Summary of the invention
The invention provides the guard method of the interconnected interlocking of a kind of multi-chip, be intended to solve the problem that Software match causes thrashing etc.
The present invention is achieved in that the guard method of the interconnected interlocking of a kind of multi-chip, said method comprising the steps of:
A, soft, firmly control node all functions and automatically detect;
B, judge soft, whether firmly control nodal function state normal, if functional status is normal, puts the normal position of hard control node state effectively and perform step C, soft control node execution step D, as undesired in functional status, circulation execution step A;
C, extract hard control node firmware version feature code and mail to soft control node, and high-impedance state parallel operation bus and forbid that power semiconductor drives;
D, judge that the compatibility of the hard control node firmware version receiving is whether compatible, as compatibility, extract firmware version condition code and mail to hard control node, and the self-inspection of soft control node finishes to enter normal work; As incompatible, perform step C;
E, the hard control of judgement node add to receiving the version of all nodes whether the version of self has compatibility; As there is compatibility, firmly control node self-inspection and finish to enter normal work; If not thering is compatibility, perform step D.
Further technical scheme of the present invention is: described steps A comprises the following steps:
A1, firmly control node self all functions is detected;
A2, soft control node forbid that power semiconductor drives and remove the passage of the interaction data of all and external control node;
A3, soft control node detect self all functions.
Further technical scheme of the present invention is: described step B comprises the following steps:
Whether B1, judgement firmly control nodal function state be normal, as normal in functional status, puts the normal significance bit of hard control node state and perform step C; As undesired in functional status, perform step A1;
B2, judge that whether soft control nodal function state is normal, as normal in functional status, perform step B3; As undesired in functional status, perform step A3.
In B3, judgment device unit, whether hard control node state is normal, as normally, just performing step C; As undesired, circulation step B3.
Further technical scheme of the present invention is: described step C comprises the following steps:
C1, mail to soft control node in hard control Node extraction firmware version condition code;
C2, by parallel operation bus high-impedance state and forbid power semiconductor drive.
Further technical scheme of the present invention is: the normal position of described hard control node all component SM set mode, bit stream coding is carried out in the normal position of mode bit.
Further technical scheme of the present invention is: each controls node firmware incompatible version, and software node does not all send and drives and bus data to hardware node.
Another object of the present invention is to provide the protection system of the interconnected interlocking of a kind of multi-chip, this protection system comprises:
Selftest module, for soft, firmly control node all functions and automatically detect;
Judge module, soft for judging, whether firmly control nodal function state normal, if functional status is normal, puts the normal position of hard control node state effectively and perform step C, soft control node execution step D, as undesired in functional status, circulation execution step A;
Extract stop module, mail to soft control node for extracting hard control node firmware version feature code, and high-impedance state parallel operation bus and forbid power semiconductor drive;
A compatibility determination module, whether compatible for judging the compatibility of hard control node firmware version of reception, as compatibility, extract firmware version condition code and mail to hard control node, and the self-inspection of soft control node finishes to enter normal work; As incompatible, perform step C;
Secondary compatibility determination module, for judging that hard control node adds to receiving the version of all nodes whether the version of self has compatibility; As there is compatibility, firmly control node self-inspection and finish to enter normal work; If not thering is compatibility, perform step D.
Further technical scheme of the present invention is: described selftest module comprises:
Hard control node self-test unit, detects self all functions for hard control node;
Forbid unit, forbid that for soft control node power semiconductor drives and remove the passage of the interaction data of all and external control node;
Soft control node self-test unit, detects self all functions for soft control node.
Further technical scheme of the present invention is: described judge module comprises:
Hard control nodal function judging unit, whether normal for judging hard control nodal function state, as normal in functional status, put the normal significance bit of hard control node state and perform step C; As undesired in functional status, perform step A1;
Soft control nodal function judging unit, whether normal for judging soft control nodal function state, as normal in functional status, perform step B3; As undesired in functional status, perform step A3;
Equipment state judging unit, whether normal for the hard control in judgment device unit node state, as normally, just performing step C; As undesired, circulation step B3.
Further technical scheme of the present invention is: described extraction stops module to comprise:
Extract output unit, for mailing to soft control node in hard control Node extraction firmware version condition code;
Blocking unit, for by parallel operation bus high-impedance state and forbid power semiconductor drive.
The invention has the beneficial effects as follows: system state is detected powering on, solved while there is failure state or compatibility issue when CPLD/FPGA powers on, to the protection of system; After CPLD/FPGA or MCU/DSP software upgrading, compatible detection strategy is provided, solve software and do not mated the thrashing causing.
Embodiment
That Fig. 1,2 shows is soft in the guard method of the interconnected interlocking of multi-chip provided by the invention, firmly control node overhaul flow chart, and details are as follows for it:
The protection process of self-test of soft control node is wherein as follows:
In step S1, after device power, soft control node prepares self to carry out self-verifying.
In step S2, before soft control node starts that self is carried out to self-verifying and starts, soft control node forbids that power semiconductor drives and remove all and interaction data external control node; Be better for soft control node can complete when the self-inspection, soft control node drives semiconductor and all forbid with the passage of extraneous swap data, makes it complete automatic detection and be not subject to the impact of external data.
In step S3, the soft control node of equipment detects automatically to self function.
In step S4, judge that whether the functional status of soft control node is normal, if arbitration functions state is normal, perform step S5; If arbitration functions state is undesired, perform step S3, in this circulation S3, S4 step, until arbitration functions state could perform step S5. after normal in step S4
In step S5, normal when judgement all functions state in step S4 after, here whether the hard control node state in unit is normally judged, if it is normal firmly to control node, perform step S6; If it is undesired firmly to control node, repetitive cycling step S5, until firmly control node state, could perform step S6.
In step S6, whether the compatibility of the hard control node firmware version that judgement receives is compatible, if compatible, performs step S7; If incompatible, again accept feature and repeated execution of steps S6 that hard control node sends, until compatible normal position is at execution step S7.
In step S7, after having judged that hard control node diagnostic code compatibility is normal, the condition code of soft control Node extraction firmware version sends to hard control node.
In step S8, after all detections, all functions all can both be worked normally, and the now self-inspection of soft control node finishes to enter normal duty.
The protection process of self-test of wherein firmly controlling node is as follows:
In step S11, after device power, firmly control node and prepare self to carry out self-verifying.
In step S12, the hard control node of equipment detects automatically with all functions of self.
In step S13, normal when the functional status of the hard control node in judgment device, if functional status is normal, perform step S14; If functional status is undesired, perform step S13.
In step S14, in the time that the functional status of hard control node is normal, will firmly controls node state and be placed in normal active position.
In step S15,, firmly control the condition code that node can extract firmware version and mail to soft control node in active position at hard control node.
In step S16, the condition code of firmware version is mail to after soft control node, firmly controlling node can fall clean ice bus high-impedance state, and forbids the driving of all power semiconductors of firmly controlling node, and the communication of cutting off data with this, avoids occurring the interference of data.
In step S17, receive after the condition code of hard control node at soft control node, errorless by verifying, can send the condition code of soft control node to hard control node, receiving after condition code and firmly control node, the version of all nodes that receive is being added to the version of self does compatible inspection.
In step S18, firmly control node the information of the soft control node receiving is carried out to compatible judgement, if there is compatibility, perform step S19; If do not there is compatibility, repetitive cycling step S17, S18 step, until there is compatibility, at execution step S19.
In step S19, detect and have after compatibility at hard control node, firmly control node self-inspection and complete, enter normal duty.
In the present invention the equipment at a multi-chip control system place is referred to as to " unit ", the system being composed of multiple units is referred to as to " parallel system ".In unit, various control chips are referred to as " control node ", MCU/DSP are referred to as to " soft control node ", CPLD/FPGA are referred to as to " firmly controlling node ".For the general frame of realizing the object of the invention parallel system as shown in Figure 3.Wherein in unit, all soft control nodes are all directly connected on hard control node, and the internodal exchange of soft control can only be by hard control node; The information of the responsible all unit of hard control node and parallel operation bus is mutual simultaneously.Hard control node itself does not independently produce the driving of any power semiconductor and independently sends bus data, and all drivings and bus data all derive from soft control node.Due to the feature of chip, as long as external circuit is normal, firmly controlling node can be not abnormal suddenly in normal course of operation, just abnormal while only likely just having powered on.Soft control node, in the time powering on and in normal course of operation, all may occur abnormal.
When soft control node powers on, forbidden that all power semiconductors drive and bus data, firmly controlled its each (PCC) power of node self-inspection, while only having all component normal, bit stream coding is carried out to the normal position of state in the normal position of its state of ability set simultaneously.Suppose before firmly controlling node powers on extremely, so soft control node receives behind abnormality position, circular wait, and all like this drivings and bus signals are all invalid, cause that whole system lost efficacy extremely while so just having solved hard control node failure.
When each control node in unit needs firmware upgrade, if when the firmware version of certain node mistake leakage upgrading or each node is incompatible, because soft control node has added the firmware version inspection of hard control node, soft control node all can not send and drive and bus data to hard control node; Hard control node carries out compliance check to the firmware version of all control nodes in unit, if incompatible, still conductively-closed of the driving of whole unit, bus is great-great-grandfather's state still.So just solve the incompatible thrashing causing of firmware version.Need to carry out bit stream coding to firmware version number equally.
Another object of the present invention is to provide the protection system of the interconnected interlocking of a kind of multi-chip, this protection system comprises:
Selftest module, for soft, firmly control node all functions and automatically detect;
Judge module, soft for judging, whether firmly control nodal function state normal, if functional status is normal, puts the normal position of hard control node state effectively and perform step C, soft control node execution step D, as undesired in functional status, circulation execution step A;
Extract stop module, mail to soft control node for extracting hard control node firmware version feature code, and high-impedance state parallel operation bus and forbid power semiconductor drive;
A compatibility determination module, whether compatible for judging the compatibility of hard control node firmware version of reception, as compatibility, extract firmware version condition code and mail to hard control node, and the self-inspection of soft control node finishes to enter normal work; As incompatible, perform step C;
Secondary compatibility determination module, for judging that hard control node adds to receiving the version of all nodes whether the version of self has compatibility; As there is compatibility, firmly control node self-inspection and finish to enter normal work; If not thering is compatibility, perform step D.
Further technical scheme of the present invention is: described selftest module comprises:
Hard control node self-test unit, detects self all functions for hard control node;
Forbid unit, forbid that for soft control node power semiconductor drives and remove the passage of the interaction data of all and external control node;
Soft control node self-test unit, detects self all functions for soft control node.
Further technical scheme of the present invention is: described judge module comprises:
Hard control nodal function judging unit, whether normal for judging hard control nodal function state, as normal in functional status, put the normal significance bit of hard control node state and perform step C; As undesired in functional status, perform step A1;
Soft control nodal function judging unit, whether normal for judging soft control nodal function state, as normal in functional status, perform step B3; As undesired in functional status, perform step A3;
Equipment state judging unit, whether normal for the hard control in judgment device unit node state, as normally, just performing step C; As undesired, circulation step B3.
Further technical scheme of the present invention is: described extraction stops module to comprise:
Extract output unit, for mailing to soft control node in hard control Node extraction firmware version condition code;
Blocking unit, for by parallel operation bus high-impedance state and forbid power semiconductor drive.
The normal position of described hard control node all component SM set mode, carries out bit stream coding to the normal position of mode bit.
Each controls node firmware incompatible version, and software node does not all send and drives and bus data to hardware node.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any amendments of doing within the spirit and principles in the present invention, be equal to and replace and improvement etc., within all should being included in protection scope of the present invention.