Data backup system and data backup method for satellite-borne computer with hot standby of single computer and cold standby of double computers

Abstract

The invention relates to a satellite-borne computer data backup system and a data backup method with one machine being in hot standby and two machines being in cold standby. The satellite-borne computer data backup system comprises a satellite-borne computer A and a satellite-borne computer B which are mutually independent and have the same function. The spaceborne computer A and the spaceborne computer B both serve as master control through two hot standby CPU modules and serve as public modules through an FPGA module. The spaceborne computer A and the spaceborne computer B are in mutual cold standby, and the control rights of the two hot standby CPU modules on the spaceborne computer A and the spaceborne computer B are automatically switched through the FPGA module and the watchdog module. The satellite-borne computer data backup system has the advantages that a hardware framework of the satellite-borne computer is defined, autonomous recovery during abnormity and continuity of tasks of the satellite-borne computer during dual-computer cold standby switching can be achieved, the data backup system can serve as reference for data interaction design of the satellite-borne computer with the single computer being hot standby and the dual-computer being cold standby, and data reliability is improved.

Description

Technical Field

[0001] The present invention relates to the field of satellite computer technology, and more specifically to a satellite computer data backup system and a data backup method with single-machine hot standby and dual-machine cold standby. Background Art

[0002] In recent years, a new round of space economy boom has been set off internationally. Commercial aerospace companies have begun to deploy satellite constellations on a large scale, and various satellite constellations plan to launch tens of thousands of satellites.

[0003] At present, satellites usually use onboard computers to manage various devices on board. In order to increase the reliability of satellites, various important data are usually backed up. There is no relevant literature report on the design of a highly reliable and low-cost backup method.

[0004] The preceding description is intended to provide general background information and does not necessarily constitute prior art. Summary of the invention

[0005] The purpose of the present invention is to provide a single-machine hot standby and dual-machine cold standby satellite computer data backup system and a data backup method. The satellite computer data backup system clarifies the hardware framework of the satellite computer, can realize autonomous recovery in the event of an abnormality and continuity of the satellite computer tasks when switching between dual-machine cold standby, and can be used as a reference for the data interaction design of the single-machine hot standby and dual-machine cold standby satellite computers, thereby improving the reliability of data.

[0006] The present invention provides a single-machine hot standby and dual-machine cold standby satellite computer data backup system, comprising a satellite computer A and a satellite computer B which are independent of each other and have the same functions; the satellite computer A and the satellite computer B both use two hot standby CPU modules as main controls and use an FPGA module as a common module; the satellite computer A and the satellite computer B cold standby each other, and the control rights of the two hot standby CPU modules on the satellite computer A and the satellite computer B are automatically switched through the FPGA module and the watchdog module.

[0007] Furthermore, the onboard computer A and the onboard computer B both include an analog quantity acquisition unit, a switch quantity acquisition unit, an OC instruction output unit, a thermal control drive unit, a magnetic torquer drive unit, an RS422 drive unit and a real-time clock unit.

[0008] Furthermore, of the two hot standby CPU modules on the onboard computer A and the onboard computer B, only one of the hot standby CPU modules has the single-machine control right at the same time; the machine on duty will regularly write the backup data into the FPGA module, and two RAMs are opened up inside the FPGA module. The FPGA module uses a ping-pong operation to write the data to be backed up into the two RAMs; when an abnormality occurs on the machine on duty, the watchdog module and the FPGA module logic can switch the control right. When the control right is switched, the data information before the switch is obtained from the RAM of the FPGA module to ensure the continuity of system operation; the control right can only be switched from the hot standby CPU1 module to the hot standby CPU2 module.

[0009] Furthermore, the FPGA module performs Hamming encoding and decoding on the data backed up in the RAM.

[0010] Furthermore, the onboard computer A and the onboard computer B are switched individually through a machine switching instruction; when an abnormality occurs, the FPGA module and the watchdog module of the onboard computer A automatically switch to the onboard computer B; under normal working conditions, the onboard computer periodically refreshes the data in the FIFO in the FPGA module. When a machine switching instruction is received or an abnormality occurs and the watchdog switches the machine, the other machine is powered on and reset, and the data before the machine switching is obtained from the FIFO.

[0011] The present invention also provides a data backup method, which is applied to the above-mentioned single-machine hot standby and dual-machine cold standby satellite computer data backup system.

[0012] Furthermore, the data backup method comprises the following steps:

[0013] S1: Send data request command to other machine;

[0014] S2: Determine whether the sending is completed. If the sending is completed, the control is switched to the local data; if the sending is not completed, return to step S1;

[0015] S3: Initiate a data backup request and determine whether the backup area usage flag is 1; if it is 1, the data is written to backup area 0; if not, the data is written to backup area 1;

[0016] S4: Determine whether a data transmission request from another machine is received. If a data transmission request from another machine is received, continue to determine whether the backup area use flag is 1. If it is 1, send the backup area 1 data; if not 1, send the backup area 0 data;

[0017] S5: Determine whether the backup area data has been sent completely. If not, continue to send the backup area 1 data or resend the backup area 0 data.

[0018] The single-machine hot standby and dual-machine cold standby satellite computer data backup system of the present invention realizes single-machine abnormal automatic switching, dual-machine cold standby switching and abnormal automatic switching, can realize autonomous recovery of the on-duty machine, and ensure continuous and stable operation of the system; clarifies the hardware framework of the satellite computer, can realize autonomous recovery in the event of an abnormality and continuity of the satellite computer tasks when switching between dual-machine cold standby, and can serve as a reference for the single-machine hot standby and dual-machine cold standby satellite computer data interaction design; when backing up data, the Hamming coding method is clearly adopted to encode and decode the backup data, thereby improving the reliability of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A schematic diagram of the structure of a satellite computer data backup system with single-machine hot standby and dual-machine cold standby provided in an embodiment of the present invention.

[0020] Figure 2 A flowchart of a data backup method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The specific implementation of the present invention is further described in detail below in conjunction with the accompanying drawings and examples. The following examples are used to illustrate the present invention, but are not intended to limit the scope of the present invention.

[0022] The terms "first", "second", "third", "fourth" and the like in the description and claims of the present invention are used to distinguish similar objects and are not necessarily used to describe a particular order or sequence.

[0023] Example 1

[0024] Figure 1 This is a schematic diagram of the structure of a single-machine hot standby and dual-machine cold standby satellite computer data backup system provided by an embodiment of the present invention. Figure 1 The single-machine hot standby and dual-machine cold standby satellite computer data backup system provided by the embodiment of the present invention comprises a satellite computer A and a satellite computer B which are independent of each other and have the same functions; the satellite computer A and the satellite computer B both use two hot standby CPU modules as main controls and use one FPGA module as a common module; the satellite computer A and the satellite computer B cold standby each other, and the control rights of the two hot standby CPU modules on the satellite computer A and the satellite computer B are automatically switched through the FPGA module and the watchdog module.

[0025] It should be noted that, in the satellite computer data backup system of the present invention, the hot standby CPU module serves as the management center of the satellite computer, and the FPGA module and the watchdog module serve as the central control unit, which are responsible for switching the control right of the on-duty machine; the switching of the two hot standby CPU modules in a single machine (respectively, the hot standby CPU1 module and the hot standby CPU2 module) can only be controlled by the FPGA module and the watchdog module, wherein the control right can only be switched from the hot standby CPU1 module to the hot standby CPU2 module (and cannot be switched from the hot standby CPU2 module to the hot standby CPU1 module); the satellite computer A can be switched to the satellite computer B by instructions, or switched from A to B by the FPGA module and the watchdog module; the computer B can only be switched to A by instructions.

[0026] It realizes single-machine automatic switching in case of abnormality, dual-machine cold standby switching and automatic switching in case of abnormality, which can realize self-recovery of the machine on duty and ensure continuous and stable operation of the system; it clarifies the hardware framework of the on-board computer, which can realize self-recovery in case of abnormality and continuity of on-board computer tasks when switching between dual-machine cold standby, and can be used as a reference for the design of on-board computer data interaction for single-machine hot standby and dual-machine cold standby; when backing up data, it clearly adopts the Hamming coding method to encode and decode the backup data, which improves the reliability of the data.

[0027] Furthermore, the onboard computer A and the onboard computer B of the present invention both include an analog quantity acquisition unit, a switch quantity acquisition unit, an OC instruction output unit, a thermal control drive unit, a magnetic torquer drive unit, an RS422 drive unit and a real-time clock unit.

[0028] Furthermore, the present invention uses the RAM resources in the FPGA module for the important data interaction between the two hot standby CPU modules of the stand-alone hot standby. After the control right is switched, the on-call machine can obtain the important data by accessing the RAM of the FPGA module. During normal operation, the on-call machine refreshes the data in the RAM regularly. When the onboard computer software is abnormal, the FPGA module initiates the control right switching action. After the on-call machine works normally, the data information before the control right switching can be obtained from the RAM to ensure the continuity of the stand-alone operation.

[0029] Specifically, of the two hot standby CPU modules on the onboard computer A and the onboard computer B, only one of the hot standby CPU modules has the single-machine control right at the same time; the machine on duty will regularly write the backup data into the FPGA module, and two RAMs are opened inside the FPGA module. The FPGA module uses a ping-pong operation to write the data to be backed up into the two RAMs; when an abnormality occurs on the machine on duty, the watchdog module and the FPGA module logic can switch the control right. When the control right is switched, the data information before the switch can be obtained from the RAM of the FPGA module to ensure the continuity of system operation; the control right can only be switched from the hot standby CPU1 module to the hot standby CPU2 module.

[0030] Furthermore, the FPGA module of the present invention performs Hamming encoding and decoding on the data backed up in the RAM, so as to further improve the reliability of the stored data.

[0031] Furthermore, the present invention uses the FIFO in the FPGA module to store important machine switching data; in order to avoid abnormal machine switching during data backup, which may lead to data frame splicing, the FPGA module uses ping-pong operation to store important data.

[0032] Specifically, onboard computer A and onboard computer B perform single-machine switching through a machine switching instruction; when an abnormality occurs, the FPGA module and watchdog module of onboard computer A automatically switch to onboard computer B; under normal working conditions, the on-board computer periodically refreshes the data in the FIFO in the FPGA module. When a machine switching instruction is received or an abnormality occurs and the watchdog switches the machine, the other machine is powered on and reset, and the data before the switch is obtained from the FIFO.

[0033] Furthermore, in order to improve the reliability of stored data, the FPGA module performs Hamming encoding and decoding on the data backed up into the FPGA module.

[0034] Figure 2 This is a flow chart of a data backup method provided by an embodiment of the present invention. Figure 2 The present invention also provides a data backup method, which is applied to the above-mentioned single-machine hot standby and dual-machine cold standby satellite computer data backup system.

[0035] Furthermore, the data backup method comprises the following steps:

[0036] S1: Send data request command to other machine;

[0037] S2: Determine whether the sending is completed. If the sending is completed, the control is switched to the local data; if the sending is not completed, return to step S1;

[0038] S3: Initiate a data backup request and determine whether the backup area usage flag is 1; if it is 1, the data is written to backup area 0; if not, the data is written to backup area 1;

[0039] S4: Determine whether a data transmission request from another machine is received. If a data transmission request from another machine is received, continue to determine whether the backup area use flag is 1. If it is 1, send the backup area 1 data; if not 1, send the backup area 0 data;

[0040] S5: Determine whether the backup area data has been sent completely. If not, continue to send the backup area 1 data or resend the backup area 0 data.

[0041] It should be noted that if Figure 2 As shown, step S1, step S3 and step S4 are performed in parallel and there is no order of execution.

[0042] Based on the above description, it can be seen that the advantages of the present invention are:

[0043] 1. The satellite computer data backup system of the present invention with single hot standby and dual cold standby realizes single machine abnormal automatic switching, dual cold standby switching and abnormal automatic switching, and can realize autonomous recovery of the on-duty machine to ensure continuous and stable operation of the system;

[0044] 2. The onboard computer data backup system of the present invention with single hot standby and dual cold standby clarifies the hardware framework of the onboard computer, can realize autonomous recovery in the event of an abnormality and continuity of onboard computer tasks when dual cold standby switches, and can be used as a reference for the design of onboard computer data interaction with single hot standby and dual cold standby;

[0045] 3. The single-machine hot standby and dual-machine cold standby satellite computer data backup system of the present invention explicitly adopts the Hamming coding method to encode and decode the backup data when backing up data, thereby improving the reliability of the data.

[0046] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A single-machine hot standby and dual-machine cold standby onboard computer data backup system, characterized in that: It includes onboard computer A and onboard computer B which are independent of each other and have the same functions; The onboard computer A and the onboard computer B both use two hot standby CPU modules as main controls and one FPGA module as a common module; The onboard computer A and the onboard computer B are in cold standby with each other, and the control rights of the two hot standby CPU modules on the onboard computer A and the onboard computer B are automatically switched through the FPGA module and the watchdog module.

2. The single-machine hot standby and dual-machine cold standby satellite computer data backup system according to claim 1 is characterized in that: The onboard computer A and the onboard computer B both include an analog quantity acquisition unit, a switch quantity acquisition unit, an OC instruction output unit, a thermal control drive unit, a magnetic torquer drive unit, an RS422 drive unit and a real-time clock unit.

3. The single-machine hot standby and dual-machine cold standby satellite computer data backup system according to claim 1 is characterized in that: Of the two hot standby CPU modules on the onboard computer A and the onboard computer B, only one of the hot standby CPU modules has single-machine control at the same time; The on-duty machine will write the backup data into the FPGA module regularly. Two RAMs are opened inside the FPGA module. The FPGA module uses ping-pong operation to write the data to be backed up into the two RAMs. When an abnormality occurs in a flight, the watchdog module and the FPGA module logic can switch control rights. When the control rights are switched, the data information before the switch is obtained from the RAM of the FPGA module to ensure the continuity of system operation; the control rights can only be switched from the hot standby CPU1 module to the hot standby CPU2 module.

4. The single-machine hot standby and dual-machine cold standby satellite computer data backup system according to claim 3 is characterized in that: The FPGA module performs Hamming encoding and decoding on the data backed up in the RAM.

5. The single-machine hot standby and dual-machine cold standby satellite computer data backup system according to claim 1 is characterized in that: The onboard computer A and the onboard computer B are switched individually by a switching instruction; When an abnormality occurs, the FPGA module and watchdog module of onboard computer A automatically switch to onboard computer B; Under normal working conditions, the on-call machine periodically refreshes the data in the FIFO in the FPGA module. When a machine switching instruction is received or an exception occurs and the watchdog switches the machine, the other machine is powered on and reset, and the data before switching is obtained from the FIFO.

6. A data backup method, characterized in that: The data backup method is applied to the single-machine hot standby and dual-machine cold standby satellite computer data backup system as described in any one of claims 1-5.

7. The data backup method according to claim 6, characterized in that: The data backup method comprises the following steps: S1: Send data request command to other machine; S2: Determine whether the sending is completed. If the sending is completed, the control is switched to the local data; if the sending is not completed, return to step S1; S3: Initiate a data backup request and determine whether the backup area usage flag is 1; if it is 1, the data is written to backup area 0; if not, the data is written to backup area 1; S4: Determine whether a data transmission request from another machine is received. If a data transmission request from another machine is received, continue to determine whether the backup area use flag is 1. If it is 1, send the backup area 1 data; if not 1, send the backup area 0 data; S5: Determine whether the backup area data has been sent completely. If not, continue to send the backup area 1 data or resend the backup area 0 data.

Images