Method for interacting credible states of main and standby controllers in redundancy configuration and related device

Abstract

The invention belongs to the field of industrial automation control, and discloses a credible state interaction method for a main controller and a standby controller in redundant configuration and a related device, and the method comprises the following steps: the standby controller periodically sends a standby controller credible state message to the main controller; the master controller analyzes the standby controller credible state message, obtains the standby controller credible state, stores the standby controller credible state to the local, and sends a master controller credible state message to the standby controller; the standby controller analyzes the master controller credible state message to obtain the master controller credible state, compares the standby controller credible state with the master controller credible state to obtain a comparison result, and completes interaction of the master controller credible state and the standby controller credible state according to the comparison result. The invention can solve the problem that the prior art cannot realize the effective interaction of the credible state between the main and standby controllers with redundancy configuration.

Description

Technical Field

[0001] The present invention belongs to the field of industrial automation control, and in particular relates to a trusted state interaction method of a redundantly configured primary and standby controller and a related device. Background Art

[0002] With the rapid development and popularization of Internet technology, network security issues have become increasingly prominent. As an emerging security protection method, the trusted protection system ensures the integrity and credibility of the internal components of the system based on trusted computing technology. Its core lies in the use of hardware devices such as security chips to embed security functions into the bottom layer of the system, thereby improving the security protection capabilities of the system and having higher security and reliability. Therefore, the application of trusted protection systems in power systems can better ensure the safe and stable operation of power systems.

[0003] In the application of trusted protection system in power system, the redundant configuration of active and standby controller system consists of two or more controllers, one of which is the main controller, responsible for system operation and control tasks under normal circumstances; the rest are standby controllers, in standby state, ready to take over control tasks when the main controller fails. This configuration ensures that the standby controller can seamlessly take over its work when the main controller fails through real-time data synchronization and fault detection mechanism, thereby maintaining the continuous operation of the system. Controller redundancy configuration and trusted state interaction between active and standby controllers are crucial to the stable operation of power systems. This interaction can not only help the system understand the operating status of each controller in real time, but also quickly switch to the standby controller when a fault occurs, thereby avoiding system crashes. However, how to effectively interact trusted states between active and standby controllers and the impact of trusted states on the decision-making of the roles of active and standby controllers are still a problem that needs to be solved. Summary of the invention

[0004] The purpose of the present invention is to provide a method and related device for credible state interaction between redundantly configured active and standby controllers, so as to solve the problem that the prior art cannot realize effective credible state interaction between redundantly configured active and standby controllers.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions:

[0006] In a first aspect, a method for interacting with a redundant active / standby controller in a trusted state comprises the following steps:

[0007] The standby controller periodically sends a standby controller trusted status message to the main controller;

[0008] The main controller parses the trusted status message of the standby controller, obtains the trusted status of the standby controller and stores it locally, and at the same time, the main controller sends the trusted status message of the main controller to the standby controller;

[0009] After the standby controller parses the master controller trusted status message to obtain the master controller trusted status, it compares the standby controller trusted status with the master controller trusted status to obtain a comparison result, and completes the master-standby controller trusted status interaction according to the comparison result.

[0010] In some implementations, the comparison result includes: the trusted state of the main controller is consistent with the trusted state of the standby controller, the trusted state of the main controller is better than the trusted state of the standby controller, and the trusted state of the main controller is worse than the trusted state of the standby controller.

[0011] In some embodiments, the step of completing the trusted status interaction between the master and standby controllers based on the comparison result specifically includes: when the trusted status of the master controller is consistent with the trusted status of the standby controller or the trusted status of the master controller is better than the trusted status of the standby controller, the standby controller continues to periodically send the standby controller trusted status message to the master controller.

[0012] In some embodiments, the step of completing the trusted state interaction between the master and standby controllers according to the comparison result further includes: when the trusted state of the master controller is inferior to the trusted state of the standby controller, the standby controller records the number of cycles in which the trusted state of the master controller is inferior to the trusted state of the standby controller, and continues to periodically send the trusted state message of the standby controller to the master controller;

[0013] If the trusted state of the main controller for a plurality of consecutive cycles obtained according to the number of cycles is inferior to the trusted state of the standby controller, the standby controller sends a switching message to the main controller and sets the current standby controller as a new main controller.

[0014] In some implementations, after the main controller receives the standby switching message, the current main controller is set as a new standby controller, and the new standby controller continues to periodically send standby controller trusted status messages to the new main controller.

[0015] In some implementations, the following steps are also included: the main controller sends the standby controller trusted state and the main controller trusted state to the host computer;

[0016] If the main controller does not receive the trusted status message of the standby controller for multiple consecutive cycles, the standby controller is set offline, and the trusted status of the standby controller is cleared, and only the trusted status of the main controller is sent to the host computer.

[0017] In a second aspect, a redundantly configured active / standby controller trusted state interaction system includes:

[0018] The master-slave communication module is used for the standby controller to periodically send the standby controller trusted status message to the master controller;

[0019] The parsing and transmission module is used for the main controller to parse the trusted status message of the standby controller, obtain the trusted status of the standby controller and store it locally, and the main controller sends the trusted status message of the main controller to the standby controller;

[0020] The trusted status comparison and interaction module is used for the standby controller to parse the trusted status message of the main controller to obtain the trusted status of the main controller, compare the trusted status of the standby controller with the trusted status of the main controller to obtain a comparison result, and complete the trusted status interaction between the main and standby controllers according to the comparison result.

[0021] In a third aspect, a computer device comprises a memory, a processor, and a computer program stored in the memory and executable in the processor, wherein the processor implements the steps of a method for trusted state interaction of a redundantly configured master-slave controller when executing the computer program.

[0022] In a fourth aspect, a computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for trusted state interaction of a redundantly configured active and standby controller are implemented.

[0023] In a fifth aspect, a computer program product is provided, the computer product comprising a computer program, and when the computer program is executed by a processor, the steps of the method for trusted state interaction of a redundantly configured active and standby controller are implemented.

[0024] Compared with the prior art, the present invention has the following beneficial effects:

[0025] The present invention provides a method for interactive trusted states of redundantly configured master and standby controllers. In order to realize the interactive trusted states between the master and standby controllers, a method of periodically sending status messages between the master and standby controllers is adopted. At the same time, the trusted states of the standby controller and the trusted states of the master controller are compared and evaluated. The next operation is performed according to the comparison result. In this way, a comprehensive trusted state of the controller can be obtained, and a basis is also provided for the decision of the roles of the master and standby controllers. The implementation of these measures will help to improve the reliability and safety of the power system, provide a strong guarantee for the stable operation of the power system, and solve the problem that the trusted states cannot be effectively interacted between the redundantly configured master and standby controllers.

[0026] Furthermore, when the trust status of the main controller is inferior to that of the standby controller, if this situation persists for multiple cycles, the present invention triggers a switching mechanism to set the standby controller as the new main controller, which can significantly reduce the impact of system failures on normal operation; at the same time, the present invention can ensure the consistency and accuracy of the data by comparing the trust status of the main controller and the standby controller.

[0027] Furthermore, the present invention sends the trusted status of the active and standby controllers to the host computer, and after the active controller fails to receive the trusted status message of the standby controller for multiple cycles, controls the standby controller to go offline, and clears the trusted status of the standby controller in the host computer, which helps to quickly locate the cause of the fault when it occurs and improves the efficiency of troubleshooting. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 A flow chart of a trusted state interaction method of a redundantly configured active and standby controller provided in Embodiment 1;

[0029] Figure 2 A schematic diagram of the structure of a trusted state interaction system of a redundantly configured active and standby controller provided in Example 2;

[0030] Figure 3 This is a schematic diagram of the computer device structure used in the present invention. DETAILED DESCRIPTION

[0031] In order to enable those skilled in the art to better understand the solution of the present invention, the technical solution of the present invention will be further described in detail below in conjunction with the accompanying drawings, and the described content is intended to explain the present invention rather than to limit it.

[0032] It should be noted that the terms "including" and "having" and any variations thereof in the specification and claims of the present invention are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus comprising a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or are inherent to these processes, methods, systems, products or apparatus.

[0033] Embodiment 1

[0034] Trusted protection systems have great potential in improving the safety of power systems. However, in terms of controller redundancy configuration and trusted state interaction between active and standby controllers, how to ensure the real-time, accurate and secure transmission of information between active and standby controllers, and how to make active and standby controller role decisions after receiving abnormal or fault signals are the key to ensuring the continuous and stable operation of power systems. Figure 1 As shown, this embodiment provides a method for interacting with a redundant active / standby controller trusted state, comprising the following steps:

[0035] S1: The standby controller periodically sends the standby controller trusted status message to the master controller;

[0036] Specifically, the standby controller periodically and actively sends a standby controller trusted status message to the main controller, regardless of whether the main controller replies to the main controller trusted status message;

[0037] S2: The main controller waits to receive the trusted status message of the standby controller. If the reception is successful, the main controller parses the trusted status message of the standby controller, obtains the trusted status of the standby controller and stores it locally, and sends the trusted status of the main controller and the trusted status of the standby controller to the host computer for display. The main controller sends the trusted status message of the main controller to the standby controller;

[0038] In the case of reception failure, if the main controller fails to receive the trusted status message of the standby controller for multiple consecutive cycles, the standby controller is set offline, and the trusted status of the standby controller in the host computer is cleared, and the latest trusted status message of the standby controller is continued to be received;

[0039] S3: The standby controller receives the trusted status message from the main controller. After the standby controller parses the trusted status message from the main controller to obtain the trusted status of the main controller, the standby controller compares the trusted status of the standby controller with the trusted status of the main controller to obtain a comparison result. After performing corresponding operations according to the comparison result, the trusted status interaction between the main and standby controllers is completed.

[0040] Specifically, if the trusted state of the main controller is consistent with the trusted state of the standby controller, or the trusted state of the main controller is superior to the trusted state of the standby controller, the standby controller returns to S1 and continues to send the standby controller trusted state message to the main controller;

[0041] If the trusted state of the master controller is inferior to that of the standby controller, the standby controller starts to count the number of cycles of the master controller trusted state difference, and returns to S1 to continue sending the standby controller trusted state message to the master controller.

[0042] If the trusted state of the main controller is inferior to the trusted state of the standby controller for multiple consecutive cycles, the standby controller actively sends a standby switching message to the main controller and sets its own role as the new main controller. After the original main controller receives the standby switching message, it sets its own role as the new standby controller and starts to execute S1. It actively sends a standby controller trusted state message to the new main controller, and the new main controller starts to execute S2.

[0043] In order to realize the trusted state interaction between the master and standby controllers, this embodiment adopts the method of periodically sending status messages between the master and standby controllers, and at the same time has a set of trusted state evaluation mechanism to compare the trusted state of the master controller with the trusted state of the standby controller. Through these evaluations, a comprehensive controller trusted state can be obtained, and at the same time, a basis for the decision of the master and standby controller roles can be provided. The implementation of these measures will help improve the reliability and safety of the power system and provide a strong guarantee for the stable operation of the power system.

[0044] Embodiment 2

[0045] like Figure 2As shown, this embodiment provides a redundantly configured active and standby controller trusted state interaction system, including: an active and standby communication module, a parsing and transmission module, and a trusted state comparison and interaction module;

[0046] The master-slave communication module is used for the standby controller to periodically send the standby controller trusted status message to the master controller;

[0047] The parsing and transmission module is used for the main controller to parse the trusted status message of the standby controller, obtain the trusted status of the standby controller and store it locally, and the main controller sends the trusted status message of the main controller to the standby controller;

[0048] The trusted status comparison and interaction module is used for the standby controller to parse the trusted status message of the main controller to obtain the trusted status of the main controller, compare the trusted status of the standby controller with the trusted status of the main controller to obtain a comparison result, and complete the trusted status interaction between the main and standby controllers according to the comparison result.

[0049] The division of modules in the embodiments of the present invention is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional module in each embodiment of the present invention may be integrated into one processor, or may exist physically separately, or two or more modules may be integrated into one module. The above-mentioned integrated modules may be implemented in the form of hardware or in the form of software functional modules.

[0050] like Figure 3As shown, a computer device is also provided in this embodiment, which includes a processor and a memory, the memory is used to store a computer program (in this embodiment, the computer program includes a computing component and an iterative component, which can perform model calculation and model update), the computer program includes program instructions, and the processor is used to execute the program instructions stored in the computer storage medium. The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. It is the computing core and control core of the terminal, which is suitable for implementing one or more instructions, and is specifically suitable for loading and executing one or more instructions in the computer storage medium to implement the corresponding method flow or corresponding function; the processor described in the embodiment of the present invention can be used for the operation of the trusted state interaction method of the redundantly configured master and standby controllers.

[0051] This embodiment also provides a storage medium, specifically a computer-readable storage medium (Memory), which is a memory device in a computer device for storing programs and data. It is understandable that the computer-readable storage medium here can include both built-in storage media in a computer device and, of course, extended storage media supported by the computer device. The computer-readable storage medium provides a storage space, which stores the operating system of the terminal. In addition, one or more instructions suitable for being loaded and executed by a processor are also stored in the storage space, and these instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory. The processor can load and execute one or more instructions stored in the computer-readable storage medium to implement the corresponding steps of the trusted state interaction method of the redundantly configured master and standby controllers in the above embodiment.

[0052] This embodiment further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the corresponding steps of the method for trusted state interaction of redundantly configured active and standby controllers in the above embodiment are implemented.

[0053] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0054] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0055] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0056] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0057] Finally, it should be noted that the above embodiments show and describe the basic principles and main features of the present invention and the advantages of the present invention. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention. Therefore, no matter from which point of view, the embodiments should be regarded as exemplary and non-restrictive. The scope of the present invention is defined by the attached claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention. Any figure mark in the claims should not be regarded as limiting the claims involved.

[0058] In addition, it should be understood that although this specification is described in accordance with the implementation modes, not every implementation mode contains only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment can also be appropriately combined to form other implementation modes that can be understood by those skilled in the art. The above content is only to illustrate the technical idea of ​​the present invention, and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution according to the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.

Claims

1. A method for interactive trusted states of redundantly configured master and standby controllers, characterized in that: The following steps are involved: The standby controller periodically sends a standby controller trusted status message to the main controller; The main controller parses the trusted status message of the standby controller, obtains the trusted status of the standby controller and stores it locally, and at the same time, the main controller sends the trusted status message of the main controller to the standby controller; After the standby controller parses the master controller trusted status message to obtain the master controller trusted status, it compares the standby controller trusted status with the master controller trusted status to obtain a comparison result, and completes the master-standby controller trusted status interaction according to the comparison result.

2. A method for interacting with a redundant active / standby controller in a trusted state according to claim 1, characterized in that: The comparison result includes: the trusted state of the main controller is consistent with the trusted state of the standby controller, the trusted state of the main controller is better than the trusted state of the standby controller, and the trusted state of the main controller is worse than the trusted state of the standby controller.

3. A method for interacting with a redundant active / standby controller in a trusted state according to claim 2, characterized in that: The step of completing the trusted state interaction between the master and standby controllers according to the comparison result specifically includes: when the trusted state of the master controller is consistent with the trusted state of the standby controller or the trusted state of the master controller is superior to the trusted state of the standby controller, the standby controller continues to periodically send the trusted state message of the standby controller to the master controller.

4. A method for interacting with a redundant active / standby controller in a trusted state according to claim 3, characterized in that: The step of completing the trusted state interaction of the master and standby controllers according to the comparison result further includes: when the trusted state of the master controller is inferior to the trusted state of the standby controller, the standby controller records the number of cycles in which the trusted state of the master controller is inferior to the trusted state of the standby controller, and continues to periodically send the trusted state message of the standby controller to the master controller; If the trusted state of the main controller for a plurality of consecutive cycles obtained according to the number of cycles is inferior to the trusted state of the standby controller, the standby controller sends a switching message to the main controller and sets the current standby controller as a new main controller.

5. A method for interacting with a redundant active / standby controller's trusted state according to claim 4, characterized in that: After the main controller receives the standby switching message, the current main controller is set as a new standby controller, and the new standby controller continues to periodically send standby controller trusted status messages to the new main controller.

6. The method for interactive trusted states of a redundantly configured active and standby controller according to claim 1, characterized in that: The following steps are also included: The main controller sends the standby controller trusted state and the main controller trusted state to the host computer; If the main controller does not receive the trusted status message of the standby controller for multiple consecutive cycles, the standby controller is set offline, and the trusted status of the standby controller is cleared, and only the trusted status of the main controller is sent to the host computer.

7. A redundant configuration master and standby controller trusted state interaction system, characterized in that: include: The master-slave communication module is used for the standby controller to periodically send the standby controller trusted status message to the master controller; The parsing and transmission module is used for the main controller to parse the trusted status message of the standby controller, obtain the trusted status of the standby controller and store it locally, and the main controller sends the trusted status message of the main controller to the standby controller; The trusted status comparison and interaction module is used for the standby controller to parse the trusted status message of the main controller to obtain the trusted status of the main controller, compare the trusted status of the standby controller with the trusted status of the main controller to obtain a comparison result, and complete the trusted status interaction between the main and standby controllers according to the comparison result.

8. A computer device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable in the processor, wherein the processor implements the steps of a method for trusted state interaction of a redundantly configured active-standby controller as described in any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for trusted state interaction of a redundantly configured active and standby controllers as claimed in any one of claims 1 to 6 are implemented.

10. A computer program product, the computer product comprising a computer program, characterized in that: When the computer program is executed by a processor, the steps of a method for trusted state interaction of a redundantly configured active and standby controller as described in any one of claims 1 to 6 are implemented.

Images