WO2013041352A1 - Dispositif de réseau et ensemble de réseaux - Google Patents

Dispositif de réseau et ensemble de réseaux Download PDF

Info

Publication number
WO2013041352A1
WO2013041352A1 PCT/EP2012/067111 EP2012067111W WO2013041352A1 WO 2013041352 A1 WO2013041352 A1 WO 2013041352A1 EP 2012067111 W EP2012067111 W EP 2012067111W WO 2013041352 A1 WO2013041352 A1 WO 2013041352A1
Authority
WO
WIPO (PCT)
Prior art keywords
network
devices
network device
switch
control
Prior art date
Application number
PCT/EP2012/067111
Other languages
German (de)
English (en)
Inventor
Michael Armbruster
Ludger Fiege
Johannes Riedl
Thomas Schmid
Andreas Zirkler
Original Assignee
Siemens Aktiengesellschaft
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Aktiengesellschaft filed Critical Siemens Aktiengesellschaft
Publication of WO2013041352A1 publication Critical patent/WO2013041352A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/58—Association of routers
    • H04L45/583—Stackable routers
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/1629—Error detection by comparing the output of redundant processing systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/2002—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where interconnections or communication control functionality are redundant
    • G06F11/2007—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where interconnections or communication control functionality are redundant using redundant communication media

Definitions

  • Network Device and Network Device The present invention relates to a network device and a network device.
  • Network devices or network nodes are installed in communication networks and can, for example, generate and process sensor data or control data.
  • redundant communication paths must be error-free and reliable even in the event of hardware component faults.
  • link breaks or unidirectional communication interruptions as well as total component failures may occur.
  • Ethernet protocol or Internet Protocol ⁇ level the communication will be rerouted via an alternate communication path.
  • ⁇ network devices or nodes there are also redundant built on ⁇ network devices or nodes used, for example, a microprocessor of a controller is duplicated, so that can communicate data comparable work reliably on failure of one of the two microprocessors yet.
  • the connection to the network takes place via an internal Ethernet switch of the network device.
  • the connection to the associated or associated control device is then completely lost.
  • the diesel ⁇ ben tasks such as measurements or controls, takes place, be avoided.
  • More complex error cases in which, for example, due to problems with forwarding tables only individual data packets are forwarded incorrectly, can not be determined by such conventional measures. In that sense it is desirable, particularly for safety-related network ⁇ plant applications to provide network devices that reliably carry out its task even for complex error situations.
  • a network device is proposed with a first control device and a first switch device associated with the first control device, and with a second control device and a second switch device assigned to the second control device.
  • the network device has a first and a second communication interface for coupling to a communication network, wherein the switch devices each comprise at least two ports and the switch devices are communicatively coupled to one another.
  • the network device which may also be referred to as a network node, has, in particular, two switch devices which are implemented independently of one another.
  • a control device for example, a CPU, a microprocessor or other programmable circuit in question.
  • a control device may further be understood a sensor device.
  • the network device allows for redundant channels on switching plane, so that also the failure of one of the switch means, at least one of the can continue to operate also redundantly maintained Steuerein ⁇ directions.
  • a communicative coupling of the switch means with each other can also identify whether a fully functional communica tion ⁇ connection exists to the communication network or Also, one of the components, such as the controllers or switch devices, malfunctions.
  • the switch device may also be referred to as a bridge device or router device.
  • the at least two ports a first port is for example coupled to the respectively associated control device ⁇ , and the second port is connected as a communication interface with the network.
  • a network is in particular an Ethernet in question.
  • bus systems or networks such as Flexray or CAN, are also conceivable.
  • the network device comprises as a module components, such as ICs, each implementing a control device and a switch device.
  • the switch devices are coupled to each other via a communication path outside the network device via the communication network.
  • a communication path outside the network device via the communication network.
  • Communication path are coupled together within the network device.
  • a direct port-to-port connection may be realized within the network device implemented as a unified module.
  • the controllers are coupled together via a direct communication path within the network device.
  • This allows, for example Redun ⁇ Dante data directly between the control devices, which are, for example, actuator-sensor combinations, compare before the transfer to the switch means and the communication network to each other and match.
  • the switch means are each designed as a ⁇ of individual FPGA, ASIC, IC chip, or micro hardwired circuit. Characterized in that the switch A ⁇ directions or optionally further separating the control means are designed overall, results in improved impedance and thus Redun ⁇ error independence.
  • the network device is set up such that generated by the first control means data generated by the second controller data are identical and / or include the same information and transmitted via the communication interface of the ⁇ len in the communication network.
  • the redundant design with at least two switch devices makes it possible to generate a plurality of communication paths or channels over which, ideally, the same data are sent.
  • control data or sensor data which are sent to other network devices which are coupled to the communications network can be used as data.
  • control devices are furthermore set up in such a way that the data generated by them are matched with one another. This can for example be done directly by means of a communication ⁇ path between the two control devices. It is also conceivable for the switch devices to match the data generated by the control devices with one another and then to transfer these to the communication network via a respective port of the switch device.
  • the network device is set up in particular to work according to an Ethernet protocol.
  • Ethernet protocols are widespread and can be implemented flexibly in automation networks, for example, or even recently used in vehicles.
  • Conceivable are corresponding communication networks and network devices, for example way to control an engine, a brake or other technical equipment, which are provided in a vehicle.
  • the redundant design of the internal switch device in the network device enables particularly secure operation.
  • the network device may include other controllers and other switch devices associated with the controllers. By additional switch equipment and control facilities, the redundancy can be increased, thereby improving the reliability in disorders of communication ⁇ paths.
  • a network arrangement is also proposed which comprises a plurality of network devices as described above.
  • the communication interfaces of the network devices are coupled to a common communication network. It is conceivable, for example, an Ethernet network, which
  • the network arrangement is particularly suitable for use in a vehicle, the control devices being sensor and / or actuator devices.
  • the control devices being sensor and / or actuator devices.
  • As sensor devices, speed sensors, brake or shift control devices are conceivable.
  • a particularly reliable network arrangement results, in which interference from communication channels is reliably absorbed. Due to the redundant provision of the control devices and the switch devices, the
  • Fig. 1 is a schematic representation of a first embodiment of a network device
  • FIG. 2 is a schematic representation of a second embodiment of a network device
  • Fig. 3 is a schematic representation of an embodiment of a network arrangement with multiple network devices.
  • the network device 1 shows a schematic representation of a first embodiment of a network device.
  • the network device 1 may also be referred to as a network node or nodes in a network.
  • the network device 1 is coupled to a communication network 6.
  • the communication network 6 is designed, for example, as an Ethernet network.
  • the network device 1 comprises two switch devices 4, 5, which are designed as Ethernet switches or bridges.
  • a first switch devices 4, 5 which are designed as Ethernet switches or bridges.
  • Switch device 4 is a first control device 2 zuge- assigns.
  • the second Ethernet switch device 5 is assigned a second control device 3.
  • the control devices 2, 3 are of identical construction and usually vollzie ⁇ hen the same tasks. Conceivable, for example, micro- processors, sensor devices or actuator devices, as they are ver ⁇ applies for the control and operation of a motor vehicle.
  • the controllers 2, 3 are also referred to as CPUs.
  • the control devices 2, 3 may for example be part of an anti-lock braking system or even perform simple sensor tasks such as light sensors.
  • Corresponding sensor data must be reliably transmitted via the Ethernet network 6 to corresponding further network devices, such as control circuits or other modules.
  • the first control device 2 is coupled to a port 7 of the first switch device 4.
  • the switch device 4 is further connected via a second port 8, which serves as the interface of the ⁇ len issued, connected to the Ethernet network. 6
  • the second controller 3 is connected via a port 10 to the second Ethernet switch device 5.
  • a port 12 of the second Ethernet switch device 5 is used in this embodiment for coupling to the Ethernet 6th
  • the switch devices 4, 5 shown in FIG. 1 each have three ports 7 - 12.
  • the respective third port 9, 11 enables a communication connection or a communication path 17 between the two switch devices 4, 5.
  • the two CPUs or control devices 2, 3 generate the same data, which they transmit via a communication path 13, 14 to the associated switch device 4, 5, which in turn send the data to the network 6 using further communication paths 15, 16.
  • By the coupling 17 of the two switch devices 4, 5 with each other it can already be checked whether the data generated by the CPUs 2, 3 are consistent with each other.
  • the data are also transmitted via the communication network 6 between the switch devices 4, 5.
  • the network device 1 with the two Ethernet switch components 4, 5, which are preferably designed as ASICs or FPGAs, and the coupling of the CPUs 2, 3 to the switch devices 4, 5, is always a functional communication connection to the network 6 given, even if one of the components should fail.
  • the internal linkage ⁇ tion of the data between the switch devices 4, 5 also allows an improved error detection and classification complex error structures or situations.
  • FIG. 2 shows a corresponding exemplary embodiment of a network device 100.
  • the same components as in FIG. 1 are shown.
  • the ports 9, 11 are used.
  • the data duplication can take place for example within the Ethernet switches 4, 5 by their coupling with each other. Subsequently, the two data, which were generated by the CPU 2 or 3, transferred via the respective ports 8, 12 to the network 6.
  • FIG. 3 shows a network arrangement 101 with a plurality of network devices, as shown in FIG. 2 as a possible embodiment.
  • three network nodes or network devices 100, 200, 300 are shown, each comprising two CPUs or controllers 2, 3, 202, 203, 302, 303.
  • Each of the CPUs 2, 3, 202, 203, 302, 303 has a zugeord ⁇ designated Ethernet switch means 4, 5, 204, 205, 304, 305.
  • the respective CPU 2, 3, 202, 203, 302, 303 is connected via a communication path 13, 14, 213, 214, 313, 314 directly to the switch device 4, 5 204, 205, 304, 305.
  • the switch devices 4, 5, 204, 205, 304, 305 each hold three ports 7 - 12, 207 - 212, 307 - 317.
  • Network nodes internally each of the second port 8, 11, 208, 211, 308, 311 of the switch devices 4, 5, 204, 205, 304, 305 are coupled together. This is shown by the arrow in FIG. 3 respectively.
  • the third port 9, 12, 209, 212, 309, 312 enables a connection to the (ether) network 6.
  • the configuration of the network devices or nodes 100, 200, 300 enables a secure operation of the network arrangement 101. This is particularly necessary if a corresponding network arrangement 101 is used in vehicles or security-sensitive automation networks.
  • the first network device 100 acquires safety-relevant sensor data, for example the foot position of an accelerator pedal, and transmits this to a display device which corresponds to the node 300.
  • the corresponding accelerator pedal position is coded by means of sensor data, which generate the two CPUs 2, 3 and their associated ⁇ arranged switch devices 4, 5 through the ports 9, 12 to the network.
  • the data is for example with each other coded or linked, however, contain the same information in the error-free case.
  • the data arrive via the communication path 15 to the port 312 of the destination network device 300 or its switch device 305.
  • the same sensor data should be transmitted from the port 12 of the switch device 5 via the switch device 204 and 205 reach the switch device 304.
  • the CPUs 302, 303 thus receive the same data. If one of the communication channels is disturbed, for example as a result of failure of the CPU 3, sensor data are still reliably sent to the display device or network device 300 via the communication path 15.
  • the redundant provision of switch devices results overall in the error safety and robustness of a corresponding network arrangement 101 improved.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Small-Scale Networks (AREA)

Abstract

L'invention concerne un dispositif de réseau (1) doté : d'un premier dispositif de commande (2) et d'un premier dispositif de commutation (4) affecté au premier dispositif de commande (2), d'un deuxième dispositif de commande (3) et d'un deuxième dispositif de commutation (5) affecté au deuxième dispositif de commande (3). Les dispositifs de commande et de commutation (2, 3, 4, 5) sont équipés de canaux indépendants qui peuvent être couplés chacun à un réseau de communication (6) par l'intermédiaire d'une première et d'une deuxième interface de communication (9, 12). Les dispositifs de commutation (4, 5) comportent chacun au moins deux ports (7, 9, 10, 12) et sont couplés de manière communicative entre eux. Le découplage des deux canaux à l'aide de dispositifs de commutation séparés (4, 5) permet d'assurer une meilleure sécurité en cas de défaillance. La présente invention concerne en outre un ensemble de réseaux (101) équipé de plusieurs dispositifs de réseau correspondants (100, 200, 300).
PCT/EP2012/067111 2011-09-19 2012-09-03 Dispositif de réseau et ensemble de réseaux WO2013041352A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102011082943.1 2011-09-19
DE102011082943A DE102011082943A1 (de) 2011-09-19 2011-09-19 Netzwerkeinrichtung und Netzwerkanordnung

Publications (1)

Publication Number Publication Date
WO2013041352A1 true WO2013041352A1 (fr) 2013-03-28

Family

ID=46851438

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2012/067111 WO2013041352A1 (fr) 2011-09-19 2012-09-03 Dispositif de réseau et ensemble de réseaux

Country Status (2)

Country Link
DE (1) DE102011082943A1 (fr)
WO (1) WO2013041352A1 (fr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102017204691B3 (de) * 2017-03-21 2018-06-28 Audi Ag Steuervorrichtung zum redundanten Ausführen einer Betriebsfunktion sowie Kraftfahrzeug

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002074596A1 (fr) * 2001-03-15 2002-09-26 Robert Bosch Gmbh Procede pour amorcer le composant d'un systeme reparti de securite
WO2003021896A1 (fr) * 2001-08-31 2003-03-13 Motorola, Inc. Reseau actif de vehicule comportant des appareils tolerants aux fautes
DE102008062594A1 (de) * 2008-12-16 2010-07-01 Diehl Aerospace Gmbh Mehrkanal-Kontrollermodul

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5953314A (en) * 1997-08-28 1999-09-14 Ascend Communications, Inc. Control processor switchover for a telecommunications switch
US6804193B1 (en) * 2000-07-28 2004-10-12 Marconi Intellectual Property (Ringfence) Inc. Protected Ethernet backplane communication
US7359317B1 (en) * 2004-02-20 2008-04-15 Excel Switching Corporation Redundancy arrangement for telecommunications switch
US9052887B2 (en) * 2010-02-16 2015-06-09 Freescale Semiconductor, Inc. Fault tolerance of data processing steps operating in either a parallel operation mode or a non-synchronous redundant operation mode

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002074596A1 (fr) * 2001-03-15 2002-09-26 Robert Bosch Gmbh Procede pour amorcer le composant d'un systeme reparti de securite
WO2003021896A1 (fr) * 2001-08-31 2003-03-13 Motorola, Inc. Reseau actif de vehicule comportant des appareils tolerants aux fautes
DE102008062594A1 (de) * 2008-12-16 2010-07-01 Diehl Aerospace Gmbh Mehrkanal-Kontrollermodul

Also Published As

Publication number Publication date
DE102011082943A1 (de) 2013-03-21

Similar Documents

Publication Publication Date Title
DE102011082969B4 (de) Verfahren zum Betreiben eines Kommunikationsnetzwerkes und Netzwerkanordnung
EP1763454B1 (fr) Systeme redondant de bus de donnees
EP2838220B1 (fr) Procédé de transmission redondante de messages dans un réseau de communication industriel et appareil de communication
WO2013041355A1 (fr) Procédé de fonctionnement d'un ensemble de réseaux et ensemble de réseaux
EP2302472B1 (fr) Système de contrôle de processus critiques pour la sécurité
EP2783487B1 (fr) Procédé d'exploitation d'un réseau de communication et système de réseau
EP3170288B1 (fr) Noeuds de réseau, module de commande d'un composant et anneau ethernet
EP2783484B1 (fr) Procédé d'exploitation d'un réseau de communication et système de réseau
EP2146881A1 (fr) Système de freinage électromécanique muni d'une alimentation en énergie à sécurité intégrée et procédé pour assurer une alimentation en énergie à sécurité intégrée dans un système de freinage électromécanique pour
DE10353950A1 (de) Steuerungssystem
EP2670087A1 (fr) Dispositif de réseau, agencement de réseau et procédé de fonctionnement d'un agencement de réseau
EP3295645B1 (fr) Procédé et système de transmission sans effet rétroactif de données entre réseaux
WO2016008948A1 (fr) Système de commande et de transmission de données, module de passerelle, module e/a et procédé de commande de processus
EP2880823B1 (fr) Réseau de communication et procédé d'utilisation d'un réseau de communication
EP2675114B1 (fr) Procédé pour expoiter une formation de réseau , un arrangement de réseau et une formation de réseau
EP4126614A1 (fr) Système de freinage doté d'au moins deux sources d'énergie
EP3020162B1 (fr) Déduplication sémantique
DE102018220605A1 (de) Kraftfahrzeugnetzwerk und Verfahren zum Betreiben eines Kraftfahrzeugnetzwerks
EP2286310A1 (fr) Système de commande, ordinateur de commande et procédé pour utiliser un système de commande
WO2013041352A1 (fr) Dispositif de réseau et ensemble de réseaux
WO2016119946A1 (fr) Gardien de bus dans un bus de données
EP2767877B1 (fr) Système de commande et de transmission de données pour la transmission de données liées à la sécurité via un bus de terrain
DE102012212680A1 (de) Verfahren und System zur fehlertoleranten Steuerung von Stellgliedern für eine begrenzte Zeit auf der Grundlage von vorberechneten Werten

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12759067

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 12759067

Country of ref document: EP

Kind code of ref document: A1