CN108051998B - Redundant system synchronization and monitoring judgment method - Google Patents
Redundant system synchronization and monitoring judgment method Download PDFInfo
- Publication number
- CN108051998B CN108051998B CN201711139617.1A CN201711139617A CN108051998B CN 108051998 B CN108051998 B CN 108051998B CN 201711139617 A CN201711139617 A CN 201711139617A CN 108051998 B CN108051998 B CN 108051998B
- Authority
- CN
- China
- Prior art keywords
- output parameters
- redundant
- entering
- entering step
- redundant system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Abstract
The invention provides a redundant system synchronization and monitoring judgment method, which comprises the following steps that an input device A sends an input instruction 1 to a system A and a redundant system B, and the input device B sends an input instruction 2 to the system A and the redundant system B; the system A and the redundant system B send heartbeat messages of the system at the side to the opposite side system periodically in real time, and whether the opposite side system is in a normal state is judged according to whether the heartbeat messages are received or not; and the system A and the redundant system B send the output parameters with the time stamps of the respective system at the side to the system at the opposite side, and the system at the side judges the output parameters at the side and the output parameters at the system at the opposite side so as to obtain the state of each system or each parameter. The method provided by the invention can monitor the output of the redundant system, can monitor the running condition of the opposite side system in real time, and is convenient for a system user to process or respond to the system fault in time.
Description
Technical Field
The invention belongs to the field of redundant system design, and particularly relates to a redundant system synchronization and monitoring judgment method.
Background
At present, redundant systems mostly adopt devices with similarity redundancy, and as long as one device fails to cause system failure, the other redundancy system also fails due to the same problem, and the reliability of the system cannot be well guaranteed. Meanwhile, the operation state of the system on the opposite side is not supervised, and only the operation state of the system on the local side is concerned, so that a user of the system on the one side cannot timely process or early warn the system faults and other conditions.
Disclosure of Invention
It is an object of the present invention to provide a redundant system synchronization and monitoring decision method that overcomes or alleviates at least one of the above-mentioned deficiencies of the prior art.
The purpose of the invention is realized by the following technical scheme: a redundant system synchronization and monitoring judgment method comprises the following steps:
step one, an input device A sends an input instruction 1 to a system A and a redundant system B, and the input device B sends an input instruction 2 to the system A and the redundant system B;
step two: the system A and the redundant system B send heartbeat messages of the system at the side to the opposite side system periodically in real time, and whether the opposite side system is in a normal state is judged according to whether the heartbeat messages are received or not;
step three: and the system A and the redundant system B send the output parameters with the time stamps of the respective system at the side to the system at the opposite side, and the system at the side judges the output parameters at the side and the output parameters at the system at the opposite side so as to obtain the state of each system or each parameter.
Preferably, both the system a and the redundant system B are hardware devices that reside at different similar redundancy.
Preferably, the determining process in step three includes the following steps:
step 3.1, obtaining output parameters with time stamps of the system A, and entering step 3.2;
step 3.2, judging whether a heartbeat message of the redundancy system B is received, if so, entering step 3.3, otherwise, entering step 3.19;
3.3, obtaining the output parameters with the time stamps of the redundant system B, and entering the step 3.4;
step 3.4, judging whether the output parameters of the system A are effective, if so, entering step 3.11, otherwise, entering step 3.5;
step 3.5, comparing the timestamps of the output parameters of the same type of the system A according to a set time difference threshold value, judging whether the output parameters of the redundant system B are overtime or not, and entering step 3.6 if the output parameters are overtime; otherwise, entering a step 3.8;
step 3.6, outputting a default fault safety value, and entering step 3.7;
step 3.7, giving a prompt that the output parameters of the system A and the redundant system B are invalid;
step 3.8, judging whether the output parameter of the redundancy system B is effective or not according to the effective range of the parameter, if so, entering step 3.9, otherwise, entering step 3.6;
step 3.9, outputting the output parameters of the redundant system B, and entering step 3.10;
step 3.10, giving a prompt that the output parameters of the system A are invalid;
step 3.11, comparing the time stamp of the system A with the time stamp of the redundant system B, judging whether the redundant system B is overtime, if overtime, entering step 3.12, otherwise, entering step 3.14;
step 3.12, outputting the output parameters of the system A, and entering step 3.13;
step 3.13, giving a prompt of the output parameter overtime of the redundancy system B;
step 3.14, judging whether the output parameter of the redundant system B is effective, if so, entering step 3.15, otherwise, entering step 3.12;
step 3.15, judging whether the difference value of the output parameters of the system A and the redundant system B is within a set threshold value, if so, entering step 3.16, otherwise, entering step 3.17;
step 3.16, outputting the mean value of the system A and the redundant system B;
step 3.17, outputting a default fault safety value, and entering step 3.18;
step 3.18, giving a prompt that the output parameters of the system A and the redundant system B are inconsistent;
step 3.19, judging whether the output parameters of the system A are effective, if so, entering step 3.20, otherwise, entering step 3.21;
step 3.20, outputting the output parameters of the system A and giving out the prompt that the redundancy system B is not on line;
and 3.21, outputting a default fault safety value and giving a prompt that the system A outputs invalid and the redundant system B is not on line.
The method for synchronizing and monitoring and judging the redundant system has the advantages that the software instruction synchronization and the non-similarity synchronization hardware are adopted, the running synchronization of the redundant system is guaranteed, the reliability of the redundant system is improved, meanwhile, the output of the redundant system can be monitored, and the running condition of the opposite side system can be monitored in real time, so that a system user can timely process or respond to the system fault.
Drawings
FIG. 1 is a schematic block diagram of the design of a redundancy system synchronization and monitoring decision method of the present invention;
fig. 2 is a flow chart of monitoring of the output of fig. 1.
Detailed Description
In order to make the implementation objects, technical solutions and advantages of the present invention clearer, the technical solutions in the embodiments of the present invention will be described in more detail below with reference to the accompanying drawings in the embodiments of the present invention. In the drawings, the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The described embodiments are only some, but not all embodiments of the invention. The embodiments described below with reference to the drawings are illustrative and intended to be illustrative of the invention and are not to be construed as limiting the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The redundancy system synchronization and monitoring decision method of the present invention will be further described in detail with reference to the accompanying drawings.
As shown in fig. 1, the present invention has two systems, i.e., a system a and a redundant system B, two input devices and two output devices, wherein the system a and the redundant system B respectively reside in different hardware devices with similar redundancy.
When the system A receives the instruction 1 of the input equipment A, the input equipment A synchronously sends the instruction 1 to the redundant system B; when the redundant system B receives the instruction 2 input into the device B, the input device B synchronously sends the instruction 2 to the system A.
The system A and the redundant system B send heartbeat messages of the system at the side to the opposite side system periodically in real time, if the heartbeat messages of the system at the opposite side are received by default, the system at the opposite side is judged to be in a normal state, otherwise, the system at the opposite side is judged to be in a fault, and an alarm is given.
The output parameters with time stamps of the system A and the redundant system B on the same side are sent to the opposite side system, the system on the same side judges the output parameters of the system on the same side and the output parameters of the opposite side system, and further the state of each system or each parameter is obtained, and the specific judging process executes the following steps (detailed see figure 2):
step 1, obtaining output parameters of a system A (a timestamp is marked when the system A sends out), and entering step 2;
step 2, judging whether a heartbeat message of a redundant system B is received, if so, entering step 3, otherwise, entering step 19;
step 3, obtaining the output parameters of the redundant system B (the redundant system B is marked with a time stamp when sending out), and entering step 4;
step 4, judging whether the output parameters of the system A are effective, if so, entering step 11, otherwise, entering step 5;
step 5, comparing the timestamps of the output parameters of the same type of the system A according to a set time difference threshold value, judging whether the output parameters of the redundant system B are overtime, and entering step 6 if the output parameters are overtime; otherwise, entering a step 8;
step 6, outputting a default fault safety value, and entering step 7;
step 7, giving a prompt that the output parameters of the system A and the redundant system B are invalid;
step 8, judging whether the output parameters of the redundancy system B are effective or not according to the effective range of the parameters, if so, entering step 9, and otherwise, entering step 6;
step 9, outputting the output parameters of the redundant system B, and entering step 10;
step 10, giving a prompt that the output parameters of the system A are invalid;
step 11, comparing the time stamp of the system A with the time stamp of the redundant system B, judging whether the redundant system B is overtime, if yes, entering step 12, otherwise, entering step 14;
step 12, outputting the output parameters of the system A, and entering step 13;
step 13, giving a prompt of the output parameter overtime of the redundancy system B;
step 14, judging whether the output parameters of the redundant system B are valid, if so, entering step 15, otherwise, entering step 12;
step 15, judging whether the difference value of the output parameters of the system A and the redundant system B is within a set threshold value, if so, entering step 16, otherwise, entering step 17;
step 16, outputting the mean value of the system A and the redundant system B;
step 17, outputting a default fault safety value, and entering step 18;
step 18, giving a prompt that the output parameters of the system A and the redundant system B are inconsistent;
step 19, judging whether the output parameters of the system A are valid, if so, entering step 20, otherwise, entering step 21;
step 20, outputting the output parameters of the system A and giving out the prompt that the redundancy system B is not on line;
and step 21, outputting a default fault safety value and giving a prompt that the system A outputs invalid and the redundant system B is not on line.
The above description is only for the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope of the present invention are included in the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the appended claims.
Claims (1)
1. A redundant system synchronization and monitoring judgment method is characterized by comprising the following steps:
step one, an input device A sends an input instruction 1 to a system A and a redundant system B, and the input device B sends an input instruction 2 to the system A and the redundant system B;
step two: the system A and the redundant system B send heartbeat messages of the system at the side to the opposite side system periodically in real time, and whether the opposite side system is in a normal state is judged according to whether the heartbeat messages are received or not;
step three: the system A and the redundant system B send output parameters with time stamps of respective local side systems to the opposite side system, and the local side system judges the output parameters of the local side and the output parameters of the opposite side system so as to obtain the state of each system or each parameter;
the system A and the redundant system B are both hardware devices with different resident similarity;
the judging process in the third step comprises the following steps:
step 3.1, obtaining output parameters with time stamps of the system A, and entering step 3.2;
step 3.2, judging whether a heartbeat message of the redundancy system B is received, if so, entering step 3.3, otherwise, entering step 3.19;
3.3, obtaining the output parameters with the time stamps of the redundant system B, and entering the step 3.4;
step 3.4, judging whether the output parameters of the system A are effective, if so, entering step 3.11, otherwise, entering step 3.5;
step 3.5, comparing the timestamps of the output parameters of the same type of the system A according to a set time difference threshold value, judging whether the output parameters of the redundant system B are overtime or not, and entering step 3.6 if the output parameters are overtime; otherwise, entering a step 3.8;
step 3.6, outputting a default fault safety value, and entering step 3.7;
step 3.7, giving a prompt that the output parameters of the system A and the redundant system B are invalid;
step 3.8, judging whether the output parameter of the redundancy system B is effective or not according to the effective range of the parameter, if so, entering step 3.9, otherwise, entering step 3.6;
step 3.9, outputting the output parameters of the redundant system B, and entering step 3.10;
step 3.10, giving a prompt that the output parameters of the system A are invalid;
step 3.11, comparing the time stamp of the system A with the time stamp of the redundant system B, judging whether the redundant system B is overtime, if overtime, entering step 3.12, otherwise, entering step 3.14;
step 3.12, outputting the output parameters of the system A, and entering step 3.13;
step 3.13, giving a prompt of the output parameter overtime of the redundancy system B;
step 3.14, judging whether the output parameter of the redundant system B is effective, if so, entering step 3.15, otherwise, entering step 3.12;
step 3.15, judging whether the difference value of the output parameters of the system A and the redundant system B is within a set threshold value, if so, entering step 3.16, otherwise, entering step 3.17;
step 3.16, outputting the mean value of the system A and the redundant system B;
step 3.17, outputting a default fault safety value, and entering step 3.18;
step 3.18, giving a prompt that the output parameters of the system A and the redundant system B are inconsistent;
step 3.19, judging whether the output parameters of the system A are effective, if so, entering step 3.20, otherwise, entering step 3.21;
step 3.20, outputting the output parameters of the system A and giving out the prompt that the redundancy system B is not on line;
and 3.21, outputting a default fault safety value and giving a prompt that the system A outputs invalid and the redundant system B is not on line.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711139617.1A CN108051998B (en) | 2017-11-16 | 2017-11-16 | Redundant system synchronization and monitoring judgment method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711139617.1A CN108051998B (en) | 2017-11-16 | 2017-11-16 | Redundant system synchronization and monitoring judgment method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108051998A CN108051998A (en) | 2018-05-18 |
| CN108051998B true CN108051998B (en) | 2020-11-13 |
Family
ID=62118879
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711139617.1A Active CN108051998B (en) | 2017-11-16 | 2017-11-16 | Redundant system synchronization and monitoring judgment method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108051998B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109557808A (en) * | 2018-10-30 | 2019-04-02 | 成都飞机工业（集团）有限责任公司 | A kind of mutual monitoring method of redundant computer interchannel |
Family Cites Families (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7617413B2 (en) * | 2006-12-13 | 2009-11-10 | Inventec Corporation | Method of preventing erroneous take-over in a dual redundant server system |
| CN100555234C (en) * | 2008-05-12 | 2009-10-28 | 北京邮电大学 | Dual redundant fault-tolerant system and redundancy switching method thereof |
| WO2011074147A1 (en) * | 2009-12-16 | 2011-06-23 | 三菱電機株式会社 | Redundant control device |
| CN101710299A (en) * | 2009-12-24 | 2010-05-19 | 中国航空工业集团公司第六三一研究所 | Double-redundancy fault-tolerant computer system based on self monitoring of SCM |
| CN102724083A (en) * | 2012-05-25 | 2012-10-10 | 哈尔滨工程大学 | Degradable triple-modular redundancy computer system based on software synchronization |
| US9201744B2 (en) * | 2013-12-02 | 2015-12-01 | Qbase, LLC | Fault tolerant architecture for distributed computing systems |
| CN103823362A (en) * | 2014-02-17 | 2014-05-28 | 南京航空航天大学 | Arbitration mechanism-based similar dual-redundancy flight control computer and redundancy control method |
| CN103941633B (en) * | 2014-04-29 | 2017-01-25 | 北京龙鼎源科技股份有限公司 | PLC redundancy control method and system |
| CN105182961B (en) * | 2015-08-11 | 2018-01-30 | 中国航空工业集团公司西安飞机设计研究所 | Four remaining signal monitoring means of votings and equipment |
| CN106815093B (en) * | 2015-11-30 | 2020-08-21 | 北京宇航系统工程研究所 | Computer fault tolerance device based on interconnection between domestic Loongson processors |
| CN105550053B (en) * | 2015-12-09 | 2018-08-21 | 中国航空工业集团公司西安航空计算技术研究所 | It is a kind of promoted availability monitoring to tolerant system redundancy management method |
-
2017
- 2017-11-16 CN CN201711139617.1A patent/CN108051998B/en active Active
Non-Patent Citations (1)
| Title |
|---|
| 一种双机热备的嵌入式计算机系统设计;赵豫峰等;《国外电子测量技术》;20130705;第32卷(第6期);第79-84页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108051998A (en) | 2018-05-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106946110B (en) | A kind of elevator malfunction failure monitoring system and method | |
| CN108869264B (en) | Pump station unit fault diagnosis early warning system | |
| CN102681909B (en) | A kind of server method for early warning based on EMS memory error | |
| CN102014012B (en) | Synchronous alarming method and device | |
| WO2018233642A1 (en) | Train network node, and train network node monitoring method based on canopen protocol | |
| CN110488597A (en) | Locomotive Main Processor Unit dual redundant control method | |
| CN107688547B (en) | Method and system for switching between main controller and standby controller | |
| CN108051998B (en) | Redundant system synchronization and monitoring judgment method | |
| CN111142801B (en) | Distributed storage system network sub-health detection method and device | |
| CN106453504A (en) | Monitoring system and method based on NGINX server cluster | |
| CN111341063A (en) | Intelligent control system, method and device for safety early warning and monitoring of electric equipment and terminal equipment | |
| CN103777617A (en) | Upper-and-lower computer communication monitoring method | |
| CN107026762B (en) | Disaster recovery system and method based on distributed cluster | |
| CN115988551A (en) | O-RAN wireless unit fault management method based on ZYNQ | |
| CN104348676B (en) | A kind of chain circuit detecting method and equipment based on operation management maintainance OAM | |
| CN115378794A (en) | Gateway fault detection method and device based on snapshot mode | |
| CN215180009U (en) | Gas monitoring device with humiture is corrected function | |
| CN112362908B (en) | Fault detection method and system for anemometer in high-speed railway high-wind disaster prevention monitoring system | |
| JP2010244137A (en) | Failure information collection device | |
| CN112327007B (en) | Fault detection method and system of high-speed railway gale disaster prevention monitoring system | |
| CN115174189A (en) | Abnormality detection method, abnormality detection device, electronic apparatus, and storage medium | |
| WO2014040470A1 (en) | Alarm message processing method and device | |
| CN103552891A (en) | Remote elevator monitoring method and remote elevator monitoring device | |
| CN111815449A (en) | Flow calculation-based anomaly detection method and system for multi-host market quotation system | |
| CN110751814A (en) | Electrical fire monitoring system for rail transit and early warning analysis method thereof |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |