CN112034774B - Thermal redundancy control method - Google Patents

Thermal redundancy control method Download PDF

Info

Publication number
CN112034774B
CN112034774B CN202010696226.5A CN202010696226A CN112034774B CN 112034774 B CN112034774 B CN 112034774B CN 202010696226 A CN202010696226 A CN 202010696226A CN 112034774 B CN112034774 B CN 112034774B
Authority
CN
China
Prior art keywords
channel
faults
output
diagnosis
input
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010696226.5A
Other languages
Chinese (zh)
Other versions
CN112034774A (en
Inventor
朱煌庆
林尚飞
孟令卫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
715th Research Institute of CSIC
Original Assignee
715th Research Institute of CSIC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 715th Research Institute of CSIC filed Critical 715th Research Institute of CSIC
Priority to CN202010696226.5A priority Critical patent/CN112034774B/en
Publication of CN112034774A publication Critical patent/CN112034774A/en
Application granted granted Critical
Publication of CN112034774B publication Critical patent/CN112034774B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/04Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/048Monitoring; Safety

Abstract

The invention discloses a thermal redundancy control method, which adopts a self-adaptive management strategy of a redundancy channel and mainly comprises the following steps: the system periodically acquires fault identification strategies based on the signal state difference and time statistics of redundant input channels, input and output channel diagnosis strategies based on channel association relations and diagnosis information of output channel diagnosis strategies based on output feedback monitoring; and determining faults by adopting a probabilistic reasoning mode, automatically shielding the working of a fault channel if the faults are internal faults, realizing the functions of output control and signal feedback by a mirror image channel, and sending alarm information to a user program if the faults are confirmed to be external faults. The beneficial effects of the invention are as follows: when the system fails, the internal automatic switching is realized, so that the whole system is ensured to function normally. A system for implementing automatic switching without stopping the machine. The control method has high accuracy of identifying faults of the input and output channels, high fault positioning speed and timely processing of the faults.

Description

Thermal redundancy control method
Technical Field
The invention relates to the field of thermal redundancy control, in particular to a thermal redundancy control method.
Background
The thermal redundancy control system method is a key technology for realizing control of a complex system, and in a distributed control system with high reliability requirements, when the system is required to realize automatic switching under the condition of no shutdown, redundant control is often required to be introduced, and when the system fails, the internal automatic switching is realized so as to ensure that the whole function of the system is normal.
For a hot redundancy control system, a dedicated controller supporting hot redundancy control and a hot redundancy control strategy are the cores of the control system. The thermal redundancy function of the distributed control system comprises the basic requirements of communication channel redundancy, input channel redundancy, control output channel redundancy and the like. In various thermal redundancy control systems, automatic fault identification and handling of communication channels, control input and output channels is a core key technology. If the controller is higher in accuracy of identifying faults of the input and output channels and higher in identification and positioning speed, the more timely the faults are processed, the smaller the influence on the overall control performance is. Aiming at the hot standby redundancy control requirement with higher reliability requirement, different types of solutions are respectively provided by domestic and foreign manufacturers. The existing solution is simpler in terms of fault diagnosis and processing strategies, and cannot integrate enough information, so that thorough and accurate positioning and processing of fault information are realized. Such as dynamic process information of channel signals, association change information between channels, etc.
Disclosure of Invention
The invention aims to overcome the defects in the prior art and provide a thermal redundancy control method.
The aim of the invention is achieved by the following technical scheme. A thermal redundancy control method adopts a self-adaptive management strategy of a redundancy channel, and mainly comprises the following steps: the system periodically acquires fault identification strategies based on the signal state difference and time statistics of redundant input channels, input and output channel diagnosis strategies based on channel association relations and diagnosis information of output channel diagnosis strategies based on output feedback monitoring; and determining faults by adopting a probabilistic reasoning mode, automatically shielding the working of a fault channel if the faults are internal faults, realizing the functions of output control and signal feedback by a mirror image channel, and sending alarm information to a user program if the faults are confirmed to be external faults.
The beneficial effects of the invention are as follows: when the system fails, the internal automatic switching is realized, so that the whole system is ensured to function normally. A system for implementing automatic switching without stopping the machine. The control method has high accuracy of identifying faults of the input and output channels, high fault positioning speed and timely processing of the faults.
Drawings
FIG. 1 is a fault identification strategy based on redundant input channel signal state differences and time statistics;
FIG. 2 is an input and output channel diagnostic strategy based on channel associations;
the adaptive management strategy of the redundant channels of fig. 3;
fig. 4 is an adaptive redundant communication network operating mechanism.
Detailed Description
The invention will be described in detail below with reference to the attached drawings:
the existing solution is simpler in terms of fault diagnosis and processing strategies, and cannot integrate enough information, so that thorough and accurate positioning and processing of fault information are realized. Such as dynamic process information of channel signals, association change information between channels, etc.
The invention mainly designs a thermal redundancy control method, which adopts a self-adaptive management strategy of a redundancy channel and mainly comprises the following steps: the system periodically acquires fault identification strategies based on the signal state difference and time statistics of redundant input channels, input and output channel diagnosis strategies based on channel association relations and diagnosis information of output channel diagnosis strategies based on output feedback monitoring; and determining faults by adopting a probabilistic reasoning mode, automatically shielding the working of a fault channel if the faults are internal faults, realizing the functions of output control and signal feedback by a mirror image channel, and sending alarm information to a user program if the faults are confirmed to be external faults. The following 4 diagnostic functions of the external channels are automatically realized in the operation stage:
1) Fault identification strategy based on redundant input channel signal state differences and time statistics
2) Input and output channel diagnosis strategy based on channel association relation
3) Output channel diagnostic strategy based on output feedback monitoring
4) An adaptive management strategy for redundant channels.
FIG. 1 shows a fault identification strategy based on redundant input channel signal state differences and time statistics, mainly comprising the following steps:
1) After the controller hardware is started, the system periodically reads in the input channel data obtained from the mirror controller and compares whether the corresponding channel states are consistent.
2) Under the condition that the channel states are consistent, checking whether the state obtained in the previous diagnosis process of the current channel is a pending state; if the state is not in the 'undetermined state', the diagnosis of the round is completed, the diagnosis conclusion is set to be 'normal', and the counter is set to be 0. Otherwise, enter step 3.
3) The counter is incremented by 1, and if the counter reaches the set value, the channel state is set to "normal".
4) In the first step of diagnosis result, if the channel states are inconsistent, judging whether the current channel state is 'pending', and if the current channel state is 'pending', adding 1 to the accumulated difference time; when the accumulated difference time reaches a set value, a channel with the latest change is set as normal, and another channel is set as abnormal. Otherwise go to step 5.
5) The cumulative difference time is set to 1 and the current channel state is set to "pending".
Fig. 2 shows an input and output channel diagnosis strategy based on channel association relation, mainly comprising the following steps:
1) After the system is started, the channel association configuration of the system is read in, and then the steps 2-5 are periodically executed.
2) Calculating whether the channel changes within a set delta T time (configurable by a user), wherein 0 is unchanged, and 1 is changed;
3) Checking action change relation piece by piece according to the channel configuration table;
4) And if the relation between the channel configuration change and the channel configuration change is inconsistent, reporting all the associated channels to the self-adaptive management strategy unit.
For example, there are two configurations in the system as shown in the following table:
input channel (channel DX1, channel DX2, channel AX 3) output channel (channel D1, channel A2)
The input channels (channels DX2, DX3, AX 4) output channels (channels A2, A3)
The state of the change process in Δt time is respectively:
DX1, DX2, DX3, AX3, channel D1, channel A2 and channel A3 respectively
The system reports DX1, DX2, AX3, D1 and A2 channels.
Fig. 3 shows an adaptive management strategy for redundant channels, which mainly comprises the following steps: the system periodically acquires diagnostic information of a fault identification strategy 1 based on redundant input channel signal state differences and time statistics, an input and output channel diagnostic strategy 2 based on channel association relations, and an output channel diagnostic strategy 3 based on output feedback monitoring.
And the fault is determined by adopting a probabilistic reasoning mode, if the fault is an internal fault, the fault channel is automatically shielded, and the mirror image channel realizes the functions of output control and signal feedback. And if the external fault is confirmed, sending alarm information to the user program. The probabilistic reasoning mode writes the comprehensive diagnostic program according to the following rules:
1) An output channel may be considered "normal" if there is a change in the associated channel configuration and the corresponding input channel state is normal and changes.
2) An input channel "fails" if all output channels in a configuration item are unchanged and there is a change in the input channel.
3) If in a certain configuration item, a certain output channel changes, but none of the input channels related thereto changes, and the other associated output channels are all confirmed as normal in the other configuration items, then the channel "fails".
4) If inconsistent inferences appear, the number of times of the normal and fault conclusions is used as the basis, and the number of times of the normal and fault conclusions is more than the number of times of the normal and fault conclusions is the final conclusion.
For example, in the reported DX1, DX2, AX3, D1 and A2 channels, due to the A2 channel variation, it is indicated that DX1, DX2 channels are normal, and AX3 and D1 channels may have faults.
Fig. 4 depicts the adaptive redundant communication network operating mechanism: the redundant controllers (1, 2) in the system are connected with the upper-level centralized monitoring system 3 through buses. The communication connections are physically independent. The two controllers are connected by an internal high-speed bus 4. In operation, each controller is provided with an internal upstream data buffer unit (5, 7) and a downstream data buffer unit (6, 8), while a communication buffer unit (9, 10) of the mirror controller is provided internally.
Each controller physical layer diagnoses the physical link connected with the controller in real time, and monitors the communication connection state of the mirror image controller in real time; and when the mirror image data is inconsistent or a certain controller detects the communication link fault, the emergency transmission mechanism of the bus is carried out. When the downlink data received by the two controllers are inconsistent, the system automatically judges that the data which is changed recently is valid downlink data, and simultaneously receives and transmits the data by using an available normal communication channel.
For example, in fig. 4, if the downstream channel of the master controller 1 fails and the upstream channel of the mirror controller 2 fails, the master controller 1 acquires downstream data from the mirror communication buffer unit of the mirror controller 2. At the same time, the mirror controller 2 will send data to the centralized monitoring system via the upstream channel.
It should be understood that equivalents and modifications to the technical scheme and the inventive concept of the present invention should fall within the scope of the claims appended hereto.

Claims (1)

1. A thermal redundancy control method is characterized in that: an adaptive management strategy for redundant channels is adopted, which comprises the following steps: the system periodically acquires fault identification strategies based on the signal state difference and time statistics of redundant input channels, input and output channel diagnosis strategies based on channel association relations and diagnosis information of output channel diagnosis strategies based on output feedback monitoring; determining faults by adopting a probabilistic reasoning mode, automatically shielding the work of a fault channel if the faults are internal faults, realizing the functions of output control and signal feedback by a mirror image channel, and sending alarm information to a user program if the faults are confirmed to be external faults;
the fault identification strategy based on the signal state difference and time statistics of the redundant input channels comprises the following steps:
1) After the controller hardware is started, the system periodically reads in the input channel data obtained from the mirror image controller and compares whether the states of the corresponding channels are consistent;
2) Under the condition that the channel states are consistent, checking whether the state obtained in the previous diagnosis process of the current channel is a pending state; if the state is not the 'undetermined state', the diagnosis of the round is finished, the diagnosis conclusion is set to be 'normal', the counter is set to be 0, and otherwise, the step 3) is carried out;
3) The counter is added with 1, if the counter reaches a set value, the channel state is set as normal;
4) In the diagnosis result of the step 1), if the channel states are inconsistent, judging whether the current channel state is 'pending', and if the current channel state is 'pending', adding 1 to the accumulated difference time; when the accumulated difference time reaches a set value, setting a channel with the latest change as normal and setting another channel as abnormal, otherwise, turning to the step 5);
5) Setting the accumulated difference time as 1, and setting the current channel state as pending;
the input and output channel diagnosis strategy based on the channel association relation comprises the following steps:
a) After the system is started, reading channel association configuration of the system, and then periodically executing the steps B) to D);
b) Calculating whether the channel changes within a set delta T time, wherein 0 is used for indicating unchanged, and 1 is used for indicating changed;
c) Checking action change relation piece by piece according to the channel configuration table;
d) Reporting all the associated channels to the self-adaptive management strategy unit if the channel configuration change relation is inconsistent;
the probabilistic reasoning mode writes the comprehensive diagnosis program according to the following rules:
a) If there is a change in an output channel in the associated channel configuration and the corresponding input channel state is normal and changes, then that channel is considered "normal";
b) If all output channels in a certain configuration item are unchanged, and the input channel is changed, the input channel is in a 'fault';
c) If in a certain configuration item, a certain output channel changes, but the input channel related to the certain output channel does not change, and other associated output channels are confirmed to be normal in other configuration items, the channel is in a 'fault';
d) If inconsistent inferences appear, the number of times of the normal and fault conclusions is used as the basis, and the number of times of the normal and fault conclusions is more than the number of times of the normal and fault conclusions is the final conclusion.
CN202010696226.5A 2020-07-20 2020-07-20 Thermal redundancy control method Active CN112034774B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010696226.5A CN112034774B (en) 2020-07-20 2020-07-20 Thermal redundancy control method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010696226.5A CN112034774B (en) 2020-07-20 2020-07-20 Thermal redundancy control method

Publications (2)

Publication Number Publication Date
CN112034774A CN112034774A (en) 2020-12-04
CN112034774B true CN112034774B (en) 2024-03-19

Family

ID=73579277

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010696226.5A Active CN112034774B (en) 2020-07-20 2020-07-20 Thermal redundancy control method

Country Status (1)

Country Link
CN (1) CN112034774B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115038136B (en) * 2022-05-25 2024-04-09 中国科学院国家空间科学中心 Multi-channel self-adaptive bandwidth switching method and system

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102183674A (en) * 2011-03-11 2011-09-14 东南大学 Low redundancy and high reliability intelligent speed measuring equipment for ship generator set
CN103139033A (en) * 2013-02-06 2013-06-05 浙江中控技术股份有限公司 Primary device redundancy switching method of single main communication control bus
CN103293949A (en) * 2013-06-08 2013-09-11 杭州和利时自动化有限公司 On-off output channel redundancy fault-tolerant control method and redundancy on-off output channels
KR101723932B1 (en) * 2016-09-27 2017-04-18 국방과학연구소 An method for diagnosing a failure of flight control computer having dual channel
CN106873356A (en) * 2015-12-11 2017-06-20 重庆川仪自动化股份有限公司 The redundancy control system and its redundancy automatic recovery method of redundancy can automatically be recovered
CN110086645A (en) * 2019-03-05 2019-08-02 国网浙江诸暨市供电有限公司 SCADA dispatching system data acquisition primary channel compares device and method online

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102183674A (en) * 2011-03-11 2011-09-14 东南大学 Low redundancy and high reliability intelligent speed measuring equipment for ship generator set
CN103139033A (en) * 2013-02-06 2013-06-05 浙江中控技术股份有限公司 Primary device redundancy switching method of single main communication control bus
CN103293949A (en) * 2013-06-08 2013-09-11 杭州和利时自动化有限公司 On-off output channel redundancy fault-tolerant control method and redundancy on-off output channels
CN106873356A (en) * 2015-12-11 2017-06-20 重庆川仪自动化股份有限公司 The redundancy control system and its redundancy automatic recovery method of redundancy can automatically be recovered
KR101723932B1 (en) * 2016-09-27 2017-04-18 국방과학연구소 An method for diagnosing a failure of flight control computer having dual channel
CN110086645A (en) * 2019-03-05 2019-08-02 国网浙江诸暨市供电有限公司 SCADA dispatching system data acquisition primary channel compares device and method online

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
航空发动机双冗余架构传感器信息通道故障诊断方法研究;张桢 等;计算机测量与控制;20081125(第11期);全文 *

Also Published As

Publication number Publication date
CN112034774A (en) 2020-12-04

Similar Documents

Publication Publication Date Title
US6611722B2 (en) Control and data transmission installation and a process for the transmission of safety-related data
EP1703401B1 (en) Information processing apparatus and control method therefor
US7120820B2 (en) Redundant control system and control computer and peripheral unit for a control system of this type
CN107390511A (en) For the method for the automated system for running redundancy
CN103353715B (en) Supervisory system redundancy protecting measuring and control data transmission method
CN112034774B (en) Thermal redundancy control method
US10705498B2 (en) Method and device for monitoring data processing and transmission in a security chain of a security system
US6701462B1 (en) Situational aware output configuration and execution
JP2001060160A (en) Cpu duplex system for controller
CN100490343C (en) A method and device for realizing switching between main and backup units in communication equipment
CN114624989A (en) Preventative controller switching
JPH09274575A (en) Integrated system managing system
JP3127941B2 (en) Redundant device
JPH04245309A (en) Digital controller for control
JP2756052B2 (en) Numerical control unit
JP3388930B2 (en) Monitoring system
CN117221169A (en) Fault diagnosis method, device and storage medium for MVB bus of vehicle
JPH04116473A (en) Distributed control system with signal cable connection monitoring function
JPS5920057A (en) Failure diagnostic method of remote supervisory and controlling system
CN115565914A (en) Monitoring method, device and system for semiconductor manufacturing process
JP3753496B2 (en) Fault detection apparatus and method in data communication switching system
JP2023173504A (en) Electronic control unit and failure diagnostic method
JPS61136355A (en) Remote control system
CN114928627A (en) System for controlling intelligent industrial equipment by utilizing internet information transfer
CN117032167A (en) Redundancy system for diagnosing, switching and outputting analog quantity clamping piece

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant