Degradable three-machine redundancy fault-tolerant system

Abstract

A degradable three-machine redundancy fault-tolerant system consists of three single machines such as a machine A, a machine B, a machine C which have the same structure, a public memory, an arbitration switching unit, and the output drivers of the three machines; the machine A, the machine B and the machine C achieve the exchange of treatment results among the three machines by reading and writing the output results of the single machines in the public memory so as to conduct three-machine voting; in addition, the machine A, the machine B and the machine C can also achieve three-machine or dual-machine synchronization by reading and writing the process information in the public memory; the machine A, the machine B and the machine C are connected with each other so that any one machine can read the status information whether another party is in normal work currently; the machine A, the machine B and the machine C are also connected with the arbitration switching unit and provide self-status information for the arbitration switching unit, and the arbitration switching unit can conduct the redundancy degrading of three-machine work/dual-machine work/single-machine work and the redundancy system reconfiguration of three-machine work/dual-machine work/single-machine work, in addition, the arbitration switching unit is also connected with the output drivers of the three machines and decides the use right of the machine A, the machine B and the machine C to the output line; and as for the three machines in normal work, the output is provided with a priority order, namely the machine A-the machine B-the machine C in sequence. The invention has the advantages of high reliability and long service life.

Description

technical field [0001] The invention relates to an embedded three-machine redundant backup technology, in particular to a degradable three-machine redundant fault-tolerant system. Background technique [0002] Some critical occasions in aerospace and other fields require high availability of its subsystems and long working life, such as temperature control systems. For these applications, any loss caused by control system failure is unbearable of. The traditional dual-machine redundant control system has the following disadvantages: such as dual-machine hot backup, although it can reduce the switching time between the main and standby machines when a single machine fails, the working life of the system will be significantly reduced; dual-machine cold backup or warm backup , although a longer working life can be obtained, the system recovery time is relatively long when a single machine fails, and the above two schemes cannot meet the reliability and working life required by...

AI Technical Summary

Problems solved by technology

[0002] Some critical occasions in aerospace and other fields require high availability of its subsystems and long working life, such as temperature control systems. For these applications, any loss caused by control system failure is unbearable of

The traditional dual-machine redundant control system has the following disadvantages: such as dual-machine hot backup, although it can reduce the switching time between the main and standby machines when a single machine fails, the working life of the system will be significantly reduced; dual-machine cold backup or warm backup , a...

Images