CN113655707A - Voting control method and device for safety instrument system and electronic device - Google Patents
Voting control method and device for safety instrument system and electronic device Download PDFInfo
- Publication number
- CN113655707A CN113655707A CN202110866401.5A CN202110866401A CN113655707A CN 113655707 A CN113655707 A CN 113655707A CN 202110866401 A CN202110866401 A CN 202110866401A CN 113655707 A CN113655707 A CN 113655707A
- Authority
- CN
- China
- Prior art keywords
- channel
- fault
- voting
- slave
- sampling
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 66
- 238000005070 sampling Methods 0.000 claims abstract description 123
- 230000008569 process Effects 0.000 claims description 20
- 230000008859 change Effects 0.000 claims description 18
- 238000004590 computer program Methods 0.000 claims description 15
- 238000005516 engineering process Methods 0.000 abstract description 5
- 230000000694 effects Effects 0.000 abstract description 3
- 238000010586 diagram Methods 0.000 description 8
- 238000012545 processing Methods 0.000 description 7
- 230000006870 function Effects 0.000 description 4
- 238000004519 manufacturing process Methods 0.000 description 4
- 238000004891 communication Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000009471 action Effects 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 230000006866 deterioration Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 239000000126 substance Substances 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The application relates to a voting control method, a voting control device, an electronic device and a storage medium of a safety instrument system, wherein the method comprises the following steps: respectively judging the fault level of each sampling channel, and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel; respectively detecting whether input signals of the main channel and the slave channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signals of the main channel as voting results of the safety instrument system within a preset fault-tolerant time period. By the method and the device, the problem of low voting result accuracy of the safety instrument system caused by asynchronous work of a plurality of sampling channels in the related technology is solved, and the technical effect of improving the voting result accuracy of the safety instrument system is achieved.
Description
Technical Field
The present disclosure relates to the field of safety instrument systems, and in particular, to a voting control method and device, an electronic device, and a storage medium for a safety instrument system.
Background
Safety Instrumentation System (SIS) is mainly an alarm and interlock part in a plant control System, performs alarm action or adjustment or shutdown control on a detection result in the control System, and is an important component in automatic control of a plant enterprise. The safety instrument system is widely applied to petrochemical industry, chemical industry or other production and processing industries as an important safety protection means.
The automatic safety instrument system can timely respond to and protect the state of continuous deterioration caused by possible danger or improper measure behaviors of production devices and equipment of enterprises, so that the production devices and the equipment enter a predefined safe parking working condition, the risk is reduced to the lowest acceptable degree, and the safety of personnel, equipment and the production devices is guaranteed.
In an automated safety instrumented system, fault tolerant control is achieved primarily through a voting mechanism. In the related art, various voting structures are often used for voting control. For example, a 1oo2 (alternative, 1out of2, abbreviated as 1oo2) voting structure is adopted for voting control, and the 1oo2 voting structure comprises two parallel channels, and any one of the two channels can perform a sampling function. When one of the channel output signals is 0 and the other channel output signal changes from 0 to 1, the final output signal is 1. Thus, it can tolerate a failure of one channel without affecting the performance of the sampling function, resulting in a failure of the sampling function only if both channels are dangerously failed.
However, in such a scheme, the sampling time of the two channels may be asynchronous, so that the output timings of the two channels may have a deviation, and although the output signals of the two channels are correct individually, the voting results of the two channels may be wrong, which results in a decrease in the accuracy of the voting result of the safety instrumentation system.
At present, no effective solution is provided for the problem of low voting result accuracy of a safety instrument system caused by asynchronous work of a plurality of sampling channels in the related technology.
Disclosure of Invention
The embodiment of the application provides a voting control method, a voting control device, an electronic device and a storage medium of a safety instrument system, and aims to at least solve the problem of low voting result accuracy of the safety instrument system caused by asynchronous work of a plurality of sampling channels in the related technology.
In a first aspect, an embodiment of the present application provides a voting control method for a safety instrument system, which is applied to the safety instrument system, where the safety instrument system includes two sampling channels, and the method includes: respectively judging the fault level of each sampling channel, and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel; respectively detecting whether input signals of the main channel and the auxiliary channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signal of the main channel as a voting result of the safety instrument system within a preset fault-tolerant time period.
In some of these embodiments, the method further comprises: detecting whether input signals of the main channel and the auxiliary channel change or not in the fault-tolerant time period respectively; entering the fault-tolerant selection mode and updating the current time to the starting time of the fault-tolerant time period under the condition that the input signal of the main channel and/or the slave channel is detected to change; maintaining the fault tolerant selection mode in the event that no change in the input signals of the master channel and the slave channel is detected.
In some of these embodiments, the method further comprises: and after the fault-tolerant time period, under the condition that the input signals of the main channel and the slave channel are not changed in the fault-tolerant time period, exiting the fault-tolerant selection mode, and voting the output signals of the main channel and the slave channel according to a preset voting logic to obtain a voting result of the safety instrument system.
In some embodiments, separately determining a fault level of each sampling channel, and determining a master channel and a slave channel according to the fault levels includes: respectively judging the number of faults existing in each sampling channel; determining that the sampling channel with the number of faults less than that of the other sampling channel in the two sampling channels is a low fault level, and determining that the other sampling channel is a high fault level; and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
In some of these embodiments, the method further comprises: and under the condition that the number of faults of each sampling channel is the same, determining one sampling channel of the two sampling channels as a main channel and determining the other sampling channel as a slave channel according to preset master-slave logic.
In some embodiments, determining the output signal of the main channel as a voting result of the safety instrumentation system within a preset fault tolerance period includes: determining the timing time of a preset timer as the fault-tolerant time period, and starting timing by the timer when detecting that the input signal of the master channel and/or the slave channel changes; in the timing process of the timer, under the condition that the input signal of the main channel and/or the slave channel is detected to be changed, the timer interrupts the current timing process and restarts timing; and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
In some of these embodiments, the method further comprises: and after the timer finishes the timing process, exiting the fault-tolerant selection mode under the condition of detecting that the input signals of the master channel and the slave channel are not changed in the fault-tolerant time period.
In a second aspect, an embodiment of the present application provides a voting control device for a safety instrument system, which is applied to the safety instrument system, where the safety instrument system includes two sampling channels, and the voting control device includes: the judging module is used for respectively judging the fault level of each sampling channel and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel; the voting module is used for respectively detecting whether the input signals of the main channel and the slave channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel are/is detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signals of the main channel as the voting result of the safety instrument system within a preset fault-tolerant time period.
In a third aspect, an embodiment of the present application further provides an electronic apparatus, including a memory and a processor, where the memory stores a computer program, and the processor is configured to execute the computer program to perform the voting control method for a safety instrumentation system according to the first aspect.
In a fourth aspect, an embodiment of the present application further provides a storage medium, where a computer program is stored in the storage medium, where the computer program, when executed by a processor, implements the voting control method for a safety instrumentation system according to the first aspect.
Compared with the related art, the voting control method, the voting control device, the electronic device and the storage medium of the safety instrument system provided by the embodiment of the application, by respectively judging the fault grade of each sampling channel, determining a main channel and a slave channel according to the fault grade, wherein, the fault grade of the main channel is lower than that of the slave channel, whether the input signals of the main channel and the slave channel are changed or not is respectively detected, in case of detecting a change in the input signal of the master channel and/or the slave channel, entering a fault-tolerant selection mode, the fault-tolerant selection mode comprises the step of determining the output signal of the main channel as the voting result of the safety instrument system within a preset fault-tolerant time period, the problem of low voting result accuracy of the safety instrument system caused by asynchronous work of a plurality of sampling channels in the related technology is solved, and the technical effect of improving the voting result accuracy of the safety instrument system is achieved.
The details of one or more embodiments of the application are set forth in the accompanying drawings and the description below to provide a more thorough understanding of the application.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:
FIG. 1 is a flow chart of a voting control method of a safety instrumented System according to an embodiment of the application;
FIG. 2 is a signal waveform diagram of a voting architecture of a safety instrumented system in the related art;
FIG. 3 is a signal waveform diagram of a voting architecture of a safety instrumented system according to an embodiment of the present application;
FIG. 4 is a block diagram of a voting control device of a safety instrumented system according to an embodiment of the present application;
fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be described and illustrated below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments provided in the present application without any inventive step are within the scope of protection of the present application. Moreover, it should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and business-related constraints, which may vary from one implementation to another.
Reference in the specification to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the specification. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Those of ordinary skill in the art will explicitly and implicitly appreciate that the embodiments described herein may be combined with other embodiments without conflict.
Unless defined otherwise, technical or scientific terms referred to herein shall have the ordinary meaning as understood by those of ordinary skill in the art to which this application belongs. Reference to "a," "an," "the," and similar words throughout this application are not to be construed as limiting in number, and may refer to the singular or the plural. The present application is directed to the use of the terms "including," "comprising," "having," and any variations thereof, which are intended to cover non-exclusive inclusions; for example, a process, method, system, article, or apparatus that comprises a list of steps or modules (elements) is not limited to the listed steps or elements, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus. Reference to "connected," "coupled," and the like in this application is not intended to be limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. Reference herein to "a plurality" means greater than or equal to two. "and/or" describes an association relationship of associated objects, meaning that three relationships may exist, for example, "A and/or B" may mean: a exists alone, A and B exist simultaneously, and B exists alone. Reference herein to the terms "first," "second," "third," and the like, are merely to distinguish similar objects and do not denote a particular ordering for the objects.
The embodiment provides a voting control method for a safety instrument system, which is applied to the safety instrument system, the safety instrument system includes two sampling channels, fig. 1 is a flowchart of the voting control method for the safety instrument system according to the embodiment of the present application, and as shown in fig. 1, the method includes:
step S101, respectively judging the fault level of each sampling channel, and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than the fault level of the slave channel.
In this embodiment, a master-slave logic may also be preset in the controller of the safety instrument system, for example, the master-slave logic may fixedly set one of the two sampling channels as a master channel, and fixedly set the other sampling channel as a slave channel.
Step S102, whether input signals of the main channel and the auxiliary channel are changed or not is respectively detected, and a fault-tolerant selection mode is entered under the condition that the input signals of the main channel and/or the auxiliary channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of the safety instrument system within a preset fault-tolerant time period.
In this embodiment, the method further implements the steps of:
step 1, in a fault-tolerant time period, whether input signals of a main channel and an auxiliary channel change or not is detected respectively.
And 2, entering a fault-tolerant selection mode under the condition that the input signal of the main channel and/or the slave channel is detected to be changed, and updating the current time to the starting time of the fault-tolerant time period.
And 3, maintaining the fault-tolerant selection mode under the condition that the input signals of the main channel and the slave channel are not changed.
In this embodiment, the method further includes: after the fault-tolerant time period, under the condition that the input signals of the main channel and the slave channel are not changed in the fault-tolerant time period, the fault-tolerant selection mode exits, and the output signals of the main channel and the slave channel are voted according to preset voting logic to obtain the voting result of the safety instrument system.
In the above embodiment, as long as a change in the input signal of the master channel and/or the slave channel is detected, for example, a transition occurs in the switching value signal sampled by the master channel and/or the slave channel, the fault-tolerant selection mode is entered, and in a fault-tolerant time period, whenever the input signal of the master channel and/or the slave channel changes, it is determined that the input signal of the master channel and the input signal of the slave channel are unstable, and at this time, the fault-tolerant selection mode is entered again; and when the input signal of the master channel and/or the slave channel changes, restarting timing, updating the current time to the starting time of the fault-tolerant time period, and judging whether the input signal of the master channel and/or the slave channel changes in the fault-tolerant time period again.
In the above embodiment, after the fault-tolerant time period, when it is detected that the input signals of the master channel and/or the slave channel have not changed within the whole fault-tolerant time period, it is determined that the input signals of the master channel and the slave channel have stabilized, at this time, the fault-tolerant selection mode is exited, and the voting processing is performed on the output signals of the master channel and the slave channel according to the preset voting logic (for example, the 1oo2 voting logic).
Fig. 2 is a signal waveform diagram of a voting structure of a safety meter system in the related art, as shown in fig. 2, in which voting control is often performed using various types of voting structures. In fig. 2, a 1oo2 voting structure is adopted for voting control, and the 1oo2 voting structure comprises two parallel sampling channels, and any one of the sampling channels can perform a sampling function. When the output signal of one of the sampling channels is 0 and the output signal of the other sampling channel changes from 0 to 1, the final output signal is 1.
However, the sampling times of the two sampling channels may be asynchronous, and thus, the sampling results of the two channels for the same switching value signal may have timing deviation.
As shown in fig. 2, although the output signal of the first sampling channel and the output signal of the second sampling channel are both correct when viewed separately, when the two sampling channels are voted at 1oo2, the voting result is inconsistent with the expected result, and the voting result is distorted (abnormal duty cycle or erroneous output), which reduces the voting accuracy of the safety instrumentation system.
At present, timing deviation can be eliminated by strictly keeping two sampling channels to work synchronously, but the strict synchronization is extremely expensive and different situations need to be considered by a safety instrument system, so that the reliability of the scheme is low.
FIG. 3 is a signal waveform diagram of a voting structure of a safety instrumented System according to an embodiment of the application, as shown in FIG. 3, in this embodimentBy presetting a fault-tolerant time period TdDuring periods of input signal instability, i.e. fault-tolerant time periods TdWhen the input signals of the main channel and/or the slave channel change, the output signal of the main channel is determined as a voting result; during the period when the input signal has stabilized, i.e. during the fault-tolerant time period TdThereafter, the input signal of the master channel and/or the slave channel is within the fault-tolerant time period TdAnd when no change occurs in the fault-tolerant working mode, the fault-tolerant working mode is quitted, voting is performed according to preset voting logic (1 oo2 voting logic is selected in fig. 3), the voting result is ensured to be consistent with the expected result, the voting result is prevented from being distorted, and the voting accuracy of the safety instrument system is improved.
Through the steps S101 to S102, determining the master channel and the slave channel according to the fault levels by respectively determining the fault level of each sampling channel, wherein the fault level of the master channel is lower than the fault level of the slave channel, respectively detecting whether the input signals of the master channel and the slave channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the master channel and/or the slave channel change is detected, wherein the fault-tolerant selection mode includes that the output signal of the master channel is determined as a voting result of the safety instrument system within a preset fault-tolerant time period. By the method and the device, the problem of low voting result accuracy of the safety instrument system caused by asynchronous work of a plurality of sampling channels in the related technology is solved, and the technical effect of improving the voting result accuracy of the safety instrument system is achieved.
The embodiments of the present application are described and illustrated below by means of preferred embodiments.
In some embodiments, the fault level of each sampling channel is respectively judged, and the main channel and the slave channel are determined according to the fault level, and the method is realized by the following steps:
step 1, respectively judging the number of faults existing in each sampling channel.
And 2, determining the sampling channel with the fault number less than that of the other sampling channel in the two sampling channels as a low fault level, and determining the other sampling channel as a high fault level.
And 3, determining the sampling channel with the low fault level as a main channel, and determining the other sampling channel with the high fault level as a slave channel.
In this embodiment, in a general case, if each sampling channel has no fault, one of the two sampling channels may be determined as a master channel and the other sampling channel may be determined as a slave channel according to preset master-slave logic, where the master-slave logic is to fixedly set a certain sampling channel as the master channel and the other sampling channel as the slave channel.
In the above embodiment, in the process of determining the number of faults existing in each sampling channel, there is also a possibility that the number of faults of each sampling channel is the same, and under the condition that the number of faults of each sampling channel is the same, according to preset master-slave logic, one sampling channel of the two sampling channels is determined to be a master channel, and the other sampling channel is determined to be a slave channel.
In the above embodiment, the possible faults of the sampling channel may be internal faults of the safety instrument system (for example, a CPU (Central Processing Unit) fault, an ADC (Analog to Digital Converter) fault, and the like), or communication faults of the sampling channel, and the like. The failure level may be determined according to the number of failures or the severity level of failures of the sampling channels, for example, if there are 2 failures in the first sampling channel and 1 failure in the second sampling channel, the second sampling channel is determined to be the master channel, and the first sampling channel is determined to be the slave channel.
In some embodiments, determining, as the master channel, a sampling channel having a lower failure level than the other sampling channel, and determining the other sampling channel as the slave channel includes: and determining a master-slave mark of a sampling channel with a fault level lower than that of the other sampling channel in the two sampling channels as a master channel mark, and determining a master-slave mark of the other sampling channel as a slave channel mark.
In this embodiment, determining the output signal of the main channel as the voting result of the safety instrument system is implemented by the following steps:
step 1, respectively obtaining a master-slave mark of each sampling channel.
And 2, determining the sampling channel with the master-slave mark as the main channel mark in the two sampling channels as the main channel, and determining the output signal of the main channel as the voting result of the safety instrument system.
In the above embodiment, the controller of the safety instrument system determines whether a certain sampling channel is a master channel or a slave channel by obtaining the master-slave flag of the sampling channel, and meanwhile, preset master-slave logic may be stored in the controller, so that a certain sampling channel is directly and fixedly judged as the master channel, and another sampling channel is fixedly judged as the slave channel, thereby reducing the communication steps between the controller and the sampling channels, and accelerating the voting speed of the safety instrument system.
In some embodiments, the determination that the output signal of the main channel is the voting result of the safety instrument system within the preset fault-tolerant time period is implemented by the following steps:
step 1, determining the timing time of a preset timer as a fault-tolerant time period, and starting timing by the timer when detecting that the input signal of a main channel and/or a slave channel changes.
And 2, in the timing process of the timer, under the condition that the input signal of the main channel and/or the slave channel is detected to be changed, the timer interrupts the current timing process and restarts timing.
And 3, determining the output signal of the main channel as a voting result of the safety instrument system under the condition that the timing time of the timer does not reach the timing time.
In this embodiment, a timer may be preset, and whether the input signal of the master channel and/or the slave channel changes within the fault-tolerant time period may be monitored through a timing process of the timer.
In the above embodiment, the method further comprises: and after the timer finishes the timing process, under the condition that the input signals of the master channel and the slave channel are not changed in the fault-tolerant time period, exiting the fault-tolerant selection mode.
In the above embodiment, the timer may be provided in the form of software in the safety instrumentation system, or may be provided in the form of hardware circuit in the safety instrumentation system.
In this embodiment, a fault-tolerant time period is used as the timing time of the timer, as long as a change in the input signal of the master channel and/or the slave channel is detected, the timer starts timing, and in the timing process of the timer, when the input signal of the master channel and/or the slave channel changes again, the timer interrupts the current timing process and restarts timing, that is, the controller of the safety instrument system is always in the fault-tolerant selection mode; and only in the complete timing process of the timer, after the timer completes the timing process, under the condition that the input signals of the main channel and/or the slave channel are detected to be unchanged all the time, namely under the condition that the input signals of the main channel and/or the slave channel are not changed in the whole fault-tolerant time period, determining that the timing time of the timer reaches the timing time, exiting the fault-tolerant selection mode, and voting the output signals of the two sampling channels according to preset voting logic to obtain the voting result of the safety instrument system.
In the above embodiment, the voting control method for the safety instrument system provided by the application may also be applied to a safety instrument system including a plurality of sampling channels, for example, the safety instrument system may include three sampling channels, and then it is determined that a first sampling channel of the three sampling channels is a master channel, a second sampling channel and a third sampling channel are slave channels, and in a fault-tolerant time period, an output signal of the master channel is determined to be a voting result; after the fault-tolerant time period is exceeded, voting processing is carried out on the sampling signals of the three sampling channels according to preset voting logic (for example, 1oo3 (one-out-of-three, 1out of 3, which is abbreviated as 1oo3) voting logic or 2oo3 (two-out-of-three, 2out of 3, which is abbreviated as 2oo3) voting logic), so that a voting result of the safety instrument system is obtained.
The embodiment provides a voting control device of a safety instrument system, which is applied to the safety instrument system, the safety instrument system includes two sampling channels, fig. 4 is a structural block diagram of the voting control device of the safety instrument system according to the embodiment of the present application, and as shown in fig. 4, the voting control device includes: the judging module 40 is configured to respectively judge a fault level of each sampling channel, and determine a master channel and a slave channel according to the fault level, where the fault level of the master channel is lower than the fault level of the slave channel; and the voting module 41 is used for respectively detecting whether the input signals of the main channel and the slave channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signal of the main channel as a voting result of the safety instrument system within a preset fault-tolerant time period.
In some of these embodiments, the voting module 41 is further configured to detect whether the input signals of the master channel and the slave channel change during the fault-tolerant time period; under the condition that the input signal of the main channel and/or the slave channel is detected to change, entering a fault-tolerant selection mode, and updating the current time to the starting time of a fault-tolerant time period; and maintaining the fault-tolerant selection mode under the condition that the input signals of the main channel and the slave channel are not changed.
In some embodiments, the voting module 41 is further configured to, after the fault-tolerant time period, exit the fault-tolerant selection mode and perform voting processing on the output signals of the master channel and the slave channel according to a preset voting logic to obtain a voting result of the safety instrumentation system in the case that it is detected that the input signals of the master channel and the slave channel have not changed within the fault-tolerant time period.
In some embodiments, the determining module 40 is further configured to determine the number of faults existing in each sampling channel; determining that the sampling channel with the number of faults less than that of the other sampling channel in the two sampling channels is in a low fault level, and determining that the other sampling channel is in a high fault level; and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
In some embodiments, the determining module 40 is further configured to determine, according to preset master-slave logic, that one of the two sampling channels is a master channel and the other sampling channel is a slave channel, when the number of faults of each sampling channel is the same.
In some of these embodiments, the voting module 41 is further configured to determine a timing time of a preset timer as a fault-tolerant time period, wherein the timer starts timing when a change in an input signal of the master channel and/or the slave channel is detected; in the timing process of the timer, under the condition that the input signal of the main channel and/or the slave channel is detected to change, the timer interrupts the current timing process and restarts timing; and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
In some of these embodiments, the voting module 41 is further configured to exit the fault-tolerant selection mode in case that it is detected that the input signals of the master channel and the slave channel have not changed within the fault-tolerant time period after the timer completes the timing process.
It should be noted that, for specific examples in this embodiment, reference may be made to examples described in the foregoing embodiments and optional implementations, and details of this embodiment are not described herein again.
The present embodiment further provides an electronic device, fig. 5 is a schematic diagram of a hardware structure of the electronic device according to an embodiment of the present application, and as shown in fig. 5, the electronic device includes a memory 504 and a processor 502, a computer program is stored in the memory 504, and the processor 502 is configured to execute the computer program to perform the steps in any of the method embodiments.
Specifically, the processor 502 may include a Central Processing Unit (CPU), or A Specific Integrated Circuit (ASIC), or may be configured to implement one or more Integrated circuits of the embodiments of the present Application.
The processor 502 implements the voting control method of any one of the above-described embodiments by reading and executing computer program instructions stored in the memory 504.
Optionally, the electronic apparatus may further include a transmission device 506 and an input/output device 508, wherein the transmission device 506 is connected to the processor 502, and the input/output device 508 is connected to the processor 502.
Optionally, in this embodiment, the processor 502 may be configured to execute the following steps by a computer program:
and S1, respectively judging the fault level of each sampling channel, and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel.
And S2, respectively detecting whether the input signals of the main channel and the slave channel are changed, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel are changed, wherein the fault-tolerant selection mode comprises the step of determining the output signals of the main channel as the voting result of the safety instrument system within a preset fault-tolerant time period.
It should be noted that, for specific examples in this embodiment, reference may be made to examples described in the foregoing embodiments and optional implementations, and details of this embodiment are not described herein again.
In addition, in combination with the voting control method of the safety instrument system in the above embodiment, the embodiment of the present application may be implemented by providing a storage medium. The storage medium having stored thereon a computer program; the computer program, when executed by a processor, implements a voting control method of any one of the above-described embodiments of the safety instrumented system.
It should be understood by those skilled in the art that various features of the above embodiments can be combined arbitrarily, and for the sake of brevity, all possible combinations of the features in the above embodiments are not described, but should be considered as within the scope of the present disclosure as long as there is no contradiction between the combinations of the features.
The above examples are merely illustrative of several embodiments of the present application, and the description is more specific and detailed, but not to be construed as limiting the scope of the present application. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present application shall be subject to the appended claims.
Claims (10)
1. A voting control method of a safety instrument system is applied to the safety instrument system, the safety instrument system comprises two sampling channels, and the method is characterized by comprising the following steps:
respectively judging the fault level of each sampling channel, and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel;
respectively detecting whether input signals of the main channel and the auxiliary channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signal of the main channel as a voting result of the safety instrument system within a preset fault-tolerant time period.
2. A voting control method for a safety instrumented system according to claim 1, the method further comprising:
detecting whether input signals of the main channel and the auxiliary channel change or not in the fault-tolerant time period respectively;
entering the fault-tolerant selection mode and updating the current time to the starting time of the fault-tolerant time period under the condition that the input signal of the main channel and/or the slave channel is detected to change;
maintaining the fault tolerant selection mode in the event that no change in the input signals of the master channel and the slave channel is detected.
3. A voting control method for a safety instrumented system according to claim 1, the method further comprising:
and after the fault-tolerant time period, under the condition that the input signals of the main channel and the slave channel are not changed in the fault-tolerant time period, exiting the fault-tolerant selection mode, and voting the output signals of the main channel and the slave channel according to a preset voting logic to obtain a voting result of the safety instrument system.
4. A voting control method for a safety instrumented system according to claim 1, wherein the step of separately judging a failure level of each of the sampling channels and determining a master channel and a slave channel based on the failure levels comprises:
respectively judging the number of faults existing in each sampling channel;
determining that the sampling channel with the number of faults less than that of the other sampling channel in the two sampling channels is a low fault level, and determining that the other sampling channel is a high fault level;
and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
5. A voting control method for a safety instrumented system according to claim 4, the method further comprising:
and under the condition that the number of faults of each sampling channel is the same, determining one sampling channel of the two sampling channels as a main channel and determining the other sampling channel as a slave channel according to preset master-slave logic.
6. A voting control method for a safety instrumented system according to claim 1, wherein determining the output signal of the main channel as a voting result of the safety instrumented system within a preset fault tolerance period comprises:
determining the timing time of a preset timer as the fault-tolerant time period, and starting timing by the timer when detecting that the input signal of the master channel and/or the slave channel changes;
in the timing process of the timer, under the condition that the input signal of the main channel and/or the slave channel is detected to be changed, the timer interrupts the current timing process and restarts timing;
and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
7. A voting control method for a safety instrumented system according to claim 6, the method further comprising:
and after the timer finishes the timing process, exiting the fault-tolerant selection mode under the condition of detecting that the input signals of the master channel and the slave channel are not changed in the fault-tolerant time period.
8. A voting control device of a safety instrument system is applied to the safety instrument system, the safety instrument system comprises two sampling channels, and the voting control device is characterized by comprising:
the judging module is used for respectively judging the fault level of each sampling channel and determining a main channel and a slave channel according to the fault levels, wherein the fault level of the main channel is lower than that of the slave channel;
the voting module is used for respectively detecting whether the input signals of the main channel and the slave channel are changed or not, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel are/is detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining the output signals of the main channel as the voting result of the safety instrument system within a preset fault-tolerant time period.
9. An electronic device comprising a memory and a processor, characterized in that the memory has stored therein a computer program, the processor being arranged to run the computer program to perform a voting control method of a safety instrumented system according to any one of claims 1 to 7.
10. A storage medium, characterized in that a computer program is stored in the storage medium, wherein the computer program, when being executed by a processor, implements a voting control method for a safety instrumented system according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110866401.5A CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110866401.5A CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113655707A true CN113655707A (en) | 2021-11-16 |
| CN113655707B CN113655707B (en) | 2023-12-12 |
Family
ID=78479014
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110866401.5A Active CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113655707B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2024094140A1 (en) * | 2022-11-04 | 2024-05-10 | 中国石油化工股份有限公司 | Remote measurement and control terminal, and safety control system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB8922773D0 (en) * | 1989-10-10 | 1989-11-22 | Univ Essex | Voters for fault-tolerant computer systems |
| JPH05197582A (en) * | 1991-05-06 | 1993-08-06 | Stratus Computer Inc | Fault tolerant processor having majority decision system, whose dynamic reconstitution is possible |
| CN105301955A (en) * | 2015-10-19 | 2016-02-03 | 中国航空无线电电子研究所 | System-level reconstruction management application software master-slave switching method |
| CN111654361A (en) * | 2020-04-16 | 2020-09-11 | 株洲航飞翔数字系统有限责任公司 | Method and system for dual-channel synchronization |
| CN112445127A (en) * | 2019-08-27 | 2021-03-05 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
-
2021
- 2021-07-29 CN CN202110866401.5A patent/CN113655707B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB8922773D0 (en) * | 1989-10-10 | 1989-11-22 | Univ Essex | Voters for fault-tolerant computer systems |
| JPH05197582A (en) * | 1991-05-06 | 1993-08-06 | Stratus Computer Inc | Fault tolerant processor having majority decision system, whose dynamic reconstitution is possible |
| CN105301955A (en) * | 2015-10-19 | 2016-02-03 | 中国航空无线电电子研究所 | System-level reconstruction management application software master-slave switching method |
| CN112445127A (en) * | 2019-08-27 | 2021-03-05 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
| CN111654361A (en) * | 2020-04-16 | 2020-09-11 | 株洲航飞翔数字系统有限责任公司 | Method and system for dual-channel synchronization |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2024094140A1 (en) * | 2022-11-04 | 2024-05-10 | 中国石油化工股份有限公司 | Remote measurement and control terminal, and safety control system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113655707B (en) | 2023-12-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP2624140A1 (en) | Method and system for detecting anomaly of network processor | |
| US20060242463A1 (en) | Abnormal circuit operation detection system | |
| US8448042B2 (en) | Data processing device and a method for error detection and error correction | |
| CN111858122A (en) | Fault detection method, device, equipment and storage medium of storage link | |
| US7539903B2 (en) | Method for monitoring the execution of a program by comparing a request with a response and introducing a falsification in a response | |
| US8311169B2 (en) | Automatic frequency monitoring circuit, electronic device, automatic frequency monitoring method, and automatic frequency monitoring program | |
| CN101964724A (en) | Energy conservation method of communication single plate and communication single plate | |
| CN113655707A (en) | Voting control method and device for safety instrument system and electronic device | |
| US20120173933A1 (en) | Profile-based execution monitoring | |
| US20090265581A1 (en) | Data system having a variable clock pulse rate | |
| US20130339791A1 (en) | Data polling method and digital instrumentation and control system for atomic power plant using the method | |
| EP2624255B1 (en) | Control device, and nuclear power plant control system | |
| CN102792383B (en) | Detect the method for the Functional Capability of memory component | |
| JP2007026028A (en) | Device for detecting abnormality in microcomputer | |
| JP2006011686A (en) | Method for detecting abnormality of multi-task system | |
| JP5627414B2 (en) | Action log collection system and program | |
| US10514970B2 (en) | Method of ensuring operation of calculator | |
| CN115421948A (en) | Method for detecting memory data fault and related equipment thereof | |
| JP2010009258A (en) | Fault detection device of software | |
| CN118093293B (en) | Storage failure detection and repair method and device in vehicle gauge chip | |
| CN115236497A (en) | Method for diagnosing clock and timer of SOC (System on chip) | |
| US11764771B2 (en) | Event detection control device and method for circuit system controlled by pulse wave modulation signal | |
| CN115453186A (en) | Method for monitoring voltage, monitoring system, voltage monitor and storage medium | |
| JP2017218081A (en) | Electronic control device | |
| CN112670952A (en) | Control method and device of generator set and readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |