Vital processing system adapted for the continuous verification of vital outputs from a railway signaling and control system

• US 4,740,972 A
• Filed: 03/24/1986
• Issued: 04/26/1988
• Est. Priority Date: 03/24/1986
• Status: Expired due to Term

• Current Assignee: Sasib SpA (Is Company SRL)
• Original Assignee: General Signal Corporation (SPX Corporation)
• Inventors: Rutherford, David B. Jr.
• Primary Examiner(s): Smith, Jerry
• Assistant Examiner(s): BEAUSOLIEL JR, ROBERT W
• Application Number:
  US06/843,468
• Time in Patent Office: 764 Days
• Field of Search: 371/14, 371/15, 371/16, 371/25, 371/27, 371/37, 371/53, 371/67, 371/70, 246/3, 246/4, 246/5, 246/28 F, 340/507
• US Class Current: 714/807
• CPC Class Codes: B61L 1/20 Safety arrangements for preventing or indicating malfunction of the device, e.g. by leakage current, by lightning
• CPC Class Codes: G06F 11/0763 by bit configuration check, e.g. of formats or tags
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
• CPC Class Codes: G06F 11/08 Error detection or correction by redundancy in data representation, e.g. by using checking codes

Abstract

Continuous verification of vital (fail-safe) outputs from an information processing system is obtained without the need for large computing capacity (overhead). Multibit test sequences are provided continuously during successive subparts of the processor system cycle to vital output interfaces which invert the bits of the signals or do not pass them depending upon the state of the output. A compiler including a random access memory (RAM) addressed by a read only memory (ROM) is configured to divide each sequence by direct and inverse polynomials on alternately occurring parts of the system cycle to provide compressed data. After each part of the system cycle, checkwords are constructed using the resultant compressed data corresponding to each output which must be proven to be in its `off` state. These checkwords are used to verify the vital operation of the system and may be applied to a vital decoder which controls the application of operating power to the output interfaces to disconnect operating power therefrom and condition the outputs to the restrictive state upon detection of a failure which may occur at any time during the entire system cycle.

Claims

1. The method of testing a signaling channel of a system having an operating cycle which comprises the steps of generating a plurality of successive words during substantially all of each of a plurality of successive subcycles of said cycle to produce pluralities of words in each of said subcycles, inputting said pluralities of words into and outputting said pluralities of words from said channel throughout said operating cycle to produce pluralities of outputted words continuously throughout said cycle, each plurality of said pluralities of said outputted words being produced during a different one of said subcycles, compiling the pluralities of outputted words into output words which reflect the format of each said plurality of outputted words and the effect thereon of said channel, and verifying the operation of said channel from said output words.

2. The method according to claim 1 wherein said compiling step is carried out by dividing each word of said plurality of outputted words by a polynomial to provide each of said output words.

3. The method according to claim 2 wherein said dividing step is carried out with a different polynomial during different ones of said successive subcycles.

4. The method according to claim 3 wherein said different polynomials are two polynomials, one being the inverse of the other.

5. The method according to claim 4 wherein said dividing step is carried out with said one and said other polynomials during alternate ones of said successive subcycles.

6. The method according to claim 1 wherein said channel has a circuit which reflects the output state thereof, said inputting and outputting steps being carried out by applying said pluralites of successive words to said circuit and detecting outputted words said therefrom.

7. The method according to claim 6 wherein said circuit is an absence of current detector (AOCD) wherein the presence and absence of current represents the state of said output, said circuit having a saturable magnet core and a control winding through which the state representing current passes and input and output windings, said inputting step is carried out by presenting multibit digital signals representing each plurality of said pluralities of successive words to said input windings and said outputting step is carried out by detecting said digital signals at said output winding.

8. The method according to claim 1 wherein said successive word generating step is carried out with the aid of memory means having storage for multibit words, said inputting step is carried out by applying repetitively, sequences of said successive bits from said memory means to said channel.

9. The method as set forth in claim 8 wherein said system comprises a plurality of said channels and said memory means has storage for a plurality of unique multibit words for each of said channels, and said inputting step for each channel is carried out with a different one of said unique multibit words from said memory means, and said compiling and verifying steps are carried out separately for each said channel.

10. The method of testing a signalling channel of a system having an operating cycle which comprises the steps of generating a plurality of successive words during each of a plurality of successive parts of said cycle to produce pluralities of words, inputting said pluralities of words into and outputting said pluralities of words from said channel throughout the operating cycle to produce pluralities of outputted words continuously throughout said cycle, compiling the pluralities of outputted words into output words which reflect the format of said plurality of words and the effect thereon the said channel, said compiling step including the step of dividing each word of said plurality of outputted words by a polynomial to provide each of said output words, said dividing step being carried out with the aid of a RAM having storage for the bits of each of said words in different locations thereof by presenting each bit of each of said outputted words and conducting a plurality of exclusive or logical operations in sequence utilizing each bit of said outputted words and the bits stored in the locations of said RAM selected in accordance with said polynomial and shifting the locations upon presentation of a successive bit of said outputted word, and verifying the operation of said channel from said output words.

11. The method according to claim 10 wherein said locations are obtained by addressing said RAM for readout and write-in of bits at said selected locations during each of said exclusive or operations for each of the bits of said output words.

12. The method according to claim 11 further comprising the step of reading out each of said locations of said RAM during each of said parts of said cycle to provide said output words.

13. The method according to claim 12 further comprising the step of initializing said RAM by writing like bits in all locations thereof prior to said dividing operation during each of said parts of said cycle.

14. The method according to claim 11 wherein said addressing step is carried out with the aid of a read-only memory (ROM) and controlling the addressing of said RAM and the timing of said exclusive or operations with said ROM, reading out selected locations of said ROM during each of said parts of said cycle.

15. In a vital information processing system adapted for railway signaling and control operations and having means for detecting the state of the outputs therefrom, a system for vital verification of the state of the outputs from the processing system continuously during each processing system cycle, said verification system comprising means for generating a plurality of input word sequences, each of said input said sequences containing a plurality of unique multibit input words, repeatedly during substantially all of each of a plurality of successive subcycles of the system cycle;

means for transmitting said input word sequences through said detecting means for providing during each of said subcycles a plurality of sequences of outputted words corresponding to said input word sequences and dependent upon the state of the outputs;

means for compiling each of said sequences of outputted words into a multibit output word for each of said sequence of outputted words, the value of which depends upon the absence or presence of a failure mode in the system, for use in said processing system to verify that the state of said outputs is vital.

16. In a vital information processing system adapted for railway signaling and control operations and having means for detecting the state of the outputs therefrom, a system for vital verification of the state of the outputs from the processing system continuously during each processing system cycle, said verification system comprising means for generating a plurality of input word sequences, each of said input word sequences containing a plurality of unique multibit words, repeatedly during each of a plurality of successive parts of the system cycle;

means for transmitting said input word sequences through said detecting means for providing a plurality of sequences of outputted words corresponding to said input word sequences and dependent upon the state of the outputs;

means for compiling each of said sequences of outputted words into a multibit output word for each of said sequences of output words, the value of which depends upon the abscence or presence of a failure mode in the system, for use in said processing system to verify that the state of the outputs is vital, and said compiling means comprising means for dividing each sequence of outputted words in each plurality of sequences by at least one polynomial.

17. The system according to claim 16 wherein said dividing means includes means for dividing alternate pluralities of sequences of outputted words by different polynomials.

18. The system according to claim 17 wherein said means for dividing is operative to divide said alternate pluralities of an outputted word sequences by polynomials which are the inverse of each other.

19. The system according to claim 16 wherein the said sequences each have a given number of bits, said dividing means comprises RAM means having location for storage of the remainder of the division of each sequence of outputted words by the polynomial, ROM means for addressing said RAM means to enable read-in and write-out from different locations of said RAM means a plurality of times for each bit of each of said sequences, said dividing means also including logic means including means for providing exclusive or operations, and means controllable by said processing system for reading out said RAM means and presenting each bit of each said sequence and each of said sequences a plurality of times to said logic means together with the contents of different locations of said RAM means selected in accordance with said polynomial to provide said output word in said locations in said RAM means for each plurality of said outputted word sequences.

20. The system according to claim 19 wherein said ROM means has locations for addressing said RAM and to effect division by different polynomials during the presentation of the plurality of sequences of bits which occur during different ones of said successive parts of said system cycle.

21. The system according to claim 19 herein said generating means comprises memory means including ROM means having storage for said unique input words, for each of said outputs of said processing system.