Redundancy management and control device, method, medium and system

Abstract

The invention provides a redundancy management and control device, method, medium and system. The redundancy management and control device comprises a main processing module, a standby processing module, an arbitration module and a power supply module, wherein the main processing module and the standby processing module have the same function and structure, and form a dual-computer backup; each of the main processing module and the standby processing module is provided with a first computer unit and a first real-time monitoring circuit; the arbitration module comprises a second computer unit and a second real-time monitoring circuit, and is used for collecting real-time state information of the main processing module and the standby processing module, judging the current operation state of the main processing module and the standby processing module according to the real-time state information, generating a first decision result according to the current operation state, and sending the first decision result to the second computer unit; therefore, the second computer unit is switched to output the external signal of the main processing module or the standby processing module. The power supply module is configured to supply power independently in two ways, one way supplies power to the computer unit, and the other way supplies power to the real-time monitoring circuit. The redundancy management and control device is good in timeliness and high in reliability.

Description

Technical Field

[0001] The present invention relates to the field of electronic information technology, and in particular, to a redundant control device, method, medium, and system. Background Art

[0002] In certain application scenarios of electronic information systems, it is required that the control device has a redundant primary and standby working mode to improve the reliability of the control device.

[0003] In the related art, the most common method for the redundancy of the primary and standby computers in the control device is to use a manual switching method. When the operator finds that the status of the primary computer is incorrect and the data is abnormal, manually switch to the standby computer through a switching switch, and the standby computer continues to execute the control task. This method has poor timeliness and requires manual participation, and is not suitable for applications with high real-time requirements.

[0004] In addition, there is also a method of monitoring the status of the primary and standby computers through Ethernet heartbeat packets. The Ethernet heartbeat packet protocol mainly uses the UDP (User Datagram Protocol) protocol for data transmission. It is necessary to monitor the computer status after the computer operating system is started and the network interface is normal. At the same time, the Ethernet UDP protocol does not guarantee the order of data and accurate arrival at the receiving party, and there may be a situation of lost datagrams. In this case, there may be a situation of mis-switching, or frequent repeated primary and standby switching due to network congestion. Summary of the Invention

[0005] The present invention aims to solve at least one of the technical problems existing in the related art.

[0006] To this end, the first aspect of the present invention is to propose a redundant control device.

[0007] The second aspect of the present invention is to propose a redundant control method.

[0008] The third aspect of the present invention is to propose a readable storage medium.

[0009] The fourth aspect of the present invention is to propose another electronic information system.

[0010] In view of this, according to the first aspect of the present invention, a redundant control device is proposed, including: a main processing module, which has a first computer unit and a first real-time monitoring circuit. The first computer unit is used to execute control tasks, and the first real-time monitoring circuit is used to monitor the real-time status information of the first computer unit. The standby processing module has the same function and structure as the main processing module, and forms a dual-machine backup to perform redundant switching in case of anomalies; the arbitration module includes a second computer unit and a second real-time monitoring circuit. The second real-time monitoring circuit is connected to the first real-time monitoring circuit, and is used to collect the real-time status information of the main processing module and the standby processing module, judge the current operating status of the main processing module and the standby processing module according to the real-time status information, and generate a first decision result according to the current operating status to instruct the second computer unit to switch and output the external signal of the main processing module or the standby processing module; the power supply module is configured to be powered by two independent power supplies, one of which is used to supply power to the first computer unit and the second computer unit, and the other is used to supply power to the first real-time monitoring circuit and the second real-time monitoring circuit.

[0011] Compared with the related technology that monitors the status of the main and standby computers in the form of Ethernet heartbeat messages, it is necessary for the computer system to start to monitor the computer status, and the Ethernet UDP protocol does not guarantee the order and accurate arrival of data at the receiving party, and there may be a situation of losing data packets. In this case, there will be a problem of mis-switching. The redundant control device provided by the embodiment of the present application can keep working normally even when the computer unit is not working, can quickly switch between the main and standby computers, has good timeliness, and at the same time, can avoid the problem of mis-switching, so as to realize reliable monitoring of the working status of the computer module; at the same time, through the real-time status information of the main processing module and the standby processing module, the optimal processing module is dynamically selected to execute the control task, which has better timeliness and higher reliability compared with the manual switching method in the related technology.

[0012] In some technical solutions, optionally, when the current operating status of the main processing module is normal, the second real-time monitoring circuit generates a first sub-decision result to instruct the second computer unit to switch and output the external signal of the main processing module; when the current operating status of the main processing module is abnormal and the current operating status of the standby processing module is normal, the second real-time monitoring circuit generates a second sub-decision result to instruct the second computer unit to switch and output the external signal of the standby processing module.

[0013] In some technical solutions, optionally, the second real-time monitoring circuit is further used to judge whether the real-time status information has been collected. In the case where the real-time status information has not been collected, a second decision result is generated to instruct the second computer unit to switch and output the external signal of the main processing module.

[0014] During actual use, when the real-time status information collection of the main processing module and the backup processing module is incomplete, the main processing module is selected to execute the control task. In this way, unnecessary switching can be reduced, thereby avoiding system instability that may be caused by frequent switching, and helping to improve the stability and reliability of the redundant control device.

[0015] In some technical solutions, optionally, the first real-time monitoring circuit includes: an MCU processor and a service monitoring unit; wherein, the service monitoring unit includes: a voltage monitoring unit for monitoring the working voltage and sending the working voltage to the MCU processor; and / or a current monitoring unit for monitoring the working current and sending the working current to the MCU processor; and / or a temperature sensor for monitoring the working temperature and sending the working temperature to the MCU processor.

[0016] The working voltage, working current, and working temperature are key status parameters of the main processing module and the backup processing module, and are crucial for evaluating the health status and performance of the processing module. Therefore, in the above embodiment, the working voltage, working current, and working temperature in the main processing module and the backup processing module are respectively monitored by the service monitoring unit, providing key real-time data support for the second real-time monitoring circuit to judge the operating status of the main processing module and the backup processing module, thereby helping to improve the stability and reliability of the entire device.

[0017] In some technical solutions, optionally, the main processing module and the backup processing module further include a self-check unit; the self-check unit is used to collect the self-check status information of the first computer unit and report the self-check status information to the MCU processor; the self-check status information includes at least one of the memory occupancy rate, CPU main frequency, and CPU occupancy rate.

[0018] The memory occupancy rate reflects the usage of the computer unit's memory and helps to evaluate the memory pressure of the computer unit, while the CPU main frequency reflects the processing ability of the computer unit, and the CPU occupancy rate reflects the resource utilization situation and helps to detect whether there is an overload problem; these three are crucial for evaluating the health status and performance of the processing module. Therefore, in the above embodiment, collecting at least one of the memory occupancy rate, CPU main frequency, and CPU occupancy rate of the first computer unit by the self-check unit provides key real-time data support for the second monitoring circuit to judge the operating status of the main processing module and the backup processing module, thereby helping to improve the stability and reliability of the entire device.

[0019] In some technical solutions, optionally, at least the main processing module, the standby processing module, and the arbitration module are interconnected through a serial bus. With such a design, the second real-time monitoring circuit can collect the real-time status of all computer units, and then judge the working status of the main processing module and the standby processing module through the second real-time monitoring circuit block, so as to perform the switching management of the main processing module and the standby processing module. At the same time, the serial bus can also improve the efficiency and reliability of data transmission, so that the status information of all computer units can be collected in real time, which helps to improve the timeliness and accuracy of information.

[0020] In some technical solutions, optionally, the external signals include at least one of network signals, USB signals, and VGA signals.

[0021] According to the second aspect of the present application, the present application also proposes a redundancy control method, which is applied to the redundancy control device proposed in any of the above technical solutions. Therefore, the redundancy control method has all the beneficial effects of any of the above technical solutions, which will not be elaborated here.

[0022] Specifically, the redundancy control method includes:

[0023] Obtain the real-time status information of the main processing module and the standby processing module;

[0024] Determine the current operating status of the main processing module and the standby processing module according to the real-time status information;

[0025] Generate a first decision result according to the current operating status;

[0026] Based on the first decision result, switch to output the external signals of the main processing module or the standby processing module.

[0027] In the above technical solution, first, obtain the real-time status information of the main processing module and the standby processing module; then, evaluate the current operating status of the main processing module and the standby processing module according to the real-time status information to determine whether the main processing module and the standby processing module are in a good operating state; based on the current operating status, generate a decision result, that is, whether a primary-standby switch is required. If the main processing module fails or operates poorly while the standby processing module is in a healthy state, switch to output the external signals of the standby processing module. If the main processing module operates well, switch to output the external signals of the main processing module. In this way, by obtaining the real-time status information of the main processing module and the standby processing module, the optimal processing module is dynamically selected to execute the control task, which has good timeliness and higher reliability.

[0028] In some technical solutions, optionally, a first decision result is generated according to the current operating state, specifically including: when the current operating state of the main processing module is normal, a first sub-decision result is generated; when the current operating state of the main processing module is abnormal and the current operating state of the standby processing module is normal, a second sub-decision result is generated.

[0029] Among them, based on the first decision result, the external signal of the main processing module or the standby processing module is switched and output, specifically including: based on the first sub-decision result, the external signal of the main processing module is switched and output; based on the second sub-decision result, the external signal of the standby processing module is switched and output.

[0030] In some technical solutions, optionally, after obtaining the real-time status information of the main processing module and the standby processing module, it further includes:

[0031] Judge whether the real-time status information has been collected;

[0032] When the real-time status information has not been collected, a second decision result is generated;

[0033] Based on the second decision result, the external signal of the main processing module is switched and output.

[0034] In some technical solutions, optionally, the real-time status information includes at least one of working current, working voltage, working temperature, memory occupancy, CPU main frequency, and CPU occupancy.

[0035] According to the third aspect of the present application, the present application also proposes a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the redundancy control method proposed in the second aspect of the present application are implemented. Thus, the readable storage medium has all the beneficial effects of any of the above technical solutions and will not be elaborated here.

[0036] According to the fourth aspect of the present application, the present application also proposes an electronic information system, including: the redundancy control device proposed in the first aspect of the present application; and / or the readable storage medium proposed in the third aspect of the present application. Thus, the electronic system has all the beneficial effects of any of the above technical solutions and will not be elaborated here.

[0037] The additional aspects and advantages of the present invention will become obvious in the following description part, or be understood through the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The above and / or additional aspects and advantages of the present invention will become obvious and easy to understand from the description of the embodiments in conjunction with the following drawings, where:

[0039] Figure 1Shows the structural schematic diagram of the redundancy control device in the embodiment of the present application;

[0040] Figure 2 Shows the structural schematic diagram of the first real-time monitoring circuit in the embodiment of the present application;

[0041] Figure 3 Shows the circuit schematic diagram of the Ethernet switching circuit in the embodiment of the present application;

[0042] Figure 4 Shows the circuit schematic diagram of the USB switching circuit in the embodiment of the present application;

[0043] Figure 5 Shows the circuit schematic diagram of the VGA switching circuit in the embodiment of the present application;

[0044] Figure 6 Shows one of the flow schematic diagrams of the redundancy control method in the embodiment of the present application;

[0045] Figure 7 Shows another flow schematic diagram of the redundancy control method in the embodiment of the present application;

[0046] Figure 8 Shows yet another flow schematic diagram of the redundancy control method in the embodiment of the present application;

[0047] Figure 9 Shows the structural schematic diagram of the electronic information system in the embodiment of the present application.

[0048] Among them, Figures 1 to 5 、 Figure 9 The corresponding relationship between the reference numerals and the component names in the figures is as follows:

[0049] 10 Redundancy control device; 100 Main processing module; 110 First computer unit; 120 First real-time monitoring circuit; 121 MCU processor; 122 Service monitoring unit; 1221 Voltage monitoring unit; 1222 Current monitoring unit; 1223 Temperature sensor; 130 External signal; 140 Self-check unit; 200 Backup processing module; 300 Arbitration module; 310 Second computer unit; 311 Ethernet switching circuit; 312 USB switching circuit; 313 VGA switching circuit; 320 Second real-time monitoring circuit; 400 Power supply module; 410 Third real-time monitoring circuit;

[0050] 20 Electronic information system. Detailed implementation manners

[0051] In order to more clearly understand the above-mentioned objects, features and advantages of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that, without conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0052] In the following description, many specific details are set forth in order to fully understand the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the limitations of the specific embodiments disclosed below.

[0053] The following Figures 1 to 9 will, through specific embodiments and their application scenarios, elaborate in detail on the redundancy control device, method, medium and system provided by the embodiments of the present application.

[0054] Referring Figure 1 to, in the first aspect of the present application, some embodiments of the present application provide a redundancy control device 10, including: a main processing module 100, a standby processing module 200, an arbitration module 300 and a power supply module 400.

[0055] Specifically, the main processing module 100 and the standby processing module 200 are mainly responsible for executing control tasks. Their structures and functions are the same, and they form a dual-machine backup for redundant switching in case of anomalies. Under normal conditions, the main processing module 100 is powered on and working, while the standby processing module 200 is not working. When the main processing module 100 has an anomaly (failure or poor operation), it switches to the working mode of the standby processing module 200; and if the standby processing module 200 has an anomaly (failure or poor operation), it switches to the working mode of the main processing module 100. Among them, both the main processing module 100 and the standby processing module 200 include a first computer unit 110 and a first real-time monitoring circuit 120. The first computer unit 110 is used to execute control tasks, and the first real-time monitoring circuit 120 is used to monitor the real-time status information of the first computer unit 110.

[0056] The arbitration module 300 includes a second computer unit 310 and a second real-time monitoring circuit 320. The second real-time monitoring circuit 320 is connected to the first real-time monitoring circuit, and is used to collect the real-time status information of the main processing module 100 and the standby processing module, judge the current operating status of the main processing module 100 and the standby processing module 200 according to the real-time status information, and generate a first decision result according to the current operating status to instruct the second computer unit 310 to switch and output the external signal 130 of the main processing module 100 or the standby processing module 200. In this way, through the real-time status information of the main processing module 100 and the standby processing module 200, the optimal processing module is dynamically selected to execute the control task. Compared with the manual switching method in the related art, the timeliness is good and the reliability is higher.

[0057] The power supply module 400 is configured for two independent power supplies. One is used to supply power to the first computer unit 110 and the second computer unit 310 (i.e., supply power to the computer), and the other is used to supply power to the first real-time monitoring circuit 120 and the second real-time monitoring circuit 320 (i.e., auxiliary power supply). With this design, the power supply of the real-time monitoring circuit is independent of the computer unit, and it can maintain the working state normally when the computer unit is not powered on; when the computer unit is powered on and working, it monitors the working conditions of the main processing module 100 and the standby processing module 200 by collecting the real-time status information of the computer unit.

[0058] Compared with the related art that monitors the status of the main and standby computers in the form of Ethernet heartbeat messages, it is necessary for the computer system to start to monitor the computer status, and the Ethernet UDP protocol does not guarantee the order and accurate arrival of data at the receiving party, and there may be a situation of losing data packets. In this case, there will be a problem of incorrect switching. The redundant control device 10 provided by the embodiment of the present application can maintain the working state normally even when the computer unit is not working, can quickly switch between the main and standby computers, has good timeliness, and at the same time, can avoid the problem of incorrect switching, so as to realize reliable monitoring of the working state of the computer module.

[0059] Refer to Figure 1 and Figure 2 Specifically, the external signal 130 includes at least one of a network signal, a USB (Universal Serial Bus) signal, and a VGA (Video Graphics Array) signal. It can be understood that correspondingly, the switching circuit of the second computer unit 310 has at least one of an Ethernet switching circuit 311, a USB switching circuit 312, and a VGA switching circuit 313. Among them, the VGA signal includes an RGB (Red Green Blue) video signal, a horizontal and vertical synchronization signal, and an EDID (Extended Display Identification Data) serial signal.

[0060] The Ethernet switching circuit 311, the USB switching circuit 312, and the VGA switching circuit 313 will be specifically described below. Wherein, CPU1 and CPU2 respectively represent the main processing module 100 and the standby processing module 200. Refer to Figure 3 When receiving the switching control signal, the Ethernet switching circuit 311 switches and outputs the 1000M network of CPU1 or CPU2. Refer to Figure 4, when the USB switching circuit 312 receives the switching control signal, it switches to output the USB1 signal and USB2 signal of CPU1 or CPU2, and outputs them after being enhanced by the USB signal enhancer and protected by ESD (Electrostatic Discharge). Refer to Figure 5 , when the VGA switching circuit 313 receives the switching control signal, it switches to output the VGA signal of CPU1 or CPU2, and outputs it after being enhanced by the VGA signal enhancer and protected by ESD.

[0061] The power supply module 400 supplies power to the first real-time monitoring circuit 120 and the second real-time monitoring circuit 320 in an auxiliary power supply mode using an AUX (Auxiliary) interface. This method has flexibility and convenience and can meet the power requirements of the real-time monitoring circuit.

[0062] In the above embodiment, when the current operating state of the main processing module 100 is normal, the second real-time monitoring circuit 320 generates a first sub-decision result to instruct the second computer unit 310 to switch and output the external signal 130 of the main processing module. When the current operating state of the main processing module 100 is abnormal and the operating state of the standby processing module 200 is normal, the second real-time monitoring circuit 320 generates a second sub-decision result to instruct the second computer unit 310 to switch and output the external signal 130 of the standby processing module 200.

[0063] In some embodiments, the second real-time monitoring circuit 320 is further configured to determine whether the real-time status information has been collected. If the real-time status information has not been collected, it generates a second decision result to instruct the second computer unit 310 to switch and output the external signal 130 of the main processing module 100.

[0064] In actual use, when the real-time status information of the main processing module 100 and the standby processing module 200 is incompletely collected, the main processing module 100 is selected to execute the control task. In this way, unnecessary switching can be reduced, thereby avoiding system instability that may be caused by frequent switching, and helping to improve the stability and reliability of the redundant control device 10.

[0065] In the above embodiment, when the arbitration result generated by the second real-time monitoring circuit 320 is the second decision result or the first sub-decision result, the network signal, USB signal, and VGA signal of the main processing module 100 are selected for external output; when the arbitration result generated by the second real-time monitoring circuit 320 is the second sub-decision result, the network signal, USB signal, and VGA signal of the standby processing module 200 are selected for external output.

[0066] In some embodiments, the first real-time monitoring circuit 120 includes an MCU (Microcontroller Unit) processor 121 and a service monitoring unit 122. Specifically, the service monitoring unit 122 includes a voltage monitoring unit 1221, a current monitoring unit 1222, and a temperature sensor 1223 to respectively monitor the operating voltage, operating current, and operating temperature, and send the operating voltage, operating current, and operating temperature to the MCU processor 121.

[0067] In actual use, the operating voltage, operating current, and operating temperature are key state parameters of the main processing module 100 and the standby processing module 200, and are crucial for evaluating the health status and performance of the processing module. Therefore, in the above embodiments, the service monitoring unit 122 respectively monitors the operating voltage, operating current, and operating temperature in the main processing module 100 and the standby processing module 200, providing key real-time data support for the second real-time monitoring circuit 320 to judge the operating states of the main processing module 100 and the standby processing module 200, thereby helping to improve the stability and reliability of the entire device.

[0068] In the above embodiments, by dividing the voltage of the computer power supply, the computer power supply voltage is collected to monitor the power supply voltage information; the MCU processor 121 controls the hot-swap manager through the I2C (Inter-Integrated Circuit) interface, controls the computer power supply switch of the power supply module 400, and various low-level power supplies required by the computer unit are generated by the power supply conversion circuit. A working voltage signal of the working current information is generated through the current sensor in the power supply conversion circuit, and the working current information monitoring is completed by the A / D (Analog-to-Digital Conversion) acquisition circuit of the MCU processor 121; the MCU processor also connects to the temperature sensors of each module through the I2C interface to collect the temperature information of the modules.

[0069] It can be understood that in actual use, the service monitoring unit 122 can also flexibly select at least one of the voltage monitoring unit 1221, the current monitoring unit 1222, and the temperature sensor 1223 as needed. This embodiment is not limited thereto.

[0070] In some embodiments, the main processing module 100 and the standby processing module 200 further include a self-check unit 140 (CPU collection) for collecting the self-check status information of the first computer unit 110 and reporting the self-check status information to the MCU processor 121. Specifically, the self-check status information includes at least one of the memory occupancy rate, the CPU (Central Processing Unit) main frequency, and the CPU occupancy rate.

[0071] In actual use, the memory occupancy rate reflects the usage of the memory of a computer unit, which helps to evaluate the memory pressure of the computer unit. The CPU main frequency reflects the processing ability of the computer unit, and the CPU occupancy rate reflects the resource utilization situation, which helps to discover whether there is an overload problem. These three are crucial for evaluating the health status and performance of the processing module. Therefore, in the above embodiments, the self-check unit 140 collects at least one of the memory occupancy rate, CPU main frequency, and CPU occupancy rate of the first computer unit 110, providing key real-time data support for the second real-time monitoring circuit 320 to judge the operating states of the main processing module 100 and the standby processing module 200, thereby helping to improve the stability and reliability of the entire device.

[0072] In the above embodiments, the self-check unit 140 sends the self-check status information to the MCU processor 121 through a UART (Universal Asynchronous Receiver / Transmitter) interface.

[0073] In some embodiments, a third real-time monitoring circuit 410 may also be provided in the power supply module 400 to achieve real-time monitoring of the working current, working voltage, and working temperature, thereby ensuring the stability and safety of the entire device.

[0074] In some embodiments, the main processing module 100, the standby processing module 200, the arbitration module 300, and the power supply module 400 are interconnected through a serial bus. With this design, the second real-time monitoring circuit 320 can collect the real-time status of all computer units, and thus judge the working states of the main processing module 100 and the standby processing module 200 through the second real-time monitoring circuit 320 for the switching management of the main processing module 100 and the standby processing module 200. At the same time, the serial bus can also improve the efficiency and reliability of data transmission, thereby being able to collect the status information of all computer units in real time, which helps to improve the timeliness and accuracy of information. Exemplarily, the serial bus is selected as a high-speed serial bus, so that the data transmission speed can be further increased, thereby helping to improve the timeliness.

[0075] According to the second aspect of the present application, in some embodiments, the present application also provides a redundancy control method, which is applied to the redundancy control device 10 provided in the first aspect of the present application. Thus, the redundancy control method has all the beneficial effects of any of the above embodiments.

[0076] Refer to Figure 6 , specifically, the redundancy control method includes the following steps:

[0077] S100, obtain the real-time status information of the main processing module and the standby processing module;

[0078] S102. Determine the current operating status of the primary processing module and the standby processing module according to the real-time status information;

[0079] S104. Generate a first decision result according to the current operating status;

[0080] S106. Based on the first decision result, switch to output the external signal of the primary processing module or the standby processing module.

[0081] In the above embodiment, first, obtain the real-time status information of the primary processing module and the standby processing module; then, evaluate the current operating status of the primary processing module and the standby processing module according to the real-time status information to determine whether the primary processing module and the standby processing module are in a good operating state; based on the current operating status, generate a decision result, that is, whether primary-standby switching is required. If the primary processing module fails or operates poorly while the standby processing module is in a healthy state, switch to output the external signal of the standby processing module. If the primary processing module operates well, switch to output the external signal of the primary processing module. In this way, by obtaining the real-time status information of the primary processing module and the standby processing module, the optimal processing module is dynamically selected to execute the control task, which has good timeliness and higher reliability.

[0082] Specifically, the real-time status information includes at least one of operating current, operating voltage, operating temperature, memory occupancy, CPU main frequency, and CPU occupancy. In actual use, the operating voltage, operating current, and operating temperature are the key status parameters of the primary processing module and the standby processing module, which are crucial for evaluating the health status and performance of the processing module; while the memory occupancy reflects the usage of the computer unit's memory, which helps to evaluate the memory pressure of the computer unit, and the CPU main frequency reflects the processing ability of the computer unit, and the CPU occupancy reflects the resource utilization situation, which helps to detect whether there is an overload problem. These status information provide key real-time data support for judging the operating status of the primary processing module and the standby processing module, thus helping to improve the stability and reliability of the entire device.

[0083] The external signal includes at least one of network signal, USB signal, and VGA signal.

[0084] In the above embodiment, generating the first decision result according to the current operating status specifically includes: generating a first sub-decision result when the current operating status of the primary processing module is normal; generating a second sub-decision result when the current operating status of the primary processing module is abnormal and the current operating status of the standby processing module is normal.

[0085] In the above embodiments, based on the first decision result, switching and outputting the external signals of the main processing module and the standby processing module specifically includes: based on the first sub-decision result, switching and outputting the external signals of the main processing module; based on the second sub-decision result, switching and outputting the external signals of the standby processing module.

[0086] Referring to Figure 7 , in some embodiments, after obtaining the actual status information of the main processing module and the standby processing module, it further includes:

[0087] S200, determining whether the real-time status information has been collected;

[0088] S202, generating a second decision result when the status information has not been collected completely;

[0089] S204, based on the second decision result, switching and outputting the external signals of the main processing module.

[0090] During actual use, when the real-time status information collection of the main processing module and the backup processing module is incomplete, the main processing module is selected to execute the control task. In this way, unnecessary switching can be reduced, thereby avoiding system instability that may be caused by frequent switching, and helping to improve the stability and reliability of the redundant control device.

[0091] Referring to Figure 8 , in some embodiments, the redundant control method includes the following steps:

[0092] S300, powering on the device.

[0093] S302, status collection.

[0094] S304, determining whether the collection is completed.

[0095] If yes, enter S306; if no, the decision result is 0: the second decision result.

[0096] S306, arbitration decision;

[0097] The decision result is 1: the first sub-decision result; or the decision result is 2: the second sub-decision result.

[0098] S308, performing switching;

[0099] In the case of 0 / 1, the main processing module outputs; in the case of 2, the standby processing module outputs.

[0100] S310, external output.

[0101] According to the third aspect of the present application, the present application further provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the redundancy control method provided in the second aspect of the present application are implemented. Thus, it has all the beneficial effects of any of the above embodiments, which will not be elaborated here.

[0102] Specifically, the readable storage medium includes a computer-readable storage medium, such as an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the above devices, but not limited thereto. A non-exhaustive list of more specific examples of computer storage media includes: portable computer floppy disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), static random access memory (SRAM), portable compact disc read-only memory (CD-ROM), digital versatile disc (DVD), memory cards, floppy disks, encoding mechanical devices (such as punched cards or grooves with raised structures recording instructions), and any suitable combination of the above devices. The computer storage media used herein should not be construed as a transmission signal itself, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through waveguides or other transmission media, or electrical signals transmitted through wires, etc.

[0103] Referring to Figure 9 , according to the fourth aspect of the present application, the present application further provides an electronic information system 20, including the redundancy control device 10 provided in the first aspect of the present application, and / or the readable storage medium proposed in the third aspect of the present application. Thus, the electronic information system has all the beneficial effects of any of the above embodiments, which will not be elaborated here.

[0104] In summary, compared with the related art, the present application has the following beneficial effects:

[0105] (1) It can collect the working status of computer units in real time.

[0106] (2) It avoids the non-timeliness of manual switching and the uncertainty existing in Ethernet transmission, can ensure reliable monitoring of the working status of computer units, and quickly switch between the primary and standby processing modules.

[0107] (3) The real-time status monitoring method under the standard architecture is not only applicable to dual-machine redundant backup, but can be extended to multi-machine redundancy and the status monitoring and management of multi-computer systems.

[0108] It should be clear that in the claims, the specification and the accompanying drawings of the present invention, the term "a plurality of" means two or more, unless otherwise clearly defined. The orientation or positional relationship indicated by terms such as "upper", "lower", etc. is based on the orientation or positional relationship shown in the accompanying drawings. This is only for more conveniently describing the present invention and making the description process simpler, rather than indicating or implying that the device or element referred to must have the specific orientation described, be constructed and operated in the specific orientation. Therefore, these descriptions should not be construed as limitations on the present invention; terms such as "connection", "installation", "fixation", etc. should all be understood in a broad sense. For example, "connection" can be a fixed connection between multiple objects, a detachable connection between multiple objects, or an integral connection; it can be a direct connection between multiple objects, or an indirect connection between multiple objects through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances of the above data.

[0109] In the claims, the specification and the accompanying drawings of the present invention, the description of terms such as "one embodiment", "some embodiments", "specific embodiments", etc. means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In the claims, the specification and the accompanying drawings of the present invention, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in a suitable manner in any one or more embodiments or examples.

[0110] The above are only the preferred embodiments of the present invention and are not used to limit the present invention. For those skilled in the art, the present invention can have various changes and modifications. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. A redundant control device, characterized in that: include: A main processing module (100) comprises a first computer unit (110) and a first real-time monitoring circuit (120); the first computer unit (110) is used to execute a control task, and the first real-time monitoring circuit (120) is used to monitor real-time status information of the first computer unit (110); The backup processing module (200) has the same function and structure as the main processing module (100), and forms a dual-machine backup, and performs redundancy switching in abnormal situations; An arbitration module (300) comprises a second computer unit (310) and a second real-time monitoring circuit (320), wherein the second real-time monitoring circuit (320) is connected to the first real-time monitoring circuit (120) and is used to collect real-time status information of the main processing module (100) and the standby processing module (200), determine the current operating status of the main processing module (100) and the standby processing module (200) according to the real-time status information, and generate a first decision result according to the current operating status to instruct the second computer unit (310) to switch and output an external signal (130) of the main processing module (100) or the standby processing module (200); The power supply module (400) is configured as two independent power supplies, one of which is used to power the first computer unit (110) and the second computer unit (310), and the other is used to power the first real-time monitoring circuit (120) and the second real-time monitoring circuit (320).

2. The redundant control device according to claim 1, characterized in that: When the main processing module (100) is currently in a normal operating state, the second real-time monitoring circuit (320) generates a first sub-decision result to instruct the second computer unit (310) to switch and output an external signal (130) of the main processing module (100); When the current operating state of the main processing module (100) is abnormal and the current operating state of the standby processing module (200) is normal, the second real-time monitoring circuit (320) generates a second sub-decision result to instruct the second computer unit (310) to switch and output the external signal of the standby processing module (200).

3. The redundant control device according to claim 1, characterized in that: The second real-time monitoring circuit (320) is also used to determine whether the real-time status information has been collected. If the real-time status information has not been collected, a second decision result is generated to instruct the second computer unit (310) to switch and output the external signal (130) of the main processing module (100).

4. The redundant control device according to any one of claims 1 to 3, characterized in that: The first real-time monitoring circuit (120) comprises: an MCU processor (121) and a service monitoring unit (122); Wherein, the service monitoring unit (122) comprises: A voltage monitoring unit (1221), used for monitoring the operating voltage and sending the operating voltage to the MCU processor (121); and / or a current monitoring unit (1222), used for monitoring the operating current and sending the operating current to the MCU processor (121); and / or The temperature sensor (1223) is used to monitor the operating temperature and send the operating temperature to the MCU processor (121).

5. The redundant control device according to claim 4, characterized in that: The main processing module (100) and the standby processing module (200) further include a self-test unit (140); the self-test unit (140) is used to collect self-test status information of the first computer unit (110) and report the self-test status information to the MCU processor (121); the self-test status information includes at least one of memory occupancy rate, CPU main frequency and CPU occupancy rate.

6. The redundant control device according to claim 5, characterized in that: At least the main processing module (100), the standby processing module (200) and the arbitration module (300) are interconnected via a serial bus.

7. The redundant control device according to any one of claims 1 to 3, characterized in that: The external signal (130) includes at least one of a network signal, a USB signal and a VGA signal.

8. A redundancy control method, characterized in that: The redundant control method is applied to a redundant control device, wherein the redundant control device includes a main processing module and a backup processing module; wherein the redundant control method includes: Acquire real-time status information of the main processing module and the standby processing module; Determine the current operating status of the main processing module and the standby processing module according to the real-time status information; Generate a first decision result according to the current operating state; Based on the first decision result, the external signal of the main processing module or the standby processing module is switched to be output.

9. The redundancy control method according to claim 8, characterized in that: Generating a first decision result according to the current running state specifically includes: When the main processing module is currently operating normally, generating a first sub-decision result; When the current operating state of the main processing module is abnormal and the current operating state of the standby processing module is normal, generating a second sub-decision result; Wherein, based on the first decision result, switching the output of the external signal of the main processing module or the standby processing module specifically includes: Based on the first sub-decision result, switching the external signal of the main processing module; Based on the second sub-decision result, switch to output the external signal of the standby processing module.

10. The redundancy control method according to claim 8, characterized in that: After acquiring the real-time status information of the main processing module and the standby processing module, the method further includes: Determining whether the real-time status information is collected; If the real-time status information is not collected, generating a second decision result; Based on the second decision result, the external signal of the main processing module is switched to be output.

11. The redundancy control method according to any one of claims 8 to 10, characterized in that: The real-time status information includes at least one of an operating current, an operating voltage, an operating temperature, a memory occupancy rate, a CPU main frequency, and a CPU occupancy rate.

12. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the redundancy control method according to any one of claims 8 to 11 are implemented.

13. An electronic information system, characterized in that: include: The redundant control device according to any one of claims 1 to 7; and / or The readable storage medium as claimed in claim 12.

Images