RU2808958C1 - Method and device for transferring control between points of same rank when implementing distributed command point - Google Patents

Abstract

FIELD: computer technology.

SUBSTANCE: method of transferring control between points of the same rank, when implementing a distributed command point, is that a random sequence of characters is generated at the control object, which is constantly transmitted to controlled objects and backup control points through the communication network, in the event of a sudden failure of the main control point, generation and the transmission of a random sequence of characters from the control point stops, and at the reserve control points, the reception of a random sequence of characters from the control point is monitored and in the absence of a received random sequence of characters, a timer is started, after the expiration of which the operational reserve control point takes over control and begins generate a random sequence of characters, which is transmitted to controlled objects and backup control points via the communication network.

EFFECT: increasing efficiency of transferring control from a suddenly failing main control point to a backup control point in special systems.

3 cl, 4 dwg

Description

The invention relates to the field of control of backup points, namely, to systems for transferring control between the manager and backup points in the event of an emergency failure of the control point (CP) and can be used in special control systems where it is necessary to ensure continuity of control of controlled objects.

There are special systems in which objects are controlled from a control object, which is a distributed control point, including a group of N control units, each of which is capable of performing tasks to manage subordinate objects. In this case, each control point of the group has a given priority in taking over control of objects. It is assumed that objects are controlled at each time from only one control center, which has the highest priority among all operational control points of the group.

Correct or erroneous assessment of the situation associated with the failure of the control unit depends on the composition of the control information and the criterion for assessing the state of the control point based on this information. The criterion for failure of the control PU will be the coincidence of a “real” event with one of the primary events embedded in the equipment of the spare PU, at which a decision is made about the failure of the control PU. With this approach, the criterion for failure of the control PU has a logical form of disjunction (the decision on the occurrence of an event (failure of the control PU) is made if at least one primary event has occurred). The complexity of solving this problem lies in the fact that the collection of all information about the state of the main and spare launchers of higher priority should be carried out directly at the spare launchers, but in practice this is not very feasible. In reality, there is a territorial dispersion of reserve control centers and the difficulty of assessing information, from recording primary factors to generating data on complex events.

The proposed method and device for transferring control between points of the same rank when implementing a distributed command post are aimed at solving this problem.

The technical result of the proposed method and device for transferring control between points of the same rank when implementing a distributed command post will ensure continuity of control by significantly reducing the process of transferring control between control points of the same group in the event of a sudden failure of the main (control) control unit.

There is a system for strategic forecasting of the technical condition of a controlled object [RF Patent No. 2326431, G06F 17/00, G06F 11/30]. This system refers to a means of monitoring the technical condition of complex multi-component objects, in which the technical condition of the controlled object is carried out by comparing its characteristics with the characteristics of objects similar to the controlled object in real time. The disadvantage of the system described above for forecasting the technical condition of complex multicomponent objects is that it allows forecasting the state of complex multicomponent objects only by comparing its characteristics with the characteristics of the objects. This does not allow ensuring high reliability of the technical state of complex multi-component objects and, accordingly, transferring control between control points when implementing a distributed command post.

There is a known method for controlling the shutdown of faulty and/or transferred to reserve system objects and a replacement reservation system for its implementation [RF Patent 2342696, G06F 11/18, H05K 10/00] in the interests of building systems with a reconfigurable structure, adaptive systems, redundant systems and automatic identifying faults in redundant systems during filtration processing of measurement results. The method makes it possible to ensure the disconnection of the maximum number of faulty objects up to the situation when two healthy objects remain in the system, by determining the combinatorial relationship between the numbers of system objects. The disadvantage of this method is the impossibility of transferring control between control points when implementing a distributed command post.

The closest in technical essence to the claimed method and device for transferring control between points of the same rank when implementing a distributed command post is a method and complex of products for covert transmission of commands [Patent for invention No. 2782337 H04K 1/06, H04L 9/06, H04L 29/02 ], which assumes that a random sequence of signs is generated at the control object, which is constantly transmitted to the controlled objects through the communication network, concealment of the issuance of commands is carried out by ensuring their unnoticeable inclusion in the composition and their identity, by their stochastic nature, of the sequence of continuously transmitted signals.

The disadvantage of the method and set of products for covert transmission of commands is that the known method is intended for covert transmission of commands and does not allow the transfer of control from a suddenly failed main (control) control point to a backup control point in special systems.

The purpose of the invention is to expand functionality by ensuring the transfer of control from a suddenly failed main (control) control point to a backup control point, as well as to simplify the algorithm of operation of the equipment at each backup control point to monitor the performance of higher-priority control points in special systems .

This goal is achieved by the fact that the method and device for transferring control between points of the same rank when implementing a distributed command post assumes that the failure criterion of the main (control) control center is based on monitoring the issuance of a random sequence of characters to control control points and the reception of a random sequence of characters at backup control points , in the event that the issuance of a random sequence of characters to the control PUs stops and, accordingly, the reception of a random sequence of characters at the backup PUs, a decision is made about the impossibility of managing objects by the managing PU and control is taken over by a functional backup PU with the highest priority. To do this, a random sequence of characters is generated at the control control point, which is constantly transmitted to controlled objects and backup control points via the communication network; in the event of a sudden failure of the main (control) control point, the generation and transmission of a random sequence of characters (digits) also stops at the backup control points , in the absence of a received random sequence of characters, a timer is started, the delay value of which is determined based on the priority of the backup control point using the formula T _i =Δτ×i, where T _i is the delay value for the i-th backup control point; i - number of the backup control point (i=1,…,K); K is the number of reserve control points; Δτ is the value of the protective time interval, when the time min{T _i } is reached, the i-th operational backup control point begins to generate a random sequence of characters, which is transmitted to controlled objects and backup control points via the communication network, when a random sequence of characters is received at the backup control points from a functional backup control point with a higher priority, the running timer is stopped and reset to its initial state.

To take over control, each backup control unit, depending on the established priority, has a different time delay determined by a timer (the higher the priority, the shorter the time delay). This allows you to eliminate conflicts between backup control units when accepting control of managed objects. Thus, an operational backup control point with the highest priority takes over control of the managed objects, because it has the least time delay.

Let's consider the implementation of the proposed method of emergency transfer of control using an example.

Let the command post grouping include: the main control point (PU ₀ ) and three reserve control points (RPU ₁ , RPU ₂ , RPU ₃ ). It is assumed that each control point (main and any of the backup ones) is capable of controlling M control objects (OU ₁ - OU _m ) using a limited set of commands. An example of this structure is shown in Fig. 1. Let the dynamics of failure of control points be as follows: at 2 minutes after time H - failure of the first reserve control point RPU ₁ ; at 4 minutes after time H - failure of the main control point PU ₀ ; 5 minutes after time H - failure of the second reserve control point RPU ₂ . This dynamics of failure of group control points is illustrated in Fig. 2.

When time H arrives, the main control point PU ₀ begins to generate a random sequence of characters, which is transmitted to controlled objects and backup control points through the communication network, while ensuring the secret transmission of commands. Covert transmission of commands is not the subject of this invention, and therefore a description of the method of covert transmission of commands in this invention is given at the end of the description.

The main control point PU ₀ generates a random sequence of characters until it fails (4th minute after time H). After the issuance of a random sequence of characters by the main control point PU ₀ ceases, due to the lack of reception at the reserve operational control points RPU ₂ and RPU ₃ (RPC ₁ failed in the 2nd minute after time H), the timer starts. The set timer for RPU ₂ is 2×Δτ; for RPU ₃ - 3×Δτ. After a time of 2×Δτ after the main control point PU ₀ stops issuing a random sequence of characters due to its failure, the reserve operational control point RPU ₂ takes control and begins to generate and issue a random sequence of characters with the ability to secretly issue commands. Upon receipt of a generated random sequence of characters from the control point RPU ₂ , the third reserve control point RPU ₃ stops and resets the running timer after a time of 2×Δτ. RPU ₂ becomes the control point because It has the highest priority among all functional ones.

If the second control point RPU ₂ fails at the 5th minute after time H, after a time of 3×Δτ the third reserve control point RPU ₃ will take over control in the manner described above. The reserve control point RPU ₃ begins to generate and issue a random sequence of characters with the ability to secretly issue commands. The dynamics of operation (generation and issuance of a random sequence of characters, with the possibility of secretly issuing commands) of the main and backup control points for the case considered is shown in Fig. 3.

Thus, from the description of the method of transferring control between points of the same rank when implementing a distributed command post, it follows that a fast and conflict-free transfer of control between backup control centers is ensured, while, in the event of a control point failure, a functional reserve control point with the highest priority takes over manage objects yourself. In addition, this method does not require the availability of equipment for monitoring the operability of all control points with higher priority at each control center.

A device for transferring control between points of the same rank when implementing a distributed command post (Fig. 4), which implements the method of transferring control between points of the same rank, contains at each reserve control point a random number sensor 1, an OR element 2, a transmitter 3, the first and second elements And 4, 8, master oscillator 5, trigger 6, counter 7 with conversion factor N (N is the length of the code word), memory unit 9, command selection unit 10, decoder 11, receiving device 12, device for monitoring the reception of a random sequence of characters (digits) 13, timer 14, second element OR 15, trigger input 16. Moreover, the trigger input 16 is connected to the input of the second element OR 15, the second input of which is connected to the output of the timer, and the output is to the trigger input of the master oscillator 5, the output of which is connected to the first inputs the first and second elements AND 4, 8, to the second inputs of which the zero and unit outputs of the trigger 6 are connected, respectively, the output of the first element AND 4 is connected to the control input of the random number sensor 1, the output of which is connected to the first input of the OR element 2, the second input of which is connected with the output of memory block 9, and the output - with the input of transmitter 3, the output of the second element AND 8 is connected to the control input of memory block 9 and to the input of counter 7, the output of which is connected to the input of setting the trigger to the zero state 6, the control output of command selection block 10 connected to the input of setting the single state of the trigger 6, and the information outputs are connected to the inputs of the decoder 11, the outputs of which are connected to the inputs of the memory block 9, the output of the receiving device 12 is connected to the input of the device for monitoring the reception of a random sequence of characters (digits) 13, the first output of which is connected to the start input of timer 14, and the second output to the stop input and reset timer 14.

The device works as follows.

In the initial state, trigger 6 is in the zero state; code words corresponding to the transmitted commands are written to memory block 9.

At the main control point, when a pulse is applied to input 16, the master oscillator 5 generates pulses at a given frequency, which arrive at the first inputs of the first and second elements AND 4, 8. Since the first element AND 4 is opened with a high potential from the zero output of trigger 6, then with From the output of the first element AND 4, pulses are sent to the control input of the random number sensor 1, and a sequence of random numbers from the output of the random number sensor 1 is supplied through the OR element 2 to the input of the transmitter 3 and is transmitted from the control object to the controlled objects and backup control points. At the backup control point, the sequence of random numbers received by the receiver 12 is fed to the input of the device for monitoring the reception of a random sequence of characters (digits) 13.

In the event of an accidental short-term interruption of the transmission of a sequence of random numbers by the main (control) control point at each backup control point, the sequence of random numbers is not received at the input of the device for monitoring the reception of a random sequence of characters 13. At each backup control point, when the arrival of a random sequence of characters 13 at the input control device stops, timer 14 is started. When transmission resumes, a sequence of random characters arrives at the input of the random character sequence control device 13. Having received a generated random sequence of characters from the main control point, at the reserve control points, based on a signal from the device for monitoring the reception of a random sequence of characters 13, the running timer 14 is stopped and reset.

In the event of a sudden failure of the main (control) control point, the transmission of a sequence of random numbers from the main (control) control point is stopped and the sequence of random numbers is not received at the input of the random sequence of characters reception control device 13. At each backup control point, when a random sequence of characters 13 is received at the input of the reception control device, timer 14 is started. the set duration of timer 14 at all backup control points is different depending on the priority (the higher the priority, the shorter the timer duration is set), then at the backup control point with the highest priority, of all operational ones, timer 14 will work, which will start through element OR 15 master oscillator 5. Master oscillator 5 generates pulses at a given frequency, which arrive at the first inputs of the first and second elements AND 4, 8. Since the first element AND 4 is opened with a high potential from the zero output of trigger 6, then from the output of the first element AND 4 pulses arrive at the control input of the random number sensor 1, and the sequence of random numbers from the output of the random number sensor 1 is supplied through the OR element 2 to the input of the transmitter 3 and is transmitted from the backup control point with the highest priority, of all operational ones, to controlled objects and backup control points . The reserve control point with the highest priority among all operational ones will automatically take control of the objects and will be able to secretly issue control commands.

The covert issuance of control commands is carried out as follows.

In the initial state, trigger 6 is in the zero state; code words corresponding to the transmitted commands are written to memory block 9.

When starting, the master oscillator 5 generates pulses at a given frequency, which arrive at the first inputs of the first and second elements AND 4, 8. Because the first element AND 4 is opened with a high potential from the zero output of trigger 6, then from the output of the first element AND 4 pulses are supplied to the control input of random number sensor 1, and a sequence of random numbers from the output of random number sensor 1 is supplied through element OR 2 to the input of transmitter 3 and transmitted from the control object to managed objects and backup points. At the controlled object, the sequence of random numbers received by the receiver is sent to the input of the shift register and then compared with the values of the codewords stored in memory.

The length of a random sequence of codeword characters is determined based on the maximum permissible probability of accidentally missing an issued command and the probability of accidentally generating a command or transforming a constantly transmitted random sequence into a falsely generated command on a controlled object.

The choice of the rational length m _p of a command (a word of n characters represented by a d-bit binary code) is carried out taking into account the ratio of two probabilities:

a) the probability P _pc of missing a command by the control object at the receiving end (if the command is issued by the control object);

b) the probability P _lk of the controlled object receiving a false command as a result of its random formation at the transmitting end or the transformation of a random sequence into a set of characters corresponding to any command from a given set.

The determination of the values of P _pk , P _lk and the rational length of the command sh _p from the possible values m=dn is made under the following assumptions:

1) A selection of words (commands) from a list of N=2 ^m words is reduced to a scheme of cases.

2) The probability Pc _of the entire sample of one specific word is equal to

3) The rational length of the command must correspond to the restrictions on the maximum permissible values of R _pk and R _lk .

4) Probability P _pc is determined by the formula

where P _b is the probability of distortion of one bit in the communication channel when transmitting words (commands).

The probability P _lx is determined by the formula

where m is the length of a word of n characters, represented by d - bit code;

r is the number of binary bits that do not match between a command and a specific word out of possible N=2 ^m variants of words (commands).

- number of combinations from m to r.

Normalizing condition

Limiting condition

Relationship (1) shows that the value of P _pc increases with increasing m.

Relationship (2) shows that the value of P _lx decreases with increasing m.

The method for determining the value of t _r is illustrated in the figure (Fig. 5).

The figure (Fig. 5) indicates:

- maximum permissible value R _pk ;

- maximum permissible value of R _lk ;

m _in - upper maximum permissible value of m;

m _n - lower maximum permissible value of m.

The value m _p must correspond to the condition

where m _in is the upper maximum permissible value of m;

m _n - lower maximum permissible value of m.

If it is necessary to transmit the required command from the command selection block 10, using the decoder 11, a code word is selected from the memory block 9, which corresponds to the desired command. From the control output of the command selection block 10, trigger 6 is set to the single state. The first element And 4 is closed, and the second element And 8 is opened. Pulses from the output of the master oscillator 5 are supplied to the input of the counter 7 and the control input of the memory block 9, and the desired code word from the output of block 9 is supplied through the OR element 2 to the input of the transmitter 3. When N pulses are received from the output of the second element, AND trigger 6 is signaled from the output counter 7 will be set to zero and a sequence of random numbers will be received at the transmitter input in the manner described above.

On the controlled object, the codeword received by the receiver is sent to the input of a shift register, the value of which is compared with the values of the codewords stored in memory. If the received codeword matches the codeword stored in memory, a match signal will appear at the output of the corresponding comparison block, which will go to the encoder, the output of which will be the code of the transmitted command.

The number of code words on the control object corresponds to the number of transmitted commands, the number of code words on the controlled object corresponds to the number of received commands, while circular, selective and circular-selective transmission of commands is provided, for circular transmission the code word corresponding to the transmitted command is recorded in memory on all controlled objects, for selective transmission, the code word corresponding to the transmitted command is recorded in memory only on one of all controlled objects; for circular selective transmission of a command, the code word corresponding to the transmitted command is recorded in the memory of a group of controlled objects.

Issuing a command from a memory block on the control object and transmitting it, as well as switching the process from issuing a command to resuming the transmission of a generated random sequence covering the command is carried out without breaking the random sequence or delaying the transmitted characters.

From the description of the work it is clear that the code word is seamlessly included in a sequence of random numbers, which allows for the secrecy of command transmission.

In the application materials, to characterize the proposed method of transferring control between points of the same rank when implementing a distributed command post, such features as a set of actions and the order of execution of actions in time are used.

The essence of the invention as a technical solution is expressed in a set of essential features sufficient to solve the specified problem and obtain the technical result provided by the invention.

The given features of the invention are essential, because they influence the possibility of solving the specified technical problem and obtaining a technical result, that is, they are in a cause-and-effect relationship with the specified result.

The technical result of the proposed method and device for transferring control between points of the same rank when implementing a distributed command post is to increase the efficiency of transferring control from a suddenly failed main (control) control point to a backup control point in special systems. In addition, the proposed method and device for transferring control between points of the same rank when implementing a distributed command post does not require equipment at each backup control point to monitor the performance of the main and higher-priority backup control points.

Claims (2)

1. A method of transferring control between points of the same rank when implementing a distributed command post, which consists in the fact that a random sequence of characters is generated at the control object, which is constantly transmitted to controlled objects and backup control points via a communication network, in the event of a sudden failure of the main (managing) ) at the control point, the generation and transmission of a random sequence of characters from the control point is stopped, and at the reserve control points, the reception of a random sequence of characters from the control point is monitored and in the absence of a received random sequence of characters, a timer is started, the delay value of which is determined based on the priority of the reserve point control according to the formula T _i =Δτ×i, where T _i is the delay value for the i-th backup control point; i - number of the reserve control point (i=1, K); K is the number of reserve control points; Δτ is the value of the protective time interval, when the time min{T _i } is reached, the i-th operational reserve control point takes over control and begins to generate a random sequence of characters, which is transmitted to controlled objects and reserve control points through the communication network, having received at the reserve points control a random sequence of characters from a functional backup control point with a higher priority, the running timer is stopped and set to its initial state. 2. A device for transferring control between points of the same rank when implementing a distributed command point, implementing the method according to claim 1, containing at the control object and backup control points a transmitting unit, a master generator, the first and second AND elements, a random number sensor, an OR element, trigger, counter with a given conversion factor, command selection unit, decoder, memory unit, the input of the device is connected to the start input of the master oscillator, the output of which is connected to the first inputs of the first and second AND elements, the second inputs of which are connected, respectively, to the zero and one outputs of the trigger , the output of the first AND element is connected to the control input of the random number sensor, the output of which is connected to the first input of the OR element, the second input of which is connected to the output of the memory block, and the output to the transmitting block, the control output of the command selection block is connected to the input of setting the unit state trigger, the information outputs of the command selection block are connected to the inputs of the decoder, the outputs of which are connected to the inputs of the memory block, the output of the second element AND is connected to the control input of the memory block and to the input of a counter with a given conversion factor, the output of which is connected to the input of setting the trigger to the zero state, characterized in that the device contains a receiving device, a device for monitoring the reception of a random sequence of characters, a timer, a second OR element, and the trigger input is connected to the input of the second OR element, the second input of which is connected to the output of the timer, and the output is connected to the trigger input of the master oscillator, the output of the receiving device is connected to the input of the device for monitoring the reception of a random sequence of characters, the first output of which is connected to the start input of the timer, and the second output is connected to the input of stopping and resetting the timer.