RU2647412C2 - Method of electronic unit backup and device for its implementation - Google Patents

Abstract

FIELD: electricity.

SUBSTANCE: in order to implement the method, all groups of control and display devices are put into operation, they are continuously checked for availability and operating readiness, the control signals are distributed between available and operationally ready electronic modules. The control device comprises at least two groups of control and indication devices of the electronic unit with a motor-operated switch, an electronic unit, electronic modules, a bus system, and sources of secondary power supply. The electronic module comprises a bus controller of the control and indication devices of the electronic unit, an intermodular exchange bus controller, an electronic unit bus controller.

EFFECT: increased reliability of the device due to the simultaneous operation of the primary and backup control means.

4 cl, 2 dwg

Description

The technical solution relates to the field of electrical engineering, in particular to methods for reserving semiconductor objects operating under the influence of mechanical vibration and shock, in difficult climatic conditions, and can be used in railway, sea or special transport, as well as in aviation.

Known electrical automation systems that use various options for backing up electrical signals by duplication, tripling, squaring, etc., which are often based on the principle of "main-standby", "active-standby", "hot-cold", etc. As a rule, the main - the active object operates at a normal load for it, and an identical backup object (one or several) is turned off or is in the "cold reserve". If the active object fails, it is replaced by the backup object. In this case, substitution is understood as a sequence of the following actions: receiving a signal about the failure of the active object, turning on and testing the backup object, transferring information from the replaced object to the backup one or instead of the replaced object, and turning off the replaced active object. If the backup facility is not turned off, but is in a less loaded state than the main one, then they speak of “lightweight reserve” (“warm reserve”) or “hot reserve” depending on the completeness of the functions performed by the reserve.

Automation systems, to which high demands are placed on reliability, availability, minimum switching time, must compensate for failures that occur and continuously maintain the system’s performance. Such systems include several constantly included redundant units, in which the load is either distributed between the main and standby units according to the “hot - warm” principle, or all units perform the same functions in parallel. Such systems are characterized by more sophisticated means of monitoring the status of the blocks and their electronic modules.

There is a method described in the invention, "A method of reserving semiconductor objects operating under the action of ionizing radiation" (RF patent No. 2413281, IPC G06F 11/20, H05K 10/00, published on 02.27.2011), selected as an analogue, consisting in that they use the active object and the backup object turned off, identical to it, and replace the active object with the backup one upon receipt of a replacement signal generated when the active object fails, while the backup object is first heated, then cooled, and then the active object is replaced with a backup.

The disadvantages of the method include the presence of a turned off backup facility, which is not used during normal operation. The inclusion of a backup facility requires a separate monitoring system, inclusion, etc., as well as the development of a number of operations in time, which leads to a significant delay in switching to a backup facility.

A known automation system described in the invention "Automation system and method of controlling an automation system" (RF Patent No. 2510932, IPC G06F 11/20, publ. 04/10/2014), selected as a prototype, containing the first and second (backup) automation controls at least one electronic unit and a bus system that connects both automation controls and at least one electronic unit that is connected to the bus system via an appropriate bus connection module, and a bus connection module not containing a first bus controller, which is connected to the first automation control means and connected to it via bus systems, a second bus controller, which is connected to the second automation control means and connected to it via the bus system, and a switching unit for switching between the two controllers.

The system control method consists in selecting one of the automation control means and connecting an appropriate bus controller, which is associated with the automation control means selected for control. The control is performed by the first device, and in case of failure, by the second device. At the same time, the availability and operational readiness of automation control devices are continuously monitored.

The disadvantage of the automation system is that the second automation control tool is not used during the serviceability of the first device, while it is exposed to external factors, which leads to wear and a decrease in its reliability.

The disadvantage of the method of controlling the automation system is the continuous testing of the availability of the backup tool, which is turned off, which does not correspond to the completeness (100%) of the parameter control, and is associated with time and energy costs, which should be minimized. The need to turn on or switch the backup and the main device and the bus controller causes the delay of switching to the backup object, the absence of hot redundancy (implemented "warm redundancy") reduces the reliability of the system and increases the complexity of designing backup automation systems.

The technical result of the claimed technical solution (device) and method is to increase the reliability of the device due to the simultaneous operation of the main and redundant control tools, presented in the form of a group of controls and indicators of the electronic unit and electronic module, performing various functions in the normal mode, which ensures rational use of resources and reducing the nominal load on each control, presented in the form of a group of controls and indication of electronic onnogo block and the electronic module, and due to the exchange of control data object shown in the form of an electronic unit, provided the minimum switching time to the standby control means shown as a group of controls and display electronic unit and an electronic module.

The technical result is achieved in that the device containing at least two groups of controls and indications of the electronic unit, as well as at least one electronic unit and a bus system that connects the groups of controls and indications of the electronic unit to each other and at least one electronic unit connected to the bus system by means of electronic modules, each of which contains a bus controller connected to its group of control and display elements of the electronic unit and connected to it Through a bus system, and in which each group of controls and indications of the electronic unit contains an electromechanical circuit breaker of the group, each electronic module contains an inter-module exchange bus controller and a bus controller connected to at least one electronic unit, wherein the inter-module exchange controllers are connected with each other through a bus system and each electronic module and the associated group of controls and indications of the electronic unit is connected to its own source of secondary electricity someone power, each electronic module and its associated group of controls and electronic display unit are made redundant for other electronic modules and related groups of controls and display of the electronic unit.

The technical result of the claimed technical solution (method) is that the backup method of the electronic unit is used, the device described above, in which the electronic modules control the respective groups of controls and indications of the electronic unit, as well as each other for availability and availability for operation, and in which to control the electronic unit include all electronic modules, and generate control signals based on data received from the associated group of controls and indications of the electronic unit, as well as signals received from the remaining electronic modules, while the control signals are distributed between the electronic modules and the associated groups of controls and indications of the electronic unit. All groups of controls and indications of the electronic unit operate simultaneously, while each electronic module associated with one group of controls and indications of the electronic unit controls part of the parameters of the electronic unit. Thus, the device is controlled by any group of controls and indications of the electronic unit, if it is accessible for control and ready for operation.

In case of failure of the elements of the group of controls and indications of the electronic unit or the associated electronic module, the parameters of the failed group of controls and indications of the electronic unit are controlled by any accessible electronic module and the associated group of controls and indications of the electronic unit, while control signals distributed between accessible and ready-to-use electronic modules and the corresponding groups of controls and displays of the electronic unit. Thus, as the controls fail within the groups of controls and indications of the electronic unit, control of the device parameters of the failed group of controls and indications of the electronic unit is transferred to the group that is accessible for control and ready for operation.

In FIG. 1 shows a functional diagram of the device, FIG. Figure 2 shows the transfer of control of the system parameters to a group of controls and indications of the electronic unit, accessible for control and ready for operation as the remaining groups of controls and indications of the electronic unit fail.

The device consists of:

1 - Groups of controls and displays of the electronic unit

2 - Electronic unit

3 - Bus system

3.1 - bus control and indication of the electronic unit

3.2 - bus intermodule exchange

3.3 - bus electronic unit

3.4 - busbar of the secondary electrical power source

4 - Electronic module

5 - Bus controllers

5.1 - bus controller associated with a group of controls and indications of the electronic unit

5.2 - intermodule bus controller

5.3 - bus controller associated with the electronic unit

6 - Electromechanical switch group of controls and indications of the electronic unit

7 - Source of secondary electrical power

The device consists of several (for example, three - group No. 1, group No. 2, group No. 3) control means — groups of control and indication elements 1 of the electronic unit 2 and associated identical electronic modules 4 (Fig. 1). Each electronic module 4 contains in its composition bus controllers 5.1, 5.2, 5.3. The bus controller 5.1 is connected to a group of control and display elements 1 of the electronic unit 2 and connected to it by a bus 3.1; the inter-module exchange bus 5.2 is connected by the bus 3.2 to the bus controllers 5.2 of similar electronic modules 4; the bus controller 5.3 is connected to the electronic unit 2 and connected to it by a bus 3.3. Each group of controls and indications 1 of the electronic unit 2 contains its own electromechanical switch 6. Each electronic module 4 and the associated group of controls and indications 1 of the electronic unit 2 are connected to their own secondary power supply 7 by a bus system 3.4.

The signal from the controls included in any of the groups of controls and indications 1 of the electronic unit 2, via bus 3.1, enters the corresponding electronic module 4, where the bus controller 5.1 performs its initial processing and generation of signals for the indicating device of the group of controls and indications 1 electronic unit 2 and health signals. The display device, which is part of the group of controls and indications 1 of the electronic unit 2, displays the current value of the control parameters of the electronic unit 2. From the electronic module 4 by the bus controller 5.2 intermodule exchange via bus 3.2 data on the entered parameters of the group of controls and indication 1 of the electronic unit 2 enter other electronic modules 4. In accordance with the entered parameters, the group of controls and displays 1 of the electronic unit 2, the associated electronic module 4 generates a control signal detecting and transmits it via the controller bus 5.3 and 3.3 in the electronic unit 2. In a particular embodiment of the device, wherein the method implemented by the electronic unit 2 redundancy FIG. 1, an electronic unit 2 is connected to each electronic module 4. In another embodiment, there may be several electronic units 2, and they can be connected to one or more electronic modules 4. For example, an autopilot can be connected as an electronic unit (automatic system flight, motion control) or a process stabilization system, such as welding, laser cutting, plasma chemical etching, etc.

In the event of a failure of the electronic module 4 associated with the control or indication elements that are part of the group of control and display elements 1 of the electronic unit 2 (Fig. 2), for example, group No. 1, the remaining electronic modules 4 receive a failure signal.

The electronic module 4 of the next group No. 3, associated with the corresponding group of control and display elements 1 of the electronic unit 2, if available and ready for operation, performs the functions of managing the parameters of group No. 1. In the event of a failure of the electronic modules No. 1 and No. 3, the control of the parameters of the failed groups goes to group No. 2.

The method is carried out in the following way. The electronic unit 2 is controlled by nine parameters that are evenly distributed between the groups of controls and displays 1 of the electronic unit 2 (See Fig. 2 n = k = m = 3). The distribution of parameters is implemented in electronic modules 4, for example, depending on the installation location of module 4, or upon receipt of the corresponding signal. In the event of a failure of individual controls of group No. 1, or an electronic module 4 connected to group No. 1, or when manually turned off by an electromechanical switch 6 of group No. 1, a signal of failure of group No. 1 immediately goes to the neighboring electronic module 4. In this case, the neighboring electronic module 4 will process six control parameters of block 2 (in addition to three “own” parameters - three parameters of the failed group) with their display on the associated group 2 indicating device. In case of failure of another group No. 3, all control parameters are transferred to the remaining operational group No. 2. Manual shutdown by an operator of a group of controls and indications 1 of electronic unit 2 using switch 6 is provided for cases of failures that are not diagnosed by means of electronic module 4 or in the event of an uncertainty. The electromechanical switch 6 disconnects the corresponding power source 7.

The device can be implemented by an instrument-making enterprise using electronic components manufactured by the industry. As an electronic unit, for example, an electronic automatic control unit SAU-1T-2B of an Il-76 aircraft can be used. As control and indication elements, lamp buttons from LEACH L-304 or PKN-542, PKN-544 of Smolensky Radio Parts Plant OJSC, which have a built-in light indication, as well as alphanumeric indicators IPV72-4 / 5x7L, factory "Proton" Oryol. An encoder E33-CT612-M01T manufactured by ELMA with the function of entering the set value can be used as a setpoint for the value of the control parameter. The electronic module can be made on the basis of the 1986VE3T controller of PKK Milander CJSC or a similar one having integrated SPI and MIL 1553 bus controllers and allowing the encoder to be used in the “rough” and “accurate” setting of the control parameter value. The autonomous power source is based on secondary power sources BP24 or BPM24 MPP Irbis, Moscow, an electromechanical switch - a PT-8 toggle switch USO.360.056TU.

A preliminary design was carried out, a mock-up of the control panel was made, which implements the backup method described above.

Improving the reliability of backup systems of semiconductor objects is ensured by the simultaneous parallel operation of the main and backup blocks of objects and the uniform distribution of load between them in normal mode.

In contrast to the prototype in the proposed technical solution due to the lack of a stage for switching on the backup control means, which are a group of control and indication elements 1 of the electronic unit 2 and the associated electronic module 4, the presence in all electronic modules 4 of relevant data on all control parameters and a negligible time of transmission of control signals between the modules 4, the switching time to the backup control means is reduced, due to which all control means are actually found are in a "hot reserve" in relation to each other.

In contrast to the prototype in the proposed technical solution due to the distribution of functions between objects, the load on each control facility in normal operation is reduced, in contrast to systems in which the backup control facility duplicates all the functions of the primary control facility, and systems in which the backup facility The control is on and idle. Thus, the load on the equipment is reduced and the rational use of resources is ensured, while the completeness of testing the working condition of all controls is ensured.

The proposed technical solution does not imply a rigid division into main and backup controls, consisting of a group of control and display elements 1 of electronic unit 2 and electronic module 4: with respect to any selected control means, the remaining controls will be redundant, while increasing the number of funds control can be implemented redundancy with high multiplicity (3 or more).

The device proposed in this technical solution provides the ability to control and generate control signals with the indication of pre-set or current values of the control parameters displayed by the display devices that are part of the groups of control and display 1 electronic unit 2.

The groups of controls and indications 1 of the electronic unit 2 and the electronic modules 4 are hardware identical, and can be located both in the form of groups in a monoblock device or in different devices, which greatly simplifies the design of the device.

The claimed technical solution has differences from the closest analogues, respectively, it satisfies the condition of patentability of the invention of "novelty."

The technical solution does not explicitly follow from the prior art. In addition, in the process of patent search did not reveal technical solutions having features that match the distinctive features of the claimed technical solution.

The claimed technical solution is technically feasible, industrially feasible at the instrument-making enterprise, the tests carried out confirm the achievements of the claimed technical result. In this regard, the claimed technical solution meets the condition of patentability "industrial applicability".

Claims (4)

1. The control method of the electronic unit, in which the control device continuously monitors the corresponding redundant groups of controls and indications of the electronic unit for availability and availability for operation, characterized in that for controlling the electronic unit include all electronic modules, generate control signals based on data, received from related groups of control and indication bodies, as well as signals received from the remaining electronic modules, while the control signals p are defined between available and ready-to-use electronic modules and related groups of controls and displays of the electronic unit. 2. The method of controlling the electronic unit according to claim 1, characterized in that in the event of failure of elements of one of the redundant groups of control and display units of the electronic unit or the associated electronic module, the parameters of the failed group of control and display units of the electronic unit are controlled by any available for control electronic module and related group of controls and indications of the electronic unit. 3. A control device comprising at least two groups of controls and indications of an electronic unit, at least one electronic unit and a bus system that connects at least two groups of controls and indications of an electronic unit and at least one electronic unit, at least one electronic unit is connected to the bus system by means of a corresponding electronic module, which contains a bus controller associated with a corresponding group of controls and indications of the electronic unit via a bus system, characterized in that each electronic module contains an intermodule exchange bus controller, a bus controller connected to at least one electronic unit, while the intermodule exchange bus controllers of all electronic modules are connected to each other via a bus system, each electronic the module and the associated group of controls and indications of the electronic unit are connected to its own source of secondary electrical power, each electronic module and the associated group of organs Government & electronic display unit are interchangeable for the other electronic modules and their associated groups of control and display electronic unit. 4. The device according to p. 3, characterized in that each group of controls and indications of the electronic unit contains an electromechanical switch.

Images