A high voltage inverter dual controller redundant topology structure and control method

Abstract

A redundant topological structure and control method of a dual-controller of a high-voltage frequency converter, comprising a first control machine A and a second control machine B; the dual control machines are connected via three optical fiber transceiver channels, which are convenient for data transmission and data verification; the optical fiber data sent by the master control machine to the slave control machine mainly include master-slave authority, working status, synchronous control data, operating data, fault status word, and authority switching request data; the optical fiber data sent by the slave control machine to the master control machine mainly include master-slave authority, working status, operating data, fault status word, and authority switching confirmation data; when a switchable fault occurs in the master control machine, data interaction between the control machines and master-slave authority switching control are automatically executed, which can not only avoid the problem that the entire frequency conversion system cannot continue to operate due to a single control system fault, but also overcome the shortcomings that the dual CPU redundant mode cannot be powered off online for maintenance and the huge waste of cost of the two frequency converter redundant mode.

Description

Technical Field

[0001] The present invention relates to the technical field of high-voltage frequency converters, and in particular to a redundant topological structure of a dual-controller of a high-voltage frequency converter and a control method. Background Art

[0002] With the rapid development of power electronics technology and in response to the call of national energy-saving policies, high-voltage inverters have been more widely used in the industrial field, and the performance and stability of their control systems are crucial. At present, the control system of high-voltage inverters is basically in a single-machine non-redundant control mode, which has great hidden dangers. Once a control system problem occurs in a critical situation, it will cause an accident and cause immeasurable losses; the existing redundant control methods mostly use dual CPU redundancy, the principle is to place two control chips or control modules in the same control box to achieve, which can improve a certain control reliability, but there are disadvantages such as inability to perform online power-off maintenance; in addition, there are also two complete sets of inverters to achieve parallel redundant control. This method not only needs to rely on the intermediate synchronization system, increase the complexity and instability of the frequency conversion system, affect the real-time switching and cause large disturbances, but also the equipment manufacturing cost is twice the original, seriously affecting the economic benefits. Summary of the invention

[0003] In order to solve the technical problems raised by the background technology, the present invention provides a high-voltage inverter dual-controller redundant topology structure and control method, which can not only avoid the problem that the entire frequency conversion system cannot continue to operate due to the failure of a single control system, but also overcome the shortcomings of the dual CPU redundant mode that cannot be powered off online for maintenance and the huge cost waste of the two inverter redundant mode; the dual-controller redundant control system adopts two independent control power supplies for separate power supply, and the structure realizes complete electrical isolation. Each control machine is equipped with independent signal detection and control channels, which is convenient for the online separate maintenance and disturbance-free switching of the control machine, thereby improving the control performance and reliability; the slave machine detects the working status and control parameters of the host in real time, always maintains a working status consistent with the host and synchronizes the control data of the host. When a switchable fault occurs in the main control machine, the slave control machine can realize online disturbance-free switching to the new host to maintain continuous and reliable operation of the equipment. The control method has good application prospects.

[0004] In order to achieve the above object, the present invention adopts the following technical solutions:

[0005] A high-voltage inverter dual-controller redundant topology structure, wherein the driving part of the cascade-type high-voltage inverter is composed of a plurality of cascaded power units, and the control part of the high-voltage inverter comprises a first control machine A and a second control machine B; the first control machine A and the second control machine B are interconnected through optical fibers, and a unit driving board of each power unit of the high-voltage inverter is provided with two optical fiber interfaces, and the two optical fiber interfaces are respectively connected to the first control machine A and the second control machine B through optical fibers; the first control machine A is powered by a first power supply A, and the second control machine B is powered by a second power supply B, and the two control machines have their own independent detection circuits.

[0006] The control method of the redundant topology structure of the dual control machine of the high-voltage inverter is described. The dual control machines are connected by three optical fiber transceiver channels to facilitate data transmission and data verification. The optical fiber data sent by the master control machine to the slave control machine mainly includes master-slave authority, working status, synchronous control data, operation data, fault status word, and authority switching request data. The optical fiber data sent by the slave control machine to the master control machine mainly includes master-slave authority, working status, operation data, fault status word, and authority switching confirmation data. When a switchable fault occurs in the master control machine, data interaction between the control machines and master-slave authority switching control will be automatically executed. The specific steps include:

[0007] Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed;

[0008] Step 2: Fault status judgment: when in slave authority, if no fault is detected, polling will be performed to receive host fiber data and synchronize the host working status. If a fault is detected, the slave fault logic will be directly executed; when in master authority, if a fault state is detected, the fault type will be further classified and judged. If no fault is detected, return processing will be executed;

[0009] Step 3, master-slave authority switching response, in the master authority, when the detected fault is judged as a switchable fault, the master reads the slave optical fiber data and determines whether the slave has a fault according to the slave fault word. If the slave is in a fault-free state, the master will send a switching authority request to the slave. When the fault detected by the host is judged as a non-switchable fault or the slave has also failed, the host will directly execute the host fault logic; when the slave authority receives the master authority switching request, the working status of the host and the content of the synchronization data are recorded in real time, and the switchable confirmation response information is fed back to the host. If the master authority switching request is not received, it will return to re-polling;

[0010] Step 4: Master-slave authority exchange. If the master authority is in the state, when the master receives the switchable confirmation information fed back by the slave, it will automatically switch to the new slave and release the master control right, and execute the slave fault logic. If the waiting time for the slave switchable confirmation information feedback is exceeded, the master fault logic will be executed and the master-slave switching logic will be exited; when the slave authority is in the state, if the slave receives the optical fiber data after sending the authority switching confirmation feedback and determines that the master is switched to the new slave, the slave will switch to the new master and obtain the master control right, and execute the maintenance operation state or the shutdown state according to the recorded original master state. If the slave sends the switchable confirmation information to the master and waits for the original master to switch to the new slave for a timeout, the slave fault logic will be directly executed.

[0011] Furthermore, the host fault logic refers to the fault status processing logic of the main control machine, which controls the inverter system to exit the normal working state, blocks the inverter output of the power unit, and reports the fault status and fault information; the slave fault logic refers to the fault status processing logic of the slave control machine, which only enters the fault state of the slave control machine, and no longer synchronizes the working status and operation data of the main control machine, which has no effect on the operation of the frequency conversion system.

[0012] Furthermore, the master-slave authority refers to the control machine currently being in the master authority or slave authority; the working state refers to the running, stopping, and fault working states; the synchronous control data includes control mode, modulation wave data, operating frequency, electrical angle, and motor speed control data; the operating data includes output voltage, output current, and unit status data, which is convenient for the master and slave control machines to detect and compare the operating data respectively; the authority switching request refers to the switching request sent by the host to the slave during the master-slave redundancy switching process; the authority switching confirmation data refers to the confirmation information fed back to the host after the slave receives the authority switching request sent by the host during the master-slave redundancy switching process; the switchable faults mainly refer to the control machine board faults, software faults, memory faults, control power failure faults, and external signal disconnection control machine system body related protections; non-switchable faults protect external comprehensive faults and emergency stop faults.

[0013] Furthermore, in the hot standby control process of dual control machines, the master control machine executes the corresponding start-stop logic according to the external control command; the slave control machine only synchronizes the host working status and control data, detects the operation data and unit status data, and executes the internal software logic and algorithm calculation of the control machine. It does not have the external output control authority, nor is it prohibited to send control data to the unit driver board; the specific execution steps include:

[0014] Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed;

[0015] Step 2: When in the host authority, enable external signal detection and frequency conversion control signal receiving authority, enable external interface output control authority, and enable unit drive control authority; when in the slave authority, prohibit the external given frequency signal and frequency conversion control signal receiving authority, and prohibit the external interface output control authority and unit drive control authority, and can perform voltage, current and other operating data detection and unit status data detection;

[0016] Step 3: When in the host authority, poll the external start command. If there is no start command, execute and return. If an external start command is received, it will enter the running state and send it to the slave, execute the unit drive control, and perform variable frequency speed control according to the external given frequency; when in the slave authority, receive the host to enter the running state, and immediately synchronize the host's working state and control data content;

[0017] Step 4: When the host is in the process of variable frequency speed regulation and receives an external stop command, the variable frequency stop control is executed, the stop working state is entered and sent to the slave; when the slave is in the process of receiving the host switching to the stop state, the host stop working state is immediately synchronized.

[0018] Furthermore, the optical fiber receiving port of the unit driving board controls the receiving enable according to the master-slave authority instruction of the control machine, and the two optical fiber sending ports do not need an enable command and always maintain a sending enable state. The specific execution steps include:

[0019] Step 1, the unit driver board will poll and detect the master-slave authority control instructions received by the optical fiber port 1 and the optical fiber port 2. When the optical fiber port 1 receives the host command and the optical fiber port 2 receives the slave command, the optical fiber port 1 receiving enable flag is set to 1, otherwise the optical fiber port 1 receiving enable flag is set to 0; when the optical fiber port 1 receives the slave command and the optical fiber port 2 receives the host command, the optical fiber port 2 receiving enable flag is set to 1, otherwise the optical fiber port 2 receiving enable flag is set to 0;

[0020] Step 2, when the optical fiber port 1 receiving enable flag is 1, the optical fiber port 1 is enabled to receive the optical fiber data sent from the control machine; when the optical fiber port 1 receiving enable flag is 0, the optical fiber port 1 is prohibited from receiving the optical fiber data sent from the control machine; when the optical fiber port 2 receiving enable flag is 1, the optical fiber port 2 is enabled to receive the optical fiber data sent from the control machine; when the optical fiber port 2 receiving enable flag is 0, the optical fiber port 2 is prohibited from receiving the optical fiber data sent from the control machine; the data sent from the main control machine includes unit control commands, modulated wave data, and phase shift data.

[0021] Compared with the prior art, the present invention has the following beneficial effects:

[0022] 1) The dual-controller system uses two completely independent control power supplies, and the dual-controllers are completely electrically isolated. They have independent detection and control circuits and are connected by optical fiber communication. When an abnormality occurs in one control machine, it can be exited online for separate maintenance without affecting the operation of the other control machine. After maintenance, it can be put back into hot standby online.

[0023] 2) The two control machines are connected by three optical fiber transceiver channels, which can reliably verify the transmitted data. The slave control machine can synchronize the working status of the master control machine in real time as a hot standby. When a switchable fault occurs in the master control machine, the master-slave reliable switching of the two control machines can be automatically completed, ensuring the long-term operation reliability of the control system;

[0024] 3) When the control machine is in the master authority, it will enable the receiving authority of all external control signals and input interfaces, enable the control authority of the unit drive board and external interface output, and complete the comprehensive control of the frequency conversion system; when the control machine is in the slave authority, it will prohibit the receiving authority of external control signals and given frequencies, only enable the receiving authority of operation data and unit status data, prohibit the control authority of the unit drive board and external interface output, and synchronize the host working status and control data in real time;

[0025] 4) The invention can be extended to the field of multi-controller redundancy, which can avoid the small probability accident that the entire control system is paralyzed due to problems with two control machines at the same time, thereby increasing the reliability of the control system. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 It is a topological block diagram of the frequency conversion control system of the present invention;

[0027] Figure 2 It is a topological block diagram of the dual-controller redundant system of the present invention;

[0028] Figure 3 It is a dual controller hot standby control flow chart of the present invention;

[0029] Figure 4 It is a control flow chart of dual controller master-slave redundancy switching of the present invention;

[0030] Figure 5 This is a control flow chart of dual optical fiber ports of the unit driving board of the present invention. DETAILED DESCRIPTION

[0031] The specific implementation modes provided by the present invention are described in detail below with reference to the accompanying drawings.

[0032] like Figure 1As shown, a redundant topology structure of a high-voltage inverter with dual controllers is shown. The driving part of the cascaded high-voltage inverter is composed of a plurality of cascaded power units. The control part of the high-voltage inverter of the present invention includes a first controller A and a second controller B; the first controller A and the second controller B are interconnected through optical fibers, and each unit driving board 1 to N of each power unit of the high-voltage inverter is provided with two optical fiber interfaces, which are respectively connected to the first controller A and the second controller B through optical fibers. The first controller A is powered by a first power supply A, and the second controller B is powered by a second power supply B, and the two controllers have independent detection circuits.

[0033] The first control machine A and the second control machine B are located in the inverter control cabinet. The two control machines are interconnected by optical fiber and have independent control power supplies and independent data acquisition and control loops. The human-machine interface A and the human-machine interface B are connected to the two control machines by communication cables, respectively, so as to realize the functions of operation data monitoring, control parameter setting, event recording and fault recording. The unit drive board is located in the power unit module of the inverter. Each unit drive board has two optical fiber transceiver interfaces, which are interconnected and communicated with the two control machines respectively. The unit drive board is only controlled by the main control machine, that is, it only receives the main control machine. The control data of the optical fiber port corresponding to the control machine will be switched along with the controlled optical fiber port of the switching unit driver board with the authority of the master and slave control machines during the master-slave switching process to achieve reliable unit drive control; power supply A and power supply B are two completely independent low-voltage control power supplies that do not affect each other. They are used for power supply of the control machine and have power failure detection function; the dual control machines are completely isolated and powered independently in electricity, and only optical fiber is used for interconnection, which is convenient for the separate online maintenance of the control machines. The dual control machines have their own independent data acquisition and control channels, which is equivalent to dual-channel data acquisition, which is conducive to data verification and improves control performance.

[0034] The dual control machine redundant system structure topology of the method of the present invention is as follows: Figure 2 As shown, the control machine mainly includes a CPU board, an optical fiber board, an analog board, a digital board, a communication board, a power board and a backplane. The dual control machines realize optical fiber communication through three optical fiber transceiver ports on three optical fiber boards. The three optical fibers transmit the same data to facilitate data verification and ensure the correctness of data transmission. The remaining optical fiber ports on the dual control optical fiber boards are connected to the unit drive boards. Each optical fiber board is connected to N unit drive boards to ensure the control machine's drive control of the three-phase power unit.

[0035] The dual controller hot standby control process of the method of the present invention is as follows: Figure 3As shown, in the hot standby control process of dual controllers, the master controller executes the corresponding start and stop logic according to the external control command; the slave controller only synchronizes the working status and control data of the host, detects the operation data and unit status data, and executes the internal software logic and algorithm calculation of the controller. It does not have the external output control authority, nor is it prohibited to send control data to the unit driver board; the specific execution steps include:

[0036] Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed;

[0037] Step 2: When in the host authority, enable external signal detection and frequency conversion control signal receiving authority, enable external interface output control authority, and enable unit drive control authority; when in the slave authority, prohibit the external given frequency signal and frequency conversion control signal receiving authority, and prohibit the external interface output control authority and unit drive control authority, and can perform voltage, current and other operating data detection and unit status data detection;

[0038] Step 3: When in the host authority, poll the external start command. If there is no start command, execute and return. If an external start command is received, it will enter the running state and send it to the slave, execute the unit drive control, and perform variable frequency speed control according to the external given frequency; when in the slave authority, receive the host to enter the running state, and immediately synchronize the host's working state and control data content;

[0039] Step 4: When the host is in the process of variable frequency speed regulation and receives an external stop command, the variable frequency stop control is executed, the stop working state is entered and sent to the slave; when the slave is in the process of receiving the host switching to the stop state, the host stop working state is immediately synchronized.

[0040] The dual controller master-slave redundancy switching control process of the method of the present invention is as follows: Figure 4 As shown, when a switchable fault occurs in the master control machine, data interaction between control machines and master-slave authority switching control will be automatically executed. The specific execution steps include:

[0041] Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed;

[0042] Step 2: Fault status judgment: when in slave authority, if no fault is detected, polling will be performed to receive host fiber data and synchronize the host working status. If a fault is detected, the slave fault logic will be directly executed; when in master authority, if a fault state is detected, the fault type will be further classified and judged. If no fault is detected, return processing will be executed;

[0043] Step 3, master-slave authority switching response, in the master authority, when the detected fault is judged as a switchable fault, the master reads the slave optical fiber data and determines whether the slave has a fault according to the slave fault word. If the slave is in a fault-free state, the master will send a switching authority request to the slave. When the fault detected by the host is judged as a non-switchable fault or the slave has also failed, the host will directly execute the host fault logic; when the slave authority receives the master authority switching request, the working status of the host and the content of the synchronization data are recorded in real time, and the switchable confirmation response information is fed back to the host. If the master authority switching request is not received, it will return to re-polling;

[0044] Step 4: Master-slave authority exchange. If the master authority is in the state, when the master receives the switchable confirmation information fed back by the slave, it will automatically switch to the new slave and release the master control right, and execute the slave fault logic. If the waiting time for the slave switchable confirmation information feedback is exceeded, the master fault logic will be executed and the master-slave switching logic will be exited; when the slave authority is in the state, if the slave receives the optical fiber data after sending the authority switching confirmation feedback and determines that the master is switched to the new slave, the slave will switch to the new master and obtain the master control right, and execute the maintenance operation state or the shutdown state according to the recorded original master state. If the slave sends the switchable confirmation information to the master and waits for the original master to switch to the new slave for a timeout, the slave fault logic will be directly executed.

[0045] The host fault logic refers to the fault status processing logic of the main control machine, which controls the inverter system to exit the normal working state, blocks the inverter output of the power unit, and reports the fault status and fault information.

[0046] The slave fault logic refers to the fault state processing logic of the slave control machine. Only the slave control machine enters the fault state and no longer synchronizes the working state and operation data of the master control machine, which has no effect on the operation of the frequency conversion system.

[0047] The master-slave authority refers to whether the control machine is currently in the master authority or the slave authority.

[0048] The working status described refers to working status such as running, stopping, and failure.

[0049] The synchronous control data includes control mode, modulation wave data, operating frequency, electrical angle and motor speed control data.

[0050] The operating data include output voltage, output current, and unit status data, which facilitates the master and slave control machines to detect and compare the operating data respectively.

[0051] The permission switching request refers to a switching request sent by the host to the slave during the master-slave redundancy switching process.

[0052] The permission switching confirmation data refers to the confirmation information fed back to the host after the slave receives the permission switching request sent by the host during the master-slave redundancy switching process.

[0053] The switchable faults mentioned mainly refer to the related protection of the control machine system body such as control machine board failure, software failure, memory failure, control power failure, external signal disconnection, etc.; non-switchable fault protection includes external comprehensive failure, emergency stop failure, etc.

[0054] The control process of the dual optical fiber ports of the unit driver board of the method of the present invention is as follows: Figure 5 As shown, the optical fiber receiving port of the unit driving board controls the receiving enable according to the master-slave authority instruction of the control machine, and the two optical fiber sending ports do not need an enable command and always maintain the sending enable state. The specific execution steps include:

[0055] Step 1, the unit driver board will poll and detect the master-slave authority control instructions received by optical fiber port 1 and optical fiber port 2. When optical fiber port 1 receives a host command and optical fiber port 2 receives a slave command, the optical fiber port 1 receiving enable flag is set to 1, otherwise the optical fiber port 1 receiving enable flag is set to 0; when optical fiber port 1 receives a slave command and optical fiber port 2 receives a host command, the optical fiber port 2 receiving enable flag is set to 1, otherwise the optical fiber port 2 receiving enable flag is set to 0;

[0056] Step 2: When the receiving enable flag of optical fiber port 1 is 1, optical fiber port 1 is enabled to receive optical fiber data sent from the control machine; when the receiving enable flag of optical fiber port 1 is 0, optical fiber port 1 is prohibited from receiving optical fiber data sent from the control machine; when the receiving enable flag of optical fiber port 2 is 1, optical fiber port 2 is enabled to receive optical fiber data sent from the control machine; when the receiving enable flag of optical fiber port 2 is 0, optical fiber port 2 is prohibited from receiving optical fiber data sent from the control machine; the data sent from the main control machine includes unit control commands, modulated wave data, and phase shift data.

[0057] The above embodiments are implemented based on the technical solution of the present invention, and detailed implementation methods and specific operation processes are given, but the protection scope of the present invention is not limited to the above embodiments. The methods used in the above embodiments are conventional methods unless otherwise specified.

Claims

1. A control method for a high-voltage inverter dual-controller redundant topology structure, wherein the driving part of the cascade-type high-voltage inverter is composed of a plurality of power units cascaded, characterized in that: The control part of the high-voltage frequency converter includes a first control machine A and a second control machine B; the first control machine A and the second control machine B are interconnected through optical fiber, and the unit driving board of each power unit of the high-voltage frequency converter is provided with two optical fiber interfaces, and the two optical fiber interfaces are respectively connected to the first control machine A and the second control machine B through optical fiber; the first control machine A is powered by a first power supply A, and the second control machine B is powered by a second power supply B, and the two control machines have their own independent detection circuits; the two control machines are connected through three optical fiber transceiver channels to facilitate data transmission and data verification. The optical fiber data sent by the master control machine to the slave control machine mainly includes master-slave authority, working status, synchronous control data, operation data, fault status word, and authority switching request data. The optical fiber data sent by the slave control machine to the master control machine mainly includes master-slave authority, working status, operation data, fault status word, and authority switching confirmation data. When a switchable fault occurs in the master control machine, data interaction between control machines and master-slave authority switching control will be automatically executed. The specific steps include: Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed; Step 2: Fault status judgment: when in slave authority, if no fault is detected, polling will be performed to receive host fiber data and synchronize the host working status. If a fault is detected, the slave fault logic will be directly executed; when in master authority, if a fault state is detected, the fault type will be further classified and judged. If no fault is detected, return processing will be executed; Step 3, master-slave authority switching response, in the master authority, when the detected fault is judged as a switchable fault, the master reads the slave optical fiber data and determines whether the slave has a fault according to the slave fault word. If the slave is in a fault-free state, the master will send a switching authority request to the slave. When the fault detected by the host is judged as a non-switchable fault or the slave has also failed, the host will directly execute the host fault logic; when the slave authority receives the master authority switching request, the working status of the host and the content of the synchronization data are recorded in real time, and the switchable confirmation response information is fed back to the host. If the master authority switching request is not received, it will return to re-polling; Step 4: Master-slave authority exchange. If the master authority is in the state, when the master receives the switchable confirmation information fed back by the slave, it will automatically switch to the new slave and release the master control right, and execute the slave fault logic. If the waiting time for the slave switchable confirmation information feedback is exceeded, the master fault logic will be executed and the master-slave switching logic will be exited; when the slave authority is in the state, if the slave receives the optical fiber data after sending the authority switching confirmation feedback and determines that the master is switched to the new slave, the slave will switch to the new master and obtain the master control right, and execute the maintenance operation state or the shutdown state according to the recorded original master state. If the slave sends the switchable confirmation information to the master and waits for the original master to switch to the new slave for a timeout, the slave fault logic will be directly executed.

2. The control method of a high-voltage inverter dual-controller redundant topology structure according to claim 1, characterized in that: The host fault logic refers to the fault status processing logic of the main control machine, which will control the inverter system to exit the normal working state, block the inverter output of the power unit, and report the fault status and fault information; the slave fault logic refers to the fault status processing logic of the slave control machine, which only enters the fault state of the slave control machine, and no longer synchronizes the working status and operation data of the main control machine, which has no effect on the operation of the frequency conversion system.

3. The control method of a high-voltage inverter dual-controller redundant topology structure according to claim 1, characterized in that: The master-slave authority refers to the control machine currently being in the master authority or slave authority; the working state refers to the running, stopping, and fault working states; the synchronous control data includes control mode, modulation wave data, operating frequency, electrical angle, and motor speed control data; the operating data includes output voltage, output current, and unit status data, which is convenient for the master and slave control machines to detect and compare the operating data respectively; the authority switching request refers to the switching request sent by the host to the slave during the master-slave redundancy switching process; the authority switching confirmation data refers to the confirmation information fed back to the host after the slave receives the authority switching request sent by the host during the master-slave redundancy switching process; the switchable faults mainly refer to the control machine board faults, software faults, memory faults, control power failure faults, and external signal disconnection control machine system body related protections; non-switchable faults protect external comprehensive faults and emergency stop faults.

4. The control method of a high-voltage inverter dual-controller redundant topology structure according to claim 1, characterized in that: During the hot standby control process of dual controllers, the master controller executes the corresponding start and stop logic according to the external control command; the slave controller only synchronizes the working status and control data of the host, detects the operation data and unit status data, and executes the internal software logic and algorithm calculation of the controller. It does not have the external output control authority, nor is it prohibited to send control data to the unit driver board; the specific execution steps include: Step 1: Master-slave authority judgment: if it is judged as master authority, the master authority logic will be executed; if it is judged as slave authority, the slave authority logic will be executed; Step 2: When in the host authority, enable external signal detection and frequency conversion control signal receiving authority, enable external interface output control authority, and enable unit drive control authority; when in the slave authority, prohibit the external given frequency signal and frequency conversion control signal receiving authority, and prohibit the external interface output control authority, prohibit the unit drive control authority, and perform voltage and current operation data detection and unit status data detection; Step 3: When in the host authority, poll the external start command. If there is no start command, execute and return. If an external start command is received, it will enter the running state and send it to the slave, execute the unit drive control, and perform variable frequency speed control according to the external given frequency; when in the slave authority, receive the host to enter the running state, and immediately synchronize the host's working state and control data content; Step 4: When the host is in the process of variable frequency speed regulation and receives an external stop command, the variable frequency stop control is executed, the stop working state is entered and sent to the slave; when the slave is in the process of receiving the host switching to the stop state, the host stop working state is immediately synchronized.

5. The control method of a high-voltage inverter dual-controller redundant topology structure according to claim 1, characterized in that: The optical fiber receiving port of the unit driver board controls the receiving enable according to the master-slave authority instruction of the control machine. The two optical fiber sending ports do not need the enable command and always maintain the sending enable state. The specific execution steps include: Step 1, the unit driver board will poll and detect the master-slave authority control instructions received by the optical fiber port 1 and the optical fiber port 2. When the optical fiber port 1 receives the host command and the optical fiber port 2 receives the slave command, the optical fiber port 1 receiving enable flag is set to 1, otherwise the optical fiber port 1 receiving enable flag is set to 0; when the optical fiber port 1 receives the slave command and the optical fiber port 2 receives the host command, the optical fiber port 2 receiving enable flag is set to 1, otherwise the optical fiber port 2 receiving enable flag is set to 0; Step 2, when the optical fiber port 1 receiving enable flag is 1, the optical fiber port 1 is enabled to receive the optical fiber data sent from the control machine; when the optical fiber port 1 receiving enable flag is 0, the optical fiber port 1 is prohibited from receiving the optical fiber data sent from the control machine; when the optical fiber port 2 receiving enable flag is 1, the optical fiber port 2 is enabled to receive the optical fiber data sent from the control machine; when the optical fiber port 2 receiving enable flag is 0, the optical fiber port 2 is prohibited from receiving the optical fiber data sent from the control machine; the data sent from the main control machine includes unit control commands, modulated wave data, and phase shift data.

Images