RU2339994C1 - Combined redundancy device - Google Patents

Abstract

FIELD: electricity.

SUBSTANCE: device is built on the basis of majority device, but in contrast to it signals of two connected normally operating channels are majorised as well as one disconnected working channel that stays in cold reserve. In case of failure in one of working channels, the third working channel is automatically switched on, the one that stayed in cold reserve, and signals of these three working channels, one of which failed, are majorised, thus forming output signal of reserved system. In case of failure in another or in both working channels, the third working channel also automatically switches on, the one that stayed in cold reserve, and signals of these three working channels, one or two of which failed, are duplicated, thus forming output signal of reserved system from the signal of the third reserve channel that was disconnected earlier.

EFFECT: reduction of electric power consumption and higher reliability of reserved system.

1 dwg

Description

The invention relates to the field of electronic technology and can be used in the construction of highly reliable devices and systems designed by the method of mixed reservation.

Known devices for hot reservation of channels according to the majority principle, described in [1], [2] and [3]. The disadvantage of all these devices is the inability to automatically turn off the power of one of the proposed backup channels, the output signals of which are supplied to the inputs of these majority devices, and to use the resource of the switched-off channel in case of failure of one or two backup channels to save power and increase the reliability of the redundant system.

However, the simplest is the majority device described in [1], which is selected as a prototype. The device has first, second and third inputs for analog signals and one output, the signal from which is formed by the principle of voting "two out of three" for the input signals of the device. The device contains first, second and third subtracting amplifiers, the inverting inputs of which are connected respectively to the first, second and third inputs of the device, the first, second and third keys, the first, second and third relay elements, the inputs of which are connected respectively to the outputs of the first, second and third subtracting amplifiers, non-inverting inputs of which are connected respectively to the second, third and first inputs of the device, connected respectively to the signal inputs of the second, third and first keys, Suitable inputs of which are connected respectively to the outputs of the second, third and first relay elements, and outputs the first, second and third keys are connected to the output of the apparatus.

The disadvantage of this device is a rather high energy consumption and insufficiently high reliability.

The technical result of the proposed device is to reduce energy consumption (approximately 30%) and increase the reliability of the redundant system by automatically turning off the power of one of the channels of the redundant system and combining the advantages of the majority and redundant backup schemes.

The technical result is achieved by the fact that in a majority device containing the first and second subtracting amplifiers, the first and second relay elements, the first, second and third keys, the signal inputs of which are connected respectively to the first, second and third inputs of the device and to the first, second and third backup channel outputs, the first of which is connected to the inverting input of the first subtracting amplifier, the second to the non-inverting input of the first subtracting amplifier and the inverting input of the second subtracting amplifier, and retium - with a non-inverting input of the second subtracting amplifier, while the outputs of the first and second subtracting amplifiers are connected respectively to the inputs of the first and second relay elements, the outputs of which are connected respectively to the control inputs of the first and second keys, the signal outputs of which are connected to the signal output of the third key and the output of the device, the fourth key and the logical element are NOT entered, the output of which is connected to the control input of the third key, and the input to the output of the first relay lementa, yield backup link failure signal and to the control input of the fourth switch, a signal input coupled to the bus Upow supply and signal output - to the input of the third feed channel. The introduction of these elements and connections allows you to turn off the power of one backup channel of the system in the absence of failures, i.e. save about 30% of the power of the redundant system and save the resource of one backup channel, and if there is one or two failures, use the resource of the previously turned off backup channel, unlike analogs and prototypes.

The essence of the invention is illustrated by a functional diagram, which shows a mixed backup device with the proposed backup channels, where 1, 2, 3 are the first, second and third inputs of the device, 4, 5 are the first and second subtracting amplifiers, 6, 7 are the first and second relay elements, 8, 9, 10 - first, second and third keys, 11 - fourth key, 12 - logical element NOT, 13 - device output, which serves as the output of the redundant system, 14, 15, 16 - first, second and third prospective backup channels, 17 - power bus Upit, 18 - signal output to the failure of the backup channel, Vcc - power outputs of the alleged backup channels.

The output of the first putative backup channel 14 is connected to the first input 1 of the device, which is connected to the signal input of the first key 8 and the inverting input of the first subtracting amplifier 4, the output of the second putative backup channel 15 is connected to the second input 2 of the device, which is connected to the signal input of the second key 9 , the inverting input of the second subtracting amplifier 5 and the non-inverting input of the first subtracting amplifier 4, the output of the third proposed backup channel 16 is connected to the third input of the device, with the signal input of the third key 10 and the non-inverting input of the second subtracting amplifier 5. The output of the first subtracting amplifier 4 is connected to the input of the first relay element 6, the output of the second subtracting amplifier 5 is connected to the input of the second relay element 7. The output of the first relay element 6 is connected to the control input of the first key 8, the output 18 of the signal of the presence of a channel failure, the control input of the fourth key 11 and the input of the logic element NOT 12, the output of which is connected to the control input of the third key 10. The output of the second eynogo element 7 is connected to the control input of the second switch 9. The signal outputs keys 8, 9, 10 connected to the output device 13, which output a redundant system. The signal input of the fourth key 11 is connected to the power bus Upit 17, and its signal output is connected to the power output Vcc of the third proposed backup channel 16.

The mixed backup device operates as follows.

During normal operation of the first 14 and second 15 backup channels, the inverting and non-inverting inputs of the subtracting amplifier 4 receive almost identical signals whose absolute value of the difference generated at the output of the subtracting amplifier 4 and arriving at the input of the relay element 6 does not exceed a given threshold h of operation of the relay element 6. The low level signal from the output of the relay element 6 is fed to the control input of the electronic switch 11, which corresponds to an open analog channel electronically of the key 11 and the absence of the third power reserve channel 16, while the output of the third channel 16 will reserve zero signal. At the same time, the low-level signal from the output of the relay element 6 goes to the output 18 and informs about the absence of a channel failure. The output signals of the normally functioning channels 14 and 15 are fed to the inputs 1 and 2 of the mixed redundancy device, the zero output signal of the switched off channel 16 is fed to the input 3 of the mixed redundancy device, while output 13 of the device, which is the output of the redundant system, generates an output signal according to the voting principle "Two out of three."

If the channels 14 or 15 fail, the difference in their output signals at the output of the subtracting amplifier 4 and at the input of the relay element 6 exceeds a predetermined threshold P of the relay element 6, which is triggered, and a high level signal appears at the output of the relay, which is transmitted to the control input of the electronic key 11 and corresponding to the closure of the analog channel of the electronic key, i.e. power supply to the third operational backup channel 16, which was previously in the cold reserve. At the same time, a high-level signal from the output of the relay element 6 goes to the output 18 and informs about the presence of a channel failure signal, which can be used to correct the operation of the redundant system, and the inclusion of the channel, which was in cold reserve. The output signal of the enabled serviceable backup channel 16 is supplied to the input 3 of the mixed reservation device, the second normal signal is received either from the output of the channel 14 or from the output of the channel 15, depending on which channel is operational, to the input 1 or 2 of the mixed reservation device. If the first channel 14 is faulty, the device retains the properties of the majority and acquires duplication properties, while at the output 13 of the mixed backup device, which is the output of the redundant system, an output signal is generated according to the “two out of three” principle: from two normal and one false input signals . If the second channel 15 or the first 14 and second 15 channels are faulty, then logical units will be installed at the outputs of the relay elements 6 and 7, and the output signals of the first two backup channels 14 and 15 are disconnected from the output 13 of the mixed backup device, and the output signal is generated from the output signal of the third backup channel 16, that is, the circuit from the majority becomes duplicate. In the event of failures of the first 14, or second 15, or simultaneously the first 14 and second 15 backup channels, the resource of the third backup channel 16 is used, its signal is taken as working, given that it was previously in cold reserve. In the event of the recovery of the failed channel, which will be reported by the zero signal at the output 18 of the device, the power of the third channel will be turned off again, and it will be in cold reserve.

The effect of using the proposed mixed backup device in the following. In the known device [1], the output signal of the device S, which is the output signal of the proposed redundant system, is formed according to the principle of voting "two of three" output signals of three continuously operating backup channels, which are the input signals S1, S2 and S3 of the device. In this case, the output signal S of the device, which is the output signal of the proposed redundant system, during normal operation of the first and second backup channels is formed by the principle of voting “two out of three” output signals of the first and second normally working backup channels and zero output signal turned off (in the cold reserve) of the third channel, which are the input signals S1, S2 and S3 of the device. In case of failure of the first backup channel, the output signal S of the device is formed by the principle of voting “two out of three” output signals of three working backup channels, the first of which is faulty. In case of failure of the second or simultaneously the first and second backup channels, the output signal S of the device is formed from the signal of the third backup channel according to the principle of duplication of the output signals of the first and second working channels, which are faulty, with the signal of the third, which is accepted as serviceable, channel. Thus, the proposed device allows for mixed redundancy using replacement redundancy and continuous redundancy according to the principles of majorization and duplication.

As elements for implementing a mixed backup device, operational amplifiers and analog keys of microchips of any series can be used. As an electronic key switching the power supply of the third backup channel can be used intelligent keys from Siemens.

Literature

1. RF patent No. 2111130, cl. G06F 11/18 of 11/10/99. Majority device.

2. RF patent No. 2173876, cl. G06F 11/18, Н05К 10/00 dated 09/20/01. Majority device.

3. RF patent No. 2174703, cl. G0F 11/18, Н05К 10/00 dated 10.10.01. Majority device.

Claims (1)

A mixed backup device containing the first and second subtracting amplifiers, the first and second relay elements, the first, second and third switches, the signal inputs of which are connected respectively to the first, second and third inputs of the device and to the first, second and third outputs of the backup channels, the first of which is connected to the inverting input of the first subtracting amplifier, the second to the non-inverting input of the first subtracting amplifier and to the inverting input of the second subtracting amplifier, and the third to the non-inverting input m of the second subtracting amplifier, while the outputs of the first and second subtracting amplifiers are connected respectively to the inputs of the first and second relay elements, the outputs of which are connected respectively to the control inputs of the first and second keys, the signal outputs of which are connected to the signal output of the third key and to the output of the device the fact that the fourth key and the logical element NOT are additionally introduced into it, the output of which is connected to the control input of the third key, and the input is connected to the output of the first relay element cient, yield backup link failure signal and to the control input of the fourth switch, a signal input coupled to a power line U _pit, and the signal output - to the input of the third feed channel.