Serial communication data uploading method and system based on dual-core DSP

By using hot standby redundancy design and SPI communication in a dual-core DSP, the problem of health management data interruption in a dual-core DSP system is solved, achieving continuity and reliability of data upload and improving the system's stability and fault tolerance.

CN122018280APending Publication Date: 2026-05-12CHINA AVIATION LIFESAVING INST
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
CHINA AVIATION LIFESAVING INST
Filing Date
2025-12-31
Publication Date
2026-05-12

AI Technical Summary

Technical Problem

Existing dual-core DSP systems suffer from a mismatch between the uniqueness of communication links and data transmission requirements, leading to interruptions in health management data and system instability, thus failing to meet the design requirements of lightweight design and high reliability.

Method used

It adopts a hot standby redundancy design with dual-core DSP, establishes a status indication signal interaction channel through SPI communication and intelligent switching, periodically monitors status evaluation parameters, realizes seamless switching between primary and backup units and data uploading, and ensures the continuity and reliability of data transmission.

Benefits of technology

It enables reliable data transmission of health management under a lightweight design, improves the system's fault tolerance and operational stability, ensures the continuity and integrity of data uploads, and supports real-time and accurate system status monitoring.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122018280A_ABST
    Figure CN122018280A_ABST
Patent Text Reader

Abstract

The invention discloses a serial communication data uploading method and system based on a dual-core DSP (Digital Signal Processor). The method comprises the following steps: establishing a state indication signal interaction channel between a first processing unit and a second processing unit; the first processing unit integrates and uploads health management data during normal work; periodically monitoring a state indication signal of the first processing unit, and generating a state evaluation parameter based on a monitoring result; analyzing the state evaluation parameters; when the state evaluation parameter indicates that the first processing unit fails, the second processing unit is switched to integrate and upload the health management data; and when the second processing unit carries out integration and uploading of the health management data, if the state evaluation parameter indicates that the first processing unit is recovered, re-switching to carry out integration and uploading of the health management data through the first processing unit. According to the invention, reliable return of health data can be realized, and the lightweight requirement and the system operation reliability are guaranteed.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of ejection rescue system control technology, and in particular to a serial communication data uploading method and system based on a dual-core DSP. Background Technology

[0002] As a core piece of equipment in the aerospace field to ensure the safety of pilots' lives, the ejection escape control system is a key control unit of the ejection escape seat. Its core mission is to collect data from the onboard inertial measurement module in real time, sense the seat's motion parameters, and automatically match the optimal ejection control mode. Through multi-modal control, it ensures the success rate of rescue under different ejection attitudes.

[0003] Under normal flight conditions, the system needs to establish real-time communication with the aircraft management computer (VMC) via the RS-422 protocol. On the one hand, it needs to complete the diagnosis of its own operating status and faults according to the aviation communication protocol. On the other hand, it needs to integrate the system's operating parameters, motion status and other information into a health management data packet and report it to the VMC. This data feedback is the only way for pilots to monitor the system's operating status in real time and for ground maintenance personnel to accurately handle faults. Its continuity and reliability directly determine the safety of flight missions and maintenance efficiency.

[0004] With the trend towards lightweight and integrated aerospace equipment, traditional multi-channel parallel redundant communication designs have been phased out due to their excessive size and weight. The industry has shifted to a fusion design scheme of "simplex communication channel + dual-core DSP architecture dual control system": communication with the VMC is achieved through a single simplex channel, while two independent control systems (dual-core DSPs) with identical functions and mutual backup are configured. The main control system receives data from the backup system, merges it, and then uploads it externally. However, while meeting the lightweight requirements, this fusion design has exposed a series of inherent defects that cannot be avoided by existing technologies: First, there is a "failure takeover gap" in simplex channels and the primary / backup architecture. Because the communication link is singular and data upload relies entirely on a single primary control system, there is a lack of an effective cross-controller redundancy takeover mechanism. Once the primary control system fails, health management data (including critical information such as system status and seat motion parameters) will be completely interrupted in transmission to the VMC. This not only forces the abortion of normal flight missions but also causes delays in ground maintenance and diagnostics due to the lack of fault information, significantly extending maintenance cycles. In extreme cases, the pilot's inability to know the true status of the system may affect emergency response decisions, directly threatening flight safety.

[0005] Secondly, there is a "compatibility conflict" between SCI communication and multi-core, multi-board integrated architecture. The SCI communication technology of the classic ejection rescue control system is only designed for point-to-point communication between single boards. However, the dual-core DSP control system under the integrated design contains multiple control boards. If SCI communication is used, an additional interface expansion module must be added. This will not only directly break the core constraint of lightweight design, causing the system weight and size to exceed the standard, but also increase the failure points of hardware interfaces, which is a fundamental contradiction with the core design goal of "lightweight + high reliability".

[0006] Third, the technical limitations of SCI communication cannot keep up with the upgrading demands for data transmission. As the requirements for the accuracy of system status monitoring increase, the amount of health management data has surged from tens of bytes to hundreds of bytes, while the inherently low transmission rate of SCI communication is insufficient to meet the real-time transmission needs of such large amounts of data. At the same time, when SCI uses high baud rate transmission in full-duplex mode, the bit error rate will increase significantly, resulting in a sharp decline in the integrity and accuracy of data transmission, which in turn leads to misjudgment of the operating status of the lifesaving system and creates potential safety hazards. Summary of the Invention

[0007] The main objective of this invention is to provide a serial communication data uploading method and system based on a dual-core DSP. Based on the hot standby redundancy of the dual-core DSP, and through SPI communication and intelligent switching, reliable health data transmission is achieved, ensuring both lightweight requirements and system operational reliability.

[0008] The technical solution adopted in this invention is: a serial communication data uploading method based on a dual-core DSP, wherein the dual-core DSP includes a first processing unit and a second processing unit with hot-standby redundancy; the method includes: Establish a status indication signal interaction channel between the first processing unit and the second processing unit; the first processing unit integrates and uploads health management data during normal operation. The status indication signal of the first processing unit is periodically monitored, and status evaluation parameters are generated based on the monitoring results; The status assessment parameters are analyzed; when the status assessment parameters indicate that the first processing unit has failed, the system switches to integrating and uploading health management data through the second processing unit; during the integration and uploading of health management data through the second processing unit, if the status assessment parameters indicate that the first processing unit has recovered, the system switches back to integrating and uploading health management data through the first processing unit.

[0009] According to the above technical solution, status indication signals are exchanged via level signals, specifically including: The interconnection I / O ports of the first processing unit are periodically switched between high and low levels to generate signals indicating the working status.

[0010] According to the above technical solution, the first processing unit and the second processing unit use the SPI communication protocol to upload health management data.

[0011] According to the above technical solution, the time interval for level switching control is less than the time interval for uploading health management data.

[0012] According to the above technical solution, the generation of state evaluation parameters includes updating the level state change count value, and the update rule is as follows: The level signal status output by the first processing unit is collected in each monitoring cycle; The current level is compared with the level of the previous period: If the two states are different, the level state change count value is incremented; If both are in the same state, the level state change count value is decremented.

[0013] According to the above technical solution, the condition under which the state evaluation parameter indicates the failure of the first processing unit is: The level state change count value is greater than the preset failure switching threshold.

[0014] According to the above technical solution, the condition under which the state evaluation parameter indicates the recovery of the first processing unit is: The level state change count value is less than or equal to a preset recovery threshold, and this state continues for at least one complete health management data upload cycle. Another aspect of the present invention provides a serial communication data upload system based on a dual-core DSP, comprising: The status indication signal interaction module is used to establish a status indication signal interaction channel between the first processing unit and the second processing unit; the first processing unit integrates and uploads health management data during normal operation. The status assessment parameter generation module is used to periodically monitor the status indication signal of the first processing unit and generate status assessment parameters based on the monitoring results. The switching control module is used to analyze the status assessment parameters; when the status assessment parameters indicate that the first processing unit has failed, it switches to integrating and uploading health management data through the second processing unit; during the integration and uploading of health management data by the second processing unit, if the status assessment parameters indicate that the first processing unit has recovered, it switches back to integrating and uploading health management data through the first processing unit.

[0015] Another aspect of the present invention provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described serial communication data upload method based on a dual-core DSP.

[0016] Another aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the above-described serial communication data upload method based on a dual-core DSP.

[0017] The beneficial effects of this invention are as follows: It constructs a dual-core DSP hot standby redundancy architecture, establishes a dedicated status indication signal interaction channel between the first and second processing units, and realizes intelligent switching between primary and backup by combining periodic monitoring to generate status evaluation parameters. With a simple architecture, it achieves seamless takeover when the primary unit fails and automatic switching back after recovery. This not only solves the problem of interruption of health management data upload caused by primary unit failure in single-channel scenarios, but also eliminates the need to add a large number of control links. While meeting the requirements of lightweight design, it ensures the continuity, integrity and reliability of data upload, effectively supports real-time and accurate monitoring of system operating status, and significantly improves the fault tolerance and operational stability of the system.

[0018] Furthermore, this invention sets the level switching interval to be smaller than the data upload interval, thereby increasing the monitoring frequency and timeliness, ensuring rapid identification of main unit failures, and avoiding data upload interruptions. Attached Figure Description

[0019] Figure 1 This is a flowchart of a serial communication data uploading method based on a dual-core DSP according to an embodiment of the present invention; Figure 2 This is a block diagram illustrating the signal transmission relationship of a serial communication data upload method based on a dual-core DSP according to an embodiment of the present invention. Figure 3 This is a flowchart of another serial communication data uploading method based on a dual-core DSP according to an embodiment of the present invention. Detailed Implementation

[0020] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0021] Example 1 This embodiment provides a serial communication data uploading method based on a dual-core DSP. The dual-core DSP adopts a hot-standby redundancy design, with the first processing unit as the main control unit and the second processing unit as the backup control unit. The two units have the same function and can back each other up. The method flow is as follows: Figure 1 As shown, the steps include: S1. Establish a status indication signal interaction channel between the first processing unit and the second processing unit; the first processing unit integrates and uploads health management data during normal operation.

[0022] Furthermore, the interaction channel enables the status communication between the main and backup units through level signals. Specifically, it includes periodically controlling the high and low level switching of the interconnection I / O port of the first processing unit to generate a signal that can intuitively reflect its working status, ensuring that the second processing unit can capture the operating status of the main unit in real time.

[0023] Furthermore, by setting the time interval for level switching control to be shorter than the time interval for health management data upload, multiple monitoring of the status of the first processing unit can be completed within one data upload cycle, thereby improving the timeliness of status identification.

[0024] Furthermore, the first and second processing units use the SPI communication protocol to upload health management data, which not only meets the large-capacity transmission requirements of health management data from tens of bytes to hundreds of bytes, but also eliminates the need for additional expansion interfaces, thus meeting the lightweight design requirements of the system and ensuring high-speed data transmission and low bit error rate.

[0025] S2. The second processing unit monitors the status indication signal of the first processing unit according to a preset cycle, and generates status evaluation parameters based on the monitoring results.

[0026] Furthermore, by comparing the level status of the current acquisition cycle with that of the previous acquisition cycle, the level status change count value is incremented when the two are different, thereby quantifying and generating the status evaluation parameters of the first processing unit, providing objective data basis for subsequent status judgment.

[0027] S3. The switching control module analyzes the generated status assessment parameters; when the status assessment parameters indicate that the first processing unit has failed, it switches to integrating and uploading health management data through the second processing unit; during the integration and uploading of health management data in the second processing unit, if the status assessment parameters indicate that the first processing unit has recovered, it switches back to integrating and uploading health management data through the first processing unit.

[0028] Furthermore, the condition for the status evaluation parameter to indicate failure is: the level state change count value is greater than the preset switching threshold, ensuring that switching is only initiated when the main unit is indeed continuously failing; the condition for the status evaluation parameter to indicate the recovery of the first processing unit is: the level state change count value is less than or equal to the preset switching threshold, and this state continues for at least one health management data upload cycle, avoiding false switching caused by temporary fluctuations.

[0029] This embodiment also provides a serial communication data uploading system based on a dual-core DSP, characterized in that it includes: The status indication signal interaction module is used to establish a dedicated signal transmission link between the first processing unit and the second processing unit. It supports the status communication between the main and backup units through level switching signals, and provides basic support for the uploading of health management data when the first processing unit is working normally.

[0030] The status evaluation parameter generation module is used to periodically monitor the status indication signal of the first processing unit through the second processing unit, and generate evaluation parameters that can accurately reflect the working status of the first processing unit based on level status comparison and counting rules.

[0031] The switching control module is used to analyze the status evaluation parameters and, based on the preset switching threshold, realize intelligent switching of data upload permissions between the primary and backup processing units: when the first processing unit fails, it switches to the second processing unit, and when the first processing unit recovers and stabilizes, it switches back, ensuring the continuity of data upload and the stability of system operation.

[0032] This embodiment also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it can accurately implement the above-mentioned serial communication data upload method based on dual-core DSP hot standby redundancy, ensuring the stable implementation of functions such as master / standby switching and data transmission.

[0033] This embodiment also provides a computer-readable storage medium storing a computer program thereon. When the computer program is executed by a processor, it can completely reproduce all the steps of the above-described data upload method, providing a reliable storage and execution carrier for the practical application of the method.

[0034] Example 2 Based on Example 1, this example provides another method for intelligent switching and uploading of serial communication data based on a dual-core DSP.

[0035] After the system powers on, it first completes the I / O port configuration of processors A and B, and then enters a loop monitoring state. If no ejection command is detected, processor A periodically toggles the I / O port level, receives health data from B, merges and uploads it. Processor B synchronously collects the level status and updates the count value. If the count value meets the switching threshold, it is determined that A has failed and switches to B to upload data. After that, B continues to monitor the level status. When the count value meets the switching threshold, it switches back to A as the main controller to upload data. All operations are carried out under the premise of "no ejection command detected".

[0036] The symbols involved are defined as follows: This refers to the I / O port level state during the nth acquisition cycle. The time interval for health management data transmission from the ejection lifesaving control system. The time interval for level toggling. This is the level toggle count value. To switch the threshold for health data feedback, Switch thresholds for health data feedback.

[0037] The ejection rescue dual-core DSP system in this method is named processor A and processor B, respectively. Processor A is the main ejection rescue control system, and processor B is the backup ejection rescue control system.

[0038] The operating environment of this method is designed as follows: First, a level signal channel is added between processor A and processor B. This channel is responsible for providing processor B with the status "processor A is not failed" through level switching. Second, an external communication switching circuit is added so that when the main control system malfunctions, the backup control system can switch over and perform external communication. Third, according to communication requirements, SPI communication is used to replace SCI communication to achieve high-speed communication and solve the problems of large data transmission volume and high timing requirements.

[0039] After the system is powered on, the first step is executed: the processor A of the ejection life-saving control system configures the interconnection I / O ports as input I / O ports and output I / O ports respectively, and then jumps to the second step.

[0040] When the ejection life-saving control system does not recognize the ejection command and does not send back the health management data packet, in the second step, processor A needs to perform three functions: periodically control the high and low level switching of the I / O port, periodically receive the health management data sent by processor B via SPI, and periodically merge the health management data packet containing the status of the primary and backup life-saving systems and send it back to the aircraft management computer. After completion, it jumps to the third step.

[0041] Similarly, when the ejection life-saving control system does not recognize the ejection command and does not send back the health management data packet, in the third step, the processor B will periodically collect the high and low level status of the I / O port, update the level switching count value and high and low level status in the current cycle, and determine whether the current count value meets the data switching threshold, and then jump to the fourth step.

[0042] In the fourth step, processor B judges the level switching count value. If the data switching threshold is not met, processor A is considered to be in normal working state, and the data switching status is not updated. The ejection life-saving control system still uses processor A as the main controller to upload health management data. If the data switching threshold is met, the data switching status is updated, and processor B uploads health management data. After completion, the process jumps to the fifth step.

[0043] In the fifth step, during the data upload of the ejection rescue system health management data with processor B as the main controller, if the level switching count value is found to meet the data switching threshold, it is considered that processor A has recovered from the failure state, the data switching state is updated and the SPI path is re-established, and the data upload of health management data with processor A as the main controller is resumed. If no count value that meets the conditions is found, the data upload of health management data continues with processor B.

[0044] The procedures performed in steps three, four, and five are as follows: Figure 3 As shown: First, determine if the data is within the health management data feedback cycle. If it is, initialize the processor B's acquisition level state, acquisition count i, level toggle count cnt1, and health management data switching threshold N. Then, processor B acquires the high and low level states of the first interconnect I / O port and compares them with the previously acquired level state. If they are inconsistent, increment the level toggle count cnt1 by 1; if they are consistent, reset cnt1 to 1. Finally, temporarily store the acquired level state.

[0045] After completing the level acquisition and statistics for the first interconnect I / O port, processor B begins acquiring the high and low level states of the second interconnect I / O port, comparing the acquired level state with the previously acquired state of that I / O port. If they are different, the level toggle count cnt2 for that I / O port is incremented by 1; if they are the same, cnt2 is reset to 1. The acquired level state of the second interconnect I / O port is then temporarily stored, and the acquisition count i is updated. Next, it is determined whether the acquisition count i is less than 6: if so, the process returns to the "acquiring the high and low level states of the second interconnect I / O port" step, repeating the acquisition, comparison, and statistics operations; if i is not less than 6, it further determines whether the level toggle counts cnt1 and cnt2 for both interconnect I / O ports are greater than or equal to 3, and then proceeds to the next step based on this result.

[0046] Once it is determined that the number of samplings i is not less than 6, first determine whether the number of level toggles cnt1 and cnt2 of the two interconnected I / O ports are both greater than or equal to 3 times: if the determination result is "yes", then enter the "level state is high" branch; if it is "no", then enter the "level state is low" branch.

[0047] After entering the corresponding level branch, it is further determined whether the current level state is consistent with the previous level state: If they match, continue to check if the switching count value n is less than the threshold N: if it is less, then execute n=n+1; if it is not less, then directly record the value of this time. If they are inconsistent, check if the switching count value n is greater than 0: if it is greater than 0, then execute n=n-1.

[0048] After completing the above counting operation, record the value, then update the switching status of health management data feedback, and the process ends.

[0049] like Figure 2 The signal transmission flow of the ejection escape control system shown is as follows: Figure 2 As shown in the diagram, this is a signal transmission relationship block diagram. Its internal flow is as follows: Processor A continuously sends high / low level switching signals to processor B through a level signal channel. Simultaneously, processors A and B bidirectionally exchange their respective health management data via an SPI communication link. When processor A is working normally, it uploads the fused health management data to the aircraft management computer (VMC) via an external communication switching circuit. When processor A fails, the external communication switching circuit responds to the switching command, connecting the communication link between processor B and the VMC, allowing processor B to upload the health management data. By implementing this method, a highly reliable redundant failure handling method is proposed based on a lightweight simplex communication channel design. Without adding excessive control links, even if simplex communication fails, the health management data feedback function can still be achieved. This allows pilots or ground maintenance personnel to accurately understand the status of the ejection escape system when the main control board fails, thus enabling them to take effective measures to ensure mission execution efficiency.

[0050] To more clearly illustrate this invention, the following further details its implementation: The ejection escape control system model designed in this invention is a dual-core DSP architecture, with processor A and processor B as the core. Both control systems can independently realize the function of uploading health management data. Under normal circumstances, processor A acts as the main control system to transmit health management data back to the aircraft management computer (VMC), and there are two interconnected general-purpose I / O ports between processor A and processor B: , , forming a set .

[0051] In summary, this invention provides a serial communication data uploading method and system based on a dual-core DSP, which can reliably transmit health data, ensuring both lightweight requirements and system operational reliability.

[0052] Depending on the implementation needs, the various steps / components described in this application can be broken down into more steps / components, or two or more steps / components or parts of the operation of steps / components can be combined into new steps / components to achieve the purpose of this invention.

[0053] The order of the steps in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0054] It should be understood that those skilled in the art can make improvements or modifications based on the above description, and all such improvements and modifications should fall within the protection scope of the appended claims.

Claims

1. A serial communication data uploading method based on a dual-core DSP, wherein the dual-core DSP includes a hot-standby redundant first processing unit and a second processing unit; characterized in that, The method includes: Establish a status indication signal interaction channel between the first processing unit and the second processing unit; the first processing unit integrates and uploads health management data during normal operation. The status indication signal of the first processing unit is periodically monitored, and status evaluation parameters are generated based on the monitoring results; The status assessment parameters are analyzed; when the status assessment parameters indicate that the first processing unit has failed, the system switches to integrating and uploading health management data through the second processing unit; during the integration and uploading of health management data through the second processing unit, if the status assessment parameters indicate that the first processing unit has recovered, the system switches back to integrating and uploading health management data through the first processing unit.

2. The serial communication data uploading method based on a dual-core DSP according to claim 1, characterized in that, The status indication signal is exchanged via level signals, specifically including: The interconnection I / O ports of the first processing unit are periodically switched between high and low levels to generate status indication signals.

3. The serial communication data uploading method based on a dual-core DSP according to claim 1, characterized in that, The first processing unit and the second processing unit upload health management data using the SPI communication protocol.

4. The serial communication data uploading method based on a dual-core DSP according to claim 2, characterized in that, The time interval for level switching control is shorter than the time interval for uploading health management data.

5. The serial communication data uploading method based on a dual-core DSP according to claim 2, characterized in that, The generated state evaluation parameters include the updating of the level state change count value, and the update rule is as follows: The level signal status output by the first processing unit is collected in each monitoring cycle; The current level is compared with the level of the previous period: If the two states are different, the level state change count value is incremented; If both are in the same state, the level state change count value is decremented.

6. The serial communication data uploading method based on a dual-core DSP according to claim 5, characterized in that, The condition under which the status evaluation parameters indicate the failure of the first processing unit is: The level state change count value is greater than the preset failure switching threshold.

7. The serial communication data uploading method based on a dual-core DSP according to claim 5, characterized in that, The state evaluation parameters indicate the conditions under which the first processing unit recovers: The level state change count value is less than or equal to the preset recovery threshold, and this state continues for at least one complete health management data upload cycle.

8. A serial communication data uploading system based on a dual-core DSP, characterized in that, include: The status indication signal interaction module is used to establish a status indication signal interaction channel between the first processing unit and the second processing unit. The first processing unit integrates and uploads health management data during normal operation; The status assessment parameter generation module is used to periodically monitor the status indication signal of the first processing unit and generate status assessment parameters based on the monitoring results. The switching control module is used to analyze the status assessment parameters; when the status assessment parameters indicate that the first processing unit has failed, the system switches to the second processing unit to integrate and upload health management data. If the status assessment parameters indicate that the first processing unit has recovered during the integration and uploading of health management data in the second processing unit, the system will switch back to integrating and uploading health management data through the first processing unit.

9. A computer device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the serial communication data upload method based on any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, it implements the steps of the serial communication data uploading method based on a dual-core DSP as described in any one of claims 1-7.