CN100472504C - Redundancy control device and method of central interface disc - Google Patents
Redundancy control device and method of central interface disc Download PDFInfo
- Publication number
- CN100472504C CN100472504C CNB2005101211250A CN200510121125A CN100472504C CN 100472504 C CN100472504 C CN 100472504C CN B2005101211250 A CNB2005101211250 A CN B2005101211250A CN 200510121125 A CN200510121125 A CN 200510121125A CN 100472504 C CN100472504 C CN 100472504C
- Authority
- CN
- China
- Prior art keywords
- cpu
- operation result
- monitoring
- control unit
- output control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 12
- 238000012544 monitoring process Methods 0.000 claims abstract description 43
- 238000004891 communication Methods 0.000 claims description 8
- 238000012937 correction Methods 0.000 claims description 5
- 238000013461 design Methods 0.000 description 4
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000008520 organization Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Images
Abstract
A redundancy control device method which is used in central interface disc includes data acquisition unit, the first CPU, the second CPU and monitoring CPU, output control unit which is connected with output end of the monitoring CPU and output end which is connected with the output control unit; the monitoring unit provides signal to said output control unit: if the calculation results of the three CPU are uniform, the calculation results are output to said output control unit; if the calculation results of the first CPU is different with the second CPU, the result is output as the monitoring CPU; if the results of the first CPU and the second CPU are uniform, but different form the calculating result of the monitoring CPU, the system will give up the calculating result of the monitoring CPU, it belongs to the invalidation status. The redundancy control device method in the invention can guarantee the condition of unstable signal and unreliable control can not happen, at the same time, the structure is simple, cost is low.
Description
Technical field
The present invention relates to computer technology, be specifically related to a kind of CPU redundancy control apparatus and method that can be applicable to the central interface dish.
Background technology
PSC is the abbreviation of central interface dish, be used to handle the request of the input/output signal of subway shield door system, in the performance history of subway shield door PSC (central interface dish), for the consideration that system's operation security and passenger are responsible for, need guarantee that the logical relation between the input/output signal is accurate.Design according to as shown in Figure 1 prior art, adopt a CPU to realize data acquisition and output control, though also can handle the logical relation between the input/output signal in this way, but exist hidden danger, because if CPU crashes or software runs and flies (this is a single cpu system unavoidable problem) etc., the central interface dish will lose the calculation process to input/output signal, finally cause the generation of accident.If for increasing reliability, adopt two CPU redundancies, and make its " gather simultaneously, computing simultaneously, output simultaneously ", like this, in case wherein go wrong during certain CPU work, another CPU can replace work so, system the phenomenon that crashes can not occur, still can operate as normal.But so two CPU designs bring a new problem again, because being based on us, this supposes two CPU at any time, the all ideally on all four and measure taked of operation result under any rugged environment, if just in case the operation result of these two CPU is inconsistent, output control module can't move so, still can have potential safety hazard.
Summary of the invention
The technical problem to be solved in the present invention provides the multiple CPU redundancy control method of a kind of PSC of can be applicable to, can overcome the above-mentioned shortcoming of prior art, guarantees at any time to have reliable and stable output.
The above-mentioned technical matters of the present invention solves like this, a kind of redundancy control apparatus that is used for the central interface dish, it is characterized in that, comprise data acquisition unit, the CPU that input port is connected with described data acquisition unit respectively, the 2nd CPU and monitoring CPU, the operation result of the one CPU is connected with a UART of monitoring CPU by serial communication interface, the operation result of the 2nd CPU is connected with the 2nd UART of monitoring CPU by serial communication interface, also comprises output control unit that is connected with the output port of described monitoring CPU and the output port that is connected with output control unit; Described monitoring CPU provides signal to described output control unit like this: if consistent with the operation result of monitoring CPU from the operation result of first and second CPU, then export operation result to described output control unit; If a CPU and the 2nd CPU operation result are inconsistent, then the operation result according to monitoring CPU carries out after " pressure error correction " operation result being outputed to described output control unit to a CPU and the 2nd CPU operation result; In full accord and be different from the operation result of monitoring CPU as the operation result of a CPU and the 2nd CPU, then system abandons the operation result of monitoring CPU, belongs to control " disarmed state ".
Another technical matters of the present invention solves like this, construct a kind of redundancy control method that is used for the central interface dish, comprise data acquisition unit, the CPU that input port is connected with described data acquisition unit respectively, the 2nd CPU and monitoring CPU, the operation result of the one CPU is connected with a UART of monitoring CPU by serial communication interface, the operation result of the 2nd CPU is connected with the 2nd UART of monitoring CPU by serial communication interface, also comprises output control unit that is connected with the output port of described monitoring CPU and the output port that is connected with output control unit; Described Redundant Control may further comprise the steps: judge by described monitoring CPU whether consistent from the operation result of first and second CPU with the operation result of monitoring CPU, if consistently cause then export operation result and arrive described output control unit; If the operation result from the operation result of first and second CPU and monitoring CPU is inconsistent, judge then whether a CPU is consistent with the 2nd CPU operation result, if inconsistent then the one CPU and the 2nd CPU operation result are carried out after " pressure error correction " operation result being outputed to described output control unit according to the operation result of monitoring CPU; If it is consistent with the 2nd CPU operation result but be different from the operation result of monitoring CPU to judge a CPU, then system abandons the operation result of CPU-C, belongs to control " disarmed state ".
Implement above-mentioned redundancy control apparatus method and apparatus of the present invention, can guarantee that control signal because environment is abominable or device is unstable any jitter does not take place, and controls insecure situation, simultaneously, of the present invention simple in structure, realize that cost is also cheaper.
Description of drawings
Fig. 1 is the logical organization synoptic diagram of prior art single CPU control;
Fig. 2 is that the present invention adopts three CPU to realize the logic diagram of Redundant Control;
Embodiment
As shown in Figure 2, the present invention adopts the working method of 3 CPU " collection simultaneously, computing simultaneously, output simultaneously ", and two CPU of CPU-A and CPU-B carry out computing, and CPU-C monitors.The output result has following 3 to be deeply in love condition:
2.1 ideally, the operation result of three CPU is in full accord, and makes output control module output control signal;
2.2 if the operation result of CPU-A and CPU-B is inconsistent, so according to the operation result of CPU-C, carry out " pressure error correction ", i.e. the operation result of CPU-C is depended in Ci Shi output;
2.3 if the operation result of CPU-A and CPU-B is in full accord, and the operation result difference of CPU-C, then system abandons the operation result of CPU-C, belongs to " disarmed state ";
Through actual motion and test, the design after the improvement has reached designing requirement.
Final in a word output control signal, with 3 CPU simultaneously calculated result carry out " voting " and decide.Signal communicating between CPU-A, CPU-B and the CPU-C realizes by serial ports UART.For realizing above-mentioned Redundant Control, voting circuit is used for output according to three CPU, and to form the truth table and the function module design figure of oneself output as follows:
Claims (2)
1, a kind of redundancy control apparatus that is used for the central interface dish, it is characterized in that, comprise data acquisition unit, the CPU that input port is connected with described data acquisition unit respectively, the 2nd CPU and monitoring CPU, the operation result of the one CPU is connected with a UART mouth of monitoring CPU by serial communication interface, the operation result of the 2nd CPU is connected with the 2nd UART mouth of monitoring CPU by serial communication interface, also comprises output control unit that is connected with the output port of described monitoring CPU and the output port that is connected with output control unit; Described monitoring CPU provides signal to described output control unit like this: if consistent with the operation result of monitoring CPU from the operation result of first and second CPU, then export operation result to described output control unit; If a CPU and the 2nd CPU operation result are inconsistent, then the operation result according to monitoring CPU carries out after " pressure error correction " operation result being outputed to described output control unit to a CPU and the 2nd CPU operation result; In full accord and be different from the operation result of monitoring CPU as the operation result of a CPU and the 2nd CPU, then system abandons the operation result of monitoring CPU, belongs to control " disarmed state ".
2, a kind of redundancy control method that is used for the central interface dish, it is characterized in that, comprise data acquisition unit, the CPU that input port is connected with described data acquisition unit respectively, the 2nd CPU and monitoring CPU, the operation result of the one CPU is connected with a UART of monitoring CPU by serial communication interface, the operation result of the 2nd CPU is connected with the 2nd UART of monitoring CPU by serial communication interface, also comprises output control unit that is connected with the output port of described monitoring CPU and the output port that is connected with output control unit; Described redundancy control method may further comprise the steps: judge by described monitoring CPU whether consistent from the operation result of first and second CPU with the operation result of monitoring CPU, if unanimity would export operation result arrive described output control unit or; If the operation result from the operation result of first and second CPU and monitoring CPU is inconsistent, judge then whether a CPU is consistent with the 2nd CPU operation result, if inconsistent then the one CPU and the 2nd CPU operation result are carried out after " pressure error correction " operation result being outputed to described output control unit according to the operation result of monitoring CPU; If it is consistent with the 2nd CPU operation result but be different from the operation result of monitoring CPU to judge a CPU, then system abandons the operation result of monitoring CPU, belongs to control " disarmed state ".
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB2005101211250A CN100472504C (en) | 2005-12-29 | 2005-12-29 | Redundancy control device and method of central interface disc |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB2005101211250A CN100472504C (en) | 2005-12-29 | 2005-12-29 | Redundancy control device and method of central interface disc |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1991814A CN1991814A (en) | 2007-07-04 |
| CN100472504C true CN100472504C (en) | 2009-03-25 |
Family
ID=38214075
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB2005101211250A Active CN100472504C (en) | 2005-12-29 | 2005-12-29 | Redundancy control device and method of central interface disc |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100472504C (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102955427B (en) * | 2012-11-14 | 2014-12-03 | 中国船舶重工集团公司第七一九研究所 | Interconnecting error correction type triple-modular redundancy control system and arbitration method |
| CN103901797A (en) * | 2012-12-27 | 2014-07-02 | 中国科学院沈阳自动化研究所 | Safety-instrument data processing diagnosis circuit and method based on microcontroller redundancy technology |
-
2005
- 2005-12-29 CN CNB2005101211250A patent/CN100472504C/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN1991814A (en) | 2007-07-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107347018B (en) | Three-redundancy 1553B bus dynamic switching method | |
| US6374364B1 (en) | Fault tolerant computing system using instruction counting | |
| EP2013733B1 (en) | Error filtering in fault tolerant computing systems | |
| CN111352338B (en) | Dual-redundancy flight control computer and redundancy management method | |
| CN101634959B (en) | Dual redundant fault-tolerant system based on embedded type CPU, | |
| CN201909961U (en) | Redundancy control system | |
| CN101931580B (en) | System on chip adopting ARINC 659 rear panel data bus interface chip | |
| US20070220367A1 (en) | Fault tolerant computing system | |
| EP0514075A2 (en) | Fault tolerant processing section with dynamically reconfigurable voting | |
| EP3699764B1 (en) | Redundant ethernet-based secure computer system | |
| US8527714B2 (en) | Secure avionics equipment and associated method of making secure | |
| CN105138495A (en) | ARINC659 bus controller with embedded microcontroller | |
| CN110427283A (en) | A kind of fuel management computer system of double redundancy | |
| CN113806290B (en) | High-integrity system-on-a-chip for integrated modular avionics systems | |
| CN100472504C (en) | Redundancy control device and method of central interface disc | |
| CN110413456B (en) | Triple redundant data step-by-step voting system and method | |
| CN112540918A (en) | Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus | |
| CN202583865U (en) | Dual-redundancy control circuit | |
| CN102193799A (en) | Safety intermediate system for safety computer communication | |
| CN105607616A (en) | Method for carrying out reliability analysis on redundant system | |
| CN115408240A (en) | Redundant system active/standby method, device, equipment and storage medium | |
| CN104299301A (en) | Nonporous electronic control security door fault-tolerant control system | |
| CN113312094A (en) | Multi-core processor application system and method for improving reliability thereof | |
| CN202267835U (en) | Bi-module redundant heat standby measurement and control device | |
| CN107526658B (en) | Method for ensuring reception of a common signal in an avionics system comprising a plurality of electronic computers |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| ASS | Succession or assignment of patent right |
Owner name: SHENZHEN FANGDA AUTOMATION SYSTEM CO., LTD. Free format text: FORMER OWNER: FANGDA GROUP CO., LTD. Effective date: 20101119 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| COR | Change of bibliographic data |
Free format text: CORRECT: ADDRESS; FROM: 518055 FANGDA INDUSTRY CITY, LONGJING, XILI TOWN, NANSHAN DISTRICT, SHENZHEN CITY, GUANGDONG PROVINCE TO: 518055 FANGDACHENG, LONGJING, XILI, NANSHAN DISTRICT, SHENZHEN CITY, GUANGDONG PROVINCE |
|
| TR01 | Transfer of patent right |
Effective date of registration: 20101119 Address after: 518055 Guangdong city of Shenzhen province Nanshan District Xili, Longjing Fangda Patentee after: Shenzhen Fangda Automation System Co., Ltd. Address before: 518055 Guangdong city of Shenzhen province Nanshan District Xili Town, Longjing Fangda industrial city Patentee before: Fangda Group Co., Ltd. |
|
| CP03 | Change of name, title or address |
Address after: 518000 Guangdong 5 high tech Industrial Park, Shenzhen, Nanshan District, South China Science and technology building, twelve South Road. Patentee after: Fang Dazhi Chuang Technology Co., Ltd. Address before: 518055 Guangdong city of Shenzhen province Nanshan District Xili, Longjing Fangda Patentee before: Shenzhen Fangda Automation System Co., Ltd. |
|
| CP03 | Change of name, title or address | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 518000 Guangdong 5 high tech Industrial Park, Shenzhen, Nanshan District, South China Science and technology building, twelve South Road. Patentee after: Fangda Zhiyuan Technology Co.,Ltd. Address before: 518000 Guangdong 5 high tech Industrial Park, Shenzhen, Nanshan District, South China Science and technology building, twelve South Road. Patentee before: FANGDA ZHICHUANG TECHNOLOGY Co.,Ltd. |
|
| CP01 | Change in the name or title of a patent holder |