Abstract: In order tosolve the problem that redundant change of locomotive control system leads to a missing condition appeared on the non-operational monitor, the control method of the whole redundant change combining with the part redundant change was proposed. Main computer, and power panel of auxiliary microcomputer, CAN board and HDLC board was tested to find whetherthey were in fault condition. If they were,it would enter the whole redundant change and changemain computer into auxiliary computer. If they were not, it would enter the part redundant change and change the fault board into the corresponding board of another system. Gapless and accurate redundant change was ensured.In terms of software, the strict judging conditions of redundant change were proposed in accordance with digital input or output board, analog input board and frequency input board. In terms of hardware, both master control system and auxiliary control system were judged to find whether either of them is online.

Key words: locomotive control system, redundant control, controller area network(CAN), high-level data link control(HDLC), monitor