Ship automation redundancy system and redundancy control method thereof

Abstract

The invention discloses a ship automation redundancy system and a redundancy control method thereof, and the method comprises the steps: enabling a management network, a service station server, a communication server, a system network, a controller, a control network and an equipment load to be respectively set as a main device and a standby device, and enabling the standby device to be in a to-be-operated working state when the main device works normally; when any network or any device breaks down, the standby network or the standby device is switched to the working network or the working device in time, normal operation of the ship can be guaranteed, and data loss cannot be caused.

Description

Technical Field

[0001] The present invention relates to a ship control system, and in particular to a ship automation redundant system and a redundant control method thereof. Background Art

[0002] Ship control systems usually include several components such as power control system, propulsion control system, rudder control system, fire control system, security control system, mission control system, engine room monitoring system, etc. At present, with the development of information technology, the various control systems of ships have gradually realized information integration and data comprehensive utilization in terms of information fusion and interconnection from the early independent mode, and developed information application systems such as full-ship comprehensive monitoring, intelligent integrated platform, and integrated platform management system, which facilitates the crew's ship operation and operation maintenance and reduces the crew's workload.

[0003] However, if a device or network fails in the ship control system, a certain function of the ship will not be realized, which will cause the ship to fail to operate normally. At present, some ship control systems also have redundant designs, but their main and backup devices are synchronously running and working when the ship is operating normally, which will occupy more resources and cause rapid equipment loss; some ship control systems have redundant designs in which the backup device is not started when the main device is running, and the backup device is started when the main device fails. In this way, data loss will occur in the process of replacing the main device with the backup device. Summary of the invention

[0004] In view of this, the present invention provides a ship automation redundant system and a redundant control method thereof, so as to solve the problems existing in the above-mentioned background technology.

[0005] A ship automation redundant system includes an operator station, a management network, a service station server, a communication server, a system network, a controller, a control network and an equipment load, wherein the management network includes a main management network and a slave management network, the service station server includes a main service station server and a slave service station server, the communication server includes a main communication server and a slave communication server, the system network includes a main system network and a slave system network, and the controller includes a master controller and a slave controller.

[0006] The operator station is connected to the main management network and the slave management network respectively, the main service station server and the slave service station server are connected in parallel to the main management network and the slave management network, one end of the main communication server and the slave communication server are connected in parallel to the main management network and the slave management network, the other end of the main communication server and the slave communication server are connected in parallel to the main system network and the slave system network, one end of the master controller and the slave controller are connected in parallel to the main system network and the slave system network, and the other end is connected in parallel to the control network, and the control network is connected to the equipment load.

[0007] Preferably, the master communication server and the slave communication server each include four network ports, two of which are used to connect to the master management network and the slave management network, and the other two are used to connect to the master system network and the slave system network;

[0008] Two network ports of the slave communication server are used to connect to the master management network and the slave management network, and the other two network ports are used to connect to the master system network and the slave system network.

[0009] Preferably, the control network includes a master control network and a slave control network, and the device load includes a master device and a backup device, and the master device and the backup device are both connected in parallel to the master control network and the slave control network.

[0010] A redundant control method for a ship automation redundant system specifically comprises the following steps:

[0011] When the ship automation redundant system is working normally, the master controller, the master communication server and the master service station server are all in normal working state, the slave controller, the slave communication server and the slave service station server are all in waiting working state, the master controller sends a control command or a data request command to the device load through the control network and transmits the data received from the device load to the master communication server through the main system network, the master communication server transmits the data it receives to the master service station server through the main management network, and the master service station server synchronously transmits all the data stored inside it to the slave service station server through the main management network.

[0012] The user issues a control command or a data request command through the operator station to obtain corresponding data from the main service station server through the main management network, or the main communication server obtains the control command or data request command issued by the operator station to the main service station server through the main management network and transmits the control command or data request command to the main control controller through the main system network to obtain corresponding data;

[0013] During the normal operation of the ship automation redundant system, the system performs real-time fault detection on the communication server, service station server, and controller according to its system diagnostic service program, and switches the master and slave devices or the master and slave networks according to the fault detection structure.

[0014] Preferably, the specific steps of the system performing real-time fault detection on the communication server according to its system diagnostic service program are:

[0015] The main communication server sends a survival message to the slave communication server through the main management network at regular intervals. If the slave communication server receives the survival message, it means that the main communication server and the main management network are working normally.

[0016] If the survival message is not received from the communication server, the current network will be switched from the main management network to the slave management network first. After the network is switched, it is determined whether the slave communication server has received the survival message. If the survival message is received, it means that the main management network is faulty. If the slave communication server still does not receive the survival message after the network is switched, it means that the main communication server is faulty, and the communication server currently in working state is switched from the main communication server to the slave communication server.

[0017] Preferably, the specific steps of the system performing real-time fault detection on the service station server according to its system diagnostic service program are:

[0018] The main service station server sends a survival message to the slave service station server through the main management network at regular intervals. If the slave service station server receives the survival message, it means that the main service station server and the main management network are working normally.

[0019] If the slave service station server does not receive the survival message, first switch the current network from the main management network to the slave management network. After the network switching, determine whether the slave service station server has received the survival message. If the survival message is received, it means that the main management network is faulty. If the slave service station server still does not receive the survival message after the network switching, it means that the main service station server is faulty, and the communication server currently in working state is switched from the main service station server to the slave service station server.

[0020] Preferably, the specific steps of the system performing real-time fault detection on the controller according to its system diagnostic service program are:

[0021] The master controller periodically sends a survival message to the slave controller through the main system network. If the slave controller receives the survival message, it means that the master controller and the main system network are working normally;

[0022] If the slave controller does not receive the survival message, first switch the current network from the main system network to the slave system network. After the network switching, determine whether the slave controller has received the survival message. If it has received the survival message, it means that the main system network is faulty. If the slave controller still does not receive the survival message after the network switching, it means that the master controller is faulty, and the controller currently in working state is switched from the master controller to the slave controller.

[0023] The beneficial effects of the present invention are:

[0024] 1. The ship automation redundant system of the present invention sets the management network, service station server, communication server, system network, controller, control network and equipment load as one main and one backup, and the backup equipment is in a standby working state when the main equipment is operating normally. When any network or any equipment fails, the backup network or backup equipment is promptly switched to the working network or working equipment, so that the normal operation of the ship can be guaranteed and data loss will not be caused. At the same time, since the backup equipment is only in a standby working state when the main equipment is operating normally, the service life of the equipment can be greatly improved and the equipment loss can be reduced.

[0025] 2. Heartbeat detection will be performed between the main and backup devices of the service station server, communication server, and controller. According to the heartbeat detection mechanism, device abnormalities or network abnormalities can be detected in time, so that the backup device or backup network can be quickly switched to the main one to avoid affecting the normal operation of the ship. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0027] Figure 1 It is the system composition block diagram of the ship automation redundant system. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention is described below by the specific embodiments shown in the accompanying drawings. However, it should be understood that these descriptions are only exemplary and are not intended to limit the scope of the present invention. In addition, in the following description, the description of well-known structures and technologies is omitted to avoid unnecessary confusion of the concept of the present invention.

[0029] The terms used in this disclosure are for the purpose of describing specific embodiments only and are not intended to limit the disclosure. The singular forms of "a", "said" and "the" used in this disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0030] In order to better understand the technical solution of the present invention, the present invention is described in detail below with reference to the accompanying drawings.

[0031] The present invention provides a ship automation redundant system, comprising an operator station, a management network, a service station server, a communication server, a system network, a controller, a control network and an equipment load, wherein the management network comprises a main management network and a slave management network, the service station server comprises a main service station server and a slave service station server, the communication server comprises a main communication server and a slave communication server, the system network comprises a main system network and a slave system network, and the controller comprises a main control controller and a slave control controller.

[0032] The operator station is the key interface for users (such as crew members) to interact with the ship automation system. Users can send control commands to various devices (including service station servers, communication servers, controllers, and equipment loads) through the operator station, and can also send data request commands to various devices. The operator station stores relevant programs, which can also periodically and automatically send data request commands to various devices.

[0033] The operator station is connected to the main management network and the slave management network respectively, and sends control commands or data request commands through the main management network or the slave management network. Under normal circumstances, the operator station sends control commands or data request commands through the main management network. If the main management network fails, the control command or data request command needs to be sent through the slave management network.

[0034] The master service station server and the slave service station server are connected in parallel to the master management network and the slave management network, and one end of the master communication server and the slave communication server are connected in parallel to the master management network and the slave management network. The master service station server and the slave service station server are used to store data, including real-time data and historical data, and the master communication server and the slave communication server are used to transmit data in the network.

[0035] The data stored in the main service station server will be backed up in the slave service station server in real time through the main management network or the slave management network to prevent the main service station server from malfunctioning. When the main service station server fails, the data can be directly obtained from the slave service station server. It should be noted here that when the main service station server is operating normally, the slave service station server is in a standby working state. The so-called standby working state means that the slave service station server is powered on and started, and it communicates with the main management network and the slave management network. It only performs the functions of receiving and storing data, and does not perform normal working functions such as data processing.

[0036] The other ends of the master communication server and the slave communication server are connected in parallel to the master system network and the slave system network. One end of the master controller and the slave controller are connected in parallel to the master system network and the slave system network, and the other end is connected in parallel to the control network. The control network is connected to the equipment load.

[0037] The main communication server and the slave communication server are connected in parallel on the management network (main management network and slave management network). When the main communication server is working normally, the slave communication server is in a standby working state. The standby working state of the slave communication server is similar to the standby working state of the slave service station server, that is, the slave communication server only executes the function of receiving data in the standby working state, and does not execute functions such as data processing during normal operation.

[0038] Specifically, the master service station server and the slave service station server each include two network ports, the network port of the master service station server is respectively connected to the master management network and the slave management network, and the network port of the slave service station server is also respectively connected to the master management network and the slave management network.

[0039] The main communication server and the slave communication server each include four network ports, two of which are used to connect to the main management network and the slave management network respectively, and the other two are used to connect to the main system network and the slave system network respectively; two of which are used to connect to the main management network and the slave management network respectively, and the other two are used to connect to the main system network and the slave system network respectively.

[0040] The master controller and the slave controller each include two network ports, the two network ports of the master controller are respectively connected to the master system network and the slave system network, and the two network ports of the slave controller are also respectively connected to the master system network and the slave system network.

[0041] Preferably, the control network includes a master control network and a slave control network, the device load includes a master device and a backup device, and the master device and the backup device are connected in parallel to the master control network and the slave control network. Specifically, Figure 1The device load shown includes an input device and an output device, and each input device and output device is provided with a corresponding backup device.

[0042] The present invention also provides a redundant control method for a ship automation redundant system, which specifically comprises the following steps:

[0043] When the ship automation redundant system is working normally, the master controller, the master communication server and the master service station server are all in a normal working state, and the slave controller, the slave communication server and the slave service station server are all in a waiting working state;

[0044] The master controller sends control commands or data request commands to the device load through the control network and transmits the data received from the device load to the main communication server through the main system network (the device load will also send its real-time data during operation to the master controller through the control network), the main communication server transmits the received data to the main service station server through the main management network, and the main service station server synchronously transmits the received data to the slave service station server through the main management network;

[0045] The user issues a control command or a data request command through the operator station to obtain the corresponding data directly from the main service station server through the main management network. If the relevant data requested by the control command does not exist in the main service station server, the main communication server obtains the control command or data request command sent by the operator station to the main service station server through the main management network, and transmits the control command or data request command to the main control controller through the main system network to obtain the corresponding data (when the main control controller receives the control command or data request command, if it stores the relevant data requested by the control command, the main control controller directly transmits the relevant data back to the operator station step by step. If it does not store the relevant data, the main control controller issues a control instruction to the equipment load to obtain the relevant data, and then transmits the relevant data back to the operator station step by step).

[0046] It should be noted that when a user issues a control command or a data request command through the operator station, the control command or the data request command is transmitted to the main service station server through the main management network. While the main service station server transmits the relevant data to the operator station according to the received control command or the data request command, it will also transmit the control command or the data request command received from the operator station to the main communication server through the main management network to prevent the main service station server from failing. If the main service station server fails, the main communication server will transmit the control command or the data request command to the slave service station server through the main management network, so that the slave service station server will transmit the relevant data to the operator station.

[0047] The control commands or data request commands issued by the user through the operator station can also be transmitted to the main communication server via the main management network, and the control commands or data request commands can be transmitted to the main control controller through the main system network to obtain corresponding real-time data.

[0048] At the same time, the operator station can also automatically send data request commands to the main service station server periodically according to its internal built-in program to obtain the corresponding data.

[0049] During the normal operation of the ship automation redundant system, the main communication server periodically sends a survival message to the slave communication server through the main management network (for example, the main communication server can send a survival message to the slave communication server through the main management network per second). If the slave communication server receives the survival message, it means that the main communication server and the main management network are both operating normally; if the slave communication server does not receive the survival message, first switch the current network from the main management network to the slave management network, and after the network switching, determine whether the slave communication server receives the survival message. If the survival message is received, it means that the main management network is faulty, and then use the slave management network to transmit data, and report the main management network for repair; if the slave communication server still does not receive the survival message after the network switching, it means that the main communication server is faulty, and the communication server currently in working state is switched from the main communication server to the slave communication server, and the main communication server is reported for repair;

[0050] At the same time, the master service station server periodically sends a survival message to the slave service station server through the master management network (for example, the master service station server can send a survival message to the slave service station server through the master management network per second). If the slave service station server receives the survival message, it means that the master service station server and the master management network are operating normally. If the slave service station server does not receive the survival message, first switch the current network from the master management network to the slave management network. After the network is switched, determine whether the slave service station server has received the survival message. If the survival message is received, it means that the master management network is faulty. Then, use the slave management network to transmit data, and report the main management network for repair. If the slave service station server still does not receive the survival message after the network is switched, it means that the master service station server is faulty. Switch the communication server currently in working state from the master service station server to the slave service station server, and report the main service station server for repair.

[0051] At the same time, the master controller periodically sends a survival message to the slave controller through the main system network. If the slave controller receives the survival message, it means that the master controller and the main system network are working normally; if the slave controller does not receive the survival message, first switch the current network from the main system network to the slave system network. After the network switching, determine whether the slave controller has received the survival message. If the survival message is received, it means that the main system network is faulty, and the main system network fault is reported; if the slave controller still does not receive the survival message after the network switching, it means that the master controller is faulty, and the controller currently in working state is switched from the master controller to the slave controller, and the master controller is reported.

[0052] It should be clear that the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

Claims

1. A ship automation redundant system, characterized in that: It includes an operator station, a management network, a service station server, a communication server, a system network, a controller, a control network and an equipment load. The management network includes a main management network and a slave management network. The service station server includes a main service station server and a slave service station server. The communication server includes a main communication server and a slave communication server. The system network includes a main system network and a slave system network. The controller includes a master controller and a slave controller. The operator station is connected to the main management network and the slave management network respectively, the main service station server and the slave service station server are connected in parallel to the main management network and the slave management network, one end of the main communication server and the slave communication server are connected in parallel to the main management network and the slave management network, the other end of the main communication server and the slave communication server are connected in parallel to the main system network and the slave system network, one end of the master controller and the slave controller are connected in parallel to the main system network and the slave system network, and the other end is connected in parallel to the control network, and the control network is connected to the equipment load.

2. The ship automation redundant system according to claim 1, characterized in that: The master communication server and the slave communication server each include four network ports, two of which are used to connect to the master management network and the slave management network, and the other two are used to connect to the master system network and the slave system network; Two network ports of the slave communication server are used to connect to the master management network and the slave management network, and the other two network ports are used to connect to the master system network and the slave system network.

3. The ship automation redundant system according to claim 1, characterized in that: The control network includes a main control network and a slave control network, and the device load includes a main device and a backup device, and the main device and the backup device are both connected in parallel to the main control network and the slave control network.

4. A redundant control method for a ship automation redundant system according to any one of claims 1 to 3, characterized in that: The specific steps include: When the ship automation redundant system is working normally, the master controller, the master communication server and the master service station server are all in normal working state, the slave controller, the slave communication server and the slave service station server are all in waiting working state, the master controller sends a control command or a data request command to the device load through the control network and transmits the data received from the device load to the master communication server through the main system network, the master communication server transmits the data it receives to the master service station server through the main management network, and the master service station server synchronously transmits all the data stored inside it to the slave service station server through the main management network. The user issues a control command or a data request command through the operator station to obtain corresponding data from the main service station server through the main management network, or the main communication server obtains the control command or data request command issued by the operator station to the main service station server through the main management network and transmits the control command or data request command to the main control controller through the main system network to obtain corresponding data; During the normal operation of the ship automation redundant system, the system performs real-time fault detection on the communication server, service station server, and controller according to its system diagnostic service program, and switches the master and slave devices or the master and slave networks according to the fault detection structure.

5. The redundant control method of the ship automation redundant system according to claim 4, characterized in that: The specific steps for the system to perform real-time fault detection on the communication server according to its system diagnostic service program are as follows: The main communication server sends a survival message to the slave communication server through the main management network at regular intervals. If the slave communication server receives the survival message, it means that the main communication server and the main management network are working normally. If the survival message is not received from the communication server, the current network will be switched from the main management network to the slave management network first. After the network is switched, it is determined whether the slave communication server has received the survival message. If the survival message is received, it means that the main management network is faulty. If the slave communication server still does not receive the survival message after the network is switched, it means that the main communication server is faulty, and the communication server currently in working state is switched from the main communication server to the slave communication server.

6. The redundant control method of the ship automation redundant system according to claim 4, characterized in that: The specific steps for the system to perform real-time fault detection on the service station server according to its system diagnostic service program are as follows: The main service station server sends a survival message to the slave service station server through the main management network at regular intervals. If the slave service station server receives the survival message, it means that the main service station server and the main management network are working normally. If the slave service station server does not receive the survival message, first switch the current network from the main management network to the slave management network. After the network switching, determine whether the slave service station server has received the survival message. If the survival message is received, it means that the main management network is faulty. If the slave service station server still does not receive the survival message after the network switching, it means that the main service station server is faulty, and the communication server currently in working state is switched from the main service station server to the slave service station server.

7. The redundant control method of a ship automation redundant system according to claim 4, characterized in that: The specific steps for the system to perform real-time fault detection on the controller according to its system diagnostic service program are as follows: The master controller periodically sends a survival message to the slave controller through the main system network. If the slave controller receives the survival message, it means that the master controller and the main system network are working normally; If the slave controller does not receive the survival message, first switch the current network from the main system network to the slave system network. After the network switching, determine whether the slave controller has received the survival message. If it has received the survival message, it means that the main system network is faulty. If the slave controller still does not receive the survival message after the network switching, it means that the master controller is faulty, and the controller currently in working state is switched from the master controller to the slave controller.

Images