Computer interlocking system and switching control method for the same, device, and storage medium

Patent metadata

Field	Value
Publication number	US-11904918-B2
Application number	US-201917050808-A
Country	US
Kind code	B2
Filing date	Apr 23, 2019
Priority date	Apr 27, 2018
Publication date	Feb 20, 2024
Grant date	Feb 20, 2024

Abstract

A computer interlocking system includes: a first sub-system and a second sub-system that have a same structure and function, where the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively including a main control layer, a network layer, and a communication and execution layer; the network layer being configured to construct a communication network of a sub-system in which the network layer is located; the main control layer and the communication and execution layer in the first sub-system being respectively connected to a communication network of the first sub-system; and the main control layer and the communication and execution layer in the second sub-system being respectively connected to a communication network of the second sub-system.

First claim

What is claimed is:

1. A computer interlocking system, comprising:
a first sub-system and a second sub-system that are mutually redundant and that have a same structure and function, wherein:
the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively comprising a main control layer, a network layer, and a communication and execution layer;
the network layer is configured to construct a communication network of a sub-system in which the network layer is located;
the main control layer and the communication and execution layer in the first sub-system are respectively connected to a communication network of the first sub-system; and
the main control layer and the communication and execution layer in the second sub-system are respectively connected to a communication network of the second sub-system,
wherein:
the computer interlocking system further includes a first interlocking module respectively connected to the first sub-system and the second sub-system;
the communication and execution layer in the first sub-system includes a first CPU and a second CPU and is configured to:
determine first sub-data acquired by the first CPU and second sub-data acquired by the second CPU;
perform 2-out-of-2 comparison on the first sub-data and the second sub-data, to determine whether the communication and execution layer in the first sub-system meets an active/standby switching condition, and
acquire, through a communication interface connected to a communication and execution layer in a second sub-system, second data determined by the communication and execution layer in the second sub-system; and the first interlocking module is configured to
control, when it is determined that the first sub-data is consistent with the second sub-data and the second data is fault processing data, the communication and execution layer in the first sub-system to be switched to be active; or
control, when it is determined that the first sub-data is inconsistent with the second sub-data and the second data is non-fault processing data, the communication and execution layer in the first sub-system to be switched to be standby.

2. The system according to claim 1 , wherein:
the network layer in the first sub-system and/or the network layer in the second sub-system are further configured to construct a monitoring network; and
the main control layer and the communication and execution layer are further connected to the monitoring network, respectively.

3. The system according to claim 1 , wherein:
the first sub-system and the second sub-system further respectively comprise: N communication controllers, N being a positive integer; and
the N communication controllers are respectively connected to the communication network of the first sub-system, the communication network of the second sub-system, and the communication and execution layer.

4. The system according to claim 3 , wherein:
the number N of the communication controllers in the first sub-system is a positive integer greater than 1; and
the N communication controllers are disposed in different positions.

5. The system according to claim 1 , wherein:
the first interlocking module respectively connected to a communication controller in the first sub-system and a communication controller in the second sub-system;
the first interlocking module is configured to determine an active/standby relationship between the communication controller in the first sub-system and the communication controller in the second sub-system according to an acquired instruction of the communication controller in the first sub-system or an acquired instruction of the communication controller in the second sub-system.

6. The system according to claim 5 , wherein the first interlocking module comprises a first relay and a second relay connected to each other in an interlocking manner.

7. The system according to claim 1 , wherein the main control layer and the communication and execution layer in the first sub-system are respectively in communication connection to the main control layer and the communication and execution layer in the second sub-system.

8. The system according to claim 1 , further comprising:
second interlocking modules disposed between the main control layer and the communication and execution layer in the first sub-system and the main control layer and the communication and execution layer in the second sub-system, respectively.

9. The system according to claim 1 , wherein:
the first CPU in the first sub-system is in communication connection to a first CPU in the second sub-system; and
the second CPU in the first sub-system is in communication connection to a second CPU in the second sub-system.

10. A switching control method for a computer interlocking system having a first sub-system and a second sub-system that are mutually redundant and that have a same structure and function, wherein the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively comprising a main control layer, a network layer, and a communication and execution layer, the method comprising:
determining, by the communication and execution layer in the first sub-system, first sub-data acquired by a first CPU and second sub-data acquired by a second CPU;
performing, by the communication and execution layer in the first sub-system, 2-out-of-2 comparison on the first sub-data and the second sub-data, to determine whether the communication and execution layer in the first sub-system meets an active/standby switching condition; and
controlling, when it is determined that the communication and execution layer in the first sub-system meets the active/standby switching condition, the communication and execution layer in the first sub-system to perform an active/standby switching operation,
wherein the method further comprises:
acquiring, by the communication and execution layer in the first sub-system through a communication interface connected to a communication and execution layer in a second sub-system, second data determined by the communication and execution layer in the second sub-system, wherein
the controlling, when it is determined that the communication and execution layer in the first sub-system meets the active/standby switching condition, the communication and execution layer in the first sub-system to perform an active/standby switching operation comprises:
controlling, when it is determined that the first sub-data is consistent with the second sub-data and the second data is fault processing data, the communication and execution layer in the first sub-system to be switched to be active; or
controlling, when it is determined that the first sub-data is inconsistent with the second sub-data and the second data is non-fault processing data, the communication and execution layer in the first sub-system to be switched to be standby.

11. The method according to claim 10 , wherein after the determining first sub-data acquired by a first CPU and second sub-data acquired by a second CPU, the method further comprises:
determining current first data of the communication and execution layer in the first sub-system according to the first sub-data and the second sub-data; and
determining, by the communication and execution layer in the first sub-system, a current data processing mode according to consistency of the first data and the second data.

12. The method according to claim 11 , wherein the determining, by the communication and execution layer in the first sub-system, a current data processing mode according to consistency of the first data and the second data comprises:
outputting, by the c

Assignees

• Byd Co Ltd

Inventors

• Qin Yejun
• Yang Tao
• Wang Faping

Classifications

• B61L3/006 Primary

  Operations & Transport · mapped topic

• G06F11/0796

  Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element · CPC title

• G06F11/165

  with continued operation after detection of the error · CPC title

• G06F11/1633

  using mutual exchange of the output between the redundant processing components · CPC title

• G06F11/187

  Voting techniques · CPC title