CN103631591A - Software operation control system and method meeting civil-aircraft different software grade requirements - Google Patents
Software operation control system and method meeting civil-aircraft different software grade requirements Download PDFInfo
- Publication number
- CN103631591A CN103631591A CN201310628727.XA CN201310628727A CN103631591A CN 103631591 A CN103631591 A CN 103631591A CN 201310628727 A CN201310628727 A CN 201310628727A CN 103631591 A CN103631591 A CN 103631591A
- Authority
- CN
- China
- Prior art keywords
- software
- ops
- level
- unit
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Stored Programmes (AREA)
Abstract
The invention discloses a software operation control system and method meeting civil-aircraft different software grade requirements. Grade-A software and grade-D software are isolated in space and time; meanwhile, because the range of Flash capable of being accessed by the grade-D software is limited by a memory management unit, the phenomenon that the grade-D software stops operating and then the grade-A software starts to operate instantly will not happen even if the grade-D software wrongly accesses a Flash address of a code of the grade-A software, and accordingly it is guaranteed that the grade-A software will not operate when the grade-D software operates. The software operation control system and method meeting the civil-aircraft different software grade requirements are used for solving the problems that low-grade software and high-grade software can not be isolated in space or time, the high-grade software is sure to be subjected to faults of the low-grade software and integrity of the high-grade software can not be guaranteed in the prior art.
Description
[technical field]
The present invention relates to running software control field, refer to especially the running software control system and the method that meet civil aircraft different software class requirement.
[background technology]
Software for Design in civil aircraft ensures grade, and namely what is often called software grade, can be divided into 5 grades, is respectively A level (catastrophic), B level (dangerous), C level (important), D level (less important) and E level (without impact).Software grade is that the HAZAN being caused according to failure condition by safety evaluation process determines, higher grade of software, and harm when software breaks down, Flight Safety being produced is larger.
A level software is as the software of highest ranking, and its cost of development is the most expensive, and according to the requirement of DO-178B, it need to meet 66 targets, and D level software only need to meet 28 targets.D level software is with respect to A level software:
1) do not need to develop bottom demand;
2) do not need to be MCDC(Modified Condition Decision Coverage) coverage test;
3) do not need code review;
4) to independence, require very low;
5) very low etc. to the requirement of configuration management.
According to statistics, the cost of development of D level software is only 1/4th of A level software.
Conventionally, the software module with difference in functionality can be compiled into an executable file and move on single cpu, if yet different software modules is defined by different grades, the software architecture that the software of this different brackets is compiled into an executable file is difficult to meet civil aircraft for the requirement of software partition isolation, because subregion requires different software module to isolate, the hardware that can access them is isolated, and low-grade software fault can not " infect " in high-grade software.Yet, high-grade software and inferior grade running software are on same CPU, need to access common hardware, may accomplish that hardly high-grade software only accesses some hardware, inferior grade software is only accessed other hardware, and high-grade software is become an executable file with inferior grade software by binding, their code is mixed in together and carries out, they cannot be kept apart from room and time, the fault that cannot accomplish inferior grade software can " not infect " in high-grade software, cannot guarantee the integrality (inferior grade software can affect high-grade software) of high-grade software.
While coexisting in an executable file just because of different brackets software, cannot meet the integrality of high-grade software, so this software architecture can only be promoted to high-grade software and develops originally can be designed as low-grade software, has greatly increased cost of development.
[summary of the invention]
The object of the present invention is to provide a kind of running software control system and method that meets civil aircraft different software class requirement, in order to solve fault " infection " that prior art cannot keep apart, cannot avoid inferior grade software from room and time by inferior grade software and high-grade software in high-grade software and the problem that cannot guarantee high-grade software integrity.
For achieving the above object, implement the running software control system that meets civil aircraft different software class requirement of the present invention, be applied in aviation full-duplex switching Ethernet switch, this control system comprises:
The first storage unit, wherein stores guiding software, default software and default configuration table, and this first storage unit is subject to hardware protection, and wherein guiding software, default software and the default configuration table of storage are not supported on-the-spot loading;
The second storage unit, it supports the data of outside data loader to load, and supports on-the-spot value-added tax function, by the second storage unit, new OPS software and OPS allocation list can be loaded in switch; Wherein the default software in the first storage unit and the OPS software in the second storage unit have all been divided into A level and D level, and wherein A level software is compiled as an executable file, and D level software is compiled as another one executable file; In addition, the monitoring of external data load request, the judgement that whether allows or refuse data to load are all realized by A level software, and data value-added tax function is realized by D level software; And in the second storage unit, also store new loading software aircraft components, this new loading software aircraft components comprises OPS software or OPS allocation list, and its mode loading by scene is loaded into the second storage unit;
Loading unit, it is connected with the second storage unit with the first storage unit, in the random access memory that the first storage unit is loaded into CPU from software different in the second storage unit or allocation list;
NVM(non-volatile RAM) unit, it is connected with loading unit, is provided with warm start sign and data and loads sign, and these two signs can be modified;
Cpu ram, is connected with loading unit, the software that reception loading unit loads or allocation list etc. operation;
Memory management unit, is arranged the address realm that makes CPU can only access cpu ram and set for depositing the second memory of new loading software aircraft components by guiding software.
For achieving the above object, implement of the present inventionly to utilize the above-mentioned running software control system that meets civil aircraft different software class requirement to meeting the software running control method of civil aircraft different software class requirement, the method comprises the steps:
After switch powers on, acquiescence operation guiding software, the warm start that guiding software is read in NVM unit is masked as 0, the A level OPS software of the second storage unit and OPS allocation list are loaded in cpu ram and are moved, and enter OPS pattern, under this pattern, A level OPS software can be monitored external data load request; If receive external data load request, and current conditions permit accepts external data and loads, and A level OPS software can put 1 the warm start sign in NVM unit, and writes a value and load in sign to the data in NVM unit, then resets and restarts; If do not loaded when precondition does not allow to accept external data, A level OPS software can be refused external data load request;
After reset is restarted, guiding software moves again, warm start in reading NVM unit is masked as 1, and loads sign according to the data in NVM unit, and the D level OPS Bootload in the second storage unit is moved and enter data loading mode to cpu ram; Before operation D level OPS software, guiding software arranges by memory management unit, make CPU can only access cpu ram and for depositing the second memory unit address scope of new loading software aircraft components, then jump to the D level OPS running software that has been loaded into cpu ram; D level OPS software is responsible for concrete data and is loaded, address above mentioned by the new loading software aircraft components programming receiving to the second storage unit, warm start sign in NVM unit is put to 1, and write another value and load in sign to the data in NVM unit, then reset and restart;
After reset is restarted, guiding software moves again, the warm start that it reads in NVM unit is masked as 1, and load sign according to the data in NVM unit, A level OPS Bootload is moved and enters OPS pattern to cpu ram, A level OPS software loads the worth of sign according to data and knows have new loading software aircraft components to be received, A level OPS software is done CRC check to new loading software aircraft components, if CRC check is passed through, new loading software aircraft components is covered and in the second storage unit, originally deposited A level OPS software, the corresponding address of D level OPS software or OPS allocation list, and send data and load successful acknowledgement frame to external data loader, and the warm start sign clear 0 in NVM unit reset are restarted,
After reset is restarted, guiding software moves again, and the warm start reading in NVM unit is masked as 0, the second storage unit A level OPS software and OPS allocation list is loaded in cpu ram and is moved.
Compared with prior art, the present invention by by A level software and D level software from space, on time, isolate, simultaneously owing to having limited the scope of the Flash of D level softward interview by memory management unit setting, even the access that its is wrong deposit A level software code Flash address also there will not be the situation that directly jumps to A level running software from D level software, while it is hereby ensured D level running software, A level software can not move, moreover all resources have all been monopolized when A level software or D level running software, and D level OPS software only moves under data loading mode, under other patterns, can not move, and AFDX switch to leave the unique method of data loading mode be to reset to restart, restarting the contingent mistake of rear D level software has all been eliminated, these mistakes can not infect A level software, thereby solving prior art cannot keep apart inferior grade software and high-grade software from room and time, the fault " infection " that cannot avoid inferior grade software is in high-grade software and the problem that cannot guarantee high-grade software integrity.
[accompanying drawing explanation]
Fig. 1 is for implementing the composition schematic diagram that meets the running software control system of civil aircraft different software class requirement of the present invention.
Fig. 2 is for implementing the concrete application schematic diagram of the running software control system that meets civil aircraft different software class requirement of the present invention on AFDX switch.
[embodiment]
For the software running control method that meets civil aircraft different software class requirement of the present invention is implemented in clearer understanding, below take aviation full-duplex switching Ethernet (Avionic Full-Duplex Switched Ethernet) switch (hereinafter to be referred as AFDX switch) software and describe as example.
AFDX switch be in avionics system for the airplane data network switch of communication, AFDX switch is widely used at present in the avionics system of aircraft.AFDX switch is as the communication apparatus on civil aircraft, and the software that resides in its inside need to design as A level software.But the software development of A level is quite expensive, and cost is very high, and in actual use, ARINC615A data value-added tax function is just used when ground maintenance, so it can be used as D level software and designs.The present invention can make inferior grade software and high-grade software on single processor, coexist, and meets the requirement of civil aircraft to different software grade.The present invention can not affect high-grade software (such as A level software) in the time of can guaranteeing inferior grade software (such as D level software) operation, the fault of inferior grade software can " not infect " high-grade software, and only need to do a small amount of partition analysis and can meet the integrality demand in civil aircraft software, thereby greatly reduce the cost of development of civil aircraft software.
In the specific implementation, the present invention becomes a plurality of executable files rather than an executable file by the software translating of different software grade, and moves on single cpu, and the object of isolating mutually to realize the software of different software grade by following method.
Refer to shown in Fig. 1, for implementing the composition schematic diagram that meets the running software control system of civil aircraft different software class requirement of the present invention, this running software control system that meets civil aircraft different software class requirement comprises:
The first storage unit, wherein stores guiding software, default software and default configuration table, and this first storage unit is subject to hardware protection, and wherein guiding software, default software and the default configuration table of storage can only factory be rewritten and not support scene to load;
The second storage unit, it supports the data of outside data loader to load, and supports on-the-spot value-added tax function, by the second storage unit, new OPS software and OPS allocation list can be loaded in switch; Wherein the default software in the first storage unit and the OPS software in the second storage unit have all been divided into A level and D level, and wherein A level software is compiled as an executable file, and D level software is compiled as another one executable file; In addition, for the monitoring of external data load request, the judgement that whether allows or refuse data to load, all by A level software, realized, and simple data value-added tax function is realized by D level software; And also store new loading software aircraft components in the second storage unit, its mode that can load by scene is loaded into the second storage unit, this new loading software aircraft components comprises OPS software or OPS allocation list;
Loading unit, it is connected with the second storage unit with the first storage unit, in the random access memory (RAM) that the first storage unit is loaded into CPU from software different in the second storage unit or allocation list;
NVM unit, it is connected with loading unit, is provided with warm start sign and data and loads sign, and these two signs can be modified;
Cpu ram, is connected with loading unit, the software that reception loading unit loads or allocation list etc. operation;
Memory management unit, is arranged by guiding software, makes CPU can only access cpu ram and for depositing the address realm of setting of the second storage unit of new loading software aircraft components (LSAP).
The operation method of the above-mentioned running software control system that meets civil aircraft different software class requirement specifically comprises the steps:
After powering on, acquiescence operation guiding software, the warm start that guiding software is read in NVM unit is masked as 0, the A level OPS software of the second storage unit and OPS allocation list are loaded in cpu ram and are moved, and enter OPS pattern, under this pattern, A level OPS software can be monitored external data load request.If receive external data load request, and current condition (as aircraft on ground and allow to carry out data loading) allow to accept external data and load, A level OPS software can put 1 the warm start sign in NVM unit, and it is inner to the data loading signs (615A sign) in NVM unit to write a value, then resets and restarts.If do not loaded when precondition does not allow to accept external data, A level OPS software can be refused external data load request.
After reset is restarted, guiding software moves again, warm start in reading NVM unit is masked as 1, and loads sign according to the data in NVM unit, and the D level OPS Bootload in the second storage unit is moved and enter data loading mode to cpu ram.Before operation D level OPS software, guiding software arranges by memory management unit (MMU), make CPU can only access cpu ram and can load FLASH address realm for depositing the scene of new loading software aircraft components (LSAP), then jumping to the D level OPS running software that is loaded into cpu ram.D level OPS software is responsible for concrete data and is loaded, it can load FLASH address new loading software aircraft components (LSAP) programming receiving to the scene for the new loading software aircraft components (LSAP) of depositing of above-mentioned memory management unit setting, warm start sign in NVM unit is put to 1, and it is inner to the data loading signs (615A sign) in NVM unit to write another value, then resets and restarts.
After reset is restarted, guiding software moves again, the warm start that it reads in NVM unit is masked as 1, and load sign according to the data in NVM unit, A level OPS Bootload is moved and enters OPS pattern to CPU RAM, A level OPS software loads the worth of sign according to data and knows have new loading software aircraft components to be received, A level OPS software is done CRC check to new loading software aircraft components, if CRC check is passed through, new loading software aircraft components is covered and originally deposits A level OPS software, the scene of D level OPS software or OPS allocation list can load Flash address, and send data and load successful acknowledgement frame to external data loader, and the warm start sign clear 0 in NVM unit reset are restarted, in above-mentioned process, for the purpose of safety, can not allow D level software have and directly write on the former chance of depositing A level OPS software, D level OPS software or OPS allocation list address that visits, not so during D level running software, if made mistakes, it may jump to A level running software, thereby the fault of D level software may be infected to A level software, and D level software cannot guarantee the integrality of new LSAP.So adopted D level software, new LSAP is write to a temporary address (scene that is the new loading software aircraft components (LSAP) of depositing of memory management unit setting can load FLASH address) of the second storage unit, then by A level software, new LSAP is done to integrity checking (CRC check), after verification succeeds, just new LSAP is write in correct address (scene of originally depositing A level OPS software, D level OPS software or OPS allocation list can load Flash address) and gone.
After reset is restarted, guiding software moves again, the warm start reading in NVM unit is masked as 0, A level OPS software and OPS allocation list are loaded in cpu ram and are moved, so just loaded successfully new loading software aircraft components (comprising OPS software or OPS allocation list) and just can in switch, move.
As shown in Figure 2, for implementing the concrete application of the running software control system that meets civil aircraft different software class requirement of the present invention on AFDX switch.
In the specific implementation, in AFDX switch, have 2 Flash(flash) chip, a slice is that factory safeguards Flash chip (i.e. the first storage unit), it is subject to hardware protection, and the guiding software, default software and the default configuration table that reside in its inside can only be rewritten and not support scene to load in factory; Another sheet is that scene can load Flash chip (i.e. the second storage unit), and it supports ARINC615A data to load, and can load at the scene new OPS software and OPS allocation list in switch.Because default software and OPS software all possess ARINC615A data value-added tax function, so default software and OPS software have all been divided into A level and D level, A level software is compiled as an executable file, and D level software is compiled as another one executable file.In order to meet security requirement, to the monitoring of ARINC615A data load request, whether allow/refuse judgement that ARINC615A data load to be all placed in A level software to realize, pure ARINC615A data value-added tax function (TFTP agreement etc.) realizes in D level software.
Under normal circumstances, acquiescence operation guiding software after switch powers on, the warm start that guiding software is read in NVM unit is masked as 0, learn and A level OPS software and OPS allocation list need to be loaded in CPURAM and move, and enter OPS pattern, under this pattern, A level OPS software can be monitored ARINC615A data load request.If received ARINC615A data load request, and current conditions permit is accepted ARINC615A data and is loaded, A level OPS software can put 1 the warm start sign in NVM unit, and writes a value in the 615A sign in NVM unit, then resets and restarts.If but do not load when precondition does not allow to accept ARINC615A data, A level OPS software can be refused ARINC615A data load request.
After reset is restarted, guiding software moves again, and the warm start that it reads in NVM unit is masked as 1, and according to the 615A sign in NVM unit, learns and this time need D level OPS Bootload to move and enter data loading mode to RAM.For security consideration, before operation D level OPS software, guiding software arranges by memory management unit (MMU), make CPU can only access CPURAM, with for depositing the scene of new loading software aircraft components (LSAP), can load FLASH address realm, then jump to the D level OPS running software that is loaded into CPU RAM.D level OPS software is responsible for concrete data and is loaded, its can load FLASH address new loading software aircraft components (LSAP) programming of receiving to the scene for depositing it, warm start sign in NVM unit is put to 1, and write another value in the 615A sign in NVM unit, then reset and restart.
After reset is restarted, guiding software moves again, and the warm start that it reads in NVM unit is masked as 1, and according to the 615A sign in NVM unit, learns and this time need A level OPS Bootload to move and enter OPS pattern to CPU RAM.A level OPS software knows have new loading software aircraft components to be received according to the worth of 615A sign, so A level OPS software is done CRC check to new loading software aircraft components, if CRC check is passed through, new loading software aircraft components is covered to the scene of originally depositing A level OPS software, D level OPS software or OPS allocation list and can load Flash address, and send last ARINC615A data and load successful acknowledgement frame to ARINC615A data loader, finally the warm start sign clear 0 in NVM unit and reset and restart.
After reset is restarted, guiding software moves again, the warm start that it reads in NVM unit is masked as 0, learn and A level OPS software and OPS allocation list will be loaded in CPU RAM and move, so just loaded successfully new LSAP (comprising OPS software or OPS allocation list) and just can run on switch.
From above-mentioned steps, can show that A level software can not be subject to the impact of D level software error to be because there is following mechanism:
(1) A level software and D level software from space, the time isolates.
(2) owing to having limited the scope of the Flash of D level softward interview by memory management unit setting, even the access that its is wrong deposit A level software code Flash address also there will not be the situation that directly jumps to A level running software from D level software, while it is hereby ensured D level running software, A level software can not move.
(3) all resources have all been monopolized when A level software or D level running software.
(4) D level OPS software only moves under data loading mode, under other patterns, can not move.
(5) to leave the unique method of data loading mode be to reset to restart to AFDX switch, restarts the contingent mistake of rear D level software and be all eliminated, and that is to say that these mistakes can not infect A level software.
For security consideration, D level OPS software is only realized data loading operations, and following three data load relevant task and in A level OPS software, realize:
(1) accept/refusal data load request;
(2) check the integrality of the new loading software aircraft components (LSAP) receiving, i.e. CRC check;
(3) send and load successful message to data loader.
It is in order to guarantee correctly starting and finishing of data loading that these 3 tasks need to realize in A level software:
(1) what first task can stop mistake enters data loading mode;
(2) second, third task is used for confirming whether data load successful.
Be understandable that, for those of ordinary skills, can be equal to replacement or change according to technical scheme of the present invention and inventive concept thereof, and all these changes or replacement all should belong to the protection domain of the appended claim of the present invention.
Claims (2)
1. a running software control system that meets civil aircraft different software class requirement, is applied in aviation full-duplex switching Ethernet switch, it is characterized in that this control system comprises:
The first storage unit, wherein stores guiding software, default software and default configuration table, and this first storage unit is subject to hardware protection, and wherein guiding software, default software and the default configuration table of storage are not supported on-the-spot loading;
The second storage unit, it supports the data of outside data loader to load, and supports on-the-spot value-added tax function, by the second storage unit, new OPS software and OPS allocation list can be loaded in switch; Wherein the default software in the first storage unit and the OPS software in the second storage unit have all been divided into A level and D level, and wherein A level software is compiled as an executable file, and D level software is compiled as another one executable file; In addition, the monitoring of external data load request, the judgement that whether allows or refuse data to load are all realized by A level software, and data value-added tax function is realized by D level software; And in the second storage unit, also store new loading software aircraft components, this new loading software aircraft components comprises OPS software or OPS allocation list, and its mode loading by scene is loaded into the second storage unit;
Loading unit, it is connected with the second storage unit with the first storage unit, in the random access memory that the first storage unit is loaded into CPU from software different in the second storage unit or allocation list;
Non-volatile RAM unit, it is connected with loading unit, is provided with warm start sign and data and loads sign, and these two signs can be modified;
Cpu ram, is connected with loading unit, the software that reception loading unit loads or allocation list etc. operation;
Memory management unit, is arranged the address realm that makes CPU can only access cpu ram and set for depositing the second memory of new loading software aircraft components by guiding software.
2. utilize the running software control system that meets civil aircraft different software class requirement described in claim 1 to meeting a software running control method for civil aircraft different software class requirement, the method comprises the steps:
After switch powers on, acquiescence operation guiding software, the warm start that guiding software is read in non-volatile RAM unit is masked as 0, the A level OPS software of the second storage unit and OPS allocation list are loaded in cpu ram and are moved, and enter OPS pattern, under this pattern, A level OPS software can be monitored external data load request; If receive external data load request, and current conditions permit is accepted external data and is loaded, A level OPS software can put 1 the warm start sign in non-volatile RAM unit, and write a value and load in sign to the data in non-volatile RAM unit, then reset and restart; If do not loaded when precondition does not allow to accept external data, A level OPS software can be refused external data load request;
After reset is restarted, guiding software moves again, warm start in reading non-volatile RAM unit is masked as 1, and load sign according to the data in non-volatile RAM unit, the D level OPS Bootload in the second storage unit is moved and enters data loading mode to cpu ram; Before operation D level OPS software, guiding software arranges by memory management unit, make CPU can only access cpu ram and for depositing the second memory unit address scope of new loading software aircraft components, then jump to the D level OPS running software that has been loaded into cpu ram; D level OPS software is responsible for concrete data and is loaded, the new loading software aircraft components receiving is write to the address of depositing new loading software aircraft components in the second storage unit of above-mentioned memory management unit setting, warm start sign in non-volatile RAM unit is put to 1, and write another value and load in sign to the data in non-volatile RAM unit, then reset and restart;
After reset is restarted, guiding software moves again, warm start in its reading non-volatile random-access memory unit is masked as 1, and load sign according to the data in non-volatile RAM unit, A level OPS Bootload is moved and enters OPS pattern to cpu ram, A level OPS software loads the worth of sign according to data and knows have new loading software aircraft components to be received, A level OPS software is done CRC check to new loading software aircraft components, if CRC check is passed through, new loading software aircraft components is covered and in the second storage unit, originally deposited A level OPS software, the corresponding address of D level OPS software or OPS allocation list, and send data and load successful acknowledgement frame to external data loader, and the warm start sign clear 0 in non-volatile RAM unit reset are restarted,
After reset is restarted, guiding software moves again, and the warm start reading in non-volatile RAM unit is masked as 0, the second storage unit A level OPS software and OPS allocation list is loaded in cpu ram and is moved.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310628727.XA CN103631591B (en) | 2013-11-29 | 2013-11-29 | Meet running software control system and the method for civil aircraft different software class requirement |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310628727.XA CN103631591B (en) | 2013-11-29 | 2013-11-29 | Meet running software control system and the method for civil aircraft different software class requirement |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103631591A true CN103631591A (en) | 2014-03-12 |
| CN103631591B CN103631591B (en) | 2016-08-17 |
Family
ID=50212689
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310628727.XA Active CN103631591B (en) | 2013-11-29 | 2013-11-29 | Meet running software control system and the method for civil aircraft different software class requirement |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103631591B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106549847A (en) * | 2016-12-16 | 2017-03-29 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | A kind of novel integrated modularity avionics system framework |
| CN108646785A (en) * | 2018-06-22 | 2018-10-12 | 西安飞机工业（集团）有限责任公司 | A kind of flight director sys tem and improved method of aircraft |
| CN108897583A (en) * | 2018-06-27 | 2018-11-27 | 北京东土军悦科技有限公司 | Interchanger starts method, interchanger and storage medium |
| CN110858167A (en) * | 2018-08-22 | 2020-03-03 | 阿里巴巴集团控股有限公司 | Memory fault isolation method, device and equipment |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108255538B (en) * | 2017-12-08 | 2021-02-09 | 中国航空工业集团公司成都飞机设计研究所 | Method for in-situ loading of second-level controller software on distributed heterogeneous system machine |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040139310A1 (en) * | 2002-01-31 | 2004-07-15 | Akiyoshi Maeda | Information processing apparatus, memory management apparatus, memory management method, and information processing method |
| CN101727342A (en) * | 2008-10-23 | 2010-06-09 | 株式会社Ntt都科摩 | Information processing device and memory management method |
-
2013
- 2013-11-29 CN CN201310628727.XA patent/CN103631591B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040139310A1 (en) * | 2002-01-31 | 2004-07-15 | Akiyoshi Maeda | Information processing apparatus, memory management apparatus, memory management method, and information processing method |
| CN101727342A (en) * | 2008-10-23 | 2010-06-09 | 株式会社Ntt都科摩 | Information processing device and memory management method |
Non-Patent Citations (1)
| Title |
|---|
| 黄键等: "TMS320F2812DSP与以太网接口的技术研究", 《工业控制计算机》 * |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106549847A (en) * | 2016-12-16 | 2017-03-29 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | A kind of novel integrated modularity avionics system framework |
| CN106549847B (en) * | 2016-12-16 | 2018-08-14 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | A kind of novel integrated modularization avionics system |
| CN108646785A (en) * | 2018-06-22 | 2018-10-12 | 西安飞机工业（集团）有限责任公司 | A kind of flight director sys tem and improved method of aircraft |
| CN108646785B (en) * | 2018-06-22 | 2020-12-29 | 西安飞机工业（集团）有限责任公司 | Flight guidance system of airplane and improvement method |
| CN108897583A (en) * | 2018-06-27 | 2018-11-27 | 北京东土军悦科技有限公司 | Interchanger starts method, interchanger and storage medium |
| CN108897583B (en) * | 2018-06-27 | 2022-03-25 | 北京东土军悦科技有限公司 | Switch starting method, switch and storage medium |
| CN110858167A (en) * | 2018-08-22 | 2020-03-03 | 阿里巴巴集团控股有限公司 | Memory fault isolation method, device and equipment |
| CN110858167B (en) * | 2018-08-22 | 2023-06-27 | 阿里巴巴集团控股有限公司 | Memory fault isolation method, device and equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103631591B (en) | 2016-08-17 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6266736B1 (en) | Method and apparatus for efficient software updating | |
| CN103631591A (en) | Software operation control system and method meeting civil-aircraft different software grade requirements | |
| US7991988B2 (en) | Communication device and firmware update method thereof | |
| CN100582799C (en) | Electronic device diagnostic methods and systems | |
| US20090094450A1 (en) | Firmware image update and management | |
| CN103455352A (en) | Method for deploying application software and application software deploying device | |
| CN110045991B (en) | RAID configuration method and device of server, computer equipment and storage medium | |
| CN104915226A (en) | Network device software starting method, device and network device | |
| CN105320529A (en) | Boot method and device based on NAND-Flash double-boot guidance | |
| EP3895939A1 (en) | Electronic control device and security verification method for electronic control device | |
| CN107567629A (en) | Dynamic firmware module loader in credible performing environment container | |
| US9996481B2 (en) | Dynamic memory access management | |
| CN102033767A (en) | Single plate and method for upgrading same on line | |
| CN107656765A (en) | A kind of method, system and the terminal device of equipment initialization | |
| EP3321808A1 (en) | Verification system and verification method | |
| US20230033947A1 (en) | Memory system with accessible storage region to gateway | |
| CN101158920B (en) | Method and apparatus for detecting fault of operating system | |
| CN113282363A (en) | Method and device for optimizing hybrid APP | |
| CN108763145B (en) | Multi-core architecture, interface card and method for processing data packet | |
| CN111488306A (en) | Attack and defense architecture system and construction method thereof | |
| KR20220024905A (en) | How to talk to a computer on the vehicle's onboard bus | |
| CN106484494B (en) | Method and apparatus for updating virtual machine running under hypervisor | |
| CN106161099B (en) | simulation management control system and control method | |
| KR101029498B1 (en) | Method for booting of aviation mission computer | |
| WO2022255005A1 (en) | Monitoring system, monitoring method, monitoring device, and function restricting device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |