System conforming to SIL4 security level and used for judging double-system main and standby states

Abstract

The invention discloses a system conforming to an SIL4 security level and used for judging dual-system main and standby states, and relates to the technical field of dual-system hot standby systems. Comprising a first single-mode channel and a second single-mode channel which are connected to a back plate and have the same structure; the first single-mode channel comprises a first CPU, a second CPU, a first FPGA module, a second FPGA module and a backboard interface, the first FPGA module and the second FPGA module are both connected to the backboard interface, and master-slave state output circuits and master-slave state acquisition circuits are arranged between the first FPGA module and the backboard interface and between the second FPGA module and the backboard interface; the first single-mode channel and the second single-mode channel are respectively connected to the back plate through respective back plate interfaces, and the first single-mode channel and the second single-mode channel respectively output two groups of SP I signals through SP I communication interface circuits between the first single-mode channel and the back plate interfaces and between the second single-mode channel and the back plate interfaces; the method has the beneficial effects that the main and standby states of the double systems can be effectively judged, and the data exchange between the double systems is ensured.

Description

technical field [0001] The invention relates to the technical field of dual-system hot-standby systems, and more particularly, the invention relates to a system for judging the active-standby state of dual-systems conforming to SIL4 safety level. Background technique [0002] The dual-machine hot standby system is widely used in various control systems because of its high availability and reliability, and at the same time, it has a certain fault tolerance capability and is convenient for operators to maintain. [0003] In the dual-system hot-standby system, the preset and switching of the "main system" and the "standby system" is the key to realize the function of the dual-system hot-standby system. In a dual-system hot-standby system, the two systems rely on the interlocking logic implemented by hardware or software to confirm the "main" or "standby" status of the dual systems. The two departments exchange information with each other through a specific communication method...

AI Technical Summary

Problems solved by technology

[0004] In the existing technology, since the information exchange depends on the mutual communication between the two systems, the communication must be affected by various interferences

In extreme cases, once the communication between the two systems is cut off, the interlock logic between the two systems cannot exchange information with each other, and cannot judge whether the other party "system" of the dual-system hot standby system exists, which will cause the original "primary" The system still maintains the primary state, and the original "standby" system is upgraded to the "primary" system by mistake, resulting in a dual-primary state

The dual-master state will affect the control logic of the dual-system hot standby system, which will bring greater risks to the normal operation of the dual-system hot standby system and enter an unsafe state

Images