314Vol.31No.420098JOURNALOFTHECHINARAILWAYSOCIETYAugust2009:100128360(2009)0420059206Petri,(,100044):CENELEC,Petri,,,;Petri:;;;Petri;:U666.11:Adoi:10.3969/j.issn.100128360.2009.04.011ModelingandSafetyAnalysisofMaglevTrainOver2speedProtectionBasedonStochasticPetriNetsZHENGWei,XUHong2ze(SchoolofElectronicsandInformationEngineering,BeijingJiaotongUniversity,Beijing100044,China)Abstract:TheCENELECStandardsandSafetyDirectivepromulgatedbytheEuropeanParliamentquantifytol2erablerisksofrailwayoperationaccordingtoglobalsafetytargetsandaimatdefiningsafetyrequirementsoffunctionsofrailwaycontrolsystemsandsystemcomponents.Inthispaper,thistargetisachievedbyhierarchicmodeling,riskanalysisandhazardanalysisoftheinherentdynamicpropertiesandallfactorsinfluencingopera2tionrisksofthesystemwiththesinglestochasticPetrinetsdescriptionmethod.Modellingandsimulationofthedynamictrafficoperationprocess,andfunctionsofthecontrolsystemandtheirreliabilityhelptorealizeriskanalysisandhazardanalysisisachievedbymodellingandsimulationofthedynamictrafficoperationprocess,andfunctionunitsandtheirreliability.Takingover2speedsafetyprotectionoftheMaglevtrainasanexample,theprocessesofmodellinganalysisandsimulationofthetrafficsystemisdescribedindetail.SimulationresultsshowstochasticPetrinetscanbeusedtoachieveglobalsafetytargetsandapportionmentofthesafetytargetsoffunctionunits.Keywords:safetytargetsapportionment;riskanalysis;hazardanalysis;Petrinets;overspeedprotection,,,,:2008209210;:2008211209:(1975),,,,E2mail:wzheng1@bjtu.edu.cnRAMS(Reliability,Availability,MaintainabilityandSafety),CENELEC(),EN50126EN50128EN50129[123],,EN50126,EN501263,:MEM(MinimalEndogenousMortality),ALARP(AsLowAsReasonablyPracti2cable),GAMAB(GlobalementAuMoinsAussiBon)MEMALARP;GAMAB,GAME(GlobalementAuMoinsEquivalent),CEN2ELEC:,,,CENELEC,,,(FailureModeandEffectsAnalyisis),Markovian,[4],,,Petri,[526]Petri,Petri1PetriPetriPN,,,,,,,,,Petri,[7]Petri(ExtendedDeterministicandStochasticPetriNets),4[829]:(1):=0,,(2):=,,(3):P(1)=1-e-t,,,(4):P(t)=(t),(t),(Weibull,Gamma),122.1,()()(0631)[10],,,,(,)()(),2,,:THR(TolerableHazardRate);SIL(SafetyIntegrityLevel);FR(FailureRate)2.2,,[11],,,:,,3:,,,,,,2.3MEM(MinimalEndogenousMortality)EN50126D,,210-4/a,20,10-5/a,10-6/a,,10-7/a3h,2h,500,250,RoneTime=MCollectiveNUsers=rAccident2505008365=rAccident1.7110-4(1),RoneTime;MCollective;NUsers;rAccident12,R=1-(1-ROneTime)12(2)(1)(2),(),2.4EN50126,;:,,164Petri:(1),(2)(3),,(4)Petri43:(1):,,,3h2h,,;,3min,24h(2):,,(3):;,,2631,2hWindowsTimeNET4.0Petri[12]4,,,(1)(2)510-7/a,(10-5,10-6),(10-6,10-5),(10-7,10-4),(10-5,10-6)(:1/h,SIL12,:THR=10-5/h,SIL=1;THR=10-6/h,SIL=2,,,2.51,,,FRSILTHR=10-5/h,SIL=1,:(1)(Sensor)ATP()(2)ATP,DSC()(3)DSCDPS()364Petri(4)(DPS),ATP,Petri6,,3,,77110-7/a;,1FR/hSIL/(a-1)Sensor1.0010-622.2610-8ATP1.0110-512.5710-8DSC2.5010-612.1310-8DPS4.1010-722.3910-89.3510-83Petri,CENELEC,,:[1]CENELEC.EN5012621998Railwayapplications:Thespecificationanddemonstrationofreliability,availability,maintainabilityandsafety(RAMS)[S].Brussels.2001.[2]CENELEC.EN5012821998Railwayapplications:Soft2wareforrailcontrolandmonitoringsystems[S].Brus2sels.2001.[3]CENELEC.EN5012921998RailwayapplicationsSafetyrelatedelectronicsystemsforsignalingCENELEC[S].Brussels.2001.[4]JensB.APracticalGuidetoSafetyAnalysisMethods[J].SIGNAL+DRAHT,2001,93(9):41244.[5]AustinRD,CarsonJL.AnAlternativeAccidentPredic2tionModelforHighwayRailInterfaces[J].AccidentA2nalysisandPrevention,2002,34(1):31242.[6]DavidV,DidierRB.MORM2APetriNetBasedModelforAssessingOH&SRisksinIndustrialProcesses:ModellingQualitativeAspects[J].RiskAnalysis,2004,24(6):171921735.[7].Petri[M].:,2005:32237.[8]GermanR.PerformanceAnalysisofCommunicationSys2temsModellingwithNon2MarkovianStochasticPetriNets[M].Chichester:JohnWiley&Sons,2000:36257.[9].Petri[M].:,2005:19227.[10]SlovkR,MayJ,SchniederE.PROFUNDModelingforHolisticRiskandAvailabilityAnalysisbyMeansofSto2chasticPetriNetsappliedtoaLevelcrossingControlSys2tem[C]//Proc.ofFormalMethodsforRailwayOpera2tionandControlSystems.Budapest:L’Harmattan,2003:2212232.[11].[M].:,2003:982134.[12]TimeNET.[DB/OL].2007.()4631