CN112540918A - Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus - Google Patents

Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus Download PDF

Info

Publication number
CN112540918A
CN112540918A CN202011413472.1A CN202011413472A CN112540918A CN 112540918 A CN112540918 A CN 112540918A CN 202011413472 A CN202011413472 A CN 202011413472A CN 112540918 A CN112540918 A CN 112540918A
Authority
CN
China
Prior art keywords
synchronous
redundancy
computer
stop
arinc659
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011413472.1A
Other languages
Chinese (zh)
Inventor
严增锐
周彦
税小芳
饶晓
张兵
刘虹呈
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
AVIC Chengdu Aircraft Design and Research Institute
Original Assignee
AVIC Chengdu Aircraft Design and Research Institute
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by AVIC Chengdu Aircraft Design and Research Institute filed Critical AVIC Chengdu Aircraft Design and Research Institute
Priority to CN202011413472.1A priority Critical patent/CN112540918A/en
Publication of CN112540918A publication Critical patent/CN112540918A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/362Software debugging
    • G06F11/3648Software debugging using additional hardware
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F13/00Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
    • G06F13/14Handling requests for interconnection or transfer
    • G06F13/20Handling requests for interconnection or transfer for access to input/output bus
    • G06F13/32Handling requests for interconnection or transfer for access to input/output bus using combination of interrupt and burst mode transfer

Abstract

The invention relates to a synchronous debugging method of a redundancy flight management computer based on an ARINC659 bus, which is characterized in that a special synchronous debugging device is constructed to debug the onboard software of the redundancy flight management computer based on the ARINC659 bus, the operation of each redundancy channel of the redundancy flight management computer is mutually independent and synchronous, the real-time tasks are scheduled according to a time triggering protocol of a unified clock, and no independent clock exists; in the development and debugging process of the onboard software of the redundancy flight management computer, synchronous operation and stop among redundancy channels must be ensured. The technology of the invention is already applied to the research and development process of the flight management system of a plurality of unmanned aerial vehicle models, and has good effect. Meanwhile, the technology can also be generally applied to the field of other redundancy computers using ARINC659 backboard buses.

Description

Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus
Technical Field
The invention belongs to the design technology of a redundancy flight management computer and an embedded system.
Background
The ARINC659 bus specification is a specification standard developed for the transmission of digital data information between field replaceable modules within an integrated modular avionics equipment cabinet. The ARINC659 bus improves reliability with minimal logic and minimal bus count, and fault tolerance with extremely high fault detection coverage and fault redundancy. ARINC659 is one of the best known time trigger protocols, and the time trigger protocol ensures the certainty of the system and greatly improves the stability, testability and functional verification of the system; the time trigger protocol has a global clock, each communication event and calculation event are predefined in a static table, the clock synchronization is realized through the protocol, the time trigger protocol has time certainty, high bandwidth of the event trigger protocol is not needed, and the interface characteristic and the testability are stable and reliable. The system behavior is planned in advance, and has predictability, determinism and system stability. The system of the time-triggered protocol is very suitable for engineering projects with strict requirements on safety.
The high-end unmanned aerial vehicle flight management computer generally adopts a redundancy flight management computer based on an ARINC659 backplane bus architecture, and the operation of each channel of the redundancy flight management computer is mutually independent and synchronous. In the process of developing and debugging airborne software of the flight management computer, synchronous operation and stop among all channels of the redundant flight management computer must be ensured, once the synchronous operation relation among the redundant flight management computers is lost, the out-of-step flight management computer channel is cut off, so that the crash of a flight management system can be caused, and disastrous results are brought. Therefore, maintaining synchronous operation relationship among the channels of the redundant flight management computer is one of the basic conditions for ensuring the normal operation of the flight management system.
Disclosure of Invention
Object of the Invention
The invention designs a synchronous debugging method of a redundancy computer based on an ARINC659 backboard bus, which is used for ensuring that the synchronous running and stopping of all channels of the redundancy flight tube computer can be realized in the synchronous debugging process, and the ground integration and comprehensive test of a flight tube system are powerfully ensured.
Technical solution
A synchronous debugging method of a redundancy flight management computer based on an ARINC659 bus is characterized in that a special synchronous debugging device is constructed to debug airborne software of the redundancy flight management computer based on the ARINC659 bus, each redundancy channel of the redundancy flight management computer runs independently and synchronously, real-time tasks are scheduled according to a time trigger protocol of a unified clock, and no independent clock exists; in the development and debugging process of the onboard software of the redundancy flight management computer, synchronous operation and stop among redundancy channels must be ensured. The special synchronous debugging device comprises a PC (personal computer), a corresponding discrete control card and a multi-channel serial port communication card, and is connected with the redundancy flight tube computer through a special cable so as to transmit debugging signals, wherein the debugging signals comprise discrete signals and character string signals. The computer is provided with a PCI or PCIe slot. The discrete signal comprises a reset signal and a stop signal, and the character string signal is a synchronous operation signal.
The method for synchronously debugging the redundancy flight tube computer based on the ARINC659 bus is characterized by comprising the steps of 1) respectively connecting a discrete control card of synchronous debugging equipment to a non-shielding interrupt inlet of the flight tube computer through a discrete signal wire to be used as input of stop and reset signals, and simultaneously connecting the discrete signals on a cable with N channels of the flight tube computer in a one-to-N mode at an equipment end to enable the N operating channels to receive the stop signals. And 2) connecting the multi-path serial port communication card of the synchronous debugging equipment to the debugging serial port of each channel of the flight tube computer through a serial port line. And 3) when the synchronous stop is carried out, the synchronous debugging equipment simultaneously sends a discrete stop signal to the flight control computer through the discrete control card, the flight control computer responds as a non-shielding interrupt signal after receiving the stop signal, controls all channels of the flight control computer to simultaneously stop, and also needs to close a watchdog signal and close an interrupt response triggered by an ARINC659 backboard 15ms timer when sending the stop signal. The method comprises the following steps of 4) when synchronous recovery operation is carried out, synchronous operation commands are simultaneously sent to a flight control computer by synchronous debugging equipment through a multi-channel serial port communication card in a character string mode, after the flight control computer receives the synchronous operation commands, in order to eliminate time difference of the synchronous operation commands received by each channel, a mode of multiplexing a signal line for synchronous stop is needed, after the synchronous operation commands are sent by the synchronous debugging equipment, stop signals are sent by delaying for 3 seconds, interruption is started after bottom layer target machine agent software receives the stop signals, and operation is started when the interruption of a timing clock of 15ms for the third time sent by an ARINC659 back plate is waited.
Advantageous effects
The technology of the invention is already applied to the research and development process of the flight management system of a plurality of unmanned aerial vehicle models, and has good effect. Meanwhile, the technology can also be generally applied to the field of other redundancy computers using ARINC659 backboard buses.
Drawings
FIG. 1 shows the connection relationship between the synchronous debugging device and the multi-redundancy flight management computer
FIG. 2 flow chart of a synchronous stop operation
FIG. 3 is a flow chart of synchronous operation
Detailed Description
Because the redundancy computer based on the ARINC659 backplane bus is scheduled according to the time-triggered protocol of the unified clock, compared with the general redundancy computer, the key solution mainly lies in the following two points:
a) how to perform synchronous stop operation of the multi-channel airborne software based on the unified clock;
b) how to carry out synchronous recovery operation of multi-channel airborne software based on a unified clock.
A redundancy computer based on an ARINC659 back panel bus is used for debugging airborne software by means of a special synchronous debugging device. The main principle of the structure is shown in fig. 1 (taking typical three redundancies as an example), the mechanism of synchronous stop is shown in the flow of fig. 2, and the mechanism of synchronous operation is shown in the flow of fig. 3:
firstly, respectively connecting a discrete control card of synchronous debugging equipment to a non-shielding interrupt inlet of a flight tube computer through discrete signal wires to be used as input of stop and reset signals, and simultaneously, designing a circuit at an equipment end in a one-to-three mode so that three operation channels can receive low-level stop signals;
connecting a multi-channel serial port communication card of the synchronous debugging equipment to a debugging serial port of each channel of the flight tube computer through a serial port line;
when the synchronous stop is carried out, the synchronous debugging equipment simultaneously sends a discrete stop signal to the flight management computer through the discrete control card, the flight management computer responds as a non-shielding interrupt signal after receiving the stop signal, controls all channels of the flight management computer to stop simultaneously, and also needs to close a watchdog signal and close an interrupt response triggered by an ARINC659 backboard 15ms timer when the stop signal is sent;
when the synchronous operation is recovered, the synchronous debugging equipment simultaneously sends a synchronous operation command to the flight management computer in a character string mode through a multi-channel serial port communication card, after the flight management computer receives the synchronous operation command, in order to eliminate the time difference of the synchronous operation command received by each channel, a mode of multiplexing a signal line for synchronous stop is needed, after the synchronous operation command is sent by the synchronous debugging equipment, a stop signal is sent by delaying for 3 seconds, after the bottom layer target machine agent software receives the stop signal, interruption is opened, and from this time, the operation is started after the interruption of the third 15ms timing clock sent by an ARINC659 back plate arrives. The reason for ignoring the first 15ms tick interrupt is because it is the last posted interrupt held on the interrupt controller, and the reason for ignoring the second 15ms tick interrupt is because the uncontrollable nature of the unified clock may cause the interrupt program to recover at a random location, which may cause the program running time of the beat to be less than 15ms, which may cause the onboard software to fail to complete the specified task, resulting in a task timeout.
Examples
The technical scheme of the redundancy computer synchronous debugging equipment based on the ARINC659 backplane bus takes a three-channel (three-redundancy) flight management computer based on the ARINC659 backplane bus as an example, three channels A/B/C of the flight management computer (VMC) are all arranged on the ARINC659 bus, and a communication protocol is defined as RS422 (baud rate is 115200bps) and two discrete control signals (reset signal and stop signal) during hardware design. The hardware scheme design adopts a PC machine to install a control card PCI7250 based on a standard PCI slot and a multi-serial port card MOXA CP114, and the control card PCI7250 and the multi-serial port card MOXA CP114 are used for respectively transmitting discrete control signals and RS422 serial communication signals with the flight management computer.
Taking the CPU of the PPC755 model as an example, according to its manual, the response of the CPU to an external interrupt is a low-level trigger mode. Therefore, the synchronous stop signal is designed to be an SMI interface (non-shielding interrupt) connected to each channel board, the stop signal sent by the DIF device is a low-level signal, and a circuit design is performed on the device side in a three-in-one manner, so that three running channels can receive the low-level stop signal and guarantee simultaneous stop, and the stop signal is sent while the "watchdog" signal is turned off, and the interrupt response triggered by the 15ms timer of the ARINC659 backplane is turned off.
Once the synchronous operation relationship between each redundancy channel is lost, the corresponding redundancy channel which is out of step is cut off, so that the crash of the fly pipe system can be caused, and a catastrophic result is brought.
The main problems of synchronous recovery operation of multi-channel airborne software based on a unified clock are as follows:
a) the receiving of the operation command among the channels inevitably has time difference, and a synchronization mechanism is necessary to ensure that all the channels operate synchronously;
b) the ARINC659 backboard 15ms timing clock based on the unified clock is uncontrollable;
c) the inter-channel synchronization signal line cannot be utilized.
Under the condition, in order to eliminate the time difference of synchronous running commands (character strings) received by each channel, a mode of multiplexing signal lines for synchronous stop is adopted, after the DIF equipment sends the synchronous running commands, stop signals are sent after 3 seconds of delay, interrupt is opened after bottom layer target machine agent software receives the stop signals, and the operation is started after the third 15ms of timing clock interrupt sent by an ARINC659 backboard arrives. The reason for ignoring the first 15ms tick interrupt is because it is the last posted interrupt held on the interrupt controller, and the reason for ignoring the second 15ms tick interrupt is because the uncontrollable nature of the unified clock may cause the interrupt program to recover at a random location, which may cause the program running time of the beat to be less than 15ms, which may cause the onboard software to fail to complete the specified task, resulting in a task timeout.

Claims (8)

1. A multi-redundancy flight management computer synchronous debugging method based on an ARINC659 bus is characterized in that a special synchronous debugging device is constructed to debug the onboard software of the multi-redundancy flight management computer based on the ARINC659 bus, each redundancy channel of the multi-redundancy flight management computer runs independently and synchronously, real-time tasks are scheduled according to a time trigger protocol of a unified clock, and no independent clock exists; in the development and debugging process of the onboard software of the redundancy flight management computer, synchronous operation and stop among redundancy channels must be ensured.
2. The ARINC659 bus-based synchronous debugging method for the multi-redundancy flight tube computer as claimed in claim 1, wherein the special synchronous debugging device comprises a PC and corresponding discrete control card, multi-channel serial port communication card, and is connected with the multi-redundancy flight tube computer through a special cable to transmit debugging signals, and the debugging signals comprise discrete signals and character string signals.
3. The ARINC659 bus-based synchronous debugging method for a multi-redundancy flypipe computer according to claim 2, wherein the computer is provided with a PCI or PCIe slot.
4. The ARINC659 bus-based synchronous debugging method for multi-redundancy flight tube computers according to claim 2, characterized in that the discrete signals comprise a reset signal and a stop signal, and the character string signal is a synchronous operation signal.
5. The ARINC659 bus-based synchronous debugging method for the multi-redundancy flight tube computer according to claim 2, comprising the steps of 1) connecting the discrete control card of the synchronous debugging device to the non-shielding interrupt inlet of the flight tube computer through discrete signal lines as the input of stop and reset signals, and connecting the discrete signals on the cable to N channels of the flight tube computer in a one-to-N manner at the device end, so that the N operating channels can receive the stop signals.
6. The ARINC659 bus-based synchronous debugging method for multi-redundancy flight tube computer as claimed in claim 5, comprising the step 2) of connecting the multi-channel serial port communication card of the synchronous debugging device to the debugging serial port of each channel of the flight tube computer through a serial port line.
7. The ARINC659 bus-based synchronous debugging method for the multi-redundancy flight pipe computer according to claim 6, comprising the step 3) that when the synchronous debugging device synchronously sends a discrete stop signal to the flight pipe computer through the discrete control card when the synchronous debugging device synchronously stops, the flight pipe computer responds to the non-shielding interrupt signal after receiving the stop signal, and controls the channels of the flight pipe computer to simultaneously stop, and the 'watchdog' signal needs to be closed while the stop signal is sent, and the interrupt response triggered by the 15ms timer of the ARINC659 backboard is closed.
8. The ARINC659 bus-based synchronous debugging method for multi-redundancy flight tube computers according to claim 7, comprising the step 4) during synchronous recovery operation, the synchronous debugging device sends synchronous operation commands to the flight tube computers in a character string manner through the multi-channel serial port communication card, after the flight tube computers receive the synchronous operation commands, in order to eliminate the time difference of the synchronous operation commands received by each channel, a signal line for synchronous stop needs to be multiplexed, after the synchronous debugging device sends the synchronous operation commands, the synchronous debugging device sends stop signals with a delay of 3 seconds, after receiving the stop signals, the bottom layer target machine agent software opens interrupts, and from this time, the operation is started to wait for the third 15ms timing clock interrupt sent by the ARINC659 backplane.
CN202011413472.1A 2020-12-04 2020-12-04 Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus Pending CN112540918A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011413472.1A CN112540918A (en) 2020-12-04 2020-12-04 Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011413472.1A CN112540918A (en) 2020-12-04 2020-12-04 Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus

Publications (1)

Publication Number Publication Date
CN112540918A true CN112540918A (en) 2021-03-23

Family

ID=75016061

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011413472.1A Pending CN112540918A (en) 2020-12-04 2020-12-04 Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus

Country Status (1)

Country Link
CN (1) CN112540918A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114355802A (en) * 2021-12-15 2022-04-15 中国航空工业集团公司成都飞机设计研究所 Synchronous debugging method for processors with multiple cores in parallel
CN114779881A (en) * 2021-12-07 2022-07-22 北京科银京成技术有限公司 Synchronous detection method, device, equipment and storage medium for redundancy computer

Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106445852A (en) * 2016-08-12 2017-02-22 中国航空工业集团公司西安飞行自动控制研究所 Inter-task communication apparatus and method based on self-monitoring architecture
WO2017050286A1 (en) * 2015-09-25 2017-03-30 华为技术有限公司 Debugging method, multi-core processor, and debugging equipment
BR102015030217A2 (en) * 2015-12-02 2017-06-06 Fund Cpqd - Centro De Pesquisa E Desenvolvimento Em Telecomunicações method for monitoring independent processes allocated in database access from a java virtual machine
CN108388228A (en) * 2018-02-01 2018-08-10 北京东土科技股份有限公司 A kind of synchronous debugging method and apparatus for multichannel embedded control system
CN108563557A (en) * 2018-02-08 2018-09-21 北京东土科技股份有限公司 A kind of Channel Synchronous method and device of multichannel computer
CN109144851A (en) * 2018-07-24 2019-01-04 中国航空工业集团公司西安飞行自动控制研究所 Oriented mission extremely limits the redundance software debugging device and adjustment method of monitoring
CN109581415A (en) * 2019-01-25 2019-04-05 中国人民解放军海军航空大学 A kind of synchronous apparatus and method calculated and time service controls based on GNSS
CN109870997A (en) * 2017-12-04 2019-06-11 成都纵海科技有限公司 A kind of triplex redundance flight control computer system
CN111443898A (en) * 2019-11-14 2020-07-24 天津津航计算技术研究所 Method for designing flow program control software based on priority queue and finite-state machine
WO2021081733A1 (en) * 2019-10-29 2021-05-06 中国科学院微小卫星创新研究院 Navigation satellite time system and autonomous recovery method therefor
CN114355802A (en) * 2021-12-15 2022-04-15 中国航空工业集团公司成都飞机设计研究所 Synchronous debugging method for processors with multiple cores in parallel

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017050286A1 (en) * 2015-09-25 2017-03-30 华为技术有限公司 Debugging method, multi-core processor, and debugging equipment
BR102015030217A2 (en) * 2015-12-02 2017-06-06 Fund Cpqd - Centro De Pesquisa E Desenvolvimento Em Telecomunicações method for monitoring independent processes allocated in database access from a java virtual machine
CN106445852A (en) * 2016-08-12 2017-02-22 中国航空工业集团公司西安飞行自动控制研究所 Inter-task communication apparatus and method based on self-monitoring architecture
CN109870997A (en) * 2017-12-04 2019-06-11 成都纵海科技有限公司 A kind of triplex redundance flight control computer system
CN108388228A (en) * 2018-02-01 2018-08-10 北京东土科技股份有限公司 A kind of synchronous debugging method and apparatus for multichannel embedded control system
CN108563557A (en) * 2018-02-08 2018-09-21 北京东土科技股份有限公司 A kind of Channel Synchronous method and device of multichannel computer
CN109144851A (en) * 2018-07-24 2019-01-04 中国航空工业集团公司西安飞行自动控制研究所 Oriented mission extremely limits the redundance software debugging device and adjustment method of monitoring
CN109581415A (en) * 2019-01-25 2019-04-05 中国人民解放军海军航空大学 A kind of synchronous apparatus and method calculated and time service controls based on GNSS
WO2021081733A1 (en) * 2019-10-29 2021-05-06 中国科学院微小卫星创新研究院 Navigation satellite time system and autonomous recovery method therefor
CN111443898A (en) * 2019-11-14 2020-07-24 天津津航计算技术研究所 Method for designing flow program control software based on priority queue and finite-state machine
CN114355802A (en) * 2021-12-15 2022-04-15 中国航空工业集团公司成都飞机设计研究所 Synchronous debugging method for processors with multiple cores in parallel

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
田泽 等: "ARINC659 底板数据总线及关键技术", 《计算机应用》, vol. 33, no. 2, pages 49 - 50 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114779881A (en) * 2021-12-07 2022-07-22 北京科银京成技术有限公司 Synchronous detection method, device, equipment and storage medium for redundancy computer
CN114779881B (en) * 2021-12-07 2023-07-04 北京科银京成技术有限公司 Synchronous detection method, device, equipment and storage medium for redundancy computer
CN114355802A (en) * 2021-12-15 2022-04-15 中国航空工业集团公司成都飞机设计研究所 Synchronous debugging method for processors with multiple cores in parallel

Similar Documents

Publication Publication Date Title
RU2670941C9 (en) Dual-channel architecture with ccdl excess links
US9430266B2 (en) Activating a subphysical driver on failure of hypervisor for operating an I/O device shared by hypervisor and guest OS and virtual computer system
US9876598B2 (en) Switch for transmission of data between heterogeneous networks for aircraft
JP5337022B2 (en) Error filtering in fault-tolerant computing systems
CN101420328B (en) System, interface card and method for remote upgrading field programmable gate array
CN107347018B (en) Three-redundancy 1553B bus dynamic switching method
CN106444425B (en) Design method of TTP/C bus controller for distributed control of aircraft engine
CN102269970B (en) Security control system
CN112540918A (en) Redundancy flight pipe computer synchronous debugging method based on ARINC659 bus
US10162314B2 (en) Two-way architecture
EP3699764B1 (en) Redundant ethernet-based secure computer system
US8924772B2 (en) Fault-tolerant system and fault-tolerant control method
CN106649180A (en) Method and device for relieving I2C bus deadlock
CN108563557B (en) Channel synchronization method and device of multi-channel computer
WO2023045067A1 (en) Flight control unit, aircraft control system and method, and aircraft
CN109062028A (en) A kind of redundance control system of flight control computer
CN113806290B (en) High-integrity system-on-a-chip for integrated modular avionics systems
CN106201971A (en) A kind of railway signal safety computer platform based on bus synchronous verification
US20060047862A1 (en) Automatic hardware data link initialization
CN114355802A (en) Synchronous debugging method for processors with multiple cores in parallel
US5905875A (en) Multiprocessor system connected by a duplicated system bus having a bus status notification line
CN112506830B (en) Redundancy synchronous communication method for multi-path transmission data bus
EP3477483B1 (en) Methods for managing communications involving a lockstep processing system
CN103885421A (en) Standard bus controller
CN111930573A (en) Task-level dual-computer hot standby system and method based on management platform

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination