Main and standby mode switching method and system

Abstract

The invention discloses a main and standby mode switching method and system. The main and standby mode switching system comprises a first control board, a second control board, a control switching board, a first communication board, a second communication board and a communication switching board, the first control board and the second control board are connected with the first communication bus and the second communication bus; the first control panel is connected with the control switching plate, and the second control panel is connected with the control switching plate; the first communication board and the second communication board are connected with the first communication bus and the second communication bus, and the first communication board and the second communication board are connected with the first network interface and the second network interface; the first communication board is connected with the communication system switching board, the CPU1 and the CPU2 are arranged on the control board, the CPU3 is arranged on the communication board, when a single board breaks down, system switching is conducted independently, the system switching time is only determined by respective loops, and in the system switching process, due to the fact that the communication board and the control board independently complete main and standby switching, the system switching time can be shortened, and the system switching efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method and system for switching between active and standby modes. Background Art

[0002] Currently in the field of rail transit, the train operation control system is the core to ensure the safety of train operation. It is designed with redundant dual-system hot standby, strict dual-system synchronization, and real-time interactive network data and control commands.

[0003] At present, each system contains three CPUs, which is the common 2+1 architecture, two safety control CPUs (CPUA and CPUB) and one communication CPU C. After a single system fails, the system needs to be switched through the active-standby switch, and all CPUs in the system need to be switched out. However, the switching time is determined by the longest switching time among the three CPUs, and the CPU with the longest switching time will slow down the overall switching speed, resulting in low switching efficiency.

[0004] Therefore, how to improve the cutting efficiency has become an urgent problem to be solved in this field. Summary of the invention

[0005] The present application provides a method and system for switching between active and standby modes, the purpose of which is to improve the efficiency of switching.

[0006] In order to achieve the above objectives, this application provides the following technical solutions:

[0007] A master-slave mode switching system, the master-slave mode switching system comprising: a first control board, a second control board, a control switching board, a first communication board, a second communication board, and a communication switching board;

[0008] The first input / output terminal and the second input / output terminal of the first control board and the second control board are connected to the first communication bus, and the third input / output terminal and the fourth input / output terminal of the first control board and the second control board are connected to the second communication bus;

[0009] The fifth output terminal of the first control board is connected to the first input terminal of the control board, the sixth output terminal of the first control board is connected to the second input terminal of the control board, the fifth input terminal of the first control board is connected to the first output terminal of the control board, and the sixth input terminal of the first control board is connected to the second output terminal of the control board;

[0010] The fifth output terminal of the second control board is connected to the third input terminal of the control board, the sixth output terminal of the second control board is connected to the fourth input terminal of the control board, the fifth input terminal of the second control board is connected to the third output terminal of the control board, and the sixth input terminal of the first control board is connected to the fourth output terminal of the control board;

[0011] The first input and output ends of the first communication board and the second communication board are connected to the first communication bus, the second input and output ends of the first communication board and the second communication board are connected to the second communication bus, the third input and output ends of the first communication board and the second communication board are connected to the first network interface, and the fourth input and output ends of the first communication board and the second communication board are connected to the second network interface;

[0012] The fifth output terminal of the first communication board is connected to the first input terminal of the communication switching board, and the fifth input terminal of the first communication board is connected to the first output terminal of the communication switching board;

[0013] The fifth output terminal of the second communication board is connected to the second input terminal of the communication switching board, and the fifth input terminal of the second communication board is connected to the second output terminal of the communication switching board;

[0014] Among them, when the first control board, the second control board, the first communication board and the second communication board are in normal operating state, the main control board, the standby control board, the main communication board and the standby communication board are determined; when the main control board fails, the control switching board switches the standby control board to the main control board; when the main communication board fails, the communication switching board switches the standby control board to the main control board.

[0015] Optionally, the control board includes: a CPU1 processing module and a CPU2 processing module;

[0016] The first input and output end of the CPU1 processing module is connected to the first communication bus, and the second input and output end of the CPU1 processing module is connected to the second communication bus;

[0017] The first input and output end of the CPU2 processing module is connected to the first communication bus, the second input and output end of the CPU2 processing module is connected to the second communication bus, and the third input and output end of the CPU1 processing module is connected to the third input and output end of the CPU2 processing module;

[0018] The fourth output terminal of the CPU1 processing module is connected to the first input terminal of the control board, and the fourth output terminal of the CPU2 processing module is connected to the second input terminal of the control board;

[0019] When the control board is the first control board, the fourth input terminal of the CPU1 processing module is connected to the first output terminal of the control board, and the fourth input terminal of the CPU2 processing module is connected to the second output terminal of the control board;

[0020] When the control board is the second control board, the fourth input terminal of the CPU1 processing module is connected to the third output terminal of the control board, and the fourth input terminal of the CPU2 processing module is connected to the fourth output terminal of the control board.

[0021] Optionally, the control board further includes: an acquisition circuit, a relay output circuit, a first communication interface, a second communication interface, a third communication interface and a fourth communication interface;

[0022] The input end of the acquisition circuit is connected to the output end of the acquisition interface, and the output end of the acquisition circuit is connected to the fifth input end of the CPU1 processing module and the fifth input end of the CPU2 processing module;

[0023] One end of the CPU1 processing module is connected to one end of the CPU2 processing module, the common end of the connection is connected to the input end of the relay output circuit, and the output end of the relay output circuit is connected to the output interface;

[0024] The first input / output terminal of the first communication interface is connected to the first input / output terminal of the second communication interface, and the common terminal thereof is connected to the second input / output terminal of the CPU1 processing module;

[0025] The first input / output terminal of the third communication interface is connected to the first input / output terminal of the fourth communication interface, and the common terminal thereof is connected to the second input / output terminal of the CPU2 processing module;

[0026] The second input / output terminal of the first communication interface is connected to the second input / output terminal of the third communication interface, and the common terminal thereof is connected to the first communication bus;

[0027] The second input / output terminal of the second communication interface is connected to the second input / output terminal of the fourth communication interface, and the common terminal thereof is connected to the second communication bus.

[0028] Optionally, the control system board includes: a first system control module, a first system drive module, a second system drive module and a first key module;

[0029] The first input end of the first switching system driving module is connected to the fifth output end of the first control board, and the second input end of the first switching system driving module is connected to the sixth output end of the first control board;

[0030] The first output end of the first switching system driving module is connected to the first input end of the first switching system control module through a switch, the first output end of the first switching system control module is connected to the fifth input end of the first control board, and the second output end of the first switching system control module is connected to the sixth input end of the first control board;

[0031] The third output terminal of the first switching control module and the fifth input terminal of the second control board, the fourth output terminal of the first switching control module and the sixth input terminal of the second control board;

[0032] The second input end of the first switching control module is connected to the output end of the first key module, and the third input end of the first switching control module is connected to the output end of the second switching drive module through a switch;

[0033] The third input terminal of the second switching system driving module is connected to the fifth output terminal of the second control board, and the fourth input terminal of the second switching system driving module is connected to the sixth output terminal of the second control board.

[0034] Optionally, the communication board includes: a CPU3 processing module, a first network module and a second network module;

[0035] The first input and output end of the CPU3 processing module is connected to the first communication bus, and the second input and output end of the CPU3 processing module is connected to the second communication bus;

[0036] The third input / output terminal of the CPU3 processing module is connected to the first input / output terminal of the first network module, and the fourth input / output terminal of the CPU3 processing module is connected to the first input / output terminal of the second network module;

[0037] The third input and output end of the first network module is connected to the first network interface, and the second input and output end of the second network module is connected to the second network interface;

[0038] When the communication board is the first communication board, the fifth output terminal of the CPU3 processing module is connected to the first input terminal of the communication switching board, and the fifth input terminal of the CPU3 processing module is connected to the first output terminal of the communication switching board;

[0039] When the communication board is the second communication board, the fifth output end of the CPU3 processing module is connected to the second input end of the communication switching board, and the fifth input end of the CPU3 processing module is connected to the second output end of the communication switching board.

[0040] Optionally, the communication system board includes: a second system control module, a third system drive module, a fourth system drive module and a second key module;

[0041] The input end of the third switching system driving module is connected to the fifth output end of the first communication board, the output end of the third switching system driving module is connected to the first input end of the second switching system control module through a switch, and the first output end of the second switching system control module is connected to the fifth input end of the first communication board;

[0042] The second output terminal of the second switching control module and the fifth input terminal of the second communication board,

[0043] The second input end of the second switching control module is connected to the output end of the second key module, and the third input end of the second switching control module is connected to the output end of the fourth switching drive module through a switch;

[0044] The input end of the fourth switching system driving module is connected to the fifth output end of the second communication board.

[0045] A method for switching between active and standby modes, applied to the active and standby mode switching system described above, comprising:

[0046] When the first control board, the second control board, the first communication board and the second communication board are all in normal operation, the main control board and the standby control board of the first control board and the second control board are determined according to the control switching board, and the main communication board and the standby communication board of the first communication board and the second communication board are determined according to the communication switching board;

[0047] Detecting whether the main control board fails;

[0048] If the main control board fails, the control switch board is used to switch the standby control board to the main control board;

[0049] Detecting whether the main communication board fails;

[0050] If the main communication board fails, the communication switching board is used to switch the standby communication board to the main communication board.

[0051] Optionally, determining a main control board and a standby control board in the first control board and the second control board according to the control switching board includes:

[0052] Acquire a first state relay corresponding to the first control board in the control panel, and a second state relay corresponding to the second control board;

[0053] When the first state relay is in an attracted state and the second state relay is in a non-attracted state, the first control board is determined as a main control board, and the second control board is determined as a standby control board;

[0054] When the second state relay is in the attracted state and the first state relay is in the non-attracted state, the second control board is determined as the main control board, and the first control board is determined as the standby control board.

[0055] Optionally, the determining a main communication board and a standby communication board in the first communication board and the second communication board according to the communication switching board includes:

[0056] Acquire a first state relay corresponding to the first communication board in the communication switching board, and a second state relay corresponding to the second communication board;

[0057] When the first state relay is in an attracted state and the second state relay is in a non-attracted state, the first communication board is determined as a main communication board, and the second communication board is determined as a standby communication board;

[0058] When the second status relay is in the attracted state and the first status relay is in the non-attracted state, the second communication board is determined as the main communication board, and the first communication board is determined as the standby communication board.

[0059] Optionally, the detecting whether the main control board fails includes:

[0060] When receiving a check signal sent by the safety relay in the control switch board, the CPU1 processing module and the CPU2 processing module in the main control board are detected according to the check signal to obtain a first signal and a second signal;

[0061] determining whether the first signal is consistent with the second signal;

[0062] If the first signal is consistent with the second signal, it is determined that the main control board has not failed;

[0063] If the first signal is inconsistent with the second signal, it is determined that the main control board fails.

[0064] Optionally, the detecting whether the main control board fails includes:

[0065] Obtaining a first execution time of a task executed by a CPU1 processing module in the main control board, and a second execution time of a task executed by a CPU2 processing module;

[0066] Detect whether the first execution time and the second execution time are consistent;

[0067] If the first execution time and the second execution time are consistent, it is determined that the main control board has not failed;

[0068] If the first execution time and the second execution time are inconsistent, determining whether the inconsistent time of executing the task exceeds a preset time;

[0069] If the inconsistent execution time of the tasks exceeds a preset time, it is determined that the main control board has a fault;

[0070] If the inconsistent time of executing the tasks does not exceed the preset time, it is determined that the main control board has not failed.

[0071] Optionally, the detecting whether the main control board fails includes:

[0072] Acquire the collected data received by the CPU1 processing module in the main control board, and send the collected data to the CPU2 processing module in the main control board; wherein the collected data includes output signal, status relay checkback, status relay checkback, network security control data, timestamp and CRC32 check code;

[0073] Using the CPU2 processing module to compare the collected data with preset data;

[0074] If the collected data is inconsistent with the preset data, whether the time of data inconsistency exceeds the preset operation cycle is detected;

[0075] If the time of data inconsistency exceeds the preset operation period, it is determined that the main control board fails;

[0076] If the time of data inconsistency does not exceed the preset operation cycle, it is determined that the main control board has not failed.

[0077] Optionally, the using the control switch board to switch the standby control board to the main control board includes:

[0078] Obtaining a status relay corresponding to the standby control board in the control switching board;

[0079] The state of the state relay corresponding to the standby control board is set to a pickup state, so that the standby control board is switched to the main control board.

[0080] Optionally, the using the communication switching board to switch the standby communication board to the main communication board includes:

[0081] Obtaining a status relay corresponding to the standby communication board in the communication switching board;

[0082] The state of the status relay corresponding to the standby communication board is set to a pickup state, so that the standby communication board is switched to the main communication board.

[0083] The technical solution provided by the present application, the main-standby mode switching system includes: a first control board, a second control board, a control switching board, a first communication board, a second communication board, and a communication switching board; the first control board and the second control board are connected to the first communication bus and the second communication bus; the first control board is connected to the control switching board, and the second control board is connected to the control switching board; the first communication board and the second communication board are connected to the first communication bus and the second communication bus, and the first communication board and the second communication board are connected to the first network interface and the second network interface; the first communication board is connected to the communication switching board, CPU1 and CPU2 are arranged on the control board, and CPU3 is arranged on the communication board. When a single board fails, the system is switched separately, and the switching time is determined only by their respective circuits. During the switching process, since the communication board and the control board complete the main-standby switching separately, the switching time can be reduced and the switching efficiency can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0084] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0085] Figure 1 A first schematic diagram of the architecture of a master-slave mode switching system provided in an embodiment of the present application;

[0086] Figure 2 A board layout diagram provided for an embodiment of the present application;

[0087] Figure 3 A second schematic diagram of the architecture of a master-slave mode switching system provided in an embodiment of the present application;

[0088] Figure 4 A third schematic diagram of the architecture of a master-slave mode switching system provided in an embodiment of the present application;

[0089] Figure 5 A fourth architecture diagram of a master-slave mode switching system provided in an embodiment of the present application;

[0090] Figure 6 A fifth architecture diagram of a master-slave mode switching system provided in an embodiment of the present application;

[0091] Figure 7 A sixth architecture diagram of a master-slave mode switching system provided in an embodiment of the present application;

[0092] Figure 8 A flowchart of a method for switching between active and standby modes provided in an embodiment of the present application;

[0093] Fig. 9 A flowchart of a method for determining a primary and standby control board provided in an embodiment of the present application;

[0094] Fig.10 A flowchart of a method for determining a primary and standby communication board provided in an embodiment of the present application;

[0095] Fig.11 A flow chart of a main control board fault detection method provided in an embodiment of the present application;

[0096] Fig.12 A flowchart of another main control board fault detection method provided in an embodiment of the present application;

[0097] Fig.13 A flowchart of another main control board fault detection method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0098] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0099] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element.

[0100] like Figure 1 As shown, it is a first architecture schematic diagram of a master-slave mode switching system provided in an embodiment of the present application. The master-slave mode switching system includes: a first control board 11, a second control board 12, a control switching board 13, a first communication board 14, a second communication board 15, and a communication switching board 16.

[0101] It should be noted that the layout of each board (i.e., the first control board 11, the second control board 12, the control board 13, the first communication board 14, the second communication board 15, and the communication board 16) in the cage is as shown in FIG. Figure 2As shown. The back of the cage is the motherboard, which is used to electrically connect the various boards and lead out external interfaces. The interfaces led out from the rear panel include: network interface A, network interface B, 10 acquisition ports, 10 output ports, and 1 monitoring CAN port.

[0102] It should be emphasized that the control board and communication board switching logic are relatively independent, and the power supply systems of the control board dual system (i.e., two control boards) and the communication board dual system (i.e., two communication boards) are completely isolated and do not interfere with each other, which can ensure that the board will not interfere with other boards when the power fails. The control board is composed of dual CPUs, which collect data at the same time and verify each other, ensuring safety; it is composed of dual systems and redundant design, ensuring the reliability of the system. The communication board is also composed of dual systems, ensuring the reliability of data interaction, and adopts a closed dual-channel network interface to the outside, ensuring the security and reliability of data. The control board and the communication board complete data interaction through redundant communication interfaces (such as CAN ports), thereby realizing the control / communication dual active-standby mode. The dual switching board mode is convenient for on-site personnel to repair and replace equipment. The control loop and the communication loop are controlled separately, and equipment maintenance is completed at the lowest cost.

[0103] The first input / output terminal and the second input / output terminal of the first control board 11 and the second control board 12 are connected to the first communication bus 17 , and the third input / output terminal and the fourth input / output terminal of the first control board 11 and the second control board 12 are connected to the second communication bus 18 .

[0104] The first communication bus includes but is not limited to: CANA, and the second communication bus includes but is not limited to: CANB.

[0105] The fifth output end of the first control board 11 is connected to the first input end of the control board 13, the sixth output end of the first control board 11 is connected to the second input end of the control board 13, the fifth input end of the first control board 11 is connected to the first output end of the control board 13, and the sixth input end of the first control board 11 is connected to the second output end of the control board 13.

[0106] The fifth output end of the second control board 12 is connected to the third input end of the control board 13, the sixth output end of the second control board 12 is connected to the fourth input end of the control board 13, the fifth input end of the second control board 12 is connected to the third output end of the control board 13, and the sixth input end of the first control board 11 is connected to the fourth output end of the control board 13.

[0107] The first input and output ends of the first communication board 14 and the second communication board 15 are connected to the first communication bus 17, the second input and output ends of the first communication board 14 and the second communication board 15 are connected to the second communication bus 18, the third input and output ends of the first communication board 14 and the second communication board 15 are connected to the first network interface 19, and the fourth input and output ends of the first communication board 14 and the second communication board 15 are connected to the second network interface 20.

[0108] The first network interface 19 and the second network interface 20 include but are not limited to: an RJ45 network interface.

[0109] The fifth output terminal of the first communication board 14 is connected to the first input terminal of the communication connection board 16 , and the fifth input terminal of the first communication board 14 is connected to the first output terminal of the communication connection board 16 .

[0110] The fifth output terminal of the second communication board 15 is connected to the second input terminal of the communication switching board 16 , and the fifth input terminal of the second communication board 15 is connected to the second output terminal of the communication switching board 16 .

[0111] Among them, when the first control board 11, the second control board 12, the first communication board 14 and the second communication board 15 are in normal operation, the main control board, the standby control board, the main communication board and the standby communication board are determined. When the main control board fails, the control switching board 13 switches the standby control board to the main control board. When the main communication board fails, the communication switching board 16 switches the standby control board to the main control board.

[0112] Combination Figure 1 The public active-standby mode switching system, for details, see Figure 3 The control board includes: a CPU1 processing module 31 and a CPU2 processing module 32.

[0113] The first input and output terminals of the CPU1 processing module 31 are connected to the first communication bus 17 , and the second input and output terminals of the CPU1 processing module 31 are connected to the second communication bus 18 .

[0114] The first input / output terminal of the CPU2 processing module 32 is connected to the first communication bus 17 , the second input / output terminal of the CPU2 processing module 32 is connected to the second communication bus 18 , and the third input / output terminal of the CPU1 processing module 31 is connected to the third input / output terminal of the CPU2 processing module 32 .

[0115] It should be noted that the third input / output terminal of the CPU1 processing module 31 and the CPU2 processing module 32 complete data exchange through the serial port.

[0116] The fourth output terminal of the CPU1 processing module 31 is connected to the first input terminal of the control board 13 , and the fourth output terminal of the CPU2 processing module 32 is connected to the second input terminal of the control board 13 .

[0117] When the control board is the first control board 11 , the fourth input terminal of the CPU1 processing module 31 is connected to the first output terminal of the control board 13 , and the fourth input terminal of the CPU2 processing module 32 is connected to the second output terminal of the control board 13 .

[0118] When the control board is the second control board 12 , the fourth input terminal of the CPU1 processing module 31 is connected to the third output terminal of the control board 13 , and the fourth input terminal of the CPU2 processing module 32 is connected to the fourth output terminal of the control board 13 .

[0119] Combination Figure 3 For the contents shown, see Figure 4 The control board also includes: an acquisition circuit 41, a relay output circuit 42, a first communication interface 43, a second communication interface 44, a third communication interface 45 and a fourth communication interface 46.

[0120] Specifically, the control board undertakes the safety function, and is composed of a CPU1 processing module 31 and a CPU2 processing module 32 , 10-channel acquisition circuits 41 , 10-channel relay output circuits, a third communication interface 45 and a fourth communication interface 46 .

[0121] The input end of the acquisition circuit 41 is connected to the output end of the acquisition interface 47 , and the output end of the acquisition circuit 41 is connected to the fifth input end of the CPU1 processing module 31 and the fifth input end of the CPU2 processing module 32 .

[0122] Among them, the acquisition circuit 41 is an optocoupler acquisition interface, which is optically isolated from the outside and effectively protects the internal control circuit. The acquisition circuit 41 collects 10 external 24V voltage signals, inputs 1 when the input 24V voltage is collected, and inputs 0 when the input 0V voltage is collected.

[0123] One end of the CPU1 processing module 31 is connected to one end of the CPU2 processing module 32 , and the common end thereof is connected to the input end of the relay output circuit 42 , and the output end of the relay output circuit 42 is connected to the output interface 48 .

[0124] Among them, the relay output circuit 42 is a 10-way safety relay. When the control signal is 1, the relay output node is closed, and when the control signal is 0, the relay output node is opened. A pair of normally closed nodes of the safety relay are used as feedback signals and fed back to the CPU1 processing module 31 and the CPU2 processing module 32. The CPU1 processing module 31 and the CPU2 processing module 32 perform self-checks on the feedback signals output by the relay. When the output and the self-check are inconsistent, the fault mode is entered.

[0125] The first input / output terminal of the first communication interface 43 is connected to the first input / output terminal of the second communication interface 44 , and the common terminal thereof is connected to the second input / output terminal of the CPU1 processing module 31 .

[0126] The first input / output terminal of the third communication interface 45 is connected to the first input / output terminal of the fourth communication interface 46 , and the common terminal thereof is connected to the second input / output terminal of the CPU2 processing module 32 .

[0127] The second input / output terminal of the first communication interface 43 is connected to the second input / output terminal of the third communication interface 45 , and the common terminal thereof is connected to the first communication bus 17 .

[0128] The second input / output terminal of the second communication interface 44 is connected to the second input / output terminal of the fourth communication interface 46 , and the common terminal thereof is connected to the second communication bus 18 .

[0129] Combination Figure 4 For details, see Figure 5 The control panel 13 includes a first system control module 51 , a first system driving module 52 , a second system driving module 53 and a first key module 54 .

[0130] The first input end of the first cutting system driving module 52 is connected to the fifth output end of the first control board 11 , and the second input end of the first cutting system driving module 52 is connected to the sixth output end of the first control board 11 .

[0131] The first output end of the first cutting system driving module 52 is connected to the first input end of the first cutting system control module 51 through a switch, the first output end of the first cutting system control module 51 is connected to the fifth input end of the first control board 11, and the second output end of the first cutting system control module 51 is connected to the sixth input end of the first control board 11.

[0132] The third output terminal of the first cutting system control module 51 is connected to the fifth input terminal of the second control board 12 , and the fourth output terminal of the first cutting system control module 51 is connected to the sixth input terminal of the second control board 12 .

[0133] The second input end of the first switching system control module 51 is connected to the output end of the first key module 54 , and the third input end of the first switching system control module 51 is connected to the output end of the second switching system driving module 53 through a switch.

[0134] The third input terminal of the second switching system driving module 53 is connected to the fifth output terminal of the second control board 12 , and the fourth input terminal of the second switching system driving module 53 is connected to the sixth output terminal of the second control board 12 .

[0135] It should be noted that the first switching control module 51 includes four switching relays, namely two safety and relays and two status relays. The safety and relay is controlled by the 3k square wave output by the CPU1 processing module 31 and the CPU2 processing module 32 of the first control board 11 and the second control board 12, and is jointly controlled by the switching drive module (including the first switching drive module 52 and the second switching drive module 53). When the control board is normal, the corresponding relay is attracted and falls when a fault occurs. The status relay is driven by the level signal output by the CPU1 processing module 31 and the CPU2 processing module 32 of the first control board 11 and the CPU1 processing module 31 and the CPU2 processing module 32 of the second control board 12, and is taken and controlled by the output of the key in the key module; the status relays of the two systems are interlocked, and only the relay corresponding to one control board is attracted at the same time, and the other relay falls.

[0136] Combination Figure 5 For details, see Figure 6 The communication board includes: a CPU3 processing module 61, a first network module 62 and a second network module 63.

[0137] The first input and output terminals of the CPU3 processing module 61 are connected to the first communication bus 17 , and the second input and output terminals of the CPU3 processing module 61 are connected to the second communication bus 18 .

[0138] The third input / output terminal of the CPU3 processing module 61 is connected to the first input / output terminal of the first network module 62 , and the fourth input / output terminal of the CPU3 processing module 61 is connected to the first input / output terminal of the second network module 63 .

[0139] The third input / output terminal of the first network module 62 is connected to the first network interface, and the second input / output terminal of the second network module 63 is connected to the second network interface.

[0140] When the communication board is the first communication board 14 , the fifth output terminal of the CPU3 processing module 61 is connected to the first input terminal of the communication switching board 16 , and the fifth input terminal of the CPU3 processing module 61 is connected to the first output terminal of the communication switching board 16 .

[0141] When the communication board is the second communication board 15 , the fifth output terminal of the CPU3 processing module 61 is connected to the second input terminal of the communication switching board 16 , and the fifth input terminal of the CPU3 processing module 61 is connected to the second output terminal of the communication switching board 16 .

[0142] Among them, the communication board includes two communication interfaces, two network interfaces and a CPU3 processing module 61, which are respectively connected to the first network module 62 and the second network module 63 through the two network interfaces, and are respectively connected to the first communication bus 17 and the second communication bus 18 through the two communication interfaces.

[0143] It should be noted that the first network module 62 and the second network module 63 are network hardware circuits to complete the data interaction between the CPU3 processing module 61 and the external network. The communication board only serves as a communication channel, so there is no need to design redundant dual CPUs for each system. Each communication board only designs one CPU to complete the network data and control data interaction functions; the CPU3 processing module 61 receives the odd and even data packets of the CPU1 processing module 31 and the CPU2 processing module 32 through the communication interface, and after assembling the packets, uploads them to the train control center through the first network module 62 and the second network module 63. The CPU3 processing module 61 receives the control command of the train control center through the first network module 62 and the second network module 63, and forwards it to the CPU1 processing module 31 and the CPU2 processing module 32 of the two control boards through the first communication bus 17 and the second communication bus 18.

[0144] It should be emphasized that the four CPUs of the two control boards and the two CPUs of the two communication boards each lead out a monitoring CAN port connected to the motherboard CANC interface, output the monitoring information of each CPU to the outside, and upload it to centralized monitoring through CANC.

[0145] Combination Figure 6 For details, see Figure 7 The communication switching board 16 includes: a second switching control module 71 , a third switching driving module 72 , a fourth switching driving module 73 and a second key module 74 .

[0146] The input end of the third switching system driving module is connected to the fifth output end of the first communication board 14 , the output end of the third switching system driving module is connected to the first input end of the second switching system control module through a switch, and the first output end of the second switching system control module is connected to the fifth input end of the first communication board 14 .

[0147] The second output terminal of the second switching control module and the fifth input terminal of the second communication board 15,

[0148] The second input end of the second switching control module is connected to the output end of the second key module, and the third input end of the second switching control module is connected to the output end of the fourth switching drive module through a switch.

[0149] The input terminal of the fourth driving system driving module is connected to the fifth output terminal of the second communication board 15 .

[0150] It should be noted that the second switching control module 71 includes two status relays. Compared with the control switching board, it has no safety relay. After a single board failure in the two communication boards, the switching can be completed through the status relay without affecting the system safety. Similar to the control switching board 13, the status relay is driven by the level signal output by the CPU3 processing module 61 of the first communication board 14 and the second communication board 15, and is simultaneously ANDed with the output of the second key module to control the status relay; the corresponding status relays of the first communication board 14 and the second communication board 15 are interlocked, and only one series of relays are attracted at the same time, and the other series of relays are dropped.

[0151] In summary, CPU1 and CPU2 are arranged on the control board, and CPU3 is arranged on the communication board. The control loop and the communication loop are independently cut off when a single board fails. The cutting time is only determined by each loop. During the cutting process, since the communication board and the control board complete the active-standby switching independently, the cutting time can be reduced and the cutting efficiency can be improved.

[0152] Corresponding to the active-standby mode switching system provided in the above embodiment of the present application, see Figure 8 , shows a flow chart of a method for switching between active and standby modes provided in an embodiment of the present application, the method comprising:

[0153] S801: When the first control board, the second control board, the first communication board and the second communication board are in normal operation, the main control board and the standby control board in the first control board and the second control board are determined according to the control switching board, and the main communication board and the standby communication board in the first communication board and the second communication board are determined according to the communication switching board.

[0154] It can be understood that when the key modules in the control panel and the communication panel are in automatic mode, the key is in the middle position, and the placement of the key determines which of the first control panel and the second control panel is the main control panel and which is the spare control panel, and the placement of the key determines which of the first communication panel and the second communication panel is the main communication panel and which is the spare communication panel.

[0155] Optionally, in another embodiment of the present application, in step S801, the specific implementation of determining the main control board and the standby control board in the first control board and the second control board according to the control switch board is as follows: Fig. 9 As shown, the following steps are included:

[0156] S901: Acquire a first state relay corresponding to a first control board in a control system board, and a second state relay corresponding to a second control board.

[0157] It can be understood that the first state relay corresponding to the first control board in the control system and the second state relay corresponding to the second control board are obtained, so that the main control board and the standby control board can be judged according to the status of the first state relay and the second state relay.

[0158] S902: When the first state relay is in the attracted state and the second state relay is in the non-attracted state, the first control board is determined as the main control board, and the second control board is determined as the standby control board.

[0159] Among them, because the status relays of the two series are interlocked, only one series of relays are attracted at the same time, and the other series of relays are down. When the key is placed on the first control board, the first state relay corresponding to the first control board is in the attracted state, then the first control board at this time is the main control board, and the second state relay loses power and falls, and the second control board at this time is the backup control board.

[0160] S903: When the second state relay is in the attracted state and the first state relay is in the non-attracted state, the second control board is determined as the main control board, and the first control board is determined as the standby control board.

[0161] Among them, when the key is placed on the second control board, the second state relay corresponding to the second control board is in the attracted state, then the second control board is now the main control board, the first state relay loses power and falls, and the first control board is now the standby control board.

[0162] It can be seen that the status relays of the two control boards have a pair of normally open nodes. When the status relays are energized, the control board is the main control board. When they are energized, the control board is the standby control board, thereby completing the main-standby switching.

[0163] Optionally, in another embodiment of the present application, in step S801, a specific implementation method of determining a main communication board and a standby communication board in the first communication board and the second communication board according to the communication switching board is as follows: Fig.10 As shown, the following steps are included:

[0164] S1001: Acquire a first status relay corresponding to a first communication board in a communication switching system board, and a second status relay corresponding to a second communication board.

[0165] S1002: When the first state relay is in the attracted state and the second state relay is in the non-attracted state, the first communication board is determined as the main communication board, and the second communication board is determined as the standby communication board.

[0166] It is understandable that when the key is placed on the first communication board, the first state relay is in the attracted state, then the first communication board is the main communication board, the second state relay loses power and falls, then the second communication board is the backup communication board.

[0167] S1003: When the second state relay is in the attracted state and the first state relay is in the non-attracted state, the second communication board is determined as the main communication board, and the first communication board is determined as the standby communication board.

[0168] It is understandable that when the key is placed on the second communication board, the second state relay is in the attracted state, then the second communication board is now the main communication board, the first state relay loses power and falls, then the first communication board is now the backup communication board.

[0169] It should be noted that a pair of normally open nodes of the status relay of each communication board, when energized, the communication board is the main system; when dropped, the communication board is the backup communication board, thereby completing the main-backup switching.

[0170] S802: Check whether the main control board is faulty.

[0171] If the main control board fails, execute step S803.

[0172] When step S802 is executed, step S804 may be executed in parallel.

[0173] It is understandable that it is detected whether the main control board fails. If the main control board does not fail, no operation is performed. If the main control board fails, the standby control board is switched to the main control board for operation.

[0174] Optionally, if the standby control board fails, the main control board keeps running, and there is no need to perform a master-standby switch, and only the two CPUs in the standby control board need to be replaced.

[0175] Optionally, in another embodiment of the present application, the specific implementation of step S802 is as follows: Fig.11 As shown, the following steps are included:

[0176] S1101: When a check signal sent by the safety relay in the control switch board is received, the CPU1 processing module and the CPU2 processing module in the main control board are detected according to the check signal to obtain a first signal and a second signal.

[0177] The first signal indicates a signal that the CPU1 processing module detects itself, and the second signal indicates a signal that the CPU2 processing module detects itself.

[0178] S1102: Determine whether the first signal is consistent with the second signal.

[0179] If the first signal is consistent with the second signal, step S1103 is executed; if the first signal is inconsistent with the second signal, step S1104 is executed.

[0180] Specifically, assuming that the first signal is a closed signal and the second signal is an open signal, it is determined whether the first signal is consistent with the second signal. Obviously, the first signal is inconsistent with the second signal, so step S1104 is continued.

[0181] S1103: Determine that the main control board is not faulty.

[0182] S1104: It is determined that the main control board fails.

[0183] Optionally, in another embodiment of the present application, the specific implementation of step S802 is as follows: Fig.12 As shown, the following steps are included:

[0184] S1201: Obtain a first execution time of a task executed by a CPU1 processing module in a main control board, and a second execution time of a task executed by a CPU2 processing module.

[0185] Among them, the execution tasks include but are not limited to: the CPU processing module collects external signals and packages the external signals (for example, 24V voltage signals, the external signals have two states, 24V voltage (1) and no 24V voltage (0). Converted to 3.3V input to the processor through the acquisition circuit.), sends to the communication board through the CAN port, receives the communication board security data through the CAN port, and after parsing, controls the relay to output externally.

[0186] It should be noted that the tasks executed by the CPU1 processing module and the tasks executed by the CPU2 processing module are run synchronously through IO, that is, the tasks executed at the same time are consistent, each operation cycle is 250ms, and the time slice interval is 5ms, that is to say, within the operation cycle, the CPU1 processing module and the CPU2 processing module execute tasks every 5ms.

[0187] S1202: Detect whether the first execution time is consistent with the second execution time.

[0188] If the first execution time and the second execution time are consistent, step S1203 is executed; if the first execution time and the second execution time are inconsistent, step S1204 is executed.

[0189] It can be understood that if the time of executing the task is consistent, it means that the CPU1 processing module and the CPU2 processing module are running synchronously at this time, which means that the main control board has not failed at this time; if the time of executing the task is inconsistent, it means that the CPU1 processing module and the CPU2 processing module are not running synchronously, and it cannot be determined at this time that the main control board has failed. Therefore, it is necessary to continue to execute step S1204.

[0190] S1203: Determine that the main control board is not faulty.

[0191] S1204: Determine whether the inconsistent time of executing the task exceeds the preset time.

[0192] If the inconsistent time of executing the task exceeds the preset time, step S1205 is executed; if the inconsistent time of executing the task does not exceed the preset time, step S1206 is executed.

[0193] Optionally, the preset time includes but is not limited to: 20ms.

[0194] It can be understood that inconsistent execution time refers to the difference between the time it takes one CPU to complete a task in a certain time slice and the time it takes another CPU to complete the same task in the same time slice. For example, CPU1 processing module completes the task in the time slice of 10ms to 15ms, while CPU2 does not complete the task in this time slice.

[0195] S1205: Determine that the main control board fails.

[0196] S1206: Determine that the main control board is not faulty.

[0197] Optionally, in another embodiment of the present application, the specific implementation of step S802 is as follows: Fig.13 As shown, the following steps are included:

[0198] S1301: Acquire the collected data received by the CPU1 processing module in the main control board, and send the collected data to the CPU2 processing module in the main control board.

[0199] Among them, the collected data includes output signal, status relay feedback, status relay feedback, network security control data, timestamp and CRC32 check code.

[0200] It should be noted that the third input and output terminal of the CPU1 processing module 31 and the CPU2 processing module 32 complete data interaction through the serial port, and perform mutual checks on 10 acquisition signals, 10 output signals, safety relay feedback, status relay feedback, timestamp, network security control data, and CRC32 check code.

[0201] S1302: Use the CPU2 processing module to compare the collected data with the preset data.

[0202] It can be understood that the CPU2 processing module is used to compare the collected data with the preset data, that is, to perform mutual checks on 10 collected signals, 10 output signals, safety relay backcheck, status relay backcheck, timestamp, network security control data, and CRC32 check code.

[0203] For example, the external signal collected by the CPU1 processing module is 24V, and the external signal collected by the CPU2 processing module is 0V; or the relay output is checked back, and the inspection results of the two CPUs are inconsistent, the CPU1 processing module collects the output 24V, and the CPU2 processing module collects no output 24V; or the communication data of the two CPUs are inconsistent. All of them are inconsistent in mutual inspection.

[0204] Optionally, when the collected data is consistent with the preset data, it indicates that the main control board is not faulty at this time.

[0205] S1303: If the collected data is inconsistent with the preset data, whether the time of data inconsistency exceeds the preset operation cycle is detected.

[0206] If the time of data inconsistency exceeds the preset operation cycle, step S1304 is executed; if the time of data inconsistency does not exceed the preset operation cycle, step S1305 is executed.

[0207] It is understandable that whether the time for detecting data inconsistency exceeds the preset operating cycle, that is, whether the time for mutual data inconsistency exceeds the preset operating cycle, if exceeded, it means that the main control board has failed, if not exceeded, it means that the main control board has not failed.

[0208] Optionally, the preset operation cycle includes but is not limited to: 250ms.

[0209] S1304: Determine that the main control board fails.

[0210] S1305: Determine that the main control board is not faulty.

[0211] In addition, the CPU1 processing module and the CPU2 processing module communicate with the CPU3 processing module of the main communication board through the two redundant interfaces of the first communication bus and the second communication bus. The communication data sent by the CPU1 processing module and the CPU2 processing module include 10 acquisition signals, 10 output signal checkbacks, timestamps, and CRC32 check codes. CPU1 sends odd bytes of data packets, and CPU2 sends even bytes of data packets. The control command is received from the CPU3 processing module, and the CRC32 is checked. If the check passes, the control command in the data is parsed, and the relay output is controlled. Only the main control board parses the communication board data and drives the relay output circuit to complete the upload of the acquisition data to the communication board; the standby control board parses the communication board data but does not drive the relay output circuit, and the data uploaded to the communication board is all 0.

[0212] It should be noted that the specific implementation process of checking CRC32 is: there is a CRC32 check code of all data at the end of the data in the control command, the main control board calculates CRC32 of the data and compares it with the CRC32 at the end. If they are the same, it means the check is passed, and if they are different, it means the check is failed.

[0213] S803: Use the control switching board to switch the standby control board to the main control board.

[0214] It is understandable that when the main control board fails, in order to ensure the normal operation of the control loop, it is necessary to use the control switch board to switch the standby control board to the main control board, and replace the two CPUs in the original main control board. If the main control board switched by the standby control board fails at this time, the main control board with the replaced CPU will be switched to the main control board.

[0215] Optionally, in another embodiment of the present application, a specific implementation of step S803 includes:

[0216] Get the status relay corresponding to the standby control board in the control switching system board.

[0217] The state of the status relay corresponding to the standby control board is set to the picked-up state, so that the standby control board is switched to the main control board.

[0218] It can be understood that when the state of the status relay corresponding to the standby control board is set to the picked-up state, it means that the standby control board has been upgraded to the main control board.

[0219] S804: Check whether the main communication board fails.

[0220] If the main communication board fails, execute step S805.

[0221] It can be understood that the airline detects whether the main communication board fails. If the CPU3 processing module in the main communication board fails, then step S805 is executed. If the main communication board does not fail, the process ends.

[0222] S805: Use the communication switching board to switch the standby communication board to the main communication board.

[0223] It is understandable that when the main communication board fails, in order to ensure the normal operation of the communication circuit, it is necessary to use the communication switching board to switch the standby communication board to the main communication board and replace the CPU3 processing module in the original main communication board. If the main communication board switched by the standby communication board fails at this time, the main communication board after replacing the CPU3 processing module will be switched to the main communication board.

[0224] Optionally, in another embodiment of the present application, a specific implementation of step S805 includes:

[0225] Get the status relay corresponding to the standby communication board in the communication switching board.

[0226] The state of the status relay corresponding to the standby communication board is set to the attracted state, so that the standby communication board switches to the main communication board.

[0227] It can be understood that when the state of the status relay corresponding to the standby communication board is set to the attracted state, it means that the standby communication board has been upgraded to the main communication board.

[0228] It should be noted that the first control board, the second control board, and the control switching board constitute a control loop, and the first communication board, the second communication board, and the communication switching board constitute a communication loop. The two loops are relatively independent and do not interfere with each other. When a single control variable in the control loop fails, only the two CPUs in the control board need to be replaced. When a single communication board in the communication loop fails, only one CPU in the communication board needs to be replaced. After replacement, the equipment can operate normally.

[0229] It can be seen that during the equipment maintenance process, troubleshooting is simple, the fault point can be located quickly, and troubleshooting is convenient. If the control circuit or communication circuit fails, the fault can be reported separately, and only the faulty circuit needs to be checked.

[0230] In addition, the control circuit is switched without affecting the normal communication circuit; the communication circuit is switched without affecting the normal control circuit. During the switching process, the communication circuit and the control circuit complete the master-slave switching independently, which can reduce the switching time. During the switching process, the communication, acquisition, and output tasks have short delays and good input and output continuity.

[0231] In summary, CPU1 and CPU2 are arranged on the control board, and CPU3 is arranged on the communication board. The control loop and the communication loop are independently cut off when a single board fails. The cutting time is only determined by each loop. During the cutting process, since the communication board and the control board complete the active-standby switching independently, the cutting time can be reduced and the cutting efficiency can be improved.

[0232] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can refer to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0233] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0234] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A master-slave mode switching system, characterized in that: The active-standby mode switching system comprises: a first control board, a second control board, a control switching board, a first communication board, a second communication board, and a communication switching board; The first input / output terminal and the second input / output terminal of the first control board and the second control board are connected to the first communication bus, and the third input / output terminal and the fourth input / output terminal of the first control board and the second control board are connected to the second communication bus; The fifth output terminal of the first control board is connected to the first input terminal of the control board, the sixth output terminal of the first control board is connected to the second input terminal of the control board, the fifth input terminal of the first control board is connected to the first output terminal of the control board, and the sixth input terminal of the first control board is connected to the second output terminal of the control board; The fifth output terminal of the second control board is connected to the third input terminal of the control board, the sixth output terminal of the second control board is connected to the fourth input terminal of the control board, the fifth input terminal of the second control board is connected to the third output terminal of the control board, and the sixth input terminal of the first control board is connected to the fourth output terminal of the control board; The first input and output ends of the first communication board and the second communication board are connected to the first communication bus, the second input and output ends of the first communication board and the second communication board are connected to the second communication bus, the third input and output ends of the first communication board and the second communication board are connected to the first network interface, and the fourth input and output ends of the first communication board and the second communication board are connected to the second network interface; The fifth output terminal of the first communication board is connected to the first input terminal of the communication switching board, and the fifth input terminal of the first communication board is connected to the first output terminal of the communication switching board; The fifth output terminal of the second communication board is connected to the second input terminal of the communication switching board, and the fifth input terminal of the second communication board is connected to the second output terminal of the communication switching board; Among them, when the first control board, the second control board, the first communication board and the second communication board are in normal operating state, the main control board, the standby control board, the main communication board and the standby communication board are determined; when the main control board fails, the control switching board switches the standby control board to the main control board; when the main communication board fails, the communication switching board switches the standby control board to the main control board.

2. The system according to claim 1, characterized in that The control board includes: a CPU1 processing module and a CPU2 processing module; The first input and output end of the CPU1 processing module is connected to the first communication bus, and the second input and output end of the CPU1 processing module is connected to the second communication bus; The first input and output end of the CPU2 processing module is connected to the first communication bus, the second input and output end of the CPU2 processing module is connected to the second communication bus, and the third input and output end of the CPU1 processing module is connected to the third input and output end of the CPU2 processing module; The fourth output terminal of the CPU1 processing module is connected to the first input terminal of the control board, and the fourth output terminal of the CPU2 processing module is connected to the second input terminal of the control board; When the control board is the first control board, the fourth input terminal of the CPU1 processing module is connected to the first output terminal of the control board, and the fourth input terminal of the CPU2 processing module is connected to the second output terminal of the control board; When the control board is the second control board, the fourth input terminal of the CPU1 processing module is connected to the third output terminal of the control board, and the fourth input terminal of the CPU2 processing module is connected to the fourth output terminal of the control board.

3. The system according to claim 2, characterized in that The control board also includes: an acquisition circuit, a relay output circuit, a first communication interface, a second communication interface, a third communication interface and a fourth communication interface; The input end of the acquisition circuit is connected to the output end of the acquisition interface, and the output end of the acquisition circuit is connected to the fifth input end of the CPU1 processing module and the fifth input end of the CPU2 processing module; One end of the CPU1 processing module is connected to one end of the CPU2 processing module, the common end of the connection is connected to the input end of the relay output circuit, and the output end of the relay output circuit is connected to the output interface; The first input / output terminal of the first communication interface is connected to the first input / output terminal of the second communication interface, and the common terminal thereof is connected to the second input / output terminal of the CPU1 processing module; The first input / output terminal of the third communication interface is connected to the first input / output terminal of the fourth communication interface, and the common terminal thereof is connected to the second input / output terminal of the CPU2 processing module; The second input / output terminal of the first communication interface is connected to the second input / output terminal of the third communication interface, and the common terminal thereof is connected to the first communication bus; The second input / output terminal of the second communication interface is connected to the second input / output terminal of the fourth communication interface, and the common terminal thereof is connected to the second communication bus.

4. The system according to claim 1, characterized in that The control panel includes: a first control module, a first driving module, a second driving module and a first key module; The first input end of the first switching system driving module is connected to the fifth output end of the first control board, and the second input end of the first switching system driving module is connected to the sixth output end of the first control board; The first output end of the first switching system driving module is connected to the first input end of the first switching system control module through a switch, the first output end of the first switching system control module is connected to the fifth input end of the first control board, and the second output end of the first switching system control module is connected to the sixth input end of the first control board; The third output terminal of the first switching control module and the fifth input terminal of the second control board, the fourth output terminal of the first switching control module and the sixth input terminal of the second control board; The second input end of the first switching control module is connected to the output end of the first key module, and the third input end of the first switching control module is connected to the output end of the second switching drive module through a switch; The third input terminal of the second switching system driving module is connected to the fifth output terminal of the second control board, and the fourth input terminal of the second switching system driving module is connected to the sixth output terminal of the second control board.

5. The system according to claim 1, characterized in that The communication board includes: a CPU3 processing module, a first network module and a second network module; The first input and output end of the CPU3 processing module is connected to the first communication bus, and the second input and output end of the CPU3 processing module is connected to the second communication bus; The third input / output terminal of the CPU3 processing module is connected to the first input / output terminal of the first network module, and the fourth input / output terminal of the CPU3 processing module is connected to the first input / output terminal of the second network module; The third input and output end of the first network module is connected to the first network interface, and the second input and output end of the second network module is connected to the second network interface; When the communication board is the first communication board, the fifth output terminal of the CPU3 processing module is connected to the first input terminal of the communication switching board, and the fifth input terminal of the CPU3 processing module is connected to the first output terminal of the communication switching board; When the communication board is the second communication board, the fifth output end of the CPU3 processing module is connected to the second input end of the communication switching board, and the fifth input end of the CPU3 processing module is connected to the second output end of the communication switching board.

6. The system according to claim 1, characterized in that The communication system board includes: a second system control module, a third system drive module, a fourth system drive module and a second key module; The input end of the third switching system driving module is connected to the fifth output end of the first communication board, the output end of the third switching system driving module is connected to the first input end of the second switching system control module through a switch, and the first output end of the second switching system control module is connected to the fifth input end of the first communication board; The second output terminal of the second switching control module and the fifth input terminal of the second communication board, The second input end of the second switching control module is connected to the output end of the second key module, and the third input end of the second switching control module is connected to the output end of the fourth switching drive module through a switch; The input end of the fourth switching system driving module is connected to the fifth output end of the second communication board.

7. A method for switching between active and standby modes, characterized in that: The active / standby mode switching system applied to any one of claims 1 to 6 above comprises: When the first control board, the second control board, the first communication board and the second communication board are all in normal operation, the main control board and the standby control board of the first control board and the second control board are determined according to the control switching board, and the main communication board and the standby communication board of the first communication board and the second communication board are determined according to the communication switching board; Detecting whether the main control board fails; If the main control board fails, the control switch board is used to switch the standby control board to the main control board; Detecting whether the main communication board fails; If the main communication board fails, the communication switching board is used to switch the standby communication board to the main communication board.

8. The method according to claim 7, characterized in that The method of determining the main control board and the standby control board in the first control board and the second control board according to the control switching board includes: Acquire a first state relay corresponding to the first control board in the control panel, and a second state relay corresponding to the second control board; When the first state relay is in an attracted state and the second state relay is in a non-attracted state, the first control board is determined as a main control board, and the second control board is determined as a standby control board; When the second state relay is in the attracted state and the first state relay is in the non-attracted state, the second control board is determined as the main control board, and the first control board is determined as the standby control board.

9. The method according to claim 7, characterized in that: The determining the main communication board and the standby communication board in the first communication board and the second communication board according to the communication switching board comprises: Acquire a first state relay corresponding to the first communication board in the communication switching board, and a second state relay corresponding to the second communication board; When the first state relay is in an attracted state and the second state relay is in a non-attracted state, the first communication board is determined as a main communication board, and the second communication board is determined as a standby communication board; When the second status relay is in the attracted state and the first status relay is in the non-attracted state, the second communication board is determined as the main communication board, and the first communication board is determined as the standby communication board.

10. The method according to claim 7, characterized in that The detecting whether the main control board fails comprises: When receiving a check signal sent by the safety relay in the control switch board, the CPU1 processing module and the CPU2 processing module in the main control board are detected according to the check signal to obtain a first signal and a second signal; determining whether the first signal is consistent with the second signal; If the first signal is consistent with the second signal, it is determined that the main control board has not failed; If the first signal is inconsistent with the second signal, it is determined that the main control board fails.

11. The method according to claim 7, characterized in that The detecting whether the main control board fails comprises: Obtaining a first execution time of a task executed by a CPU1 processing module in the main control board, and a second execution time of a task executed by a CPU2 processing module; Detect whether the first execution time and the second execution time are consistent; If the first execution time and the second execution time are consistent, it is determined that the main control board has not failed; If the first execution time and the second execution time are inconsistent, determining whether the inconsistent time of executing the task exceeds a preset time; If the inconsistent execution time of the tasks exceeds a preset time, it is determined that the main control board has a fault; If the inconsistent time of executing the tasks does not exceed the preset time, it is determined that the main control board has not failed.

12. The method according to claim 7, characterized in that The detecting whether the main control board fails comprises: Acquire the collected data received by the CPU1 processing module in the main control board, and send the collected data to the CPU2 processing module in the main control board; wherein the collected data includes output signal, status relay checkback, status relay checkback, network security control data, timestamp and CRC32 check code; Using the CPU2 processing module to compare the collected data with preset data; If the collected data is inconsistent with the preset data, whether the time of data inconsistency exceeds the preset operation cycle is detected; If the time of data inconsistency exceeds the preset operation period, it is determined that the main control board fails; If the time of data inconsistency does not exceed the preset operation cycle, it is determined that the main control board has not failed.

13. The method according to claim 7, characterized in that The method of using the control switch board to switch the standby control board to the main control board includes: Obtaining a status relay corresponding to the standby control board in the control switching board; The state of the state relay corresponding to the standby control board is set to a pickup state, so that the standby control board is switched to the main control board.

14. The method according to claim 7, characterized in that The method of using the communication switching board to switch the standby communication board to the main communication board includes: Obtaining a status relay corresponding to the standby communication board in the communication switching board; The state of the status relay corresponding to the standby communication board is set to a pickup state, so that the standby communication board is switched to the main communication board.

Images