CN106598017A - Redundancy control system - Google Patents
Redundancy control system Download PDFInfo
- Publication number
- CN106598017A CN106598017A CN201510683764.XA CN201510683764A CN106598017A CN 106598017 A CN106598017 A CN 106598017A CN 201510683764 A CN201510683764 A CN 201510683764A CN 106598017 A CN106598017 A CN 106598017A
- Authority
- CN
- China
- Prior art keywords
- processor
- standby
- primary processor
- memory
- redundant manipulator
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24182—Redundancy
Abstract
The invention provides a redundancy control system, comprising a main processor, a spare processor, and a redundancy controller. The redundancy controller is electrically connected with the main processor and the spare processor. The redundancy controller is used to control the switching between the main processor and the spare processor according to the running states of the main processor and the spare processor. Therefore, the reliability of the redundancy control system is increased.
Description
Technical field
The present embodiments relate to the technique on redundant control, more particularly to a kind of redundancy control system.
Background technology
Control unit for vehicle (Vehicle control unit, abbreviation VCU) is used as the Core Feature on train
Unit, it is also possible to become vehicle control system, be mainly used in the process control of vehicle grade, fault diagnosis and
Storage and the telecommunication management of vehicle grade etc..
Fig. 1 is the structural representation of prior art VCU, in prior art as shown in Figure 1, VCU bags
Include two processors, respectively primary processor 101 and standby processor 102, the wherein primary processor 101
By MVB (Multifunction Vehicle Bus, abbreviation and standby processor 102 between
MVB) connect, during normal work, primary processor 101 is active, standby processor 102 is in warm
Standby state, while primary processor 101 periodically sends heartbeat signal to standby processor by MVB,
Standby processor is caused to be believed less than heartbeat in specified monitoring in time if as the failure of primary processor 101
Number, then state of activation is switched to for processor 102, and continue executing with Train Control function.
However, standby processor can't detect the heartbeat signal of primary processor in prior art, potentially include with
Under several reasons：First, primary processor disappearance breaks down；2nd, between primary processor and standby processor
MVB breaks down；3rd, the MVB transceivers of standby processor itself there occurs failure.If standby place
Device is according to second or the third situation is switched for reason, then can cause primary processor and equal by processor
For state of activation, conflict is sent in the MVB for being, the control function for causing VCU fails, that is, drops
The low reliability of VCU.
The content of the invention
The embodiment of the present invention provides a kind of redundancy control system, so as to improve the reliability of redundancy control system.
In a first aspect, the present invention provides a kind of redundancy control system, including：Primary processor, standby processor
And redundant manipulator；The redundant manipulator electrically connects respectively with the primary processor and the standby processor
Connect；The redundant manipulator is used for the running status according to the primary processor and the standby processor, control
Make the switching between the primary processor and the standby processor.
With reference in a first aspect, in the first possible embodiment of first aspect, also including：Memory；
The memory is electrically connected with the redundant manipulator；The memory is used to store the primary processor
With the data of the standby processor.
With reference in a first aspect, in second possible embodiment of first aspect, also including：Memory；
The memory is electrically connected with respectively with the primary processor and the standby processor；The memory is used for
Store the data of the primary processor and the standby processor.
With reference to any one of first aspect to second possible embodiment, first aspect the third
In possible embodiment, the redundant manipulator includes alarm module；The alarm module is used for when described
Alarm signal is sent when primary processor and all abnormal standby processor running status.
With reference to any one of first aspect to second possible embodiment, at the 4th kind of first aspect
In possible embodiment, the redundant manipulator is based on the controller of on-site programmable gate array FPGA.
With reference to second possible embodiment or second possible embodiment of first aspect, in first party
In the 5th kind of possible embodiment in face, the memory is SRAM SRAM.
The present invention provides a kind of redundancy control system, and the system includes：Primary processor, standby processor and superfluous
Remaining controller；The redundant manipulator is electrically connected with respectively with the primary processor and the standby processor；
The redundant manipulator is used for the running status according to the primary processor and the standby processor, controls institute
State the switching between primary processor and the standby processor.So as to improve the reliability of redundancy control system.
Description of the drawings
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to reality
Apply the accompanying drawing to be used needed for example or description of the prior art and do one and simply introduce, it should be apparent that, under
Accompanying drawing in the description of face is some embodiments of the present invention, for those of ordinary skill in the art,
On the premise of not paying creative labor, can be with according to these other accompanying drawings of accompanying drawings acquisition.
Fig. 1 is the structural representation of prior art VCU；
The schematic diagram of the redundancy control system that Fig. 2 is provided for one embodiment of the invention；
The schematic diagram of the redundancy control system that Fig. 3 is provided for another embodiment of the present invention；
The schematic diagram of the redundancy control system that Fig. 4 is provided for yet another embodiment of the invention.
Specific embodiment
To make purpose, technical scheme and the advantage of the embodiment of the present invention clearer, below in conjunction with this
Accompanying drawing in bright embodiment, is clearly and completely described to the technical scheme in the embodiment of the present invention,
Obviously, described embodiment is a part of embodiment of the invention, rather than the embodiment of whole.It is based on
Embodiment in the present invention, those of ordinary skill in the art are obtained under the premise of creative work is not made
The every other embodiment for obtaining, belongs to the scope of protection of the invention.
The low problem of VCU reliabilities in order to overcome prior art, embodiments provides a kind of superfluous
Remaining control system.The schematic diagram of the redundancy control system that Fig. 2 is provided for one embodiment of the invention, the redundancy
Control system can be VCU, as shown in Fig. 2 the redundancy control system includes：Primary processor 201,
Standby processor 202 and redundant manipulator 203；Wherein, the redundant manipulator 203 respectively with primary processor
201 and standby processor 202 be electrically connected with；The redundant manipulator 203 is used for according to the He of primary processor 201
The running status of standby processor 202, controls the switching between primary processor 201 and standby processor 202.
Specifically, the switching between the control primary processor 201 of redundant manipulator 203 and standby processor 202
Operation principle be：Redundant manipulator 203 is respectively to pass through with primary processor 201 and standby processor 202
Parallel bus connection, it is responsible for the monitoring primary processor 201 of redundant manipulator 203 and standby processor 202,
And control the operational mode of primary processor 201 and standby processor 202：After electricity on redundancy control system,
For a period of time (2 to 5 seconds) export afterwards random delay after primary processor 201 and the standby startup of processor 202
Useful signal, the useful signal is used to represent signal high level effectively, and the useful signal is：CPUOK,
The processor for exporting CPUOK signals at first is primary processor 201, and redundant manipulator 203 receives this
After signal, redundant manipulator 203 to primary processor 201 exports run signal, when primary processor 201 connects
Receive and start after run signal execution Train Control function, certainly, be not received by the standby place of run signal
Reason device 202 is in hot standby state.When primary processor 201 breaks down, or the self-inspection of primary processor 201
When unsuccessfully causing actively to abandon state of activation, its useful signal step-down, then redundant manipulator 203 is to warm
The output run signal of standby processor 202 of standby state so as to be changed into state of activation.Finally, Redundant Control
Device 203 causes only one of which processor to be active, and then improves the reliability of redundancy control system.
Further, primary processor and standby processor are connected by MVB in prior art, due to
MVB communication cycle is usually arranged as 32ms, adds bus shake, and its judgement time is generally arranged
For second level, it is impossible to meet higher control and require.And the embodiment of the present invention can by increasing redundant manipulator
To realize that the Millisecond between primary processor and standby processor is switched fast, redundancy control system is improve
Switching efficiency.Meanwhile, when primary processor breaks down, because house dog is present, may constantly weigh
Open and initialize, interference MVB communication.And standby processor cannot also forbid the work of primary processor
Make.And the redundant manipulator in the embodiment of the present invention can then control constantly restarting and initially for primary processor
Change, and primary processor can be controlled and quit work.Ensure the reliability of redundancy control system.
A kind of optional mode, above-mentioned redundancy control system also includes memory；Fig. 3 is another reality of the invention
The schematic diagram of the redundancy control system of example offer is applied, as shown in figure 3, the redundancy control system includes：It is main
Processor 301, wherein standby processor 302, redundant manipulator 303 and memory 304, primary processor
301st, standby processor 302, redundant manipulator 303 and above-mentioned primary processor 201, standby processor 202,
The function of redundant manipulator 203 is consistent, will not be described here.The memory 304 and redundant manipulator 303
It is electrically connected with；Memory 304 is used to store the data of primary processor 301 and standby processor 302.
Another kind of optional mode, the signal of the redundancy control system that Fig. 4 is provided for yet another embodiment of the invention
Figure, as shown in figure 4, the redundancy control system includes：Primary processor 401, standby processor 402, redundancy
Controller 403 and memory 404, wherein primary processor 401, standby processor 402, redundant manipulator
403 is consistent with above-mentioned primary processor 201, standby processor 202, the function of redundant manipulator 203, here
Repeat no more.The memory 404 is electrically connected with respectively with primary processor 401 and standby processor 402；Deposit
Reservoir 404 is used to store the data of primary processor 401 and standby processor 402.
Above-mentioned memory can be as primary processor and the sharing data area of standby processor, for controlling letter
Number synchronization, it is ensured that redundancy switching after controlled output continuity and uniformity.Primary processor and standby process
Device accesses memory by parallel bus, it would be desirable to which synchronous control data writes the memory, occurs superfluous
When cotangent is changed, the standby processor after switching reads synchrodata from memory, it is possible to achieve control is synchronous.
It should be noted that above-mentioned parallel bus can be (Versa Module Eurocard, abbreviation
VME) bus, usual primary processor and standby processor are arranged in same cabinet, using same backboard
And power supply.The redundant manipulator is based on field programmable gate array (Field-Programmable Gate
Array, abbreviation FPGA) controller；The memory is SRAM (Static Random
Access Memory, SRAM).
Further, above-mentioned redundant manipulator includes alarm module；The alarm module is used for when described
Alarm signal is sent when primary processor and all abnormal standby processor running status.So as to improve redundancy control
The reliability of system processed.
Finally it should be noted that：Various embodiments above is only illustrating technical scheme rather than right
Its restriction；Although being described in detail to the present invention with reference to foregoing embodiments, this area it is common
Technical staff should be understood：It still can modify to the technical scheme described in foregoing embodiments,
Either equivalent is carried out to which part or all technical characteristic；And these modifications or replacement, and
The scope of the essence disengaging various embodiments of the present invention technical scheme of appropriate technical solution is not made.
Claims (6)
1. a kind of redundancy control system, it is characterised in that include：Primary processor, standby processor and redundancy
Controller；
The redundant manipulator is electrically connected with respectively with the primary processor and the standby processor；
The redundant manipulator is used for the running status according to the primary processor and the standby processor, control
Make the switching between the primary processor and the standby processor.
2. system according to claim 1, it is characterised in that also include：Memory；
The memory is electrically connected with the redundant manipulator；
The memory is used to store the data of the primary processor and the standby processor.
3. system according to claim 1, it is characterised in that also include：Memory；
The memory is electrically connected with respectively with the primary processor and the standby processor；
The memory is used to store the data of the primary processor and the standby processor.
4. the system according to any one of claim 1-3, it is characterised in that the redundant manipulator
Including alarm module；
The alarm module is used to be sent out when the primary processor and all abnormal standby processor running status
Go out alarm signal.
5. the system according to any one of claim 1-3, it is characterised in that the redundant manipulator
It is based on the controller of on-site programmable gate array FPGA.
6. the system according to Claims 2 or 3, it is characterised in that the memory for it is static with
Machine memory SRAM.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510683764.XA CN106598017A (en) | 2015-10-20 | 2015-10-20 | Redundancy control system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510683764.XA CN106598017A (en) | 2015-10-20 | 2015-10-20 | Redundancy control system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106598017A true CN106598017A (en) | 2017-04-26 |
Family
ID=58554820
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510683764.XA Pending CN106598017A (en) | 2015-10-20 | 2015-10-20 | Redundancy control system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106598017A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109826715A (en) * | 2019-01-28 | 2019-05-31 | 成都华气厚普电子技术有限公司 | LNG feeder electric-control system peculiar to vessel |
| CN110716471A (en) * | 2019-10-29 | 2020-01-21 | 中车株洲电力机车有限公司 | Dual-CPU hot standby redundancy control method and device for brake control unit of brake |
| CN111781816A (en) * | 2020-08-05 | 2020-10-16 | 中车大连电力牵引研发中心有限公司 | Train master control equipment high-speed redundancy switching method and system based on double buses |
| CN112866147A (en) * | 2021-01-04 | 2021-05-28 | 中车青岛四方车辆研究所有限公司 | RS485-MVB gateway based on HDLC protocol and communication method |
Citations (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1680924A (en) * | 2004-04-07 | 2005-10-12 | 国际商业机器公司 | Arbitration method and system for redundant controllers |
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
| CN101576836A (en) * | 2009-06-12 | 2009-11-11 | 北京航空航天大学 | Degradable three-machine redundancy fault-tolerant system |
| CN201359700Y (en) * | 2009-02-27 | 2009-12-09 | 德阳市伊诗特科技有限公司 | Sea water desalinization control system provided with redundant controller and redundant network |
| CN101634959A (en) * | 2009-08-21 | 2010-01-27 | 北京航空航天大学 | Dual redundant fault-tolerant system based on embedded type CPU, |
| CN101807076A (en) * | 2010-05-26 | 2010-08-18 | 哈尔滨工业大学 | Duplication redundancy fault-tolerant high-reliability control system having cooperative warm standby function based on PROFIBUS field bus |
| CN102280154A (en) * | 2011-06-30 | 2011-12-14 | 中广核工程有限公司 | Master/slave executor switching control method and system for nuclear power plant |
| CN102971588A (en) * | 2010-05-27 | 2013-03-13 | 富士电机株式会社 | Computer room air-conditioning system, and redundant controller therefor |
| CN103064368A (en) * | 2012-12-13 | 2013-04-24 | 西安热工研究院有限公司 | Redundant controller of Profibus-decentralized periphery (DP) |
| CN103618323A (en) * | 2013-12-05 | 2014-03-05 | 国家电网公司 | STATCOM control system based on redundant controller |
| CN103941633A (en) * | 2014-04-29 | 2014-07-23 | 北京依雷特科技有限公司 | PLC redundancy control method and system |
| CN103955188A (en) * | 2014-04-24 | 2014-07-30 | 清华大学 | Control system and method supporting redundancy switching function |
| CN104111881A (en) * | 2014-07-25 | 2014-10-22 | 中国航天科工集团第二研究院七〇六所 | Arbitration device for double computer redundancy hot backup computer |
| CN104570721A (en) * | 2014-12-31 | 2015-04-29 | 重庆川仪自动化股份有限公司 | Master and slave state determining method of redundant controllers |
| CN205068150U (en) * | 2015-10-20 | 2016-03-02 | 中车大连电力牵引研发中心有限公司 | Redundant control system |
-
2015
- 2015-10-20 CN CN201510683764.XA patent/CN106598017A/en active Pending
Patent Citations (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1680924A (en) * | 2004-04-07 | 2005-10-12 | 国际商业机器公司 | Arbitration method and system for redundant controllers |
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
| CN201359700Y (en) * | 2009-02-27 | 2009-12-09 | 德阳市伊诗特科技有限公司 | Sea water desalinization control system provided with redundant controller and redundant network |
| CN101576836A (en) * | 2009-06-12 | 2009-11-11 | 北京航空航天大学 | Degradable three-machine redundancy fault-tolerant system |
| CN101634959A (en) * | 2009-08-21 | 2010-01-27 | 北京航空航天大学 | Dual redundant fault-tolerant system based on embedded type CPU, |
| CN101807076A (en) * | 2010-05-26 | 2010-08-18 | 哈尔滨工业大学 | Duplication redundancy fault-tolerant high-reliability control system having cooperative warm standby function based on PROFIBUS field bus |
| CN102971588A (en) * | 2010-05-27 | 2013-03-13 | 富士电机株式会社 | Computer room air-conditioning system, and redundant controller therefor |
| CN102280154A (en) * | 2011-06-30 | 2011-12-14 | 中广核工程有限公司 | Master/slave executor switching control method and system for nuclear power plant |
| CN103064368A (en) * | 2012-12-13 | 2013-04-24 | 西安热工研究院有限公司 | Redundant controller of Profibus-decentralized periphery (DP) |
| CN103618323A (en) * | 2013-12-05 | 2014-03-05 | 国家电网公司 | STATCOM control system based on redundant controller |
| CN103955188A (en) * | 2014-04-24 | 2014-07-30 | 清华大学 | Control system and method supporting redundancy switching function |
| CN103941633A (en) * | 2014-04-29 | 2014-07-23 | 北京依雷特科技有限公司 | PLC redundancy control method and system |
| CN104111881A (en) * | 2014-07-25 | 2014-10-22 | 中国航天科工集团第二研究院七〇六所 | Arbitration device for double computer redundancy hot backup computer |
| CN104570721A (en) * | 2014-12-31 | 2015-04-29 | 重庆川仪自动化股份有限公司 | Master and slave state determining method of redundant controllers |
| CN205068150U (en) * | 2015-10-20 | 2016-03-02 | 中车大连电力牵引研发中心有限公司 | Redundant control system |
Non-Patent Citations (1)
| Title |
|---|
| 张汩: ""双机系统的冗余及仲裁策略研究"", 《中国优秀硕士学位论文全文数据库-信息科技辑》 * |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109826715A (en) * | 2019-01-28 | 2019-05-31 | 成都华气厚普电子技术有限公司 | LNG feeder electric-control system peculiar to vessel |
| CN110716471A (en) * | 2019-10-29 | 2020-01-21 | 中车株洲电力机车有限公司 | Dual-CPU hot standby redundancy control method and device for brake control unit of brake |
| CN111781816A (en) * | 2020-08-05 | 2020-10-16 | 中车大连电力牵引研发中心有限公司 | Train master control equipment high-speed redundancy switching method and system based on double buses |
| CN111781816B (en) * | 2020-08-05 | 2024-03-19 | 中车大连电力牵引研发中心有限公司 | High-speed redundancy switching method and system for train main control equipment based on double buses |
| CN112866147A (en) * | 2021-01-04 | 2021-05-28 | 中车青岛四方车辆研究所有限公司 | RS485-MVB gateway based on HDLC protocol and communication method |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103199972B (en) | The two-node cluster hot backup changing method realized based on SOA, RS485 bus and hot backup system | |
| CN106598017A (en) | Redundancy control system | |
| CN107135102B (en) | Train UIC gateway redundancy switching device and control method thereof | |
| CN205068150U (en) | Redundant control system | |
| CN105306605B (en) | A kind of double host server systems | |
| CN107065830A (en) | A kind of dual redundant hot backup system based on arbitration mode | |
| CN105159798A (en) | Dual-machine hot-standby method for virtual machines, dual-machine hot-standby management server and system | |
| CN107831883A (en) | A kind of GPU server power supplies abnormal protection system and method | |
| CN105242608B (en) | Entire car controller and its control method | |
| WO2020143243A1 (en) | Dual-system hot backup switching method and system applied to automatic running system of train | |
| CN104035849B (en) | Method for preventing rack fan management failures | |
| CN201592724U (en) | Time synchronous system of train control vehicular device | |
| CN112532446B (en) | Dynamic migration method of cluster measurement and control device | |
| CN103176870B (en) | Multi-mode information interaction redundancy safety computer platform | |
| CN102103532A (en) | Safety redundancy computer system of train control vehicle-mounted equipment | |
| CN103532753A (en) | Double-computer hot standby method based on memory page replacement synchronization | |
| CN104506362A (en) | Method for system state switching and monitoring on CC-NUMA (cache coherent-non uniform memory access architecture) multi-node server | |
| CN103744753A (en) | Data interaction method and device for dual systems | |
| JP2009005544A (en) | Control method and control circuit of storage battery system | |
| CN109684257B (en) | Remote memory expansion management system | |
| CN102932118B (en) | The method and system of the active and standby ruling of a kind of two-shipper | |
| US11604635B2 (en) | Online program updating method | |
| CN101799781A (en) | Integrated double-computer system and method for fulfilling same | |
| CN110422343B (en) | On-orbit maintenance method of attitude and orbit control computer on satellite | |
| US10620857B2 (en) | Combined backup power |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170426 |
|
| RJ01 | Rejection of invention patent application after publication |