Dynamic reconstruction method and system for embedded hot standby redundant system

Abstract

The invention discloses a dynamic reconstruction method and system for an embedded hot standby redundant system, the embedded hot standby redundant system comprises a system I and a system II which are the same, and the system I and the system II comprise the same process; when two processes in any one system communicate with each other or the processes communicate with the outside, the message distributor simultaneously sends messages to the same process of the two systems through an inter-process communication replacement interface, so that two-system synchronization of the messages is realized; when any process X1 in the I system fails, a process X2 which is the same as the process X1 in the II system replaces the X1 for communication; and when the process X2 fails, the X1 replaces the X2 for communication. According to the method, process-level dynamic reconstruction can be realized, so that two systems working with diseases can form a complete system to continue to work, and the availability of the system is improved.

Description

Technical Field

[0001] The invention relates to the technical field of hot standby redundancy, in particular to a dynamic reconstruction method and system of an embedded hot standby redundancy system. Background Art

[0002] Existing embedded hot standby redundant systems can only perform hot standby redundant and dynamic reconstruction on a board-by-board basis. For example, a hot standby redundant system with two sets of master control subsystems A and B and two sets of redundant IO subsystems I and II can only be dynamically reconstructed by combining A with I, A with II, B with I, and B with II to form a complete subsystem that can work normally. When a software process of A fails and another software process of B fails, the system completely loses its function. Summary of the invention

[0003] Purpose of the invention: The purpose of the present invention is to provide a dynamic reconstruction method and system for an embedded hot standby redundant system. By means of process-level redundancy between the active and standby redundant dual systems, it is ensured that only when all the same processes of the two systems fail will the function be completely lost. If the failed processes between the two systems are different, they can still continue to work, thereby improving the availability of the system.

[0004] Technical solution: The dynamic reconstruction method of the embedded hot standby redundant system of the present invention, the embedded hot standby redundant system includes the same system I and system II, and the system I and system II contain the same process;

[0005] When two processes in any system communicate with each other or a process communicates with the outside, the message distributor sends the message to the same process in both systems through inter-process communication instead of the interface, thus achieving synchronization of messages in both systems.

[0006] When any process X1 in system I fails, the same process X2 in system II communicates instead of X1; when process X2 fails, X1 communicates instead of X2.

[0007] Furthermore, for any process, each time communication is performed, a first message and a second message with the same content are received from two systems, and the message type and transaction number of the first message and the second message are the same; after any process receives and processes the first message, it discards the second message it receives.

[0008] Further,

[0009] When any two processes X1 and Y1 in the I system communicate with each other, the first message synchronization method includes: X1 first sends a message to the message distributor P1 in the I system through the inter-process communication instead of the interface, P1 sends the message to Y1 and the message distributor P2 in the II system, and P2 sends the message to the same process Y2 as Y1 in the II system through the inter-process communication instead of the interface;

[0010] When processes X2 and Y2 in system II communicate with each other, the first message synchronization method is used to send messages to Y2 and Y1.

[0011] Furthermore, when the external system communicates with the process X1 in the I system, the second message synchronization method is: X1 first sends the received external message to the message distributor P1 in the I system through the inter-process communication instead of the interface, and P1 sends the message to the process Y1 that needs the external message and the message distributor P2 in the II system, and P2 sends the message to the process Y2 in the II system that is the same as Y1 through the inter-process communication instead of the interface;

[0012] When process X2 in system II receives an external message and process Y2 needs the external message, the external message is sent to Y2 and Y1 using the second message synchronization method.

[0013] Furthermore, after a message is sent between a process and a message distributor, or between message distributors of two systems, the recipient sends a receipt to the sender. If no receipt is received, the message is resent until the recipient receives the receipt, in which case the message is considered to have been sent successfully. If the recipient still has not received a receipt after the configured number of sends is reached, the message is considered to have failed to be sent.

[0014] Furthermore, the message distributor is an independent process, embedded in the I system and the II system, or embedded in the operating system in the I system and the II system.

[0015] The dynamic reconstruction system of the embedded hot standby redundant system of the present invention comprises the same system I and system II, and the system I and system II contain the same process;

[0016] When two processes in any system communicate with each other or a process communicates with the outside, the message distributor sends the message to the same process in both systems through inter-process communication instead of the interface, thus achieving synchronization of messages in both systems.

[0017] When any process X1 in system I fails, the same process X2 in system II communicates instead of X1; when process X2 fails, X1 communicates instead of X2.

[0018] Furthermore, for any process, each time a communication is performed, a first message and a second message with the same content are received from two systems, and the message type and transaction number of the first message and the second message are the same; after any process receives and processes the first message, it discards the second message it receives;

[0019] When any two processes X1 and Y1 in the I system communicate with each other, the first message synchronization method includes: X1 first sends a message to the message distributor P1 in the I system through the inter-process communication instead of the interface, P1 sends the message to Y1 and the message distributor P2 in the II system, and P2 sends the message to the same process Y2 as Y1 in the II system through the inter-process communication instead of the interface;

[0020] When processes X2 and Y2 in system II communicate, the first message synchronization method is used to send messages to Y2 and Y1;

[0021] When the external system communicates with process X1 in system I, the second message synchronization method is: X1 first sends the received external message to the message distributor P1 in system I through inter-process communication instead of the interface, P1 sends the message to process Y1 that needs the external message and message distributor P2 in system II, and P2 sends the message to process Y2 in system II that is the same as Y1 through inter-process communication instead of the interface;

[0022] When process X2 in system II receives an external message, and process Y2 needs the external message, the external message is sent to Y2 and Y1 using the second message synchronization method described above;

[0023] After a message is sent between a process and a message dispatcher, or between message dispatchers of two systems, the recipient sends a receipt to the sender. If no receipt is received, the message is resent until the recipient receives the receipt, and the message is considered to have been sent successfully. If the recipient still does not receive the receipt after reaching the configured number of times of sending, the message is considered to have failed to be sent.

[0024] The message distributor is an independent process, embedded in the I system and the II system, or embedded in the operating system of the I system and the II system.

[0025] The electronic device described in the present invention includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and is characterized in that when the computer program is loaded into the processor, the dynamic reconstruction method of the embedded hot standby redundant system is implemented.

[0026] The computer-readable storage medium of the present invention stores a computer program, and when the computer program is executed by a processor, the dynamic reconstruction method of the embedded hot standby redundant system is implemented.

[0027] Beneficial effects: Compared with the prior art, the advantages of the present invention are: (1) The present invention can achieve complete communication at the process level. When any process fails, the processes and the processes and external systems can maintain connectivity, thereby achieving process-level hot standby redundancy; (2) The present invention can achieve dynamic reconstruction at the process level, so that two systems that are working with problems can form a complete system and continue to work, thereby improving system availability. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 This is an architecture diagram of the embedded hot standby redundant system of the present invention;

[0029] Figure 2 A schematic diagram of forwarding message communication within the embedded hot standby redundant system of the present invention;

[0030] Figure 3 A schematic diagram of forwarding external message communication of the embedded hot standby redundant system of the present invention;

[0031] Figure 4 A schematic diagram of any functional process receiving two messages from different systems in an embodiment of the present invention;

[0032] Figure 5 A schematic diagram of a synchronization message format according to an embodiment of the present invention;

[0033] Figure 6 A schematic diagram of dynamic reconstruction of different processes in an embodiment of the present invention;

[0034] Figure 7 A schematic diagram of message receipt and resending according to an embodiment of the present invention;

[0035] Figure 8 The flowchart of message receipt and resending according to an embodiment of the present invention is shown in FIG. DETAILED DESCRIPTION

[0036] The technical solution of the present invention is further described below in conjunction with the accompanying drawings.

[0037] like Figure 1 As shown, the embedded hot standby redundant system includes two systems with completely identical software and hardware, namely, system I and system II. The only difference between the two systems is the data configuration, which is manifested in that the system configurations of the two systems are different (for example, 1 and 2 respectively), and all communication addresses such as IP addresses and CAN addresses are different (otherwise they cannot work in the same network). In this embodiment, the two systems contain the same processes A~G, which are respectively recorded as A1~G1 and A2~G2. Both systems accept external inputs. For the same external input, the results of the two system operations and the external outputs are exactly the same (that is, the two systems are redundant, but this embodiment does not include maintenance information, only normal functions). Based on the original functional process groups of the two systems, the present invention adds a message distributor P to replace the original inter-process communication. The message distributor P is an independent process and can also be embedded in the operating system to synchronize the data of the two systems. When a functional process X in a system fails (is killed, suspended, or in an infinite loop, etc.), the Y process working in conjunction with X can still communicate normally with the X process of the other system and continue to work.

[0038] The following is an explanation using processes A1 and B1 in system I, processes A2 and B2 in system II, and the external system.

[0039] like Figure 2 As shown, for internal communication, system I adopts a message distributor P1. When processes A1 and B1 of system I communicate with each other, the prior art will call the inter-process interface to send a message from A1 to B1. The present invention encapsulates a new interface, namely, an inter-process communication replacement interface. In this interface, the message that A1 wants to send to B1 is first sent to P1. After receiving the message, P1 sends the message to B1 through inter-process communication. At the same time, the internal message (including the destination process identifier B) is also sent to the message distributor P2 located in system II through two-system communication. After receiving the message, P2 identifies the destination process identifier and sends the message to B2 through inter-process communication.

[0040] Similarly, P2 will also forward the inter-process communication messages within system II to the corresponding processes in system I.

[0041] like Figure 3 As shown, for external communication, after receiving an external communication message (such as Ethernet message and CAN message, etc.), process A1 of system I should send the message directly to process B1 that needs the message through inter-process communication. Now a new interface, namely the inter-process communication replacement interface, is encapsulated. In this interface, the message sent by A1 to B1 is first sent to P1. After P1 receives the message, it sends the message to B1 through inter-process communication. At the same time, it also sends the external communication message (including B, the destination process identifier) ​​through two-system communication to the message distributor P2 located in system II. After P2 receives the message, it identifies the destination process identifier and sends the message to B2 through inter-process communication.

[0042] like Figure 4 As shown, for any process X, each time it communicates, it will receive two messages from different systems but with the same content, such as Figure 5 As shown in the figure, the content of the message includes: message type, transaction number, destination process ID, number of retransmissions, original inter-process communication data and checksum. The message type and transaction number are used to distinguish. If the first message has been processed, the second message with the same message type and transaction number will be discarded.

[0043] When any process X1 in the I system fails (being killed, suspended, or in an infinite loop, etc.), the Y1 process working in conjunction with X1 can still communicate normally with the process X2 in the II system, complete dynamic reconstruction and continue working. Similarly, when any functional process Y2 in the II system fails (being killed, suspended, or in an infinite loop, etc.), the X2 process working in conjunction with Y2 can still communicate normally with the process Y1 in the I system, complete dynamic reconstruction and continue working. Figure 6As shown in the figure, when the D1 process of system I fails, D2 replaces D1 to communicate normally; when the F2 process of system II fails, F1 replaces F2 to communicate normally. Only when all the same processes in system I and system II fail, the hot standby redundant system will lose its function.

[0044] like Figure 7 and Figure 8 As shown, the message distributor P and its encapsulated inter-process communication alternative interface can achieve reliable transmission. When any message sent by process A1 to B1 and B2 does not receive feedback, it will be resent multiple times (configurable number of times). If multiple resends fail, the receiving end is considered abnormal and the message will not be resent.

[0045] The dynamic reconstruction system of the embedded hot standby redundant system of the present invention comprises the same system I and system II, and the system I and system II contain the same process;

[0046] When two processes in any system communicate with each other or a process communicates with the outside, the message distributor sends the message to the same process in both systems through inter-process communication instead of the interface, thus achieving synchronization of messages in both systems.

[0047] When any process X1 in system I fails, the same process X2 in system II communicates instead of X1; when process X2 fails, X1 communicates instead of X2.

[0048] The electronic device described in the present invention includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and is characterized in that when the computer program is loaded into the processor, the dynamic reconstruction method of the embedded hot standby redundant system is implemented.

[0049] The computer-readable storage medium of the present invention stores a computer program, and when the computer program is executed by a processor, the dynamic reconstruction method of the embedded hot standby redundant system is implemented.

[0050] The computer-readable storage media may include RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, flash memory, or any other medium that can be used to store the desired program code in the form of instructions or data structures and that can be accessed by a computer.

[0051] The processor is used to execute the computer program stored in the memory to implement each step of the method involved in the above embodiment.

Claims

1. A dynamic reconstruction method for an embedded hot standby redundant system, characterized in that: The embedded hot standby redundant system includes the same system I and system II, and the system I and system II include the same process; When two processes in any system communicate with each other or a process communicates with the outside, the message distributor sends the message to the same process in both systems through inter-process communication instead of the interface, thus achieving synchronization of messages in both systems. When any process X1 in system I fails, the same process X2 in system II communicates instead of X1; when process X2 fails, X1 communicates instead of X2.

2. The method for dynamic reconstruction of an embedded hot standby redundant system according to claim 1, characterized in that: For any process, each time it communicates, it receives the first message and the second message with the same content from the two systems, and the message type and transaction number of the first message and the second message are the same; after any process receives and processes the first message, it discards the second message it receives.

3. The method for dynamic reconstruction of an embedded hot standby redundant system according to claim 1, characterized in that: When any two processes X1 and Y1 in the I system communicate with each other, the first message synchronization method includes: X1 first sends a message to the message distributor P1 in the I system through the inter-process communication instead of the interface, P1 sends the message to Y1 and the message distributor P2 in the II system, and P2 sends the message to the same process Y2 as Y1 in the II system through the inter-process communication instead of the interface; When processes X2 and Y2 in system II communicate with each other, the first message synchronization method is used to send messages to Y2 and Y1.

4. The method for dynamic reconstruction of an embedded hot standby redundant system according to claim 1, characterized in that: When the external system communicates with process X1 in system I, the second message synchronization method is: X1 first sends the received external message to the message distributor P1 in system I through inter-process communication instead of the interface, P1 sends the message to process Y1 that needs the external message and message distributor P2 in system II, and P2 sends the message to process Y2 in system II that is the same as Y1 through inter-process communication instead of the interface; When process X2 in system II receives an external message and process Y2 needs the external message, the external message is sent to Y2 and Y1 using the second message synchronization method.

5. The method for dynamic reconstruction of an embedded hot standby redundant system according to claim 1, characterized in that: After sending a message between a process and a message dispatcher, or between message dispatchers of two systems, the recipient sends a receipt to the sender. If no receipt is received, the message is resent until the recipient receives the receipt, and the message is considered to have been sent successfully. If the recipient still does not receive a receipt after the configured number of sends, the message is considered to have failed to be sent.

6. The method for dynamic reconstruction of an embedded hot standby redundant system according to claim 1, characterized in that: The message distributor is an independent process, embedded in the I system and the II system, or embedded in the operating system of the I system and the II system.

7. A dynamic reconstruction system for an embedded hot standby redundant system, characterized in that: The embedded hot standby redundant system includes the same system I and system II, and the system I and system II include the same process; When two processes in any system communicate with each other or a process communicates with the outside, the message distributor sends the message to the same process in both systems through inter-process communication instead of the interface, thus achieving synchronization of messages in both systems. When any process X1 in system I fails, the same process X2 in system II communicates instead of X1; when process X2 fails, X1 communicates instead of X2.

8. The dynamic reconstruction system of the embedded hot standby redundant system according to claim 7, characterized in that: For any process, each time during communication, the first message and the second message with the same content are received from the two systems, and the message type and transaction number of the first message and the second message are the same; after any process receives and processes the first message, it discards the second message it receives; When any two processes X1 and Y1 in the I system communicate with each other, the first message synchronization method includes: X1 first sends a message to the message distributor P1 in the I system through the inter-process communication instead of the interface, P1 sends the message to Y1 and the message distributor P2 in the II system, and P2 sends the message to the same process Y2 as Y1 in the II system through the inter-process communication instead of the interface; When processes X2 and Y2 in system II communicate, the first message synchronization method is used to send messages to Y2 and Y1; When the external system communicates with process X1 in system I, the second message synchronization method is: X1 first sends the received external message to the message distributor P1 in system I through inter-process communication instead of the interface, P1 sends the message to process Y1 that needs the external message and message distributor P2 in system II, and P2 sends the message to process Y2 in system II that is the same as Y1 through inter-process communication instead of the interface; When process X2 in system II receives an external message, and process Y2 needs the external message, the external message is sent to Y2 and Y1 using the second message synchronization method described above; After a message is sent between a process and a message dispatcher, or between message dispatchers of two systems, the recipient sends a receipt to the sender. If no receipt is received, the message is resent until the recipient receives the receipt, and the message is considered to have been sent successfully. If the recipient still does not receive the receipt after reaching the configured number of times of sending, the message is considered to have failed to be sent. The message distributor is an independent process, embedded in the I system and the II system, or embedded in the operating system of the I system and the II system.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the computer program is loaded into the processor, the dynamic reconstruction method of the embedded hot standby redundant system according to any one of claims 1 to 6 is implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the dynamic reconstruction method of the embedded hot standby redundant system according to any one of claims 1 to 6 is implemented.

Images