FTU main control system overheating protection and fault-tolerant operation method based on double chips

Abstract

The invention discloses an FTU main control system overheating protection and fault-tolerant operation method based on double chips. The method comprises the steps that S1, a main chip and an auxiliary chip complete system initialization; key area temperature, dynamic power consumption and program processing response time of the main chip are collected; s2, on the basis of the parameters collected in the step S1, comparing the parameters with corresponding preset thresholds, and carrying out grading judgment on the running state of the main chip according to a comparison result; s3, the control right is transferred from the main chip to the auxiliary chip; s4, after the main chip gives out the control right, entering a forced cooling mode; the auxiliary chip continuously monitors the state of the main chip, and when it is detected that the temperature, the power consumption and the program processing response time of the key area are recovered to a safety threshold range within a preset period, a control right back-switching operation is triggered; and S5, after the control right is switched to the main chip, reporting an event and updating a state database. The power supply reliability and safety of the power grid can be ensured.

Description

TECHNICAL FIELD

[0001] The present application mainly relates to the technical field of power equipment detection and repair, and particularly relates to a FTU master control system overheat protection and fault-tolerant operation method based on double chips. BACKGROUND

[0002] The automation switch terminal (FTU) is a key secondary equipment for improving the power supply reliability of 10kV high-voltage lines, which can greatly reduce the power failure range of the line. The power supply reliability and stability of the distribution network are directly determined by its master control system. However, the existing FTU master control system generally uses a single-chip structure. In extreme environments such as high-temperature weather and strong light exposure, the chip is prone to overheating when running for a long time or operating under high load. The internal working temperature may exceed the design threshold, resulting in a decrease in the operating speed of the master control system, logic misjudgment, and even a serious consequence of system downtime. The failure of the master control system will cause the FTU to lose the fault detection and control function, delay fault isolation and recovery, increase the risk of large-area power failure, and reduce the power supply reliability of the distribution network.

[0003] The existing patent number CN105630732B discloses a hot switching method of a dual-mode redundant microprocessor, including the following steps: establishing a dual-mode redundant processor decision logic, respectively monitoring the instruction state machine, address access, data flow processing and processor state, and evaluating the processor state; the second processor stays in an idle state when reset, and the first processor sequentially executes the instruction content in the memory until an error occurs in the first processor. At this time, the bus switching logic cuts off the data path of the first processor and hands it over to the second processor, and sends a switching interrupt request to the second processor; the second processor uses the data in the shared data memory to restore the execution state of the first processor and continue to execute the instructions, thereby realizing hot switching; and the problem of system crash caused by single processor core failure is solved.

[0004] However, this method is only a protection method for the processor, and the monitoring and switching mechanism is mainly for processor logic errors, and uses a shared data memory for data synchronization. However, the existing FTU lacks a dynamic response mechanism based on the classification of external environmental temperature, and cannot provide overheat protection for the main chip according to the external environmental temperature and working temperature. It lacks real-time monitoring in multiple dimensions, the response time to faults is not timely enough, and it cannot prevent in time. The traditional FTU cannot cope with the performance degradation, downtime and other failures caused by high external environmental temperature and chip self-heating damage, lacks the overheat protection capability and millisecond-level precise switching capability required in extreme environments, and greatly increases the safety risk. SUMMARY

[0005] In view of the technical problems existing in the prior art, the application provides a double-chip-based FTU master control system overheat protection and fault-tolerant operation method for ensuring power grid power supply reliability and safety.

[0006] To solve the above technical problems, the technical scheme provided by the application is: The double-chip-based FTU master control system overheat protection and fault-tolerant operation method comprises the following steps: S1. The main chip and the auxiliary chip complete system initialization, synchronously share running parameters and state flag bits, collect the external environment temperature in real time, and collect the key area temperature, dynamic power consumption and program processing response time of the main chip; S2. Based on the main chip area temperature, chip dynamic power consumption and program processing response time collected in S1, comparison is respectively made with the corresponding preset threshold, and the running state of the main chip is judged by stages according to the comparison result: When a certain data exceeds the corresponding first safety threshold range but does not exceed the forced cooling threshold, the system automatically generates a preliminary cooling strategy and sends a warning message; When a certain data continuously changes and exceeds the forced cooling threshold, the system self-recovery mechanism is immediately triggered, and step S3 is entered; S3. The system control right is transferred from the main chip to the auxiliary chip within milliseconds through a hardware switching circuit, and the auxiliary chip takes over the unfinished task of the main chip based on the synchronized state data in the shared RAM; S4. After the main chip gives up the control right, the forced cooling mode is entered, the unnecessary peripherals are closed and the core frequency is limited; The auxiliary chip continuously monitors the state of the main chip, and when it is detected that the key area temperature, power consumption and program processing response time are restored to the safety threshold range within the preset period, the control right back switching operation is triggered; S5. After the control right is switched to the main chip, the event is reported and the state database is updated.

[0007] Preferably, in step S1, after collecting the key area temperature, dynamic power consumption and program processing response time of the main chip, the Kalman filtering algorithm is used for real-time optimal estimation to avoid noise interference.

[0008] Preferably, in step S2, each corresponding preset threshold is dynamically calculated based on the external environment temperature collected in S1.

[0009] Preferably, in step S3, the specific steps of taking over the main chip by the auxiliary chip are: The control right is switched within milliseconds through a multiplexing bus; The main chip and the auxiliary chip synchronize state data through a shared RAM; The main chip and the secondary chip perform mutual status checks through preset flags in the program; when an abnormality is detected continuously within a preset period, the secondary chip is immediately triggered to take over the operation.

[0010] Preferably, the flag bit specifically includes: The program response flag is periodically toggled by the main chip to indicate whether the main chip's program execution time is normal. The temperature status flag is updated by the main chip based on real-time temperature monitoring results and is used to indicate whether the temperature exceeds the safety threshold. The real-time power consumption flag is used to identify the current system power consumption and monitor whether the system is overheating.

[0011] Preferably, in step S3, if the secondary chip fails to take over, the global hardware watchdog reset system is activated to perform a secondary reset, and the secondary chip is reset by software respectively. If the primary software reset fails, the global hardware reset is activated to ensure that the backup chip successfully takes over control and to ensure that the main control system operates normally.

[0012] Preferably, the fault context is saved during reset: program counter PC value, stack pointer SP, temperature peak record, and abnormal value of status flag bit.

[0013] The present invention also discloses a computer program product, comprising a computer program that, when executed by a processor, performs the steps of the method described above.

[0014] The present invention further discloses a computer-readable storage medium having a computer program stored thereon, the computer program executing the steps of the method described above when run by a processor.

[0015] The present invention also discloses an overheat protection and fault-tolerant operation system for an FTU master control system based on a dual-chip, comprising a memory and a processor connected to each other, wherein the memory stores a computer program, and the computer program executes the steps of the method described above when run by the processor.

[0016] Compared with the prior art, the advantages of the present invention are as follows: This invention dynamically calculates the temperature safety threshold under high-temperature conditions based on the ambient temperature. It collects current ambient temperature data using a high-precision temperature sensor and then determines whether the main chip's temperature exceeds the safety threshold, thereby enabling the switching between the main and secondary chips. When the main chip's temperature exceeds the safety threshold, it is forcibly cooled, and the secondary chip temporarily takes over the main chip's functions. When the main chip's temperature is detected to be within the safety threshold, the secondary chip switches back to the main chip. This real-time monitoring of chip temperature based on ambient temperature and flexible switching allows the main control system to operate normally even under extreme high-temperature and direct sunlight conditions, ensuring the reliability and safety of the power grid supply, extending the main chip's lifespan, and significantly reducing the time and cost of manual maintenance.

[0017] The main control system using this method employs a multi-sensor data fusion algorithm to comprehensively improve the real-time acquisition, monitoring, and evaluation of multi-dimensional data such as temperature, dynamic power consumption, and program processing. It uses a Kalman filter algorithm to remove noise interference and monitors the preset status flags of the main chip, ensuring the accuracy of the acquired data and the precision of the monitoring, and greatly improving the accuracy of anomaly identification.

[0018] The system performs tiered judgments based on preset safety thresholds and flag status in the external environment: if the data exceeds the first-level safety threshold, the system automatically generates a preliminary cooling strategy and sends an early warning message; when the data continues to change and exceeds the forced cooling threshold, the system's self-repair mechanism is immediately triggered, transferring control to the secondary chip via hardware switching. If the primary / secondary chip switching fails, a global hardware watchdog performs a first-level software reset of the secondary chip and a second-level global hardware reset, enabling rapid restoration of system functionality without power interruption and minimizing the impact on the power distribution network. Attached Figure Description

[0019] Figure 1 This is a flowchart illustrating the operation method of the present invention in a specific application.

[0020] Figure 2 The flowchart shows the operation method of the present invention in an embodiment.

[0021] Figure 3 This is a flowchart illustrating the switching process between the master and slave chips in this invention. Detailed Implementation

[0022] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0023] like Figure 1 and Figure 2 As shown in the figure, the overheat protection and fault-tolerant operation method of the FTU master control system based on dual chips provided in this embodiment of the invention includes the following steps: S1. System Initialization and Data Acquisition The main chip and the secondary chip system are initialized synchronously, sharing operating parameters and status flags. The system collects the ambient temperature in real time using high-precision sensors, as well as temperature parameters, dynamic power consumption, and program processing response time for various regions on the main chip. Based on the collected multi-dimensional data, a Kalman filter algorithm is used to perform real-time optimal estimation of the temperature and power consumption samples to avoid noise interference. In addition, the temperature parameters for each region on the chip also include the wafer junction temperature T. j Thermal resistance R ja Temperature rise rate and local hot spot temperature in the power supply pin area; S2. Multi-level threshold judgment and early warning Based on the temperature of each area on the main chip, the chip's dynamic power consumption, and the program processing response time collected by S1, the data are compared with their corresponding preset thresholds, and the operating status of the main chip is classified according to the comparison results: If all three monitored parameters are within the threshold range, the system is considered to be operating normally and the status database is updated. If any data item in the multidimensional data exceeds the corresponding first-level safety threshold range but does not exceed the forced cooling threshold, the system automatically generates a preliminary cooling strategy (such as limiting the main chip current to below the rated value) and sends an early warning message. When a certain data point in the multidimensional data continues to change beyond the forced cooling threshold, the system's self-healing mechanism is immediately triggered, and the process proceeds to step S3.

[0024] The multidimensional data includes chip temperature. Chip dynamic power consumption and program processing response time There are three data points in total; if any data point exceeds the forced cooling safety threshold set below, a main / secondary chip switching operation will be triggered.

[0025]

[0026]

[0027] The above The maximum response time for the program; This represents the maximum permissible temperature threshold under the current environment; 、 The above values ​​are dynamic power consumption thresholds for the chip, and are all dynamically calculated based on the ambient temperature collected by S1. Specifically, the maximum permissible temperature threshold Based on the formula, we can derive:

[0028] : The maximum permissible temperature threshold (°C) calculated dynamically; Reference temperature threshold; Real-time ambient temperature (°C); : Refer to ambient temperature; : Ambient temperature compensation coefficient.

[0029] Of course, in other embodiments, warnings can also be issued using the following parameters, specifically: Wafer junction temperature T j Is it below 105℃? Thermal resistance R ja Is it below 15℃ / W? Is the temperature rise rate less than 3℃ / min? Is the local hot spot temperature in the power supply pin area below 85℃? If any of the above parameters exceeds the safety threshold, a backup chip switching operation will be performed. Alternatively, a load-power consumption benchmark model can be established to calculate the power consumption deviation rate in real time: when it exceeds the rated power consumption by 10%, an early warning is generated; when it exceeds 25%, it is judged as a serious abnormality and a backup chip switching operation is performed.

[0030] Alternatively, you can set a rated execution time and alarm for critical tasks: if the rated execution time for a critical task exceeds 150% of the original time, an abnormal warning will be triggered.

[0031] S3. Seamless switching and takeover of secondary chip like Figure 3 As shown, the control is transferred within milliseconds through a hardware switching circuit, with the secondary chip taking over the main chip. The secondary chip takes over the unfinished tasks of the main chip based on the synchronized status data in the shared RAM. If the secondary chip fails to take over, the global hardware watchdog reset system is activated to perform a two-stage reset, and the secondary chip is reset by software. If the first-stage software reset fails, the global hardware reset is activated to ensure that the backup chip successfully takes over control and to ensure the normal operation of the main control system. The secondary chip uses the same processor as the main chip, and data synchronization between the two chips is achieved through dual-port RAM. Under normal conditions, the main chip cyclically writes its own status flags, while the secondary chip reads the main chip's operating status in real time. If the main chip malfunctions, the secondary chip detects the problem, performs a graded fault assessment, and then sends a switching command to trigger the hardware switching circuit, thereby transferring control.

[0032] S4. Main Chip Recovery Management After the main chip relinquishes control, it enters a forced cooling mode, shuts down unnecessary peripherals and power to all functional modules, limits the core frequency, and initiates cooling. The secondary chip continuously monitors the status of the main chip, and when it detects that the temperature, power consumption, and response time have recovered to a safe threshold range within a preset period, it triggers a control handover operation. S5. Fault Handling and Operations Interaction After the switchover is complete, the system reports event and status data; if self-repair fails, it saves the fault scene information, uploads precise location data, and requests manual intervention; if the repair is successful, the system updates the status database, compares the updated data with normal operating parameters, and completes the fault diagnosis. If the data is normal, the main chip continues to operate; If the data is abnormal, the abnormal parameters are recorded, a fault signal is generated at the corresponding location of the chip, and transmitted to the terminal through the built-in communication module. The terminal determines the type of anomaly, generates an anomaly report, updates the status database, sends a request for manual intervention, and waits for maintenance personnel to handle it.

[0033] Specifically, in step S3, the steps for the secondary chip to take over from the primary chip are as follows: Control is switched within milliseconds via a multiplexed bus; The main chip and the secondary chip synchronize status data by sharing RAM; The main chip and the secondary chip perform mutual status checks through preset flags in the program; when an abnormality is detected continuously within a preset period, the secondary chip is immediately triggered to take over the operation.

[0034] Specifically, the flag bits include: The program response flag is periodically toggled by the main chip to indicate whether the main chip's program execution time is normal. The temperature status flag is updated by the main chip based on real-time temperature monitoring results and is used to indicate whether the temperature exceeds the safety threshold (set according to the external environment). The real-time power consumption flag is used to identify the current system power consumption and monitor whether the system is overheating.

[0035] Specifically, in step S4, the steps for determining whether the data after the main chip has cooled down are within the safe threshold range include: Set the data safety threshold range after cooling, and collect and detect the main chip data; The main chip compares the collected data with the set data security threshold and updates the status flag bit in the shared RAM with the comparison result; The secondary chip monitors the status flags in real time to determine whether the main chip has successfully switched over and whether all data volumes have returned to normal. If the flag indicates a normal status, update the status database. If the flag bit continues to indicate an abnormality, the global hardware watchdog system will be activated for a secondary reset.

[0036] Specifically, the steps to activate the global hardware watchdog system to complete a level 2 reset are as follows: Primary secondary chip software reset: Resets the core of the secondary chip and reinitializes the peripherals; Level 2 Global Hardware Reset: Performs a global power cycle reset.

[0037] During reset, the fault context is saved: program counter (PC) value, stack pointer (SP), temperature peak record, and abnormal status flag values.

[0038] Specifically, in step S4, the control handover process after the main chip recovers involves the following steps: After taking over the tasks of the main chip, the secondary chip detects the data collected on the main chip. When the main chip data is detected to be stable within a certain period of time, it determines whether the detected data is within the preset safety threshold range. If so, the secondary chip performs the operation of switching back to the main chip, and the current task processing status of the secondary chip is synchronized to the main chip. Then, the secondary chip issues an instruction to trigger the preset switching circuit between the main and secondary chips, returning control to the main chip and completing the entire switchback operation.

[0039] This invention monitors the working data and operating status of the main chip of the main control system of an automated switch terminal, and uses a multi-dimensional data model and status flag mechanism to enable seamless switching between the main and auxiliary chips. It has multi-level safety threshold monitoring and millisecond-level response capabilities. Based on the temperature, dynamic power consumption and program response time collected from the external environment, the health status is comprehensively analyzed. When the main control system has a problem, it can self-heal and send fault information to the background.

[0040] When any amount of data collected by the main chip exceeds the set first-level safety threshold, the system automatically generates a preliminary cooling strategy and sends an early warning message. When the data continues to change and exceeds the forced cooling threshold, the main chip and slave chip are immediately switched. Control is transferred to the slave chip through hardware switching, and the slave chip temporarily takes over the tasks of the main chip.

[0041] This invention enables self-repair when the main chip of the automated switch terminal malfunctions. It can actively monitor various anomalies such as main chip overheating, system crashes, program malfunctions, and memory failures. After switching is completed, it automatically sends fault data to the backend. If the system self-repair fails, it performs a secondary reset and uploads accurate fault information to notify maintenance personnel for intervention. This greatly reduces manual maintenance time and ensures the stable and safe operation of distribution network automation functions.

[0042] This invention employs a multi-sensor data fusion algorithm to comprehensively improve the real-time acquisition and risk assessment of multi-dimensional data such as temperature, dynamic power consumption, and program processing. It uses a Kalman filter algorithm to remove noise interference, and all status information is transmitted to the backend in an encrypted manner, providing maintenance personnel with accurate decision-making basis and realizing proactive and refined operation and maintenance management of distribution network terminal equipment.

[0043] The dual-chip hot-switching system used in this invention supports stable operation over a wide temperature range of -40℃ to +105℃. The main control board has an IP67 protection rating, making it dustproof and resistant to temporary water immersion and condensation environments. It has strong adaptability to the field environment and ultimately achieves long-term stable operation of the automated switch terminal. The main control system of the automated switch terminal has self-healing capabilities when damaged in high-temperature extreme environments and can achieve fault prevention based on multi-dimensional data monitoring. This improves the power supply reliability and FTU online rate of 10kV distribution network lines, thereby improving the level of lean operation and maintenance of the terminal.

[0044] This invention enables FTU devices to autonomously repair themselves in extreme high-temperature environments after installation and maintenance equipment, significantly reducing FTU maintenance costs. For example, in a 10kV distribution network in a county in Hunan Province, the main control system maintenance time has been reduced from lengthy manual maintenance to within 30 minutes, reducing manual maintenance workload, saving maintenance time, and improving terminal equipment maintenance efficiency. The FTU maintenance equipment using this method is suitable for FTUs from various mainstream manufacturers, supports both built-in and external installation modes, and requires no modification to the original structure of the FTU device during installation.

[0045] This invention dynamically calculates the temperature safety threshold under high-temperature conditions based on the ambient temperature. It collects current ambient temperature data using a high-precision temperature sensor and then determines whether the main chip's temperature exceeds the safety threshold, thereby enabling the switching between the main and secondary chips. When the main chip's temperature exceeds the safety threshold, it is forcibly cooled, and the secondary chip temporarily takes over the main chip's functions. When the main chip's temperature is detected to be within the safety threshold, the secondary chip switches back to the main chip. This real-time monitoring of chip temperature based on ambient temperature and flexible switching allows the main control system to operate normally even under extreme high-temperature and direct sunlight conditions, ensuring the reliability and safety of the power grid supply, extending the main chip's lifespan, and significantly reducing the time and cost of manual maintenance.

[0046] The main control system using this method employs a multi-sensor data fusion algorithm to comprehensively improve the real-time acquisition, monitoring, and evaluation of multi-dimensional data such as temperature, dynamic power consumption, and program processing. It uses a Kalman filter algorithm to remove noise interference and monitors the preset status flags of the main chip, ensuring the accuracy of the acquired data and the precision of the monitoring, and greatly improving the accuracy of anomaly identification.

[0047] The system performs tiered judgments based on preset safety thresholds and flag status in the external environment: if the data exceeds the first-level safety threshold, the system automatically generates a preliminary cooling strategy and sends an early warning message; when the data continues to change and exceeds the forced cooling threshold, the system's self-repair mechanism is immediately triggered, transferring control to the secondary chip via hardware switching. If the primary / secondary chip switching fails, a global hardware watchdog performs a first-level software reset of the secondary chip and a second-level global hardware reset, enabling rapid restoration of system functionality without power interruption and minimizing the impact on the power distribution network.

[0048] Through practical applications in multiple regions, the technical benefits of this invention have been fully verified. For example, in a coastal area of ​​Guangdong, after deploying this invention, the problem of frequent failures caused by overheating of the FTU main control system under high temperature and humidity conditions was resolved. Experimental data shows that power outage time was reduced by 70%, maintenance costs were reduced by 56%, and the overall online automation rate of the distribution network was improved.

[0049] The present invention also discloses a computer program product, comprising a computer program that, when executed by a processor, performs the steps of the method described above.

[0050] The present invention further discloses a computer-readable storage medium having a computer program stored thereon, the computer program executing the steps of the method described above when run by a processor.

[0051] The present invention also discloses an overheat protection and fault-tolerant operation system for an FTU master control system based on a dual-chip, comprising a memory and a processor connected to each other, wherein the memory stores a computer program, and the computer program executes the steps of the method described above when run by the processor.

[0052] The products, media, and systems of the present invention, corresponding to the methods described above, also possess the advantages described above.

[0053] The present invention can implement all or part of the processes in the methods of the above embodiments, or it can be implemented by hardware related to computer program instructions. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by a processor, it can implement the steps of the above method embodiments. The computer program includes computer program code, which can be in the form of source code, object code, executable file, or some intermediate form. The computer-readable storage medium includes: any entity or device capable of carrying computer program code, recording media, USB flash drive, portable hard drive, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. The memory is used to store computer programs and / or modules. The processor implements various functions by running or executing the computer programs and / or modules stored in the memory, and by calling data stored in the memory. The memory may include high-speed random access memory, as well as non-volatile memory, such as hard disks, RAM, plug-in hard disks, smart media cards (SMC), secure digital (SD) cards, flash cards, at least one disk storage device, flash memory device, or other volatile solid-state storage devices.

[0054] The above are merely preferred embodiments of the present invention. The scope of protection of the present invention is not limited to the above embodiments. All technical solutions falling within the scope of the present invention's concept are within the scope of protection of the present invention. It should be noted that for those skilled in the art, any improvements and modifications made without departing from the principles of the present invention should be considered within the scope of protection of the present invention.

Claims

1. A method for overheat protection and fault-tolerant operation of a dual-chip FTU master control system, characterized in that, Including the following steps: S1. The main chip and the sub-chip complete system initialization and synchronously share operating parameters and status flags; real-time acquisition of ambient temperature, and acquisition of key area temperature, dynamic power consumption and program processing response time of the main chip; S2. Based on the temperature of each area on the main chip, the chip's dynamic power consumption, and the program processing response time collected in S1, compare them with their corresponding preset thresholds, and classify the main chip's operating status according to the comparison results: When a certain data exceeds the corresponding first-level safety threshold but does not exceed the forced cooling threshold, the system automatically generates a preliminary cooling strategy and sends an early warning message; If a certain data point continues to change beyond the forced cooling threshold, the system's self-healing mechanism will be immediately triggered, and the process will proceed to step S3. S3. The system control is transferred from the main chip to the secondary chip in milliseconds through a hardware switching circuit. The secondary chip takes over the unfinished tasks of the main chip based on the synchronized status data in the shared RAM. S4. After the main chip relinquishes control, it enters a forced cooling mode, shutting down unnecessary peripherals and limiting the core frequency; The secondary chip continuously monitors the status of the main chip. When it detects that the temperature, power consumption, and program processing response time in the critical area have returned to the safe threshold range within a preset period, it triggers a control switchback operation. S5. After control is switched to the main chip, the event is reported and the status database is updated.

2. The overheat protection and fault-tolerant operation method for a dual-chip-based FTU main control system according to claim 1, characterized in that, In step S1, after collecting the temperature, dynamic power consumption and program processing response time of the key areas of the main chip, a Kalman filter algorithm is used to perform real-time optimal estimation to avoid noise interference.

3. The overheat protection and fault-tolerant operation method for the dual-chip-based FTU main control system according to claim 1, characterized in that, In step S2, each corresponding preset threshold is dynamically calculated based on the ambient temperature collected in S1.

4. The overheat protection and fault-tolerant operation method for a dual-chip-based FTU main control system according to claim 1, 2, or 3, characterized in that, In step S3, the specific steps for the secondary chip to take over from the primary chip are as follows: Control is switched within milliseconds via a multiplexed bus; The main chip and the secondary chip synchronize status data by sharing RAM; The main chip and the secondary chip perform mutual status checks through preset flags in the program; when an abnormality is detected continuously within a preset period, the secondary chip is immediately triggered to take over the operation.

5. The overheat protection and fault-tolerant operation method for the dual-chip-based FTU main control system according to claim 4, characterized in that, The flags specifically include: The program response flag is periodically toggled by the main chip to indicate whether the main chip's program execution time is normal. The temperature status flag is updated by the main chip based on real-time temperature monitoring results and is used to indicate whether the temperature exceeds the safety threshold. The real-time power consumption flag is used to identify the current system power consumption and monitor whether the system is overheating.

6. The overheat protection and fault-tolerant operation method for a dual-chip-based FTU main control system according to claim 1, 2, or 3, characterized in that, In step S3, if the secondary chip fails to take over, the global hardware watchdog reset system is activated to perform a two-stage reset, and the secondary chip is reset by software respectively. If the first-stage software reset fails, the global hardware reset is activated to ensure that the backup chip successfully takes over control and to ensure that the main control system operates normally.

7. The overheat protection and fault-tolerant operation method for a dual-chip-based FTU main control system according to claim 6, characterized in that, During reset, the fault context is saved: program counter PC value, stack pointer SP, temperature peak record, and abnormal value of status flag bits.

8. A computer program product, comprising a computer program, characterized in that, The computer program is executed by the processor to perform the steps of the method as described in any one of claims 1-7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, The computer program, when run by a processor, performs the steps of the method as described in any one of claims 1-7.

10. A dual-chip-based FTU master control system with overheat protection and fault-tolerant operation, comprising an interconnected memory and a processor, wherein the memory stores a computer program, characterized in that... The computer program, when run by a processor, performs the steps of the method as described in any one of claims 1-7.

Images