A self-monitoring and fault-tolerant control method for non-similar dual-redundant four-machines

Abstract

The invention discloses a self-monitoring fault-tolerant control method of non-similar dual-redundancy four processors. By using the method disclosed by the invention, system resources can be fully utilized to ensure that the fault processor is accurately positioned, a single point of failure caused by fault of an arbitration unit is avoided, secondary-fault work and third-fault safety can be realized, the reliability of the system is increased and the service life of the system is prolonged. According to the method disclosed by the invention, four processor systems are connected by adopting synchronous serial channels and rapid information transmission channels can be built among the processors so as to transmit status requests and information needing vote; a mode of synchronizing the processor status is adopted to ensure that starting signals can be synchronously sent by the processor systems at each voting point and the task-level synchronous operation is achieved; whether a fault processor exists or not is recognized and which processor is in normal use is confirmed according to the synchronizing result and the voting result; and under the circumstance of fault occurs, the fault processor system is degraded and isolated by a management system and continues working in the degrade mode.

Description

technical field [0001] The invention relates to the technical field of embedded computers, in particular to a non-similar dual-redundancy four-machine self-monitoring fault-tolerant control method. Background technique [0002] Non-similar dual-redundancy four-machines are usually composed of two identical channels, one of which is used as the main channel and the other is used as the backup channel; each channel uses two processors, and the two processor types are different from each other, one of which is As the main control processor, it is responsible for outputting the final calculation results, and the other as the monitoring processor only plays a monitoring role; the system has an independent arbitration unit for output comparison and channel switching control, such as figure 1 shown. [0003] Four processors perform the same task simultaneously. In the same channel, the main control processor and the monitoring processor exchange data through a dual-port RAM or a ...

Images