EP3415399B1 - System for fail-safe powering of an electrical consumer with a redundant power bus - Google Patents

Description

The present invention relates to a system for the fail-safe supply of an electrical load with a redundant power bus.

Such decentralized functional units are used in particular in rail transport networks such as the railroad, where these are used to control vehicle influencing and / or vehicle monitoring units and to monitor functionality and to record process data and back to a central control and / or Monitoring center, such as a control center or a signal box, to report. As Zugbeeinflussende units that give instructions to the driver or even make direct intervention in the vehicle control or directly set a safe track, for example, signals, points, balises, line conductors, track magnets and the like, as well as sensors for detecting process variables of the moving train, such as power consumption, speed and the like. As train and track section monitoring units can also balise and line conductors, but also axle and track circuits and other train detection systems are called. Basically, however, the present invention relates to all industrial plants in which functional units are distributed over long distances and yet must be centrally controlled. The central controller can be perceived by a stationary control center, but also by a non-stationary virtual control center.

1. a) ein übergeordnetes Steuerungssystem, das mit den dezentralen Funktionseinheiten mittels Datentelegrammen Informationen austauscht,
2. b) ein Datentransportnetzwerk mit einer Anzahl von Netzzugangspunkten, wobei das übergeordnete Steuerungssystem über mindestens einen Netzzugangspunkt an dem Datentransportnetzwerk angekoppelt ist;
3. c) Kommunikationseinheiten, die jeweils an einem Netzzugangspunkt angeschlossen sind, wobei:
4. d) die dezentralen Funktionseinheiten zu Untergruppen mit jeweils eigenem Subnetzwerk zusammengefasst sind; und wobei
5. e) das Subnetzwerk jeder der Untergruppen an jedem seiner beiden Ende jeweils über eine Kommunikationseinheit und über einem Netzzugangspunkt an dem Datentransportnetzwerk angekoppelt ist.

From the Sinet® project of Siemens Switzerland AG and the corresponding European patent application EP 2 301 202 A1 a device and a method for controlling and / or monitoring decentralized functional units arranged along a traffic network are known, which comprise the following key points:

1. a) a higher-level control system which exchanges information with the decentralized functional units by means of data telegrams,
2. b) a data transport network having a number of network access points, wherein the higher-level control system is coupled to the data transport network via at least one network access point;
3. c) communication units each connected to a network access point, wherein:
4. d) the decentralized functional units are combined into subgroups, each with its own subnetwork; and where
5. e) the subnetwork of each of the subgroups at each of its two ends is coupled to the data transport network via a communication unit and via a network access point.

In this way, a digital data transport network can be used for the coupling of the decentralized functional units, which is robust in any way against a simple error event, yet a very clever use of very widely used in railway engineering Cu cables, for example, previously existing interlocking cables allowed and finally only a comparatively small number of network access points needed.

Such a device is used in a particularly advantageous manner for a rail network for rail transport. Consequently, it is then expedient, by means of the decentralized functional units traffic-monitoring and traffic-controlling Functional units, such as in particular signals, switches, axle counters, track circuits, point and line train control elements to couple to the data transport network.

The construction of technical facilities, especially in railway infrastructure, is based on robustness and reliability due to the more than 100 years of history of industrial plant construction and railway engineering. In the former conception, the outer elements of the railway safety systems were connected via relatively strong cable cores in order to be able to reliably detect the switching states over the defined distances, ie the design takes place according to the peak loads with sufficient reserve. With the switching operation of the outer elements, the information is transmitted via the energy supply. It follows, however, in an obvious way, that the possible distances are limited by the detectable energy flow. Among today's flexibility, cost and resource policy aspects, these established concepts are in addition to those through the EP 2 301 202 A1 It is urgently necessary to innovate the disclosed communication structure in the field of energy supply, thus dissolving the previous coupling of information and energy.

1. a) ein übergeordnetes Steuerungssystem, das mit den dezentralen Funktionseinheiten mittels Datentelegrammen Informationen austauscht,
2. b) ein Datentransportnetzwerk mit einer Anzahl von Netzzugangspunkten, wobei das übergeordnete Steuerungssystem über mindestens einen Netzzugangspunkt an dem Datentransportnetzwerk angekoppelt ist;
3. c) Kommunikationseinheiten, die an einem Netzzugangspunkt angeschlossen sind und den dezentralen Funktionseinheiten den Zugang zu dem Datentransportnetzwerk bereitstellen, und
4. d) ein Energietransportnetz, an das die dezentralen Funktionseinheiten angeschlossen sind und das die dezentralen Funktionseinheiten mit elektrischer Energie versorgt. Auf diese Weise ist nun auch das Energietransportnetz vollkommen von einem Stellwerk entkoppelt.

For this purpose, the international patent application discloses WO 2013/013908 A1 a solution. This solution provides a device and a method for operating decentralized functional units arranged in an industrial plant, comprising:

1. a) a higher-level control system which exchanges information with the decentralized functional units by means of data telegrams,
2. b) a data transport network with a number of network access points, wherein the parent Control system is coupled via at least one network access point on the data transport network;
3. c) communication units which are connected to a network access point and provide access to the data transport network to the decentralized functional units, and
4. d) an energy transport network to which the decentralized functional units are connected and which supplies the decentralized functional units with electrical energy. In this way, the energy transport network is now completely decoupled from a signal box.

Based on today's interlocking architecture with decentralized stations, but point-to-point energy supply, this is a new, innovative approach, which was sold by Siemens Switzerland AG under the name Sigrid®. Today's cable-intensive and labor-intensive point-to-point connections for the power supply or power supply of the peripheral elements along the track (element controller or decentralized functional unit) are replaced by wire-saving and easy-to-install bus or ring circuits.

The in the WO 2013/013908 A1 However, the solution disclosed is by no means limited to the described application of the interlocking architecture of railway facilities, but goes far beyond that. Future examples include energy management for buildings or large-scale plants in the manufacturing or processing industries based on decentralized energy supply.

If the power bus is routed between two signal boxes or other devices connected to the power supply networks, the Supply of the connected consumers (decentralized functional units) from both feed sides. This creates a previously unavailable redundancy of the energy supply. The decentralized functional units - also known as element controllers or EC for short) are connected to the data bus and the power bus via network node units - also called bus couplers or SNDs for short - which can assume control, monitoring and diagnostic functions. For example, the SNDs can interrupt or bypass the power bus, as well as measure currents and voltages in the power bus.

Simple defects, such as short circuits or interruptions, in the power bus, if properly handled due to the redundancy do not directly lead to a failure of elements. In the case of a failed feed side, the supply of all decentralized functional elements would be taken over by the second feed side. A method and system for the corresponding treatment and prevention of short circuits of the power bus are known from the European patent application EP 3 109 128 A1 known. Central here are the control mechanisms and the network node units, which can selectively separate the power bus in the event of a fault to each of the two coupling sides.

The decoupling of the energy from the power bus to be supplied to the decentralized functional units but has to be controlled in order to ensure high availability even in case of failure. This decoupling with the necessary shutdown functions is taken over by the network node units. However, in order to be able to master all possible error cases (overload in a segment of the power bus or to a consumer), the network node unit has controllable switches around the power bus to the left, to the right and to the To interrupt consumers. Such a equipped network node unit is for example in the above-mentioned European patent application EP 3 109 128 A1 described in detail.

However, it is critical that this network node unit is a single non-redundant element in the power supply chain up to the decentralized functional unit. In other words, this means that a failure of this network node unit, such as a failure of the control unit of the network node unit, has a negative effect on the overall availability of the industrial plant, although the power bus itself is always available due to its redundant design. An obvious solution would be the insertion of a second redundant network node unit, which, however, is considered disadvantageous for cost and maintenance reasons.

The present invention is therefore an object of the invention to provide a system for fail-safe supply of an electrical load with a redundant running power bus, in which even the failure of a network node unit does not cause a decentralized functional units is completely decoupled from the supply of electrical energy.

1. a) ein übergeordnetes Steuerungssystem vorgesehen ist, das mit den dezentralen Funktionseinheiten mittels Datentelegrammen Informationen über einen Datenbus austauscht,
2. b) Netzknoteneinheiten sequentiell zwischen zwei Speisepunkten eines ringartig aufgebauten Energiebusses angeordnet sind, die den dezentralen Funktionseinheiten den Zugang zu dem Energiebus und optional auch zum Datenbus bereitstellen,
3. c) die Netzknoteneinheiten über ein von einer Steuereinheit steuerbares Schaltmodul verfügen, das einen ersten Schalter und einen zweiten Schalter umfasst, wobei mit den beiden Schaltern je ein Zugang zu den beiden Speisepunkten des Energiebusses schaltbar ist,
4. d) auf jeder Seite der dezentralen Funktionseinheit je eine zwischen der positven und der negativen Ader des Energiebusses angeordnete Widerstandsbaugruppe vorgesehen ist, deren Ausgang an je einen Eingang einer Schaltgruppe gelegt ist, die eine der beiden Adern des Energiebusses mit der dezentralen Funktionseinheit verbindet, wobei die Widerstandsbaugruppe so eingestellt ist, dass die Schaltgruppe bei Vorhandensein der Busspannung leitend ist; und
5. e) je ein auf den Ausgang der Widerstandsbaugruppe geschalteter Steuerausgang, mit dem die von der Widerstandsbaugruppe bereitgestellte Ausgangsspannung manipulierbar ist.

The object is achieved according to the invention by a system for fail-safe supply of an electrical load with a redundantly designed power bus, via which are arranged in a railway safety system decentralized as electrical consumers characterizable functional units are supplied with electrical energy, wherein

1. a) a higher-level control system is provided, which with the decentralized functional units means Data telegrams exchanges information via a data bus,
2. b) network node units are arranged sequentially between two feed points of a ring-shaped power bus, which provide the decentralized functional units access to the power bus and optionally also to the data bus,
3. c) the network node units have a controllable by a control unit switching module comprising a first switch and a second switch, wherein the two switches each having an access to the two feed points of the power bus is switchable
4. d) is provided on each side of the decentralized functional unit depending disposed between the positive and the negative wire of the power bus resistor assembly whose output is connected to each input of a switching group that connects one of the two wires of the power bus with the decentralized functional unit, said Resistor assembly is set so that the switching group is conductive in the presence of the bus voltage; and
5. e) one each connected to the output of the resistor assembly control output, with which the output voltage provided by the resistor assembly can be manipulated.

In this way it is ensured that the decentralized functional units remain connected to the power bus even if the switching functions or their control mechanisms / logic should fail. Due to the falling across the resistor assembly voltage between the positive and negative wire of the power bus is thus always a voltage available in the presence of the bus voltage on at least one of the two sides, which connects the switching group and thus always connects the decentralized functional unit with the two wires of the feed bus ,

A failure of the network node unit thus no longer has a negative impact on the availability of the decentralized functional unit coupling to it.

In an advantageous embodiment of the invention, the first switch and the second switch each comprise two counter-switched in the respective bus core field effect transistors whose gate electrodes are controlled by the control unit. A branch provided between the field-effect transistors from the respective bus core to the decentralized functional unit can thus be connected to each of the two supply sides by the corresponding wiring of the respective gate electrode (s) and also selectively separated.

Furthermore, the switching groups may each comprise a field-effect transistor whose gate electrode is at the potential of the control output. Thus, by adjusting the potential applied to the control output, it is possible to intentionally disconnect the decentralized functional unit from one of the two or both feed sides of one of the bus wires.

With regard to the control of the control output, a particularly easily configurable and also cost-effective solution can be provided if the control output can be controlled by an FPGA, which is preferably a component of the control unit.

Further advantageous embodiments of the present invention can be taken from the remaining subclaims.

Figur 1

in schematischer Ansicht eine Stellwerkarchitektur mit einem Datenbus und einem Energiebus;

Figur 2

in schematischer Ansicht eine Netzknoteneinheit zur Verbindung einer dezentralen Funktionseinheit mit dem Datenbus und Energiebus; und

Figur 3

in schematischer Ansicht eine Ausführungsvariante für die Beschaltung eines Schaltmoduls einer Netzknoteneinheit.

Advantageous embodiments of the present invention will be explained in more detail with reference to the drawing. Showing:

FIG. 1

a schematic view of a interlocking architecture with a data bus and an energy bus;

FIG. 2

a schematic view of a network node unit for connecting a decentralized functional unit with the data bus and power bus; and

FIG. 3

a schematic view of an embodiment variant for the wiring of a switching module of a network node unit.

FIG. 1 schematically shows an interlocking architecture with a system Sys, which has, inter alia, a signal box STW, a redunant built data backbone NB1, NB2, a data bus CB and an energy bus EB with two feed points PS1 and PS2. The interlocking STW controls a train traffic on a track section G, in which signals S, points W, a level crossing Bue and axle counter AC are arranged. These train protection and train control components each couple to a decentralized functional unit - also called element controller unit E - on the data bus CB and the power bus EB. The decentralized functional units E are connected to the annular data bus CB in such a way that either access to the data backbone NB1 or NB2 is given via each side of the annular data bus CB. The data bus CB coupled with corresponding routers / switches SW to the respective data backbone NB1, NB2. In addition, the sequential connection of the Element Controller Unit E to the annular power bus ensures that each Element Controller Unit E can be supplied redundantly with electrical energy from both sides.

FIG. 2 now shows schematically the data and power supply connection of the Element Controller Unit E of a train control component, here for example a switch W, to the data bus CB and the power bus EB. Such an attachment point comprises a network node unit SND and the actual element controller EC. The network node unit SND comprises a communication unit SCU for data exchange over both branches of the data bus CB. On the energy side, the network node unit SND is designed so that it couples to both branches of the power bus EB and thus always, if necessary, across other network node units SND away - an access to both feed points PS1 and PS2 consists (as in FIG. 1 shown). The network node unit SND further has a control and evaluation logic SL, which can be integrated, for example, in the switching module S, and thus controls and monitors the power bus EB. In particular, the control and evaluation logic detects current violations and / or voltage dips within the power bus EB and / or the connected consumer (SPU with EC) and evaluates this data for a possibly present short circuit.

Thus, the network node unit is always supplied in redundant manner from two sides with electrical energy and therefore has in the context of a switching module S via a left switch S1 and a right switch S2 and a load switch S3 to the supply unit SPU of the element controller EC.

The network node unit SND also supplies the communication unit SCU with voltage and can also exchange data with it via an Ethernet connection and is thus integrated in the data bus CB (eg activation of manual operation of the SND via remote access and actuation of the switches S1 to S3, delivery of diagnostic data to the interlocking or a higher-level service and Diagnosesytem, query the current voltages, currents, energy and power values, parameterization of the SND, data for charging a not further illustrated energy storage or the registration of future power requirements). In the network node unit SND here the supply unit SPU is integrated via the switch S3, which converts the voltage of the power bus EB to the input voltage required for the element controller EC. In addition, a data connection between the switching module S of the network node unit SND and the supply unit SPU, for example in the form of a serial RS 422 or Ethernet, is provided. Energy-technically typical here is, for example, a three-phase connection with 400 VAC. The element controller EC controls and supplies in FIG. 2 In the present case, the switch W receives the element controller EC data telegrams from a higher-level interlocking CPU via an Ethernet connection from the communication unit SCU and are via this communication unit SCU feedback to the interlocking computer CPU. The interlocking computer CPU can also represent a corresponding evaluation module that evaluates the received data as intended. Alternatively, it is also possible to provide a control unit on the network node unit, which is designed to be more intelligent and can therefore perform a large part of the tasks mentioned above directly on the network node unit SND.

FIG. 3 schematically shows an alternative embodiment for the wiring of the switching module S of any network node unit SND. The switching module S comprises the first switch S1 and the second switch S2, the present case in each case two in the respective bus core bus +, bus counter-switched field effect transistors T1, T2, T3, T4 whose gate electrodes can be controlled by the control unit (not shown here), which is indicated by arrows 30. With these switches S1 and S2, the energy bus can be selectively interrupted (eg for the isolation / disconnection of defective sections). To block unauthorized current paths also diodes D1 to D4 are provided. The in FIG. 3 illustrated switch S3 has now been divided into two on the negative bus core bus- coupling switches S3 and S4, with which the functional unit E can selectively turn on only the power bus EB left or right, if this is separated by means of switch S1 and switch S2. These switches are also field-effect transistors T5, T6. On each side of the decentralized functional unit E, a resistance module RG1, RG2, which is provided between the positive core bus + and the negative wire bus of the power bus EB, is now arranged. The output A1, A2 of this resistor group RG1, RG2 is respectively connected to the gate electrode of the switches S3, S4. Here, the resistor assembly RG1, RG2 here dimensioned / set so that the switches S3, S4 are conductive in the presence of the bus voltage. In addition, on each gate electrode of the switch S3, S4, a control output ST1, ST2 (coming for example from a FPGA of the control unit) connected to the already provided by the resistor assembly RG1, RG2 output voltage can be manipulated to, for example, the switches S3 and S4 to open. The control output ST1, ST2 does not necessarily change the parameterization of the resistor group RG1, RG2 (one could also set up the device so that this would be possible), but draws, for example, the output voltage provided by the resistor group to the value NULL.

In this way, the decentralized functional units E remain connected to the power bus EB even if the switching functions of the switches S1 and S2 or the control mechanisms / logic should fail. Due to the drop across the resistor assemblies RG1, RG2 voltage between the positive wire Bus + and the negative wire bus of the power bus EB is in the presence of the bus voltage on at least one of the two sides so always a voltage available, which switches the switches S3, S4 and Thus, the decentralized functional unit E always connects to the two wires Bus +, bus- of the feed bus EB. A failure of the network node unit SND thus no longer has a negative impact on the availability of the decentralized functional unit E.

Claims (4)

1. System (Sys) for fail-safe supplying of an electrical consumer (E) with a redundantly designed energy bus (EB), via which decentralised functional units (E, S, W, Bue, AC), which are arranged in a rail safety installation and can be characterised as electrical consumers, are supplied with electrical energy, wherein:

   a) a higher-level controller system (STW) is provided, which exchanges information with the decentralised functional units (E) by means of data telegrams via a data bus (CB),

   b) network node units (SND) are arranged sequentially between two feed points (PS1, PS2) of an energy bus (EB) with an annular construction, which provide the decentralised functional units (E) with access to the energy bus and optionally also to the data bus (CB),

   c) the network node units (SND) possess a switch module (S) which can be controlled by a control unit (CPU), which comprises a first switch (S1) and a second switch (S2), wherein access to the two feed points (PS1, PS2) can be switched by the two switches (S1, S2),

   d) there is provision on each side of the decentralised functional unit (E) for a resistor subassembly (RG1, RG2) arranged between the positive conductor (Bus+) and the negative conductor (Bus-) of the energy bus (EB) in each case, the output of which (A1, A2) is connected to an input of a switch group (S3, S4) in each case, which connects one of the two conductors (Bus+, Bus-) of the energy bus (EB) to the decentralised functional unit (E), wherein the resistor subassembly (RG1, RG2) is configured such that the switch group (S3, S4) connects through in the presence of the bus voltage; and

   e) a control output (ST1, ST2) connected to the output of the resistor subassembly (RG1, RG2) in each case, with which the output voltage provided by the resistor subassembly (RG1, RG2) can be manipulated.
2. System according to claim 1,
   characterised in that
   the first switch (S1) and the second switch (S2) each comprise two field effect transistors (T1 to T4) connected into the respective bus conductors (Bus+, Bus-) in an opposed manner, the gate electrode of which is able to be controlled by the control unit.
3. System according to claim 1 or 2,
   characterised in that
   the switch groups (S3, S4) each comprise a field effect transistor (T5, T6), the gate electrode of which lies at the potential of the control output (ST1, ST2).
4. System according to claim 3,
   characterised in that
   the control output (ST1, ST2) is able to be actuated by an FPGA, which is preferably a constituent part of the control unit of the network node unit (SND).

Images