Vital solid state controller
First Claim
Patent Images
1. An apparatus comprising a vital processing device coupled to a railroad signaling device coupled to a railroad track, the vital processing device configured to receive an input signal set comprising one or more input signals representing one or more conditions on the railroad track, the vital processing device comprising:
- a first controller device configured to perform a first logic process using the input signal set to generate a first controller device output signal;
a second controller device configured to perform the first logic process using the input signal set to generate a second controller device output signal; and
health check apparatus configured to perform integrity testing of the first and second controller devices;
wherein the first and second controller devices do not share components affording alternative energy or logic paths;
further wherein the vital processing device sets the railroad signaling device to a railroad signaling device safest condition if at least one of the following occurs;
failure of one or more components of the vital processing device;
integrity testing failure by the first controller device;
integrity testing failure by the second controller device; and
further wherein, when the first and second controller devices both pass integrity testing, and when there is no component failure within the vital processing device, the first and second controller device output signals are identical, are a function of the input signal set, and are used to control the railroad signaling device;
a first dedicated relay driver circuit coupled to receive the first controller device output signal, wherein the first dedicated relay driver circuit enables a current generating a first discrete DC voltage signal when the first controller device output signal is high and further wherein the first dedicated relay driver circuit prevents current flow to generate any DC voltage signal when the first controller device output signal is low; and
a second dedicated relay driver circuit coupled to receive the second controller device output signal, wherein the second dedicated relay driver circuit enables a current generating a second discrete DC voltage signal when the second controller device output signal is high and further wherein the second dedicated relay driver circuit prevents current flow to generate any DC voltage signal when the second controller device output signal is low;
wherein the first and second discrete DC voltage signals are required to produce a current flow and voltage differential to energize a relay in the railroad signaling device;
further wherein the first dedicated relay driver circuit comprises an emitter follower transistor configuration, and further wherein the second dedicated relay driver circuit comprises an emitter follower transistor configuration.
1 Assignment
0 Petitions
Accused Products
Abstract
A vital programmable logic device (VPD) is provided having at least two microprocessors. The VPD is configured to provide failsafe operation of a vital control system while operating in a closed circuit environment. In at least one embodiment of the present invention, railroad grade crossing signals are controlled by the VPD.
-
Citations
17 Claims
-
1. An apparatus comprising a vital processing device coupled to a railroad signaling device coupled to a railroad track, the vital processing device configured to receive an input signal set comprising one or more input signals representing one or more conditions on the railroad track, the vital processing device comprising:
-
a first controller device configured to perform a first logic process using the input signal set to generate a first controller device output signal; a second controller device configured to perform the first logic process using the input signal set to generate a second controller device output signal; and health check apparatus configured to perform integrity testing of the first and second controller devices; wherein the first and second controller devices do not share components affording alternative energy or logic paths; further wherein the vital processing device sets the railroad signaling device to a railroad signaling device safest condition if at least one of the following occurs; failure of one or more components of the vital processing device; integrity testing failure by the first controller device; integrity testing failure by the second controller device; and further wherein, when the first and second controller devices both pass integrity testing, and when there is no component failure within the vital processing device, the first and second controller device output signals are identical, are a function of the input signal set, and are used to control the railroad signaling device; a first dedicated relay driver circuit coupled to receive the first controller device output signal, wherein the first dedicated relay driver circuit enables a current generating a first discrete DC voltage signal when the first controller device output signal is high and further wherein the first dedicated relay driver circuit prevents current flow to generate any DC voltage signal when the first controller device output signal is low; and a second dedicated relay driver circuit coupled to receive the second controller device output signal, wherein the second dedicated relay driver circuit enables a current generating a second discrete DC voltage signal when the second controller device output signal is high and further wherein the second dedicated relay driver circuit prevents current flow to generate any DC voltage signal when the second controller device output signal is low; wherein the first and second discrete DC voltage signals are required to produce a current flow and voltage differential to energize a relay in the railroad signaling device; further wherein the first dedicated relay driver circuit comprises an emitter follower transistor configuration, and further wherein the second dedicated relay driver circuit comprises an emitter follower transistor configuration. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. An apparatus comprising a vital processing device coupled to a railroad signaling device coupled to a railroad track, the vital processing device configured to receive an input signal set comprising one or more input signals representing one or more conditions on the railroad track, the vital processing device comprising:
-
a first controller device configured to perform a first logic process using the input signal set to generate a first controller device output signal; a second controller device configured to perform the first logic process using the input signal set to generate a second controller device output signal; and health check apparatus configured to perform integrity testing of the first and second controller devices; wherein the first and second controller devices do not share components affording alternative energy or logic paths; further wherein the vital processing device sets the railroad signaling device to a railroad signaling device safest condition if at least one of the following occurs; failure of one or more components of the vital processing device; integrity testing failure by the first controller device; integrity testing failure by the second controller device; and further wherein, when the first and second controller devices both pass integrity testing, and when there is no component failure within the vital processing device, the first and second controller device output signals are identical, are a function of the input signal set, and are used to control the railroad signaling device; wherein the health check apparatus comprises a pair of health check lines coupling the first controller device coupled to the second controller device, and further wherein integrity testing comprises at least one of the following; monitoring independently generated, timed heartbeats of the first controller device and independently generated, timed heartbeats of the second controller device; comparing independently generated, timed heartbeats of the first controller device and independently generated, timed heartbeats of the second controller device; identifying a problem with at least one of the first and second controller devices using independently generated, timed heartbeats of the first controller device and independently generated, timed heartbeats of the second controller device. - View Dependent Claims (13, 14, 15, 16, 17)
-
Specification