CN207623963U - A kind of safety computer platform two-node cluster hot backup switching and fault detection system - Google Patents
A kind of safety computer platform two-node cluster hot backup switching and fault detection system Download PDFInfo
- Publication number
- CN207623963U CN207623963U CN201721882987.XU CN201721882987U CN207623963U CN 207623963 U CN207623963 U CN 207623963U CN 201721882987 U CN201721882987 U CN 201721882987U CN 207623963 U CN207623963 U CN 207623963U
- Authority
- CN
- China
- Prior art keywords
- relay
- host
- unit
- active
- computer platform
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Hardware Redundancy (AREA)
Abstract
The utility model is related to a kind of safety computer platform two-node cluster hot backup switching and fault detection systems, including the first host and the second host, it is equipped with first active and standby system's recognition unit, the first relay, Fisrt fault safe unit in first host, second active and standby system's recognition unit, the second relay and the second failure safe unit are equipped in second host；First host is by being that a synchronization unit and the second host carry out data exchange.The utility model is interlocked using safety relay, and two owner's machines form the relationship of mutual exclusion, have and only have one and are tied to form as main owner's machine；And two owner's machine simultaneously detect two safety relays state, it ensure that the reliability of testing result, avoid the failure of monosystem detection so that two systems can judge the working condition that itself and other side are in the same time, greatly improve safety and the availability of system.
Description
Technical field
The utility model is related to track traffic signal control fields, and in particular to a kind of safety computer platform two-node cluster hot backup
Switching and fault detection system.
Background technology
Currently, generally being handed over both at home and abroad track using with the safety computer platform system of specific redundancy framework to realize
The control of messenger, mobile unit and other coherent signal equipment.And based on safety, reliability and maintainability etc.
The considerations of, when carrying out the design of safety computer platform system, many products all use the design scheme of two-node cluster hot backup.System by
Two sets of identical safety control systems are constituted, and wherein principal series executes control function, it is standby tie up to guarantee it is synchronous with principal series before
It puts as hot-backup system, ensures in the case where monosystem breaks down, normal signal can be completed by the switching of active and standby system
The process of control.
It is relatively or logical that switching, detection method and the output of existing Dual-Computer Hot-Standby System are generally used simple bus
A kind of active and standby system's judging module is crossed to realize the active and standby system switching of Dual-Computer Hot-Standby System.But in failure conditions, above two
Switching, detection method are difficult the reliable uniqueness for ensureing system output order and safety, that is to say, that occur " double masters " or
The probability of the standby system's output of person is larger, so it is difficult to meet the security requirement of Dual-Computer Hot-Standby System switching.
Utility model content
The purpose of this utility model is to provide a kind of safety computer platform two-node cluster hot backup switching and fault detection system,
To solve the problems, such as that existing safety computer platform Dual-Computer Hot-Standby System switching is low with detection method safety.
To achieve the above object, the utility model uses following technical scheme：
A kind of safety computer platform two-node cluster hot backup switching and fault detection system, including the first host and the second host,
First active and standby system's recognition unit, the first relay, Fisrt fault safe unit, second host are equipped in first host
Inside it is equipped with second active and standby system's recognition unit, the second relay and the second failure safe unit；
First host is by being that a synchronization unit and the second host carry out data exchange；
The first active and standby recognition unit and second active and standby system's recognition unit, for monitoring the first relay and the second relay
The contacts status of device judges the working condition of the first host and the second host by contacts status；
The Fisrt fault safe unit and the second failure safe unit, for the work according to the first host, the second host
Make state, controls the connection of the first relay, the second relay and power supply.
Further, first host is connect by manual switching unit with the second host；The manual switching unit,
Connection for controlling the first relay, the second relay and power supply switches, and principal series identity switches between realizing two hosts.
Further, synchronization unit uses ethernet communication line, CAN bus or RS485 between the system.
Further, the output contact common end of first relay passes through first switch and Fisrt fault safe unit
Output end connection, the coil of the first relay connect with the normally opened contact of the second relay, the normally opened contact of the first relay
It is connect with the test side of first active and standby system's recognition unit；The output contact common end of second relay by second switch with
The output end of second failure safe unit connects, the normally-closed contact circuit of the coil of the second relay and the first relay, and second
The normally opened contact of relay is connect with the test side of second active and standby system's recognition unit.
Further, the manual switching unit uses change-over switch.
Further, the first switch and the second switch use optocoupler, metal-oxide-semiconductor, relay or triode, described first
The control terminal of switch and second switch is connect with the output end of Fisrt fault safe unit, the second failure safe unit respectively.
As shown from the above technical solution, safety computer platform two-node cluster hot backup switching described in the utility model is examined with failure
Examining system is interlocked using safety relay, and two owner's machines form the relationship of mutual exclusion, have and only have one and are tied to form as main owner
Machine；And two owner's machine simultaneously detect two safety relays state, ensure that the reliability of testing result, avoid monosystem inspection
The failure of survey so that two systems can judge the working condition that itself and other side are in the same time, greatly improve system
Safety and availability；Simultaneously the exchange and one of data can be carried out by being that a synchronization unit connects between two owner's machines
The mode of kind system detectio " double masters ".
Description of the drawings
Fig. 1 is the system diagram of the utility model；
Fig. 2 is the circuit diagram of the utility model.
Specific implementation mode
The utility model is described further below in conjunction with the accompanying drawings：
As shown in Figure 1, the safety computer platform two-node cluster hot backup switching of the present embodiment and fault detection system, including first
Host 1 and the second host 2,1 interior first active and standby system's recognition unit 11, the first relay 13, the Fisrt fault of being equipped with of the first host are pacified
Full unit 12, the second host 2 are interior equipped with second active and standby system's recognition unit 21, the second relay 22 and the second failure safe unit
23；First host 1 can monitor the active and standby system of peer by being that a synchronization unit 4 and the second host 2 carry out data exchange
State, to more ensure that the output safety and reliability of Dual-Computer Hot-Standby System.
First active and standby recognition unit 11 and second active and standby system's recognition unit 21, for monitor the second relay 13 and second after
The contacts status of electric appliance 22 judges the working condition of the first host 1 and the second host 2 by contacts status；Fisrt fault safety
Unit 12 and the second failure safe unit 23 control the first relay for the working condition according to the first host 1, the second host 2
The connection of device 13, the second relay 22 and power supply；By above-mentioned state, the first host 1 and the second host 2 can be known certainly simultaneously
Active and standby system's state of body and other side, and then can be determined that whether the work of itself and other side are normal.
First host 1 is connect by manual switching unit 3 with the second host 2, the manual switching unit 3, for controlling the
The connection of one relay 13, the second relay 22 and power supply switches, and principal series identity switches between realizing two hosts.This fact Example
Described is that a synchronization unit 4 is made of the ethernet communication line of two redundancies.
The output that the output contact common end of second relay 13 passes through first switch K1 and Fisrt fault safe unit 12
End connection, the coil of the second relay 13 connect with the normally opened contact of the second relay, the normally opened contact of the second relay 13 and
The test side of first active and standby system's recognition unit 11 connects；The output contact common end of second relay passes through second switch and second
The output end of failure safe unit 23 connects, the normally-closed contact circuit of the coil of the second relay and the second relay 13, and second
The normally opened contact of relay is connect with the test side of second active and standby system's recognition unit 21.The normally-closed contact control of first relay 13
Make the coil power supply power supply of the first relay 13.The normally-closed contact of second relay 22 controls the coil of the second relay 22
Power supply, the two form the relationship of mutual exclusion, ensure that the case where being not in " double masters " under normal circumstances.
The present embodiment, manual switching unit 3 uses change-over switch, first switch K1 and second switch K2 using optocoupler,
The control terminal of metal-oxide-semiconductor, relay or triode, first switch K1 and second switch K2 respectively with Fisrt fault safe unit 12,
The output end of second failure safe unit 23 connects.
Specifically, as shown in Fig. 2, the structural schematic diagram of the relay interlocking and detection in the present embodiment, embodiment is such as
Under：Two owner's machines are identical two control systems, and when powering on, this sentences the first host 1 and is preferentially set as principal series system
Illustrate for host.When powering on the same time, the first host 1 of setting is main owner's machine for first host 1 and the second host 2, the
Two hosts 2 are standby owner's machine.5,6 in Fig. 2 indicate that survey line is returned in contact.
It is main owner's machine that first host 1, which obtains the identity of itself, and control 24VDC_I first gives electricity, the second host 2 to obtain itself
For standby owner's machine, control after 24VDC_II to electricity.First relay, 13 normally-closed contact NC1 is to be closed, and the first relay 13 is logical
Mutual locking wire A1B1 is crossed to 22 coil power supply of the second relay, the normally opened contact NC2 of the second relay 22 is in an open state, and gives first
The A2B2 lines that relay 13 is powered disconnect, and the first relay 13 keeps full state.First host 1 and the second host 2 pass through master
Standby is the contacts status that recognition unit detects two safety relays.At this point, the first host 1 and the second host 2 pass through simultaneously
D1A1 detects the normally opened NO1 and normally-closed contact NC1 of the first relay 13, while detecting the normally opened of the second relay 22 by D2A2
NC2 and normally-closed contact NO2, the first host 1 can judge itself by returning the state of the contact NO1 and contact NC1 that measure
Active and standby system's state, such as table 1；Unified：There is electricity to be determined as 1, no electricity is determined as 0：
Table 1
| The state of NO | The state of NC | Active and standby system's state of host I |
| 0 | 1 | Principal series |
| 1 | 0 | Standby system |
| 0 | 0 | Standby system |
| 1 | 1 | Into malfunction |
It according to table 1 it is recognised that the judgement of the first host 1 itself is principal series, and powers on setting and is consistent, when what is detected
When as a result malfunctioning, system takes safety measures.Meanwhile first host 1 can be sentenced by returning the state of NO2 and NC2 measured
The state for determining other side system according to table 1 it is recognised that the first host 1 is determined as that the second host 2 is standby system, and powers on setting and keeps
Unanimously, when the result error detected, system takes safety measures.
Likewise, the second host 2 can also judge active and standby system's state of itself and other side system, testing result by table 1
For：The judgement of second host 2 itself is standby system, and the first host 1 is principal series；System takes safety measures when error.
It should be noted that：The normally opened and normally-closed contact signal for surveying signal by same safety relay is returned in the contact of relay
Composition, this takes full advantage of the normally opened characteristic with normally-closed contact mutual exclusion of safety relay, ensures the correctness of testing result.When
When there is the level of " 11 " in the contact signal that Host Detection arrives, it is possible to determine that detection circuit occurs abnormal at this time, and system can adopt
Safety measure is taken, to ensure that the safety of system output.
When the first host 1 of principal series breaks down, it is that principal series host becomes the second host from the first host 1 to cut
2,24VDC_I are switched on and off K1 disconnections, and the contacts NC1 of the first relay 13 can not provide power supply to the second relay 22, second after
Electric appliance 22 is fallen, NC2 contact closures, and 24VDC_II supplies electricity to the first relay 13, so that its NC1 is opened, is then maintained contact
The state that NC1 is opened, contact NC2 is closed.At this point, being surveyed to returning for relay contact by two owner's machines, contrast table 1, it is known that the
Two hosts 2 become principal series operation, and the second host 2 is downgraded to standby system's operation.
It is operation that the utility model can carry out mandatory cut by manual switching unit 3 to system.When manual switching list
For 3 dozens, member in the first 1 gear of host, manual switching unit 3 maintains 24VDC_I to have electricity by force by C1 lines at this time so that first
Relay 13 exports active and standby system's competition 24VDC_I, picks up the second relay 22, the first host 1 becomes principal series host at this time.Work as hand
Dynamic switch unit 3 is beaten in the second 2 gear of host, and manual switching unit 3 maintains 24VDC_II to have electricity by force by C2 lines at this time,
So that the second relay 22 exports active and standby system's competition power supply 24VDC_II, the first relay 13 is picked up, the second host 2 becomes at this time
Principal series host.When manual switching unit 3 is beaten in " automatic " gear, manual switching unit 3 does not control the active and standby system of any system
Compete power supply, the two active and standby systems of owner's machine free competition.
Embodiment described above is only that preferred embodiments of the present invention are described, not to this practicality
Novel range is defined, and under the premise of not departing from the spirit of the design of the utility model, those of ordinary skill in the art are to this
The various modifications and improvement that the technical solution of utility model is made should all fall into the protection of the utility model claims book determination
In range.
Claims (6)
1. a kind of safety computer platform two-node cluster hot backup switching and fault detection system, it is characterised in that：Including the first host and
Second host, first host is interior to be equipped with first active and standby system's recognition unit, the first relay, Fisrt fault safe unit, institute
It states and is equipped with second active and standby system's recognition unit, the second relay and the second failure safe unit in the second host；
First host is by being that a synchronization unit and the second host carry out data exchange；
The first active and standby recognition unit and second active and standby system's recognition unit, for monitoring the first relay and the second relay
Contacts status judges the working condition of the first host and the second host by contacts status；
The Fisrt fault safe unit and the second failure safe unit, for the work shape according to the first host, the second host
State controls the connection of the first relay, the second relay and power supply.
2. safety computer platform two-node cluster hot backup switching according to claim 1 and fault detection system, it is characterised in that：
First host is connect by manual switching unit with the second host；
The manual switching unit, the connection switching for controlling the first relay, the second relay and power supply, realizes two masters
Principal series identity switches between machine.
3. safety computer platform two-node cluster hot backup switching according to claim 1 and fault detection system, it is characterised in that：
Synchronization unit uses ethernet communication line, CAN bus or RS485 between the system.
4. safety computer platform two-node cluster hot backup switching according to claim 1 and fault detection system, it is characterised in that：
The output contact common end of first relay is connect by first switch with the output end of Fisrt fault safe unit, and first
The coil of relay is connect with the normally opened contact of the second relay, and the normally opened contact of the first relay and first active and standby system's identification are single
The test side connection of member；
The output contact common end of second relay is connect by second switch with the output end of the second failure safe unit,
The normally-closed contact circuit of the coil of second relay and the first relay, the normally opened contact of the second relay and the second active and standby system know
The test side of other unit connects.
5. safety computer platform two-node cluster hot backup switching according to claim 2 and fault detection system, it is characterised in that：
The manual switching unit uses change-over switch.
6. safety computer platform two-node cluster hot backup switching according to claim 4 and fault detection system, it is characterised in that：
The first switch and the second switch uses optocoupler, metal-oxide-semiconductor, relay or triode, the first switch and the second switch
Control terminal is connect with the output end of Fisrt fault safe unit, the second failure safe unit respectively.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201721882987.XU CN207623963U (en) | 2017-12-28 | 2017-12-28 | A kind of safety computer platform two-node cluster hot backup switching and fault detection system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201721882987.XU CN207623963U (en) | 2017-12-28 | 2017-12-28 | A kind of safety computer platform two-node cluster hot backup switching and fault detection system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN207623963U true CN207623963U (en) | 2018-07-17 |
Family
ID=62830704
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201721882987.XU Active CN207623963U (en) | 2017-12-28 | 2017-12-28 | A kind of safety computer platform two-node cluster hot backup switching and fault detection system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN207623963U (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109147229A (en) * | 2018-07-24 | 2019-01-04 | 苏州浪潮智能软件有限公司 | A kind of more combination type self-help terminal sharing methods |
-
2017
- 2017-12-28 CN CN201721882987.XU patent/CN207623963U/en active Active
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109147229A (en) * | 2018-07-24 | 2019-01-04 | 苏州浪潮智能软件有限公司 | A kind of more combination type self-help terminal sharing methods |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108009056A (en) | A kind of safety computer platform two-node cluster hot backup switching and fault detection system and method | |
| CN101807076B (en) | Duplication redundancy fault-tolerant high-reliability control system having synergistic warm standby function based on PROFIBUS field bus | |
| CN206211665U (en) | Direct current system | |
| CN101980418B (en) | System for detecting secondary wiring of relay protection system in transformer substation on line | |
| CN109278802A (en) | A kind of exchange switch apparatus, system and its control method | |
| CN106571688A (en) | Method for monitoring operation mode of direct current system and operation state of isolating switch | |
| CN103698647B (en) | A kind of automatic testing method of Single-phase Earth Fault of Power System | |
| CN101741137B (en) | Network centralized emergency power supply automatic switching method | |
| CN106340951B (en) | A kind of layered distribution type Intelligent region spare power automatic switching system | |
| CN107933613A (en) | It is a kind of to multiply the two non-national standard standard turnout drive systems for taking two frameworks based on two | |
| CN103311906B (en) | A kind of switch changed position islanding detect based on Wide-area Measurement Information and directly tripping operation formula island protect method | |
| CN104765012A (en) | Fault detection method, fault detection circuit and inverter | |
| CN108375711A (en) | A kind of insulating monitoring method of bipolar earth-free HVDC power-supply systems | |
| CN104359196A (en) | Data-center-based multiple-connection air conditioner control system and implementation method | |
| CN207623963U (en) | A kind of safety computer platform two-node cluster hot backup switching and fault detection system | |
| CN201174618Y (en) | Fast switching control apparatus for micro-computer electric power | |
| CN106093683B (en) | Heater broken wire detection system and wire break detection method | |
| CN110033393A (en) | A kind of power system information method for safety monitoring | |
| CN107688335B (en) | A kind of launch vehicle measurement that cruise mode can be switched with emission mode | |
| CN103856338A (en) | Automatic bypass device and method for tandem connection of communication device | |
| CN109361261A (en) | A kind of distribution terminal super capacitor state on_line monitoring method | |
| CN105488880B (en) | A kind of security door anti-locking method | |
| CN109066604B (en) | Generator low-voltage protection system of million-kilowatt nuclear power station | |
| CN209387800U (en) | The Insulation Inspection Device for Direct-Current System of two-node cluster hot backup | |
| CN208060970U (en) | A kind of guest-room controller based on redundancy structure |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| GR01 | Patent grant | ||
| GR01 | Patent grant |