CN116184895A - Redundant unit control system, method, device, computer equipment and storage medium - Google Patents
Redundant unit control system, method, device, computer equipment and storage medium Download PDFInfo
- Publication number
- CN116184895A CN116184895A CN202310124116.5A CN202310124116A CN116184895A CN 116184895 A CN116184895 A CN 116184895A CN 202310124116 A CN202310124116 A CN 202310124116A CN 116184895 A CN116184895 A CN 116184895A
- Authority
- CN
- China
- Prior art keywords
- operation level
- unit
- level
- target
- system unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0421—Multiprocessor system
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24182—Redundancy
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Hardware Redundancy (AREA)
Abstract
The application relates to a redundant unit control system, a method, a device, a computer device and a storage medium. The system comprises an arbitration unit and a plurality of system units, wherein any system unit has a corresponding operation level, and the system comprises: the system unit is used for periodically carrying out system fault detection to obtain a corresponding fault detection result, and sending fault information to the arbitration unit as a fault system unit under the condition that the fault detection result represents that the system unit has faults; the arbitration unit is used for taking a first operation level corresponding to the fault system unit as a first target operation level under the condition that fault information sent by the fault system unit is received, determining a target system unit from the system units corresponding to the second operation level, upgrading the operation level of the target system unit into the first target operation level, and sending first operation level updating information to the target system unit. The system can reduce the maintenance cost of the system.
Description
Technical Field
The present disclosure relates to the field of railway signal control technologies, and in particular, to a redundant unit control system, a method, an apparatus, a computer device, and a storage medium.
Background
The railway is the main artery of national economy, and the railway signal control system is responsible for guaranteeing the running safety and the transportation efficiency, so that extremely high requirements are put on the usability of the system. The railway transportation service of China is busy, the line occupancy rate is high, and the failure of the ground signal control system can directly lead to the unavailability of the railway line in jurisdiction, so the availability requirement on the ground signal control system is higher.
Currently, the railway signal ground control system in China adopts a two-by-two-out-of-two architecture as a main architecture mode of equipment. The two-by-two architecture is to simultaneously set a main system and a hot standby system, wherein each system is internally provided with two CPUs, the two CPUs execute the same set of program to generate two outputs, and the system confirms that the two outputs are the same and then transmits the outputs outwards, so that the system can generate normal outputs as long as one system can work normally.
However, the two-by-two architecture requires maintenance personnel to achieve a sufficiently small fault recovery time, otherwise the second system will be unavailable when the second system fails, and thus the maintenance period, spare part storage, and the speed of personnel arriving at the site for maintenance are also high, resulting in increased maintenance costs.
Disclosure of Invention
In view of the foregoing, it is desirable to provide a redundant unit control system, method, apparatus, computer device, and storage medium.
In a first aspect, the present application provides a redundant unit control system. The system comprises an arbitration unit and a plurality of system units, wherein any one of the system units has a corresponding operation level, and the system unit comprises:
the system unit is used for periodically performing system fault detection to obtain a corresponding fault detection result, and sending fault information to the arbitration unit as a fault system unit under the condition that the fault detection result represents that the system unit has faults;
the arbitration unit is configured to, when fault information sent by the fault system unit is received, determine a target system unit from a system unit corresponding to a second operation level with the first operation level corresponding to the fault system unit as a first target operation level, upgrade the operation level of the target system unit to the first target operation level, and send first operation level update information to the target system unit, where the first operation level update information is used to indicate that the target system unit has been upgraded to the first target operation level, and the second operation level is a level next to the first target operation level.
In one embodiment, the arbitration unit is further configured to, when receiving the fault information sent by the fault system unit, downgrade the operation level of the fault system unit to an offline level, and send second operation level update information to the fault system unit, where the second operation level update information is used to indicate that the fault system unit has been downgraded to the offline level.
In one embodiment, the system unit is further configured to obtain a second target operation level from the operation level update information after receiving the operation level update information sent by the arbitration unit, and adjust an operation state of the system unit to an operation state corresponding to the second target operation level.
In one embodiment, the arbitration unit is further configured to, after upgrading the operation level of the target system unit to the first target operation level, repeatedly perform the steps of determining a target system unit from the system units corresponding to the second operation level, upgrading the operation level of the target system unit to the first target operation level, and sending first operation level update information to the target system unit, until the second operation level does not exist or the number of system units corresponding to the second operation level is 0.
In one embodiment, the arbitration unit is further configured to, when receiving the enabling information sent by the system unit to be enabled, determine a third target operation level corresponding to the system unit to be enabled according to the number of the system units corresponding to the lowest operation level, set the operation level of the system unit to be enabled to the third target operation level, and send third operation level update information to the system unit to be enabled, where the third operation level update information is used to indicate that the system unit to be enabled has been upgraded to the third target operation level,
the lowest operation level is the operation level with the lowest level in the operation levels corresponding to the currently started system units.
In one embodiment, the operation levels are ordered according to the order from high to low, and the operation levels comprise a main operation level, a first standby level, a second standby level and a third standby level, wherein the operation states corresponding to different operation levels are different, the operation states are used for representing operation synchronization states of main operation units in the system units, and the operation synchronization states are positively correlated with the level of the operation levels.
In one embodiment, the arbitration unit is further configured to, when the lowest operation level is the third standby level, use the third standby level as the operation level corresponding to the system unit to be enabled; or alternatively, the process may be performed,
determining a current number of the system units in the lowest run level if the lowest run level is not the third standby level;
when the current number is greater than or equal to the number of preset units corresponding to the lowest operation level, an operation level positioned at a level next to the lowest operation level is used as the operation level where the system unit to be started is positioned; or alternatively, the process may be performed,
and under the condition that the current number is smaller than the preset unit number corresponding to the lowest operation level, taking the lowest operation level as the operation level corresponding to the system unit to be started.
In a second aspect, the present application further provides a redundant unit control method. The method is applied to an arbitration unit in a redundant unit control system, the system further comprises a plurality of system units, any one of the system units has a corresponding operation level, and the method comprises:
Under the condition that fault information sent by a fault system unit is received, taking a first operation level corresponding to the fault system unit as a target operation level, wherein the fault system unit is the system unit with the fault;
determining a target system unit from system units corresponding to a second operation level, and upgrading the operation level of the target system unit to the target operation level, wherein the second operation level is the next level of the target operation level;
and sending operation level updating information to the target system unit, wherein the operation level updating information is used for indicating that the target system unit has been upgraded to the target operation level.
In a third aspect, the present application further provides a redundant unit control method. The method is applied to a system unit in a redundant unit control system, the system comprises an arbitration unit and a plurality of system units, any one of the system units has a corresponding operation level, and the method comprises the following steps:
periodically performing system fault detection to obtain a corresponding fault detection result;
under the condition that the fault detection result represents that the system unit has a fault, sending fault information to the arbitration unit as a fault system unit, so that the arbitration unit takes a first operation level corresponding to the fault system unit as a target operation level after receiving the fault information, determines a target system unit from the system units corresponding to a second operation level, upgrades the operation level of the target system unit into the target operation level, and sends operation level update information to the target system unit;
The operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
In a fourth aspect, the present application further provides a redundant unit control apparatus. The apparatus is applied to an arbitration unit in a redundant unit control system, the system further comprising a plurality of system units, any of the system units having a corresponding operation level, the apparatus comprising:
the processing module is used for taking a first operation level corresponding to a fault system unit as a target operation level under the condition of receiving fault information sent by the fault system unit, wherein the fault system unit is the system unit with the fault;
the upgrading module is used for determining a target system unit from system units corresponding to a second operation level, upgrading the operation level of the target system unit into the target operation level, and the second operation level is the next level of the target operation level;
and the sending module is used for sending operation level updating information to the target system unit, wherein the operation level updating information is used for indicating that the target system unit has been upgraded to the target operation level.
In a fifth aspect, the present application further provides a redundant unit control apparatus. The device is applied to a system unit in a redundant unit control system, the system comprises an arbitration unit and a plurality of system units, any one of the system units has a corresponding operation level, and the device comprises:
the detection module is used for periodically detecting system faults and obtaining corresponding fault detection results;
the sending module is used for sending fault information to the arbitration unit as a fault system unit under the condition that the fault detection result represents that the system unit has a fault, so that the arbitration unit takes a first operation level corresponding to the fault system unit as a target operation level after receiving the fault information, determines a target system unit from the system units corresponding to a second operation level, upgrades the operation level of the target system unit into the target operation level, and sends operation level updating information to the target system unit;
the operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
In a sixth aspect, the present application also provides a computer device. The computer device comprises a memory storing a computer program and a processor implementing any of the methods above when executing the computer program.
In a seventh aspect, the present application also provides a computer-readable storage medium. The computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements any of the methods above.
In an eighth aspect, the present application also provides a computer program product. The computer program product comprising a computer program which, when executed by a processor, implements any of the methods above.
According to the redundant unit control system, the redundant unit control method, the redundant unit control device, the redundant unit control computer device and the redundant unit control storage medium, through the arrangement of the plurality of system units, the fact that the main unit always has enough redundant units can be ensured, maintenance does not need to be initiated immediately when the main unit breaks down and one of the redundant units is updated to the main unit, and maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
Drawings
FIG. 1 is a schematic diagram of a redundant unit control system in one embodiment;
FIG. 2 is a schematic diagram of system unit upgrades and downgrades in one embodiment;
FIG. 3 is a schematic diagram of determining a run level after a power-up of a cell to be enabled in one embodiment;
FIG. 4 is a flow chart of a redundant unit control method in one embodiment;
FIG. 5 is a flow chart of a redundant unit control method in one embodiment;
FIG. 6 is a schematic diagram of a railway ground signal control system in one embodiment;
FIG. 7 is a block diagram of a redundant unit control apparatus in one embodiment;
FIG. 8 is a block diagram of a redundant unit control apparatus in one embodiment;
fig. 9 is an internal structural diagram of a computer device in one embodiment.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the present application.
In one embodiment, as shown in fig. 1, a redundant unit control system is provided, where the redundant unit control system includes an arbitration unit and a plurality of system units, and any system unit has a corresponding operation hierarchy, where the system units are configured to periodically perform system fault detection to obtain a corresponding fault detection result, and send fault information to the arbitration unit as a fault system unit when the fault detection result indicates that the system unit has a fault. The arbitration unit is used for taking a first operation level corresponding to the fault system unit as a first target operation level under the condition that fault information sent by the fault system unit is received, determining a target system unit from system units corresponding to a second operation level, upgrading the operation level of the target system unit into the first target operation level, and sending first operation level updating information to the target system unit, wherein the first operation level updating information is used for indicating that the target system unit is upgraded to the first target operation level, and the second operation level is the next level of the first target operation level.
In this embodiment of the present application, a system unit refers to a unit that actually performs operation output, where multiple system units are respectively located in different operation levels, where the operation levels represent operation states of the system units, and one or multiple system units may be in each operation level. The higher the operation level corresponding to the other system units (redundant units) except the main unit, the higher the synchronism with the main unit. For example, the redundant unit at the highest operation level may perform a complete synchronization operation with the master unit, and the redundant unit at the lowest operation level may be powered on only and not perform any synchronization operation with the master unit.
The arbitration unit is recorded with each operation level and the system unit corresponding to each operation level and is responsible for adjusting the operation level of each system unit according to the requirement. The number of operating levels and the number of system units can be set by those skilled in the art according to actual needs. Taking the ground signal control system applied to the railway system as an example, different numbers of operation levels and system units can be preset for the ground signal control systems arranged in different areas, for example, for the areas which are convenient for maintenance personnel to reach, the number of the operation levels and the number of the system units of the ground signal control system can be set relatively less, so that the setting cost of the system units is reduced; for areas (such as hub stations) where maintenance personnel cannot conveniently reach (such as remote unmanned stations) or where the influence of the system units is large after faults occur, the number of operation levels of the ground signal control system and the number of the system units can be set relatively large, so that the maintenance period is prolonged and the reliability of the system is improved.
The system unit can periodically detect the system fault of the system unit to judge whether the system unit is faulty or not. In the case where a system unit fails, the system unit may send failure information (hereinafter, the failed system unit will be referred to as a failed system unit) to the arbitration unit to notify the arbitration unit itself that a failure has occurred. After receiving the fault information, the arbitration unit may take the first operation level corresponding to the fault system unit as an operation level to be filled (i.e., a first target operation level), and select the target system unit from the operation levels of the next level of the first operation level (i.e., a second operation level) to fill into the first target operation level. If there are multiple system units in the second operation level, the target system unit may be any system unit therein. Because the running state of the system units in the second running level is the closest to the running state of the system units in the first target running level, the target system units are selected from the second running level to fill the first target running level, so that the time required by the target system units to change the running state can be reduced, the running state updating efficiency is improved, and the requirements of the system for providing continuous service functions to the outside, such as relay no malfunction, communication no flashing, indicator lamp no flashing and the like, are met.
The arbitration unit may also send first operation level update information to the target system unit to inform the target system unit that the system level of the target system unit has changed to the first target operation level. After receiving the first operation level updating information, the target system unit can adjust its own operation state to the operation state corresponding to the first target operation level.
According to the redundant unit control system provided by the embodiment of the application, the plurality of system units are arranged, so that the main unit can always have enough redundant units, and maintenance is not required to be initiated immediately when the main unit breaks down and one of the redundant units is updated to the main unit, and the maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
In one embodiment, the arbitration unit is further configured to, upon receiving the failure information sent by the failed system unit, downgrade the operation level of the failed system unit to an offline level, and send second operation level update information to the failed system unit, where the second operation level update information is used to indicate that the failed system unit has been downgraded to the offline level.
In this embodiment, the offline level is a level independent of other operation levels, the offline level does not participate in the ordering of the operation levels, and the system unit corresponding to the offline level does not perform any computation and does not generate any output. The arbitration unit can update the fault system unit to the offline level under the condition of receiving the fault information, and send second operation level update information to the fault system unit so as to inform the fault system unit that the fault system unit is degraded to the offline level, so that the fault system unit correspondingly adjusts the operation state.
According to the redundant unit control system provided by the embodiment of the application, the operation level of the fault system unit can be degraded to be an offline level, so that the fault system unit stops operation and output, and the operation cost of the system is reduced.
In one embodiment, the system unit is further configured to obtain a second target operation level from the operation level update information after receiving the operation level update information sent by the arbitration unit, and adjust an operation state of the system unit to an operation state corresponding to the second target operation level.
In this embodiment of the present application, after receiving the operation level update information, the system unit may obtain, from the operation level update information, a second target operation level to which the system unit needs to be adjusted, and correspondingly adjust an operation state of the system unit according to an operation state corresponding to the second target operation level. For example, if the system unit is a faulty system unit and the second target operation level is an offline level, the system unit needs to stop performing the operation and output; if the system unit is located at the hot standby level (completely synchronous with the active unit), and the second target operation level is the active level (the operation level where the active unit is located), the system unit does not need to adjust the operation state; when the second target operation level is other operation levels, the system unit can correspondingly enable or disable certain services to complete the adjustment of the operation state.
According to the redundant unit control system provided by the embodiment of the application, the running state of the system unit can be adjusted according to the running level updating information, and because the system unit is updated or degraded as required when the running level updating information is received, each redundant unit does not need to be kept in a hot standby state, the system unit exists in each level, and the running cost of the system is reduced on the basis of filling the running level of the previous layer rapidly.
In one embodiment, the arbitration unit is further configured to repeatedly execute the steps of determining the target system unit from the system units corresponding to the second operation level, upgrading the operation level of the target system unit to the first target operation level, and sending the first operation level update information to the target system unit, after upgrading the operation level of the target system unit to the first target operation level, with the second operation level being the first target operation level, until the second operation level does not exist or the number of system units corresponding to the second operation level is 0.
In this embodiment, after the target system unit is upgraded into the first target operation level, the second operation level will become the operation level to be padded. And selecting a system unit from the next operation level of the second operation level to fill the second operation level, and further selecting the system unit from the next operation level of the second operation level to fill … … the next operation level of the second operation level, and repeatedly executing the process until the lowest operation level in the system is reached or no system unit exists in the next operation level.
The above-described process is described below with specific examples. Referring to fig. 2, four levels of a main level, a hot level, a warm level, and a cold level coexist in the system, wherein 1 system unit (main unit) exists in the main level, 1 system unit exists in each of the hot level and the warm level, and 3 system units exist in the cold level.
When the main unit fails, the main unit sends failure information to the arbitration unit, the arbitration unit downgrades the main unit into an offline level, and sends operation level updating information to the main unit.
At this time, the active level becomes an operation level to be filled (first target operation level), the arbitration unit selects the standby unit 1 from the operation level next to the first target operation level, that is, the hot standby level, upgrades the standby unit 1 into the active level, and sends operation level update information to the standby unit 1.
At this time, the hot standby level becomes an operation level to be filled (first target operation level), the arbitration unit selects the standby unit 2 from the operation level next to the first target operation level, that is, the hot standby level, upgrades the standby unit 2 into the hot standby level, and sends operation level update information to the standby unit 2.
At this time, the warm standby level becomes an operation level to be filled (first target operation level), the arbitration unit selects the standby unit 3 (may also be the standby unit 4 or the standby unit 5) from the operation level next to the first target operation level, that is, the cold standby level, upgrades the standby unit 3 into the warm standby level, and sends operation level update information to the standby unit 3.
The above-described cycling process may be stopped because the cold standby level is the lowest operating level in the system. The hierarchy of the system units after the cycle is completed is shown in fig. 2.
According to the redundant unit control system provided by the embodiment of the application, the operation of filling each operation level in the system in a circulating manner can be performed so as to fill the operation level with the higher level preferentially, and the operation cost of the system is reduced on the basis that the system units exist in each level and the operation level of the upper layer can be filled rapidly.
In one embodiment, the arbitration unit is further configured to determine, when receiving the enabling information sent by the system unit to be enabled, a third target operation level corresponding to the system unit to be enabled according to the number of system units corresponding to the lowest operation level, set the operation level of the system unit to be enabled to be the third target operation level, and send third operation level update information to the system unit to be enabled, where the third operation level update information is used to indicate that the system unit to be enabled has been upgraded to the third target operation level, and the lowest operation level is an operation level with the lowest level in operation levels corresponding to the system unit that has been enabled currently.
In this embodiment, when the system unit to be started is powered on, the start-up information may be sent to the arbitration unit, where the start-up information is used to notify the arbitration unit that the system unit to be started is started. Since the arbitration unit determines that the system unit fills the operation level from the next operation level of the operation level when a gap occurs in the operation level higher in the level, the operation level higher in the level must be filled. Therefore, after receiving the enabling information, the arbitration unit can judge whether the system unit to be enabled is specifically allocated to the lowest operation level or the next operation level of the lowest operation level according to the current lowest operation level and the number of the system units in the lowest operation level. For example, when the current lowest run level is also filled, the arbitration unit may allocate the system unit to be enabled into the next run level of the lowest run level. The arbitration unit may allocate the system units to be enabled into the lowest run level when the current lowest run level is not filled.
The redundant unit control system provided by the embodiment of the application can determine which system level the to-be-enabled unit needs to be allocated to according to the number of the system units in the lowest operation level after receiving the enabling information sent by the to-be-enabled system unit. By providing multiple operation levels and controlling the number of system elements in each operation level, the operation cost of the system can be reduced.
In one embodiment, the operation levels are ordered according to the order from high to low, and the operation levels comprise a main operation level, a first standby level, a second standby level and a third standby level, wherein the operation states corresponding to the different operation levels are different, the operation states are used for representing operation synchronous states of the main operation units in the system units, and the operation synchronous states are positively correlated with the level of the operation levels.
In this embodiment of the present application, four operation levels may be set, where the active level is the operation level with the highest level, and the system unit is the active unit, that is, the unit that performs complete operation and output. The next level of the active level is a first standby level (also referred to as a hot standby level) in which system units and active units perform fully synchronized operations but do not generate output. The next level of the first standby level is a second standby level (also referred to as warm standby level), in which the system units and the active units perform synchronization operations on a portion of the critical services and do not generate output. The next level of the second standby level is a third standby level (also referred to as a cold standby level), and the system units in the third standby level are only powered on and do not perform synchronous operation with the main unit.
The system units in the first standby level, the second standby level and the third standby level can have different synchronous states with the main unit, so long as the operation synchronous state is positively correlated with the level of the operation level, the system units in the operation level can adjust the operation state of the system units as soon as possible when the system units are upgraded, and the system units in the operation level can be upgraded to the upper operation level.
It should be noted that the above division into four operation levels is only an example of the embodiment of the present application, and in fact, the division of the operation levels into the levels with finer granularity may be performed according to the operation and maintenance requirements, and the embodiment of the present application does not specifically limit the manner and number of the division of the operation levels.
According to the redundant unit control system provided by the embodiment of the application, four operation levels can be set, and system units in each operation level have different operation synchronization states, and the operation synchronization states are positively correlated with the level of the operation level. Because a plurality of operation levels are arranged, and the operation states of the system units in each operation level are different, the operation cost of the system can be reduced on the basis of ensuring that the system units exist in each level and filling the operation level of the upper layer rapidly.
In one embodiment, the arbitration unit is further configured to, in a case where the lowest operation level is a third standby level, use the third standby level as the operation level corresponding to the system unit to be enabled. Alternatively, in the event that the lowest operational level is not the third alternate level, determining the current number of system units in the lowest operational level: and under the condition that the current number is greater than or equal to the number of the preset units corresponding to the lowest operation level, the operation level positioned at the next level of the lowest operation level is used as the operation level where the system unit to be started is positioned, or under the condition that the current number is less than the number of the preset units corresponding to the lowest operation level, the lowest operation level is used as the operation level corresponding to the system unit to be started.
In this embodiment, referring to fig. 3, when receiving the enabling information of the system unit to be enabled, the arbitration unit determines an operation level corresponding to the system unit to be enabled according to the current lowest operation level. In fig. 3, the operation levels are, from high to low, the active level, the hot standby level, the warm standby level, and the cold standby level, respectively.
In the case where the current lowest operation level is a cold standby level, since the cold standby level is the operation level with the lowest level among the operation levels, the upper limit of the number of system units is not set, the operation level corresponding to the system unit to be enabled may be set as the cold standby level.
In the case that the current lowest operation level is not the cold standby level, the warm standby level, the hot standby level and the active level all have the corresponding upper limit of the number of system units (preset unit number), so that the operation level corresponding to the system unit to be started can be determined according to whether the lowest operation level is filled.
For example, if the lowest operation level is a hot standby level and the preset number of units in the hot standby level is 2 and the current number of system units in the hot standby level is 1, the lowest operation level is not filled. The arbitration unit may set the corresponding run level of the system unit to be enabled to a hot standby level.
Whereas if in the above example the current number of system units in the hot standby level is 2, the lowest operating level has been filled. The arbitration unit may take the next operation level (warm standby level) of the warm standby level as the operation level corresponding to the system unit to be enabled.
The redundant unit control system provided by the embodiment of the application can determine which system level the to-be-enabled unit needs to be allocated to according to the number of the system units in the lowest operation level after receiving the enabling information sent by the to-be-enabled system unit. By providing multiple operation levels and controlling the number of system elements in each operation level, the operation cost of the system can be reduced.
In one embodiment, as shown in fig. 4, there is provided a method for controlling a redundant unit, where the method is applied to an arbitration unit in a redundant unit control system, and the redundant unit control system further includes a plurality of system units, any of which has a corresponding operation level, and in this embodiment, the method includes the following steps:
in step 402, when the fault information sent by the faulty system unit is received, the first operation level corresponding to the faulty system unit is taken as the target operation level, and the faulty system unit is the system unit that detects the fault.
In step 406, operation level update information is sent to the target system unit, where the operation level update information is used to indicate that the target system unit has been upgraded to the target operation level.
In this embodiment of the present application, the arbitration unit may determine a system unit (a faulty system unit) that sends the fault information when the fault information is received, and use an operation level corresponding to the faulty system unit as a target operation level to be filled. The arbitration unit may further determine a target system unit from a next operation level (second operation level) of the target operation level, upgrade the target system unit into the target operation level, and send operation level update information to the target system unit to indicate that the target system unit has been upgraded to the target operation level, so that the target system unit adjusts the operation state to an operation state corresponding to the target operation level.
The arbitration unit may further downgrade the operation hierarchy of the faulty system unit to an offline hierarchy, and fill up the first operation hierarchy corresponding to the faulty system unit after downgrade the operation hierarchy of the faulty system unit. The specific steps of downgrading the operation level of the faulty system unit and filling the first operation level may be referred to the related description of the foregoing embodiments, which are not repeated herein.
The arbitration unit may further determine an operation level corresponding to the unit to be enabled when receiving the enabling information sent by the unit to be enabled. The manner in which the operation level of the unit to be enabled is determined can be found in the related description of the foregoing embodiments, which are not described herein.
According to the redundant unit control method, by arranging the plurality of system units, the main unit can always have enough redundant units, and maintenance is not required to be initiated immediately when the main unit fails and one of the redundant units is updated to the main unit, so that maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
In one embodiment, as shown in fig. 5, a method for controlling a redundant unit is provided, where the method is applied to a system unit in a redundant unit control system, and the redundant unit control system includes an arbitration unit and a plurality of system units, and any system unit has a corresponding operation level, and in this embodiment, the method includes the following steps:
and step 502, periodically performing system fault detection to obtain a corresponding fault detection result.
the operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
In the embodiment of the application, the system unit periodically performs fault detection on the system unit to obtain a corresponding fault detection result. If the fault detection result indicates that the system unit does not have a fault, the next period of fault detection is started, and if the fault detection result indicates that the system unit has a fault, fault information can be sent to the arbitration unit as the fault system unit so as to inform the arbitration unit of the fault. The method for upgrading the target system unit after the arbitration unit receives the fault information may refer to the related description in the foregoing embodiments, which are not described herein.
The system unit may send the enabling information to the arbitration unit when it is powered on (i.e. when it is to be enabled), and adjust its own operation state according to the operation level determined by the arbitration unit. The manner in which the system unit sends the enabling information and adjusts the running state according to the running level may refer to the related description of the foregoing embodiments, which are not described herein.
According to the redundant unit control method, by arranging the plurality of system units, the main unit can always have enough redundant units, and maintenance is not required to be initiated immediately when the main unit fails and one of the redundant units is updated to the main unit, so that maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
In order for those skilled in the art to better understand the embodiments of the present application, the embodiments of the present application are described below by way of specific examples.
In this embodiment of the present application, the redundant unit control system may be applied to a ground signal control system in a railway system, where the ground signal control system generally includes a master control unit, a switching value interface unit, and a traffic interface unit, where each set of units may be handled as an independent redundant unit control system, and referring to fig. 6, the ground signal control system may include i master control units, j switching value interface units, and k traffic interface units, where i master control units may form a redundant unit control system, j switching value interface units may form a redundant unit control system, and k traffic interface units may also form a redundant unit control system. In addition, the number of the power buses, the number of the ring buses and the like in the system can be also multiple (n and m in fig. 6 respectively), so that the power buses and the ring buses can have enough redundancy.
And a plurality of CPUs can be arranged in each system unit of the redundant unit control system so as to compare the output results of the CPUs and ensure the output safety of the system units. For example, the safety in operation can be ensured by applying a combined type fault safety, a reactive type fault safety, an intrinsic fault safety and the like in the system unit, and the safety in the development process can also be ensured by applying a SIL 4-level safety development flow in the development process.
Each system unit has a corresponding operation level, and periodic system fault detection is performed. The cycle length of system fault detection may also be different for system units located at different levels of operation. For example, the higher the system unit operation level, the shorter the period of fault detection may be. For the cold standby level with the lowest level, the system units can perform fault detection only when the power is turned on and the system units are upgraded to the warm standby level, and the rest time does not perform periodic system fault detection.
In the ground signal control system, a separate arbitration unit may not be provided, and arbitration of each set of units is performed by other units. For example, for a redundant unit control system composed of a master unit, the arbitration unit may be a switching value interface unit (or a traffic interface unit if there is no switching value interface unit); for a redundant unit control system consisting of a switching value interface unit and a traffic interface unit, the arbitration unit may be a master control unit.
The redundant unit control system should have enough independence between each system unit, for example, each system unit uses independent isolation power supply modules, the electric gap and material between the entities of each system unit meet the requirement of enhanced insulation, the communication interface between the entities of each system unit is added with isolation devices, electromagnetic radiation influence between shielding and grounding prevention is added, and the like, so as to ensure that other system units are not influenced when one system unit fails.
It should be understood that, although the steps in the flowcharts related to the embodiments described above are sequentially shown as indicated by arrows, these steps are not necessarily sequentially performed in the order indicated by the arrows. The steps are not strictly limited to the order of execution unless explicitly recited herein, and the steps may be executed in other orders. Moreover, at least some of the steps in the flowcharts described in the above embodiments may include a plurality of steps or a plurality of stages, which are not necessarily performed at the same time, but may be performed at different times, and the order of the steps or stages is not necessarily performed sequentially, but may be performed alternately or alternately with at least some of the other steps or stages.
Based on the same inventive concept, the embodiment of the application also provides a redundant unit control device for realizing the above-mentioned related redundant unit control method. The implementation of the solution provided by the device is similar to the implementation described in the above method, so the specific limitation in the embodiments of the redundant unit control device or devices provided below may be referred to the limitation of the redundant unit control method hereinabove, and will not be described herein.
In one embodiment, as shown in fig. 7, there is provided a redundant unit control apparatus 700 applied to an arbitration unit in a redundant unit control system further including a plurality of system units, any of the system units having a corresponding operation level, the apparatus comprising: a processing module 702, an upgrading module 704, a sending module 706, wherein:
the processing module 702 is configured to, when fault information sent by a faulty system unit is received, take a first operation level corresponding to the faulty system unit as a target operation level, where the faulty system unit is the system unit that detects a fault;
an upgrade module 704, configured to determine a target system unit from system units corresponding to a second operation level, and upgrade the operation level of the target system unit to the target operation level, where the second operation level is a level next to the target operation level;
and a sending module 706, configured to send operation level update information to the target system unit, where the operation level update information is used to indicate that the target system unit has been upgraded to the target operation level.
According to the redundant unit control device provided by the embodiment of the application, the plurality of system units are arranged, so that the main unit can always have enough redundant units, and maintenance is not required to be initiated immediately when the main unit breaks down and one of the redundant units is updated to the main unit, and the maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
In one embodiment, as shown in fig. 7, there is provided a redundant unit control apparatus 800 applied to a system unit in a redundant unit control system, the system including an arbitration unit and a plurality of the system units, any of the system units having a corresponding operation level, the apparatus comprising: a detection module 802, a sending module 804, wherein:
the detection module 802 is configured to periodically perform system fault detection to obtain a corresponding fault detection result;
a sending module 804, configured to send, as a faulty system unit, fault information to the arbitration unit when the fault detection result indicates that the system unit has a fault, so that the arbitration unit uses a first operation level corresponding to the faulty system unit as a target operation level after receiving the fault information, determines a target system unit from the system units corresponding to the second operation level, upgrades the operation level of the target system unit to the target operation level, and sends operation level update information to the target system unit;
the operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
According to the redundant unit control device provided by the embodiment of the application, the plurality of system units are arranged, so that the main unit can always have enough redundant units, and maintenance is not required to be initiated immediately when the main unit breaks down and one of the redundant units is updated to the main unit, and the maintenance cost is reduced; by setting a plurality of levels and determining that the target system unit fills up to the first operation level from the next operation level of the first operation level corresponding to the failed system unit when the system unit fails, each redundant unit does not need to be kept in a hot standby state to operate completely synchronously with the main unit, but is updated as required, and on the basis of ensuring that the system unit exists in each level, the operation cost of the system can be reduced on the basis of filling up the previous operation level rapidly.
The respective modules in the above-described redundant unit control apparatus may be implemented in whole or in part by software, hardware, or a combination thereof. The above modules may be embedded in hardware or may be independent of a processor in the computer device, or may be stored in software in a memory in the computer device, so that the processor may call and execute operations corresponding to the above modules.
In one embodiment, a computer device is provided, which may be a server, and the internal structure of which may be as shown in fig. 9. The computer device includes a processor, a memory, and a network interface connected by a system bus. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The network interface of the computer device is used for communicating with an external terminal through a network connection. The computer program is executed by a processor to implement a redundant unit control method.
It will be appreciated by those skilled in the art that the structure shown in fig. 9 is merely a block diagram of a portion of the structure associated with the present application and is not limiting of the computer device to which the present application applies, and that a particular computer device may include more or fewer components than shown, or may combine some of the components, or have a different arrangement of components.
In one embodiment, a computer device is provided, comprising a memory and a processor, the memory having stored therein a computer program, the processor implementing the steps of the method embodiments described above when the computer program is executed.
In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored which, when executed by a processor, carries out the steps of the method embodiments described above.
In an embodiment, a computer program product is provided, comprising a computer program which, when executed by a processor, implements the steps of the method embodiments described above.
It should be noted that, user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, presented data, etc.) referred to in the present application are information and data authorized by the user or sufficiently authorized by each party.
Those skilled in the art will appreciate that implementing all or part of the above described methods may be accomplished by way of a computer program stored on a non-transitory computer readable storage medium, which when executed, may comprise the steps of the embodiments of the methods described above. Any reference to memory, database, or other medium used in the various embodiments provided herein may include at least one of non-volatile and volatile memory. The nonvolatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical Memory, high density embedded nonvolatile Memory, resistive random access Memory (ReRAM), magnetic random access Memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric Memory (Ferroelectric Random Access Memory, FRAM), phase change Memory (Phase Change Memory, PCM), graphene Memory, and the like. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, and the like. By way of illustration, and not limitation, RAM can be in the form of a variety of forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), and the like. The databases referred to in the various embodiments provided herein may include at least one of relational databases and non-relational databases. The non-relational database may include, but is not limited to, a blockchain-based distributed database, and the like. The processors referred to in the embodiments provided herein may be general purpose processors, central processing units, graphics processors, digital signal processors, programmable logic units, quantum computing-based data processing logic units, etc., without being limited thereto.
The technical features of the above embodiments may be arbitrarily combined, and all possible combinations of the technical features in the above embodiments are not described for brevity of description, however, as long as there is no contradiction between the combinations of the technical features, they should be considered as the scope of the description.
The above examples only represent a few embodiments of the present application, which are described in more detail and are not to be construed as limiting the scope of the present application. It should be noted that it would be apparent to those skilled in the art that various modifications and improvements could be made without departing from the spirit of the present application, which would be within the scope of the present application. Accordingly, the scope of protection of the present application shall be subject to the appended claims.
Claims (10)
1. A redundant unit control system, comprising an arbitration unit and a plurality of system units, any of the system units having a corresponding operation level, wherein:
the system unit is used for periodically performing system fault detection to obtain a corresponding fault detection result, and sending fault information to the arbitration unit as a fault system unit under the condition that the fault detection result represents that the system unit has faults;
The arbitration unit is configured to, when fault information sent by the fault system unit is received, determine a target system unit from a system unit corresponding to a second operation level with the first operation level corresponding to the fault system unit as a first target operation level, upgrade the operation level of the target system unit to the first target operation level, and send first operation level update information to the target system unit, where the first operation level update information is used to indicate that the target system unit has been upgraded to the first target operation level, and the second operation level is a level next to the first target operation level.
2. The system of claim 1, wherein the arbitration unit is further configured to, after upgrading the operation level of the target system unit to the first target operation level, take the second operation level as the first target operation level, repeatedly perform the steps of determining a target system unit from the system units corresponding to the second operation level, upgrading the operation level of the target system unit to the first target operation level, and transmitting first operation level update information to the target system unit until there is no second operation level or the number of system units corresponding to the second operation level is 0.
3. The system of claim 1, wherein the arbitration unit is further configured to, when receiving the enabling information sent by a system unit to be enabled, determine a third target operation level corresponding to the system unit to be enabled according to the number of the system units corresponding to the lowest operation level, set the operation level of the system unit to be enabled to the third target operation level, and send third operation level update information to the system unit to be enabled, where the third operation level update information is used to indicate that the system unit to be enabled has been upgraded to the third target operation level,
the lowest operation level is the operation level with the lowest level in the operation levels corresponding to the currently started system units.
4. The system of claim 3, wherein the operation levels are ordered in a level-to-bottom order, including a primary level, a first standby level, a second standby level, and a third standby level, wherein different operation levels correspond to different operation states, and the operation states are used to characterize an operation synchronization state with a primary unit in the system unit, and the operation synchronization state is positively correlated with a level of the operation levels.
5. A method of redundant unit control, the method being applied to an arbitration unit in a redundant unit control system, the system further comprising a plurality of system units, any of the system units having a corresponding operation level, the method comprising:
under the condition that fault information sent by a fault system unit is received, taking a first operation level corresponding to the fault system unit as a target operation level, wherein the fault system unit is the system unit with the fault;
determining a target system unit from system units corresponding to a second operation level, and upgrading the operation level of the target system unit to the target operation level, wherein the second operation level is the next level of the target operation level;
and sending operation level updating information to the target system unit, wherein the operation level updating information is used for indicating that the target system unit has been upgraded to the target operation level.
6. A method for controlling a redundant unit, wherein the method is applied to a system unit in a redundant unit control system, the system including an arbitration unit and a plurality of system units, any of the system units having a corresponding operation level, the method comprising:
Periodically performing system fault detection to obtain a corresponding fault detection result;
under the condition that the fault detection result represents that the system unit has a fault, sending fault information to the arbitration unit as a fault system unit, so that the arbitration unit takes a first operation level corresponding to the fault system unit as a target operation level after receiving the fault information, determines a target system unit from the system units corresponding to a second operation level, upgrades the operation level of the target system unit into the target operation level, and sends operation level update information to the target system unit;
the operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
7. A redundant unit control apparatus for use in an arbitration unit in a redundant unit control system, the system further comprising a plurality of system units, any of the system units having a corresponding operation level, the apparatus comprising:
the processing module is used for taking a first operation level corresponding to a fault system unit as a target operation level under the condition of receiving fault information sent by the fault system unit, wherein the fault system unit is the system unit with the fault;
The upgrading module is used for determining a target system unit from system units corresponding to a second operation level, upgrading the operation level of the target system unit into the target operation level, and the second operation level is the next level of the target operation level;
and the sending module is used for sending operation level updating information to the target system unit, wherein the operation level updating information is used for indicating that the target system unit has been upgraded to the target operation level.
8. A redundant unit control apparatus for use in a system unit in a redundant unit control system, the system comprising an arbitration unit and a plurality of system units, any of the system units having a corresponding operation level, the apparatus comprising:
the detection module is used for periodically detecting system faults and obtaining corresponding fault detection results;
the sending module is used for sending fault information to the arbitration unit as a fault system unit under the condition that the fault detection result represents that the system unit has a fault, so that the arbitration unit takes a first operation level corresponding to the fault system unit as a target operation level after receiving the fault information, determines a target system unit from the system units corresponding to a second operation level, upgrades the operation level of the target system unit into the target operation level, and sends operation level updating information to the target system unit;
The operation level update information is used for indicating that the target system unit has been upgraded to the target operation level, and the second operation level is the next level of the target operation level.
9. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that the processor implements the steps of the method of claim 5 or 6 when executing the computer program.
10. A computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when being executed by a processor, implements the steps of the method of claim 5 or 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310124116.5A CN116184895A (en) | 2023-02-14 | 2023-02-14 | Redundant unit control system, method, device, computer equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310124116.5A CN116184895A (en) | 2023-02-14 | 2023-02-14 | Redundant unit control system, method, device, computer equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116184895A true CN116184895A (en) | 2023-05-30 |
Family
ID=86432291
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310124116.5A Pending CN116184895A (en) | 2023-02-14 | 2023-02-14 | Redundant unit control system, method, device, computer equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116184895A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117724325A (en) * | 2024-02-08 | 2024-03-19 | 北京和利时系统工程有限公司 | Safety computer platform of railway signal control system |
-
2023
- 2023-02-14 CN CN202310124116.5A patent/CN116184895A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117724325A (en) * | 2024-02-08 | 2024-03-19 | 北京和利时系统工程有限公司 | Safety computer platform of railway signal control system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9742198B2 (en) | Controlling a fault-tolerant array of converters | |
| CN107229221A (en) | Fault-tolerant mode and handoff protocol for multiple hot and cold standby redundancies | |
| CN104836850A (en) | Instance node management method and management equipment | |
| CN1770707B (en) | Apparatus and method for quorum-based power-down of unresponsive servers in a computer cluster | |
| CN105159798A (en) | Dual-machine hot-standby method for virtual machines, dual-machine hot-standby management server and system | |
| CN116184895A (en) | Redundant unit control system, method, device, computer equipment and storage medium | |
| CN102117225B (en) | Industrial automatic multi-point cluster system and task management method thereof | |
| CN112653734B (en) | Real-time master-slave control and data synchronization system and method for server cluster | |
| CN106253239B (en) | Decentralized bus protection configuration method based on MapReduce frameworks | |
| US11281182B2 (en) | Redundant hot standby control system and control device, redundant hot standby method and computer-readable storage medium | |
| CN107659948B (en) | Method and device for controlling access of AP (access point) | |
| JP4732403B2 (en) | Storage battery system control method and control circuit | |
| TW201931821A (en) | Method and apparatus for enabling self-recovery of management capability in distributed system | |
| CN114070739B (en) | Cluster deployment method, device, equipment and computer readable storage medium | |
| CN105812161B (en) | A kind of controller failure backup method and system | |
| CN111935244B (en) | Service request processing system and super-integration all-in-one machine | |
| CN104468217A (en) | Network reconstruction method under 1394 network manager fault | |
| CN103931139B (en) | Method and device for redundancy protection, and device and system | |
| CN108833189A (en) | A kind of memory node management system and method | |
| CN103327074A (en) | Designing method of global-cache-sharing tight coupling multi-control multi-active storage system | |
| CN103152209A (en) | Application service operation processing system based on multi-machine hot backup | |
| CN110674539B (en) | Hard disk protection device, method and system | |
| TWI531903B (en) | System and method for data back-up | |
| CN108964059B (en) | Method and system for calculating active standby shared capacity of interconnected power grid | |
| CN110399254A (en) | A kind of server CMC dual-locomotive heat activating method, system, terminal and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |