CN108021473A - The aerospace computer system and safe starting method that a kind of more backups start - Google Patents

The aerospace computer system and safe starting method that a kind of more backups start Download PDF

Info

Publication number
CN108021473A
CN108021473A CN201711221114.9A CN201711221114A CN108021473A CN 108021473 A CN108021473 A CN 108021473A CN 201711221114 A CN201711221114 A CN 201711221114A CN 108021473 A CN108021473 A CN 108021473A
Authority
CN
China
Prior art keywords
sample
processing unit
central processing
startup program
dog
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201711221114.9A
Other languages
Chinese (zh)
Other versions
CN108021473B (en
Inventor
王明贺
栾晓娜
王德波
朱其星
伍攀峰
于俊杰
高兰志
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shandong Institute of Space Electronic Technology
Original Assignee
Shandong Institute of Space Electronic Technology
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shandong Institute of Space Electronic Technology filed Critical Shandong Institute of Space Electronic Technology
Priority to CN201711221114.9A priority Critical patent/CN108021473B/en
Publication of CN108021473A publication Critical patent/CN108021473A/en
Application granted granted Critical
Publication of CN108021473B publication Critical patent/CN108021473B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operation
    • G06F11/1402Saving, restoring, recovering or retrying
    • G06F11/1446Point-in-time backing up or restoration of persistent data
    • G06F11/1448Management of the data involved in backup or backup restore

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Techniques For Improving Reliability Of Storages (AREA)
  • Stored Programmes (AREA)

Abstract

The invention discloses the aerospace computer system that a kind of more backups start, the clean boot of aerospace computer can be realized using availability and the stronger chip of ease for use on the basis of system reliability is not reduced using the present invention.The system is specially:Central processing unit is arranged in aerospace computer, is arranged for controlling for sample controller and is carried out startup program samples selection.Multisample memory module uses aerospace nonvolatile memory, is configured to the startup program sample of the central processing unit of storage N backups.Selected startup program sample, is mapped to the first address space of central processing unit operation by sample controller, is run and is started for CPU;And the startup program sample of central processing unit is selected under the control of central processing unit, carry out sample maintenance.Sample controller monitors the running state of programs of central processing unit.Central processing unit is also configured to read startup program sample from the first address space of operation, runs startup program.

Description

The aerospace computer system and safe starting method that a kind of more backups start
Technical field
The present invention relates to aerospace field of computer technology, and in particular to the aerospace computer system valency that a kind of more backups start And safe starting method.
Background technology
Aerospace with hardware of electronical computer framework usually by CPU, nonvolatile memory chip, RAM, FPGA, on reply by cable Position and other peripheral hardwares composition.Fig. 1 shows the composition structure diagram of aerospace computer.
Wherein nonvolatile memory is commonly used in storage startup program and application program.Startup program generally includes to store System initialization is set, system basic maintenance and application program are moved.Application program is commonly stored operating system or user's journey Sequence.The central processor CPU of system after the power is turned on, runs startup program first, in startup program the initialization of priority runtime set Put, system basic maintenance and application program are moved.Program moves operation and moves application program among memory, and sets pointer Program entry is jumped to, performs application program.
Startup program is run after system electrification first, if startup program is abnormal, will be unable to perform application program move and The operation such as redirect, system can not finally be run.Due to having system maintenance program in startup program, when system operation is abnormal, By pouring functions in system maintenance program executive program, operating system or user program are updated, with patch system loophole, is safeguarded System operation.So the reliability designed on the software and hardware of startup program, to the reliability operation of embedded product on star It is particularly important that.
Chip in startup program hardware design, more using the stronger PROM chips of anti-space environment ability, such as UT28F256 or HS1-6664RH-Q.Although anti-space environment ability is strong, reliability is high for such chip, but faces core for a long time The factors such as piece embargo, delivery cycle length, selling at exorbitant prices influence, and restrict aerospace embedded computer development and life for a long time Production.
Currently, UT28F256 and two chip foreign countries of HS1-6664RH-Q have embargoed, current each unit use this Two kinds of chips are all inventory, and chip price remains high.The price of UT28F256 monolithic chips has reached 160,000, HS1-6664RH-Q monolithic chip prices are up to 70,000 yuan.Current domestic several research institutions stepping up to develop UT28F256 and The substitute of HS1-6664RH-Q, but still there is no large-area applications.
The PROM chips of the above-mentioned type are the PROM chips for the fuse property for needing weldering, in use, are both needed to Program burn writing device is used, by program Solidification into chip, after the completion of program Solidification, program will be unable to change.If in the later stage Find program error in debugging process, chip needs to get off from printed board tip-off, by the chip of new burning program be welded again to In printed board, debug and test.Chip tip-off and during being welded, it is necessary to undertake certain risk that is welded.In the operation that is welded During, it will cause the deformation of printed board pad, the damaged or even equivalent damage that comes off.Being welded according to aerospace flight electronic product will Ask, same pad is welded number need to be less than 3 times.
After chip is welded again, the follow-up work time brought is longer, and flow is cumbersome, be related to working link and personnel compared with It is more.According to research and production flow, PROM chips need professional by burning program into chip.Burning program is completed and confirmed After program is correct, it is necessary to when special messenger is to chip pin shaping and small stress release 24.If three proofings sealing is handled product, weldering Dress personnel need to remove chip three proofings sealing etc. to operate before tip-off., it is necessary to which butt welding cartridge chip does three proofings after the completion of chip is welded Sealing processing.Subsequently product is also wanted to re-assembly, closing lid, environmental test (include vibration test, thermal vacuum and thermal cycling test etc. Pilot project) etc. a series of activities.The time cost that separate unit product whole process is completed to spend is at least 15 days.
The fuse that above-mentioned needs fall weldering is directly substituted according to the EEPROM or FLASH chip used on common star The PROM chips of matter, then can not meet in terms of the clean boot of aerospace computer to reliability, how not reduce system reliable On the basis of property, realize that the clean boot of aerospace computer is urgently to solve at present using availability and the stronger chip of ease for use Certainly the problem of.
The content of the invention
In view of this, the aerospace computer system and safe starting method started the present invention provides a kind of more backups, energy Enough on the basis of system reliability is not reduced, the peace of aerospace computer is realized using availability and the stronger chip of ease for use It is complete to start.
The aerospace computer system that a kind of more backups start, including central processing unit, multisample memory module and sample Controller.
Central processing unit is arranged in aerospace computer, is arranged for controlling for sample controller and is carried out startup program sample choosing Select.
Multisample memory module uses aerospace nonvolatile memory, is configured to the central processing unit of storage N backups Startup program sample, N is 2 integral number power, and N ≠ 0.
Sample controller, is configured to select the startup program sample of central processing unit under the control of central processing unit, And selected startup program sample is mapped to the first address space of central processing unit operation;Sample controller monitors centre Manage the running state of programs of device.
Central processing unit is also configured to read startup program sample from the first address space of operation, runs startup program.
Further, sample controller, including house dog counter, sample selection module and sample handover module.
Central processing unit periodically sends to house dog counter in normal operation startup program and leads dog operation letter Number;Central processing unit no longer sends to house dog counter when running startup program exception and leads dog operation signal.
House dog counter connection central processing unit, the timing under the control of central processing unit, and periodically in reception What central processor was sent leads dog operation signal, leads dog operation signal if not received within the house dog cycle, resets centre Device is managed, and produces dog and stings control signal and be sent to sample handover module.
Sample selection module connects central processing unit, reads the startup program sample number of central processing unit operation, goes forward side by side The selection of the next startup program sample of row.
Sample handover module is after receiving dog and stinging control signal, before central processing unit resets revocation, by sample Next startup program sample of selecting module selection is mapped to the first address space of central processing unit operation.
Further, multisample memory module includes the nonvolatile memory of multiple and different types, the centre of N backups The startup program sample of reason device is stored in the nonvolatile memory of multiple and different types.
Further, nonvolatile memory is the read-write nonvolatile memory of stack-design or has Flouride-resistani acid phesphatase The read-write nonvolatile storage of ability;Sample controller uses fpga chip.
Further, it is specially using above-mentioned aerospace computer system, the Booting sequence of the system:
S1, central processing unit electrification reset, before resetting and cancelling, sample handover module is by pre-set startup program sample Originally it is mapped to the first address space of central processing unit operation.
After the reset of S2, central processing unit cancel, central processing unit control house dog counter starts timing;Central processing Device reads startup program sample from first address space, runs startup program, and whether startup program operation is normally carried out sentencing Disconnected, if operation startup program is normal, CPU cycle sends to house dog counter and leads dog operation signal, central processing Device starts successfully, and Booting sequence terminates.
If it is abnormal to run startup program, S4 is performed.
S4, central processing unit no longer send to house dog counter and lead dog operation signal;House dog counter is in house dog Do not received in cycle and lead dog operation signal, then reset central processing unit, and produce dog sting control signal be sent to sample switching Module.
Sample selection module reading central processing unit operation is currently up program sample number, and carries out next startup journey The selection of sequence sample.
Sample handover module is after receiving dog and stinging control signal, before central processing unit resets revocation, by sample Next startup program sample of selecting module selection is mapped to the first address space of central processing unit operation.
Judge whether the number of central processing unit operation startup program sample is less than setting frequency threshold value.
If then return to S2.
Otherwise Booting sequence terminates.
Further, after Booting sequence terminates, following multisample maintenance process is further included:
CPU to sample selection module by controlling the startup program sample for reading and being stored in multisample memory module, to opening Dynamic program sample carries out two from three voting, distinguishes correct startup program sample and the startup program sample of mistake, and using just True startup program sample carries out write-back to the startup program sample of mistake.
The wrongheaded startup program sample number of sample selection module whether with central processing unit operation startup program Sample number is identical, is sent if identical to central processing unit and forbids leading dog signal, central processing unit, which receives, to be forbidden leading dog letter After number, no longer sent to house dog counter and lead dog operation signal.
Beneficial effect:
1st, the aerospace computer systems that a kind of more backups provided by the invention start, it does not use needs to fall the fuse of weldering The PROM chips of matter, using the EEPROM or FLASH chip used on common star, and realize space more by backing up design The clean boot of boat computer, does not reduce the reliability of aerospace computer, while used chip possesses higher can use Property and ease for use, not only save component cost, and save because fuse property PROM chip belts come it is complicated Process, improves the availability and ease for use of whole aerospace computer system, and more backups start design and also further improve The reliability of aerospace computer system.
2nd, aerospace computer system provided by the present invention, sample memory module therein can use multiple and different types Nonvolatile storage, store identical startup program sample, nonvolatile storage chosen according to the situation of startup in start-up course Piece choosing.Radiation Characteristics, the anti-single particle characteristic of the anti-space environment of nonvolatile storage of different types differ, not of the same race The combination application of memory chip can avoid the common cause failure of chip of the same race, and the reliability of system is greatly improved.
3rd, the present invention also provides the safe starting method of the aerospace computer system started based on above-mentioned more backups at the same time, should Method is transported during the central processing unit operation startup program of aerospace computer by the house dog counter of design Row is abnormal to be judged, and the choosing to next startup program sample is realized by the cooperation of sample selection module and sample handover module Select;This method further includes multisample maintenance process, i.e., is opened in the central processing unit of aerospace computer after Booting sequence terminates After moving successfully, the exception of startup program can still be prejudged, realize the aerospace started to more backups comprehensively and calculate The maintenance of the startup reliability of machine system.
Brief description of the drawings
Fig. 1 is the composition structure diagram of existing aerospace computer;
The block diagram of system for the aerospace computer system that more backups that Fig. 2 is provided by the embodiment of the present invention start.
Address of cache principle is illustrated in the aerospace computer system that more backups that Fig. 3 is provided by the embodiment of the present invention start Figure.
Fig. 4 starts method flow by the aerospace computer system security that more backups that the embodiment of the present invention provides start and shows It is intended to.
Embodiment
The present invention will now be described in detail with reference to the accompanying drawings and examples.
Embodiment 1
Fig. 2 shows a kind of composition structure diagram for the aerospace computer system that more backups start, as shown in Fig. 2, this is System includes central processing unit, multisample memory module and sample controller.
In the embodiment of the present invention, central processing unit is arranged in aerospace computer, be arranged for controlling for sample controller into Row startup program samples selection, completes to start sample maintenance.Central processing unit in the present invention is cpu chip, can be direct Using the cpu chip in aerospace computer as the central processing unit in the present invention.
In the embodiment of the present invention, multisample memory module uses aerospace nonvolatile memory, and it is standby to be configured to storage N Part central processing unit startup program sample, N is 2 integral number power, and N ≠ 0.Sample storage in the present invention can be with non- Volatile memory realizes that, compared to the PROM chips of the fuse property for needing weldering, it is with stronger availability and easily The property used.
Wherein multisample memory module can carry out the storage of startup program sample using a nonvolatile memory, Startup program sample, the i.e. central processing unit of N backups can also be stored using the nonvolatile memory of multiple and different types Startup program sample be stored in the nonvolatile memory of multiple and different types.
Identical startup program sample is stored according to the nonvolatile storage of multiple and different types, basis in start-up course Startup situation chooses the piece choosing of nonvolatile storage.The Radiation Characteristics of the anti-space environment of nonvolatile storage of different types, Anti-single particle characteristic differs, and the combination application of memory chip not of the same race can avoid the common cause failure of chip of the same race, greatly carry The reliability of high system.
In the embodiment of the present invention, sample controller, is configured to select central processing unit under the control of central processing unit Startup program sample, the health maintenance for sample program;Sample controller also maps selected startup program sample To the first address space of central processing unit operation;Sample controller monitors the running state of programs of central processing unit.Fig. 3 is shown Address of cache principle.
Central processing unit is also configured to read startup program sample from the first address space of operation, runs startup program.
The system that the embodiment of the present invention is provided realizes the clean boot of aerospace computer more by backing up design, does not have The reliability of aerospace computer is reduced, while used chip possesses higher availability and ease for use, not only saves member Device cost, and save because the complicated process that the PROM chip belts of fuse property come, improve whole aerospace and calculate The availability and ease for use of machine system, and more backups start design and also further increasing the reliable of aerospace computer system Property.
Embodiment 2
The embodiment of the present invention is that the detailed realization side of sample control is further provided on the basis of above-described embodiment 1 Formula, in the present embodiment, sample controller is realized in the following way:Including house dog counter, sample selection module and sample This handover module.
Central processing unit periodically sends to house dog counter in normal operation startup program and leads dog operation letter Number;Central processing unit no longer sends to house dog counter when running startup program exception and leads dog operation signal.
House dog counter connects central processing unit, timing is carried out under the control of central processing unit, and periodically connect What receipts central processing unit was sent leads dog operation signal, and dog operation signal is led if not received within the house dog cycle, in resetting Central processor, and produce dog and sting control signal and be sent to sample handover module.
Sample selection module connects central processing unit, reads the startup program sample number of central processing unit operation, goes forward side by side The selection of the next startup program sample of row.
Sample handover module is after receiving dog and stinging control signal, before central processing unit resets revocation, by sample Next startup program sample of selecting module selection is mapped to the first address space of central processing unit operation.
In the embodiment of the present invention, nonvolatile memory can be stack-design read-write nonvolatile memory or One or more combinations in read-write nonvolatile storage with Radiation hardness;Wherein sample controller uses FPGA Chip.
Embodiment 3
The aerospace computer system started based on more backups that above-described embodiment 1 and 2 provides, the embodiment of the present invention are also provided A kind of safe starting method, wherein Fig. 4 show the aerospace department of computer science that more backups that the embodiment of the present invention is provided start System safe starting method flow.As shown in figure 4, the safe starting method includes the following steps:
S1, central processing unit electrification reset, before resetting and cancelling, sample handover module is by pre-set startup program sample Originally it is mapped to the first address space of central processing unit operation.
After the reset of S2, central processing unit cancel, central processing unit control house dog counter starts timing;Central processing Device reads startup program sample from first address space, runs startup program, and whether startup program operation is normally carried out sentencing Disconnected, if operation startup program is normal, CPU cycle sends to house dog counter and leads dog operation signal, central processing Device starts successfully, and Booting sequence terminates.
If it is abnormal to run startup program, S4 is performed.
S4, central processing unit no longer send to house dog counter and lead dog operation signal;House dog counter is in house dog Do not received in cycle and lead dog operation signal, then reset central processing unit, and produce dog sting control signal be sent to sample switching Module.
What S5, sample selection module reading central processing unit were run is currently up program sample number, and carries out next open The selection of dynamic program sample.
S6, sample handover module are after receiving dog and stinging control signal, before central processing unit resets revocation, by sample Next startup program sample of this selecting module selection is mapped to the first address space of central processing unit operation.
Judge whether the number of central processing unit operation startup program sample is less than setting frequency threshold value.
If then return to S2.
Otherwise Booting sequence terminates.
Embodiment 4
This method passes through the house dog meter of design during the central processing unit operation startup program of aerospace computer Number device carries out operation exception judgement, and is realized by the cooperation of sample selection module and sample handover module to next startup journey The selection of sequence sample.
This method further includes following multisample maintenance process after Booting sequence terminates:
Sample selection module reads the startup program sample stored in multisample memory module, and startup program sample is carried out Two from three is decided by vote, and distinguishes correct startup program sample and the startup program sample of mistake, and start sample journey using correct The startup program sample of ordered pair mistake carries out write-back.
The wrongheaded startup program sample number of sample selection module whether with central processing unit operation startup program Sample number is identical, is sent if identical to central processing unit and forbids leading dog signal, central processing unit, which receives, to be forbidden leading dog letter After number, no longer sent to house dog counter and lead dog operation signal.
For the maintenance process, illustrated by taking 4 samples as an example:
Startup program sample includes Y1~Y4.
CPU is by controlling sample selection module to read the startup program sample of Y1, Y2 and Y3, in reading process, 3 samples This takes 2 byte comparison methods using 3, and in comparison process, record first appears the numbering number of the startup program sample of mistake.Example Such as, when reading three samples in comparison process, Y2 bytes report an error, system record Y2 error messages, if Y2 in comparison process There is abnormal program error twice, can not repeat to record, if Y3 bytes report an error, system records the error message of Y3, compares If abnormal program error twice occurs in Y3 in journey, can not repeat to record.
2 bytes are taken to compare by 3, system obtains the startup program catalogue number(Cat.No.) of correct startup program sample and mistake.3 take After the completion of 2 interpretations, this comparison result is compared with startup program sample Y4, if Y4 program errors, sample of the system to Y4 This number is recorded, and system carries out write-back using correct startup program sample to the startup program sample of mistake.Write-back is completed Afterwards, information comparison is re-read, to ensure the correctness in startup program sample.After system retaking of a year or grade compares correctly, system will Compare correct result to compare with Y4 information, to ensure the correctness of Y4.Write-back and the method compared should be less than being equal to M times, and M is Set write-back and compare frequency threshold value, so as to avoid system exception from entering Infinite Cyclic state.
Above maintenance process be after the central processing unit of aerospace computer starts successfully, still can be to startup program Exception prejudged, realize the maintenance of the startup reliabilities of the aerospace computer systems started to more backups comprehensively.
To sum up, the foregoing is merely a prefered embodiment of the invention, is not intended to limit the scope of the present invention.It is all Within the spirit and principles in the present invention, any modification, equivalent replacement, improvement and so on, should be included in the protection of the present invention Within the scope of.

Claims (6)

1. the aerospace computer system that a kind of more backups start, it is characterised in that including central processing unit, multisample memory module And sample controller;
The central processing unit is arranged in the aerospace computer, is arranged for controlling for the sample controller and is carried out startup journey Sequence samples selection;
The multisample memory module uses aerospace nonvolatile memory, is configured to the centre of storage N backups Manage the startup program sample of device, N is 2 integral number power, and N ≠ 0;
The sample controller, is configured to select the startup program sample of central processing unit under the control of the central processing unit Originally, and by selected startup program sample it is mapped to the first address space of the central processing unit operation;The sample control Device monitors the running state of programs of the central processing unit;
The central processing unit is also configured to read startup program sample from the first address space of the operation, and operation starts journey Sequence.
2. aerospace computer system as claimed in claim 1, it is characterised in that the sample controller, including house dog meter Number device, sample selection module and sample handover module;
The central processing unit periodically sends to the house dog counter in normal operation startup program and leads dog operation Signal;The central processing unit no longer sends to the house dog counter when running startup program exception and leads dog operation letter Number;
The house dog counter connects the central processing unit, and timing, and week are carried out under the control of the central processing unit Receive to phase property that the central processing unit sends leads dog operation signal, and described dog behaviour is led if not received within the house dog cycle Make signal, then reset the central processing unit, and produce dog and sting control signal and be sent to the sample handover module;
The sample selection module connects the central processing unit, and the startup program sample for reading the central processing unit operation is compiled Number, and carry out the selection of next startup program sample;
The sample handover module resets revocation after receiving the dog and stinging control signal, in the central processing unit Before, next startup program sample that the sample selection module is selected is mapped to the first ground of the central processing unit operation Location space.
3. aerospace computer system as claimed in claim 1 or 2, it is characterised in that the multisample memory module includes more A different types of nonvolatile memory, N backup the central processing unit startup program sample be stored in it is the multiple In different types of nonvolatile memory.
4. aerospace computer system as claimed in claim 3, it is characterised in that the nonvolatile memory is stack-design Read-write nonvolatile memory or with Radiation hardness read-write nonvolatile storage;The sample controller is adopted Use fpga chip.
5. a kind of aerospace computer safety start method that more backups start, it is characterised in that using as claimed in claim 2 Aerospace computer system, the Booting sequence of the system are specially:
S1, the central processing unit electrification reset, before resetting and cancelling, the sample handover module is by pre-set startup journey Sequence sample is mapped to the first address space of central processing unit operation.
After the reset of S2, the central processing unit cancel, the central processing unit controls the house dog counter to start timing; The central processing unit reads startup program sample from first address space, runs startup program, and be to startup program operation No to be normally carried out judging, if operation startup program is normal, the CPU cycle is sent to the house dog counter Dog operation signal is led, the central processing unit starts successfully, and Booting sequence terminates;
If it is abnormal to run startup program, S4 is performed;
S4, the central processing unit no longer send to the house dog counter and lead dog operation signal;The house dog counter Dog operation signal is led described in not received within the house dog cycle, then resets the central processing unit, and produces dog and stings control letter Number it is sent to the sample handover module;
The sample selection module reading central processing unit operation is currently up program sample number, and carries out next open The selection of dynamic program sample;
The sample handover module resets revocation after receiving the dog and stinging control signal, in the central processing unit Before, next startup program sample that the sample selection module is selected is mapped to the first ground of the central processing unit operation Location space;
Judge that whether the central processing unit runs the number of the startup program sample less than setting frequency threshold value;
If then return to S2;
Otherwise Booting sequence terminates.
6. safe starting method as claimed in claim 5, it is characterised in that after the Booting sequence terminates, further include as Lower multisample maintenance process:
The sample selection module reads the startup program sample stored in the multisample memory module, to the startup program Sample carries out two from three voting, distinguishes correct startup program sample and the startup program sample of mistake, and use and correctly open Dynamic program sample carries out write-back to the startup program sample of mistake;
The wrongheaded startup program sample number of sample selection module whether with the central processing unit operation startup Program sample number is identical, is sent if identical to the central processing unit and forbids leading dog signal, the central processing unit receives Forbid to described after leading dog signal, no longer sent to the house dog counter and lead dog operation signal.
CN201711221114.9A 2017-11-29 2017-11-29 Multi-backup started aerospace computer system and safe starting method Active CN108021473B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201711221114.9A CN108021473B (en) 2017-11-29 2017-11-29 Multi-backup started aerospace computer system and safe starting method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711221114.9A CN108021473B (en) 2017-11-29 2017-11-29 Multi-backup started aerospace computer system and safe starting method

Publications (2)

Publication Number Publication Date
CN108021473A true CN108021473A (en) 2018-05-11
CN108021473B CN108021473B (en) 2022-09-27

Family

ID=62077201

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711221114.9A Active CN108021473B (en) 2017-11-29 2017-11-29 Multi-backup started aerospace computer system and safe starting method

Country Status (1)

Country Link
CN (1) CN108021473B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111722880A (en) * 2020-05-11 2020-09-29 深圳市共进电子股份有限公司 Equipment production method, device, terminal equipment and medium

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100088444A1 (en) * 2008-10-02 2010-04-08 International Business Machines Corporation Central processing unit measurement facility
CN102270162A (en) * 2011-07-29 2011-12-07 中国航天科技集团公司第五研究院第五一三研究所 Fault-tolerant guide method applied to SPARCV8 structure computer
CN102521066A (en) * 2011-11-15 2012-06-27 北京空间飞行器总体设计部 On-board computer space environment event fault tolerance method
CN104090788A (en) * 2014-06-27 2014-10-08 上海航天电子通讯设备研究所 Method and system for configuring and running satellite-borne software on basis of load
CN106021169A (en) * 2016-05-16 2016-10-12 中国计量学院 Aerospace computer and refreshing and upgrading method for nonvolatile storage apparatus thereof
CN106648809A (en) * 2017-01-10 2017-05-10 上海航天控制技术研究所 Starting method of satellite borne software
CN106649173A (en) * 2016-10-10 2017-05-10 上海航天控制技术研究所 High-reliability in-orbit self-correction system and method for on-board computer on the basis of 1553B bus
CN106933145A (en) * 2017-03-09 2017-07-07 上海微小卫星工程中心 A kind of spaceborne processing system and its control operation method

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100088444A1 (en) * 2008-10-02 2010-04-08 International Business Machines Corporation Central processing unit measurement facility
CN102270162A (en) * 2011-07-29 2011-12-07 中国航天科技集团公司第五研究院第五一三研究所 Fault-tolerant guide method applied to SPARCV8 structure computer
CN102521066A (en) * 2011-11-15 2012-06-27 北京空间飞行器总体设计部 On-board computer space environment event fault tolerance method
CN104090788A (en) * 2014-06-27 2014-10-08 上海航天电子通讯设备研究所 Method and system for configuring and running satellite-borne software on basis of load
CN106021169A (en) * 2016-05-16 2016-10-12 中国计量学院 Aerospace computer and refreshing and upgrading method for nonvolatile storage apparatus thereof
CN106649173A (en) * 2016-10-10 2017-05-10 上海航天控制技术研究所 High-reliability in-orbit self-correction system and method for on-board computer on the basis of 1553B bus
CN106648809A (en) * 2017-01-10 2017-05-10 上海航天控制技术研究所 Starting method of satellite borne software
CN106933145A (en) * 2017-03-09 2017-07-07 上海微小卫星工程中心 A kind of spaceborne processing system and its control operation method

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
HONGFEI YIN等: "Verification-Based Multi-backup Firmware Architecture, an Assurance of Trusted Boot Process for the Embedded Systems", 《IEEE XPLORE》 *
徐晨辉等: "基于ARM-Linux嵌入式移动POS机系统中启动程序的研究与设计", 《电子测量技术》 *
王豪等: "一种高可靠宇航控制器设计及可靠性评估", 《计算机测量与控制》 *
辛宁等: "一种星载计算机操作系统容错引导算法研究", 《宇航学报》 *
黄超等: "基于抗辐照龙芯的星载计算机容错启动研究", 《计算机科学》 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111722880A (en) * 2020-05-11 2020-09-29 深圳市共进电子股份有限公司 Equipment production method, device, terminal equipment and medium
CN111722880B (en) * 2020-05-11 2024-02-09 深圳市共进电子股份有限公司 Equipment production method and device, terminal equipment and medium

Also Published As

Publication number Publication date
CN108021473B (en) 2022-09-27

Similar Documents

Publication Publication Date Title
CN107908495B (en) Embedded system abnormal record display method
CN111324192A (en) System board power supply detection method, device, equipment and storage medium
CN106226724B (en) A kind of clock of power meter method for detecting abnormality
US10922071B2 (en) Centralized off-board flash memory for server devices
KR20120123507A (en) Apparatus and method for recording reboot reason of equipment
CN112542199B (en) Method, circuit, storage medium and terminal for detecting flash memory error
CN104090788B (en) A kind of On-board software configuration and operation method and system based on load
CN106537351B (en) Method for the power failure in diagnostic wireless communication equipment
CN111984487A (en) Method and device for recording fault hardware position off-line
CN105824730A (en) Method and device for diagnosing and repairing hardware
CN113672306B (en) Server component self-checking abnormity recovery method, device, system and medium
CN108021473A (en) The aerospace computer system and safe starting method that a kind of more backups start
CN112231140A (en) Method, system, terminal and storage medium for fault recovery of BMC (baseboard management controller) of storage device
CN103049345A (en) Magnetic disk state transition detection method and device based on asynchronous communication mechanism
CN115658373B (en) Server-based memory processing method and device, processor and electronic equipment
US9779059B2 (en) Commercial vehicle, in particular fork-lift truck or industrial truck, with a data memory that is rigidly attached on the vehicle side and assigned to a parameterisable electronic control arrangement
CN111176878A (en) Server BBU (building base band Unit) standby power diagnosis method, system, terminal and storage medium
CN110825547B (en) PCIE card exception recovery device and method based on SMBUS
CN105068969B (en) Single particle effect guard system and method for digital signal processing platform framework
CN110968456B (en) Method and device for processing fault disk in distributed storage system
CN111400136A (en) Server-dedicated GPU fault protection device, method, equipment and medium
CN107273291B (en) Processor debugging method and system
CN106610878A (en) Fault debugging method for dual-controller system
CN111865719A (en) Automatic testing method and device for fault injection of switch
JP2008134838A (en) Bus device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant