A three-redundancy inter-channel communication method based on a DSP chip

Abstract

This invention belongs to the field of aerospace electromechanical systems and relates to a triple-redundant inter-channel communication method based on a DSP chip. It comprehensively utilizes RS-422, CAN, and MCBSP communication methods to form a three-level redundancy structure. Combined with a priority switching mechanism and data consistency comparison strategy, it significantly improves the reliability, stability, and applicability of the communication system, making it particularly suitable for avionics-critical mission systems with extremely high communication quality requirements. Through the synergistic design of heterogeneous redundancy architecture and intelligent switching mechanism, significant technical effects have been achieved in high-reliability control systems.

Description

Technical Field

[0001] This invention belongs to the field of aerospace electromechanical systems and relates to a triple-redundant inter-channel communication method based on a DSP chip. Background Technology

[0002] In aviation electromechanical systems, the reliability, stability, and real-time performance of communication systems have a decisive impact on flight safety and mission completion. Especially in critical mission systems such as flight control, navigation, engine monitoring, and health status monitoring, communication links must possess high fault tolerance, strong anti-interference performance, and rapid response mechanisms to cope with complex electromagnetic environments and sudden failures.

[0003] Currently, commonly used communication methods in avionics systems include RS-422, CAN (Controller Area Network), and MCBSP (Multi-channel Buffered Serial Port). Each of these communication interfaces has its own advantages: RS-422 uses differential signal transmission, offering strong anti-interference capabilities and long transmission distances, and is widely used in high-speed point-to-point or point-to-multipoint communication scenarios; the CAN bus has a good error detection mechanism and network arbitration capability, making it suitable for distributed control systems and multi-node communication applications; MCBSP is a high-speed synchronous serial communication interface, often used for data exchange between DSP chips, featuring low latency and high throughput.

[0004] However, in existing technologies, the above-mentioned communication methods are typically used as a single communication link, which presents the following main problems: 1. Risk of single point of failure in communication If a traditional system relies on only one communication method, a failure in that communication link (such as a broken line, damaged interface, electromagnetic interference, etc.) will directly lead to communication interruption, which may cause instability of the control system, data loss, or even mission failure.

[0005] 2. Lack of dynamic switching and redundancy protection mechanisms Most systems do not implement automatic switching and priority management between multiple channels. Even if multiple communication interfaces are configured, it is difficult to quickly and seamlessly switch to the backup channel when the main communication channel fails, which affects the continuous operation capability of the system.

[0006] 3. Data consistency cannot be effectively guaranteed. In a few systems that operate in parallel across multiple channels, there is a lack of a mechanism to compare the consistency of data received from different communication channels. This makes it impossible to detect data inconsistencies caused by problems such as bit errors, packet loss, and equipment malfunctions in a timely manner, thus affecting the accuracy of the system's judgment.

[0007] 4. Limited ability to adapt to complex environments The operating environment of aircraft electromechanical systems is complex, with various adverse factors such as vibration, temperature changes, voltage fluctuations, and electromagnetic interference. A single communication method is often insufficient to meet the communication stability requirements under various extreme conditions.

[0008] To address the aforementioned issues, there is an urgent need to propose a triple-redundant inter-channel communication method that combines the advantages of multiple communication methods, possesses a priority switching mechanism, and ensures data consistency. By constructing a multi-layered communication redundancy structure, not only can the system's fault tolerance under sudden failures be improved, but the reliability and security of data transmission can also be enhanced during normal operation.

[0009] Therefore, this invention has emerged to provide a triple-redundant inter-channel communication method based on a DSP chip. It comprehensively utilizes three communication methods, RS-422, CAN and MCBSP, to form a three-level redundancy structure. Combined with a priority switching mechanism and a data consistency comparison strategy, it significantly improves the reliability, stability and applicability of the communication system, and is particularly suitable for avionics critical mission systems with extremely high communication quality requirements. Summary of the Invention

[0010] Purpose of the invention This invention provides a triple-redundant inter-channel communication method based on a DSP chip, aiming to address the risk of system failure due to single-point communication failure in high-reliability control systems (such as aerospace electromechanical systems, flight control systems, and rail transit systems). By constructing a three-level heterogeneous redundant communication architecture, combined with a dynamic priority switching mechanism, data consistency verification, and intelligent fault recovery strategy, high availability, strong fault tolerance, and real-time security of the communication link are achieved.

[0011] Technical solution A triple-redundant inter-channel communication method based on a DSP chip includes the following steps: (1) Construct a three-level redundant communication architecture consisting of RS-422, CAN bus and MCBSP, with the communication priority from high to low as follows: RS-422>CAN>MCBSP; (2) A dynamic priority switching mechanism is adopted to automatically switch to the next available channel when any high-priority channel fails, ensuring the continuity of system communication; (3) Set the fault switching time and recovery time of each channel to be inversely related: the higher the priority, the longer the fault switching time and the shorter the recovery time; specifically, the fault switching time of RS-422 is 400ms and the recovery time is 100ms, the fault switching time of CAN is 200ms and the recovery time is 200ms, and the fault switching time of MCBSP is 100ms and the recovery time is 400ms. (4) When all communication channels are in normal working condition, the data received by each channel is compared for consistency. If the data is inconsistent, abnormal information is reported or an alarm is triggered.

[0012] Furthermore, the specific implementation of the three-level redundant communication architecture includes: (1) RS-422 is used as the main communication channel for high-speed, long-distance, and interference-resistant data transmission; (2) CAN is used as a secondary backup channel and is activated when RS-422 fails. It supports distributed network topology and built-in error detection and handling mechanisms. (3) MCBSP serves as the final backup channel and is suitable for short-distance, high-speed synchronous serial communication between DSP chips.

[0013] Furthermore, the dynamic priority switching mechanism includes the following switching logic: (1) When RS-422 is working properly, the system uses RS-422 for communication; (2) When RS-422 fails and CAN is normal, automatically switch to CAN; (3) When RS-422 is restored, the system will automatically switch back to RS-422; (4) When both RS-422 and CAN fail and MCBSP is normal, switch to MCBSP; (5) When any high-priority channel is restored, the system will switch back to that channel according to the priority order.

[0014] Furthermore, the data consistency monitoring includes: (1) When all three channels are normal, compare the content of the same data frame received by each channel; (2) If inconsistency exists, a "communication data consistency failure" event is generated and an early warning is triggered; (3) If all channels fail, a serious communication alarm will be triggered, and maintenance personnel will be notified to take emergency measures.

[0015] Furthermore, the method is implemented based on a high-performance DSP chip integrating RS-422, CAN, and MCBSP interfaces, and specifically includes: (1) The hardware platform uses DSP chips that support multiple communication interfaces, including but not limited to TMS320F28335 and TMS320F2812; (2) Deploy a communication management module at the software level to realize channel status monitoring, priority judgment, automatic switching, data consistency comparison and dynamic policy adjustment; (3) The built-in status feedback mechanism monitors the health status of each channel in real time and optimizes the communication path selection accordingly.

[0016] Furthermore, the dynamic priority switching mechanism further includes fault recovery logic: (1) When RS-422 or CAN recovers, the system immediately switches back to the corresponding main channel according to the priority; (2) When only the MCBSP recovers while the RS-422 and CAN are still in a fault state, maintain MCBSP communication and do not perform an invalid switch.

[0017] Furthermore, the data consistency comparison adopts a timestamp alignment mechanism, which synchronizes and aligns data from different channels according to time windows before comparing content, in order to eliminate timing deviations caused by transmission delays.

[0018] Furthermore, after the critical alarm is triggered, the system notifies maintenance personnel in at least one of the following ways: outputting a fault code to the human-machine interface, illuminating the alarm indicator light, sending a remote diagnostic message, or recording a fault log.

[0019] Furthermore, the communication management software provides a configurable interface, allowing users to dynamically adjust communication priority order, data consistency comparison threshold, alarm triggering conditions, and switching time parameters according to actual application needs.

[0020] Technical effect The triple-redundant inter-channel communication method based on DSP chips provided by this invention achieves significant technical effects in high-reliability control systems through the collaborative design of heterogeneous redundancy architecture and intelligent switching mechanism, specifically in the following aspects: 1. Significantly improves communication continuity and system availability. The system employs three communication methods—RS-422, CAN, and MCBSP—with different physical and protocol layers to construct a three-level redundancy system. Even if any single or dual channel fails, the system can still maintain data transmission through the backup channel, achieving "fail-operational" capability and ensuring that critical control commands are not interrupted.

[0021] 2. Enhance system fault tolerance and anti-interference capability. Heterogeneous communication media (differential serial, bus network, synchronous serial port) have different sensitivities to different types of electromagnetic interference, line breaks or chip interface failures, effectively avoiding common cause failures and significantly improving the robustness of the overall communication link.

[0022] 3. Achieve stable and reliable dynamic switching, avoiding accidental switching and jitter. By setting different switching and recovery times (slower switching and faster recovery for high-priority channels), frequent channel jitter caused by momentary interference is prevented, while ensuring that the main channel can quickly return to normal once it recovers, thus balancing system stability and response efficiency.

[0023] 4. Ensure data consistency and detect potential faults in advance. When all three channels are functioning normally, the timestamp alignment and content comparison mechanism can promptly detect data deviations caused by hardware aging, signal distortion, or software anomalies, enabling early warning of faults, preventing the misuse of erroneous data, and improving system security.

[0024] 5. Meets high safety standards in the aviation and industrial sectors. It triggers a critical alarm when all channels fail and supports logging, indicator light prompts, or remote reporting. It complies with the requirements of standards such as DO-178C and IEC 61508 for fault detection, alarm, and safety degradation, and is suitable for safety-critical systems such as flight control, front wheel turning, and train braking.

[0025] 6. Low implementation cost and strong compatibility. Implemented based on a general-purpose high-performance DSP chip (such as TMS320F28335), it does not require an additional dedicated communication coprocessor; the modular software design supports parameter configuration, making it easy to port to different platforms and has good industrialization prospects.

[0026] In summary, this invention significantly improves the reliability, real-time performance, and security of multi-channel communication systems, ensuring continuous system operation while providing solid technical support for high-security embedded control applications. Attached Figure Description

[0027] Figure 1 This is a flowchart of a triple-redundant inter-channel communication method based on a DSP chip. Detailed Implementation

[0028] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions in the embodiments of this invention will be described in more detail below. In the examples, the same or similar reference numerals denote the same or similar components or elements having the same or similar functions throughout. The described embodiments are some, but not all, of the embodiments of this invention. The embodiments described below with reference to reference are exemplary and intended to explain this invention, and should not be construed as limiting the invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention. The embodiments of this invention will be described in detail below.

[0029] The specific technical solution is as follows: 1. Three-level heterogeneous redundant communication architecture design The system integrates three different communication methods at the physical layer and protocol layer: 1) RS-422: As the main channel, it supports high-speed (up to 10 Mbps), long-distance (>100 m), differential anti-interference transmission, and is suitable for reliable communication between the main control unit and remote nodes; 2) CAN bus: As a secondary backup channel, it has mature error detection, arbitration and retransmission mechanisms, and is suitable for distributed multi-node environments; 3) MCBSP (Multi-channel Buffered Serial Port): As a final backup channel, it utilizes the high-speed synchronous serial interface inside the DSP chip to achieve short-distance, low-latency, deterministic communication between chips.

[0030] The three channels are independent of each other in hardware, but logically they form a priority hierarchy: RS-422 > CAN > MCBSP.

[0031] 2. Dynamic priority switching and recovery mechanism The system monitors the status of each channel in real time and switches dynamically according to the following logic: 1) Under normal circumstances, the highest priority available channel (RS-422 by default) is used; 2) When a high-priority channel fails, it will automatically and seamlessly switch to the next available channel; 3) After the faulty channel is restored, it will automatically switch back to the main channel according to the priority order; 4) Switchover and recovery times are configured differently based on priority: the higher the priority, the longer the switchover time (to ensure stable judgment) and the shorter the recovery time (for rapid return to primary use), for example: a) RS-422: Switching 400ms / Resuming 100ms b) CAN: Switch 200ms / Restore 200ms c) MCBSP: Switching 100ms / Resuming 400ms This design avoids frequent jitter switching while ensuring that critical channels are restored first.

[0032] 3. Multi-channel data consistency verification When all three channels are working properly, the system performs the following operations: 1) Add a timestamp to the same data frame received from each channel; 2) A time window alignment mechanism is adopted to eliminate transmission delay differences; 3) Perform byte-by-byte comparison of the aligned data content; 4) If there is a discrepancy, it is determined as a "communication data consistency failure", triggering an alert and recording the log; 5) If all channels fail, a critical communication alarm will be triggered, and a security degradation strategy will be initiated.

[0033] 4. DSP-based hardware and software co-implementation 1) Hardware platform: High-performance DSP chip (such as TMS320F28335) with integrated RS-422 transceiver, CAN controller and MCBSP interface. 2) Software module: Develop communication management software, including channel state machine, switching decision engine, consistency comparison algorithm, and alarm processing unit; 3) Configurability: Users can adjust priorities, switch thresholds, compare tolerances and alarm policies through the configuration interface to adapt to different application scenarios.

[0034] This technical solution significantly improves the reliability and security of inter-channel communication through a three-in-one design of heterogeneous redundancy, intelligent switching, and data verification, without significantly increasing system complexity. It is particularly suitable for critical control systems with extremely high requirements for continuity and fault tolerance.

[0035] I. Hardware Platform Configuration 1. Main control chip: TI's TMS320F28335 DSP chip is selected, which integrates: 1) One SCI interface (for external RS-422 transceiver, such as MAX3072); 2) One-channel eCAN module (connects to a CAN transceiver, such as SN65HVD230); 3) One MCBSP interface (directly connected to the MCBSP pins of other redundant DSPs via a high-speed connector on the backplane).

[0036] 2. Triple Redundancy Layout: The system includes three physically isolated control channels (A, B, C), each equipped with the complete communication interface described above, which are interconnected to form a redundant network.

[0037] Second and third-level communication channel configuration and priority setting;

[0038] III. Implementation Example of Dynamic Switching Logic Scenario 1: RS-422 is working properly 1) The system continuously exchanges data via RS-422; 2) Simultaneously monitor the status of CAN and MCBSP in the background, but do not enable them.

[0039] Scenario 2: RS-422 interruption due to loose cable 1) The DSP determines that RS-422 is faulty after failing to receive a valid frame for three consecutive cycles; 2) After 200 ms confirmation (anti-shake), automatically switch to the CAN channel; 3) During the switching process, the MCBSP remains in a listening state.

[0040] Scenario 3: RS-422 recovery 1) The system detected that 5 consecutive RS-422 verification frames were correct; 2) After 100 ms confirmation, immediately switch back to the RS-422 main channel; 3) CAN switches to listening standby mode.

[0041] Scenario 4: Simultaneous failure of RS-422 and CAN (e.g., electromagnetic pulse interference). 1) The system completes the two-level switching judgment within 400 ms; 2) Finally, the MCBSP is enabled to achieve emergency communication between chips via the backplane; 3) Although bandwidth is limited, it is sufficient to maintain basic control surface position synchronization.

[0042] IV. Data Consistency Comparison Mechanism 1. Every 10 ms, each channel sends a data frame containing the following content: structCommFrame { uint32_t timestamp; / / System tick count (in μs) float rudder_cmd; / / Rudder command uint16_t health_status; / / Health status word uint16_t crc; / / Frame CRC check }; 2. The receiving end aligns the three-channel data to a ±5 ms window based on the timestamp; 3. Compare whether the difference between rudder_cmd and rudder_cmd is within the threshold (e.g., ±0.1°). 4. If the deviation of any channel exceeds the limit, record "Channel X data abnormal" and trigger a level 2 alarm; 5. If the data from the three channels are inconsistent in pairs, it is determined to be a serious disagreement, and a vote or downgrade control is initiated.

[0043] V. Key Points of Software Implementation 1. Communication management task: Runs at 1 ms intervals, executing: 1) Channel status detection (timeout, CRC error, bus shutdown, etc.); 2) Switching decision (based on preset time threshold and state machine); 3) Data reception / transmission scheduling; 4) Consistency comparison and alarm reporting.

[0044] 2. Configuration Interface: Can be adjusted via host computer or maintenance panel: 1) Switching / recovery time parameters; 2) Data comparison tolerance; 3) Alarm level (early warning / serious).

[0045] In summary, this embodiment fully verifies the feasibility, reliability, and engineering value of the present invention in real aviation control systems, and can be widely applied in fields with stringent requirements for communication security, such as flight control, electromechanical actuation, and rail transportation.

[0046] Example See appendix Figure 1 The present invention provides a triple-redundant inter-channel communication method based on a DSP chip, and the implementation steps are as follows: Implementation Background The following section describes the application of the DSP chip-based triple redundancy inter-channel communication method described in this invention in the actual operation scenario of a certain type of triple redundancy front wheel steering control system (NWSC), verifying its reliability, real-time performance and engineering applicability in a real aviation environment.

[0047] Example 1: Sudden interruption of the main channel RS-422, seamless system switch to CAN Scene description: During aircraft taxiing, the RS-422 communication cable between channels A and B became loose due to an accidental pull by a ground tow truck, resulting in signal loss. At this point, the triple-redundant computer needs to continuously exchange rudder angle commands to maintain turn synchronization.

[0048] Implementation process: 1) The DSP of channel A detects four consecutive frames of RS-422 data timeouts (>400 ms) and determines that the main channel is faulty; 2) The system automatically activates the secondary CAN channel and sends synchronization commands to channels B and C; 3) The CAN bus completes link reconstruction and resumes data transmission within 200 ms; 4) Meanwhile, the MCBSP channel remains in listening mode and does not participate in communication; 5) The pilot is unaware of the smooth and continuous turning motion of the front wheel.

[0049] Effect verification: 1) The control surface command transmission delay increased from 1.2 ms to 3.5 ms, but is still within the allowable range of control bandwidth; 2) The ground maintenance system recorded "RS-422 communication anomaly (channel A→B)", triggering a level 2 warning; 3) The system did not degrade, and the flight mission was completed normally.

[0050] Example 2: Electromagnetic interference caused dual-channel failure, requiring emergency activation of MCBSP backplane communication. Scene description: The aircraft was gliding in the edge of a thunderstorm when it encountered a strong electromagnetic pulse (EMP). The RS-422 and CAN bus were simultaneously interfered with, resulting in a large number of CRC error frames.

[0051] Implementation process: 1) All three DSP channels detected that RS-422 and CAN data were unavailable within 100 ms; 2) The system immediately activates the MCBSP channel based on priority logic; 3) Through the high-speed connector on the chassis back panel, the three TMS320F28335 DSP chips directly exchange the minimum necessary data (including only rudder angle commands and health indicators) at a rate of 10 Mbps. 4) Continue performing data consistency comparison to ensure consistent triple redundancy output.

[0052] result: 1) Communication recovery time < 120 ms, meeting the "fault-operation" requirement; 2) Although bandwidth is limited, it is sufficient to maintain basic turning capabilities; 3) The cockpit displays a "communication downgrade" warning, but there is no need to stop taxiing.

[0053] Example 3: Inconsistent data across three channels successfully triggered an early warning of potential sensor malfunction. Scene description: The zero-point drift of the feedback sensor in channel B caused the reported rudder angle position to deviate by 0.8° from that of other channels.

[0054] Implementation process: 1) All three RS-422 channels are working normally, and the system performs a data comparison every 10 ms; 2) After timestamp alignment, it was found that the rudder_position of channel B continuously deviated from channels A and C; 3) If the difference exceeds the preset threshold (0.5°), the system determines that "Channel B data is abnormal"; 4) Trigger the warning log and highlight "Channel B sensor calibration recommendation" on the maintenance panel; 5) The control law automatically masks the output of channel B and uses the voting results of channels A / C.

[0055] Value manifestation: 1) Provide early warnings before a malfunction escalates into a loss of control; 2) Avoid system malfunctions caused by the failure of a single sensor; 3) Support predictive maintenance to improve flight punctuality.

[0056] Example 4: Intelligent switchback after full channel recovery Scene description: Ground maintenance personnel repaired the RS-422 cable and then powered it back on.

[0057] Implementation process: 1) The system detected that 5 consecutive RS-422 verification frames were correct; 2) After 100 ms confirmation (anti-jitter), automatically switch back from CAN to the RS-422 main channel; 3) CAN and MCBSP switch to hot backup mode, continuously listening but not actively sending; 4) No data loss during the entire process, and the switching is smooth.

[0058] Summarize The above examples demonstrate that the present invention can operate reliably under various typical operating conditions: 1) Single-channel failure → Fast switching, seamless recovery; 2) Dual-channel failure → Activate emergency channel to ensure basic functions; 3) Data discrepancies → Accurate identification and early warning; 4) Fault Repair → Intelligent Switchback, Returning to Optimal Configuration. Furthermore, unless otherwise defined, the technical or scientific terms used in this application description should have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms "upper," "lower," "left," "right," "center," "vertical," "horizontal," "inner," and "outer," etc., used in this application description, are only used to indicate relative directions or positional relationships, and do not imply that the device or component must have a specific orientation, or be constructed and operated in a specific orientation. When the absolute position of the described object changes, its relative positional relationship may also change accordingly, and therefore should not be construed as a limitation on this application. The terms "first," "second," "third," and similar terms used in this application description are used for descriptive purposes only to distinguish different components, and should not be construed as indicating or implying relative importance. The terms "a," "one," or "the," etc., used in this application description should not be construed as an absolute limitation on quantity, but should be understood as indicating the existence of at least one. The use of words such as "including" or "comprising" in the description of this application means that the element or object preceding the word covers the element or object listed after the word and its equivalents, without excluding other elements or objects.

[0059] Furthermore, it should be noted that, unless otherwise explicitly specified and limited, terms such as “installation,” “connection,” and “linkage” used in the description of this application should be interpreted broadly. For example, a connection can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium; or it can be a connection within two components. Those skilled in the art can understand its specific meaning in this application according to the specific circumstances.

[0060] The above description is merely a specific embodiment of the present invention and is not intended to limit the present invention. Within the spirit and principles of the present invention, any person skilled in the art may use the above-disclosed technical content to make changes or modifications to equivalent embodiments and apply them to other fields. However, any simple modifications, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention, as well as any modifications, equivalent substitutions, improvements, etc., should be included within the protection scope of the present invention.

Claims

1. A triple-redundant inter-channel communication method based on a DSP chip, characterized in that, Includes the following steps: (1) Construct a three-level redundant communication architecture consisting of RS-422, CAN bus and MCBSP, with the communication priority from high to low as follows: RS-422>CAN>MCBSP; (2) A dynamic priority switching mechanism is adopted to automatically switch to the next available channel when any high-priority channel fails, ensuring the continuity of system communication; (3) Set the fault switching time and recovery time of each channel to be inversely related: the higher the priority, the longer the fault switching time and the shorter the recovery time; specifically, the fault switching time of RS-422 is 400ms and the recovery time is 100ms, the fault switching time of CAN is 200ms and the recovery time is 200ms, and the fault switching time of MCBSP is 100ms and the recovery time is 400ms. (4) When all communication channels are in normal working condition, the data received by each channel is compared for consistency. If the data is inconsistent, abnormal information is reported or an alarm is triggered.

2. The method as described in claim 1, characterized in that, The specific implementation of the three-level redundant communication architecture includes: (1) RS-422 is used as the main communication channel for high-speed, long-distance, and interference-resistant data transmission; (2) CAN is used as a secondary backup channel and is activated when RS-422 fails. It supports distributed network topology and built-in error detection and handling mechanisms. (3) MCBSP serves as the final backup channel and is suitable for short-distance, high-speed synchronous serial communication between DSP chips.

3. The method as described in claim 2, characterized in that, The dynamic priority switching mechanism includes the following switching logic: (1) When RS-422 is working properly, the system uses RS-422 for communication; (2) When RS-422 fails and CAN is normal, automatically switch to CAN; (3) When RS-422 is restored, the system will automatically switch back to RS-422; (4) When both RS-422 and CAN fail and MCBSP is normal, switch to MCBSP; (5) When any high-priority channel is restored, the system will switch back to that channel according to the priority order.

4. The method as described in claim 3, characterized in that, The data consistency monitoring includes: (1) When all three channels are normal, compare the content of the same data frame received by each channel; (2) If inconsistency exists, a "communication data consistency failure" event is generated and an early warning is triggered; (3) If all channels fail, a serious communication alarm will be triggered, and maintenance personnel will be notified to take emergency measures.

5. The method as described in claim 4, characterized in that, The method is implemented based on a high-performance DSP chip integrating RS-422, CAN, and MCBSP interfaces, and specifically includes: (1) The hardware platform uses DSP chips that support multiple communication interfaces, including but not limited to TMS320F28335 and TMS320F2812; (2) Deploy a communication management module at the software level to realize channel status monitoring, priority judgment, automatic switching, data consistency comparison and dynamic policy adjustment; (3) The built-in status feedback mechanism monitors the health status of each channel in real time and optimizes the communication path selection accordingly.

6. The method as described in claim 5, characterized in that, The dynamic priority switching mechanism further includes fault recovery logic: (1) When RS-422 or CAN recovers, the system immediately switches back to the corresponding main channel according to the priority; (2) When only the MCBSP recovers while the RS-422 and CAN are still in a fault state, maintain MCBSP communication and do not perform an invalid switch.

7. The method as described in claim 6, characterized in that, The data consistency comparison adopts a timestamp alignment mechanism, which synchronizes and aligns data from different channels according to time windows before comparing content, in order to eliminate timing deviations caused by transmission delays.

8. The method as described in claim 7, characterized in that, After a critical alarm is triggered, the system notifies maintenance personnel in at least one of the following ways: outputting a fault code to the human-machine interface, illuminating an alarm indicator light, sending a remote diagnostic message, or recording a fault log.

9. The method as described in claim 8, characterized in that, The communication management software provides a configurable interface, allowing users to dynamically adjust communication priority order, data consistency comparison threshold, alarm triggering conditions, and switching time parameters according to actual application needs.

Images