Communication backup method for redundant system

Abstract

The invention discloses a communication backup method for a redundant system. The communication backup method comprises the steps that S1, an external device sends ith operation information and an ith communication keyword; s2, judging whether the ith communication keyword is the same as the (i-1) th communication keyword or not, if yes, entering S3, and if not, entering S4; s3, marking the communication as communication failure, adding 1 to the count, and repeating the steps S1 to S2; if the number of communication failures is larger than a preset value, it is judged that the first feedback host breaks down, other parallel hosts become second feedback hosts, then the second feedback hosts update the (i + 1) th communication keyword and send the (i + 1) th communication keyword to the external device, and S5 is executed; s4, determining a first feedback host according to the ith communication keyword, then updating the (i + 1) th communication keyword by the first feedback host, and entering S5; and S5, the external equipment takes the (i + 1) th updated communication keyword as the (i + 1) th communication keyword in the (i + 1) th command frame, then the (i + 1) th command frame is sent to the hosts running in parallel, and the step S2 is repeated.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a communication backup method for a redundant system. Background Art

[0002] At present, military equipment has higher and higher requirements for product reliability and redundancy, especially for system design involving some key and core parts. In order to meet the design requirements of reliability and redundancy, system design often adopts multiple host redundant parallel mode. In the parallel mode of multiple hosts, they can receive and execute commands from external devices, but only one host is allowed to execute the return command at any time, which involves the design of communication backup between multiple hosts.

[0003] Currently, most commonly used communication backup designs are implemented using internal communication between multiple hosts. This method can effectively switch the communication link, but abnormalities in the internal communication or communication component circuits will cause communication competition and lead to communication link failure. Summary of the invention

[0004] In view of the technical problem in the prior art that abnormalities in internal communication or communication component circuits trigger communication competition and thus cause communication link failure, the present invention proposes a communication backup method for a redundant system.

[0005] In order to achieve the above object, the present invention provides the following technical solutions:

[0006] A communication backup method for a redundant system, specifically comprising the following steps:

[0007] S1: The external device sends the i-th command frame to the host running in parallel, and the i-th command frame contains the i-th operation information and the i-th communication keyword;

[0008] S2: The host running in parallel determines whether the i-th communication keyword and the i-1-th communication keyword are the same. If so, it enters S3, otherwise it enters S4;

[0009] S3: The communication between the external device and the parallel host is marked as communication failure and the count is increased by 1, and S1-S2 are repeated; if the number of communication failures is greater than the preset value, it is determined that the first return host has a fault, and the other parallel hosts become the second return host, and then the second return host updates the i+1th communication keyword and sends it to the external device, and enters S5;

[0010] S4: The host running in parallel determines the first command-returning host according to the i-th communication keyword, and then the first command-returning host updates the i+1-th communication keyword and sends it to the external device, and then enters S5;

[0011] S5: The external device uses the (i+1)th updated communication keyword as the (i+1)th communication keyword in the (i+1)th command frame, and then sends the (i+1)th command frame to the host running in parallel, and repeats S2.

[0012] Preferably, in S1, the communication keywords include a command return designation code and a command return serial code; the command return designation code is used to determine the command return host; the command return serial code is used by the host to determine whether the current communication is abnormal.

[0013] Preferably, when the command return designation code is 00, host A is identified as the first command return host; when the command return designation code is 01, host B is identified as the first command return host.

[0014] Preferably, in S4, after the first command reply host receives the i-th communication keyword, the command reply serial code of the i-th communication keyword is incremented by 1 as the command reply serial code in the i-th updated communication keyword.

[0015] Preferably, in S3, when the first command return host fails, the first command return host gives up the communication command return right, and other hosts running in parallel become the second command return host according to a preset sequence.

[0016] Preferably, when the redundant system is in normal operation, the communication process is:

[0017] a) The external device sends a first command to hosts A and B, where the communication keyword in the first command is 00000000B;

[0018] b) Host A and Host B receive the first command at the same time, and Host A and Host B record the first command serial code in the first command;

[0019] c) The command return designation code matches host A, and host A serves as the first command return host. Therefore, the first command return serial code is incremented by 1 to 00000001B as the updated first command return serial code. The external device records the updated first command return serial code and sends it in the second command;

[0020] d) Repeat steps b and c.

[0021] Preferably, when a receiving failure occurs in the redundant system, the communication process is:

[0022] e) The external device sends a first command to hosts A and B, where the communication keyword of the first command is 00000000B;

[0023] f) Host A and B receive the first command at the same time, and hosts A and B will record the first return command serial code; the return command designation code matches host A, and host A serves as the first return command host; due to a reception failure in host A, it is unable to increment the first return command serial code by 1 and send a return command; when the external device sends the second and third commands, the communication keyword is still 00000000B;

[0024] g) After repeating e) and f) 3 times, host B has received the first command serial code for 3 consecutive frames. In this case, host B will point the command designation code to itself as the second command host, and update the first command serial code to 0, reset the communication keyword to 01000000B, and send the updated communication keyword to the external device. After the external device receives the updated communication keyword, it sends the fourth command to the communication bus according to the updated communication keyword. After receiving the fourth command, host B will increase the command serial code in the fourth command by 1.

[0025] Preferably, when a sending failure occurs in the redundant system, the communication process is:

[0026] h) The external device sends a first command to hosts A and B, where the communication keyword of the first command is 00000000B;

[0027] i) Host A and B receive the first command at the same time, and hosts A and B will record the first return command serial code; the return command designation code matches host A, host A is used as the first return command host, and the first return command serial code is incremented by 1; because host A has a sending failure, the external device cannot update the communication keyword, so when the external device sends the next frame command, the keyword is still 00000000B;

[0028] j) After repeating h) and i) 3 times, host A, as the first return command host, continuously detects 3 frames of the first return command serial code, then determines that its own transmission is faulty and actively gives up the control of the communication bus; at this time, host B has received the first return command serial code for 3 consecutive frames, then host B will point the return command designation code to itself as the second return command host, and at the same time update the first return command serial code to 0, reset the communication keyword to 01000000B, and send the updated communication keyword to the external device. After the external device receives the updated communication keyword, it sends the fourth command to the communication bus according to the updated communication keyword. After receiving the fourth command, host B increments the return command serial code in the fourth command by 1.

[0029] In summary, due to the adoption of the above technical solution, compared with the prior art, the present invention has at least the following beneficial effects:

[0030] The method of the present invention comprehensively considers factors such as hardware equipment, communication module failures and software anomalies. It can reliably realize communication backup by only forwarding the communication keywords of the system by external equipment. It is fast, improves response time, avoids communication link failure, and improves reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 Schematic diagram of a communication backup method for a redundant system according to exemplary embodiment 1 of the present invention.

[0032] Figure 2 1 is a timing diagram of the normal operation of the redundant system according to the exemplary embodiment 2 of the present invention.

[0033] Figure 3 It is a timing diagram of commanding host switching when a receiving failure occurs in a redundant system according to exemplary embodiment 3 of the present invention.

[0034] Figure 4 It is a timing diagram of commanding host switching when a transmission failure occurs in a redundant system according to exemplary embodiment 4 of the present invention. DETAILED DESCRIPTION

[0035] The present invention is further described in detail below in conjunction with the examples and specific implementation methods. However, this should not be understood as the scope of the above subject matter of the present invention being limited to the following examples, and all technologies realized based on the content of the present invention belong to the scope of the present invention.

[0036] In the description of the present invention, it is necessary to understand that the terms "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention.

[0037] Example 1

[0038] like Figure 1 As shown, the present invention provides a communication backup method for a redundant system, which specifically includes the following steps:

[0039] S1: The external device sends the i-th command frame to the host running in parallel, and the i-th command frame contains the i-th operation information and the i-th communication keyword.

[0040] In this embodiment, the communication keywords include a return command designation code and a return command serial code; the return command designation code is used to specify a specific host ID to send a return command. For example, when the designation code is 00, it identifies host A's return command, and when the designation code is 01, it identifies host B's return command; the return command serial code is used by the parallel host to determine whether the communication is normal. For example, if the current host is normal and undertakes the return command task, the return command serial code will be incremented by 1 when executing the return command, otherwise it will not be processed.

[0041] S2: Determine the first command return host according to the i-th communication keyword, and then the first command return host sends the i-th updated communication keyword to the external device.

[0042] In this embodiment, for example, the hosts running in parallel are numbered A, B, C, D, etc. If the command return designation code in the i-th communication keyword is 00, the host numbered A is determined to be the first command return host; if the command return designation code in the i-th communication keyword is 01, the host numbered B is determined to be the first command return host; if the command return designation code in the i-th communication keyword is 02, the host numbered C is determined to be the first command return host; if the command return designation code in the i-th communication keyword is 03, the host numbered D is determined to be the first command return host.

[0043] In this embodiment, when the first command host receives the i-th command frame, the command serial code of the i-th communication keyword is incremented by 1 as the command serial code in the i-th updated communication keyword. For example, if the i-th communication keyword is 00000000B, then the i-th updated communication keyword sent by the first command host is 00000001B.

[0044] S3: The parallel running host determines whether the i-th updated communication keyword is the same as the i-1-th communication keyword. If so, it goes to S4, otherwise it goes to S5.

[0045] S4: Mark the communication between the external device and the first command return host as communication failure and add 1 to the count, repeat S1-S3. If the number of communication failures is greater than the preset value (for example, 3 times), it is determined that the first command return host has a fault, and the first command return host gives up the communication command return right. Other hosts running in parallel will take on the command return task and become the second command return host in the preset order.

[0046] S5: Instruct the host to send the updated (i+1)th communication keyword to the external device.

[0047] S6: The external device uses the received i+1th communication keyword as the i+1th communication keyword in the i+1th command frame, and then sends the i+1th command frame to the host running in the row, repeating S2-S3.

[0048] Example 2

[0049] Assume that the current system requires host A (ID=00) and host B (ID=01) to run in parallel, and the two hosts simultaneously receive and execute commands from external devices, but only one of the hosts executes the return command.

[0050] like Figure 2 As shown, it is a timing diagram of the normal operation of the redundant system using the method described in Example 1, including the following steps:

[0051] a) The external device sends command 1 to A and B. The communication keyword in command 1 is 00000000B.

[0052] b) Host A and B receive the command 1 at the same time, and host A and B will record the command serial code;

[0053] c) Since the command return designation code matches host A at this time, host A is the first command return host, so the command return serial code is incremented by 1 and the updated command return 00000001B is sent. The external device records the updated command return 00000001B and sends it in the next command (command 2);

[0054] d) Repeat steps b and c.

[0055] Example 3

[0056] Assume that the current system requires host A (ID=00) and host B (ID=01) to run in parallel, and the two hosts simultaneously receive and execute commands from external devices, but only one of the hosts executes the return command.

[0057] like Figure 3 As shown, it is a timing diagram of a redundant system using the method described in Example 1 to perform a command host switching when a receiving failure occurs, including the following steps:

[0058] e) The external device sends command 1 to A and B, and the communication keyword in command 1 is 00000000B;

[0059] f) Host A and B receive the command 1 at the same time. Host A and B will record the return command serial code. Since the return command designation code matches host A at this time, host A is the first return command host. However, due to a reception failure in host A, it is unable to increment the return command serial code by 1 and send the return command. Therefore, when the external device sends the next frame command (command 2, command 3), the communication keyword is still 00000000B.

[0060] g) After repeating e) and f) 3 times, host B has received the same return command serial code (00000000B) for 3 consecutive frames. Host B will point the return command designation code to itself (id=01) as the second return command host, and clear the return command serial code to 0, reset the keyword to 01000000B, and send the updated return command to the external device. After the external device receives the updated return command, it sends command 4 (keyword is 01000000B) to the communication bus according to the updated return command. After receiving command 4, host B increments the return command serial code by 1 to obtain the updated return command (01000001B), and feeds it back to the external device, thereby realizing the switching of the communication host.

[0061] Example 4

[0062] Assume that the current system requires host A (ID=00) and host B (ID=01) to run in parallel, and the two hosts simultaneously receive and execute commands from external devices, but only one of the hosts executes the return command.

[0063] like Figure 4 As shown, it is a timing diagram of a redundant system using the method described in Example 1 to perform a command host switching when a sending failure occurs, including the following steps:

[0064] h) The external device sends command 1 to A and B, and the communication keyword in command 1 is 00000000B;

[0065] i) Host A and B receive the command 1 at the same time. Host A and B will record the return command serial code. Since the return command designated code matches host A at this time, host A, as the first return command host, will increment the return command serial code by 1. However, host A has a sending failure, resulting in the return command serial code failing to be sent after incrementing by 1. The external device cannot update the current communication keyword. When the external device sends the next frame command (command 2, command 3), the keyword is still 00000000B.

[0066] j) After repeating h) and i) 3 times, host A, as the first command return host, continuously detects the same command return serial code (00000000B) in 3 frames of commands, then determines that its own transmission is faulty and actively gives up the control of the communication bus; when host B receives the same command return serial code (00000000B) for 3 consecutive frames, it determines that host A has failed, then host B points the command return designation code to itself (id=01) as the second command return host, and at the same time clears the command return serial code to 0, resets the keyword to 01000000B, and sends the updated command return to the external device. After the external device receives the updated command return, it sends command 4 (keyword is 01000000B) to the communication bus according to the updated command return. After receiving command 4, host B increments the command return serial code by 1 to obtain the updated command return (01000001B), and feeds it back to the external device, thereby realizing the switching of the communication host.

[0067] The present invention introduces communication keywords into a system with multiple hosts working redundantly, which can effectively realize communication switching and enhance the software robustness of system communication redundancy.

[0068] Those skilled in the art will appreciate that the above-mentioned embodiments are specific examples for implementing the present invention, and in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present invention.

Claims

1. A communication backup method for a redundant system, characterized in that: The specific steps include: S1: The external device sends the i-th command frame to the host running in parallel, and the i-th command frame contains the i-th operation information and the i-th communication keyword; S2: The host running in parallel determines whether the i-th communication keyword and the i-1-th communication keyword are the same. If so, it enters S3, otherwise it enters S4; S3: The communication between the external device and the parallel host is marked as communication failure and the count is increased by 1, and S1-S2 are repeated; if the number of communication failures is greater than the preset value, it is determined that the first return host has a fault, and the other parallel hosts become the second return host, and then the second return host updates the i+1th communication keyword and sends it to the external device, and enters S5; S4: The host running in parallel determines the first command-returning host according to the i-th communication keyword, and then the first command-returning host updates the i+1-th communication keyword and sends it to the external device, and then enters S5; S5: The external device uses the (i+1)th updated communication keyword as the (i+1)th communication keyword in the (i+1)th command frame, and then sends the (i+1)th command frame to the host running in parallel, and repeats S2.

2. A communication backup method for a redundant system as claimed in claim 1, characterized in that: In said S1, the communication keywords include a reply command designation code and a reply command serial code; The command return designation code is used to determine the command return host; the command return serial code is used by the host to determine whether the current communication is abnormal.

3. A communication backup method for a redundant system as claimed in claim 2, characterized in that: When the command return designation code is 00, host A is identified as the first command return host; when the command return designation code is 01, host B is identified as the first command return host.

4. A communication backup method for a redundant system as claimed in claim 1, characterized in that: In S4, when the first command reply host receives the i-th communication keyword, the command reply serial code of the i-th communication keyword is incremented by 1 and used as the command reply serial code in the i-th updated communication keyword.

5. A communication backup method for a redundant system as claimed in claim 1, characterized in that: In S3, when the first command return host fails, the first command return host gives up the communication command return right, and other hosts running in parallel become the second command return host according to a preset sequence.

6. A communication backup method for a redundant system as claimed in claim 1, characterized in that: When the redundant system is in normal operation, the communication process is as follows: a) The external device sends a first command to hosts A and B, where the communication keyword in the first command is 00000000B; b) Host A and Host B receive the first command at the same time, and Host A and Host B record the first command serial code in the first command; c) The command return designation code matches host A, and host A serves as the first command return host. Therefore, the first command return serial code is incremented by 1 to 00000001B as the updated first command return serial code. The external device records the updated first command return serial code and sends it in the second command; d) Repeat steps b and c.

7. A communication backup method for a redundant system as claimed in claim 1, characterized in that: When a receiving failure occurs in the redundant system, the communication process is as follows: e) The external device sends a first command to hosts A and B, where the communication keyword of the first command is 00000000B; f) Host A and Host B receive the first command at the same time, and Host A and Host B will record the first command serial code; The command return designation code matches host A, and host A is used as the first command return host. Due to a reception failure in host A, the first command return serial code cannot be incremented by 1 and the command return cannot be sent. When the external device sends the second and third commands, the communication keyword is still 00000000B; g) After repeating e) and f) 3 times, host B has received the first command serial code for 3 consecutive frames. In this case, host B will point the command designation code to itself as the second command host, and update the first command serial code to 0, reset the communication keyword to 01000000B, and send the updated communication keyword to the external device. After the external device receives the updated communication keyword, it sends the fourth command to the communication bus according to the updated communication keyword. After receiving the fourth command, host B will increase the command serial code in the fourth command by 1.

8. A communication backup method for a redundant system as claimed in claim 1, characterized in that: When a sending failure occurs in the redundant system, the communication process is as follows: h) The external device sends a first command to hosts A and B, where the communication keyword of the first command is 00000000B; i) Host A and Host B receive the first command at the same time, and Host A and Host B will record the first command serial code; The command return designation code matches host A, and host A becomes the first command return host, and increases the first command return serial code by 1. Since host A has a sending failure, the external device cannot update the communication keyword, so when the external device sends the next frame command, the keyword is still 00000000B. j) After repeating h) and i) 3 times, host A, as the first return command host, continuously detects 3 frames of the first return command serial code, then determines that its own transmission is faulty and actively gives up the control of the communication bus; at this time, host B has received the first return command serial code for 3 consecutive frames, then host B will point the return command designation code to itself as the second return command host, and at the same time update the first return command serial code to 0, reset the communication keyword to 01000000B, and send the updated communication keyword to the external device. After the external device receives the updated communication keyword, it sends the fourth command to the communication bus according to the updated communication keyword. After receiving the fourth command, host B increments the return command serial code in the fourth command by 1.

Images