Dual-Controller IO-Link Master for MCU Failure Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IO-Link systems can be halted if a failure occurs in the microcontroller unit (MCU) of the IO-Link master, causing all connected devices to stop operating.
Innovation Solution
Implementing a dual controller system where two controllers communicate periodically to diagnose failures and transmit alarm messages to the PLC, allowing the system to continue operating even if one controller fails.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single controller is used in the IO-Link master, then the device complexity is reduced, but the reliability deteriorates because the entire system stops when the controller fails
Solution Approach 1:
The single controller is segmented into two independent controllers (first controller and second controller), each capable of independently managing IO-Link devices. This segmentation allows the system to continue operating with one controller if the other fails, thereby improving reliability without significantly increasing operational complexity.
Solution Approach 2:
The standby controller is prepared in advance with the capability to take over control functions. The controllers perform mutual health checks periodically, and the standby controller is pre-configured to assume the master role immediately upon detecting a failure, eliminating the need for complex real-time reconfiguration and maintaining system reliability.
2Reliability
If dual controllers are implemented with mutual monitoring, then the reliability is improved, but the device complexity increases due to additional communication and diagnosis mechanisms
Solution Approach 1:
The health check and failure detection functions are merged into the existing communication protocol between controllers. The controllers exchange status information through regular communication messages, combining monitoring duties with their primary control functions, thereby improving reliability without adding separate complex monitoring systems.
Solution Approach 2:
The standby controller maintains a copy of the control program and operational parameters from the active controller. This copying mechanism allows the standby controller to immediately assume control functions upon failure detection, improving reliability while keeping the system complexity manageable through straightforward data replication.
3Reliability
If controllers communicate periodically to diagnose failures, then the reliability is improved, but the loss of time increases due to periodic communication intervals
Solution Approach 1:
Controllers perform mutual health checks at regular periodic intervals by exchanging communication messages. This periodic action ensures reliable failure detection while maintaining predictable system behavior. The periodic nature allows the system to balance between detection reliability and communication overhead, preventing excessive time loss while ensuring failures are caught promptly.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure relates to a method of operating a dual controller and an IO-Link master providing the method, and the IO-Link master includes a first controller configured to transmit first data collected by a first IO-Link device to a programmable logic controller (PLC) and control the first IO-Link device according to a first control signal of the PLC, and a second controller configured to transmit second data collected by a second IO-Link device to the PLC and control the second IO-Link device according to a second control signal of the PLC, wherein each of the first controller and a second controller is configured to communicate at a certain period to diagnose an occurrence of a failure event of the other party.