Triple redundancy control system based on state management

Abstract

The invention discloses a triple redundancy control system based on state management. The states of the system include that when the system is in an unstable synchronous state, online processors in a local processor, a previous processor and a next processor are sequentially synchronized to a processor in the online process according to the sequence of real-time data and state data; after the real-time data and the state data are synchronized, the system state is switched to a steady state; when the system is in a steady-state synchronous state, the user executes program downloading to trigger engineering data synchronization of the processor of the system, the processor of the previous system and the processor of the next system, so that the processor of the system, the processor of the previous system and the processor of the next system execute the same task. According to the technical content disclosed by the invention, a complex system state is simplified, and required data are synchronized according to an agreed principle, so that the system is finally kept in a steady state. And the data receiver does not need to screen the data after receiving the synchronous data, so that the availability of the system is improved.

Description

Technical Field

[0001] The present invention relates to the field of industrial control technology, and more specifically, to a triple redundant control system based on state management. Background Art

[0002] At present, data synchronization of multiple redundant control systems is generally carried out through data communication. By synchronizing the key variable data in each controller, the reliability, safety and availability of the multiple redundant control system can be improved. The specific implementation method is: first determine the main controller of the system, obtain local data and local data of other controllers at the same time, determine the local data in the main controller from the obtained local data, and then use the local data of the main controller to update its own local data. In this way, the synchronization of local data of each controller is achieved.

[0003] The existing data synchronization technology solutions for multiple redundant control systems are mostly aimed at data synchronization between the main and standby systems, and lack the technology for data synchronization between the three processors in the triple redundant control system. The entire synchronization process is also very dependent on the selection and judgment of the main system data.

[0004] Therefore, how to provide a triple redundant control system based on state management has become a technical problem that urgently needs to be solved in this field. Summary of the invention

[0005] The object of the present invention is to provide a triple redundant control system based on state management.

[0006] According to the present invention, a triple redundant control system based on state management is provided, comprising a current series processor, a previous series processor and a subsequent series processor;

[0007] The states of the system include: power-on preparation, non-steady-state synchronization and steady-state synchronization;

[0008] When the system is in a power-on ready state: the processor of the current series exchanges state data with the processor of the previous series and the processor of the next series;

[0009] When the system is in a non-steady-state synchronization state: the online processors of the current series processor, the previous series processor and the next series processor are synchronized to the processors in the online process in sequence according to the order of real-time data and status data; after the synchronization of the real-time data and status data is completed, the system state is switched to a steady state;

[0010] When the system is in a steady-state synchronization state: the user executes program downloading to trigger the system's current processor, previous processor and next processor engineering data synchronization, so that the current processor, previous processor and next processor perform the same task.

[0011] Optionally, when the system is in a power-on ready state: define the state of a single-system processor in the system and the corresponding state code:

[0012] The states of a single-system processor include: offline, standby, and working;

[0013] The status code for offline use is 0;

[0014] The status code for standby pair is 1;

[0015] The status code for the work pair is 2;

[0016] Offline means that the single-series processor is not powered on, standby means that the single-series processor is powered on but no engineering data is available, and working means that the single-series processor is executing user tasks normally.

[0017] Optionally, when the system is in a non-steady-state synchronization state: when the engineering data of the processor in the on-line process is inconsistent with that of the on-line processor, the engineering data of the on-line processor is synchronized to the processor in the on-line process.

[0018] Optionally, the non-steady-state synchronization state includes:

[0019] The processor of this series is in standby mode, the processor of the previous series is offline, and the processor of the next series is working, and the system is in the first non-steady-state synchronization;

[0020] The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is offline, and the system is in the second non-steady-state synchronization;

[0021] The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is in operation, and the system is in the third non-steady-state synchronization;

[0022] The processor of this series is in standby mode, the processor of the previous series is in working mode, the processor of the next series is in standby mode, and the system is in the fourth non-steady-state synchronization;

[0023] The processor of this series is working, the processor of the previous series is offline, the processor of the next series is standby, and the system is in the fifth non-steady-state synchronization;

[0024] The processor of this series is working, the processor of the previous series is working, and the processor of the next series is in standby mode, and the system is in the sixth non-steady-state synchronization;

[0025] The processor of this series is working, the processor of the previous series is in standby, the processor of the next series is in standby, and the system is in the seventh non-steady-state synchronization;

[0026] The processor of this series is working, the processor of the previous series is in standby, and the processor of the latter series is offline. The system is in the eighth non-steady-state synchronization.

[0027] Optionally, the steady-state synchronization state includes:

[0028] The processor of this series is in standby mode, the processor of the previous series is offline, the processor of the next series is in standby mode, and the system is in the first steady-state synchronization;

[0029] The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is offline, and the system is in the second stable state synchronization;

[0030] The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is in standby mode, and the system is in the third stable state synchronization;

[0031] The processor of this series is working, the processor of the previous series is offline, the processor of the next series is working, and the system is in the fourth stable state synchronization;

[0032] The processor of this series is working, the processor of the previous series is working, the processor of the next series is offline, and the system is in the fifth stable state synchronization;

[0033] The processor of this series is working, the processor of the previous series is working, the processor of the next series is working, and the system is in the sixth stable state synchronization.

[0034] Optionally, when the system is in a steady-state synchronization state: if the user rewrites certain variables in the program or the program running status, it will trigger the service data synchronization of the system's current processor, previous processor and next processor, so that the current processor, previous processor and next processor can obtain the same execution result after executing the same task.

[0035] Optionally, the engineering data includes: logical configuration data and system configuration data.

[0036] Optionally, the real-time data includes: user-defined data, input channel data and output channel data.

[0037] Optionally, the status data includes: working status, synchronization status, downloading status, task status and project version information.

[0038] Optionally, the service data includes: changes in task running status, forced changes in variables, confirmation of projects, and switching of projects.

[0039] According to the technical content disclosed in the present invention, the following beneficial effects are achieved: the system state is divided into steady state and non-steady state, and the complex system state is simplified. The required data is synchronized according to the simplified state according to the agreed principle, so that the system is finally kept in a steady state. After receiving the synchronized data, the data receiver does not need to filter the data anymore, and can directly update it locally, thereby improving the system availability.

[0040] Further features and advantages of the present invention will become apparent from the following detailed description of exemplary embodiments of the present invention with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the invention and, together with the description, serve to explain the principles of the invention.

[0042] Figure 1 A schematic diagram of a triple redundant control system based on state management provided according to an embodiment;

[0043] Figure 2 The figure is a schematic diagram of system state transition provided according to an embodiment. DETAILED DESCRIPTION

[0044] Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of components and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present invention unless otherwise specifically stated.

[0045] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0046] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0047] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0048] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0049] According to the present invention, Figure 1 As shown, a triple redundant control system based on state management is provided, including a processor of this series, a processor of the previous series and a processor of the next series;

[0050] Figure 1 The "previous series" in the table refers to the previous series of processors;

[0051] The states of the system include: power-on preparation, non-steady-state synchronization and steady-state synchronization;

[0052] When the system is in a power-on ready state: the processor of the current series exchanges state data with the processor of the previous series and the processor of the next series;

[0053] When the system is in a non-steady-state synchronization state: the online processors of the current series processor, the previous series processor and the next series processor are synchronized to the processors in the online process in sequence according to the order of real-time data and status data; after the synchronization of the real-time data and status data is completed, the system state is switched to a steady state;

[0054] like Figure 2 As shown, when the system is in an unstable state, it needs to be guided to a stable state, that is, the synchronous operation of the system is triggered; when the system is in a stable state, the failure or online operation of a certain series of processors will cause the system to turn into an unstable state;

[0055] When the system is in a steady-state synchronization state: the user executes program downloading to trigger the system's current processor, previous processor and next processor engineering data synchronization, so that the current processor, previous processor and next processor perform the same task.

[0056] Both non-steady-state synchronization and steady-state synchronization follow the following principles: (a) When all three processors are online, the processor in this series can only synchronize engineering data, real-time data and status data with the processor in the next series as needed; (b) When two processors are online, the two processors can synchronize engineering data, real-time data and status data with each other as needed; (c) In steady state, the synchronization of service data and status data is carried out through broadcasting.

[0057] In some embodiments, when the system is in a power-on ready state: define the state of the single-system processor in the system and the corresponding state code:

[0058] The states of a single-system processor include: offline, standby, and working;

[0059] The status code for offline use is 0;

[0060] The status code for standby pair is 1;

[0061] The status code for the work pair is 2;

[0062] Offline means that the single-series processor is not powered on, standby means that the single-series processor is powered on but no engineering data is available, and working means that the single-series processor is executing user tasks normally.

[0063] In some embodiments, when the system is in a non-steady-state synchronization state: when the engineering data of the processor in the on-line process is inconsistent with that of the on-line processor, the engineering data of the on-line processor is synchronized to the processor in the on-line process.

[0064] In some embodiments, the non-steady-state synchronization state includes:

[0065] The processor of this series is in standby mode, the processor of the previous series is offline, and the processor of the next series is working, and the system is in the first non-steady-state synchronization;

[0066] Figure 1 The "unsteady state 1" in is the first unsteady state synchronization;

[0067] The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is offline, and the system is in the second non-steady-state synchronization;

[0068] The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is in operation, and the system is in the third non-steady-state synchronization;

[0069] The processor of this series is in standby mode, the processor of the previous series is in working mode, the processor of the next series is in standby mode, and the system is in the fourth non-steady-state synchronization;

[0070] The processor of this series is working, the processor of the previous series is offline, the processor of the next series is standby, and the system is in the fifth non-steady-state synchronization;

[0071] The processor of this series is working, the processor of the previous series is working, and the processor of the next series is in standby mode, and the system is in the sixth non-steady-state synchronization;

[0072] The processor of this series is working, the processor of the previous series is in standby, the processor of the next series is in standby, and the system is in the seventh non-steady-state synchronization;

[0073] The processor of this series is working, the processor of the previous series is in standby, and the processor of the latter series is offline. The system is in the eighth non-steady-state synchronization.

[0074] In some embodiments, the steady-state synchronization state includes:

[0075] The processor of this series is in standby mode, the processor of the previous series is offline, the processor of the next series is in standby mode, and the system is in the first steady-state synchronization;

[0076] The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is offline, and the system is in the second stable state synchronization;

[0077] The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is in standby mode, and the system is in the third stable state synchronization;

[0078] The processor of this series is working, the processor of the previous series is offline, the processor of the next series is working, and the system is in the fourth stable state synchronization;

[0079] The processor of this series is working, the processor of the previous series is working, the processor of the next series is offline, and the system is in the fifth stable state synchronization;

[0080] The processor of this series is working, the processor of the previous series is working, the processor of the next series is working, and the system is in the sixth stable state synchronization.

[0081] In some embodiments, when the system is in a steady-state synchronization state: if the user rewrites certain variables in the program or the program running status, it will trigger the system's service data synchronization of the current processor, the previous processor and the next processor, so that the current processor, the previous processor and the next processor can obtain the same execution results after executing the same task.

[0082] In some embodiments, the engineering data includes: logical configuration data and system configuration data.

[0083] The real-time data includes: user-defined data, input channel data and output channel data.

[0084] The status data includes: working status, synchronization status, downloading status, task status and project version information.

[0085] The service data includes: changes in task running status, forced changes in variables, project confirmation, and project switching.

[0086] In summary, the technical content disclosed in the present invention divides the system state into steady state and unstable state, and simplifies the complex system state. According to the simplified state, the required data is synchronized according to the agreed principles, so that the system is finally kept in a steady state. After receiving the synchronized data, the data receiver does not need to filter the data anymore, and can directly update it locally, which improves the system availability.

[0087] Although some specific embodiments of the present invention have been described in detail by way of example, it will be appreciated by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It will be appreciated by those skilled in the art that the above embodiments may be modified without departing from the scope and spirit of the present invention. The scope of the present invention is defined by the appended claims.

Claims

1. A triple redundant control system based on state management, characterized in that: include: Processors of this series, processors of the previous series, and processors of the next series; The states of the system include: power-on preparation, non-steady-state synchronization and steady-state synchronization; When the system is in a power-on ready state: the processor of the current series exchanges state data with the processor of the previous series and the processor of the next series; When the system is in a non-steady-state synchronization state: the online processors of the current series processor, the previous series processor and the next series processor are synchronized to the processors in the online process in sequence according to the order of real-time data and status data; after the synchronization of the real-time data and status data is completed, the system state is switched to a steady state; When the system is in a steady-state synchronization state: the user executes program downloading to trigger the system's current processor, previous processor and next processor engineering data synchronization, so that the current processor, previous processor and next processor perform the same task.

2. The triple redundant control system based on state management according to claim 1, characterized in that: When the system is in a power-on ready state: define the state of the single-system processor in the system and the corresponding state code: The states of a single-system processor include: offline, standby, and working; The status code for offline use is 0; The status code for standby pair is 1; The status code for the work pair is 2; Offline means that the single-series processor is not powered on, standby means that the single-series processor is powered on but no engineering data is available, and working means that the single-series processor is executing user tasks normally.

3. The triple redundant control system based on state management according to claim 1, characterized in that: When the system is in a non-steady-state synchronization state: when the engineering data of the processor in the on-line process is inconsistent with that of the on-line processor, the engineering data of the on-line processor is synchronized to the processor in the on-line process.

4. The triple redundant control system based on state management according to claim 1, characterized in that: The non-steady-state synchronization state includes: The processor of this series is in standby mode, the processor of the previous series is offline, and the processor of the next series is working, and the system is in the first non-steady-state synchronization; The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is offline, and the system is in the second non-steady-state synchronization; The processor of this series is in standby mode, the processor of the previous series is in operation, the processor of the next series is in operation, and the system is in the third non-steady-state synchronization; The processor of this series is in standby mode, the processor of the previous series is in working mode, the processor of the next series is in standby mode, and the system is in the fourth non-steady-state synchronization; The processor of this series is working, the processor of the previous series is offline, the processor of the next series is standby, and the system is in the fifth non-steady-state synchronization; The processor of this series is working, the processor of the previous series is working, and the processor of the next series is in standby mode, and the system is in the sixth non-steady-state synchronization; The processor of this series is working, the processor of the previous series is in standby, the processor of the next series is in standby, and the system is in the seventh non-steady-state synchronization; The processor of this series is working, the processor of the previous series is in standby, and the processor of the latter series is offline. The system is in the eighth non-steady-state synchronization.

5. The triple redundant control system based on state management according to claim 1, characterized in that: The steady-state synchronization state includes: The processor of this series is in standby mode, the processor of the previous series is offline, the processor of the next series is in standby mode, and the system is in the first steady-state synchronization; The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is offline, and the system is in the second stable state synchronization; The processor of this series is in standby mode, the processor of the previous series is in standby mode, the processor of the next series is in standby mode, and the system is in the third stable state synchronization; The processor of this series is working, the processor of the previous series is offline, the processor of the next series is working, and the system is in the fourth stable state synchronization; The processor of this series is working, the processor of the previous series is working, the processor of the next series is offline, and the system is in the fifth stable state synchronization; The processor of this series is working, the processor of the previous series is working, the processor of the next series is working, and the system is in the sixth stable state synchronization.

6. The triple redundant control system based on state management according to claim 1, characterized in that: When the system is in a steady-state synchronization state: if the user rewrites certain variables in the program or the program running status, it will trigger the service data synchronization of the system's current processor, previous processor and next processor, so that the current processor, previous processor and next processor can obtain the same execution result after executing the same task.

7. The triple redundant control system based on state management according to claim 1, characterized in that: The engineering data includes: logical configuration data and system configuration data.

8. The triple redundant control system based on state management according to claim 1, characterized in that: The real-time data includes: user-defined data, input channel data and output channel data.

9. The triple redundant control system based on state management according to claim 1, characterized in that: The status data includes: working status, synchronization status, downloading status, task status and project version information.

10. The triple redundant control system based on state management according to claim 1, characterized in that: The service data includes: changes in task running status, forced changes in variables, project confirmation, and project switching.

Images