Universal double 2-vote-2 computer architecture and implementation method thereof

Abstract

The invention belongs to the technical field of safety critical computers, and provides a universal double 2-vote-2 computer architecture which comprises a maintenance board MTN30, a computer I systemand a computer II system, wherein the computer I system and the computer II system are identical in structure; the computer I system and the computer II system are in data connection with the maintenance board MTN30 through an ARINC 659 bus; the ARINC 659 bus is used for data interaction and data two-out-of-two comparison of the computer I system and the computer II system; the maintenance boardMTN30 provides upgrading software programs for different CPU modules in the computer architecture and records faults; the computer I system comprises a self-monitoring processor board VCU and a self-monitoring input/output board DIO; the self-monitoring processor board VCU is combined with control software to perform computer system integration and logic control; and the self-monitoring input/output board DIO is used for collecting an external switching value and driving an external relay. The method has the advantages of high safety, high reliability, modular reconfiguration, easiness in maintenance and expansion, convenience and quickness in operation and the like, and provide a universal product for a railway signal system.

Description

technical field [0001] The invention belongs to the technical field of safety-critical computers, and in particular relates to a general two-by-two computer architecture and an implementation method thereof. Background technique [0002] In the field of railway signaling, in order to improve the safety and reliability of train control, a centralized, two-by-two-out-of-two architecture is generally adopted, where "two-by-two" refers to two sets of two-way signals that can operate independently and seamlessly switch between each other. Redundant redundant master / standby system, 2 CPUs of each channel operate independently, and then compare and vote the processing results, if the results are consistent, the output will be normal, if they are inconsistent, a fault will be reported. In this architecture, computing resources are highly concentrated on the CPU module In general, real-time tasks such as data collection, processing, and comparison are all completed by the CPU, and th...

AI Technical Summary

Problems solved by technology

[0002] In the field of railway signaling, in order to improve the safety and reliability of train control, a centralized, two-by-two-out-of-two architecture is generally adopted, where "two-by-two" refers to two sets of two-way signals that can operate independently and seamlessly switch between each other. Redundant redundant master / standby system, 2 CPUs of each channel operate independently, and then compare and vote the processing results, if the results are consistent, the output will be normal, if they are inconsistent, a fault will be reported. In this architecture, computing resources are highly concentrated on the CPU module In general, real-time tasks such as data collection, processing, and comparison are all completed by the CPU, and the clock and tasks are synchronized between the redundancy through the handshake circuit or software. The execution cycles of each task in each system are different and cannot be reconfigured. , and the software is tightly coupled with the hardware, the change of the hardware will cause the modification of the software, and at the same time, any partial software modification may cause a large system security risk

In addition, since each processor generally uses its own serial interface or network interface for maintenance and upgrade, each processor needs to form a physical topology connection with the host computer, which is inefficient and cannot meet the requirements of existing products

Images