Patent ID: 8620497

Claim:
A code bit level redundancy method for a computer interlocking system, the method comprising: controlling, in parallel, an output of a working subsystem and an associated output of a standby subsystem, said controlling comprising: setting a signal machine by the working subsystem and the standby subsystem, wherein, when the working subsystem has no output, the method further comprises turning off the associated output of the standby subsystem; setting one or more switches via a switch control order from the working subsystem, wherein the standby subsystem does not output a respective switch control order; setting the working subsystem and the standby subsystem to provide the respective outputs in parallel to a long-time-effective output port; setting the standby subsystem to stop providing the associated output when: a logic of the working subsystem and a logic of the standby subsystem are not synchronized or communication between the standby subsystem and a man-machine interface breaks down; setting the standby system to not provide an output to a short-time-effective output port when the working subsystem provides a respective output to the short-time-effective output port; wherein, when one or more of the working subsystem and the standby subsystem are under an emulation test, the one or more subsystems under the emulation test provide no output, and wherein, when a system-switch is set to a manual mode, the standby subsystem provides no output; wherein, when communication between the working subsystem and the standby system breaks down, the standby subsystem provides no output; and sharing collected information, said shared collected information excluding system code bits, said sharing further comprising: collecting said shared information by sections shared by the working and standby subsystems when performing a clearing check with opening signals; collecting said shared information by sections of the respective subsystems when a section is used in a three-point check to unlock a route under operation; and stopping the sharing of collected information when: the system-switch is set to the manual mode, one or more of the subsystems are under an emulation test, or when a redundant subsystem is determined to be abnormal by a self-test.