CN109991899A - Half dynamic synchronization method of data between the active and standby controller of Rail Transit System - Google Patents
Half dynamic synchronization method of data between the active and standby controller of Rail Transit System Download PDFInfo
- Publication number
- CN109991899A CN109991899A CN201910258048.5A CN201910258048A CN109991899A CN 109991899 A CN109991899 A CN 109991899A CN 201910258048 A CN201910258048 A CN 201910258048A CN 109991899 A CN109991899 A CN 109991899A
- Authority
- CN
- China
- Prior art keywords
- controller
- spare
- primary
- active
- standby
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0423—Input/output
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24182—Redundancy
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/25—Pc structure of the system
- G05B2219/25033—Pc structure of the system structure, control, syncronization, data, alarm, connect I-O line to interface
Abstract
The invention discloses the half dynamic synchronization methods of data between a kind of active and standby controller of Rail Transit System, comprising: starts in each calculating cycle, the external command data received are unidirectionally transferred to spare controller by primary controller；Spare controller is received by external command and sends confirmation of synchronization status code to primary controller；Primary controller and spare controller are based on the external command data and are calculated in real time simultaneously；Spare controller does not export, and primary controller is exported according to the confirmation of synchronization state output of spare controller, delay output or secure side.It is calculated in real time due to active and standby, is only primary to the spare original external command, only spare to primary transmission confirmation of synchronization status code of unidirectionally sending, avoiding active and standby, data are transmitted periodically, in large quantities, save more CPU, memory and Internet resources, solution requires real-time control system more high real-time to calculate, but contradiction caused by the limited expansibilities such as arithmetic facility hardware and the operating system update replacement.
Description
Technical field
The present invention relates to the data synchronization technologies between rail traffic control field more particularly to active and standby controller.
Background technique
Dynamic synchronization between controller in field of track traffic, such as: inputoutput data is synchronous, logical operation data are same
Step, the transmission technologies such as mirror image make it possible automatic switchover and seamless pipe between system.But also controller is answered simultaneously
With program, operating system and hardware platform, more stringent requirements are proposed: to transmitting data stream amount, computation complexity, failure rollback
The requisitions of the resources such as storage of history data P, CPU (central processing unit) occupancy be substantially improved, it is right thus in terms of availability
The control system (safety governors of the limited expansibilities such as especially computationally intensive, hardware update replacement) of high real-time requirements produces
Large effect is given birth to.
Summary of the invention
The purpose of the present invention is to provide the half dynamic synchronization method of data between the active and standby controller of Rail Transit System, solutions
Certainly real-time control system high real-time is required to calculate simultaneously, but the scalabilities such as arithmetic facility hardware and the operating system update replacement have
Contradictory problems caused by limiting.
Realizing the technical solution of above-mentioned purpose is:
A kind of data half dynamic synchronization method between the active and standby controller of Rail Transit System, comprising:
Step S1, in the external command data one-way transmission that the beginning of each calculating cycle, primary controller will receive
To spare controller；
Step S2, spare controller send confirmation of synchronization state when receiving external command data, to primary controller
Code；
Step S3, primary controller and spare controller are based on the external command data and are calculated in real time simultaneously；
Step S4, spare controller do not export, primary controller according to the confirmation of synchronization status code of spare controller export,
Delay output or Safety output.
Preferably, in the method that the initial phase of Rail Transit System is written by hardware default or software default configures
Determine the active and standby division of labor of the primary controller and spare controller.
Preferably, in step S4,
Primary controller receives the confirmation of synchronization status code of spare controller in delay timing, exports in time；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and judges spare control
Device delay machine, output；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and can not judge spare
Whether delay machine still becomes primary to controller, export orientation secure side.
Preferably, the confirmation of synchronization status code is in such a way that information bit encodes or export high level.
It is configured between lower real-time controller the beneficial effects of the present invention are: the present invention meets in hardware and operating system
It realizes real-time data synchronization function, and then realizes automatic switchover and the seamless pipe of hot backup redundancy system, and need not take over for use excessive
System resource, without update hardware device.With very high application value.
Detailed description of the invention
Fig. 1 is the flow chart of the half dynamic synchronization method of data between active and standby controller of the invention.
Specific embodiment
The present invention will be further described with reference to the accompanying drawings.
Referring to Fig. 1, the half dynamic synchronization method of data between the active and standby controller of Rail Transit System of the invention, including
The following steps:
Step S1, in the external command data one-way transmission that the beginning of each calculating cycle, primary controller will receive
To spare controller.Specifically, the present invention is the active and standby role that controller is determined in advance in the design phase, in the initial of system
The change stage has just determined the active and standby division of labor of redundant system by the method for hardware default write-in or software default configuration, to avoid
Mutual confirmation that dual system is likely encountered in the active and standby dynamic allocation for powering on beginning repeats to shake hands, switch repeatedly and due to setting
The problems such as counting deadlock caused by defect, it is often more important that save the system function expense of this part, come with less flexibility
Exchange the efficiency that raising system enters working condition for.
The synchronous unidirectional mode using from primary to spare of data, it is ensured that any time any controller is only unique outer
Portion's data source, i.e., the unique data source of primary controller are external commands, and the unique data source of spare controller is main
With controller, primary controller no longer receives the data that spare controller transmits, and spare controller also no longer receives external data
The data in source, so as to avoid the calculating deviation caused by multi-data source data transmission delay, inverted order, loss of data.
Step S2, whether spare controller is with regard to having received external command to primary controller transmission confirmation of synchronization state
Code.Specifically, half synchronous another feature is embodied in as far as possible using existing system function and characteristic, is avoided as far as possible in different moulds
Block repeats to realize identical function, specifically: active and standby does not transmit the pilot process of respective internal logic state and system-computed,
Only in the source of system acting-external command source input data --- it synchronizes.Synchronous input is in order to ensure input data
Consistency, be without the reason of synchronism output: as SIL4 grades of security system, under identical input condition its calculate
As a result it should be consistent (no matter using isomorphism design or isomery design), and system when SIL4 system has ensured failure
System behavior is the safe side of guiding.So active and standby of half synchronization mechanism is not necessarily to synchronize output, once system occurs
Active-standby switch also ensures and does not have the dangerous output of guiding after standby host receives.
Spare controller replys a confirmation message in the external data order for having received primary controller at once, this is really
Software mode (such as information bit coding) or hardware mode (such as output high level) can neatly be used by recognizing information, with the smallest system
Expense realizes received confirmation.
Step S3, primary controller and spare controller are based on the external command data and are calculated in real time simultaneously.In step
On the basis of rapid S2, active and standby controller can independently carry out operation and send out as little as possible with synchronous, transmission and system handoff functionality
Raw interaction.
Step S4, spare controller do not export, primary controller according to the confirmation of synchronization state output of spare controller, prolong
Output late or not.It breaks down and if only if primary controller or when off line, active-standby switch just occurs for system, be not present two
Active and standby role exchange under being controller while working normally.Specifically: any time only primary controller output, spare control
Device is in ready (hot standby) state, does not export its calculated result, primary controller can use following output policy, to ensure to lead
System response is self-consistent when standby switching:
Primary controller receives the confirmation of synchronization status code of spare controller in delay timing, exports in time；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and judges spare control
Device delay machine, output；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and can not judge spare
Whether delay machine still becomes primary to controller, export orientation secure side (such as semaphore red light, mobile authorization are withdrawn).
Cooperate the one-way synchronization of data, system only carries out active-standby switch in primary failure, avoid due to artificially etc. because
Frequent switching caused by element saves the occupied overhead of active active-standby switch function.
Above embodiments are used for illustrative purposes only, rather than limitation of the present invention, the technology people in relation to technical field
Member, without departing from the spirit and scope of the present invention, can also make various transformation or modification, therefore all equivalent
Technical solution also should belong to scope of the invention, should be limited by each claim.
Claims (4)
1. a kind of half dynamic synchronization method of data between active and standby controller of Rail Transit System characterized by comprising
Step S1, in the beginning of each calculating cycle, the external command data received are unidirectionally transferred to standby by primary controller
Use controller；
Step S2, spare controller send confirmation of synchronization status code when receiving external command data, to primary controller；
Step S3, primary controller and spare controller are based on the external command data and are calculated in real time simultaneously；
Step S4, spare controller do not export, and primary controller exports according to the confirmation of synchronization status code of spare controller, postpones
Output or Safety output.
2. the half dynamic synchronization method of data between the active and standby controller of Rail Transit System according to claim 1, special
Sign is, passes through described in the method determination of hardware default write-in or software default configuration in the initial phase of Rail Transit System
The active and standby division of labor of primary controller and spare controller.
3. the half dynamic synchronization method of data between the active and standby controller of Rail Transit System according to claim 1, special
Sign is, in step S4,
Primary controller receives the confirmation of synchronization status code of spare controller in delay timing, exports in time；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and judges spare controller
Delay machine, output；
Primary controller does not receive the confirmation of synchronization status code of spare controller in delay timing, and can not judge spare control
Whether delay machine still becomes primary to device, export orientation secure side.
4. the half dynamic synchronization method of data between the active and standby controller of Rail Transit System according to claim 1, special
Sign is that the confirmation of synchronization status code is encoded or exported using information bit by the way of high level.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910258048.5A CN109991899A (en) | 2019-04-01 | 2019-04-01 | Half dynamic synchronization method of data between the active and standby controller of Rail Transit System |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910258048.5A CN109991899A (en) | 2019-04-01 | 2019-04-01 | Half dynamic synchronization method of data between the active and standby controller of Rail Transit System |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109991899A true CN109991899A (en) | 2019-07-09 |
Family
ID=67132111
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910258048.5A Pending CN109991899A (en) | 2019-04-01 | 2019-04-01 | Half dynamic synchronization method of data between the active and standby controller of Rail Transit System |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109991899A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110380915A (en) * | 2019-08-26 | 2019-10-25 | 湖南中车时代通信信号有限公司 | A kind of hot backup redundancy monitoring device based on secure communication protocols |
| WO2021035867A1 (en) * | 2019-08-27 | 2021-03-04 | 北京东土科技股份有限公司 | Redundancy control method for main and standby controllers |
| CN116500886A (en) * | 2023-06-28 | 2023-07-28 | 中国船舶集团有限公司第七〇七研究所 | Multi-machine hot standby control method |
Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101004587A (en) * | 2006-01-13 | 2007-07-25 | 艾默生过程管理电力和水力解决方案有限公司 | Method for redundant controller synchronization during normal and program mismatch conditions |
| CN101625568A (en) * | 2009-08-14 | 2010-01-13 | 江西联创通信有限公司 | Synchronous data controller based hot standby system of main control unit and method thereof |
| CN101714109A (en) * | 2009-11-24 | 2010-05-26 | 杭州华三通信技术有限公司 | Method and device for controlling mainboard of double CPU system |
| US20140269560A1 (en) * | 2013-03-15 | 2014-09-18 | Robert Bosch Gmbh | Method for Robust Real-Time Wireless Industrial Communication |
| CN104268037A (en) * | 2014-09-10 | 2015-01-07 | 上海自仪泰雷兹交通自动化系统有限公司 | Hot redundancy interlocking subsystem and main and standby switching method thereof |
| US20160085262A1 (en) * | 2010-09-07 | 2016-03-24 | Apple Inc. | Master/slave control of touch sensing |
| CN106301856A (en) * | 2015-06-08 | 2017-01-04 | 中兴通讯股份有限公司 | A kind of method, virtual machine and standby host realizing configuration synchronization |
| CN107025152A (en) * | 2017-05-19 | 2017-08-08 | 北京电子工程总体研究所 | The method of data synchronization of the dual redundant hot spare devices of task based access control level |
| CN108153144A (en) * | 2017-11-29 | 2018-06-12 | 中核控制系统工程有限公司 | A kind of DCS redundant manipulators no-harass switch method |
| CN108319258A (en) * | 2018-03-15 | 2018-07-24 | 杭州佳汇技术有限公司 | A kind of DC-DC module power source master controller heat backup method |
| CN108549651A (en) * | 2018-03-05 | 2018-09-18 | 陈玉洪 | A kind of active and standby database synchronization method and system |
-
2019
- 2019-04-01 CN CN201910258048.5A patent/CN109991899A/en active Pending
Patent Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101004587A (en) * | 2006-01-13 | 2007-07-25 | 艾默生过程管理电力和水力解决方案有限公司 | Method for redundant controller synchronization during normal and program mismatch conditions |
| CN101625568A (en) * | 2009-08-14 | 2010-01-13 | 江西联创通信有限公司 | Synchronous data controller based hot standby system of main control unit and method thereof |
| CN101714109A (en) * | 2009-11-24 | 2010-05-26 | 杭州华三通信技术有限公司 | Method and device for controlling mainboard of double CPU system |
| US20160085262A1 (en) * | 2010-09-07 | 2016-03-24 | Apple Inc. | Master/slave control of touch sensing |
| US20140269560A1 (en) * | 2013-03-15 | 2014-09-18 | Robert Bosch Gmbh | Method for Robust Real-Time Wireless Industrial Communication |
| CN104268037A (en) * | 2014-09-10 | 2015-01-07 | 上海自仪泰雷兹交通自动化系统有限公司 | Hot redundancy interlocking subsystem and main and standby switching method thereof |
| CN106301856A (en) * | 2015-06-08 | 2017-01-04 | 中兴通讯股份有限公司 | A kind of method, virtual machine and standby host realizing configuration synchronization |
| CN107025152A (en) * | 2017-05-19 | 2017-08-08 | 北京电子工程总体研究所 | The method of data synchronization of the dual redundant hot spare devices of task based access control level |
| CN108153144A (en) * | 2017-11-29 | 2018-06-12 | 中核控制系统工程有限公司 | A kind of DCS redundant manipulators no-harass switch method |
| CN108549651A (en) * | 2018-03-05 | 2018-09-18 | 陈玉洪 | A kind of active and standby database synchronization method and system |
| CN108319258A (en) * | 2018-03-15 | 2018-07-24 | 杭州佳汇技术有限公司 | A kind of DC-DC module power source master controller heat backup method |
Non-Patent Citations (3)
| Title |
|---|
| 孙来平: "CBTC热备冗余系统软件安全切换技术的研究与实现", 《城市轨道交通研究》 * |
| 王志东: "城市轨道交通信号系统车载控制器冗余切换方案研究", 《城市轨道交通研究》 * |
| 邬利挺: "城市轨道交通主用与备用车载控制器冗余切换方案研究", 《城市轨道交通研究》 * |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110380915A (en) * | 2019-08-26 | 2019-10-25 | 湖南中车时代通信信号有限公司 | A kind of hot backup redundancy monitoring device based on secure communication protocols |
| WO2021035867A1 (en) * | 2019-08-27 | 2021-03-04 | 北京东土科技股份有限公司 | Redundancy control method for main and standby controllers |
| CN112445127A (en) * | 2019-08-27 | 2021-03-05 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
| CN112445127B (en) * | 2019-08-27 | 2022-03-18 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
| CN116500886A (en) * | 2023-06-28 | 2023-07-28 | 中国船舶集团有限公司第七〇七研究所 | Multi-machine hot standby control method |
| CN116500886B (en) * | 2023-06-28 | 2023-09-08 | 中国船舶集团有限公司第七〇七研究所 | Multi-machine hot standby control method |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3690657B1 (en) | Computer-based interlocking system and redundancy switching method thereof | |
| CN109991899A (en) | Half dynamic synchronization method of data between the active and standby controller of Rail Transit System | |
| CN109946956B (en) | Device main and standby system synchronization and hot standby method | |
| CN107634855A (en) | A kind of double hot standby method of embedded system | |
| CN103532753B (en) | A kind of double hot standby method of synchronization of skipping based on internal memory | |
| CN104516306B (en) | The automated system of redundancy | |
| CN102193543B (en) | Control system based on profibus redundant network topological structure and switching method of control system | |
| CN110658718A (en) | Multi-master-control redundancy switching control method and system | |
| CN104268037A (en) | Hot redundancy interlocking subsystem and main and standby switching method thereof | |
| CN201626437U (en) | Multifunction vehicle bus controller and multifunction vehicle bus network card | |
| US20130318041A1 (en) | Method for Operating a Redundant Automation System | |
| KR100870712B1 (en) | System and signal processing method for railway control network by means of switched ethernet | |
| WO2019206146A1 (en) | Computer interlocking system, and switching control method and device thereof, and storage medium | |
| CN105334729A (en) | Method for redundancy switch of two independent PLC systems in railway locomotive depot signal control | |
| CN101916068B (en) | Computer control system based on 2-out-of-2 structure and implementation method thereof | |
| CN105471653A (en) | Airborne dual channel seamless switching method and system | |
| CN110979404A (en) | Dual-machine hot standby system and method of automatic train supervision system | |
| CN113682348A (en) | Novel interlocking dual-computer switching method based on communication | |
| CN109298981A (en) | Method of data synchronization, system between a kind of PCIE dual redundant chip | |
| CN102402212B (en) | For method and the network of operational network | |
| CN103200032A (en) | Safe and reliable host and backup generator tripping system | |
| CN112172879B (en) | Main/standby control center switching method and rail transit comprehensive monitoring system | |
| CN114148385B (en) | Temporary speed limiting redundant storage and management method for urban rail transit | |
| CN103738366A (en) | Computer system | |
| JP2009086938A (en) | High-security control device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190709 |