JP2021195010A - Relay output control device - Google Patents

Abstract

To provide a relay output control device improving the safety.SOLUTION: In a relay output control device 1, a control unit 10 determines failure based on contact checking signals OUTRAS and OUTRBS of a contact of an output relay OUTR input from a check input circuit 22 and a detection signal OPWS in an open/close state of a switch SW2 input from a sensor 24. When it is determined that the failure does not occur, a normal signal OK serving as an alternation signal is output to a rectification driving circuit 26 to operate a normal relay OKR.SELECTED DRAWING: Figure 1

Description

The present invention relates to a relay output control device used in a railway signaling security system.

The equipment used in railways is required to be fail-safe in order to ensure the safety of transportation. Of course, there is also a relay output control device used in a railway signaling system that drives an output relay and outputs its contacts. In order to satisfy this requirement, for example, in the relay output control device (relay output device) disclosed in Patent Document 1, the contact of the output relay is input to check the rationality of the output, and the output relay is controlled to the recovery side. In this state, the output power supply application control switch connected in series to the contacts of the output relay is turned on for a short time to check the soundness of the switch element. If a failure is determined in these checks, the output relay is controlled to the recovery side and the switch element is controlled to the cutoff side to stop the output function, thereby ensuring the safety of the device.

Japanese Patent No. 4494313

However, in the above-mentioned relay output control device of Patent Document 1, it has been found that if a conduction failure occurs at the same time in the output relay drive circuit and the output power supply application control switch element, the output may be on the dangerous side.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a relay output control device for safety.

The first invention for solving the above problems is
A control unit (for example, the control unit 10 in FIG. 1) and
An output relay (for example, the output relay OUTR in FIG. 1) controlled by a relay control signal from the control unit, which is a DC signal,
A check input circuit (for example, the check input circuit 22 in FIG. 1) that checks the contacts of the output relay and outputs a contact check signal to the control unit.
A rectifying drive circuit (for example, the rectifying drive circuit 26 in FIG. 1) that rectifies a normal signal from the control unit, which is an alternating signal, to generate a drive signal, which is a DC signal.
A normal relay controlled by the drive signal (for example, the normal relay OK in FIG. 1) and
A switch whose opening / closing control is controlled by an opening / closing control signal from the control unit, which is a DC signal, and the output power supplied through the contact of the normal relay is supplied to the contact of the output relay by the opening / closing control. With a switch (for example, switch SW2 in FIG. 1),
A sensor (for example, the sensor 24 in FIG. 1) that detects the open / closed state of the switch and outputs a detection signal to the control unit.
Equipped with
The control unit
A failure is determined based on the contact check signal and the detection signal, and when it is determined that there is no failure, the normal signal for operating the normal relay is output.
It is a relay output control device.

According to the first invention, it is possible to realize a relay output control device for safety. That is, the control unit determines whether the drive circuit of the output relay is faulty based on the contact verification signal, and determines whether the switch that supplies output power to the contacts of the output relay is faulty based on the detection signal. do. The normal relay is operated when both of these two determinations are determined not to be a failure. Thereby, for example, it is possible to determine the simultaneous conduction failure between the drive circuit of the output relay and the switch, and it is possible to obtain a relay output control device for safety.

In addition, a normal signal, which is an alternating signal, is rectified to generate a drive signal, which is a DC signal for operating a normal relay. Therefore, it is possible to operate the normal relay only when it is determined by the failure determination that it is not a failure, stop the normal signal which is an alternating signal when it is determined to be a failure, and prevent the normal relay from operating. Further safety can be achieved.

The second invention is the first invention.
An external output relay (for example, the external output relay OUTPR in FIG. 1) having a longer operating time and recovery time than the output relay is externally connected to the contact of the output relay.
The control unit
When operating the output relay, the failure determination is repeated at a cycle shorter than the operating time of the output relay (for example, the time chart of FIG. 3).
When the output relay is restored, the failure determination is repeated at a cycle shorter than the restoration time of the output relay (for example, the time chart of FIG. 4).
It is a relay output control device.

According to the second invention, there is a time lag from the operation of the output relay to the operation of the external output relay, and from the restoration of the output relay to the restoration of the external output relay. It is possible to prevent the external output relay from operating by repeatedly performing the failure determination during the time difference and not operating the normal relay when the failure is determined. This makes it possible to further improve the safety of the relay output control device.

The third invention is the second invention.
The control unit
When operating the output relay, the rationality of the contact check signal and the detection signal with respect to the combination of the relay control signal and the open / close control signal is set to a predetermined operating determination condition (for example, the truth table of FIG. 6). By repeating the determination based on the combination while changing the combination, the failure determination is repeated.
When the output relay is restored, the rationality of the contact check signal and the detection signal with respect to the combination of the relay control signal and the open / close control signal is set to a predetermined restoration determination condition (for example, the truth table of FIG. 7). By repeating the determination based on the combination while changing the combination, the failure determination is repeated.
It is a relay output control device.

According to the third invention, when operating the output relay, it is determined whether the switch is closed and the output power is supplied to the contacts of the output relay, and when the output relay is restored, it is determined. , It is possible to determine whether or not the switch is in a conduction failure by setting the switch in the open state to the closed state for a short time. Even if the switch is temporarily closed when the output relay is restored, the external output relay does not operate because the operating time of the external output relay is longer than the operating time of the output relay.

Configuration diagram of the relay output control device. A time chart explaining the operation of the relay output controller. A time chart explaining the operation of the relay output controller. A time chart explaining the operation of the relay output controller. An example of a truth table used for failure determination. An example of a truth table used for failure determination. An example of a truth table used for failure determination.

Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings. It should be noted that the embodiments described below do not limit the present invention, and the embodiments to which the present invention can be applied are not limited to the following embodiments. Further, in the description of the drawings, the same elements are designated by the same reference numerals.

[Device configuration]
FIG. 1 is a configuration diagram of the relay output control device 1 of the present embodiment. This relay output control device 1 is used in a railway signaling security system, and is a device that controls an output relay OUTR in response to an externally input control signal to output its contacts to the outside. As shown in FIG. 1, the relay output control device 1 includes a control unit 10 and an input / output unit 20.

The control unit 10 is composed of a fail-safe computer, and has a relay control signal OUT, a check input control signal CHK, an output power supply application control signal OPW which is an open / close control signal, and a normal signal OK for the input / output unit 20. Is output, and the contact check signals OUTRAS and OUTRBS and the detection signal OPWS are input from the input / output unit 20.

The input / output unit 20 includes an output relay OUTR, a normal relay OKR, switches SW1 and SW2, a check input circuit 22, a sensor 24, and a rectification drive circuit 26.

The switch SW1 is a DC signal drive switch whose opening and closing is controlled by a relay control signal OUT, which is a DC signal from the control unit 10. An output relay OUTR is connected to the switch SW1, and the output relay OUTR is controlled by the relay control signal OUT from the control unit 10 by shutting off and supplying the drive power according to the open / closed state of the switch SW1.

The check input circuit 22 checks the contacts of the output relay OUTR by the check input control signal CHK from the control unit 10, and outputs the contact check signals OUTRAS and OUTRBS to the control unit 10. That is, the contact check signal OUTRAS that checks that the A contact (operating contact) of the output relay OUTR is configured in synchronization with the check input control signal CHK and the B contact (recovery contact) are configured. The contact check signal OUTRBS to be checked is output.

The switch SW2 is a DC signal drive switch whose opening and closing is controlled by the output power supply application control signal OPW, which is a DC signal from the control unit 10. The A contact (operating contact) of the output relay OUTR is connected to the switch SW2. The output power supply supplied via the A contact of the normal relay OKR is cut off and supplied (applied) to the A contact of the output relay OUTR by the open / close control of the switch SW2 by the output power supply application control signal OPW.

An external output relay OUTPR provided outside the device and controlled by an output voltage externally output via the A contact of the output relay OUTR is connected to the A contact of the output relay OUTR. Further, the operating time and the recovery time of the external output relay OUTPR are longer than the operating time and the recovery time of the output relay OUTR, for example, about three times as much as the output relay OUTR. Normally, the recovery time of a relay is as short as a fraction of the operating time, but it can be recovered by connecting an absorption circuit for the counter electromotive force of the coil generated when the relay is restored in parallel to the coil. The time can be extended to the same level as the operating time. Therefore, in the following, the operation time and recovery time of each of the output relay OUTR and the external output relay OUTPR are collectively referred to as “response time” as appropriate.

The sensor 24 detects the open / closed state of the switch SW2 and outputs the detection signal OPWS to the control unit 10.

The rectification drive circuit 26 is an AC signal rectification drive circuit that rectifies a normal signal OK which is an alternation signal from the control unit 10, and supplies the rectified signal to the normal relay OK as a drive signal.

[Operation of device]
The control unit 10 determines a failure based on the contact check signals OUTRAS, OUTRBS and the detection signal OPWS from the input / output unit 20, and when it is determined that there is no failure, the normal signal OK, which is an alternating signal for operating the normal relay OKR. Is output. That is, the rationality of determining whether the contact states of the output relay OUTR indicated by the relay control signal OUT and the contact verification signals OUTRAS and OUTRBS match, and the switch SW2 indicated by the output power supply application control signal OPW and the detection signal OPWS respectively. The determination of rationality as to whether the open / closed states match is performed as a failure determination. If it is determined that there is no failure (normal) by the failure determination based on the two rationality determinations, the normal relay OKR is operated with the normal signal OK as the alternating signal. If it is determined to be a failure, the normal relay OKR is restored with the normal signal OK as the L level signal, the output relay OUTR is restored with the relay control signal OUT as the L level, and the output power supply application control signal OPW is the L level switch. Open SW2.

2 to 4 are time charts illustrating the operation of the relay output control device 1. FIG. 2 shows the case where all the input / output data at the time of turning on the power of the present device are cleared and the output relay OUTR is in the restored state, and FIG. 3 shows the case where the output relay OUTR is operated from the restored state of FIG. 4 is a time chart when the output relay OUTR is restored from the operating state of FIG. In each of FIGS. 2 to 4, in order from the top, the relay control signal OUT, the output relay OUTR state, the A contact OUTRA state of the output relay OUTR, the contact check signal OUTRAS of this A contact OUTRA, and the B contact of the output relay OUTR. OUTRB status, this B contact OUTRB contact verification signal OUTRBS, verification input control signal CHK, output power supply application control signal OPW, detection signal OPWS, normal signal OK, normal relay OKR status, external output relay OUTPR status, control unit The signal output timing from the input / output unit 20 to the input / output unit 20, the signal input timing from the input / output unit 20 to the control unit 10, and the control cycle are shown. Further, each figure is a case where the relay output control device 1 is not a failure (normal). The control cycle is a period corresponding to the response time (operating time and recovery time) t of the output relay OUTR. The output timing and the input timing are operation timings for outputting or inputting the control unit 10, and are timings that arrive alternately.

The control unit 10 has a cycle shorter than the control cycle, which is the response time t of the output relay OUTR, and the contact check signals OUTRAS, OUTRBS, which are input from the input / output unit 20 according to the truth table showing an example in FIGS. Failure determination based on the detection signal OPWS is repeated. That is, the contact verification signals OUTRAS, OUTRBS, and the detection signal OPWS corresponding to the combination of the relay control signal OUT, the verification input control signal CHK, and the output power supply application control signal OPW output at each output timing of each control cycle , The failure is determined depending on whether the signal is input from the input / output unit 20 at the subsequent input timing.

Further, according to the truth table showing an example in FIGS. 5 to 7, the combination of the relay control signal OUT, the verification input control signal CHK, and the output power supply application control signal OPW is changed and repeated for each output timing to cause a failure. The judgment is repeated. In the truth table showing an example in FIGS. 5 to 7, the truth value of the input / output data for which the judgment result is normal (not a failure) is set for each judgment timing of the failure judgment immediately after each input timing of each control cycle. It has established. The truth value is the output data that is the logical value of each signal output at the output timing (“1” corresponding to the H level of the signal, “0” corresponding to the L level), and each signal input at the subsequent input timing. It is a combination with the input data which is a logical value (“1”, “0”) of.

Specifically, as shown in FIG. 2, immediately after the power supply is turned on, the relay control signal OUT is “0 (L level)”, and the output relay OUTR is in the restored state. Therefore, the A contact (operating contact) OUTRA of the output relay OUTR is not configured (“0 (L level)”), and the B contact (recovery contact) OUTRB is configured (“1 (H level)”). Further, the output power supply application control signal OPW is "0 (L level)", the switch SW2 is opened, and the output power supply is not applied to the A contact of the output relay OUTR.

In this case, the control unit 10 makes a failure determination according to the truth table shown in FIG. 5 as an example. That is, in each control cycle, in order to judge the rationality of the contact of the output relay OUTR at the first output timing 1, the check input control signal CHK is set to "1 (H level)" and at the third output timing 3. In order to determine the rationality of the switch SW2, the output power supply application control signal OPW is set to "1 (H level)". The relay control signal OUT is always "0 (L level)" because the output relay OUTR is restored.

In this way, the failure judgment was performed four times in succession with different combinations of the values of the relay control signal OUT, the verification input control signal CHK, and the output power supply application control signal OPW output in the control cycle, and all of them were judged to be normal. If so, the alternation signal is output as a normal signal OK at the next output timing, and the alternation signal is continuously output thereafter. From the output of the alternation signal, which is the normal signal OK, the normal relay OKR shifts to the operating state in the second cycle after the time t corresponding to the response time of the normal relay OKR. Further, if a failure (not normal) is determined in the failure determination at each timing of each control cycle, the output of the alternating signal is stopped as a normal signal OK at the next output timing (“0 (L level)”. Is output).

Further, as shown in FIG. 3, when operating the output relay OUTR from the recovery state of FIG. 2, first, at the first output timing 1 of the first cycle, the relay control signal OUT is set to “0 (L level)”. To "1 (H level)". Next, at the output timing 3, the output power supply application control signal OPW is changed from “0” to “1”, and the output power supply is supplied (applied) to the A contact of the output relay OUTR. As a result, in the second cycle after the time t corresponding to the response time of the output relay OUTR, the output relay OUTR operates, the A contact (operating contact) of the output relay OUTR is configured, and the B contact (recovery contact) is configured. Will not be done. After that, the external output relay OUTPR operates in the fifth cycle after a time of 3 tons corresponding to the response time of the external output relay OUTPR. It should be noted that the output of the alternation signal is continued as the normal signal OK, and the normal relay OKR is in the operating state.

In this case, at each determination timing of each control cycle, failure determination is performed according to the truth table shown in FIG. 6 as an example. The truth table showing an example in FIG. 6 determines the rationality of the contact check signals OUTRAS, OUTRBS and the detection signal OPWS for the combination of the relay control signal OUT and the output power supply application control signal OPW when operating the output relay OUTR. This is an example of the operation judgment condition for the operation. That is, at the first output timing 1 of each control cycle, the check input control signal CHK is set to "1" in order to determine the rationality of the contact of the output relay OUTR. Since the output relay OUTR is controlled to the operating state, the relay control signal OUT and the output power supply application control signal OPW are always "1" after being changed to "1". In this way, at each timing of each control cycle, continuous failure determinations in which the combinations of the output relay control signal OUT, the verification input control signal CHK, and the output power supply application control signal OPW are different are repeatedly performed, and the determination is normal. If so, the output of the alternation signal is continued as a normal signal OK, and if it is determined that the signal is not normal (failure), the output of the alternation signal is stopped.

Further, as shown in FIG. 4, when the output relay OUTR is restored from the operating state shown in FIG. 3, first, the relay control signal OUT is changed from “1” to “0” at the first output timing 1. .. Next, at the output timing 3, the output power supply application control signal OPW is changed from "1" to "0" to cut off the supply (application) of the output power supply to the A contact of the output relay OUTR. As a result, in the second cycle after the time t corresponding to the response time of the output relay OUTR, the output relay OUTR is restored, the B contact (recovery contact) of the output relay OUTR is configured, and the A contact (operating contact) is configured. Will not be done. Then, in the fifth cycle after a time of 3 tons corresponding to the response time of the external output relay OUTPR, the external output relay OUTPR is restored. It should be noted that the output of the alternation signal is continued as the normal signal OK, and the normal relay OKR is in the operating state.

In this case, at each determination timing of each control cycle, failure determination is performed according to the truth table shown in FIG. 7 as an example. The truth table showing an example in FIG. 7 determines the rationality of the contact check signals OUTRAS, OUTRBS and the detection signal OPWS for the combination of the relay control signal OUT and the output power supply application control signal OPW when the output relay OUTR is restored. This is an example of the judgment conditions at the time of restoration. That is, at the first output timing 1 of each control cycle, the check input control signal CHK is set to "1" in order to determine the rationality of the contact of the output relay OUTR. Further, in order to judge the rationality of the switch SW2 at the third output timing 3 of each control cycle after the third cycle after the output relay OUTR is in the recovery state, the output power supply application control signal OPW is set to "1". ". Since the relay control signal OUT controls the output relay OUTR to the restored state, it is always “0”. In this way, at each timing of each control cycle, continuous failure determinations in which the combinations of the output relay control signal OUT, the verification input control signal CHK, and the output power supply application control signal OPW are different are repeatedly performed, and the determination is normal. If so, the output of the alternation signal is continued as a normal signal OK, and if it is determined that the signal is not normal (failure), the output of the alternation signal is stopped.

[Action effect]
As described above, according to the present embodiment, the relay output control device 1 with safety can be realized. That is, the control unit 10 determines whether the switch SW1 which is the drive circuit of the output relay OUTR is faulty based on the contact verification signals OUTRAS and OUTRBS, and outputs power to the contact of the output relay OUTR based on the detection signal OPWS. It is determined whether or not the switch SW2 that supplies the signal is defective. The normal relay OKR can be operated when both of these two determinations are determined not to be a failure. Thereby, for example, a failure such as a simultaneous conduction failure of the switches SW1 and SW2 can be determined.

Further, the normal signal OK, which is an alternating signal, is rectified to generate a drive signal, which is a DC signal for operating the normal relay OKR. Therefore, the normal relay OKR is operated only when it is determined by the failure determination that it is not a failure, and the alternation signal is stopped when it is determined to be a failure to prevent the normal relay OKR from operating. Therefore, the relay output control device 1 Further safety can be achieved.

It should be noted that the applicable embodiment of the present invention is not limited to the above-described embodiment, and of course, it can be appropriately changed without departing from the spirit of the present invention.

1 ... Relay output control device 10 ... Control unit 20 ... Input / output unit 22 ... Verification input circuit 24 ... Sensor 26 ... Rectification drive circuit OUTR ... Output relay OKR ... Normal relay SW1, SW2 ... Switch OUTPR ... External output relay

Claims (3)

Control unit and
An output relay controlled by a relay control signal from the control unit, which is a DC signal,
A check input circuit that checks the contacts of the output relay and outputs a contact check signal to the control unit.
A rectifying drive circuit that rectifies a normal signal from the control unit, which is an alternating signal, to generate a drive signal, which is a DC signal.
A normal relay controlled by the drive signal and
A switch whose opening / closing control is controlled by an opening / closing control signal from the control unit, which is a direct current signal, and the output power supplied through the contact of the normal relay is supplied to the contact of the output relay by the opening / closing control. Switch and
A sensor that detects the open / closed state of the switch and outputs a detection signal to the control unit,
Equipped with
The control unit
A failure is determined based on the contact check signal and the detection signal, and when it is determined that there is no failure, the normal signal for operating the normal relay is output.
Relay output controller. An external output relay having a longer operating time and recovery time than the output relay is externally connected to the contact of the output relay.
The control unit
When operating the output relay, the failure determination is repeated at a cycle shorter than the operating time of the output relay.
When the output relay is restored, the failure determination is repeated at a cycle shorter than the restoration time of the output relay.
The relay output control device according to claim 1. The control unit
When operating the output relay, it is determined that the rationality of the contact check signal and the detection signal with respect to the combination of the relay control signal and the open / close control signal is determined based on a predetermined operating determination condition. By changing and repeating, the failure determination is repeated.
When the output relay is restored, the rationality of the contact check signal and the detection signal with respect to the combination of the relay control signal and the open / close control signal is determined based on a predetermined restoration determination condition. By changing and repeating, the failure determination is repeated.
The relay output control device according to claim 2.

Images