CN103853626A - Duplex redundant backup bus communication method and device for satellite-borne electronic equipment - Google Patents
Duplex redundant backup bus communication method and device for satellite-borne electronic equipment Download PDFInfo
- Publication number
- CN103853626A CN103853626A CN201210522324.2A CN201210522324A CN103853626A CN 103853626 A CN103853626 A CN 103853626A CN 201210522324 A CN201210522324 A CN 201210522324A CN 103853626 A CN103853626 A CN 103853626A
- Authority
- CN
- China
- Prior art keywords
- communication control
- control chip
- bus
- communication
- chip
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Hardware Redundancy (AREA)
Abstract
The invention discloses a bus communication method and device for satellite-borne electronic equipment. The device comprises a master communication control chip, a slave communication control chip and a bus driver module, wherein the master communication control chip and the slave communication control chip back up each other; the master communication control chip or the slave communication control chip occupies the data bus and address bus of a bus interface; the master communication control chip and the slave communication control chip are respectively provided with two watchdog modules; the two watchdog modules on each communication control chip are respectively fed by one communication control chip and the other communication control chip. Compared with the prior redundancy art, the bus communication method and the device for the satellite-borne electronic equipment can be more effective to guarantee that the system can ensure continuous completion of a task in real time when a communication failure occurs in the process of data communication of a satellite-borne electronic system, without resulting in interrupted implementation of the task. The bus communication method and the device for the satellite-borne electronic equipment have the advantages that the redundant system is of a simple structure, the arbitration mechanism is completed inside the communication chip, no additional arbitration module is needed, so that cost is saved and system maintenance is simple.
Description
Technical field
The present invention relates to spaceborne electronic equipment bus communication and communicator, particularly a kind of duplexing redundancy backup bus communication and device of spaceborne electronic equipment.
Background technology
Because satellite borne electronic system is increasingly sophisticated, and towards communication standards future development, the integrity problem of communication standardization device seems and becomes more and more important on this basis, realizes owing to having adopted standardization device also to make communication reliability design become more easily simultaneously.The General Reliability of product comprises inherent reliability, dependability and maintainability, does not require and have maintainability for satellite borne electronic system, designs be absorbed in inherent reliability and dependability aspects more.
Under extraneous heat, electricity, mechanical equal stress effect, the variation and the effect that occur in the various physics and chemistries of spaceborne electronic standard device inside and interface can exert an influence or constitute a threat to the normal work of spaceborne electron device, even cause that satellite borne electronic system lost efficacy.Satellite borne electronic system need to recover and repair strategy fast to improve availability, reliability and maintainability, can be divided into fault avoidance technology and fault-tolerant technique two is main kind of on hardware is realized.Redundancy is a kind of typical fault-tolerant technique, utilizes the redundant component existing in system to take over the work of trouble unit, reaches the object of fault masking.Aerospace system adopts duplication redundancy conventionally, according to the working method of two parts in system, can be divided into two-shipper cold standby, two-node cluster hot backup and duplexing Hot Spare, first two backup is all life period delays in the time doing to switch, because continuity, real-time and the reliability requirement of satellite borne electronic system to tasks carrying is all very high, therefore adopting duplexing hot-standby redundancy scheme.
Summary of the invention
The present invention proposes a kind of spaceborne duplexing Hot Spare mode, and duplexing redundancy backup bus communication and the device of the open spaceborne electronic equipment of which.
The technical scheme that the present invention adopts in order to complete its goal of the invention is: a kind of duplexing redundancy backup bus communication of spaceborne electronic equipment, the method adopts the mode of mutually redundant two communication control chips and bus driver module duplex Hot Spare, the exchanges data that realizes unit in bus, comprises the following steps:
Steps A, power on after each communication control chip step of carrying out self-inspection; If two communication control chips are all normal, turn to step B; If only have one of them normal, turn to step D, if two communication control chips are all undesired, turn to step e;
Step B, take data bus and address bus becomes main communication control chip by one of them communication control chip, realize the exchanges data of unit in bus, another is from communication control chip;
Notify from communication control chip if the main communication control chip work of step C is undesired, if working properly from communication control chip, by the exchanges data that takies data bus and address bus from communication control chip and continue to realize unit bus; If undesired from communication control chip work, turn to step e;
Step D, take data bus and address bus becomes main communication control chip by communication control chip working properly, realize the exchanges data of unit in bus, abnormal communication control chip of working resets, continue self-inspection, if energy is working properly is from communication control chip, turn to step C;
Step e, two communication control chips are all resetted, turn to steps A.
Further, in the duplexing redundancy backup bus communication of above-mentioned spaceborne electronic equipment: in step C, master and slave communication control chip is respectively provided with two house dogs, and one of them house dog feeds dog by this communication control chip, and another house dog feeds dog by another communication control chip; If at least continuous 3 house dog cycles of a certain communication control chip all cause intersection and feed another communication control chip watchdog reset of dog, illustrate that this chip overall work is undesired; If the house dog of a certain communication control chip oneself resets at least continuous 3 times, illustrate that this communication control chip self work is undesired.
Further, in the duplexing redundancy backup bus communication of above-mentioned spaceborne electronic equipment: when the house dog of a certain communication control chip oneself is at least continuous while resetting for 3 times, send another communication control chip signal to, inform another communication chip, the work of this communication control chip is undesired.
The present invention also provides a kind of duplexing redundancy backup bus communication device of spaceborne electronic equipment, comprise mutually redundant main communication control chip, from communication control chip and bus driver module, main communication control chip or take data bus and the address bus of bus interface from communication control chip, at described main communication control chip be respectively provided with two watchdog modules from communication control chip, two watchdog modules on each communication control chip feed dog by this communication control chip respectively and other communication control chip is fed dog.
Further, in the duplexing redundancy backup bus communication device of above-mentioned spaceborne electronic equipment, described main communication control chip and from the mutual Transfer pipe of signalization between communication control chip, in the time that a communication control chip job is undesired, send the abnormal signal of this communication control chip work by the mutual Transfer pipe of described signal to the other side
Compared with existing redundancy, the present invention can more effectively ensure that satellite borne electronic system is carrying out in the process of data communication, and in the time there is communication failure, system can ensure that task real-time continuous completes, and can not cause task-cycle to interrupt.Redundant system of the present invention is simple in structure, and arbitration mechanism completes in communication chip inside, does not need extra arbitration modules, and cost-saving, system maintenance is simple.
Below by with accompanying drawing, technical scheme of the present invention being carried out to comparatively detailed description in conjunction with specific embodiments.
Brief description of the drawings
Fig. 1 is the spaceborne electronic equipment bus communication device of the duplexing Hot Spare of the embodiment of the present invention.
Embodiment
Embodiment 1: as shown in Figure 1, each communication control chip self-inspection after powering on, if all normal, main communication control chip takies data, address bus, with equipment CPU swap data; If main communication control chip self-inspection mistake, and normal from communication control chip self-inspection, take data address bus from chip, with equipment CPU swap data.
Between master and slave communication control chip, send to the other side to have following two variety of ways abnormal the work of this communication control chip message:
First kind of way is in the time of normal work, master and slave communication control chip respectively arranges two house dogs, one of them house dog feeds dog by oneself, another house dog feeds dog by another one communication control chip, therefore, each communication control chip is except giving the watchdog reset of oneself, and master and slave communication control chip also will intersect feeds dog.If at least continuous 3 house dog cycles of a certain communication control chip all cause intersection and feed the other side's watchdog reset of dog, illustrate that this communication control chip overall work is undesired, another one communication control chip is by counting and obtain the abnormal message of this communication control chip work the house dog resetting, now, need the sheet choosing end that blocks this communication control chip (while blocking chip, it is invalid that the default conditions of chip pin should make to drive the transmission of chip to enable), and enable data and the address bus of another communication control chip.If the house dog of certain communication control chip oneself resets at least continuous 3 times, illustrate that this chip self work is undesired.For example, while normally work, the communication module A of communication chip A will give the house dog WDAA feeding-dog signal of self, also will give the house dog WDBA feeding-dog signal of communication chip B, if continuous 3 cycle resets of WDBA illustrate that chip A has fault simultaneously, WDBA sends signal, blocks the choosing of A Bigpian.If WDAA resets, send signal communication module A is resetted, if continuous 5 house dog cycles of WDAA all reset, block the sheet choosing of A chip self.
In addition, if a communication control chip detects that the work of this communication control chip is undesired, the second way is to send abnormal the work of this communication control chip message to the other side by the passage between two communication control chips.As, main communication control chip oneself feed the house dog of dog continuous three times or three times above when not feeding dog and reset, to judge that this main communication control chip work is undesired, therefore, Master control chip is by the communication port between two communication control chips, " A channel fault " passage as shown in Figure 1 sends to the abnormal message of main communication control chip work from communication control chip, if now, feed dog from communication control chip normal, by the control from communication control chip address acquisition bus and data bus, by from communication control chip, communication being controlled.
Bus contains multiple data channel, if a certain passage breaks down, now can not cause watchdog reset, but need to switch equally the duty of A, B chip, now indicates pin by channel failure, and notice backup chip carries out blocked operation.
This backup scenario A, B chip common transmitted medium, advantage is to switch the chip internal that only occurs in fault unit.Owing to driving, chip is too much, can affect the integrality of signal transmission, and A, B chip need common drive chip.
Claims (5)
1. the duplexing redundancy backup bus communication of a spaceborne electronic equipment, the method adopts the mode of mutually redundant two communication control chips and bus driver module duplex Hot Spare, the exchanges data that realizes unit in bus, is characterized in that, comprises the following steps:
Steps A, power on after each communication control chip step of carrying out self-inspection; If two communication control chips are all normal, turn to step B; If only have one of them normal, turn to step D, if two communication control chips are all undesired, turn to step e;
Step B, take data bus and address bus becomes main communication control chip by one of them communication control chip, realize the exchanges data of unit in bus, another is from communication control chip;
Notify from communication control chip if the main communication control chip work of step C is undesired, if working properly from communication control chip, by the exchanges data that takies data bus and address bus from communication control chip and continue to realize unit bus; If undesired from communication control chip work, turn to step e;
Step D, take data bus and address bus becomes main communication control chip by communication control chip working properly, realize the exchanges data of unit in bus, abnormal communication control chip of working resets, continue self-inspection, if energy is working properly is from communication control chip, turn to step C;
Step e, two communication control chips are all resetted, turn to steps A.
2. according to the duplexing redundancy backup bus communication of the spaceborne electronic equipment of claim 1, it is characterized in that: in step C, master and slave communication control chip is respectively provided with two house dogs, one of them house dog feeds dog by this communication control chip, and another house dog feeds dog by another communication control chip; If at least continuous 3 house dog cycles of a certain communication control chip all cause intersection and feed another communication control chip watchdog reset of dog, illustrate that this chip overall work is undesired; If the house dog of a certain communication control chip oneself resets at least continuous 3 times, illustrate that this communication control chip self work is undesired.
3. according to the duplexing redundancy backup bus communication of the spaceborne electronic equipment of claim 2, it is characterized in that: when the house dog of a certain communication control chip oneself is at least continuous while resetting for 3 times, send another communication control chip signal to, inform another communication chip, the work of this communication control chip is undesired.
4. the duplexing redundancy backup bus communication device of a spaceborne electronic equipment, comprise mutually redundant main communication control chip, from communication control chip and bus driver module, main communication control chip or take data bus and the address bus of bus interface from communication control chip, it is characterized in that: at described main communication control chip be respectively provided with two watchdog modules from communication control chip, two watchdog modules on each communication control chip feed dog by this communication control chip respectively and other communication control chip is fed dog.
5. the duplexing redundancy backup bus communication device of spaceborne electronic equipment according to claim 4, it is characterized in that: described main communication control chip and from the mutual Transfer pipe of signalization between communication control chip, in the time that a communication control chip job is undesired, send the abnormal signal of this communication control chip work by the mutual Transfer pipe of described signal to the other side.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210522324.2A CN103853626A (en) | 2012-12-07 | 2012-12-07 | Duplex redundant backup bus communication method and device for satellite-borne electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210522324.2A CN103853626A (en) | 2012-12-07 | 2012-12-07 | Duplex redundant backup bus communication method and device for satellite-borne electronic equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103853626A true CN103853626A (en) | 2014-06-11 |
Family
ID=50861310
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210522324.2A Pending CN103853626A (en) | 2012-12-07 | 2012-12-07 | Duplex redundant backup bus communication method and device for satellite-borne electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103853626A (en) |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104679605A (en) * | 2015-02-15 | 2015-06-03 | 北京空间机电研究所 | Commercial shelf-products-based spaceflight soft reinforcing system |
| CN105068905A (en) * | 2015-08-25 | 2015-11-18 | 天津市英贝特航天科技有限公司 | INTEL network chip based self-checking circuit and operational method |
| CN105159034A (en) * | 2015-09-21 | 2015-12-16 | 中国科学院长春光学精密机械与物理研究所 | Fault-tolerant control device of photoetching projection objective |
| CN106251914A (en) * | 2016-08-26 | 2016-12-21 | 绵阳市维博电子有限责任公司 | A kind of redundancy backup system of command bundle rods for nuclear reactors |
| CN107005446A (en) * | 2014-09-05 | 2017-08-01 | 赛峰电子与防务公司 | Binary channels framework with redundancy CCDL |
| CN107436596A (en) * | 2016-05-26 | 2017-12-05 | 上海拿森汽车电子有限公司 | The major-minor MCU redundancies monitoring method of electric boosting steering system |
| CN108334051A (en) * | 2017-12-29 | 2018-07-27 | 中国船舶重工集团公司第七0研究所 | A kind of dual redundant Hot Spare corner reflector casts control system and method |
| CN109062027A (en) * | 2018-08-02 | 2018-12-21 | 中国航空工业集团公司西安飞行自动控制研究所 | A kind of active and standby work switching method of CAN bus of double redundancy control mode |
| CN109830805A (en) * | 2019-03-19 | 2019-05-31 | 北京遥感设备研究所 | A kind of spaceborne phase array antenna beam control circuit |
| CN109885450A (en) * | 2019-01-08 | 2019-06-14 | 上海卫星工程研究所 | Active spaceborne computer state of health monitoring optimization method and system |
| CN110554981A (en) * | 2019-08-02 | 2019-12-10 | 中国科学院上海微系统与信息技术研究所 | High-reliability interface circuit and method based on alternate bias |
| CN110727544A (en) * | 2019-10-15 | 2020-01-24 | 深圳航天东方红海特卫星有限公司 | Microsatellite satellite-borne computer system based on industrial devices |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
-
2012
- 2012-12-07 CN CN201210522324.2A patent/CN103853626A/en active Pending
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107005446A (en) * | 2014-09-05 | 2017-08-01 | 赛峰电子与防务公司 | Binary channels framework with redundancy CCDL |
| CN104679605B (en) * | 2015-02-15 | 2018-03-09 | 北京空间机电研究所 | A kind of soft hardened system of space flight based on commercial goods shelf productses |
| CN104679605A (en) * | 2015-02-15 | 2015-06-03 | 北京空间机电研究所 | Commercial shelf-products-based spaceflight soft reinforcing system |
| CN105068905B (en) * | 2015-08-25 | 2019-03-01 | 天津市英贝特航天科技有限公司 | Self-checking circuit and operation method based on INTEL network chip |
| CN105068905A (en) * | 2015-08-25 | 2015-11-18 | 天津市英贝特航天科技有限公司 | INTEL network chip based self-checking circuit and operational method |
| CN105159034A (en) * | 2015-09-21 | 2015-12-16 | 中国科学院长春光学精密机械与物理研究所 | Fault-tolerant control device of photoetching projection objective |
| CN107436596A (en) * | 2016-05-26 | 2017-12-05 | 上海拿森汽车电子有限公司 | The major-minor MCU redundancies monitoring method of electric boosting steering system |
| CN106251914A (en) * | 2016-08-26 | 2016-12-21 | 绵阳市维博电子有限责任公司 | A kind of redundancy backup system of command bundle rods for nuclear reactors |
| CN108334051A (en) * | 2017-12-29 | 2018-07-27 | 中国船舶重工集团公司第七0研究所 | A kind of dual redundant Hot Spare corner reflector casts control system and method |
| CN109062027A (en) * | 2018-08-02 | 2018-12-21 | 中国航空工业集团公司西安飞行自动控制研究所 | A kind of active and standby work switching method of CAN bus of double redundancy control mode |
| CN109062027B (en) * | 2018-08-02 | 2021-12-03 | 中国航空工业集团公司西安飞行自动控制研究所 | CAN bus master-slave work switching method adopting dual-redundancy control mode |
| CN109885450A (en) * | 2019-01-08 | 2019-06-14 | 上海卫星工程研究所 | Active spaceborne computer state of health monitoring optimization method and system |
| CN109885450B (en) * | 2019-01-08 | 2022-08-12 | 上海卫星工程研究所 | Active satellite-borne computer health state monitoring and optimizing method and system |
| CN109830805A (en) * | 2019-03-19 | 2019-05-31 | 北京遥感设备研究所 | A kind of spaceborne phase array antenna beam control circuit |
| CN109830805B (en) * | 2019-03-19 | 2020-09-11 | 北京遥感设备研究所 | Satellite-borne phased array antenna beam control circuit |
| CN110554981A (en) * | 2019-08-02 | 2019-12-10 | 中国科学院上海微系统与信息技术研究所 | High-reliability interface circuit and method based on alternate bias |
| CN110727544A (en) * | 2019-10-15 | 2020-01-24 | 深圳航天东方红海特卫星有限公司 | Microsatellite satellite-borne computer system based on industrial devices |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103853626A (en) | Duplex redundant backup bus communication method and device for satellite-borne electronic equipment | |
| CN110376876B (en) | Double-system synchronous safety computer platform | |
| CN108021406B (en) | Dual-redundancy hot backup CPU system suitable for onboard computer | |
| CN108462529B (en) | Main and standby board card switching method, optical transmission network equipment and storage medium | |
| CN110427283B (en) | Dual-redundancy fuel management computer system | |
| CN102541697A (en) | Switching method for processing fault of dual-redundancy computer | |
| CN102724083A (en) | Degradable triple-modular redundancy computer system based on software synchronization | |
| CN104050061A (en) | Multi-main-control-panel redundant backup system based on PCIe bus | |
| CN103853622A (en) | Control method of dual redundancies capable of being backed up mutually | |
| US9367375B2 (en) | Direct connect algorithm | |
| CN107992027B (en) | DCS redundant communication module switching method | |
| CN103490959A (en) | Dual-redundancy CAN bus fault detection method | |
| CN103744753B (en) | A kind of data interactive method of dual systems and device | |
| CN103840993A (en) | Dual-redundancy CAN bus data transmission method | |
| CN104679610B (en) | Management method and device of computer system | |
| CN102830647A (en) | Double 2-vote-2 device for fail safety | |
| CN104842903A (en) | Electric control system of electric vehicle, electric vehicle and fault information transfer method | |
| CN105717787A (en) | Dual-redundancy control system and control method for intelligent power distribution device | |
| CN102708012B (en) | Parallel-processing dual fault-tolerant on-satellite processing system | |
| CN104424680A (en) | Entrance guard redundancy control system | |
| CN105760241A (en) | Exporting method and system for memory data | |
| CN102508746A (en) | Management method for triple configurable fault-tolerant computer system | |
| CN100538647C (en) | The processing method for service stream of polycaryon processor and polycaryon processor | |
| CN105306352A (en) | Industrial field bus protocol gateway device | |
| CN102763087B (en) | Method and system for realizing interconnection fault-tolerance between CPUs |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20140611 |
|
| RJ01 | Rejection of invention patent application after publication |