KR20130067454A

KR20130067454A - Health monitoring method in aeronautic system

Info

Publication number: KR20130067454A
Application number: KR1020110134844A
Authority: KR
Inventors: 이화영; 임채덕; 김태호; 김병호
Original assignee: 한국전자통신연구원
Priority date: 2011-12-14
Filing date: 2011-12-14
Publication date: 2013-06-24

Abstract

The present invention relates to an application technology in which the aviation software development technology and the online distributed processing monitoring technique are fused, and the health monitor is positioned in an independent health monitoring apparatus provided separately from the aviation system control apparatus, and the health monitoring apparatus is constructed. By hierarchically configuring a plurality of monitor modules, health monitoring can be performed normally even when a problem occurs in the control device, and the health monitoring of the aviation system improves health monitoring efficiency by distributing traffic to prevent overload. The invention is about a method.

Description

HEALTH MONITORING METHOD IN AERONAUTIC SYSTEM

The present invention relates to a method of monitoring and processing an error occurrence in an aviation system when operating an aviation system. More specifically, the aviation system control device providing an API (Application Programming Interface) of the Aeronautical Radio INC. (ARINC) 653 standard, and a health monitoring device that is a separate device, the health monitoring device The invention includes a plurality of monitor modules in a hierarchical manner, to prevent a system failure and overload.

In operating the aviation system, Aeronautical Radio INC. (ARINC) establishes avionics standards to improve safety and maintain compatibility in aviation operations.

In particular, ARINC 653 defines an interface between a real-time operating system and an application program running on the real-time operating system. In short, the ARINC653 is a specification for software development for aviation. It is a real-time operating system API standard for integrated modular avionics. Thus, through standard APIs, it is possible to reduce dependency on development hardware in aviation software development, extend portability to other systems, and improve application concurrent development of aviation systems.

1 is a diagram illustrating the configuration of an ARINC 653 aviation system.

Services provided by the ARINC653 may include partition management, process management, time management, memory allocation, inter-partition communication, intra-partition communication, and health monitoring.

In addition, the ARINC 653 aviation system 10 may include a partition 11, a process level monitor 12 included in the partition, a partition level monitor 13, and a module level monitor 14. have.

The partition 11 is a separate virtual operating system environment for each partition provided in the ARINC 653 aviation system and is guaranteed to allocate a specific CPU time. That is, the partition 11 does not affect the system even if there is an application program having a problem in one partition, because the program monopolizes CPU time and does not invade another partition.

In addition, the monitor that performs health monitoring may perform an operation of monitoring an error such as hardware, an application, an operating system (OS), and reporting the same to the CPU. Thus, through the health monitor, it is possible to prevent errors from progressing and affecting other parts of the aviation system.

In addition, the health monitor may be divided into a module level monitor 14 for detecting an error occurring at a module level, a partition level monitor 13 for detecting at a partition level, and a process level monitor 12 for detecting at a process level. In addition, a health monitoring table may be provided to handle errors occurring in the aviation system.

The health monitoring table may include a system level health monitoring table, a module level health monitoring table, and a partition level health monitoring table. The system level health monitoring table may store information about a level of an error, the module level health monitoring table may store information about a processing method for a module level error, and the partition level health monitoring table may be stored at a partition level. Information about how to handle errors.

In addition, an error handler (not shown) may be provided as an error handler that monitors and processes errors of processes, partitions, and modules for each level.

However, in the prior art, when performing health monitoring using the ARINC 653 aviation system as described above, since the health monitor exists inside the ARINC 653 aviation system, the health monitor may not be normally executed if a problem occurs in the system. There is a problem that becomes possible. In addition, there is a problem that the ARINC 653 system is overloaded when traffic is heavily loaded on the health monitor.

Accordingly, the present invention has been proposed in order to solve the above problems, by providing a aviation system control device capable of providing the ARINC 653 standard API, and by placing a health monitor module in a separate independent health monitoring device, It is an object of the present invention to provide a health monitoring method such that health monitoring is normally performed even if it occurs.

In addition, in configuring a health monitoring apparatus, it is an object of the present invention to provide a health monitoring method to prevent the overload by distributing traffic by hierarchically configuring a plurality of monitor modules.

In order to achieve the object of the present invention, the health monitoring method of the aviation system according to an embodiment of the present invention, the health monitoring device of the aviation system detects an error occurring in the control device of the aviation system, the health monitor An error detection monitor of a device determining a level of the detected error through a system health monitoring table; based on the level determination, the detected error is a process level monitor or a partition level monitor included in the health monitor device; Transmitting, to the health monitor, any one of a module level monitor, and wherein the process level monitor receives the detected error, the process level monitor corresponds to a process level corresponding to the process level of the transmitted error. Retrieving, the partition level monitor detecting the If an error is received, the partition level monitor searches for a method of handling the transmitted error through a partition level health monitoring table in which an error processing method of a partition level is stored, and the module level monitor transmits the detected error. If received, searching for a method of handling the transmitted error through a module-level health monitoring table, in which a module-level error processing method is stored, among process level monitors, partition level monitors, and module level monitors included in the health monitor apparatus. And transmitting the retrieved processing method from the health monitor to the control device.

By using the health monitoring method according to the present invention, since multiple monitors can divide the error according to the level of the error generated in the aviation system, it is possible to improve the health monitoring efficiency.

1 is a diagram showing the configuration of an ARINC 653 aviation system.
2 is a diagram illustrating a configuration of an aviation system according to an exemplary embodiment of the present invention.
3 is a flowchart illustrating a health monitoring method according to an exemplary embodiment of the present invention.
4 is a flowchart illustrating in detail the steps of transmitting the detected error of FIG. 3 to each monitor.

Hereinafter, various embodiments of the present invention will be described in detail with reference to the accompanying drawings. Furthermore, the suffixes "device" and "module" for components used in the following description are merely given in consideration of ease of preparation of the specification, and the "device" and "module" may be used interchangeably. Can be designed in hardware or software.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other features and advantages of the present invention will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

2 is a diagram illustrating a configuration of an aviation system according to an exemplary embodiment of the present invention.

Hierarchical monitor configuration of the aviation system according to an embodiment of the present invention, as shown in Figure 1, the aviation system control device 101 capable of performing a control operation conforming to the ARINC 653 standard, and the aviation system control device It may include a health monitoring device 102 is separated from the.

In addition, the health monitoring apparatus 102 includes an error detection monitor 104 in a lower layer, and a health monitor of a process level monitor 103, a partition level monitor 105, and a module level monitor 106 in an upper layer. It may include.

The error detection monitor 104 may directly transmit and receive data to and from the aviation system controller, and may include a system health monitoring table to determine the level of the error generated by the aviation system controller.

The process level monitor 103 is a monitor for processing a process level error, and may search for an error processing method suitable for a process level and transmit a result to the error detection monitor.

The partition level monitor 105 may store a partition level health monitoring table that records an error processing method as a monitor for processing a partition level error, and searches for an error processing method using the partition level health monitoring table and detects a search result error. You can send it to the monitor.

The module level monitor 106 may store a module level health monitoring table that records a module level error processing method as a monitor for processing module level errors, and searches for an error processing method and retrieves a search result through the module level health monitoring table. Can be sent to the error detection monitor.

3 is a flowchart illustrating a health monitoring method according to an exemplary embodiment of the present invention.

According to an embodiment, first, the health monitor device of the aviation system detects an error occurring in the control device of the aviation system (S201).

Next, the error detection monitor of the health monitor device determines the level of the detected error through a pre-stored system health monitoring table (S202).

Next, based on the level determination, the detected error is transmitted to the health monitor (S203).

According to an embodiment, the health monitor may be hierarchically configured. That is, efficient error handling may be performed including a process level monitor, a partition level monitor, and a module level monitor. Error transmission according to the hierarchical health monitor configuration will be described in detail with reference to FIG. 4.

Next, the health monitor receiving the error determines an error processing method of the received error (S204). According to an embodiment, each monitor may include a table in which an error processing method is stored in advance, and the error processing method may be determined by searching the table.

That is, when the process level monitor receives the detected error, the process level monitor can search for an error handling method corresponding to the process level of the transmitted error, and the partition level monitor receives the detected error. In this case, the partition level monitor may search for a method of handling the transmitted error through a partition level health monitoring table in which an error processing method of a partition level is stored, and if a module level monitor receives the detected error, a module level The method for processing the transmitted error may be searched through the module level health monitoring table in which the error processing method is stored.

Next, the error processing method is transmitted from the health monitor to the control device via the error detection monitor (S205).

4 is a flowchart illustrating in detail the steps of transmitting the detected error of FIG. 3 to each monitor.

According to an embodiment, when an error occurs in the aviation system control apparatus, the content is transmitted to the error detection monitor, and the error detection monitor determines the level of the corresponding error by referring to the system health monitoring table and corresponds to the monitor corresponding to the corresponding error. You can send an error. That is, the health monitor located in the upper layer determines the error processing method suitable for the level and transmits the result to the error detection monitor, and the error detection monitor receives the error processing method determined in the health monitor of the upper layer and processes it in the aviation system controller. You can send the result.

That is, in detail, when the error level is determined, the error detection monitor first determines whether the process level is the process level based on the determined error level (S301), and when the determination result corresponds to the process level, the process level monitor. Transfer to (S304).

In addition, if the detected error is not the process level as a result of the determination (S301), it is determined whether or not it is a partition level (S302). If the determination result corresponds to the partition level, it is transmitted to a partition level monitor (S305).

In addition, if the detected error is not the partition level as a result of the determination (S302), it is determined whether it is a module level (S306). If the determination result corresponds to a module level, it is transmitted to a module level monitor (S306).

On the other hand, if the detected error is not the module level as a result of the determination (S303), the error level is determined again. In addition, according to another exemplary embodiment, the health monitoring operation may be stopped until another error is detected.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the present invention.

101: aviation system controller
102: health monitoring device
103: process level monitor
104: error detection monitor
105: Partition level monitor
106: module level monitor

Claims

In the health monitoring method of the aviation system,
Detecting, by the health monitor device of the aviation system, an error occurring in the control device of the aviation system;
Determining, by the error detection monitor of the health monitor device, the level of the detected error through a system health monitoring table;
Based on the level determination, transmitting the detected error to any one of a process level monitor, a partition level monitor, and a module level monitor included in the health monitor apparatus;
If the process level monitor receives the detected error, the process level monitor searching for an error handling method corresponding to the process level of the transmitted error;
When the partition level monitor receives the detected error, searching for the method of handling the transmitted error through a partition level health monitoring table in which a partition level error processing method is stored; And
When the module level monitor receives the detected error, searching for a method of handling the transmitted error through a module level health monitoring table in which a module level error processing method is stored;
And transmitting the retrieved processing method from the health monitor of the process level monitor, the partition level monitor, and the module level monitor included in the health monitor device to the control device.