Control or / and protection system memory soft error processing method and system

Abstract

The invention discloses a control or / and protection system memory soft error processing method and system, and belongs to the technical field of industry, and the processing method comprises the following steps: when detecting that a control or / and protection system generates a memory soft error, locking a data transmission outlet of the control or / and protection system; restarting and recovering the state of the control or / and protection system to a test state; detecting whether the control or / and protection system works normally, if so, opening a data transmission outlet of the control or / and protection system, and switching the operation state of the control or / and protection system to a set state; and if not, uploading an abnormal signal to the terminal. According to the processing method, the memory soft error can be detected in time, system restart recovery can be carried out, the system running state can be switched in time, and the influence of the memory soft error on an application layer is reduced.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of industry, and particularly relates to a memory soft error processing method and system of a control or / and protection system. BACKGROUND

[0002] Memory soft error (SER) refers to random and temporary data errors occurring in a microcomputer chip memory system. The errors are not caused by permanent hardware damage or physical defects, but are caused by temporary unstable states caused by external environmental factors.

[0003] At present, a chip with memory hardware error detection and correction (EDC) and error checking and correction (ECC) functions is generally used to reduce the probability of memory soft errors, but memory soft errors are inevitable.

[0004] The working environment of a control protection system in the industrial field is complex, and various factors may cause memory soft errors of the system, resulting in abnormal problems such as system misadjustment, protection misoperation or refusal to operate, and causing great adverse effects on the application layer. SUMMARY

[0005] The application embodiment provides a memory soft error processing method and system of a control or / and protection system, which aims to reduce the influence of system memory soft errors on the application layer.

[0006] Technical scheme: The application embodiment provides a memory soft error processing method of a control or / and protection system, which comprises the following steps:

[0007] Real-time detection is performed on the memory of the control or / and protection system, and when it is detected that a memory soft error occurs, a data transmission output port of the control or / and protection system is locked;

[0008] The control or / and protection system is automatically restarted, and the running state of the control or / and protection system is initialized to a test state;

[0009] It is detected whether the control or / and protection system is normally working, if yes, the data transmission output port of the control or / and protection system is opened, and the running state of the control or / and protection system is switched to a set state; if not, an abnormal signal is uploaded to a terminal.

[0010] In some embodiments, the state of the control or / and protection system is switched to a set state, specifically comprising:

[0011] The set state is a designated running state of the control or / and protection system, or a running state of the control or / and protection system before a memory soft error occurs.

[0012] In some embodiments, the control or / and protection system adopts a non-redundant configuration.

[0013] For the control or / and protection system in a non-redundant configuration, the set state is a designated running state of the control or / and protection system, specifically, the set state is an on-duty state.

[0014] In some embodiments, the control or / and protection system adopts a redundant configuration.

[0015] For the control or / and protection system in a redundant configuration, the set state is a designated running state of the control or / and protection system, specifically:

[0016] For the control system in a redundant configuration, the set state is one of a test state, a service state, a standby state, and an on-duty state.

[0017] For the protection system in a redundant configuration, the set state is one of a test state and an on-duty state.

[0018] In some embodiments, the set state is a running state of the control or / and protection system before a memory soft error occurs, and the specific steps include: recording a running state of the control or / and protection system and saving it to a non-volatile memory, and reading the running state of the control or / and protection system from the non-volatile memory when a memory soft error occurs in the control or / and protection system.

[0019] The application also discloses a control or / and protection system having a data transmission output, and the control or / and protection system comprises:

[0020] A first detection module configured to detect the control or / and protection system in real time, and transmit a memory soft error exception signal to a controller when detecting that a memory soft error occurs in the control or / and protection system.

[0021] A second detection module configured to detect whether the control or / and protection system is working normally, and transmit a detected working signal to the controller.

[0022] A controller configured to receive the memory soft error exception signal sent by the first detection module, to lock the data transmission output port, and to control the control or / and protection system to restart; after the control or / and protection system restarts, the controller initializes the running state of the control or / and protection system to a test state;

[0023] The controller is further configured to receive the working signal of the control or / and protection system sent by the second detection module, to open the data transmission output port of the control or / and protection system, and to switch the running state of the control or / and protection system to a set state when the controller receives the normal working signal of the control or / and protection system;

[0024] When the controller receives the abnormal working signal of the control or / and protection system, the controller uploads the abnormal working signal to a terminal.

[0025] In some embodiments, the control or / and protection system further comprises a non-volatile storage module configured to record and save the control or / and protection system state;

[0026] The controller is further configured to read the running state of the control or / and protection system before the memory soft error occurs from the non-volatile storage module, and to switch the running state of the control or / and protection system to the running state before the memory soft error occurs.

[0027] In some embodiments, the control system adopts a redundant configuration;

[0028] The control system is configured with two sets, and the two sets of control systems are signal-connected;

[0029] During normal operation, one control system is in a duty state, and the other control system is in a standby state;

[0030] When the control system in the duty state has a memory soft error, the control system in the duty state locks the data transmission output port, and the control system in the standby state cannot receive the normal working signal of the former and can automatically switch from the standby state to the duty state.

[0031] In some embodiments, the protection system adopts a redundant configuration;

[0032] The protection system is configured with two sets, and the two sets of protection systems are signal-connected;

[0033] During normal operation, both sets of protection systems are in a duty state, and the exit mode of the protection function is that one set of protection systems in the two sets of protection systems meets the protection criterion, i.e., outputs a protection instruction.

[0034] When any one of the protection systems has a memory soft error, the data transmission output port of the protection system is locked, and the other protection system cannot receive the normal working signal of the former, and is automatically configured to meet the protection criterion, i.e., output a protection instruction.

[0035] Or the protection system is configured with three sets, and the three sets of protection systems are connected by signals.

[0036] During normal operation, the three sets of protection systems are in a duty state, and the export mode of the protection function is:

[0037] Two of the three sets of protection systems meet the protection criterion, i.e., output a protection instruction.

[0038] When any one of the protection systems has a memory soft error, the data transmission output port of the protection system is locked, and the other two sets of protection systems cannot receive the normal working signal of the former, and are automatically configured to meet the protection criterion, i.e., output a protection instruction.

[0039] Compared with the prior art, the application has the following beneficial effects:

[0040] The system memory soft error processing method of the embodiment of the application comprises the following steps: real-time detection of the memory of the control or / and protection system, locking the data transmission output port of the control or / and protection system when a memory soft error is detected; automatically restarting the control or / and protection system and initializing the running state of the control or / and protection system to a test state; detecting whether the control or / and protection system is working normally, if so, opening the data transmission output port of the control or / and protection system and switching the running state of the control or / and protection system to a set state; if not, uploading an abnormal signal to a terminal. The application detects the memory of the control or / and protection system in real time, locks the data transmission output port of the control or / and protection system when a memory soft error occurs, avoids abnormal problems such as system miscontrol, protection misoperation or refusal to operate, etc. without additional hardware cost, automatically restarts the system and switches to a set state, avoids unnecessary maintenance personnel intervention, reduces the duration of memory soft error abnormalities, and improves the fault handling efficiency.

[0041] The control or / and protection system of the embodiment of the application comprises a first detection module, a second detection module and a controller, which are used to realize the memory soft error processing method of the control or / and protection system of the application. Therefore, it can be understood that the control protection system of the application has the same beneficial effects as the processing method, which will not be described here. BRIEF DESCRIPTION OF DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the embodiments description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort based on these drawings.

[0043] Figure 1 is a flow diagram of a method for controlling or / and protecting memory soft error processing in a system according to an embodiment of the present application;

[0044] Figure 2 is another flow diagram of a method for controlling or / and protecting memory soft error processing in a system according to an embodiment of the present application;

[0045] Figure 3 is a structural diagram of a system for controlling or / and protecting according to an embodiment of the present application;

[0046] Figure 4 is another structural diagram of a system for controlling or / and protecting according to an embodiment of the present application. DETAILED DESCRIPTION

[0047] The technical solutions in the embodiments of the present application will be described clearly and completely with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without any creative effort belong to the scope of protection of the present application. In addition, in the description of the present application, the term "comprising" means "including but not limited to". In addition, it should be understood that the specific embodiments described herein are only used to illustrate and explain the present application, and are not used to limit the present application.

[0048] Memory soft error (SER) refers to random and temporary data errors occurring in the memory system of a microcomputer chip. These errors are not caused by permanent hardware damage or physical defects, but by temporary unstable states caused by external environmental factors. The system is in a complex working environment in the power system, such as complex electromagnetic environment, large temperature and humidity changes, mechanical vibration and impact, dust pollution and corrosive gases, and complex and variable power grid conditions. Various factors may cause memory soft errors in the system, resulting in abnormal problems such as system miscontrol, protection misoperation or refusal. Unlike memory errors caused by hardware failure, memory soft errors will automatically recover after system restart, and the fault will automatically disappear. With the continuous development of semiconductor and chip technology, the process technology of the processor is becoming more and more complex, and the memory capacity has also been greatly improved, so that the probability of memory soft error has also been significantly improved. At present, there is no technical means to completely and effectively avoid the occurrence of memory soft error, and generally the chip with memory hardware error detection EDC (Error Detection and Correction) and error correction ECC (Error Checking and Correcting) function is used to reduce the probability of memory soft error, which means that additional hardware investment is needed.

[0049] In summary, the reliability of the control and protection system plays an important role in the safe and stable operation of the industrial field, and memory soft error is inevitable. Therefore, the control or / and protection system processing method for memory soft error is a problem that needs to be focused on after the occurrence of memory soft error. Currently, no relevant research results have been found.

[0050] At present, there is no technical means to completely and effectively avoid the occurrence of memory soft error. Considering the premise that memory soft error cannot be avoided, the starting point of the present application is to minimize the impact of the application layer under the premise of not increasing additional hardware costs.

[0051] The control or / and protection system memory soft error processing method and the control or / and protection system provided by the embodiments of the present application can be applied to the industrial field, including energy industry, steel industry, mechanical industry, etc. The energy industry includes coal industry, oil and gas industry and power industry.

[0052] For convenience of description, the control or / and protection system memory soft error processing method and system provided in the following embodiments are introduced in the field of power system.

[0053] In a power system, primary equipment refers to electrical equipment that directly participates in the processes of electric energy production, conversion, transmission, distribution, and consumption; secondary equipment refers to auxiliary electrical equipment that monitors, measures, controls, protects, regulates the operating status of primary equipment in real time, and provides necessary information and instructions for the operation management of the power system. Control and protection equipment is the core component of secondary equipment, which not only undertakes the task of controlling the operation mode of the power system but also provides key protection functions when abnormalities occur in the system.

[0054] The following will combine the accompanying drawings to elaborate on a method for handling soft errors in the system memory of this application in detail. It should be noted that the description order of the following embodiments does not limit the preferred order of the embodiments. Without conflict, the features in the following embodiments and implementation manners can be combined with each other.

[0055] As Figure 1 shown, a method for handling soft errors in a control or / and protection system memory includes the following steps: Detect the control or / and protection system memory in real time. When a memory soft error is detected, lock the data transmission outlet of the control or / and protection system; Automatically restart the control or / and protection system and initialize the operating status of the control or / and protection system to the test state; Detect whether the control or / and protection system is working properly. If it is normal, open the data transmission outlet of the control or / and protection system and switch the operating status of the control or / and protection system to the set state; If it is not normal, upload an abnormal signal to the terminal to remind the operation and maintenance personnel to intervene. It should be understood that there is a separate communication channel between the control or / and protection system of this application and the terminal for real-time uploading of the system status.

[0056] It should be understood that a memory soft error can be a random and temporary data error that occurs in the control or / and protection system. When a memory soft error is detected in the control or / and protection system memory, locking the data transmission outlet of the control or / and protection system can prevent abnormal problems such as incorrect system regulation, misoperation, or refusal to operate of protection, and by automatically restarting the system and switching to the set state, it can avoid unnecessary intervention by operation and maintenance personnel, reduce the duration of memory soft error abnormalities, and improve the efficiency of fault handling.

[0057] In some embodiments, the state of the control or / and protection system is switched to a set state, which specifically includes: the set state is a designated running state of the control or / and protection system, or a running state of the control or / and protection system before a memory soft error occurs. It should be understood that the designated running state of the control or / and protection system can be four running states of a test state, a service state, a standby state (optional) and an on-duty state of a DC control system, and part of the DC control system has no service state, or can be two running states of a test state and an on-duty state of a DC protection system. Among them, the test state is an initial state after the system starts, in which state the control protection program is normally executed but no control protection command is actually issued; the service state is the reverse state of the test state, and the system entering the service state has the prerequisite to become a standby state / on-duty state; the standby state is the current hot standby state, which has the ability to switch to the on-duty state at any time; the on-duty state is that the control protection program is normally executed and can actually issue a control protection command.

[0058] In some embodiments, the control or / and protection system adopts a non-redundant configuration; for the control or / and protection system in a non-redundant configuration, the set state is a designated running state of the control or / and protection system, specifically: the set state is the on-duty state.

[0059] In some embodiments, the control or / and protection system adopts a redundant configuration; for the control or / and protection system in a redundant configuration, the set state is a designated running state of the control or / and protection system, specifically: for the control system in a redundant configuration, the set state is one of the test state, the service state, the standby state and the on-duty state; for the protection system in a redundant configuration, the set state is one of the test state and the on-duty state.

[0060] Referring to Figure 2 In some embodiments, the set state is a running state of the control or / and protection system before a memory soft error occurs, and the specific steps include: recording the running state of the control or / and protection system and saving it to a non-volatile memory, and when a memory soft error occurs in the control or / and protection system, reading the running state of the control or / and protection system from the non-volatile memory.

[0061] Referring to Figure 3 The application also discloses a control or / and protection system, which has a data transmission output, and can be a control system, a protection system or a control protection system, and includes:

[0062] The first detection module is configured to detect the control or / and protection system in real time, and transmit a memory soft error exception signal to the controller when detecting that the control or / and protection system has a memory soft error. The second detection module is configured to detect whether the control or / and protection system is working normally, and transmit a detected working signal to the controller. The controller is configured to receive the memory soft error exception signal sent by the first detection module, lock the data transmission output port, and control or / and restart the control or / and protection system. After the control or / and protection system is restarted, the controller initializes the running state of the control or / and protection system to a test state. The controller is further configured to receive the working signal of the control or / and protection system sent by the second detection module. When the controller receives the normal working signal of the control or / and protection system, the data transmission output port of the control or / and protection system is opened, and the running state of the control or / and protection system is switched to a set state. When the controller receives an abnormal working signal of the control or / and protection system, the controller uploads the abnormal working signal to a terminal.

[0063] Referring to Figure 4 In some embodiments, the control or / and protection system further comprises a non-volatile storage module configured to record and save the control or / and protection system state. Specifically, the non-volatile storage module comprises a flash memory, an erasable programmable read-only memory (EERAM), and a non-volatile dual in-line memory module (NVDIMM). The flash memory is commonly used in solid state drives, USB flash drives, and memory cards. The controller is further configured to read the running state of the control or / and protection system before the memory soft error occurs from the non-volatile storage module, and switch the running state of the control or / and protection system to the running state before the memory soft error occurs.

[0064] In some embodiments, the control system adopts a redundant configuration. The control system is configured with two sets, and the two sets of control systems are signal connected. During normal operation, one control system is in a duty state, and the other control system is in a standby state. When the control system in the duty state has a memory soft error, the control system in the duty state locks the data transmission output port, and the control system in the standby state cannot receive the normal working signal of the former, and can automatically switch the standby state to the duty state.

[0065] In some embodiments, the protection system adopts a redundant configuration; the protection system is configured with two sets, and the two sets of protection systems are signal connected; in normal operation, the two sets of protection systems are in duty state, and the export mode of the protection function is that one of the two sets of protection systems meets the protection criterion, that is, outputs the protection instruction; when memory soft error occurs in any one set of protection system, the data transmission output port of the protection system is locked, and the other set of protection system cannot receive the normal working signal of the former, and is automatically configured to meet the protection criterion, that is, outputs the protection instruction, and the set of system in which the memory soft error occurs no longer participates in the protection logic;

[0066] or the protection system is configured with three sets, and the three sets of protection systems are signal connected; in normal operation, the three sets of protection systems are in duty state, and the export mode of the protection function is that two of the three sets of protection systems meet the protection criterion at the same time, that is, outputs the protection instruction; when memory soft error occurs in any one set of protection system, the data transmission output port of the protection system is locked, and the other two sets of protection systems cannot receive the normal working signal of the former, and are automatically configured to meet the protection criterion, that is, outputs the protection instruction, and the set of system in which the memory soft error occurs no longer participates in the protection logic.

[0067] In summary, by detecting the memory of the control or / and protection system in real time, when memory soft error occurs, the data transmission output port of the control or / and protection system is locked, to avoid abnormal problems such as system miscontrol, protection misoperation or refusal to operate, and by automatically restarting the system and switching to the set state, unnecessary maintenance personnel intervention is avoided, the duration of memory soft error abnormality is reduced, and the fault handling efficiency is improved.

[0068] In the above embodiments, the description of each embodiment has its own emphasis, and the parts not described in detail in a certain embodiment can be referred to the related description of other embodiments.

[0069] The control or / and protection system memory soft error processing method and system provided by the embodiments of the application are described in detail above, and specific examples are applied to describe the principles and implementation modes of the application; the above embodiment description is only used to help understand the technical solutions and core ideas of the application; those skilled in the art should understand that the technical solutions recorded in the above embodiments can be modified, or some technical features can be replaced by equivalents; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the application.

Claims

1. A method for controlling or / and protecting memory soft error handling in a system, characterized by, The method comprises the following steps: Real-time detecting the control or / and protection system, and locking the data transmission output port of the control or / and protection system when detecting that a memory soft error occurs; Automatically restarting the control or / and protection system, and initializing the running state of the control or / and protection system to a test state; Detecting whether the control or / and protection system works normally, and opening the data transmission output port of the control or / and protection system and switching the running state of the control or / and protection system to a set state if the control or / and protection system works normally; uploading an abnormal signal to a terminal if the control or / and protection system does not work normally.

2. The control or / and protection system memory soft error handling method of claim 1, wherein, Switching the state of the control or / and protection system to a set state, which comprises: The set state is a specified running state of the control or / and protection system, or a running state of the control or / and protection system before a memory soft error occurs.

3. The control or / and protection system memory soft error handling method according to claim 1 or 2, characterized in that, The control or / and protection system adopts a non-redundant configuration; For the control or / and protection system in a non-redundant configuration, the set state is a specified running state of the control or / and protection system, and the set state comprises a duty state.

4. The control or / and protection system memory soft error handling method according to claim 1 or 2, characterized in that, The control or / and protection system adopts a redundant configuration; For the control or / and protection system in a redundant configuration, the set state is a specified running state of the control or / and protection system, For the control system in a redundant configuration, the set state comprises one of a test state, a service state, a standby state and a duty state; For the protection system in a redundant configuration, the set state comprises one of a test state and a duty state.

5. The control or / and protection system memory soft error handling method according to claim 1 or 2, characterized in that, The set state is a running state of the control or / and protection system before a memory soft error occurs, and the specific steps comprise: recording the running state of the control or / and protection system and saving it to a non-volatile memory, and reading the running state of the control or / and protection system from the non-volatile memory when a memory soft error occurs in the control or / and protection system.

6. A control or / and protection system, characterized in that, The control or / and protection system has a data transmission output port, and the control or / and protection system comprises: A first detection module configured to real-time detect the control or / and protection system, and transmit a memory soft error exception signal to a controller when detecting that a memory soft error occurs in the control or / and protection system; A second detection module configured to detect whether the control or / and protection system works normally, and transmit a detected working signal to the controller; A controller configured to receive the memory soft error exception signal sent by the first detection module, lock the data transmission output port, and control the control or / and protection system to restart; after the control or / and protection system restarts, the controller initializes the running state of the control or / and protection system to a test state. The controller is further configured to receive the working signal of the control or / and protection system sent by the second detection module, open the data transmission output of the control or / and protection system and switch the running state of the control or / and protection system to a set state when the controller receives the normal working signal of the control or / and protection system; When the controller receives the abnormal working signal of the control or / and protection system, the controller uploads the abnormal working signal to a terminal.

7. A control or / and protection system according to claim 6, characterized in that, The control or / and protection system further comprises a non-volatile storage module configured to record the state of the control or / and protection system and save it; The controller is further configured to read the running state of the control or / and protection system before the memory soft error occurs from the non-volatile storage module and switch the running state of the control or / and protection system to the running state before the memory soft error occurs.

8. A control or / and protection system according to claim 6, characterized in that, The control system adopts a redundant configuration; The control system is configured with two sets, and the two sets of control systems are signal connected; In normal operation, one of the control systems is in a duty state and the other is in a standby state; When the control system in the duty state occurs a memory soft error, the control system in the duty state locks the data transmission output, and the control system in the standby state cannot receive the normal working signal of the former and is automatically switched from the standby state to the duty state.

9. A control or / and protection system according to claim 6, characterized in that, The protection system adopts a redundant configuration; The protection system is configured with two sets, and the two sets of protection systems are signal connected; In normal operation, both of the two sets of protection systems are in a duty state, and the exit mode of the protection function is that one of the two sets of protection systems meets the protection criterion, i.e. outputs a protection instruction; When any one of the protection systems occurs a memory soft error, the data transmission output of the protection system is locked, and the other protection system cannot receive the normal working signal of the former and is automatically configured to meet the protection criterion, i.e. outputs a protection instruction; Or the protection system is configured with three sets, and the three sets of protection systems are signal connected; In normal operation, all of the three sets of protection systems are in a duty state, and the exit mode of the protection function is that two of the three sets of protection systems meet the protection criterion simultaneously, i.e. outputs a protection instruction; When any one of the protection systems occurs a memory soft error, the data transmission output of the protection system is locked, and the other two protection systems cannot receive the normal working signal of the former and are automatically configured to make at least one of the other two protection systems meet the protection criterion, i.e. outputs a protection instruction.

Images