range of the interlocking logic unit 2C when the B station interlocking logic unit 2B is stopped (C station interlocking logic unit control range) 583C is mainly used for the down line among the devices belonging to the field device 6B. Equipment, which is a traffic light 512, a switch machine 532, a track circuit 554, 556, 558, and a field device 6C, which are signals 514, 515, track circuits 559, 560, 5 The 1,562,563,564. The switch 532 is used for both the up and down train operations at station B. Therefore, as a device belonging to the control range 582A of the interlocking logic unit 2A and the control range 583C of the interlocking logic unit 2C, respectively. Managed.

  At this time, the station A interlocking logic unit 2A controls the devices belonging to the control range (A station interlocking logic unit control range) 582A so that the train operation can be continued even when the station B interlocking logic unit 2B stops. It is operated as a logic 9A when the station B stops at the station A, and controls a part of the field device 6B in addition to the control of the field device 6A at the station A. The C station interlocking logic unit 2C manages the devices belonging to the control range (C station interlocking logic unit control range) 583C as control targets, and is the B station stop time logic 10C at the C station, which is the C station field device 6C. In addition to the above control, the operation is performed by logic for controlling a part of the field device 6B.

  FIG. 9 is a configuration diagram for explaining a control range when the C station interlocking logic unit is stopped. In FIG. 9, the control range of the interlocking logic unit 2A (A station interlocking logic unit control range) 583A when the interlocking logic unit 2C of the C station is stopped is a device belonging to the on-site equipment 6A, and traffic lights 510, 511, A switch 530, 531, a track circuit 550, 551, 552, 553, and a device mainly for the up line among the devices belonging to the field device 6C, a traffic light 515 and track circuits 559, 561, 563. The control range of the interlocking logic unit 2B when the C station interlocking logic unit 2C is stopped (B station interlocking logic unit control range) 583B is a device belonging to the field device 6B, and is in contact with the traffic lights 512 and 513. Machine 532, track circuits 554, 555, 556, 557, 558, and equipment for the down line among the equipment belonging to the field equipment 6C, the traffic light 514 and the track circuits 560, 56 , The 564.

  At this time, the station A interlocking logic unit 2A controls the devices belonging to the control range (A station interlocking logic unit control range) 583A so that the train operation can be continued even when the station C interlocking logic unit 2C stops. It is a logic 10A when the station C stops at the station A, and operates in accordance with a logic for controlling a part of the field device 6C in addition to the control of the field device 6A at the station A. The interlocking logic unit 2B of the B station manages equipment belonging to the control range (B station interlocking logic part control range) 583B as a control target, and is the C station stop time logic 10B at the B station, which is the on-site equipment 6B of the B station. In addition to the above-described control, the operation is performed by logic for controlling a part of the field device 6C.

  FIG. 10 is a time chart of the control range information transmission / reception process of the interlocking logic unit. In FIG. 10, the interlocking logic unit 2A executes the control range information transmission process 601A and the control range information reception process 602A, and then executes the control range information transmission process 603A and the control range information reception process 604A. After executing the control range information transmission process 601B and the control range information reception process 602B, the control range information transmission process 603B and the control range information reception process 604B are executed, and the interlocking logic unit 2C controls the control range information transmission process 601C and the control range information transmission process 601C. After executing the range information receiving process 602C, the control range information transmitting process 603C and the control range information receiving process 604C are executed. That is, the interlocking logic units 2A, 2B, and 2C periodically exchange each other's control range information, and acquire information related to the control range of the field device that is controlled by the interlocking logic unit.

  At this time, in the control range information transmission process 601A and the control range information transmission process 603A, the interlocking logic unit 2A transmits information about devices belonging to the A station interlocking logic unit control range 581A to the interlocking logic unit 2B and the interlocking logic unit 2C. In the control range information receiving process 602A and the control range information receiving process 604A, information related to devices belonging to the B station interlocking logic unit control range 581B is received from the interlocking logic unit 2B and related to devices belonging to the C station interlocking logic unit control range 581C. Information is received from the interlocking logic unit 2C. In the control range information transmission process 601B and the control range information transmission process 603B, the interlocking logic unit 2B transmits information related to devices belonging to the B station interlocking logic unit control range 581B to the interlocking logic unit 2A and the interlocking logic unit 2C. In the information reception process 602B and the control range information reception process 604B, information related to devices belonging to the A station interlocking logic part control range 581A is received from the interlocking logic part 2A, and information related to devices belonging to the C station interlocking logic part control range 581C is interlocked. Received from the logic unit 2C. In the control range information transmission process 601C and the control range information transmission process 603C, the interlocking logic unit 2C transmits information on devices belonging to the C station interlocking logic unit control range 581C to the interlocking logic unit 2A and the interlocking logic unit 2B, and the control range In the information reception process 602C and the control range information reception process 604C, information related to devices belonging to the A station interlocking logic unit control range 581A is received from the interlocking logic unit 2A, and information related to devices belonging to the B station interlocking logic unit control range 581B is interlocked. Received from the logic unit 2B.

  FIG. 11 is a time chart when the interlock logic units 2A and 2C are switched to the B station stop logic when the interlock logic unit 2B is stopped. In FIG. 11, the interlocking logic unit 2A executes the following processing using the interlocking logic unit 2B and the interlocking logic unit 2C as information transmission destinations or transmission sources. For example, the interlocking logic unit 2A executes the control range information transmission process 701A and the control range information reception process 702A, and then executes the determination logic (703A), and then performs the control range information transmission process 704A and the control range information reception. After executing the processing 705A, the determination logic is executed (706A). Subsequently, after executing the control range information transmission processing 707A and the control range information reception processing 708A, the determination logic is executed (709A), and further the control is performed. After executing the range information transmission process 710A and the control range information reception process 711A, the determination logic is executed (712A).

  The interlocking logic unit 2B executes the following processing using the interlocking logic unit 2A and the interlocking logic unit 2C as information transmission destinations or transmission sources. For example, after executing the control range information transmission process 701B and the control range information reception process 702B, the interlocking logic unit 2B executes the determination logic (703B). Thereafter, when the interlocking logic unit 2B is stopped, the interlocking logic unit 2B is stopped and cannot transmit / receive information to / from the other interlocking logic units 2A and 2C.

  The interlocking logic unit 2C executes the following processing using the interlocking logic unit 2A and the interlocking logic unit 2B as information transmission destinations or transmission sources. For example, the interlock logic unit 2C executes the control range information transmission process 701C and the control range information reception process 702C, and then executes the determination logic (703C), and then performs the control range information transmission process 704C and the control range information reception. After executing the processing 705C, the determination logic is executed (706C). Subsequently, after executing the control range information transmission processing 707C and the control range information reception processing 708C, the determination logic is executed (709C), and further control is performed. After executing the range information transmission process 710C and the control range information reception process 711C, the determination logic is executed (712C).

  At this time, the interlocking logic unit 2A operates with the normal logic 8A from the control range information transmission process 701A to the execution of the determination logic (709A), but if the interlocking logic unit 2B is stopped, the interlocking logic unit Since the information (control range information) from 2B cannot be obtained, the decision logic is executed (709A), then the control range information transmission processing 710A and the control range information reception processing 711A are executed, and then the decision logic is executed (712A). ), It operates with logic 9A when station B is stopped. The interlocking logic unit 2A operates with devices belonging to the A station interlocking logic unit control range 582A shown in FIG. 8 as control targets.

  The interlocking logic unit 2C operates with the normal logic 8C from the control range information transmission process 701C until the determination logic is executed (709C). However, when the interlocking logic unit 2B is stopped, the interlocking logic unit 2B Since information cannot be obtained, after executing the determination logic (709C), after executing the control range information transmission process 710C and the control range information reception process 711C, when executing the determination logic (712C), when station B is stopped Operates with logic 10C. The interlocking logic unit 2C operates with devices belonging to the C station interlocking logic unit control range 583C illustrated in FIG. 8 as control targets. In this case, the interlocking logic unit 2A and the interlocking logic unit 2C manage the interlocking logic unit 2B as a stopped interlocking logic unit on condition that information (control range information) cannot be received from the interlocking logic unit 2B. Based on the information (control range information) transmitted / received to / from each other, the device functions as the interlocking logic unit, and performs control for the device that is the control target of the interlocking logic unit 2B. The interlocking logic unit 2A and the interlocking logic unit 2C are configured such that when the stopped interlocking logic unit 2B recovers from the stopped state and receives information (control range information) from the recovered interlocking logic unit 2B, The part 2B is managed as a recovered interlocking logic part.

  FIG. 12 is a time chart when the interlocking logic unit of each station switches to the normal logic after the interlocking logic unit 2B recovers from the stop. In FIG. 12, the interlocking logic unit 2A executes the following process using the interlocking logic unit 2B and the interlocking logic unit 2C as information transmission destinations or transmission sources. For example, the interlocking logic unit 2A executes the control range information transmission processing 801A and the control range information reception processing 802A, and then executes the determination logic (803A), and then performs the control range information transmission processing 804A and the control range information reception. After executing the processing 805A, the determination logic is executed (806A), and subsequently, after executing the control range information transmission processing 807A and the control range information reception processing 808A, the determination logic is executed (809A), and further, the control After executing the range information transmission process 810A and the control range information reception process 811A, the determination logic is executed (812A).

  When the interlocking logic unit 2B recovers from the stop, the interlocking logic unit 2A and the interlocking logic unit 2C execute the following processing with the information transmission destination or source as the information transmission destination or transmission source. For example, the interlocking logic unit 2B executes the determination logic (801B), then executes the control range information transmission process 804B and the control range information reception process 805B, then executes the determination logic (806B), After executing the control range information transmission process 807B and the control range information reception process 808B, the determination logic is executed (809B), and further after the control range information transmission process 810B and the control range information reception process 811B are executed, the determination is performed. Implement logic (812B).

  The interlocking logic unit 2C executes the following processing using the interlocking logic unit 2A and the interlocking logic unit 2B as information transmission destinations or transmission sources. For example, the interlocking logic unit 2C executes the control range information transmission process 801C and the control range information reception process 802C, and then executes determination logic (803C), and then performs the control range information transmission process 804C and the control range information reception. After executing the processing 805C, the determination logic is executed (806C), and subsequently, the control range information transmission processing 807C and the control range information reception processing 808C are executed, and then the determination logic is executed (809C), and further control is performed. After executing the range information transmission process 810C and the control range information reception process 811C, the determination logic is executed (812C).

  At this time, the interlocking logic unit 2A operates with the logic 9A when the station B is stopped until the determination logic is executed from the control range information transmission process 801A (809A), but the determination is made as the interlocking logic unit 2B recovers. When the normal logic 8A is selected as the logic, after executing the determination logic (809A), the control range information transmission processing 810A and the control range information reception processing 811A are executed, and when the determination logic is executed (812A), it is normal Operates with time logic 8A.

  The interlocking logic unit 2B operates in the standby logic 11B because it has not received information from the interlocking logic unit 2A and the interlocking logic unit 2C until the determination logic is performed (801B) to the determination logic is performed (809B). From the execution of the decision logic (809B) to the execution of the decision logic (812B), information from the interlocking logic unit 2A and the interlocking logic unit 2C can be received, and thus the normal logic 8B operates. That is, when the stopped interlocking logic unit 2B is recovered, the interlocking logic units 2A and 2C of other stations (A station, C station) may be controlling the on-site equipment 6B of the B station. When the interlocking logic units 2A and 2C of other stations (A station, C station) are controlling the on-site equipment 6B at the B station, the recovered interlocking logic section 2B controls the on-site equipment 6B. There is a possibility that two different controls are performed on the field device 6B.

  Control of the field device 6B that is controlled by the logic unit of another station in order to prevent the field device 6B from performing a dangerous operation by performing two different controls on the field device 6B. In a state where the range is unknown and the interlocking logic units 2A and 2C other than itself control the field device 6B at station B, the interlocking logic unit 2B does not control the field device 6B, and does not control the standby logic. 11B.

  The interlocking logic unit 2C operates at the B station stop logic 10C until the determination logic is executed from the control range information transmission process 801C (809C). However, as the interlocking logic unit 2B recovers, the determination logic is normal. When the time logic 8C is selected, after executing the determination logic (809C), the control range information transmission processing 810C and the control range information reception processing 811C are executed, and when the determination logic is executed (812C), the normal time logic 8C Works with.

  Here, in order to operate the train while maintaining safety, each interlocking logic unit exclusively controls station equipment such as a switchover. For example, when the interlocking logic unit 2B is stopped, the interlocking logic unit 2A and the interlocking logic unit 2C function as a management interlocking logic unit that manages the interlocking logic unit 2B as the stopped interlocking logic unit, and the switch 532 is excluded. It is managed as a target to be controlled and exclusive control is performed on the switch 532. At this time, when one of the interlocking logic unit 2A and the interlocking logic unit 2C controls the switch 532 for train operation, the other link logic unit switches over. If 532 is controlled, a dangerous event such as derailment occurs, which needs to be prevented.

  Therefore, when the interlocking logic unit 2A and the interlocking logic unit 2C perform control with the switch 532 as the control target, the interlocking logic unit 2A operating at the B station stop logic 9A and the B station stop logic 10C operate. The interlocking logic unit 2 </ b> C periodically transmits and receives information indicating whether or not the switch 532 is controlled.

  When one of the interlocking logic units needs to control the turning machine 532 for train operation, before the control of the turning machine 532, the other interlocking logic unit switches to the changing machine 532. Check if there is any exclusive control. For example, when the other interlocking logic unit performs control of the switch 532 and temporary reservation described later, one of the interlocking logic units does not control the switch 532. In this case, one of the interlocking logic units suspends control of the switch 532 and the execution of the control, and waits until the other interlocking logic unit cancels the control of the switch 532 and the provisional reservation.

  When one of the interlocking logic units does not control the switch 532, the other interlocking logic unit makes a temporary reservation for control of the switch 532 and whether or not to control the switch 532. Information and information indicating that the switch machine 532 has been temporarily reserved are transmitted to the other interlocking logic unit, and control for the switch machine 532 is carried out after a certain period of time (a certain period) has elapsed since the provisional reservation was started. To do.

  FIG. 13 is a time chart when the interlocking logic unit 2 </ b> A controls the switch 532. This process is started on the condition that the interlocking logic units 2A and 2C are not controlling the switch 532 together. In FIG. 13, the interlocking logic unit 2A executes field device control presence / absence information transmission processing 901A and field device control presence / absence information reception processing 902A as operations without control of the switch 532, and then switches over. The machine 532 is temporarily reserved (903A). At this time, in the on-site equipment control presence / absence information transmission process 901A, for example, the interlocking logic section 2A does not control the switch 532 as information on the presence / absence of control of the on-site equipment at station A. Is transmitted to the interlocking logic unit 2C, and the field device control presence / absence information reception processing 902A receives information regarding the presence / absence of control of the field device at station C from the interlocking logic unit 2C.

  Next, the interlocking logic unit 2A executes field device control presence / absence information transmission processing 904A and field device control presence / absence information reception processing 905A as operations during temporary reservation of the switch 532, and then performs field device control. The presence / absence information transmission processing 907A and the on-site device control presence / absence information reception processing 908A are executed, and thereafter, control of the switch 532 is started (909A) after a lapse of a predetermined time from the start of provisional reservation. In the on-site device control presence / absence information transmission process 904A and the on-site device control presence / absence information transmission process 907A, the interlocking logic unit 2A transmits information indicating that the interlocking logic unit 2A has temporarily reserved the switch 532.

  Next, the interlocking logic unit 2A executes field device control presence / absence information transmission processing 910A and field device control presence / absence information reception processing 911A as operations during the control of the switch 532, and subsequently, field device control presence / absence. The information transmission process 913A and the on-site device control presence / absence information reception process 914A are executed, and then the control to the switch 532 is terminated (915A). In the on-site device control presence / absence information transmission processing 910A and on-site device control presence / absence information transmission processing 913A, the interlocking logic unit 2A transmits information indicating that the interlocking logic unit 2A is controlling the switch 532.

  Thereafter, the interlocking logic unit 2A executes the field device control presence / absence information transmission processing 916A and the field device control presence / absence information reception processing 917A as the operation without control of the switch 532, and then the field device control presence / absence. The information transmission process and the field device control presence / absence information reception process are alternately executed. In the on-site device control presence / absence information transmission process 916 </ b> A, the interlocking logic unit 2 </ b> A transmits information indicating that the interlocking logic unit 2 </ b> A does not control the switch 532. In conjunction with the on-site device control presence / absence information transmission processing 904A, 907A, 910A, 913A, 916A, the interlocking logic unit 2A transmits information on the presence / absence of control of the on-site device at station A to the interlocking logic unit 2C. In the information reception processing 905A, 908A, 911A, 914A, 917A, information related to the presence / absence of control of the field equipment at station C is received from the interlocking logic unit 2C.

  On the other hand, the interlocking logic unit 2C executes field device control presence / absence information transmission processing 901C and field device control presence / absence information reception processing 902C as operations without control to the switch 532, and thereafter, similarly, the field device control Presence / absence information transmission processing 904C, 907C, 910C, 913C, 916C and on-site device control presence / absence information reception processing 905C, 908C, 911C, 914C, 917C are executed alternately. At this time, the interlocking logic unit 2C transmits information on the presence / absence of control of the field device at station C to the link logic unit 2A in the field device control presence / absence information transmission processing 901C, 904C, 907C, 910C, 913C, and 916C. In the device control presence / absence information reception processing 902C, 905C, 908C, 911C, 914C, 917C, information related to the presence / absence of control of the on-site device at station A is received from the interlocking logic unit 2A. The interlocking logic unit 2C receives information indicating that the interlocking logic unit 2A has temporarily reserved control for the switch 532, from the field device control presence / absence information reception process 905C to the field device control presence / absence information reception process 917C. Does not control at least the switch 532.

  When the interlocking logic unit 2A is stopped, the interlocking logic unit 2B and the interlocking logic unit 2C perform the same control as the processing of FIG.

  When a plurality of interlocking logic units simultaneously control a single field device, such as a switch 532, when the plurality of interlocking logic units simultaneously make a temporary reservation for the field device, In order to detect that the temporary reservation of the field device is performed, all the interlocking logic units do not control the field device.

  Therefore, in this embodiment, when the high priority is set in the order of the interlocking logic units 2A, 2B, and 2C, and a plurality of interlocking logic units make a tentative reservation at the same time, the interlocking logic unit with the highest priority is the field device. It is assumed that control is performed.

  For example, when the interlocking logic units 2A and 2C make a temporary reservation for the switch 532 at the same time, the interlock logic unit 2A controls the switch 532, and the interlock logic unit 2C controls the switch 532. Do not control. Specifically, when the interlocking logic unit 2B stops, the interlocking logic unit 2A receives information indicating that a temporary reservation has been made from the interlocking logic unit 2C before performing exclusive control on the switch 532. In this case, the interlocking logic unit 2A performs exclusive control on the switch 532 as a process after provisional reservation on the condition that the preset priority is higher than that of the interlocking logic unit 2C. .

  According to the present embodiment, when some of the interlocking logic units 2B are stopped, the other two or more interlocking logic units 2A and 2C control the field devices that were controlled by the stopped interlocking logic unit 2B. As a result, even if some of the interlocking logic units 2B are stopped, the train operation at the station B where the interlocking logic unit 2B is stopped can be continued. Further, since it is not necessary to store control information for two stations (control information for controlling field devices for two stations) at each station, cost reduction can be achieved.

  In addition, this invention is not limited to an above-described Example, Various modifications are included. For example, the above-described embodiments have been described in detail for easy understanding of the present invention, and are not necessarily limited to those having all the configurations described. In addition, it is possible to add, delete, and replace other configurations for a part of the configuration of the embodiment.

  Further, each of the above-described configurations, functions, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Each of the above-described configurations, functions, and the like may be realized by software by interpreting and executing a program that realizes each function by the processor. Information such as programs, tables, and files that realize each function should be recorded in a recording device such as a memory, hard disk, or SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD. Can do.

  1 Route control device, 2A, 2B, 2C Interlocking logic unit, 3A, 3B, 3C Station network, 4A, 4B, 4C, 5A, 5B, 5C Field equipment control terminal, 6A, 6B, 6C Field equipment, 510, 511 512, 513 Traffic light, 530, 531, 532 Turning point, 550-564 Track circuit.

Claims (6)

A plurality of on-site equipment control terminals that are arranged at a plurality of stations and manage the operation of the equipment belonging to the on-site equipment at each station;
At each station, it is connected to each field device control terminal via an information transmission path, and normally selects at least logic that belongs to the field device at each station to be controlled, and based on the selected logic. A plurality of interlocking logic units for controlling devices belonging to the on-site equipment at each station via each on-site equipment control terminal,
Each of the interlocking logic units is
After transmitting / receiving the control range information to / from each other via the information transmission path, the control range information indicating the range of the equipment to be controlled that belongs to the local equipment of the own station among the stations, When the control range information cannot be received from any of the interlocking logic units of other stations, the interlocking logic unit that cannot receive the control range information is managed as a stopped interlocking logic unit,
Two or more management interlocking logic units that manage the stopped interlocking logic unit among the plurality of interlocking logic units are:
In addition to the equipment belonging to the local equipment at the station, the logic for sharing and controlling the equipment belonging to the local equipment at the other station to which the stopped interlocking logic unit belongs is selected, and based on the selected logic A railway security system characterized by controlling equipment belonging to field equipment at its own station and sharing and controlling equipment belonging to field equipment at other stations to which the stopped interlocking logic unit belongs. In the railway security system according to claim 1,
The stopped interlocking logic part is:
When recovering from the stopped state, it starts a process of transmitting / receiving the control range information to / from the management interlocking logic unit, and the management interlocking logic unit is for a device that is a control target of the stopped interlocking logic unit Wait until control stops,
The interlocking logic unit for management is
When the stopped interlocking logic unit recovers from the stopped state and receives the control range information from the recovered interlocking logic unit, the stopped interlocking logic unit is managed as a recovered interlocking logic unit, and then for a certain period of time A railroad security system characterized in that the control on the equipment to be controlled by the recovered interlocking logic unit is stopped on the condition that it has passed. In the railway security system according to claim 1,
Each of the interlocking logic units is
Status information indicating the status of the equipment belonging to each field device is periodically input via the field device control terminal arranged at each station, and the input status information is linked to other stations via the information transmission path. Railway security system characterized by regular transmission to the logic part. In the railway security system according to claim 1,
Each of the management interlocking logic units is
When sharing and controlling the devices that were controlled by the stopped interlocking logic unit, among the devices that were controlled by the stopped interlocking logic unit, the management interlocking logic units share the control with each other. To manage devices for exclusive control as well as to transmit / receive information indicating the presence / absence of exclusive control to each other and to perform exclusive control on the exclusive control target based on the transmitted / received information Railway security system characterized by In the railway security system according to claim 4,
Each of the management interlocking logic units is
When performing exclusive control on the exclusive control target, before performing the exclusive control, perform provisional reservation of control on the exclusive control target, and for the other management interlocking logic unit, A railway security system that transmits information indicating that a control for an exclusive control target has been temporarily reserved. In the railway security system according to claim 5,
Each of the management interlocking logic units is
If the information indicating that the provisional reservation has been made is received from the other management interlocking logic unit before performing exclusive control on the exclusive control target, the preset priority is the other management interlocking logic. A railway security system characterized in that exclusive control is performed on the exclusive control target as a process after the provisional reservation on the condition that it is higher than that of a section.

Images