Double 2-vote-2 safety redundancy control system and operation method thereof

Abstract

The invention provides a double 2-vote-2 safety redundancy control system and an operation method thereof. The control system comprises a master system and a slave system. The master system is provided with an online request reception unit and a synchronous data sending unit. The slave system is provided with an online request sending unit and a data synchronization unit. The master system and the slave system are respectively provided with a signalman variable. The control system and the operation method thereof have the following advantages: the control system is low in dependency on hardware; the master system and the slave system can operate in a dedicated single board computer or a general computer according to computation complexity; platform software in the master system and platform software of the slave system are independent of application software in the systems respectively and operate independently, wherein the platform software is in serial communication or parallel communication with a plurality of application software; variable address type reference data can be synchronized between the master system and the slave system; and the control system can be applied to different operating systems, and heterogeneity of the operating system is realized.

Description

technical field [0001] The invention relates to the field of control systems, in particular to a two-by-two safety redundant control system and an operating method thereof. Background technique [0002] In the real-time control system, in order to meet the safety, reliability and availability requirements of the control system, the safety-related control equipment adopts a two-by-two safety redundant computer system (also known as a two-by-two safety redundant control system). system). [0003] Such as figure 1 As shown, the two-by-two safety redundant control system in the related art is composed of the same master system 10 and slave system 13, the master system 10 includes CPU11 and CPU12, and the slave system 13 includes CPU14 and CPU15. The main system 10 and the slave system 13 are redundant in the form of master and backup. When the control system is running normally, the master system 10 works and the slave system 13 is synchronously backed up; after the master sys...

AI Technical Summary

Problems solved by technology

For reference data, since the data content stored at the same address may be different in the master system and the slave system, even if the master system sends the reference data to the slave system, the slave system cannot obtain it according to the received reference data The content stored in the corresponding address in the main system, so that the reference data of the variable address class cannot be synchronized between the main system and the slave system during synchronization

[0005] It can be seen that in the two-by-two safety redundant control system in the related art, the master system and the slave system cannot synchronize reference data such as variable addresses during synchronization.

Images