Control method of cluster type hot standby redundant system and train

By automatically switching the main and backup system according to the equipment attributes and command operating status, the problem that the redundant system cannot automatically upgrade to the main system during initial operation or failure is solved, and the system availability is improved.

CN119705564AActive Publication Date: 2025-03-28CRRC QINGDAO SIFANG CO LTD

Patent Information

Application Number
CN202411639494.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-15
Publication Date
2025-03-28
Estimated Expiration
2044-11-15

AI Technical Summary

Technical Problem

When the redundant system is just starting to run or the main system fails, the backup system cannot be automatically upgraded to the main system, resulting in low availability of the redundant system.

Method used

By determining the priority or instruction operating status of the system to which it belongs is determined based on the device attributes of the target device, automatic switching of the main and standby systems in the clustered hot standby redundant system is realized.

Benefits of technology

Even when the redundant system is just starting to run or the main system fails, each system in the clustered hot standby redundant system can automatically switch the main and standby, improving the system availability.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119705564A_ABST
    Figure CN119705564A_ABST
Patent Text Reader

Abstract

The invention provides a control method of a cluster type hot standby redundant system and a train, and can be applied to the technical field of vehicle control and the field of communication. The priority of a target system which the target device belongs to in the cluster type hot standby redundant system or the instruction running state of the target device is determined, the target system comprises a plurality of devices, the cluster type hot standby redundant system comprises a plurality of systems, the systems are classified into a main system and a hot standby system, the main system is used for managing communication data of a train, and the hot standby system is used for managing communication data of the train. The hot standby system is used for backing up communication data; and according to the priority or the instruction operation state, performing main-standby switching on the target system.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to the field of vehicle control technology and the field of communications, and more specifically, to a control method and a train of a clustered hot standby redundant system. Background Art

[0002] A redundant system is usually set up in a train, which has a main system and multiple backup systems. In the case of abnormal operation of the main system, the working state of a backup system is changed to the main system state to replace the original main system to continue to operate. However, when the redundant system just starts to operate or the main system fails, manual intervention is required to complete the setting of the main system state. Without manual intervention, multiple backup systems cannot obtain the operation authority of the main system.

[0003] In the process of implementing the concept of the present disclosure, the inventors found that there are at least the following problems in the related art: when the redundant system just starts to run or the main system fails, the backup system cannot be automatically upgraded to the main system, and the redundant system has low availability. Summary of the invention

[0004] In view of this, the present disclosure provides a control method and a train of a cluster hot standby redundant system.

[0005] One aspect of the present disclosure provides a control method for a cluster hot standby redundant system, comprising: determining, according to device attributes of a target device, a priority of a target system to which the target device belongs in the cluster hot standby redundant system or an instruction running state of the target device, wherein the target system comprises a plurality of devices, and the cluster hot standby redundant system comprises a plurality of systems, wherein the plurality of systems are classified into a main system and a hot standby system, wherein the main system is used to manage communication data of a train, and the hot standby system is used to back up communication data; and performing a main-standby switching on the target system according to the priority or the instruction running state.

[0006] According to an embodiment of the present disclosure, device attributes include master devices and slave devices; determining the priority or instruction running status of a target system to which the target device belongs in a cluster system based on the device attributes of the target device includes: in response to the device attribute of the target device being a master device, determining the priority of the target system to which the target device belongs in the cluster system; or in response to the device attribute of the target device being a slave device, determining the instruction running status of the target device.

[0007] According to an embodiment of the present disclosure, performing a master-slave switch on the system to which the target device belongs according to the priority or instruction running status includes: in response to the device attribute of the target device being a master device, performing a master-slave switch on the target system according to the priority and working running status of each system in the cluster hot standby redundant system; or in response to the device attribute of the target device being a slave device, performing a master-slave switch on the target system according to the instruction running status of the target device.

[0008] According to an embodiment of the present disclosure, in response to the device attribute of the target device being a slave device, according to the instruction running state of the target device, the master-slave switching of the target system includes: in response to the device attribute of the target device being a slave device, detecting the working running state of the master device in the target system through the operating data of the target device to obtain a first detection result of the master device; in response to the first detection result indicating that the working running state of the master device is abnormal, adjusting the instruction running state of the master device so that the system state of the target system is switched to the hot standby system state, and controlling the instruction state is used to control the communication of the target system in the clustered hot standby redundant system.

[0009] According to an embodiment of the present disclosure, in response to the device attribute of the target device being a master device, according to the priority and operating status of each system in the cluster-type hot standby redundant system, performing master-slave switching on the target system includes: in response to the device attribute of the target device being a master device, determining the system status of the target system; performing master-slave switching on the target system according to the system status of the target system and the priority and operating status of each system in the cluster-type hot standby redundant system.

[0010] According to an embodiment of the present disclosure, the system state includes an initialization state, a main system state and a hot standby system state. The initialization state is a state in which the system completes file configuration in the cluster hot standby redundant system.

[0011] According to an embodiment of the present disclosure, performing active-standby switching of a target system according to the system state of the target system and the priority and working status of each system in the clustered hot standby redundant system includes: in response to the system state of the target system being an initialization state or a hot standby system state, performing active-standby switching of the target system according to the priority of the target system and the working status of each system in the clustered hot standby redundant system; in response to the system state of the target system being a primary system state and the working status being abnormal, switching the system state of the target system to a hot standby system state; in response to the running time of the target system in the primary system state not satisfying a time threshold and there being a system satisfying a first preset condition in the clustered hot standby redundant system, switching the system state of the target system to a hot standby system state, the first preset condition being that the system state is a primary system state, the priority satisfies a first preset threshold and the working status is normal.

[0012] According to an embodiment of the present disclosure, in response to the system state of the target system being the main system state and the working operation state being abnormal, switching the system state of the target system to the hot standby system state includes: in response to the system state of the target system being the main system state, detecting the working operation state of a slave device in the target system through the operating data of the main system to obtain a second detection result of the main device; in response to the second detection result characterizing that the working operation state of the slave device is abnormal, switching the system state of the target system to the hot standby system state.

[0013] According to an embodiment of the present disclosure, in response to the system state of the target system being an initialization state or a hot standby system, according to the priority of the target system and the working status of each system in the cluster hot standby redundant system, the target system is switched between a primary and a secondary system, including: in response to the system state of the target system being an initialization state and there being a primary system in a normal working status in the cluster hot standby redundant system, the priority of the target system is compared with the priority of the primary system to obtain a comparison result; the target system is switched between a primary and a secondary system according to the comparison result; in response to the system state of the target system being an initialization state and there being a primary system in the cluster hot standby redundant system whose running time meets a time threshold, the system state of the target system is switched to a hot standby system state; in response to the target system state being a hot standby system and the systems other than the target system in the cluster hot standby redundant system meeting a second preset condition, the system state of the target system is switched to the primary system state, the second preset condition including the priority meeting a second threshold or the working status being abnormal.

[0014] Another aspect of the present disclosure provides a train, wherein the train is equipped with a clustered hot standby redundant system controlled by executing any one of the methods described above, and the clustered hot standby redundant system is used to manage communication data of the train.

[0015] Another aspect of the present disclosure provides a control device for a cluster hot standby redundant system, including: a first determination module, used to determine the priority of a target system to which a target device belongs in the cluster hot standby redundant system or the instruction running status of the target device according to the device attributes of the target device, the target system includes multiple devices, the cluster hot standby redundant system includes multiple systems, the multiple systems are classified into a main system and a hot standby system, the main system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data; a main-standby switching module, used to perform main-standby switching of the target system according to the priority or the instruction running status.

[0016] Another aspect of the present disclosure provides an electronic device, comprising:

[0017] one or more processors;

[0018] a memory for storing one or more programs,

[0019] When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described above.

[0020] Another aspect of the present disclosure provides a computer-readable storage medium storing computer-executable instructions, which are used to implement the above method when executed.

[0021] Another aspect of the present disclosure provides a computer program product, which includes computer executable instructions, and when the instructions are executed, are used to implement the method as described above.

[0022] According to an embodiment of the present disclosure, the priority or instruction running status of the target system to which the target device belongs in the clustered hot standby redundant system is determined based on the device attributes of the target device; then, the target system is switched between the active and standby modes based on the priority or instruction running status. Even when the redundant system is just starting to run or the active system fails, each system in the clustered hot standby redundant system can automatically switch between the active and standby modes, and the clustered hot standby redundant system has high availability. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0024] Figure 1 A system architecture diagram schematically shows a control method for a clustered hot standby redundant system that can be applied according to an embodiment of the present disclosure;

[0025] Figure 2 A flow chart schematically shows a control method of a cluster hot standby redundant system according to an embodiment of the present disclosure;

[0026] Figure 3A A flow chart schematically shows a control method of a cluster hot standby redundant system according to an embodiment of the present disclosure;

[0027] Figure 3B A flow chart schematically shows a control method of a cluster hot standby redundant system according to another embodiment of the present disclosure;

[0028] Figure 4 A flowchart schematically shows, in response to the device attribute of the target device being a slave device, performing active / standby switching of the target system according to the instruction running state of the target device according to an embodiment of the present disclosure;

[0029] Figure 5 A schematic diagram schematically shows a schematic diagram of performing a master-slave switching of the target system according to the priority and working status of each system in the cluster hot standby redundant system in response to the device attribute of the target device being the master device according to an embodiment of the present disclosure;

[0030] Figure 6 A block diagram schematically shows a control device of a cluster hot standby redundant system according to an embodiment of the present disclosure;

[0031] Figure 7A block diagram of an electronic device suitable for implementing the control method of the cluster hot standby redundant system according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0032] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0033] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0034] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0035] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0036] In the embodiments of the present disclosure, the collection, updating, analysis, processing, use, transmission, provision, disclosure, storage, etc. of the data involved (for example, including but not limited to user personal information) are in compliance with the provisions of relevant laws and regulations, are used for legitimate purposes, and do not violate public order and good morals. In particular, necessary measures are taken for user personal information to prevent illegal access to user personal information data and maintain the security of user personal information, network security, and national security.

[0037] In the embodiments of the present disclosure, the user's authorization or consent is obtained before obtaining or collecting the user's personal information.

[0038] When receiving the driver's key command or manually inputting the command to set the train activation end, it usually runs in the main system mode. When the redundant system just starts running or the main system fails, manual intervention is required to complete the setting of the main system status. Without manual intervention, the backup system cannot obtain the main system operation authority. The backup system cannot be automatically upgraded to the main system, and the redundant system availability is low.

[0039] An embodiment of the present disclosure provides a control method for a cluster hot standby redundant system, comprising: determining, according to device attributes of a target device, a priority of a target system to which the target device belongs in the cluster hot standby redundant system or an instruction running status of the target device, wherein the target system comprises a plurality of devices, and the cluster hot standby redundant system comprises a plurality of systems, wherein the plurality of systems are classified into a main system and a hot standby system, the main system is used to manage communication data of a train, and the hot standby system is used to back up communication data; and performing a main-standby switching on the target system according to the priority or the instruction running status.

[0040] Figure 1 The system architecture diagram schematically shows a control method for a clustered hot standby redundant system that can be applied according to an embodiment of the present disclosure.

[0041] It should be noted that Figure 1 What is shown is merely an example of a system architecture to which the embodiments of the present disclosure can be applied, in order to help those skilled in the art understand the technical content of the present disclosure, but it does not mean that the embodiments of the present disclosure cannot be used in other devices, systems, environments or scenarios.

[0042] like Figure 1 As shown, the system architecture 100 according to this embodiment may include a clustered hot standby redundant system 101, a train 102, a network 103, and a server 104. The network 103 is used to provide a medium for communication links between the clustered hot standby redundant system 101, the train 102, and the server 104. The network 103 may include various connection types, such as wired and / or wireless communication links, etc.

[0043] Users can use the clustered hot standby redundant system 101 and the train 102 to interact with the server 104 via the network 103 to receive or send messages, etc.

[0044] The cluster hot standby redundant system 101 may include multiple systems, which are classified into a master system and a hot standby system. The master system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data. Multiple systems in the cluster hot standby redundant system are communicatively coupled. Each system includes multiple devices, which are classified into master devices and slave devices. The master device is used to output control instructions to other systems in the cluster hot standby redundant system, and the slave device is used to output control instructions to the master device, and will not output control instructions to other systems in the cluster hot standby redundant system.

[0045] The train 102 may be configured with a clustered hot standby redundant system 101 .

[0046] The server 104 may be a server that provides various services, such as an operation management server (only an example) that provides support for operation instructions selected by users using the clustered hot standby redundant system 101 and the train 102. The operation management server may analyze and process data such as received user operation requests.

[0047] It should be noted that the control method of the clustered hot standby redundant system provided in the embodiment of the present disclosure can generally be executed by the server 104. Accordingly, the control device of the clustered hot standby redundant system provided in the embodiment of the present disclosure can generally be set in the server 104. The control method of the clustered hot standby redundant system provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 104 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 104. Correspondingly, the control device of the clustered hot standby redundant system provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 104 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 104. Alternatively, the control method of the clustered hot standby redundant system provided in the embodiment of the present disclosure can also be executed by the first terminal device 101, the second terminal device 102 or the third terminal device 103, or can also be executed by other terminal devices different from the first terminal device 101, the second terminal device 102 or the third terminal device 103. Correspondingly, the control device of the cluster hot standby redundant system provided in the embodiment of the present disclosure can also be set in the first terminal device 101, the second terminal device 102 or the third terminal device 103, or in other terminal devices different from the first terminal device 101, the second terminal device 102 or the third terminal device 103.

[0048] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. According to the implementation requirements, there may be any number of clustered hot standby redundant systems, trains and servers.

[0049] Figure 2 The flowchart schematically shows a control method of a cluster hot standby redundant system according to an embodiment of the present disclosure.

[0050] like Figure 2 As shown, the method includes operations S210 to S220.

[0051] In operation S210 , the priority of the target system to which the target device belongs in the cluster hot standby redundant system or the instruction running state of the target device is determined according to the device attribute of the target device.

[0052] In operation S220, the target system is switched between active and standby modes according to the priority or the instruction execution status.

[0053] According to an embodiment of the present disclosure, the target system includes multiple devices, the clustered hot standby redundant system includes multiple systems, the multiple systems are classified into a main system and a hot standby system, the main system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data.

[0054] According to an embodiment of the present disclosure, the communication data may be data from sensors in the train, data from a controller, communication transmission data, etc.

[0055] The device attributes may be determined by the role of the target device in the target system. For example, the target device is used to transmit data or output instructions to other systems in a clustered hot standby redundant system. Or the target device is used to transmit data or output instructions to other devices in the target system.

[0056] The device attribute can also be determined by the function of the target device. For example, the target device has a data transmission function. Or the target device has a detection function, etc. There is no restriction on this function.

[0057] The device attributes can also be determined by the user rights of the target device, for example, the user rights of the target device are train operation and maintenance personnel or train drivers, etc.

[0058] According to an embodiment of the present disclosure, the priority characterization system can be classified as the level of the main system in the cluster hot standby redundant system. For example, the cluster hot standby redundant system has system A, system B and system C. The priorities of the three systems are from high to low: system C, system B and system A. If there is no abnormality in the system C, it can be switched to the main system to manage the communication data of the train. If there is no abnormality in the system C, the system B without abnormality will be switched to the main system to ensure the continuity of the management of the communication data of the train.

[0059] According to an embodiment of the present disclosure, the instruction execution state is a state in which the target device outputs instructions to other devices in the target system. For example, the instruction execution state may be an output instruction state or a prohibition instruction output state.

[0060] When the command operation state of the target device is the output command state or the output command prohibition state, it can be detected whether the target system is abnormal. If so, the system classification of the target system is adjusted. If not, the system classification of the target system is maintained. The system classification can be a main system or a hot standby system.

[0061] It should be noted that the device attributes of the target device are roughly divided into two categories. One category is required to determine the priority of the target system to which the target device belongs in the cluster hot standby redundant system, and the other category is required to determine the command running status of the target device. The master-slave switching logic of the two types of device attributes is different.

[0062] For example, if the priority of the target system to which the target device belongs in the cluster hot standby redundant system needs to be determined, it can be concluded whether the target system is abnormal based on the operating status of the master device and the slave device in the target system. Then, based on the priority of each system in the cluster hot standby redundant system and the principle of a normal system with a high priority, each system in the cluster hot standby redundant system is switched between the master and the slave.

[0063] For example, if the command running status of the target device needs to be determined, it is also possible to determine whether the target system is abnormal based on the running status of the master and slave devices in the target system. If the target system is the master system and there is an abnormality, the target system is downgraded to a hot standby system; if the target system is the master system and there is no abnormality, the target system is maintained as the master system. If the target system is a hot standby system, the system classification is maintained, and then it is determined whether the master and slave devices of the target system are abnormal, and the target device is switched to the master and standby.

[0064] According to an embodiment of the present disclosure, the priority or instruction running status of the target system to which the target device belongs in the cluster hot standby redundant system is determined based on the device attributes of the target device; the target system is switched between active and standby based on the priority or instruction running status. Even when the redundant system is just starting to run or the main system fails, each system in the cluster hot standby redundant system can automatically switch between active and standby, and the cluster hot standby redundant system has high availability.

[0065] According to an embodiment of the present disclosure, device attributes include master devices and slave devices; determining the priority or instruction running status of a target system to which the target device belongs in a cluster system based on the device attributes of the target device includes: in response to the device attribute of the target device being a master device, determining the priority of the target system to which the target device belongs in the cluster system; or in response to the device attribute of the target device being a slave device, determining the instruction running status of the target device.

[0066] According to an embodiment of the present disclosure, performing a master-slave switch on the system to which the target device belongs according to the priority or instruction running status includes: in response to the device attribute of the target device being a master device, performing a master-slave switch on the target system according to the priority and working running status of each system in the cluster hot standby redundant system; or in response to the device attribute of the target device being a slave device, performing a master-slave switch on the target system according to the instruction running status of the target device.

[0067] According to an embodiment of the present disclosure, the master device is used to output instructions to other systems in the cluster hot standby redundant system. The slave device is used to output instructions to other devices in the target system, but does not output instructions to other systems in the cluster hot standby redundant system.

[0068] According to an embodiment of the present disclosure, the active / standby switching logics of systems with different priorities are different.

[0069] For example, if the target system with high priority does not have any abnormality, the target system can be kept as the primary system. If the target system with low priority does not have any abnormality, but other systems in the cluster hot standby redundant system have abnormalities, the target system can be switched from the hot standby system to the primary system.

[0070] According to an embodiment of the present disclosure, slave devices in different instruction execution states have different system master-slave switching logics.

[0071] For example, if the instruction running state of the slave device is a state where outputting instructions is prohibited, it is possible to detect whether the master device has an abnormality to determine whether the slave device adjusts the instruction running state, thereby completing the master-slave switching of the target system.

[0072] Figure 3A The flowchart schematically shows a control method of a cluster hot standby redundant system according to an embodiment of the present disclosure.

[0073] like Figure 3A As shown, the method includes operations S310 to S320.

[0074] In operation S310 , in response to a device attribute of the target device being a master device, a priority of a target system to which the target device belongs in the cluster system is determined.

[0075] In operation S320, the target system is switched to a primary or secondary system according to the priority and operation status of each system in the cluster hot standby redundant system.

[0076] Figure 3B A flow chart schematically shows a control method of a cluster hot standby redundant system according to another embodiment of the present disclosure.

[0077] like Figure 3B As shown, the method includes operations S330~S340.

[0078] In operation S330 , in response to the device attribute of the target device being a slave device, a command execution state of the target device is determined.

[0079] In operation S340, the target system is switched between active and standby according to the command running state of the target device.

[0080] According to an embodiment of the present disclosure, in response to the device attribute of the target device being a slave device, according to the instruction running state of the target device, the master-slave switching of the target system includes: in response to the device attribute of the target device being a slave device, detecting the working running state of the master device in the target system through the operating data of the target device to obtain a first detection result of the master device; in response to the first detection result indicating that the working running state of the master device is abnormal, adjusting the instruction running state of the master device so that the system state of the target system is switched to the hot standby system state, and controlling the instruction state is used to control the communication of the target system in the clustered hot standby redundant system.

[0081] According to an embodiment of the present disclosure, when the master device is normal, the master device has an output control instruction for communicating to the cluster hot standby redundant system, and the slave device maintains the state of outputting the control instruction to the target system.

[0082] According to an embodiment of the present disclosure, when the master device is abnormal, the master device does not have an output control instruction to communicate with the cluster hot standby redundant system, and the slave device switches to a state of prohibiting output of control instructions to the target system.

[0083] According to an embodiment of the present disclosure, the slave device may detect the working status of the master device. The working status may include a health status and a vital signal.

[0084] For example, the health status can be the storage function status of the master device. The master and slave devices each generate a random number and send it to the other party. The two devices calculate the generated random number and the received random number according to a fixed formula. The calculation includes addition, subtraction, multiplication, division, and, or, and negation. For the calculation result of the received random number, the calculation result needs to be sent back. The two devices compare their respective calculation results with the calculation results of the other party. If the results are consistent, it is determined that the other party's health status is normal, otherwise it is abnormal. The above can realize mutual health detection between the master and slave devices.

[0085] For example, the life signal can be a communication signal. The life signal is normal and has a regular signal cycle.

[0086] According to an embodiment of the present disclosure, in response to the device attribute of the target device being a slave device, the operating state of the master device in the target system is detected through the operating data of the target device, and a first detection result of the master device is obtained, so that mutual health detection between the master and slave devices is realized, so that the function of the cluster hot standby redundant system is improved. In response to the first detection result indicating that the operating state of the master device is abnormal, the command operating state of the master device is adjusted so that the system state of the target system is automatically switched to the hot standby system state, so as to realize efficient master-standby switching.

[0087] Figure 4The flowchart schematically shows, in response to the device attribute of the target device being a slave device, performing active / standby switching of the target system according to the instruction running state of the target device according to an embodiment of the present disclosure.

[0088] like Figure 4 As shown, the method includes operations S410 to S440.

[0089] In operation S410, in response to the device attribute of the target device being a slave device, the operating state of the master device in the target system is detected through the operating data of the target device to obtain a first detection result of the master device.

[0090] In operation S420, it is determined whether the first detection result indicates that there is an abnormality in the working state of the main device. If so, operation S430 is performed; if not, operation S440 is performed.

[0091] In operation S430, the command running state of the master device is adjusted to prohibit outputting control commands to other systems in the cluster hot standby redundant system; the slave device is switched to a state of prohibiting outputting control commands to other devices in the target system.

[0092] In operation S440, the master device is kept in a command running state of outputting control commands to other systems in the cluster hot standby redundant system, and the slave device is kept in a state of outputting control commands to other devices in the target system.

[0093] According to an embodiment of the present disclosure, the system state includes an initialization state, a main system state and a hot standby system state. The initialization state is a state in which the system completes file configuration in the cluster hot standby redundant system.

[0094] According to the embodiment of the present disclosure, the initialization state is the stage when the system is just started, and the priority is not configured.

[0095] According to an embodiment of the present disclosure, the main system state means that the target system is the main system, and the hot standby system state means that the target system is the hot standby system.

[0096] According to an embodiment of the present disclosure, in response to the device attribute of the target device being a master device, according to the priority and operating status of each system in the cluster-type hot standby redundant system, performing master-slave switching on the target system includes: in response to the device attribute of the target device being a master device, determining the system status of the target system; performing master-slave switching on the target system according to the system status of the target system and the priority and operating status of each system in the cluster-type hot standby redundant system.

[0097] According to the embodiments of the present disclosure, whether there is a system in the cluster hot standby redundant system that has a higher priority than the target system and is in a normal operating state directly affects whether the target system performs active / standby switching.

[0098] For example, if the target system is in the initialization state, the system with the highest priority can be upgraded to the main system according to the priority of each system in the cluster hot standby redundant system, and the remaining systems are hot standby systems. The target system with the highest priority is the main system, otherwise it is the hot standby system.

[0099] For example, if the target system is in the main system and is in normal working state, and there is no system in the initialization state with a higher priority than the target system, the target system is kept as the main system.

[0100] For example, if the target system is in the main system but its working status is abnormal, the system with normal working status and high priority needs to be promoted to the main system, and the target system needs to be downgraded to the hot standby system.

[0101] For example, if the target system is in a hot standby system and is operating normally, and there is a system in the main system state and is operating abnormally, the target system whose priority is second only to the original main system will be promoted to the main system.

[0102] According to an embodiment of the present disclosure, performing active-standby switching of a target system according to the system state of the target system and the priority and working status of each system in the clustered hot standby redundant system includes: in response to the system state of the target system being an initialization state or a hot standby system state, performing active-standby switching of the target system according to the priority of the target system and the working status of each system in the clustered hot standby redundant system; in response to the system state of the target system being a primary system state and the working status being abnormal, switching the system state of the target system to a hot standby system state; in response to the running time of the target system in the primary system state not satisfying a time threshold and there being a system satisfying a first preset condition in the clustered hot standby redundant system, switching the system state of the target system to a hot standby system state, the first preset condition being that the system state is a primary system state, the priority satisfies a first preset threshold and the working status is normal.

[0103] According to an embodiment of the present disclosure, the time threshold may be the time during which the system is running stably. For example, if the system is usually in the system state for 30 minutes, it is considered to be running stably. When the main system is stable, it is not recommended to switch the main system running stably to the main standby system, which is not conducive to the stable management of communication data of the cluster hot standby redundant system.

[0104] According to an embodiment of the present disclosure, the first preset threshold may be any priority level higher than the target system priority level.

[0105] According to the embodiments of the present disclosure, different system states of the target system also have different active / standby switching logics.

[0106] According to the embodiments of the present disclosure, the system state of the target system is the initialization state or the hot standby system state. It is necessary to clarify whether there is an abnormality in the working operation state of the main system in the current cluster hot standby redundant system to further determine whether the target system performs the main-standby switching.

[0107] According to the embodiments of the present disclosure, the system state of the target system is the main system state, and it is necessary to determine whether the working operation state of the main system is abnormal. If it is abnormal, the system state of the target system is switched to the hot standby system state. If there is no abnormality, it is necessary to further determine whether the running time of the target system in the main system state meets the time threshold. If so, the system state of the target system is still the main system state. If not, it is necessary to determine whether there is a system that meets the first preset condition in the clustered hot standby redundant system. If so, the system state of the target system is switched to the hot standby system state. If not, the system state of the target system is still the main system state.

[0108] According to an embodiment of the present disclosure, in response to the system state of the target system being the main system state and the working operation state being abnormal, the system state of the target system is switched to the hot standby system state, so that even if the main system fails, the communication data can continue to be managed, so that the operation continuity of the cluster hot standby redundant system is ensured. In response to the running time of the target system in the main system state not meeting the time threshold and there being a system meeting the first preset condition in the cluster hot standby redundant system, the system state of the target system is switched to the hot standby system state, so that when the main system is stable, the main system that is running stably is not switched to the main standby system, which is conducive to the stable management of communication data of the cluster hot standby redundant system.

[0109] According to an embodiment of the present disclosure, in response to the system state of the target system being the main system state and the working operation state being abnormal, switching the system state of the target system to the hot standby system state includes: in response to the system state of the target system being the main system state, detecting the working operation state of a slave device in the target system through the operating data of the main system to obtain a second detection result of the main device; in response to the second detection result characterizing that the working operation state of the slave device is abnormal, switching the system state of the target system to the hot standby system state.

[0110] According to an embodiment of the present disclosure, a master device of a cluster hot standby redundant system can detect the working status of a slave device.

[0111] According to an embodiment of the present disclosure, if there is an abnormality in the slave device, the target system is also in an abnormal state.

[0112] According to the embodiments of the present disclosure, by detecting the slave devices of the main system, it is ensured that the backup function of the main system also operates normally, so that the safety architecture of the cluster hot standby redundant system can be complete.

[0113] According to an embodiment of the present disclosure, in response to the system state of the target system being an initialization state or a hot standby system, according to the priority of the target system and the working status of each system in the cluster hot standby redundant system, the target system is switched between a primary and a secondary system, including: in response to the system state of the target system being an initialization state and there being a primary system in a normal working status in the cluster hot standby redundant system, the priority of the target system is compared with the priority of the primary system to obtain a comparison result; the target system is switched between a primary and a secondary system according to the comparison result; in response to the system state of the target system being an initialization state and there being a primary system in the cluster hot standby redundant system whose running time meets a time threshold, the system state of the target system is switched to a hot standby system state; in response to the target system state being a hot standby system and the systems other than the target system in the cluster hot standby redundant system meeting a second preset condition, the system state of the target system is switched to the primary system state, the second preset condition including the priority meeting a second threshold or the working status being abnormal.

[0114] According to an embodiment of the present disclosure, the initialization state is the process of just making a network connection and configuring a file. In case of network disconnection, there is a situation where a system with a low priority is used as the main system first. If the system state of the target system is the initialization state, the priority of the target system can be compared with the priority of the main system to obtain a comparison result; the target system is switched between the main and standby systems according to the comparison result. If the comparison result indicates that the priority of the target system is higher than that of the main system, the system state of the target system can be switched to the main system state.

[0115] The present disclosure takes into account the situation that when the cluster hot standby redundant system is in startup state, there is a network disconnection between the systems, so that the low-priority system is first used as the main system. By comparing the priorities between the systems, the main system can be determined in an orderly manner.

[0116] According to the embodiments of the present disclosure, after a high-priority main system fails and recovers, the hot standby system can be maintained to keep the operation of the clustered hot standby redundant system stable. That is, when the system state of the target system is in the initialization state, if there is a main system in the clustered hot standby redundant system whose running time meets the time threshold, the system state of the target system is switched to the hot standby system state.

[0117] The present disclosure considers maintaining the hot standby system after the failure of the high-priority main system is recovered, and does not cause the problem of unstable operation of the clustered hot standby redundant system due to the main-standby switching process.

[0118] According to an embodiment of the present disclosure, the second preset threshold may be any priority level lower than the target system priority level.

[0119] In the cluster hot standby redundant system, there is a system in a normal working state and with a higher priority than the target system, and the target system maintains the hot standby system.

[0120] If there is no system in the cluster hot standby redundant system in a normal operating state or with a higher priority than the target system, the target system switches to the main system.

[0121] Figure 5 The present invention schematically shows a schematic diagram of performing active / standby switching of the target system according to the priority and working status of each system in the cluster hot standby redundant system in response to the device attribute of the target device being the master device according to an embodiment of the present disclosure.

[0122] When the system state 501 of the target system to which the master device belongs is the initialization state 502, and there is a master system 505 in a normal working state in the cluster hot standby redundant system and the priority of the target system is lower than the priority 506 of the master system, the system state 501 of the target system is switched to the hot standby system state 503.

[0123] When the system state 501 of the target system to which the master device belongs is in the initialization state 502 and there is a master system 507 whose running time meets the time threshold in the cluster hot standby redundant system, the system state 501 of the target system is switched to the hot standby system state 503 .

[0124] When the system state 501 of the target system to which the master device belongs is in the hot standby state 503 and the system 508 other than the target system in the cluster hot standby redundant system meets the second preset condition, the system state 501 of the target system is switched to the master system state 504 .

[0125] When the system state 501 of the target system to which the master device belongs is the master system state 504, and the running time of the master system state does not meet the time threshold 509, and there is a system 510 that meets the first preset condition in the clustered hot standby redundant system, the system state 501 of the target system is switched to the hot standby system state 503.

[0126] When the system state 501 of the target system to which the master device belongs is the master system state 504 and the working operation state 511 of the slave device of the target system is abnormal, the system state 501 of the target system is switched to the hot standby system state 503 .

[0127] Set a priority for each system. When the system starts running, the system with the highest priority automatically switches to the master system. When the master system fails, the slave system with the second highest priority automatically switches to the master system; when there are two master systems in the system, the master system with the lower priority will be downgraded to a slave system. This master-slave redundancy switching method improves the automation rate and system availability compared to the first method. When the high-priority master system fails and recovers, the system will switch from master to slave, resulting in unstable control command output and low system reliability.

[0128] Based on the automatic switching of the cluster hot standby redundant system, the master-slave switching logic adds diagnosis of the health status of each cluster slave device, so that the main system has complete system functions and guarantees the reliability and stability of the system operation to the greatest extent.

[0129] The cluster hot standby redundant system includes multiple communication-coupled systems, in which only one system is the main system and the other systems are hot standby systems.

[0130] The system includes multiple devices, which are divided into master devices and slave devices. Only the master device can output control instructions to other systems in the cluster hot standby redundant system, and the slave devices participate in the external control function of the master system.

[0131] For example, both system 1 and system 2 execute input instructions, and only the main system outputs control instructions to other systems in the cluster hot standby redundant system, and the hot standby system does not output control instructions to other systems in the cluster hot standby redundant system.

[0132] In a cluster hot standby redundant system, each system automatically generates a priority for switching to the main system after power-on.

[0133] During the communication between and within systems, the master devices of multiple systems perform life signal monitoring and normal working status monitoring, and the master devices and slave devices within the system perform health status monitoring on each other.

[0134] The implementation of health status monitoring function includes the detection of controller's data storage functions such as addition, subtraction, multiplication, division, AND, OR, NOT, communication, instruction and address.

[0135] The main system can evaluate its own health status and the vital signs and working status of the hot standby system, and the hot standby system can evaluate its own health status and the normal working status of the original main system.

[0136] When a cluster hot standby redundant system has multiple main systems, only the main system with the highest priority does not switch, and the other systems switch to hot standby systems.

[0137] For example, after the cluster hot standby redundant system is powered on for the first time, each system in the cluster hot standby redundant system starts to start. The master device of each system will be set to the startup state, and the configuration file in the storage unit will be read at the same time. The configuration file specifies the priority of the system. The slave devices of each system will be set to the state of prohibiting the output of control instructions, and the master device will generate regularly changing numbers (life signals) at a fixed period. The master device and the slave device perform health status monitoring on each other, and the health status monitoring function is implemented as follows:

[0138] The master and slave devices generate a random number respectively and send it to each other. The two devices calculate the generated random number and the received random number according to a fixed formula. The calculation includes addition, subtraction, multiplication, division, and, or, and negation. For the calculation result of the received random number, the calculation result needs to be sent back. The two devices compare their own calculation results with the calculation results of the other party. If the results are consistent, it is determined that the other party is in a normal health state, otherwise it is abnormal.

[0139] Each system in the cluster hot standby redundant system receives the calculation results sent by other systems and determines whether the system is normal based on the life signal and normal working status signal. The method for determining whether the life signal is normal is whether the life signal changes in a periodic pattern. The method for determining the normal working status is the specific data offset status sent by other systems.

[0140] After detecting that the configuration file has been read successfully, the master device of each cluster sets itself to the initialization state.

[0141] For example, when the target device is a master device and the target system to which it belongs is a high-priority system, master-slave switching can be performed according to different system states.

[0142] First, the target system is in the initialization state and performs the following operations:

[0143] In the clustered hot standby redundant system, all systems except the target system are in the hot standby system state and the target system life signal is normal. The target system is upgraded to the master system. In the clustered hot standby redundant system, all systems except the target system are in the hot standby system state and the target system life signal is normal. The target system is upgraded to the master system. In the clustered hot standby redundant system, all systems except the target system are in the hot standby system state and the target system is upgraded to the hot standby system.

[0144] Second, the target system is in hot standby system state and performs the following operations:

[0145] If the life signals of other systems are detected to be abnormal and the life signals of the target system are normal, the target system will be promoted to the main system. If the working status of other systems is detected to be abnormal and the life signals of the target system are normal, the target system will be promoted to the main system. If the other systems are detected to be in the hot standby system state, the target system will be promoted to the main system.

[0146] Third, the target system is in the master system state and performs the following operations: detect other systems in the master system state, and the target system remains the master system. Detect that the health status of the slave device in the target system is abnormal, and the life signals and working status of other systems are normal, and the target system is downgraded to a hot standby system. The life signals of the target system are abnormal, and the target system is downgraded to a hot standby system.

[0147] For example, when the target device is a master device and the target system to which it belongs is a low-priority system, master-slave switching can be performed according to different system states.

[0148] First, the target system is in the initialization state and the following operations are performed: detect abnormal life signals of other systems except the target system in the cluster hot standby redundant system, and upgrade the target system to the main system; detect other systems in the initialization state, and use the target system as the hot standby system; detect other systems in the hot standby system state, and upgrade the target system to the main system; detect other systems in the main system state, and use the target system as the hot standby system.

[0149] Second, the target system is in the hot standby system state and performs the following operations: detect other systems’ life signals are abnormal and the target system’s life signals are normal, and the target system is upgraded to the main system; detect other systems’ normal working states are abnormal and the target system’s life signals are normal, and the target system is upgraded to the main system; detect other systems in the hot standby system state, and the target system is used as the hot standby system;

[0150] Third, the target system is in the master system state and performs the following operations: detect that other systems are in the master system state, and the target system is used as a hot standby system; detect that the health status of the target system slave device is abnormal, and the life signals and working status of other systems are normal, and the target system is downgraded to a hot standby system; other systems are in the hot standby system state, and the target system is used as the master system.

[0151] For example, the target device is a slave device, and the target device is in a state where it is prohibited to output control instructions to other devices in the target system. Perform the following operations: detect that the health status of the master device in the target system is normal, set the working operation status to normal, and upgrade the target device to a state where it outputs control instructions to other devices in the target system.

[0152] The target device is a slave device, and the target device performs the following operations in the output instruction state: detect that the health status of the master device of the target system is abnormal, set the working operation status to abnormal, and set the target device to a state that prohibits outputting control instructions to other devices in the target system; power off and reset the master device to make the target system become or remain a hot standby system.

[0153] The present invention has the following advantages: a system with multiple devices participating in the control can realize hot standby redundant working capability. The master-standby switching logic increases the diagnosis of the health status of the slave devices in each system, so that the master system has complete system functions. The master device in each system can be downgraded to a hot standby system according to the health status of the slave device, and the slave device can send the normal working status of the cluster according to the health status of the master device, so as to realize the cluster hot standby redundant system to form a safety architecture. After the high-priority master system fails, it will automatically switch to the hot standby system, and the hot standby system will maintain the master system status of the original hot standby redundant system to ensure system stability.

[0154] A train is provided with a cluster hot standby redundant system controlled by executing any one of the above methods, wherein the cluster hot standby redundant system is used to manage communication data of the train.

[0155] The cluster hot standby redundant system may include multiple systems, which are classified into a master system and a hot standby system. The master system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data. Multiple systems in the cluster hot standby redundant system are coupled in communication. Each system includes multiple devices, which are classified into master devices and slave devices. The master device is used to output control instructions to other systems in the cluster hot standby redundant system, and the slave device is used to output control instructions to the master device, and will not output control instructions to other systems in the cluster hot standby redundant system.

[0156] During the communication between or within the clustered hot standby redundant system, life signal monitoring and normal working status monitoring are performed between the master devices of the multiple systems, and health status monitoring is performed between the master devices and slave devices within the system.

[0157] Figure 6 A block diagram schematically shows a control device of a cluster hot standby redundant system according to an embodiment of the present disclosure.

[0158] like Figure 6 As shown, the control device 600 of the cluster hot standby redundant system includes a determination module 610 and an active / standby switching module 620 .

[0159] The determination module 610 is used to determine the priority of the target system to which the target device belongs in the cluster hot standby redundant system or the instruction running state of the target device according to the device attribute of the target device, the target system includes multiple devices, the cluster hot standby redundant system includes multiple systems, the multiple systems are classified into a main system and a hot standby system, the main system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data. In one embodiment, the determination module 610 can be used to perform the operation S210 described above, which will not be repeated here.

[0160] The active / standby switching module 620 is used to perform active / standby switching on the target system according to the priority or the instruction running state. In one embodiment, the active / standby switching module 620 can be used to perform the operation S220 described above, which will not be described in detail here.

[0161] According to an embodiment of the present disclosure, the determination module 610 includes a first determination submodule or a second determination submodule. The determination submodule is used to determine the priority of the target system to which the target device belongs in the cluster system in response to the device attribute of the target device being a master device. Or the second determination submodule is used to determine the instruction execution state of the target device in response to the device attribute of the target device being a slave device.

[0162] According to an embodiment of the present disclosure, the master-slave switching module 620 includes a first master-slave switching submodule or a second master-slave switching submodule. The first master-slave switching submodule is used to perform master-slave switching on the target system in response to the device attribute of the target device being a master device according to the priority and working status of each system in the cluster hot standby redundant system. Or the second master-slave switching submodule is used to perform master-slave switching on the target system in response to the device attribute of the target device being a slave device according to the instruction running status of the target device.

[0163] According to an embodiment of the present disclosure, the second master-standby switching submodule includes a detection unit and an adjustment unit. The detection unit is used to detect the working state of the master device in the target system through the operation data of the target device in response to the device attribute of the target device being a slave device, and obtain a first detection result of the master device. The adjustment unit is used to adjust the instruction running state of the master device in response to the first detection result indicating that the working state of the master device is abnormal, so that the system state of the target system is switched to the hot standby system state, and the control instruction state is used to control the communication of the target system in the cluster hot standby redundant system.

[0164] According to an embodiment of the present disclosure, the first active-standby switching submodule includes a first determining unit and an active-standby switching unit. The first determining unit is used to determine the system state of the target system in response to the device attribute of the target device being the active device. The active-standby switching unit is used to perform active-standby switching on the target system according to the system state of the target system and the priority and working status of each system in the cluster hot standby redundant system.

[0165] According to an embodiment of the present disclosure, the system state includes an initialization state, a main system state and a hot standby system state. The initialization state is a state in which the system completes file configuration in the cluster hot standby redundant system.

[0166] According to an embodiment of the present disclosure, the master-standby switching unit includes a first master-standby switching subunit, a second master-standby switching subunit and a third master-standby switching subunit. The first master-standby switching subunit is used to perform master-standby switching on the target system in response to the system state of the target system being an initialization state or a hot standby system state, according to the priority of the target system and the working operation state of each system in the cluster-type hot standby redundant system. The second master-standby switching subunit is used to switch the system state of the target system to a hot standby system state in response to the system state of the target system being a master system state and the working operation state being abnormal. The third master-standby switching subunit is used to switch the system state of the target system to a hot standby system state in response to the running time of the target system in the master system state not meeting the time threshold and there being a system meeting the first preset condition in the cluster-type hot standby redundant system, the first preset condition being that the system state is a master system state, the priority meets the first preset threshold and the working operation state is normal.

[0167] According to an embodiment of the present disclosure, in response to the system state of the target system being the main system state and the working operation state being abnormal, switching the system state of the target system to the hot standby system state includes: in response to the system state of the target system being the main system state, detecting the working operation state of a slave device in the target system through the operating data of the main system to obtain a second detection result of the main device; in response to the second detection result characterizing that the working operation state of the slave device is abnormal, switching the system state of the target system to the hot standby system state.

[0168] According to an embodiment of the present disclosure, in response to the system state of the target system being an initialization state or a hot standby system, according to the priority of the target system and the working status of each system in the cluster hot standby redundant system, the target system is switched between a primary and a secondary system, including: in response to the system state of the target system being an initialization state and there being a primary system in a normal working status in the cluster hot standby redundant system, the priority of the target system is compared with the priority of the primary system to obtain a comparison result; the target system is switched between a primary and a secondary system according to the comparison result; in response to the system state of the target system being an initialization state and there being a primary system in the cluster hot standby redundant system whose running time meets a time threshold, the system state of the target system is switched to a hot standby system state; in response to the target system state being a hot standby system and the systems other than the target system in the cluster hot standby redundant system meeting a second preset condition, the system state of the target system is switched to the primary system state, the second preset condition including the priority meeting a second threshold or the working status being abnormal.

[0169] According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits, or at least part of the functions of any one of them can be implemented in one module. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be split into multiple modules for implementation. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be at least partially implemented as hardware circuits, such as field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), systems on chips, systems on substrates, systems on packages, application specific integrated circuits (ASICs), or can be implemented by hardware or firmware in any other reasonable way of integrating or packaging circuits, or can be implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, according to the embodiments of the present invention, one or more of the modules, submodules, units, and subunits can be at least partially implemented as computer program modules, and when the computer program modules are run, the corresponding functions can be performed.

[0170] For example, any multiple of the determination module 610 and the active-standby switching module 620 can be combined in one module / unit / sub-unit for implementation, or any one of the modules / units / sub-units can be split into multiple modules / units / sub-units. Alternatively, at least part of the functions of one or more of these modules / units / sub-units can be combined with at least part of the functions of other modules / units / sub-units and implemented in one module / unit / sub-unit. According to an embodiment of the present disclosure, at least one of the determination module 610 and the active-standby switching module 620 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware and firmware or in an appropriate combination of any of them. Alternatively, at least one of the determination module 610 and the active-standby switching module 620 can be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function can be executed.

[0171] It should be noted that the control device part of the clustered hot standby redundant system in the embodiment of the present disclosure corresponds to the control method part of the clustered hot standby redundant system in the embodiment of the present disclosure. The description of the control device part of the clustered hot standby redundant system specifically refers to the control method part of the clustered hot standby redundant system, which will not be repeated here.

[0172] Figure 7 A block diagram of an electronic device suitable for implementing the control method of the cluster hot standby redundant system according to an embodiment of the present disclosure is schematically shown.

[0173] Figure 7 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0174] like Figure 7 As shown, the electronic device 700 according to an embodiment of the present disclosure includes a processor 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 702 or a program loaded from a storage part 708 to a random access memory (RAM) 703. The processor 701 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 701 may also include an onboard memory for caching purposes. The processor 701 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0175] In RAM 703, various programs and data required for the operation of electronic device 700 are stored. Processor 701, ROM 702 and RAM 703 are connected to each other via bus 704. Processor 701 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 702 and / or RAM 703. It should be noted that the program can also be stored in one or more memories other than ROM 702 and RAM 703. Processor 701 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0176] According to an embodiment of the present disclosure, the electronic device 700 may further include an input / output (I / O) interface 705, which is also connected to the bus 704. The electronic device 700 may further include one or more of the following components connected to the input / output (I / O) interface 705: an input portion 706 including a keyboard, a mouse, etc.; an output portion 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 708 including a hard disk, etc.; and a communication portion 709 including a network interface card such as a LAN card, a modem, etc. The communication portion 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the input / output (I / O) interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 710 as needed, so that a computer program read therefrom is installed into the storage portion 708 as needed.

[0177] According to an embodiment of the present disclosure, the method flow according to an embodiment of the present disclosure can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable storage medium, and the computer program contains a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 709, and / or installed from the removable medium 711. When the computer program is executed by the processor 701, the above-mentioned functions defined in the system of the embodiment of the present disclosure are executed. According to an embodiment of the present disclosure, the system, equipment, device, module, unit, etc. described above can be implemented by a computer program module.

[0178] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0179] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium. For example, it may include, but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device.

[0180] For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 702 and / or the RAM 703 described above and / or one or more memories other than the ROM 702 and the RAM 703 .

[0181] An embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method provided by the embodiment of the present disclosure. When the computer program product runs on an electronic device, the program code is used to enable the electronic device to implement the control method of the cluster hot standby redundant system provided by the embodiment of the present disclosure.

[0182] When the computer program is executed by the processor 701, the above functions defined in the system / device of the embodiment of the present disclosure are executed. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0183] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 709, and / or installed from the removable medium 711. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0184] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0185] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram may represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions. It can be understood by those skilled in the art that the features recorded in the various embodiments of the present disclosure can be combined and / or combined in a variety of ways, even if such a combination or combination is not explicitly recorded in the present disclosure. In particular, without departing from the spirit and teaching of the present disclosure, the features described in the various embodiments of the present disclosure may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0186] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A control method for a cluster hot standby redundant system, comprising: Determine, according to the device attribute of the target device, the priority of the target system to which the target device belongs in the cluster hot standby redundant system or the instruction running state of the target device, wherein the target system includes a plurality of devices, the cluster hot standby redundant system includes a plurality of systems, the plurality of systems are classified into a main system and a hot standby system, the main system is used to manage the communication data of the train, and the hot standby system is used to back up the communication data; The target system is switched between active and standby modes according to the priority level or the instruction running status.

2. The method according to claim 1, wherein: The device attributes include a master device and a slave device; Determining the priority or instruction running state of the target system to which the target device belongs in the cluster system according to the device attribute of the target device includes: In response to the device attribute of the target device being the master device, determining the priority of the target system to which the target device belongs in the cluster system; or In response to the device attribute of the target device being the slave device, the command execution state of the target device is determined.

3. The method according to claim 2, wherein: The performing active / standby switching of the system to which the target device belongs according to the priority or the instruction running state comprises: In response to the device attribute of the target device being the master device, performing a master-slave switch on the target system according to the priority and working status of each system in the cluster hot standby redundant system; or In response to the device attribute of the target device being the slave device, the target system is switched between a master and a standby mode according to the instruction running state of the target device.

4. The method according to claim 3, wherein: In response to the device attribute of the target device being the slave device, performing active / standby switching of the target system according to the instruction running state of the target device includes: In response to the device attribute of the target device being the slave device, detecting the working operation status of the master device in the target system through the operation data of the target device to obtain a first detection result of the master device; In response to the first detection result indicating that there is an abnormality in the working operation state of the main device, the instruction operation state of the main device is adjusted to switch the system state of the target system to a hot standby system state, and the control instruction state is used to control the target system to communicate in the cluster hot standby redundant system.

5. The method according to claim 3, wherein: In response to the device attribute of the target device being the master device, performing master-slave switching on the target system according to the priority and working status of each system in the cluster hot standby redundant system includes: In response to the device attribute of the target device being the master device, determining a system state of the target system; The target system is switched between active and standby modes according to the system status of the target system and the priority and the operating status of each system in the cluster hot standby redundant system.

6. The method according to claim 5, wherein: The system status includes an initialization status, a main system status and the hot standby system status. The initialization status is a status in which the system completes file configuration in the cluster hot standby redundant system.

7. The method according to claim 6, wherein: The performing active / standby switching of the target system according to the system state of the target system and the priority and working state of each system in the cluster hot standby redundant system comprises: In response to the system state of the target system being the initialization state or the hot standby system state, performing active / standby switching of the target system according to the priority of the target system and the working status of each system in the cluster hot standby redundant system; In response to the system state of the target system being the main system state and the working operation state being abnormal, switching the system state of the target system to the hot standby system state; In response to the running time of the target system in the main system state not satisfying the time threshold and there being a system satisfying a first preset condition in the clustered hot standby redundant system, the system state of the target system is switched to the hot standby system state, wherein the first preset condition is that the system state is the main system state, the priority satisfies a first preset threshold and the working running state is normal.

8. The method according to claim 7, wherein: In response to the system state of the target system being the main system state and the working operation state being abnormal, switching the system state of the target system to the hot standby system state includes: In response to the system state of the target system being the master system state, detecting the working state of the slave device in the target system through the operation data of the master system to obtain a second detection result of the master device; In response to the second detection result indicating that the operating state of the slave device is abnormal, the system state of the target system is switched to the hot standby system state.

9. The method according to claim 7, wherein: In response to the system state of the target system being the initialization state or the hot standby system, performing active / standby switching of the target system according to the priority of the target system and the working state of each system in the cluster hot standby redundant system includes: In response to the system state of the target system being the initialization state and the main system in the cluster hot standby redundant system being in a normal working state, comparing the priority of the target system with the priority of the main system to obtain a comparison result; Performing active / standby switching of the target system according to the comparison result; In response to the system state of the target system being the initialization state and the main system having a running time that meets the time threshold exists in the clustered hot standby redundant system, switching the system state of the target system to the hot standby system state; In response to the target system state being the hot standby system and the systems other than the target system in the clustered hot standby redundant system satisfying a second preset condition, the system state of the target system is switched to the main system state, wherein the second preset condition includes that the priority satisfies a second threshold or the working operation state is abnormal.

10. A train, the train being equipped with a cluster hot standby redundant system controlled by executing the method according to any one of claims 1 to 9, the cluster hot standby redundant system being used to manage communication data of the train.

Citation Information

Patent Citations

  • Front-end processor hot standby redundancy control system and method based on OPC UA technology

    CN115616891A

  • Redundancy control method, system and equipment of frequency converter and storage medium

    CN117555215A

  • Redundant system switching method, device and equipment, medium and vehicle

    CN118466160A

  • Redundant distributing control system

    JP2008181240A

  • Control system

    JP2011039702A

Cited By

  • Multi-level redundancy control method and system based on multiple entities

    CN120722822A