考虑不确定性的铁路信号安全计算机硬件SIL验证  

SIL Verification of Railway Signal Safety Computer Hardware Considering Uncertainty

作　　者：张宏扬 梁志国 王龙生 齐志华 白帅 乔亚琼 ZHANG Hongyang;LIANG Zhiguo;WANG Longsheng;QI Zhihua;BAI Shuai;QIAO Yaqiong(Postgraduate Department,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China;Communication and Signaling Research Institute,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China)

机构地区：[1]中国铁道科学研究院集团有限公司研究生部,北京100081 [2]中国铁道科学研究院集团有限公司通信信号研究所,北京100081

出　　处：《铁道学报》2022年第6期66-74,共9页Journal of the China Railway Society

基　　金：国家自然科学基金(U1734211);中国铁道科学研究院集团有限公司重大课题(2019YJ063)。

摘　　要：铁路信号安全计算机是高安全完整性苛求系统,对其硬件进行SIL验证是SIL认证工作的重点。传统硬件SIL验证过程中常假设各参数取固定值,忽略了参数的不确定性影响。提出一种考虑不确定性的铁路信号安全计算机硬件SIL验证方法,首先采用蒙特卡洛法(MCA)对参数概率分布已知类型的不确定性进行分析;然后采用模糊理论(FT)对参数概率分布未知类型的不确定性进行分析,并从可能性、必然性和可信性测度及符合性概率角度对结果所能声明的最大SIL进行判定。1oo2结构的实例仿真结果显示:基于FT计算结果的支集(5.01×10^(-10),5.57×10^(-7))包含基于MCA得出的极限区间(1.42×10^(-9),4.46×10^(-7)),即前者得出的结果更为保守;从可信性测度和符合性概率角度来看,两种方法所能声明的最高安全完整性等级均为SIL2。The railway signal safety computer is a system with high safety integrity requirements.The SIL verification of its hardware is the focus of SIL certification.In the process of SIL verification of traditional hardware,it is often assumed that each parameter takes a fixed value,ignoring the influence of parameter uncertainty.A SIL verification method for railway signal safety computer hardware considering uncertainty was proposed.Firstly,Monte Carlo Analysis(MCA)was used to analyze the uncertainty of known types of parameter probability distribution.Then Fuzzy Theory(FT)was used to analyze the uncertainty of unknown types of parameter probability distribution.The maximum SIL that can be declared by the result was determined from the perspective of possibility,inevitability,credibility measure and compliance probability.The simulation result of 1oo2 structure shows that:The support set based on the result(5.01×10^(-10),5.57×10^(-7))calculated by FT includes the limit interval(1.42×10^(-9),4.46×10^(-7))obtained by MCA,which means the result obtained by the former is more conservative.From the perspective of credibility measure and compliance probability,the highest safety integrity level that can be declared by the two methods is SIL2.

关 键 词：参数不确定性 硬件安全完整性 蒙特卡洛法 模糊理论 铁路信号安全计算机 

分 类 号：U284[交通运输工程—交通信息工程及控制]