JP2012006490A - Program rewriting system of air-condition controller for railway vehicle - Google Patents

Abstract

An air conditioning control apparatus for a railway vehicle that can use a communication network of a plurality of hierarchies installed in a railway vehicle and can efficiently rewrite a control program regardless of the communication hierarchy to which the air conditioning control apparatus is connected. Get a program rewriting system.
A master-slave type communication network 200 is formed in which a program rewrite instruction device 100 is a top master node and an air conditioning control device C is a slave node. The program rewrite instruction device 100 is an air conditioning control device. The control program to be rewritten for C is transmitted to the gateway node. When the gateway node receives the control program, the gateway program multicasts the received control program to the gateway node or the air conditioning control device C under its control. The air conditioning control device C that has received the rewrite to the received control program.
[Selection] Figure 5

Description

  The present invention relates to a program rewriting system for rewriting a control program of an air conditioning control device used in a railway vehicle.

  Conventionally, as a technique for rewriting a control program of an air conditioning control device for controlling an air conditioning device mounted on a railway vehicle, “When changing air conditioning control information, the information is reset by operating the input device (2), A technique of “store in the RAM (8) and control the air-conditioning equipment (9)” has been proposed (for example, see Patent Document 1).

  In addition, as a means for transmitting control information between vehicles, a vehicle information transmission system using an optical duplex ring network having a 1-system optical transmission path and a 2-system optical transmission path is configured, and either of the optical transmissions A technique for transmitting a control program or the like using a path has been proposed (see, for example, Patent Document 2).

Japanese Patent Laid-Open No. 4-191168 (page 2, FIG. 1) JP-A-7-84908 (4th page, 6th page, FIG. 1)

  Here, in an air conditioning control device mounted on a railway vehicle, the interior of the vehicle is taken into account in consideration of various factors such as the difference in the vehicle type, location movement due to traveling, temporal fluctuations in the boarding rate, opening / closing of doors, or fluctuations in outside air temperature. It is necessary to control the air conditioner to make the environment comfortable. Thus, unlike the air conditioner installed in a general building, the control content of the air conditioner mounted on the railway vehicle is complicated. In many cases, it is necessary to rewrite the control program of the air conditioning control device in response to the change in the factors as described above.

  However, in the technique described in Patent Document 1, it is necessary to rewrite the control program by directly connecting the input device to the air conditioning control device installed in each vehicle, so that the work efficiency is not good.

  Further, with the technique described in Patent Document 2, it is possible to rewrite a control program for devices connected to the same communication layer. However, in a complicated control system in a vehicle, a communication network with a plurality of layers is often laid, and rewriting of a control program for an air-conditioning control device connected to a communication layer after the second layer is considered. It wasn't.

  The present invention has been made in order to solve the above-described problems, and can utilize a multi-level communication network provided in a railway vehicle, regardless of the communication level to which the air conditioning control device is connected. Therefore, the present invention provides a program rewriting system for a railway vehicle air conditioning control device that can efficiently rewrite a control program.

  A program rewriting system for an air conditioning control device for a railway vehicle according to the present invention includes an air conditioning control device that controls an air conditioning device mounted on a railway vehicle according to a control program, and a program rewriting instruction that instructs rewriting of the control program of the air conditioning control device. A program rewriting system for a railway vehicle air conditioning control device forming a master-slave type communication network having the program rewriting instruction device as a top master node and the air conditioning control device as a slave node. One or more communication layers are provided between the program rewriting instruction device and the air conditioning control device, and a gateway node for connecting communication between the program rewriting instruction device and the air conditioning control device is provided in the communication layer. The program rewriting instruction device is configured to control the air conditioning. When the gateway node receives the control program, it transmits the received control program to the gateway node or the air conditioning control device that is its slave node. On the other hand, the air-conditioning control apparatus that multicasts and receives the control program executes rewriting to the received control program.

  According to the program rewriting system for a railway vehicle air-conditioning control apparatus according to the present invention, the program for the air-conditioning control apparatus can be rewritten even when the communication network provided in the railway vehicle has a plurality of layers. Since the existing communication network can be used and there is no need to connect an input device to the air conditioning control device to be rewritten, the rewriting efficiency of the program can be improved.

1 is a system configuration diagram of a program rewriting system according to an embodiment. It is a block diagram of the program rewriting instruction | indication apparatus which concerns on embodiment. It is a block diagram of the air-conditioning control apparatus which concerns on embodiment. It is a structural example of the communication frame which concerns on embodiment. It is a sequence diagram explaining the example of a program rewriting operation | movement which concerns on embodiment. It is an example of the display screen of the output device of the program rewriting instruction | indication apparatus which concerns on embodiment.

Embodiment.
[Configuration of program rewriting system]
FIG. 1 is a system configuration diagram of a program rewriting system for an air conditioning control device according to an embodiment. In the present embodiment, a case where a three-layer communication network is laid on a railway vehicle will be described as an example.

  As shown in FIG. 1, a railway vehicle is provided with a three-layer communication network 200, and vehicle information control devices A1 and A2 (hereinafter collectively referred to as vehicle information control device A) are provided in the first and second layers. ), The second layer and the third layer belong to the integrated air conditioning control devices B11,..., B22 (hereinafter may be collectively referred to as the integrated air conditioning control device B), and the third layer includes Air conditioning control devices C111,... C222 (hereinafter, may be collectively referred to as air conditioning control device C) belong. Air conditioning equipment D111,... D222 (hereinafter, may be collectively referred to as air conditioning equipment D) are connected to the air conditioning control device C, respectively. In this way, the vehicle information control device A, the integrated air conditioning control device B, and the air conditioning control device C are communicatively connected by the multi-level communication network 200, and transmit and receive information to each other to perform various controls of the railway vehicle. It has become.

  The air conditioner D is, for example, an air conditioner, a heating device, a fan, or the like, and one or a plurality of units are connected to one air conditioning control device C.

  The air-conditioning control device C controls the operation of the air-conditioning equipment D based on the sensor (not shown) that detects the in-vehicle temperature, the outside air temperature, or the in-vehicle humidity installed in the railway vehicle and the operating state of the air-conditioning equipment D. Do.

  The integrated air conditioning control device B is a device for integrating and managing a plurality of air conditioning control devices C. The integrated air conditioning control device B performs necessary control on the air conditioning control device C based on information provided from the vehicle information control device A.

  The vehicle information control device A manages information such as the driving state of the vehicle (during commercial operation, forwarding, etc.) and the planned route (operation time, planned occupancy rate, etc.), and controls the opening and closing of the vehicle doors and in-car broadcasts. Do.

  The program rewriting instruction apparatus 100 is an apparatus for instructing rewriting of a control program (hereinafter, simply referred to as a program) of the air conditioning control apparatus, and is connected to the first layer of the communication network 200 or the vehicle information control apparatus A. Is done. When the program rewriting instruction apparatus 100 is connected to the first layer of the communication network 200, it is connected as shown as the communication line 301 in FIG. 1, but it may be connected via the repeater 300a or the repeater. It is not necessary to provide 300a. Further, when the program rewriting instruction apparatus 100 is connected to the vehicle information control apparatus A, it is connected as shown as the communication line 302 in FIG. 1, but it may be connected via the repeater 300b or the repeater. It is not necessary to provide 300b. Note that the repeaters 300a and 300b shown in FIG. 1 are devices different from the gateway node of the present invention.

[Configuration of each device]
Next, the structure of each apparatus which comprises the program writing system of an air-conditioning control apparatus is further demonstrated.

(Program rewriting instruction device 100)
FIG. 2 is a block diagram illustrating a main part of the program rewriting instruction apparatus 100 according to the embodiment. The program rewriting instruction apparatus 100 temporarily stores control data, a CPU 10 that controls a program writing operation to the air conditioning control apparatus C based on an operation instruction and a communication state, a storage device (ROM) 11 that stores a control program 17, and control data. The RAM 12 to store, the communication unit 13 that performs communication processing in the communication network 200, the input device 14 that receives input from the operator through operation buttons, a touch panel, a keyboard, a mouse, and the like, and information related to program writing such as a liquid crystal screen are displayed. And an output device 15.

  A plurality of types of control programs 17 are stored in the storage device 11 for each version of the air conditioning control device to be written and the program.

(Air conditioning controller C)
FIG. 3 is a block diagram showing a main part of the air conditioning control device C according to the embodiment. The air conditioning control device C includes a CPU 20 that controls the operation of the air conditioning equipment D based on various sensor detection values and operation commands, a storage device (ROM) 21 that stores a control program 27, a RAM 22 that primarily stores control data, A communication unit 23 that performs communication processing in the communication network 200, an input / output unit 26 that inputs information from a sensor (not shown) installed in the vehicle and outputs control information to the air conditioner D; It has.

(Vehicle information control device A, integrated air conditioning control device B)
In addition, although it does not show in figure about the structure of the vehicle information control apparatus A and the integrated air conditioning control apparatus B, CPU which manages control, the memory | storage device which stores a control program, RAM which stores control data primarily, and the communication part which performs a communication process I have.

The role of each apparatus in the program rewriting system of the air-conditioning control apparatus comprised in this way is demonstrated. When the program rewriting instruction apparatus 100 is connected to the communication line 301, the program rewriting instruction apparatus 100 functions as a first layer master node of the communication network 200, and the vehicle information control apparatus A functions as a first layer slave node. . Further, when the program rewriting instruction apparatus 100 is connected to the communication line 302, the vehicle information control apparatus A functions as a first layer pseudo master node.
Further, the vehicle information control apparatus A performs a data gateway between the first layer and the second layer of the communication network 200 and has a function as a master node of the second layer.
The integrated air conditioning control device B performs a data gateway between the second to third layers. Further, the integrated air conditioning control device B has a function as a slave node in the second layer and a master node in the third layer.
The air conditioning control device C functions as a slave node in the third layer.

  In the present embodiment, a three-layer communication network is taken as an example for explanation, but the number of layers of the communication network 200 and devices connected thereto are not limited to the embodiment.

[Program rewrite operation]
(Overview of operation)
Next, an outline of the rewrite operation of the control program in the present embodiment will be described. Program rewriting is realized by master-slave (single master) type communication in which the program rewriting instruction device 100 is the highest master node in the communication network 200. Each device constituting the system is assigned a unique node ID according to a predetermined rule. Then, the request frame is multicast from the master node to the slave node, and this is sequentially performed for each communication layer, whereby the request frame is transmitted to the lowermost slave node. In addition, the slave node performs processing based on the instruction of the request frame and returns a response frame. By sequentially performing this for each communication layer, the response frame is transmitted to the program rewrite instruction device 100 which is the highest-level master node. Is done.

  The communication frame used for program rewriting has a dedicated configuration so that the frame ID, the frame format, and the like are not confused with the normal communication frame. FIG. 4 is a diagram illustrating a configuration example of a communication frame according to the embodiment. FIG. 4A illustrates a request frame, and FIG. 4B illustrates a response frame.

  The request frame includes a “header portion” such as a frame ID, a “target device designation number portion” that designates the number of communication target devices, and a “target device node ID designation portion” that designates a node ID of a communication target device. A “command content part” that specifies the command content for the target device, a “data part” that is a data area, and an “error detection part”.

  The response frame includes a “header part”, a “normal node number notifying part” indicating the number of normally functioning nodes, a “normal node ID notifying part” indicating a normally functioning node ID, and a request frame. A “result response part” indicating the response content, “data part” which is a data area, and “error detection part”.

  Although details will be described later, program rewriting is performed using various request frames and response frames for program rewriting. In the present embodiment, the request frame and response frame for program rewriting are configured according to the frame format shown in FIG.

In addition, when the upper limit of the number of frame bytes is determined by the communication standard of each communication layer, the area excluding the header part and the error detection part in the configuration example of the communication frame shown in FIG. 4 is divided and transmitted. can do. In addition, the division transmission rule at that time conforms to each communication standard.
As will be described later, the control program is transmitted by a request frame. However, if the capacity of the program data is large, it is practical to transmit all program data in one frame from the viewpoint of the transmission / reception buffer and the communication bus occupation time. It may not be. In this case, the number of bytes of the “data portion” can be divided and transmitted with a predetermined upper limit. In addition, the divisional transmission rule at that time conforms to each communication standard or proprietary standard.

  The process related to the program writing starts when the program rewrite instruction apparatus 100 multicasts a request frame to the slave node. The slave node (vehicle information control apparatus A in this embodiment) that has received this request frame multicasts the request frame to the slave node (integrated air conditioning control apparatus B in this embodiment) that functions as a master node. To do. Similarly, the request frame is transmitted to the slave node at the lowest layer.

  Each device that has received the request frame performs processing based on the request frame and transmits a response frame to the master node if its own node ID is included in the “target device node ID”. In the present embodiment, in order to increase the processing speed of the entire program rewriting process, a response is returned only to the program rewriting target apparatus and the nodes on the communication path. For example, in FIG. 1, when all of the air conditioning control device C is a program rewrite target, all of the air conditioning control device C, the integrated air conditioning control device B, and the vehicle information control device A return a response to the master node. When only the air conditioning control device C111 is a program rewrite target, the air conditioning control device C111, the integrated air conditioning control device B11, and the vehicle information control device A1 return a response frame to the master node.

  The master node in each layer that has received the response frame from the slave node transmits the response frame to its own master node. By repeating this, a response frame is finally transmitted to the program rewriting instruction device 100 which is the highest master node.

  Further, before starting rewriting of the program, the program rewriting instruction apparatus 100 confirms the communication status of the entire system. Specifically, the master node of each communication layer monitors the communication state of the slave node, transmits this monitoring result to the master node of the upper layer, and repeats this. Thereby, the program rewriting instruction | indication apparatus 100 can grasp | ascertain the communication condition of the whole program rewriting system. If any device is in a communication disabled state when the communication status is confirmed, the program is not rewritten.

  Further, before rewriting the program, each device transitions to a “program rewriting mode” and rewrites the program in this state. The “program rewrite mode” is a special mode provided for reliably transmitting program data. During this mode, normal transmission / reception, communication abnormality determination, normal air conditioning control, etc. are stopped.

(Program rewrite operation example)
FIG. 5 is a sequence diagram illustrating an example of a program rewrite operation according to the embodiment. With reference to FIG. 5, the case where the control program of the air-conditioning control apparatus C is rewritten will be described as an example. In this example, the air conditioning control device C corresponds to the air conditioning control device of the present invention, and the vehicle information control device A and the integrated air conditioning control device B correspond to the gateway node of the present invention. Note that FIG. 5 illustrates an operation in a case where all communication is normally performed and program rewriting ends normally. Further, as described above, the program data can be divided and transmitted, but FIG. 5 does not describe the operation related to the divided transmission.

(Step 1: Check communication status)
The program rewriting instruction device 100 confirms the frame transmission status of the devices below the integrated air conditioning control device B, which is derived from the communication frames of the vehicle information control device A and the vehicle information control device A. If the frame transmission state of all devices is normal, the process proceeds to step 2.
If the frame transmission state of any device is abnormal, the program rewriting instruction device 100 displays information about the device with the abnormality on the output device 15 to inform the operator, and stops the program rewriting process.

(Step 2: Transition to program rewrite mode)
The program rewrite instruction device 100 multicasts a “rewrite mode transition request” to the vehicle information control device A.
The vehicle information control device A multicasts a “rewrite mode transition request” to the integrated air conditioning control device B, and transitions to the program rewrite mode.
The integrated air conditioning control device B multicasts a “rewrite mode transition request” to the air conditioning control device C and transitions to the program rewrite mode.
The air conditioning control device C receives the “rewrite mode transition request” and transitions to the program rewrite mode, and transmits a “mode transition completion response” to which information indicating that the mode has been transitioned is added.

Next, the integrated air conditioning control device B transmits a “mode transition completion response” to which information indicating that the slave node (air conditioning control device C in the present embodiment) has shifted to the mode has been added.
The vehicle information control device A transmits to the program rewriting instruction device 100 a “mode change completion response” to which information indicating that the device and the slave node (integrated air conditioning control device B in the present embodiment) have made a mode change is added.

(Step 3: Program data transmission)
The program rewriting instruction device 100 that has received the “mode transition completion response” multicasts predetermined program data of the control program 17 stored in the storage device 11 to the vehicle information control device A. Here, identification information indicating the air conditioning control device C to be rewritten is added to the program data to be transmitted. Specifically, in the present embodiment, the node ID of the air conditioning control device C that is the target of program rewriting is specified by the “target device node ID specifying unit” of the request frame.
Next, the vehicle information control device A multicasts the program data to the integrated air conditioning control device B that is its own slave node, and the integrated air conditioning control device B also receives the program data received by the air conditioning control device C that is its own slave node. Multicast.

  The air conditioning control device C stores the program data in the storage device 21 when the program data can be normally received. Here, the control program is not rewritten but only stored in the storage device 21. Then, a “program data reception completion response” indicating that the program data has been successfully received is transmitted.

  The integrated air conditioning control device B gateways the “program data reception completion response” transmitted from the air conditioning control device C to the vehicle information control device A that is the master node, and the vehicle information control device A is also a program that is its own master node. A “program data reception completion response” is gatewayed to the rewriting instruction device 100.

The program rewriting instruction device 100 that has received the “program data reception completion response” multicasts the same program data to the vehicle information control device A again.
Each of the vehicle information control device A and the integrated air conditioning control device B multicasts program data to its own slave node. That is, in step 3, the same program data is transmitted twice.

  When the air conditioning control device C has successfully received the second program data, the first program data stored in the storage device 21 is compared with the second program data. "Comparison match response" indicating that the program data is received is transmitted to the integrated air conditioning controller B which is the master node.

  The integrated air conditioning control device B and the vehicle information control device A each gateway a “comparison match response” toward their master node.

(Step 4: Program rewriting)
The program rewrite instruction device 100 that has received the “comparison match response” multicasts a “program rewrite execution request” that instructs the vehicle information control device A to rewrite the program. Each of the vehicle information control device A and the integrated air conditioning control device B multicasts a “program rewrite execution request” to its own slave node.

  Receiving the “program rewrite execution request”, the air conditioning control device C rewrites the control program 27 stored in the storage device 21 with the program data received in step 3. Here, the control program after rewriting is referred to as a control program 27 '. When rewriting a program, the “target device node ID designating unit” of the request frame to which the program data is transmitted is checked to determine whether or not it is a program rewriting target. The program is rewritten only when it is the program rewrite target, that is, when its own node ID is included in the “target device node ID designating part” of the request frame. By doing in this way, it can suppress that the rewriting of the incorrect program to the air-conditioning control apparatus C arises. When the rewriting is completed, the air conditioning control device C transmits a “rewriting completion response” indicating that the program rewriting has been completed to the integrated air conditioning control device B that is the master node.

  The integrated air conditioning control device B and the vehicle information control device A each gateway a “rewrite end response” toward their own master node.

(Step 5: End of program rewrite mode)
The program rewriting instruction device 100 that has received the “rewriting end response” multicasts a “rewriting mode end request” to the vehicle information control device A. Each of the vehicle information control device A and the integrated air conditioning control device B multicasts a “rewrite mode end request” to its own slave node.

  The air-conditioning control device C that has received the “rewrite mode end request” transmits a “mode end response” and leaves the program rewrite mode and shifts to the normal mode. After shifting to the normal mode, normal transmission / reception, communication abnormality determination, normal air conditioning control, etc. are resumed.

  When the integrated air conditioning control device B and the vehicle information control device A receive the “rewrite end response” from their own slave node, they gateway to this master node and shift to the normal mode. This completes the series of program rewriting operations.

  In step 3, the program rewrite instruction device 100 transmits the same program data twice, and the air conditioning control device C writes the program data when the received two program data match. This is a process for improving the reliability in consideration that the program data may be damaged by noise or the like. Other means may be taken as means for improving communication reliability.

  In step 4, the “target device node ID designation unit” of the request frame to which the program data is transmitted is confirmed, and the program is rewritten only when it is the program rewrite target. However, the determination as to whether or not it is the target of program rewriting may be performed at the timing when the program data is stored in the storage device 21 in step 3 or when the program data is compared, and the same effect is obtained. Can do.

In FIG. 5, the air conditioning control device C receives the program data in step 3 and then receives the “program rewrite execution request” in step 4 to execute the program rewrite. However, the program rewrite timing is not limited to this. For example, the air conditioning control device C may execute rewriting of the program when the comparison of the program data received twice coincides.
When program data is divided and transmitted, the program may be rewritten at the timing when all the divided and transmitted program data is received, or each time one block of program data that is divided and transmitted is received. The program in the block area may be rewritten.

  As described above, in FIG. 5, an example of the program rewriting operation when the air conditioning control device C is the “air conditioning control device” of the present invention and the vehicle information control device A and the integrated air conditioning control device B are the “gateway node” of the present invention. explained. The program rewriting of the integrated air conditioning control device B can be performed in the same manner. In this case, the integrated air conditioning control device B corresponds to the “air conditioning control device” of the present invention, and the vehicle information control device A corresponds to the “gateway node” of the present invention.

  As described above, in the program rewriting system according to the present embodiment, the program of the air-conditioning control device C connected to the communication network 200 is rewritten using the multi-layer communication network 200 laid on the railway vehicle. It can be carried out. Since the built-in communication network 200 can be used, it is not necessary to directly connect an input device for program rewriting to the program rewriting target device. For this reason, it is not necessary to open / close or detach the program rewriting target apparatus or the vehicle parts around the apparatus, and it is possible to prevent various parts from being damaged. Further, since it is not necessary for the operator to directly connect the input device to the program rewriting target device, the work efficiency can be greatly improved.

  In addition, the control program can be rewritten in the same manner regardless of which layer of the communication network 200 is connected to the device to be rewritten.

In the present embodiment, the request frame related to program writing is multicast from the master node to the slave node, and the response frame is transmitted from the master node in each communication layer to the master node in the higher layer. For this reason, shortening of the time required for exchange of program data can be expected.
Here, a time T required to exchange program data when the program is rewritten for all the air conditioning control devices C shown in FIG. 1 is estimated. The calculation is based on the following assumptions.
Time required for request transmission T _req (assumed to be common to all layers for simplicity)
The time required to send a response is T _resp (assumed to be common to all layers for simplicity)

The program data transfer time T1 according to the present embodiment is expressed by the following equation. Here, m is the number of vehicle information control devices A, n is the number of integrated air conditioning control devices B, and p is the number of air conditioning control devices C.
T1 = 3 * T _req + (m + n + p) * T _resp (Equation 1)
In response to this, a request frame is transmitted from the program rewriting instruction device 100 to each air conditioning control device C via the vehicle information control device A and the integrated air conditioning control device B, and the response frames transmitted by each air conditioning control device C are integrated. A system is assumed that is received by the program rewriting instruction device 100 via the air conditioning control device B and the vehicle information control device A. In this case, the program data transfer time T2 is expressed by the following equation.
T2 = 3 * m * n * p * T _req + 3 * m * n * p * T _resp (Equation 2)

Comparing Formula 1 and Formula 2, according to the present embodiment, the following time reduction is possible.
T2-T1 = 3 * (m * n * p-1) * T _req + {3 * m * n * p- (m + n + p)} * T _resp (Equation 3)
As is clear from Equation 3, according to the present embodiment, the deeper the communication hierarchy of the device to be rewritten, and the greater the number of nodes and the total number of nodes of the device to be rewritten, the longer the program data transfer time. The shortening rate is improved.

  In the program rewriting system according to the present embodiment, the program rewriting instruction apparatus 100 becomes a master for all nodes, and information (program data and various responses) related to program rewriting is accumulated in the program rewriting instruction apparatus 100. Then, when transmitting the program data, the program rewriting instruction device 100 transmits only one type of program of the rewriting target device, and is a gateway node that reaches the rewriting target device (the vehicle information control device A and the integration in the example of FIG. 5). The air conditioning controller B) gateways the program data each time. The capacity of the storage device that the gateway node should reserve for the program data gateway may be the upper limit value + α (α ≧ 0) of the data part that the communication frame transmits at one time. When program data is divided and transmitted according to the communication standard, the upper limit value + α (α ≧ 0) of the data portion to be divided and transmitted may be used. In this way, the capacity of the storage device that the gateway node should secure can be suppressed.

  In the present embodiment, the air conditioning control that receives the program data by designating the program data transmitted by the program rewrite instruction device 100 with information for identifying the program rewrite target device in the “target device node ID designation unit”. The device C rewrites the program only when the ID specified in the “target device node ID specifying unit” and the node ID of the device C match. For this reason, it can suppress that rewriting to the wrong program arises.

(Operation example when an error occurs during program rewriting)
The operation example when the program rewriting is normally completed has been described above with reference to FIG. 5, but the operation example when an abnormality occurs will be described below.

The master node in each layer stores in advance a node that should return a response to the request frame (hereinafter referred to as a response transmission node) based on the information of the request frame. If there is any abnormality in the response frame from the slave node, the slave node is excluded from the response transmission node thereafter.
Here, for example, it is assumed that a certain device recovers from an abnormality and transmits some response to the master node. In this case, if it is a response to a request frame for program rewriting other than “rewrite mode end request”, the master node ignores it. If it is a response to the “rewrite mode end request”, the master node gateways to an upper layer as described in FIG.
When all the slave nodes are excluded from the response transmission nodes, the master node does not transmit frames to the slave nodes except for the “rewrite mode end request” thereafter.

  (1) Next, an error occurs when the communication master node (for example, integrated air conditioning control device B11) to which the program rewriting target device (for example, air conditioning control device C111) belongs falls into communication failure during the program rewriting sequence. Processing will be described.

(1-1) First, the case where communication failure occurs in the upper layer of the integrated air conditioning control device B11 will be described. The integrated air conditioning controller B11 that has detected that a communication failure has occurred with the master node multicasts a “program rewrite stop request” to the air conditioning controllers C111 and C112 that are its slave nodes.
On the other hand, since the vehicle information control device A1 that is the master node of the integrated air conditioning control device B11 does not return a response from the integrated air conditioning control device B11 that is the slave node, a “program rewrite continuation impossible response” is sent to the program rewriting instruction device 100. By transmitting to this, the integrated air conditioning control device B11 or lower notifies that the program rewriting cannot be continued. Then, the vehicle information control device A1 excludes the integrated air conditioning control device B11 from the response transmission node. In addition, even if the integrated air conditioning control device B11 returns from the inability to communicate while continuing the program rewrite sequence, the integrated air conditioning control device B11 does not return a response to the program rewrite request frame other than the “rewrite mode end request”.

(1-2) Next, a case where communication failure occurs in the lower layer of the integrated air conditioning control device B11 will be described. The integrated air conditioning controller B11 that has detected that communication with the slave node has failed transmits a “program rewrite continuation impossible response” to the vehicle information controller A1 that is its own master node. Thereafter, the integrated air conditioning controller B11 does not return a response to the program rewrite request frame other than the “rewrite mode end request”.
On the other hand, the vehicle information control device A1, which is the master node of the integrated air conditioning control device B11, informs that the integrated air conditioning control device B11, which is the slave node, and the lower layer device cannot continue rewriting the program, “program continuation impossible response”. This is notified to the program rewriting instruction device 100 by transmission. Then, the vehicle information control device A1 excludes the integrated air conditioning control device B11 from the response transmission node. In addition, when the communication failure in the lower layer of the integrated air conditioning control device B11 is recovered while the program rewriting sequence continues, the integrated air conditioning control device B11 transmits a “program rewrite stop request” to the air conditioning control devices C111 and C112. To notify that the program rewrite sequence is to be stopped.

  (2) Next, the abnormality process will be described by taking as an example a case where the program rewrite target device (for example, the air conditioning control device C111) falls into communication failure during the program rewrite sequence.

  When the integrated air-conditioning control device B11 detects that no response is returned from the air-conditioning control device C111 that is a slave node after a predetermined time, the air-conditioning control device C111 transmits a “program rewrite continuation impossible response” so that the air-conditioning control device C111 The vehicle information control device A1 is notified that the rewrite sequence cannot be continued. Then, the integrated air conditioning control device B11 excludes the air conditioning control device C111 from the response transmission node.

  Here, it is assumed that the air conditioning control device C111 has recovered from a communication failure during the program rewriting sequence. In this case, upon receiving any request frame for program rewriting, the air conditioning control device C111 immediately transitions to the “program rewriting mode”, and the “program rewriting continuation impossible response” is the master node integrated air conditioning control device B11. The program is not rewritten in this sequence. If the program data received before the communication failure remains in the storage device 21, the program data is discarded, and thereafter, the program is not rewritten in the sequence. As described above, when any abnormality occurs during the program rewriting sequence, the program rewriting is not performed, thereby preventing the malfunction of the air conditioning control device C111 due to the writing abnormality.

[Man-machine interface of program rewrite instruction device 100]
Next, the man-machine interface of the program rewriting instruction apparatus 100 will be described. FIG. 6 shows an example of the display screen 150 of the output device 15 of the program rewriting instruction device 100.
The display screen 150 displays the program rewrite execution conditions, progress, execution results, and the like as a table 151. Then, as an operation unit that receives an operation from an operator, a target device group selection 152, a target device program Ver. 153, a program CS154, a collective execution button 155, and a selection execution button 156 are provided.

  In Table 151, in the column of the device 151a, names of devices that can be selected as program rewrite target devices are sequentially displayed for each communication layer. The column of selection 151b displays whether or not the device is a program rewrite target device, and it is also possible to individually select the rewrite target device. The connection confirmation 151c displays the confirmation result in the communication status confirmation. The mode transition 151d displays whether or not the program rewrite mode has been transitioned based on the “mode transition completion response”. In the data comparison 151e, the comparison result of the program data in step 3 of FIG. 5 is displayed based on the “comparison match response”. In the rewriting completion 151f, whether or not the rewriting of the program is completed is displayed based on the “rewriting completion response”. The CS 151g displays the checksum information of the program data added to the response frame of the program rewriting target device. Note that the program rewriting target device can add checksum information to the “comparison match response” or “rewrite completion response”.

  The target device group selection 152 corresponds to the rewrite hierarchy selection means of the present invention, and can select a device group that is a program rewrite target. Here, the device to be rewritten can be selected for each device group connected to the same communication layer. Devices other than the device selected by the target device group selection 152 cannot be selected as program rewrite target devices on the display screen 150. In the example of Table 151 in FIG. 6, “impossible” is displayed and shaded in the column of non-selectable devices in the selection 151 b column. As described above, a node ID representing a rewritable device is added to the program data, and each device that has received the program data determines the node ID, and if it does not match its own node ID, the program data Rewriting is not performed. At the same time, by making it possible to select only a predetermined device as a program rewrite target device by the target device group selection 152, it is possible to take a two-stage fail safe and suppress erroneous writing.

  Target device program Ver. In 153, the version of the program to be transmitted to the program rewriting target device can be selected. In the initial state, the target device program Ver. In 153, the latest version is selected from the plurality of versions of the control program 17 stored in the storage device 11, but the target device program Ver. By operating 153, a program other than the latest version can be transmitted. In this way, for example, when verifying an operation failure after rewriting a program, it can be easily rewritten to a previous version of the program.

  The program CS154 automatically displays checksum information of the control program selected as the program to be transmitted. By displaying both the checksum information (program CS154) of the program data selected as rewrite by the program rewrite instruction device 100 and the checksum information (CS151g in Table 151) transmitted from the program rewrite target device, the operator can Visual confirmation of program rewriting work is possible.

  The collective execution button 155 collectively executes program rewriting processing for all devices belonging to the device group selected by the target device group selection 152. If no device group is selected in the target device group selection 152, the collective execution button 155 is dark and cannot be operated.

  The selection execution button 156 is operated when rewriting a program for a device further individually selected from the device group selected by the target device group selection 152. When individually selecting a device to be rewritten, it is performed by operating the selection 151b column in the table 151. That is, the selection 151b corresponds to the rewriting device selection means of the present invention. The individually selected devices are displayed as “L” as illustrated in the selection 151 b column of the table 151. If no device is selected in the column of selection 151b, the selection execution button 156 is dark and cannot be operated.

  Thus, according to the program rewriting instruction apparatus 100 according to the present embodiment, the operability of program rewriting can be improved. In addition, rewriting of wrong programs can be suppressed.

  10 CPU, 11 storage device, 12 RAM, 13 communication unit, 14 input device, 15 output device, 17 control program, 20 CPU, 21 storage device, 22 RAM, 23 communication unit, 26 input / output unit, 27 control program, 100 Program rewriting instruction device, 150 display screen, 151 table, 152 target device group selection, 153 target device program Ver. 154 program CS, 155 collective execution button, 156 selection execution button, 200 communication network, 300a repeater, 300b repeater, 301 communication line, 302 communication line, A vehicle information control device, B integrated air conditioning control device, C air conditioning control Equipment, D Air conditioning equipment.

Claims (6)

An air conditioning control device for controlling the air conditioning equipment mounted on the railway vehicle according to the control program;
A program rewriting instruction device for instructing rewriting of the control program of the air conditioning control device,
A program rewriting system for an air conditioning control device for a railway vehicle that forms a master-slave type communication network with the program rewriting instruction device as a master node at the highest level and the air conditioning control device as a slave node,
One or more communication layers are provided between the program rewriting instruction device and the air conditioning control device, and a gateway node for connecting communication between the program rewriting instruction device and the air conditioning control device is provided in this communication layer,
The program rewriting instruction device transmits a control program to be rewritten to the air conditioning control device to the gateway node,
When the gateway node receives the control program, the gateway node multicasts the received control program to the gateway node or the air conditioning control device which is its slave node,
The air conditioning control device that has received the control program executes rewriting to the received control program. A program rewriting system for a railway vehicle air conditioning control device. A plurality of the air conditioning control devices are respectively connected to two or more communication layers,
The program rewriting instruction device includes a rewriting layer selection unit that selects a communication layer of the air conditioning control device that is a program rewriting target, and a control program for the air conditioning control device that belongs to the communication layer selected by the rewriting layer selection unit. The program rewriting system for a railway vehicle air-conditioning control device according to claim 1, wherein: The program rewriting instruction device includes rewriting device selecting means for selecting the air conditioning control device to be rewritten from among the air conditioning control devices belonging to the hierarchy selected by the rewriting hierarchy selecting means, and the rewriting device selecting means The control program for the air-conditioning control device selected in (2) is transmitted. The program rewriting system for a railway vehicle air-conditioning control device according to claim 2. The program rewriting instruction device adds identification information indicating an air conditioning control device to be rewritten and transmits the control program,
The said air-conditioning control apparatus performs rewriting to the said control program, when the received said identification information corresponds with own identification information. Rewriting system for railway vehicle air conditioning control system. The program rewriting instruction device transmits a request for transition to a program rewriting mode before transmitting the control program to the air conditioning control device,
The said air-conditioning control apparatus will stop the transmission / reception process except the transmission / reception process regarding program rewriting, and an air-conditioning control process, if the transition request to the said program rewrite mode is received. The program rewriting system of the air-conditioning control apparatus for railway vehicles described in the paragraph. The program rewriting instruction device transmits the control program a plurality of times,
The said air-conditioning control apparatus compares the received control program, and performs rewriting of the said control program when it mutually corresponds, The railway vehicle as described in any one of Claims 1-5 characterized by the above-mentioned. A program rewriting system for air conditioning controllers.

Images