1. Field of the Invention
The present invention relates to the railroad signaling, and in particular to an apparatus and method for vitally monitoring and determining the state of wayside signaling equipment.
2. Description of the Related Art
Railroad systems include various types of wayside equipment which is located at geographically dispersed positions along the track. Such wayside equipment includes wayside signaling equipment, including signal lamps, switches and hazard detectors, which communicate track information, such as right-of-way information, speed restrictions, and track condition information, to trains traveling along the track.
Positive train control (PTC) refers to various technologies that are used to monitor and control the movements of trains to provide increased safety. A typical PTC system consists of a centralized control center, an on-board computer provided on the train, various types of wayside equipment as just described, and a wireless communication system that allows for wireless communications between the elements just identified. More specifically, such PTC systems typically employ an overlay system wherein each piece of wayside equipment is operatively coupled to a wayside interface device that monitors the status of wayside equipment in a fail safe manner and wirelessly transmits the status to the on-board computer of each oncoming train. For example, a wayside interface device may be coupled to a signal lamp (having individual red, yellow and green lamps) for monitoring and reporting the aspect of the signal lamp to oncoming trains. In PTC systems, it is important that wayside interface devices not falsely interpret and broadcast the state of the associated wayside signaling equipment in a more permissive manner. In other words, if such wayside interface device are going to fail, they should fail into a safe (less permissive) mode for the train.
While many known PTC systems employing an overlay system as just described have proven to be effective in certain situations, there is room for improvement in the field of positive train control, and in particular as it relates to monitoring and determining the state of wayside signaling equipment.
In one embodiment, a monitoring apparatus for determining the state of an item of railroad wayside signaling equipment having a plurality of signaling elements is provided. The monitoring apparatus includes a first vital processing unit, a second vital processing unit separate and diverse from the first vital processing unit, a current sensing unit having a first current sensor and a second current sensor, the first current sensor and the second current sensor each being configured to measure a current being provided to one or more of the plurality of signaling elements, and means for measuring a plurality of voltage levels, each of the voltage levels being a voltage level being supplied to a respective one of the plurality of signaling elements. The first vital processing unit receives a first current measurement from the first current sensor and each of the measured voltage levels, the second vital processing unit receives a second current measurement from the second current sensor and each of the measured voltage levels, and the first vital processing unit and the second vital processing unit are each programmed to determine based on one or more of the first current measurement, the second current measurement and the measured voltage levels: (i) the state of the item of railroad wayside signaling equipment, (ii) failures within the item of railroad wayside signaling equipment, and (iii) failures within the monitoring apparatus itself.
In another embodiment, a method of determining the state of an item of railroad wayside signaling equipment having a plurality of signaling elements is provided. The method includes providing a monitoring apparatus having a first vital processing channel and a second vital processing channel separate and diverse from the first vital processing channel, making a first current measurement and a second current measurement, both the first current measurement and the second current measurement comprising a measurement of a current being provided to one or more of the plurality of signaling elements, receiving in the first vital processing channel the first current measurement and receiving in the second vital processing channel the second current measurement, measuring a plurality of voltage levels, each of the voltage levels being a voltage level being supplied to a respective one of the plurality of signaling elements, and receiving the measured voltage levels in the first vital processing channel and the second vital processing channel. The method further includes determining in each of the first vital processing unit and the second vital processing unit the state of the item of railroad wayside signaling equipment based on one or more of the first current measurement, the second current measurement and the measured voltage levels, wherein the first vital processing unit and the second vital processing unit are able to detect failures within the item of railroad wayside signaling equipment and failures within the monitoring apparatus itself based on one or more of the first current measurement, the second current measurement and the measured voltage levels, and wherein the state of the item of railroad wayside signaling equipment will comprise an error state if a failure within the item of railroad wayside signaling equipment or a failure within the monitoring apparatus itself is detected.
Therefore, it should now be apparent that the invention substantially achieves all the above aspects and advantages. Additional aspects and advantages of the invention will be set forth in the description that follows, and in part will be obvious from the description, or may be learned by practice of the invention. Moreover, the aspects and advantages of the invention may be realized and obtained by means of the instrumentalities and combinations particularly pointed out in the appended claims.
The accompanying drawings illustrate presently preferred embodiments of the invention, and together with the general description given above and the detailed description given below, serve to explain the principles of the invention. As shown throughout the drawings, like reference numerals designate like or corresponding parts.
Directional phrases used herein, such as, for example and without limitation, top, bottom, left, right, upper, lower, front, back, and derivatives thereof, relate to the orientation of the elements shown in the drawings and are not limiting upon the claims unless expressly recited therein.
As employed herein, the statement that two or more parts or components are “coupled” together shall mean that the parts are joined or operate together either directly or through one or more intermediate parts or components.
As employed herein, the statement that two or more parts or components “engage” one another shall mean that the parts exert a force against one another either directly or through one or more intermediate parts or components.
As employed herein, the term “number” shall mean one or an integer greater than one (i.e., a plurality).
Signal lamp head 4 in the exemplary embodiment is configured to provide visual signals to an oncoming train relating to, for example, right-of-way and/or speed restriction information and includes a first lamp element 10, a second lamp element 12 and a third lamp element 14. As seen in
WIU 6 is configured to monitor the state of signal lamp head 4, declare an aspect for signal lamp head 4 based on sensed voltages and currents in the signal lamp head 4 (described in greater detail herein), and wirelessly transmit the declared aspect so that it can be received by an oncoming train (i.e., by the on-board computer of the oncoming train). WIU 6 includes a first vital processing unit 24 and a second vital processing unit 26 that is separate and diverse from the first vital processing unit 24. First vital processing unit 24 and second vital processing unit 26 each comprise a suitable processing device such as, without limitation, a field programmable gate array (FPGA), a microprocessor, or a microcontroller. As used herein, the term diverse shall mean that the vital processing units 24, 26 are of a different kind, form, or character such that their failure modes will be different. For example, they may be different models or brands of FPGAs or microcontrollers. As seen in
WIU 6 is structured to enable first vital processing unit 24 and second vital processing unit 26 to communicate with one another. In addition, first vital processing unit 24 and second vital processing unit 26 are each operatively coupled to a non-vital communications processing unit 28, such as an FPGA, a microprocessor, or a microcontroller, which in turn is operatively coupled to a wireless communications unit 30, such as an RF radio element. As described in greater detail herein, first vital processing unit 24 and second vital processing unit 26 implement a two-out-of two (2oo2) voting architecture which receives voltage and current readings taken from signal lamp head 4 and declares an aspect for the signal lamp head 4 based thereon. That aspect is then communicated to non-vital communications processing unit 28, which then causes the aspect to be wirelessly transmitted via wireless communications unit 30.
As seen in
In addition, as noted above, wayside signaling system 2 includes current sensing unit 8. As seen in
According to an aspect of one exemplary embodiment of the invention, the voltages received by first vital processing unit 24 are provided to second vital processing unit 26 and the voltages received by second vital processing unit 26 are provided to first vital processing unit 24. Each of the vital processing units 24, 26 then compares the voltages it received directly from its input channel to the voltages it received from the other one of the vital processing units 24, 26. In an alternative embodiment, the vital processing units 24, 26 will exchange their determinations as to which lamp elements 10, 12, 14 are being commanded to be on, and then compare those determinations. If the results of the comparisons in each of the vital processing units 24, 26 agree, then the voltage data received by both first vital processing unit 24 and second vital processing unit 26 will be deemed valid and suitable for future use as described herein. However, if the comparisons disagree, then an error state will be declared and reported to non-vital communications processing unit 28.
In addition, the first vital processing unit 24 and the second vital processing unit 26 will also exchange the current data each received from the respective first current sensor 32 and second current sensor 34. Each of the vital processing units 24, 26 will then compare the current reading it received directly from its input channel to the inverse of the current reading it received from the other one of the vital processing units 24, 26. If this comparison determines that the current readings agree, then the current data received by both first vital processing unit 24 and second vital processing unit 26 will be deemed valid and suitable for future use as described herein. However, if the current readings disagree, then an error state will be declared and reported to non-vital communications processing unit 28. As will be appreciated, this implementation protects against problems/failures that may occur in the input channels of either first vital processing unit 24 or second vital processing unit 26 and/or in current sensing unit 8.
Furthermore, first vital processing unit 24 and second vital processing unit 26 is each programmed to independently determine an aspect for signal lamp head 4 based on voltage and current data. In the exemplary embodiment, first vital processing unit 24 and second vital processing unit 26 will only act upon and process voltage and current data that is determined to be valid as just described. More specifically, first vital processing unit 24 and second vital processing unit 26 are each programmed with software which applies a series of logic cross checks to voltage and current data to determine the aspect of signal lamp head 4. In an exemplary embodiment, the cross-check logic implemented in each of the vital processing units 24, 26 is based on the truth table shown in
As seen in
Once each of first vital processing unit 24 and second vital processing unit 26 has independently determined an aspect for signal lamp head 4, each provides its determined aspect to the other and a voting process is performed to determine a final declared aspect for signal lamp head 4, with the final declared aspect in the exemplary embodiment being either Red, Yellow, Green, Dark or Error. In the voting process according to the exemplary embodiment, if the independently determined aspects agree, then that is the final declared aspect. If, however, the independently determined aspects do not agree, then the most restrictive of the two is deemed the final declared aspect. In an alternative embodiment, if the independently determined aspects do not agree, then the final declared aspect may be deemed to be Error.
Furthermore, according to an aspect of the exemplary embodiment of the present invention, the final determined aspect is communicated to non-vital communication processing unit 28 in a manner wherein a part of the message comes from each of first vital processing unit 24 and second vital processing unit 26 (the units act cooperatively). In particular, in the exemplary embodiment, the final determined aspect is communicated to non-vital communication processing unit 28 bit by bit with the first vital processing unit 24 and second vital processing unit 26 providing alternating bits (i.e., odd bits in the message are communicated by one of first vital processing unit 24 and second vital processing unit 26 and even bits in the message are communicated by the other of first vital processing unit 24 and second vital processing unit 26). Thus, the message ultimately constructed by non-vital communication processing unit 28 from the received bits will only be valid if the final declared aspect that is communicated from each of first vital processing unit 24 and second vital processing unit 26 agree. If they do not agree, the message that is constructed by non-vital communication processing unit 28 from the received bits will not be able to be validated by and will not make any sense to, for example, the on-board computer of an oncoming train. For example, such a message will not be able to be validated using a cyclic redundancy check (CRC) that is by design incorporated into the message/data stream. This protects against possible failures in each of first vital processing unit 24 and second vital processing unit 26 that may cause the final declared aspect that is communicated to be differ than that which was determined during the voting process (e.g., where an output channel or buffer of first vital processing unit 24 or second vital processing unit 26 is stuck in a certain condition).
While preferred embodiments of the invention have been described and illustrated above, it should be understood that these are exemplary of the invention and are not to be considered as limiting. Additions, deletions, substitutions, and other modifications can be made without departing from the spirit or scope of the present invention. Accordingly, the invention is not to be considered as limited by the foregoing description but is only limited by the scope of the appended claims.
This application claims priority under 35 U.S.C. §119(e) from U.S. Provisional Application No. 61/331,875, entitled “Combinational Use of Voltage and Current Inputs for Vital Signal State Detection in Overlay Rail Signal Monitoring”, filed on May 6, 2010, the disclosure of which is incorporated herein by reference.
Number | Date | Country | |
---|---|---|---|
61331875 | May 2010 | US |