CN109698775A - A kind of dual-machine redundancy backup system based on real-time status detection - Google Patents
A kind of dual-machine redundancy backup system based on real-time status detection Download PDFInfo
- Publication number
- CN109698775A CN109698775A CN201910164177.8A CN201910164177A CN109698775A CN 109698775 A CN109698775 A CN 109698775A CN 201910164177 A CN201910164177 A CN 201910164177A CN 109698775 A CN109698775 A CN 109698775A
- Authority
- CN
- China
- Prior art keywords
- node
- test
- self
- slot position
- active
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0654—Management of faults, events, alarms or notifications using network fault recovery
- H04L41/0663—Performing the actions predefined by failover planning, e.g. switching to standby network elements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0823—Errors, e.g. transmission errors
Abstract
The present invention provides a kind of dual-machine redundancy backup systems based on real-time status detection, include main process task node and back-up processing node, the health status of Correspondent Node is obtained between main process task node and back-up processing node by discrete magnitude and RS232 bus cycles, by self test mode come the health status of real-time detection node itself, main process task node and backup node receive data from external bus and are handled, but only main process task node externally sends data, backup node does not send data externally, when carrying out active-standby switch, need to close the transmission interface of main process task node, open the transmission interface of backup node, and switching is completed after the state of main-standby nodes is set.The present invention improves the reliability of system, meanwhile, the hardware and software of host node and backup node is just the same, can be interchanged, and improves the maintainability of system.
Description
Technical field
The present invention relates to airborne embedding assembly field, especially a kind of dual-machine redundancy backup system.
Background technique
With the development of technology, airborne avionics system becomes increasingly complex, the service requirement of some key tasks it is high can
By property, system requirements can no longer meet by the reliability for improving single node, therefore (work as by dual-machine redundancy backup technology
After host node breaks down, back-up processing node can take over host node and continue to run) to not influence system allomeric function, pole
The reliability of system is improved greatly.
Currently, only having a physics logical between active and standby two nodes used in active-standby switch technology in airborne avionics system
Road carries out status monitoring and switching command interaction, if there are failures for this physical channel, active and standby two nodes all can not be normal
Work.
Summary of the invention
For overcome the deficiencies in the prior art, the present invention provides a kind of dual-machine redundancy backup system based on real-time status detection
System, after main process task node breaks down, backup node can continue to run, to not influence system allomeric function.
The technical solution adopted by the present invention to solve the technical problems is:
It is a kind of based on real-time status detection dual-machine redundancy backup system, include main process task node and back-up processing node,
The health status of Correspondent Node is obtained between main process task node and back-up processing node by discrete magnitude and RS232 bus cycles,
By self test mode come the health status of real-time detection node itself, self test mode is divided into following three kinds:
Power-on self-test (PBIT): after node powers on, self-test is carried out after the completion of operating system initialization, self-test project includes
Processor operation self-test, memory read-write self-test, FLASH memory self-test, nonvolatile storage self-test and bus apparatus self-test.
Period self-test (CBIT): node in the process of running, periodically executes detection, cycle detection project includes processor
Operation self-test, memory read-write self-test and nonvolatile storage self-test.
Maintenance self-test (MBIT): when node enters service mode according to the order of host computer when running, to the software of node
It is detected with hardware, detection project is identical with power-on self-test project.
Active and standby decision phase when electrifying startup carries out active and standby decision using discrete magnitude signal；
Active and standby decision is divided into active and standby decision when active and standby decision and operation when electrifying startup, and active and standby decision is when main process task node
Detecting itself can switch itself after breaking down as Status of Backups, after backup node detects that host node is failure and itself
Fault-free, then switching is main state.
Main process task node and backup node receive data from external bus and are handled, but only main process task node
Data are externally sent, backup node does not send data externally, when carrying out active-standby switch, needs to close the transmission of main process task node
Interface, opens the transmission interface of backup node, and completes switching after the state of main-standby nodes is arranged.
It is responsible in the life message of the active and standby decision phase of operational process, the preferential life message for using RS232, RS232
Transmit the activestandby state, health status and switching state information of this node；When the life message of RS232 is unavailable, using from
It dissipates amount signal and carries out active and standby decision and switching.
Active and standby decision process in power up are as follows:
Active and standby decision process is that set SYS_FAIL output signal be 0 to hardware logic when main process task node electrifying startup, is represented
This node is faulty, and the MID location information of this node is read in software starting, executes power-on self-test, if power-on self-test is incorrect,
It is 0 that then SYS_FAIL output signal, which keeps output, i.e. malfunction, software is out of service；If power-on self-test correctly if software
Setting the output of SYS_FAIL signal is 1, i.e. normal condition, then reads the SYS_FAIL input signal of node in slot position 2, due to slot position
On 2 node have delay wait, the power-on self-test of node is not completed in slot position 2 at this time, thus in slot position 2 node SYS_FAIL
Signal output is malfunction, and it is holotype that oneself state, which is arranged, in this node.
It is that set SYS_FAIL output signal be 0 to hardware logic that node in slot position 2, which powers on decision process, i.e. malfunction,
Software reads the MID location information of this node, and 1 self-test of slot position is completed after waiting 4 seconds, guarantees that node reads slot position 2 in slot position 1
The SYS_FAIL signal of upper node is malfunction, and then node executes power-on self-test in slot position 2, if power-on self-test is incorrect
Then software is out of service, if power-on self-test correctly if the SYS_FAIL signal output of this node is set for 1, i.e. normal condition；
Node reads the active/standby mode of node in the ROLE signal acquisition slot position 1 put in slot position 1 in slot position 2, if saved in slot position 1
It is then backup for node working mode in setting slot position 2, if the node working mode of slot position 1 is standby based on point operating mode
Part, then the node that slot position 2 is arranged is based on mode.
The beneficial effects of the present invention are use discrete magnitude and RS232 bus to carry out status monitoring between active and standby two nodes
With switching command interaction, discrete magnitude and RS232 bus are mutually backups, and when RS232 breaks down, discrete magnitude continuation can be used
The interaction and switching for carrying out main-standby nodes, improve the reliability of system.Meanwhile the hardware and software of host node and backup node
It is just the same, it can be interchanged, improve the maintainability of system.
Detailed description of the invention
Fig. 1 is the active and standby processing node discrete magnitude of the present invention and RS232 interaction schematic diagram.
Fig. 2 is the active and standby decision framework composition schematic diagram of the present invention.
Fig. 3 is the upper active and standby decision flow diagram of electricity operation of the present invention.
Fig. 4 active and standby decision flow diagram when being present invention operation.
Specific embodiment
Present invention will be further explained below with reference to the attached drawings and examples.
Dual-machine redundancy backup technology is according to the health status of node itself, the health status of other side, current active and standby role
Etc. come decide whether execute switching action.Switching action mainly includes that the state of malfunctioning node is arranged to be backup mode, close event
The bus sending function for hindering node, the state that backup node is arranged are holotype, the bus sending function for opening backup node.It is double
Machine redundancy backup technology is related to health monitoring, troubleshooting, active and standby decision, active-standby switch etc., as shown in Figure 2.
The present invention carries out status monitoring using discrete magnitude and RS232 bus between active and standby two nodes and switching command is handed over
Mutually, discrete magnitude and RS232 bus are mutually backups, and when RS232 breaks down, discrete magnitude can be used and continue main-standby nodes
Interaction and switching, improve the reliability of system.Meanwhile the hardware and software of host node and backup node is just the same, it can
To exchange, the maintainability of system is improved.
To achieve the goals above, the method for the present invention includes health monitoring, active and standby decision, active-standby switch three parts.
It is a kind of based on real-time status detection dual-machine redundancy backup system, include main process task node and back-up processing node,
The health status of Correspondent Node is obtained between main process task node and back-up processing node by discrete magnitude and RS232 bus cycles,
By self test mode come the health status of real-time detection node itself, self test mode is divided into following three kinds:
Power-on self-test (PBIT): after node powers on, self-test is carried out after the completion of operating system initialization, self-test project includes
Processor operation self-test, memory read-write self-test, FLASH memory self-test, nonvolatile storage self-test and bus apparatus self-test.
Period self-test (CBIT): node in the process of running, periodically executes detection, in order to reduce the shadow to application program
It rings, cycle detection project is less, including processor operation self-test, memory read-write self-test and nonvolatile storage self-test.
Maintenance self-test (MBIT): when node enters service mode according to the order of host computer when running, to the software of node
It is detected with hardware, detection project is identical with power-on self-test project.
Active and standby decision: active and standby decision active and standby decision when being divided into active and standby decision when electrifying startup and running, active and standby decision is to work as
Main process task nodal test can switch itself for Status of Backups, when backup node detects host node for event after breaking down to itself
After barrier and itself fault-free, then switching is main state.
Active-standby switch: host node and backup node receive data from external bus and are handled, but only main section
Point externally sends data, and backup node does not send data externally, and when carrying out active-standby switch, the transmission for needing to close host node is connect
Mouthful, the transmission interface of backup node is opened, and complete switching after the state of main-standby nodes is set.
The information such as health status, active-standby mode, switching command, switching completion status between main-standby nodes pass through two sections
RS232 bus life message and discrete magnitude signal between point are transmitted.
One, RS232 and discrete magnitude definition
(1) discrete magnitude signal defines
SysFail signal instruction: output SysFail signal is used to indicate this node health status, and (0 representing fault, 1 represents
Normally), input SysFail signal is used to indicate other side's health status (0 representing fault, 1 represents normally).
Sync signal instruction: the operation for two nodes is synchronous, after the completion of the active and standby decision initialization of power up phase,
Both sides are respectively provided with this signal, and representing the completion of this node initializing can run simultaneously with other side.After this node sets up this signal,
Start read other side sync signal, if other side is not provided with, this node wait 4 seconds, if after 4 seconds other side sync signal
Again without being set, then this node thinks other side's synchronization failure；If the sync signal of other side has been arranged after 4 seconds, then it is assumed that same
It walks successfully, both sides, which start to synchronize, to be continued to run.Output sync signal represents synchronous regime, and input sync signal represents the same of other side
Step state, (0 represents not set synchronization, and synchronization has been arranged in 1 representative)
Role signal instruction: it is used to indicate the active/standby mode of node.Output Role signal represents the work of this node
Mode, input Role signal represent the operating mode of other side (0 represents backup mode, and 1 represents holotype).
SoftReset signal instruction: output SoftReset signal is used to indicate this node and warm reset has occurred, and (0 represents
Warm reset, 1 represents normally).Input SoftReset signal is used to indicate whether other side occurs warm reset, (0 represents warm reset, and 1
It represents normal).
Four signals of host node and backup node are output and input, and the input signal of host node is connected to backup section
The output signal of point, the output signal of host node are connected to the input signal of backup node, are specifically shown in Fig. 1.
In addition to discrete magnitude and RS232, host node and backup node are obtained by the discrete magnitude in slot position where reading
Location information, i.e. MID (value range is 1 or 2), software distinguishes node by location information.Default slot position 1 node be
Host node, then the node of slot position 2 is backup node.
(2) RS232 bus
The baud rate of RS232 bus communication is 115200, and stop position 1, check bit is even parity check.
Two nodes transmit life message by RS232 bus, and life message communication format is defined as follows:
| Serial number | Field format | Field name | Explanation of field |
| 1 | unsigned int | header | Message header, 0x5a |
| 2 | unsigned char | role | Active-standby mode |
| 3 | unsigned int | health | Health status |
| 4 | unsigned int | switchStatus | Switching state |
| 5 | unsigned int | MID | Slot position information |
| 5 | unsigned int | checksum | Verification and |
(3) relationship of RS232 and 4 pair of discrete magnitude signal
Active and standby decision phase when electrifying startup carries out active and standby decision using discrete magnitude signal.
Operational process active and standby decision phase, the preferential life message for using RS232, the life message of RS232 are responsible for transmitting
The information such as the activestandby state, health status, switching state of this node.When the life message of RS232 is unavailable, discrete magnitude is used
Signal carries out active and standby decision and switching.
Two, the active and standby decision process of power up
Active and standby decision process when node electrifying startup in slot position 1: it is 0 that hardware logic, which sets SYS_FAIL output signal, generation
This node of table is faulty.The MID location information of this node is read in software starting, executes power-on self-test, if power-on self-test is not just
Really, then it is 0 that SYS_FAIL output signal, which keeps output, i.e. malfunction, software is out of service.If power-on self-test correctly if it is soft
It is 1, i.e. normal condition that part, which sets the output of SYS_FAIL signal,.The SYS_FAIL input signal for reading node in slot position 2 again, due to slot
Position 2 on node have delay wait, the power-on self-test of node is not completed in slot position 2 at this time, thus in slot position 2 node SYS_
The output of FAIL signal is malfunction, and it is holotype that oneself state, which is arranged, in this node.
Node in slot position 2 powers on decision process: it is 0 that hardware logic, which sets SYS_FAIL output signal, i.e. malfunction is soft
Part reads the MID location information of this node.It waits 4 second time (1 self-test of slot position completion), guarantees that node reads slot in slot position 1
The SYS_FAIL signal of node is malfunction on position 2, and then node executes power-on self-test in slot position 2, if power-on self-test is not
It is correct then software is out of service, if power-on self-test correctly if the SYS_FAIL signal output of this node is arranged is 1, i.e., normal shape
State.Node reads the ROLE signal put in slot position 1 to obtain the active/standby mode of node in slot position 1, if slot position in slot position 2
It is then backup for node working mode in setting slot position 2, if the node working mode of slot position 1 on 1 based on node working mode
For backup, then the node that slot position 2 is arranged is based on mode.
Detailed process is as shown in Figure 3.
Three, the active and standby decision process of operational process
A) the life message of other side is received
B) it checks whether the active/standby mode of other side and itself conflicts, forces assigned work mode if conflict.
C) check whether the MID of other side and itself conflicts, it is out of service if conflict.
D) health monitoring of this node is executed:
1) period self-test is executed
2) period self-detection result is obtained, and result is filled into health monitoring structural body
3) Mission Monitor is executed, whether the task run for monitoring application software is abnormal
4) Mission Monitor is obtained as a result, and result is filled into health monitoring structural body
5) node temperature is obtained, and result is filled into health monitoring structural body
6) if period self-test, Mission Monitor, node temperature have a Xiang Yichang, then it is assumed that this node failure, otherwise this section
Point is working properly.
E) this node health monitoring result is obtained；
F) failure of this node is handled, such as be recorded in log；
G) the health monitoring result of other side is obtained:
1) other side's life message is received, if not receiving life message thinks that message is illegal
2) the life message of other side is parsed, and is verified, thinks that message is illegal if verification only.
If 3) the life message of other side is legal, obtain counter-party information from life message, including active-standby mode, MID,
Health status etc..
If 4) the life message of other side continuous 3 times it is illegal, then it is assumed that life message failure, this node no longer pass through life
The information that message obtains other side is ordered, is obtained by discrete magnitude signal ROLE, SYSFAIL signal.
5) whether warm reset is occurred by SOFTRESET signal monitoring other side, SOFTRESET signal occurs empty in order to prevent
It is alert, when life message is illegal and SOFTRESET signal is 0, it is believed that warm reset has occurred in other side.By the healthy shape of other side
State is revised as failure.
H) active and standby decision is carried out:
If 1) present node is in slot position 1, if present node is faulty and Correspondent Node does not have failure, setting is worked as
Front nodal point operating mode is backup.
If 2) present node is in slot position 2, if present node fault-free and Correspondent Node operating mode are backup,
It is arranged based on present node operating mode.
I) switching action is executed according to the result of decision:
If 1) present node is switched to backup mode from holotype, the bus of closed node sends switch.
If 2) present node is switched to holotype from backup mode, the bus of opened nodes sends switch.
3) occurring two nodes in order to prevent is all holotype, and bus is all externally sent, and bus data is caused to influence each other,
It needs that holotype is first switched to backup mode, the bus of node is sent and is closed, backup mode is then switched to main mould again
Formula is not in holotype in handoff procedure.
J) fill and send to other side itself life message, including own health status, active-standby mode etc.
K) circulation executes step a).
Claims (2)
1. a kind of dual-machine redundancy backup system based on real-time status detection, it is characterised in that:
A kind of dual-machine redundancy backup system based on real-time status detection, includes main process task node and back-up processing section
Point obtains the healthy shape of Correspondent Node by discrete magnitude and RS232 bus cycles between main process task node and back-up processing node
State, by self test mode come the health status of real-time detection node itself, self test mode is divided into following three kinds:
Power-on self-test (PBIT): after node powers on, self-test is carried out after the completion of operating system initialization, self-test project includes processing
Device operation self-test, memory read-write self-test, FLASH memory self-test, nonvolatile storage self-test and bus apparatus self-test；
Period self-test (CBIT): node in the process of running, periodically executes detection, cycle detection project includes processor operation
Self-test, memory read-write self-test and nonvolatile storage self-test；
Maintenance self-test (MBIT): when node is run when entering service mode according to the order of host computer, software to node and hard
Part is detected, and detection project is identical with power-on self-test project；
Active and standby decision phase when electrifying startup carries out active and standby decision using discrete magnitude signal；
Active and standby decision is divided into active and standby decision when active and standby decision and operation when electrifying startup, and active and standby decision is when main process task nodal test
Itself can be switched after breaking down to itself as Status of Backups, after backup node detects that host node is failure and itself without reason
Barrier, then switching is main state；
Main process task node and backup node receive data from external bus and are handled, but only main process task node is external
Data are sent, backup node does not send data externally, and when carrying out active-standby switch, the transmission for needing to close main process task node is connect
Mouthful, the transmission interface of backup node is opened, and complete switching after the state of main-standby nodes is set；
In the active and standby decision phase of operational process, the preferential life message for using RS232, the life message of RS232 is responsible for transmitting
The activestandby state, health status and switching state information of this node；When the life message of RS232 is unavailable, discrete magnitude is used
Signal carries out active and standby decision and switching.
2. a kind of dual-machine redundancy backup system based on real-time status detection according to claim 1, it is characterised in that:
Active and standby decision process in power up are as follows:
Active and standby decision process is that set SYS_FAIL output signal be 0 to hardware logic when main process task node electrifying startup, represents this section
Point is faulty, and the MID location information of this node is read in software starting, executes power-on self-test, if power-on self-test is incorrect,
It is 0 that SYS_FAIL output signal, which keeps output, i.e. malfunction, software is out of service；If power-on self-test correctly if software set
The output of SYS_FAIL signal is 1, i.e. normal condition, then reads the SYS_FAIL input signal of node in slot position 2, due to slot position 2
Upper node have delay wait, the power-on self-test of node is not completed in slot position 2 at this time, thus in slot position 2 node SYS_FAIL
Signal output is malfunction, and it is holotype that oneself state, which is arranged, in this node；
It is that set SYS_FAIL output signal be 0 to hardware logic that node in slot position 2, which powers on decision process, i.e. malfunction, software
The MID location information of this node is read, 1 self-test of slot position is completed after waiting 4 seconds, and node is read in guarantee slot position 1 saves in slot position 2
The SYS_FAIL signal of point is malfunction, and then node executes power-on self-test in slot position 2, soft if power-on self-test is incorrect
Part is out of service, if power-on self-test correctly if the SYS_FAIL signal output of this node is set for 1, i.e. normal condition；Slot position 2
Upper node reads the active/standby mode of node in the ROLE signal acquisition slot position 1 put in slot position 1, if node work in slot position 1
It is then backup for node working mode in setting slot position 2 based on operation mode, if the node working mode of slot position 1 is backup,
The node that slot position 2 is arranged is based on mode.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811389800 | 2018-11-21 | ||
| CN2018113898001 | 2018-11-21 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109698775A true CN109698775A (en) | 2019-04-30 |
Family
ID=66235072
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910164177.8A Pending CN109698775A (en) | 2018-11-21 | 2019-03-05 | A kind of dual-machine redundancy backup system based on real-time status detection |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109698775A (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110877584A (en) * | 2019-11-28 | 2020-03-13 | 安徽中车瑞达电气有限公司 | Cab operation interlocking method of double-head mining electric locomotive |
| CN112506457A (en) * | 2020-12-03 | 2021-03-16 | 威创集团股份有限公司 | Seamless realization method and system for LED spliced wall system, storage medium and electronic equipment |
| CN112882901A (en) * | 2021-03-04 | 2021-06-01 | 中国航空工业集团公司西安航空计算技术研究所 | Intelligent health state monitor of distributed processing system |
| CN113342593A (en) * | 2020-03-02 | 2021-09-03 | 慧荣科技股份有限公司 | Method and apparatus for high availability management of full flash memory array servers |
| CN113645650A (en) * | 2021-07-09 | 2021-11-12 | 三维通信股份有限公司 | Method and system for processing master-slave switching, electronic device and storage medium |
| CN114137923A (en) * | 2021-11-29 | 2022-03-04 | 航天新长征大道科技有限公司 | Industrial production field data acquisition and control device |
| CN114244770A (en) * | 2021-12-16 | 2022-03-25 | 苏州盛科通信股份有限公司 | Method for breaking in VRRP scene and application |
| CN115408240A (en) * | 2022-09-09 | 2022-11-29 | 中国兵器装备集团自动化研究所有限公司 | Redundant system active/standby method, device, equipment and storage medium |
| CN115914026A (en) * | 2022-10-13 | 2023-04-04 | 北京航天长征飞行器研究所 | Software safety system of miniature manned aircraft |
| CN115914026B (en) * | 2022-10-13 | 2024-05-03 | 北京航天长征飞行器研究所 | Software safety system of miniature manned aircraft |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2005057952A1 (en) * | 2003-12-06 | 2005-06-23 | Telefonaktiebolaget L M Ericsson (Publ) | Method and system for service node redundancy |
| CN1753377A (en) * | 2005-11-04 | 2006-03-29 | 北京和利时系统工程股份有限公司 | Method of avoiding access collision of redundant main station against serial bus ink |
| CN1889373A (en) * | 2005-06-30 | 2007-01-03 | 华为技术有限公司 | Method for realizing master and spare conversion of distributing connection equipment |
| CN101631011A (en) * | 2008-07-16 | 2010-01-20 | 中国科学院声学研究所 | Hotspare method and system suitable for device for processing and forwarding IP media stream in real time |
| CN102541697A (en) * | 2010-12-31 | 2012-07-04 | 中国航空工业集团公司第六三一研究所 | Switching method for processing fault of dual-redundancy computer |
| CN103199972A (en) * | 2013-03-25 | 2013-07-10 | 成都瑞科电气有限公司 | Double machine warm backup switching method and warm backup system achieved based on SOA and RS485 bus |
| CN103455005A (en) * | 2013-09-06 | 2013-12-18 | 北京四方继保自动化股份有限公司 | Controller redundancy and switching method |
| CN106251914A (en) * | 2016-08-26 | 2016-12-21 | 绵阳市维博电子有限责任公司 | A kind of redundancy backup system of command bundle rods for nuclear reactors |
-
2019
- 2019-03-05 CN CN201910164177.8A patent/CN109698775A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2005057952A1 (en) * | 2003-12-06 | 2005-06-23 | Telefonaktiebolaget L M Ericsson (Publ) | Method and system for service node redundancy |
| CN1889373A (en) * | 2005-06-30 | 2007-01-03 | 华为技术有限公司 | Method for realizing master and spare conversion of distributing connection equipment |
| CN1753377A (en) * | 2005-11-04 | 2006-03-29 | 北京和利时系统工程股份有限公司 | Method of avoiding access collision of redundant main station against serial bus ink |
| CN101631011A (en) * | 2008-07-16 | 2010-01-20 | 中国科学院声学研究所 | Hotspare method and system suitable for device for processing and forwarding IP media stream in real time |
| CN102541697A (en) * | 2010-12-31 | 2012-07-04 | 中国航空工业集团公司第六三一研究所 | Switching method for processing fault of dual-redundancy computer |
| CN103199972A (en) * | 2013-03-25 | 2013-07-10 | 成都瑞科电气有限公司 | Double machine warm backup switching method and warm backup system achieved based on SOA and RS485 bus |
| CN103455005A (en) * | 2013-09-06 | 2013-12-18 | 北京四方继保自动化股份有限公司 | Controller redundancy and switching method |
| CN106251914A (en) * | 2016-08-26 | 2016-12-21 | 绵阳市维博电子有限责任公司 | A kind of redundancy backup system of command bundle rods for nuclear reactors |
Non-Patent Citations (1)
| Title |
|---|
| 曾华菘等: "SpaceWire冗余网络故障检测恢复技术实现", 《计算机测量与控制》 * |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110877584A (en) * | 2019-11-28 | 2020-03-13 | 安徽中车瑞达电气有限公司 | Cab operation interlocking method of double-head mining electric locomotive |
| CN113342593A (en) * | 2020-03-02 | 2021-09-03 | 慧荣科技股份有限公司 | Method and apparatus for high availability management of full flash memory array servers |
| CN113342593B (en) * | 2020-03-02 | 2024-03-26 | 慧荣科技股份有限公司 | Method and apparatus for high availability management of full flash memory array servers |
| CN112506457A (en) * | 2020-12-03 | 2021-03-16 | 威创集团股份有限公司 | Seamless realization method and system for LED spliced wall system, storage medium and electronic equipment |
| CN112882901A (en) * | 2021-03-04 | 2021-06-01 | 中国航空工业集团公司西安航空计算技术研究所 | Intelligent health state monitor of distributed processing system |
| CN113645650A (en) * | 2021-07-09 | 2021-11-12 | 三维通信股份有限公司 | Method and system for processing master-slave switching, electronic device and storage medium |
| CN114137923A (en) * | 2021-11-29 | 2022-03-04 | 航天新长征大道科技有限公司 | Industrial production field data acquisition and control device |
| CN114244770A (en) * | 2021-12-16 | 2022-03-25 | 苏州盛科通信股份有限公司 | Method for breaking in VRRP scene and application |
| CN115408240A (en) * | 2022-09-09 | 2022-11-29 | 中国兵器装备集团自动化研究所有限公司 | Redundant system active/standby method, device, equipment and storage medium |
| CN115408240B (en) * | 2022-09-09 | 2023-07-25 | 中国兵器装备集团自动化研究所有限公司 | Redundancy system active-standby method, redundancy system active-standby device, redundancy system active-standby equipment and redundancy system storage medium |
| CN115914026A (en) * | 2022-10-13 | 2023-04-04 | 北京航天长征飞行器研究所 | Software safety system of miniature manned aircraft |
| CN115914026B (en) * | 2022-10-13 | 2024-05-03 | 北京航天长征飞行器研究所 | Software safety system of miniature manned aircraft |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109698775A (en) | A kind of dual-machine redundancy backup system based on real-time status detection | |
| CN103647781B (en) | Mixed redundancy programmable control system based on equipment redundancy and network redundancy | |
| CN107634855A (en) | A kind of double hot standby method of embedded system | |
| CN101271332B (en) | Compact integrated redundancy controller and control method thereof | |
| CN201909961U (en) | Redundancy control system | |
| CN101807076B (en) | Duplication redundancy fault-tolerant high-reliability control system having synergistic warm standby function based on PROFIBUS field bus | |
| EP0414379A2 (en) | Method of handling errors in software | |
| CN102724083A (en) | Degradable triple-modular redundancy computer system based on software synchronization | |
| CN103955188A (en) | Control system and method supporting redundancy switching function | |
| CN103346903A (en) | Dual-machine backup method and device | |
| JP2002517819A (en) | Method and apparatus for managing redundant computer-based systems for fault-tolerant computing | |
| CN105974879A (en) | Redundancy control equipment of digital instrument control system, digital instrument control system and control method | |
| EP0415549A2 (en) | Method of converting unique data to system data | |
| CN105259863A (en) | PLC warm backup redundancy method and system | |
| CN107453913B (en) | Gateway redundancy method with high-speed communication between processors | |
| CN105045164A (en) | Degradable triple-redundant synchronous voting computer control system and method | |
| CN109471759A (en) | A kind of database failure switching method and equipment based on SAS dual control equipment | |
| CN110515295A (en) | A kind of method of the redundancy I/O module of dynamic and configurable | |
| CN109194497A (en) | Double SRIO Network Backup Systems of software-oriented radio system | |
| CN105068763B (en) | A kind of virtual machine tolerant system and method for storage failure | |
| CN110427283B (en) | Dual-redundancy fuel management computer system | |
| CN108983682B (en) | Redundancy voting control method based on double buses | |
| CN113791937B (en) | Data synchronous redundancy system and control method thereof | |
| US5905875A (en) | Multiprocessor system connected by a duplicated system bus having a bus status notification line | |
| CN112615728B (en) | Simulation system master-slave switching method based on railway safety communication protocol |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20190430 |
|
| WD01 | Invention patent application deemed withdrawn after publication |