CN113655707B - Voting control method and device of safety instrument system and electronic device - Google Patents
Voting control method and device of safety instrument system and electronic device Download PDFInfo
- Publication number
- CN113655707B CN113655707B CN202110866401.5A CN202110866401A CN113655707B CN 113655707 B CN113655707 B CN 113655707B CN 202110866401 A CN202110866401 A CN 202110866401A CN 113655707 B CN113655707 B CN 113655707B
- Authority
- CN
- China
- Prior art keywords
- channel
- fault
- voting
- sampling
- tolerant
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 65
- 238000005070 sampling Methods 0.000 claims abstract description 120
- 230000008859 change Effects 0.000 claims abstract description 47
- 230000008569 process Effects 0.000 claims description 22
- 238000004590 computer program Methods 0.000 claims description 15
- 238000012545 processing Methods 0.000 claims description 9
- 230000000694 effects Effects 0.000 abstract description 3
- 238000005516 engineering process Methods 0.000 abstract description 3
- 238000010586 diagram Methods 0.000 description 8
- 238000004519 manufacturing process Methods 0.000 description 6
- 230000008901 benefit Effects 0.000 description 4
- 238000004891 communication Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 239000007787 solid Substances 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 230000009471 action Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 230000006866 deterioration Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 239000000126 substance Substances 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The application relates to a voting control method, a voting control device, an electronic device and a storage medium of a safety instrument system, wherein the voting control method comprises the following steps: judging the fault level of each sampling channel respectively, and determining a main channel and a secondary channel according to the fault level, wherein the fault level of the main channel is lower than that of the secondary channel; and respectively detecting whether the input signals of the main channel and the auxiliary channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of a safety instrument system in a preset fault-tolerant time period. The application solves the problem of low voting result accuracy of the safety instrument system caused by asynchronous operation of a plurality of sampling channels in the related technology, and achieves the technical effect of improving the voting result accuracy of the safety instrument system.
Description
Technical Field
The present application relates to the technical field of safety instrument systems, and in particular, to a voting control method, apparatus, electronic device, and storage medium for a safety instrument system.
Background
The safety instrument system (Safety instrumentation System, abbreviated as SIS) is mainly an alarm and interlocking part in a factory control system, and is an important component in automatic control of a factory enterprise, and alarm action, regulation or shutdown control is implemented on a detection result in the control system. Safety instrument systems are widely used as an important safety protection means in petrochemical, chemical or other manufacturing industries.
The automatic safety instrument system can timely respond and protect the state of continuous deterioration caused by possible danger or improper measure of the production devices and equipment of enterprises, so that the production devices and equipment enter a predefined safe stopping working condition, the risk is reduced to the minimum acceptable level, and the safety of personnel, equipment and production devices is ensured.
In an automated safety instrumented system, fault-tolerant control is achieved primarily through a voting mechanism. In the related art, various voting structures are often adopted for voting control. For example, a 1oo2 (alternatively 1out of2, simply referred to as 1oo 2) voting structure is adopted for voting control, and the 1oo2 voting structure comprises two parallel channels, and any one channel can execute a sampling function. When one channel output signal is 0 and the other channel output signal is changed from 0 to 1, the final output signal is 1. Thus, it can tolerate one channel failure without affecting the execution of the sampling function, which can only be caused when dangerous failures occur in both channels.
However, in such a scheme, sampling times of the two channels may be asynchronous, so that output timings of the two channels may deviate, and although output signals of the two channels are correct, voting results of the two channels may be erroneous, which results in a decrease in accuracy of the voting results of the safety instrumented system.
At present, no effective solution is proposed for the problem of low voting result accuracy of a safety instrument system caused by asynchronous operation of a plurality of sampling channels in the related art.
Disclosure of Invention
The embodiment of the application provides a voting control method, a voting control device, an electronic device and a storage medium of a safety instrument system, which at least solve the problem of low voting result accuracy of the safety instrument system caused by asynchronous operation of a plurality of sampling channels in the related technology.
In a first aspect, an embodiment of the present application provides a voting control method of a safety instrumented system, which is applied to the safety instrumented system, where the safety instrumented system includes two sampling channels, and the method includes: judging the fault level of each sampling channel respectively, and determining a master channel and a slave channel according to the fault level, wherein the fault level of the master channel is lower than that of the slave channel; and respectively detecting whether the input signals of the main channel and the auxiliary channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of the safety instrument system in a preset fault-tolerant time period.
In some of these embodiments, the method further comprises: respectively detecting whether the input signals of the main channel and the auxiliary channel change or not in the fault tolerance time period; under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, entering the fault-tolerant selection mode, and updating the current time to the starting time of the fault-tolerant time period; the fault tolerant selection mode is maintained in the event that no change in the input signals to the master and slave channels is detected.
In some of these embodiments, the method further comprises: after the fault-tolerant time period, under the condition that the input signals of the main channel and the auxiliary channel are not changed in the fault-tolerant time period, the fault-tolerant selection mode is exited, and the output signals of the main channel and the auxiliary channel are subjected to voting processing according to preset voting logic, so that the voting result of the safety instrument system is obtained.
In some embodiments, determining the failure level of each sampling channel, and determining the master channel and the slave channel according to the failure level includes: judging the number of faults existing in each sampling channel respectively; determining that the sampling channels with the number of faults being less than that of the other sampling channel in the two sampling channels are of low fault level, and determining that the other sampling channel is of high fault level; and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
In some of these embodiments, the method further comprises: and under the condition that the fault number of each sampling channel is the same, determining one of the two sampling channels as a main channel and the other sampling channel as a slave channel according to a preset master-slave logic.
In some embodiments, determining that the output signal of the main channel is the voting result of the safety instrumented system within a preset fault tolerance period includes: determining the timing time of a preset timer as the fault-tolerant time period, and starting timing by the timer under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected; in the timing process of the timer, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, the timer interrupts the current timing process and restarts timing; and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
In some of these embodiments, the method further comprises: and after the timer finishes the timing process, the fault-tolerant selection mode is exited under the condition that the input signals of the main channel and the auxiliary channel are detected to be unchanged within the fault-tolerant time period.
In a second aspect, an embodiment of the present application provides a voting control device for a safety instrumented system, the safety instrumented system including two sampling channels, the device including: the judging module is used for judging the fault level of each sampling channel respectively and determining a main channel and a slave channel according to the fault level, wherein the fault level of the main channel is lower than that of the slave channel; and the voting module is used for respectively detecting whether the input signals of the main channel and the auxiliary channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of the safety instrument system in a preset fault-tolerant time period.
In a third aspect, embodiments of the present application also provide an electronic device comprising a memory and a processor, the memory having stored therein a computer program, the processor being arranged to run the computer program to perform the voting control method of the safety instrumented system as described in the first aspect above.
In a fourth aspect, an embodiment of the present application further provides a storage medium, where a computer program is stored, where the computer program, when executed by a processor, implements the voting control method of the safety instrumented system according to the first aspect described above.
Compared with the related art, the voting control method, the device, the electronic device and the storage medium of the safety instrument system provided by the embodiment of the application determine the main channel and the auxiliary channel according to the fault level by respectively judging the fault level of each sampling channel, wherein the fault level of the main channel is lower than that of the auxiliary channel, respectively detect whether the input signals of the main channel and the auxiliary channel change, and enter a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are the voting result of the safety instrument system in a preset fault-tolerant time period, thereby solving the problem of low voting result accuracy of the safety instrument system caused by asynchronous operation of a plurality of sampling channels in the related art and realizing the technical effect of improving the voting result accuracy of the safety instrument system.
The details of one or more embodiments of the application are set forth in the accompanying drawings and the description below to provide a more thorough understanding of the other features, objects, and advantages of the application.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute a limitation on the application. In the drawings:
FIG. 1 is a flow chart of a method of voting control of a safety instrumented system in accordance with an embodiment of the present application;
FIG. 2 is a signal waveform diagram of a voting structure of a safety instrumented system of the related art;
FIG. 3 is a signal waveform diagram of a voting structure of a safety instrumented system in accordance with an embodiment of the present application;
FIG. 4 is a block diagram of the construction of a voting control device of the safety instrumented system according to an embodiment of the present application;
fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
The present application will be described and illustrated with reference to the accompanying drawings and examples in order to make the objects, technical solutions and advantages of the present application more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the application. All other embodiments, which can be made by a person of ordinary skill in the art based on the embodiments provided by the present application without making any inventive effort, are intended to fall within the scope of the present application. Moreover, it should be appreciated that while such a development effort might be complex and lengthy, it would nevertheless be a routine undertaking of design, fabrication, or manufacture for those of ordinary skill having the benefit of this disclosure, and thus should not be construed as having the benefit of this disclosure.
Reference in the specification to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the application. The appearances of such phrases in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is to be expressly and implicitly understood by those of ordinary skill in the art that the described embodiments of the application can be combined with other embodiments without conflict.
Unless defined otherwise, technical or scientific terms used herein should be given the ordinary meaning as understood by one of ordinary skill in the art to which this application belongs. The terms "a," "an," "the," and similar referents in the context of the application are not to be construed as limiting the quantity, but rather as singular or plural. The terms "comprising," "including," "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, article, or apparatus that comprises a list of steps or modules (elements) is not limited to only those steps or elements but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus. The terms "connected," "coupled," and the like in connection with the present application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The term "plurality" as used herein means greater than or equal to two. "and/or" describes an association relationship of an association object, meaning that there may be three relationships, e.g., "a and/or B" may mean: a exists alone, A and B exist together, and B exists alone. The terms "first," "second," "third," and the like, as used herein, are merely distinguishing between similar objects and not representing a particular ordering of objects.
The present embodiment provides a voting control method of a safety instrumented system, which is applied to the safety instrumented system, wherein the safety instrumented system comprises two sampling channels, and fig. 1 is a flowchart of the voting control method of the safety instrumented system according to an embodiment of the present application, as shown in fig. 1, and the method includes:
step S101, judging the fault level of each sampling channel respectively, and determining a main channel and a slave channel according to the fault level, wherein the fault level of the main channel is lower than that of the slave channel.
In this embodiment, master-slave logic may be preset in the controller of the safety instrumented system, for example, the master-slave logic fixedly sets one of the two sampling channels as a master channel and fixedly sets the other sampling channel as a slave channel.
Step S102, whether the input signals of the main channel and the auxiliary channel are changed or not is detected, and a fault-tolerant selection mode is entered under the condition that the input signals of the main channel and/or the auxiliary channel are detected to be changed, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of a safety instrument system in a preset fault-tolerant time period.
In this embodiment, the method further performs the steps of:
and step 1, respectively detecting whether the input signals of the main channel and the auxiliary channel change in the fault-tolerant time period.
And 2, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, entering a fault-tolerant selection mode, and updating the current time to be the starting time of the fault-tolerant time period.
And 3, maintaining a fault-tolerant selection mode under the condition that no change of input signals of the main channel and the auxiliary channel is detected.
In this embodiment, the method further includes: after the fault-tolerant time period, under the condition that the input signals of the main channel and the slave channel are not changed in the fault-tolerant time period, the fault-tolerant selection mode is exited, and the output signals of the main channel and the slave channel are subjected to voting processing according to preset voting logic, so that the voting result of the safety instrument system is obtained.
In the above embodiment, as long as a change of the input signals of the main channel and/or the slave channel is detected, for example, a transition occurs in the switching value signals sampled by the main channel and/or the slave channel, a fault-tolerant selection mode is entered, and in the fault-tolerant period, each time the input signals of the main channel and/or the slave channel change, it is determined that the input signals of the main channel and the slave channel are unstable, and at this time, the fault-tolerant selection mode is entered again; when the input signals of the main channel and/or the auxiliary channel change, restarting timing, updating the current time to the starting time of the fault-tolerant time period, and judging whether the input signals of the main channel and/or the auxiliary channel change or not in the fault-tolerant time period.
In the above embodiment, after the fault-tolerant period, when it is detected that the input signals of the master channel and/or the slave channel have not changed in the whole fault-tolerant period, it is determined that the input signals of the master channel and the slave channel are stable, and the fault-tolerant selection mode is exited at this time, and the output signals of the master channel and the slave channel are voted according to a preset voting logic (for example, 1oo2 voting logic).
FIG. 2 is a signal waveform diagram of a voting structure of a safety instrumented system of the related art, as shown in FIG. 2, in which various voting structures are often used for voting control. In FIG. 2, a 1oo2 voting structure is adopted for voting control, and the 1oo2 voting structure comprises two parallel sampling channels, wherein any one sampling channel can execute a sampling function. When one sampling channel output signal is 0 and the other sampling channel output signal is changed from 0 to 1, the final output signal is 1.
However, the sampling times of the two sampling channels may be asynchronous, and thus the sampling results of the same switching value signal by the two channels may have timing deviation.
As shown in fig. 2, although the output signal of the first sampling channel and the output signal of the second sampling channel are correct in terms of both signals, when 1oo2 voting is performed on the two sampling channels, the voting result is inconsistent with the expected result, and a distortion phenomenon (duty ratio abnormality or erroneous output) occurs in the voting result, which reduces the voting accuracy of the safety instrument system.
At present, timing deviation can be eliminated by strictly keeping the two sampling channels working synchronously, but the price of strict synchronization is extremely high and the safety instrument system needs to consider different situations, so the reliability of the scheme is lower.
FIG. 3 is a signal waveform diagram of a voting structure of a safety instrumented system according to an embodiment of the present application, as shown in FIG. 3, in this embodiment, by a preset fault tolerance period T d During an unstable input signal, i.e. fault-tolerant period T d When the input signals of the main channel and/or the auxiliary channel are changed, determining the output signals of the main channel as voting results; during the time when the input signal has stabilized, i.e. during the fault tolerance period T d Thereafter, the input signals of the master channel and/or the slave channel are in their entirety within the fault-tolerant period T d When no change occurs in the safety instrument system, the fault-tolerant working mode is exited, and at the moment, voting processing is carried out according to preset voting logic (1 oo2 voting logic is selected in FIG. 3), so that the voting result is consistent with the expected result, distortion phenomenon of the voting result is prevented, and the voting accuracy of the safety instrument system is improved.
Through the steps S101 to S102, by respectively determining the fault level of each sampling channel, determining a master channel and a slave channel according to the fault level, wherein the fault level of the master channel is lower than that of the slave channel, respectively detecting whether the input signals of the master channel and the slave channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the master channel and/or the slave channel change is detected, wherein the fault-tolerant selection mode comprises determining that the output signals of the master channel are voting results of the safety instrument system in a preset fault-tolerant time period. The application solves the problem of low voting result accuracy of the safety instrument system caused by asynchronous operation of a plurality of sampling channels in the related technology, and achieves the technical effect of improving the voting result accuracy of the safety instrument system.
The embodiments of the present application will be described and illustrated below by means of preferred embodiments.
In some embodiments, the fault level of each sampling channel is respectively judged, and the main channel and the slave channel are determined according to the fault level, and the steps are realized as follows:
and step 1, judging the number of faults existing in each sampling channel respectively.
And 2, determining that the sampling channels with the number of faults being less than that of the other sampling channel in the two sampling channels are of low fault level, and determining that the other sampling channel is of high fault level.
And 3, determining a sampling channel with a low fault level as a master channel and determining another sampling channel with a high fault level as a slave channel.
In this embodiment, in general, if each sampling channel has no fault, one of the two sampling channels may be determined as a master channel and the other sampling channel may be determined as a slave channel according to a preset master-slave logic, where the master-slave logic fixedly sets a certain sampling channel as the master channel and fixedly sets another sampling channel as the slave channel.
In the above embodiment, in the process of judging the number of faults existing in each sampling channel, there is also a possibility that the number of faults of each sampling channel is the same, and in the case that the number of faults of each sampling channel is the same, one of the two sampling channels is determined as a master channel and the other sampling channel is determined as a slave channel according to a preset master-slave logic.
In the above-described embodiment, the possible faults of the sampling channel may be internal faults of the safety instrumented system (e.g., CPU (central processing unit, central Processing Unit, abbreviated as CPU) faults, ADC (analog-to-digital converter, analog to Digital Converter, abbreviated as ADC) faults, etc.), communication faults of the sampling channel, etc. The fault level may be determined according to the number of faults or the fault severity level of the sampling channels, for example, 2 faults exist in the first sampling channel, 1 fault exists in the second sampling channel, the second sampling channel is determined to be the master channel, and the first sampling channel is determined to be the slave channel.
In some of these embodiments, determining that the sampling channel of the two sampling channels that has a lower failure level than the other sampling channel is the master channel and determining that the other sampling channel is the slave channel includes: and determining a master-slave mark of a sampling channel with the fault level lower than that of the other sampling channel in the two sampling channels as a master channel mark, and determining a master-slave mark of the other sampling channel as a slave channel mark.
In this embodiment, determining that the output signal of the main channel is a voting result of the safety instrumented system is implemented by:
step 1, respectively acquiring master-slave marks of each sampling channel.
And 2, determining a sampling channel with a master-slave mark as a master channel mark in the two sampling channels as a master channel, and determining an output signal of the master channel as a voting result of the safety instrument system.
In the above embodiment, the controller of the safety instrument system determines whether a certain sampling channel is a master channel or a slave channel by acquiring the master-slave flag of the sampling channel, and meanwhile, a preset master-slave logic may also be stored in the controller to directly and fixedly determine that a certain sampling channel is a master channel and fixedly determine that another sampling channel is a slave channel, so that the communication steps between the controller and the sampling channel are reduced, and the voting speed of the safety instrument system is increased.
In some embodiments, determining that the output signal of the main channel is a voting result of the safety instrumented system in a preset fault tolerance period is achieved through the following steps:
step 1, determining the timing time of a preset timer as a fault-tolerant time period, and starting timing by the timer under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected.
And 2, in the timing process of the timer, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, the timer interrupts the current timing process and restarts timing.
And step 3, under the condition that the timing time of the timer does not reach the timing time, determining that the output signal of the main channel is a voting result of the safety instrument system.
In this embodiment, a timer may be preset, and through a timing process of the timer, whether the input signals of the master channel and/or the slave channel change within the fault tolerance period is monitored.
In the above embodiment, the method further includes: after the timer finishes the timing process, the fault-tolerant selection mode is exited under the condition that the input signals of the main channel and the slave channel are detected to be unchanged within the fault-tolerant time period.
In the above embodiment, the timer may be provided in the form of software or in the form of a hardware circuit in the safety instrumented system.
In this embodiment, the fault-tolerant time period is taken as the timing time of the timer, so long as the change of the input signals of the main channel and/or the slave channel is detected, the timer starts to count, and in the timing process of the timer, the timer interrupts the current timing process and restarts the timing, i.e. the controller of the safety instrument system is always in the fault-tolerant selection mode under the condition that the input signals of the main channel and/or the slave channel change again; only in the complete timing process of the timer, after the timer finishes the timing process, under the condition that the input signals of the main channel and/or the slave channel are detected to be unchanged all the time, namely, under the condition that the input signals of the main channel and/or the slave channel are unchanged in the whole fault-tolerant time period, determining that the timing time of the timer reaches the timing time, exiting the fault-tolerant selection mode, and carrying out voting processing on the output signals of the two sampling channels according to preset voting logic to obtain the voting result of the safety instrument system.
In the above embodiment, the voting control method of the safety instrument system provided by the present application may be further applied to a safety instrument system including a plurality of sampling channels, for example, the safety instrument system may include three sampling channels, and then a first sampling channel of the three sampling channels is determined to be a master channel, a second sampling channel and a third sampling channel are determined to be slave channels, and in a fault tolerance period, an output signal of the master channel is determined to be a voting result; after the fault tolerance time period is passed, voting processing is carried out on sampling signals of the three sampling channels according to preset voting logic (for example, 1oo3 (three-out of 3, 1oo3 for short) voting logic or 2oo3 (two-out of 3, 2oo3 for short) voting logic), so as to obtain a voting result of the safety instrument system.
The present embodiment provides a voting control device of a safety instrumented system, which is applied to the safety instrumented system, the safety instrumented system includes two sampling channels, fig. 4 is a block diagram of the voting control device of the safety instrumented system according to an embodiment of the present application, as shown in fig. 4, the device includes: a judging module 40, configured to respectively judge a failure level of each sampling channel, and determine a master channel and a slave channel according to the failure level, where the failure level of the master channel is lower than the failure level of the slave channel; the voting module 41 is configured to detect whether the input signals of the main channel and the slave channel change, and enter a fault-tolerant selection mode when detecting that the input signals of the main channel and/or the slave channel change, where the fault-tolerant selection mode includes determining that the output signal of the main channel is a voting result of the safety instrument system in a preset fault-tolerant time period.
In some of these embodiments, the voting module 41 is further configured to detect whether the input signals of the master and slave channels, respectively, have changed during the fault-tolerant period; under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, entering a fault-tolerant selection mode, and updating the current time to the starting time of a fault-tolerant time period; in the event that no change in the input signals to the master and slave channels is detected, a fault tolerant selection mode is maintained.
In some embodiments, the voting module 41 is further configured to exit the fault-tolerant selection mode after the fault-tolerant period, and vote the output signals of the master channel and the slave channel according to a preset voting logic to obtain a voting result of the safety instrument system when detecting that the input signals of the master channel and the slave channel have not changed within the fault-tolerant period.
In some of these embodiments, the determination module 40 is further configured to determine the number of faults present for each sampling channel separately; determining that the sampling channels with the number of faults being less than that of the other sampling channel in the two sampling channels are of low fault level, and determining that the other sampling channel is of high fault level; and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
In some embodiments, the determining module 40 is further configured to determine, according to a preset master-slave logic, one of the two sampling channels as a master channel and the other sampling channel as a slave channel, if the number of faults of each sampling channel is the same.
In some of these embodiments, the voting module 41 is further configured to determine a timing time of a preset timer as a fault-tolerant period, the timer starting to time in the event that a change in the input signal of the primary channel and/or the secondary channel is detected; in the timing process of the timer, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, the timer interrupts the current timing process and restarts the timing; and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
In some of these embodiments, the voting module 41 is further configured to exit the fault-tolerant selection mode upon detecting that neither the input signals of the primary nor the secondary channels have changed within a fault-tolerant period of time after the timer has completed the timing process.
It should be noted that, specific examples in this embodiment may refer to examples described in the foregoing embodiments and alternative implementations, and this embodiment is not repeated herein.
The present embodiment also provides an electronic device, and fig. 5 is a schematic diagram of a hardware structure of the electronic device according to an embodiment of the present application, and as shown in fig. 5, the electronic device includes a memory 504 and a processor 502, where the memory 504 stores a computer program, and the processor 502 is configured to execute the computer program to perform steps in any one of the method embodiments.
In particular, the processor 502 may include a Central Processing Unit (CPU), or an application specific integrated circuit (Application Specific Integrated Circuit, abbreviated as ASIC), or may be configured as one or more integrated circuits that implement embodiments of the present application.
Memory 504 may include, among other things, mass storage for data or instructions. By way of example, and not limitation, memory 504 may comprise a Hard Disk Drive (HDD), floppy Disk Drive, solid state Drive (Solid State Drive, SSD), flash memory, optical Disk, magneto-optical Disk, tape, or universal serial bus (Universal Serial Bus, USB) Drive, or a combination of two or more of the foregoing. The memory 504 may include removable or non-removable (or fixed) media, where appropriate. The memory 504 may be internal or external to the voting control device of the safety instrumented system, where appropriate. In a particular embodiment, the memory 504 is a Non-Volatile (Non-Volatile) memory. In a particular embodiment, the Memory 504 includes Read-Only Memory (ROM) and random access Memory (Random Access Memory, RAM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (Programmable Read-Only Memory, abbreviated PROM), an erasable PROM (Erasable Programmable Read-Only Memory, abbreviated EPROM), an electrically erasable PROM (Electrically Erasable Programmable Read-Only Memory, abbreviated EEPROM), an electrically rewritable ROM (Electrically Alterable Read-Only Memory, abbreviated EAROM), or a FLASH Memory (FLASH), or a combination of two or more of these. The RAM may be Static Random-Access Memory (SRAM) or dynamic Random-Access Memory (Dynamic Random Access Memory DRAM), where the DRAM may be a fast page mode dynamic Random-Access Memory (Fast Page Mode Dynamic Random Access Memory FPMDRAM), extended data output dynamic Random-Access Memory (Extended Date Out Dynamic Random Access Memory EDODRAM), synchronous dynamic Random-Access Memory (Synchronous Dynamic Random-Access Memory SDRAM), or the like, as appropriate.
Memory 504 may be used to store or cache various data files that need to be processed and/or used for communication, as well as possible computer program instructions for execution by processor 502.
The processor 502 implements the voting control method of any of the safety instrumented systems of the above-described embodiments by reading and executing computer program instructions stored in the memory 504.
Optionally, the electronic apparatus may further include a transmission device 506 and an input/output device 508, where the transmission device 506 is connected to the processor 502 and the input/output device 508 is connected to the processor 502.
Alternatively, in this embodiment, the processor 502 may be configured to execute the following steps by a computer program:
s1, judging the fault level of each sampling channel respectively, and determining a main channel and a slave channel according to the fault level, wherein the fault level of the main channel is lower than that of the slave channel.
S2, detecting whether input signals of the main channel and the auxiliary channel change or not respectively, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that output signals of the main channel are voting results of a safety instrument system in a preset fault-tolerant time period.
It should be noted that, specific examples in this embodiment may refer to examples described in the foregoing embodiments and alternative implementations, and this embodiment is not repeated herein.
In addition, in combination with the voting control method of the safety instrumented system in the above embodiment, the embodiment of the application can be implemented by providing a storage medium. The storage medium has a computer program stored thereon; the computer program, when executed by a processor, implements the voting control method of any one of the safety instrumented systems of the above embodiments.
It should be understood by those skilled in the art that the technical features of the above embodiments may be combined in any manner, and for brevity, all of the possible combinations of the technical features of the above embodiments are not described, however, they should be considered as being within the scope of the description provided herein, as long as there is no contradiction between the combinations of the technical features.
The foregoing examples illustrate only a few embodiments of the application, which are described in greater detail and are not to be construed as limiting the scope of the application. It should be noted that it will be apparent to those skilled in the art that several variations and modifications can be made without departing from the spirit of the application, which are all within the scope of the application. Accordingly, the scope of the application should be assessed as that of the appended claims.
Claims (9)
1. A voting control method of a safety instrumented system, applied to a safety instrumented system, the safety instrumented system including two sampling channels, the method comprising:
judging the fault level of each sampling channel respectively, and determining a master channel and a slave channel according to the fault level, wherein the fault level of the master channel is lower than that of the slave channel;
detecting whether the input signals of the main channel and the auxiliary channel change or not respectively, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change is detected, wherein the fault-tolerant selection mode comprises the step of determining that the output signals of the main channel are voting results of the safety instrument system in a preset fault-tolerant time period, and the method specifically comprises the following steps:
determining the timing time of a preset timer as the fault-tolerant time period, and starting timing by the timer under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected;
in the timing process of the timer, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, the timer interrupts the current timing process and restarts timing;
and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
2. The method of voting control for a safety instrumented system of claim 1, the method further comprising:
respectively detecting whether the input signals of the main channel and the auxiliary channel change or not in the fault tolerance time period;
under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, entering the fault-tolerant selection mode, and updating the current time to the starting time of the fault-tolerant time period;
the fault tolerant selection mode is maintained in the event that no change in the input signals to the master and slave channels is detected.
3. The method of voting control for a safety instrumented system of claim 1, the method further comprising:
after the fault-tolerant time period, under the condition that the input signals of the main channel and the auxiliary channel are not changed in the fault-tolerant time period, the fault-tolerant selection mode is exited, and the output signals of the main channel and the auxiliary channel are subjected to voting processing according to preset voting logic, so that the voting result of the safety instrument system is obtained.
4. The voting control method of a safety instrumented system of claim 1, wherein determining a failure level of each of the sampling channels, and determining a master channel and a slave channel according to the failure level, respectively, comprises:
judging the number of faults existing in each sampling channel respectively;
determining that the sampling channels with the number of faults being less than that of the other sampling channel in the two sampling channels are of low fault level, and determining that the other sampling channel is of high fault level;
and determining the sampling channel with the low fault level as a master channel, and determining the other sampling channel with the high fault level as a slave channel.
5. The method of voting control for a safety instrumented system of claim 4, the method further comprising:
and under the condition that the fault number of each sampling channel is the same, determining one of the two sampling channels as a main channel and the other sampling channel as a slave channel according to a preset master-slave logic.
6. The method of voting control for a safety instrumented system of claim 1, the method further comprising:
and after the timer finishes the timing process, the fault-tolerant selection mode is exited under the condition that the input signals of the main channel and the auxiliary channel are detected to be unchanged within the fault-tolerant time period.
7. A voting control device for a safety instrumented system, the safety instrumented system comprising two sampling channels, the device comprising:
the judging module is used for judging the fault level of each sampling channel respectively and determining a main channel and a slave channel according to the fault level, wherein the fault level of the main channel is lower than that of the slave channel;
the voting module is used for respectively detecting whether the input signals of the main channel and the auxiliary channel change, and entering a fault-tolerant selection mode under the condition that the input signals of the main channel and/or the auxiliary channel change are detected, wherein the fault-tolerant selection mode comprises the steps of determining that the output signals of the main channel are voting results of the safety instrument system in a preset fault-tolerant time period, and determining that the output signals of the main channel are voting results of the safety instrument system in the preset fault-tolerant time period, wherein the voting results of the safety instrument system comprise the following steps of:
determining the timing time of a preset timer as the fault-tolerant time period, and starting timing by the timer under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected;
in the timing process of the timer, under the condition that the change of the input signals of the main channel and/or the auxiliary channel is detected, the timer interrupts the current timing process and restarts timing;
and under the condition that the timing time of the timer does not reach the timing time, determining the output signal of the main channel as a voting result of the safety instrument system.
8. An electronic device comprising a memory and a processor, wherein the memory has stored therein a computer program, the processor being arranged to run the computer program to perform the voting control method of the safety instrumented system of any one of claims 1 to 6.
9. A storage medium having a computer program stored therein, wherein the computer program, when executed by a processor, implements the voting control method of the safety instrumented system of any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110866401.5A CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110866401.5A CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113655707A CN113655707A (en) | 2021-11-16 |
| CN113655707B true CN113655707B (en) | 2023-12-12 |
Family
ID=78479014
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110866401.5A Active CN113655707B (en) | 2021-07-29 | 2021-07-29 | Voting control method and device of safety instrument system and electronic device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113655707B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2024094140A1 (en) * | 2022-11-04 | 2024-05-10 | 中国石油化工股份有限公司 | Remote measurement and control terminal, and safety control system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB8922773D0 (en) * | 1989-10-10 | 1989-11-22 | Univ Essex | Voters for fault-tolerant computer systems |
| JPH05197582A (en) * | 1991-05-06 | 1993-08-06 | Stratus Computer Inc | Fault tolerant processor having majority decision system, whose dynamic reconstitution is possible |
| CN105301955A (en) * | 2015-10-19 | 2016-02-03 | 中国航空无线电电子研究所 | System-level reconstruction management application software master-slave switching method |
| CN111654361A (en) * | 2020-04-16 | 2020-09-11 | 株洲航飞翔数字系统有限责任公司 | Method and system for dual-channel synchronization |
| CN112445127A (en) * | 2019-08-27 | 2021-03-05 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
-
2021
- 2021-07-29 CN CN202110866401.5A patent/CN113655707B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB8922773D0 (en) * | 1989-10-10 | 1989-11-22 | Univ Essex | Voters for fault-tolerant computer systems |
| JPH05197582A (en) * | 1991-05-06 | 1993-08-06 | Stratus Computer Inc | Fault tolerant processor having majority decision system, whose dynamic reconstitution is possible |
| CN105301955A (en) * | 2015-10-19 | 2016-02-03 | 中国航空无线电电子研究所 | System-level reconstruction management application software master-slave switching method |
| CN112445127A (en) * | 2019-08-27 | 2021-03-05 | 北京东土科技股份有限公司 | Redundancy control method of master controller |
| CN111654361A (en) * | 2020-04-16 | 2020-09-11 | 株洲航飞翔数字系统有限责任公司 | Method and system for dual-channel synchronization |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113655707A (en) | 2021-11-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8448042B2 (en) | Data processing device and a method for error detection and error correction | |
| CN113655707B (en) | Voting control method and device of safety instrument system and electronic device | |
| CN111858122A (en) | Fault detection method, device, equipment and storage medium of storage link | |
| CN104320308A (en) | Method and device for detecting anomalies of server | |
| CN113590429A (en) | Server fault diagnosis method and device and electronic equipment | |
| US9170871B2 (en) | Data polling method and digital instrumentation and control system for atomic power plant using the method | |
| CN116820821A (en) | Disk failure detection method, apparatus, electronic device and computer readable storage medium | |
| WO2016063816A1 (en) | Device and method for detecting abnormality pre-indications in a computer system | |
| CN111209129A (en) | Memory optimization method and device based on AMD platform | |
| JP2013065220A (en) | Information processor | |
| JP5627414B2 (en) | Action log collection system and program | |
| CN113296997A (en) | Task monitoring method and device based on watchdog | |
| JP2020077171A (en) | Electronic control device | |
| CN114294416B (en) | Clutch sensor fault diagnosis method, device, equipment and storage medium | |
| CN110838314A (en) | Method and device for reinforcing stored data | |
| CN115236497A (en) | Method for diagnosing clock and timer of SOC (System on chip) | |
| CN110309158B (en) | Method and device for judging rolling abnormality of log file and readable medium | |
| EP3913634A1 (en) | Memory testing by reading and verifying again memory locations after read access | |
| CN115374136A (en) | Test data verification method, device, equipment and storage medium | |
| CN112287298A (en) | Method and device for acquiring reliability grade of voltage monitoring device | |
| CN116224866A (en) | Excitation control acquisition board signal acquisition abnormity self-healing method and device | |
| JP5449484B2 (en) | Electronic control device and application execution interval monitoring method applied to electronic control device | |
| CN115269446A (en) | Method and device for isolating memory | |
| CN116996378A (en) | Parameter configuration method and device of cluster system, electronic equipment and storage medium | |
| CN115167315A (en) | Control method and device for generation process based on control diagram |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |