CN104407948A - Power-up switching control system and method of cold backup redundant satellite-carried computer - Google Patents
Power-up switching control system and method of cold backup redundant satellite-carried computer Download PDFInfo
- Publication number
- CN104407948A CN104407948A CN201410712859.5A CN201410712859A CN104407948A CN 104407948 A CN104407948 A CN 104407948A CN 201410712859 A CN201410712859 A CN 201410712859A CN 104407948 A CN104407948 A CN 104407948A
- Authority
- CN
- China
- Prior art keywords
- unit
- power
- command
- circuit
- instruction
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Power Sources (AREA)
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
Abstract
The invention discloses a power-up switching control system of a cold backup redundant satellite-carried computer. The system comprises a complete power-up circuit, a watchdog startup circuit, a power monitoring startup circuit, a port shutdown circuit, an or gate logic circuit, a phase inverter drive circuit and a control relay, wherein the or gate logic circuit and the phase inverter drive circuit are arranged in series corresponding to each single-chip microprocessor respectively; the control relay is arranged at a power input end of a host or a standup machine respectively. The control method comprises the following steps: performing power-up switching management between backup single machines in real time by monitoring the working states of the machines and the power supply situation; monitoring the fault of the working single machines and feeding back by using monitoring of read-write operation of the single machines to finish automatic switching between the host and the standup machine; monitoring the power failure of the working single machines and feeding back through monitoring of single machine power supplies to finish automatic switching between the host and the standup machine; realizing shutdown processing on other single machines after power-up by controlling ports of the power-up single machines to guarantee the working state of cold backup. Active switching is realized, and the reliability is high.
Description
Technical field
The present invention relates to electronic information technical field, what be specially a kind of cold standby redundant star borne computer powers up method for handover control.
Background technology
At present, spaceborne computer is in order to realize highly reliable, long-life design object, and the Redundancy Design adopting two-shipper cold standby, wherein two units called after main frame and standby host respectively, only has a unit to carry out work at one time more.Between the two by the adhesive of outside direct instruction pilot relay reed with disconnect realize backing up two-shipper add outage management.Direct instruction is when pilot relay realizes adding power down function, and its control method as shown in Figure 1.Although the control circuit of its control method and dependence is simple, but the power-off that adds only relying on direct instruction to realize redundancy backup switches, not only reduce system reliability, and when satellite is in non-ground station control region, spaceborne computer, owing to not possessing capacity of self-government, will affect the normal work of whole star once break down.If such as certain unit powers up instruction exception, this unit can not power up the effect that work loses backup, cannot guarantee the smooth execution of whole star task.
Summary of the invention
For problems of the prior art, the invention provides and a kind ofly initiatively can complete redundancy between two-shipper and switch, the cold standby redundant star borne computer that reliability is high power up method for handover control.
The present invention is achieved through the following technical solutions:
A kind of cold standby redundant star of the present invention borne computer power up handover control system, comprise,
Powering up instruction for sending main frame respectively to main frame after complete machine powers up, sending to standby host the complete machine power-up circuit that standby host closes electric instruction;
The house dog boot-strap circuit that corresponding each unit is arranged respectively; After house dog boot-strap circuit powers up for corresponding unit, to power up the read-write operation signal of the I/O port of unit as feeding-dog signal, once not feed dog at the appointed time, power up unit and send house dog start-up command to not powering up unit;
The power supply monitoring boot-strap circuit that corresponding each unit is arranged respectively; Power supply monitoring boot-strap circuit powers up the supply voltage of rear unit for monitoring unit, once power supply can send start-up command to not powering up unit lower than this circuit of agreement threshold value;
The port shutdown circuit that corresponding each unit is arranged respectively; After port shutdown circuit powers up for corresponding unit, to other unit transmit port shutdown commands;
That corresponding each unit is arranged in series respectively or gate logic and anti-phase driving circuit; Or gate logic and anti-phase driving circuit are used for the transmission of start or shutdown command indirectly; The start of main frame or the input end of gate logic access corresponding main frame respectively and power up instruction, house dog start-up command and power supply monitoring start-up command, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of main frame; The port shutdown command of the shutdown of main frame or the input end access correspondence of gate logic, the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of main frame; The start of standby host or the input end of gate logic access corresponding house dog start-up command and power supply monitoring start-up command respectively, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of standby host; The standby host of the shutdown of standby host or the input end access correspondence of gate logic closes electric instruction and port shutdown command, and the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of standby host;
Be separately positioned on the pilot relay of main frame or standby host power input; Pilot relay comprises the indirect pilot relay of control end parallel connection and direct pilot relay, and the direct switching on and shutting down instruction of corresponding unit is linked into the corresponding control end of direct relay; The indirect switching machine instruction of corresponding unit is linked into the corresponding control end of a contact relay.
Preferably, complete machine power-up circuit comprises electric source monitoring circuit and the phase inverter of series connection, and the input end of electric source monitoring circuit connects respectively and adds host power supply and public power.
Preferably, house dog boot-strap circuit comprises the counter of series connection, shift register and three input nand gates; Feeding-dog signal is connected for providing the input end of feeding dog time counter; Shift register and three input nand gates are for obtaining the house dog start-up command to not powering up unit according to feeding-dog signal.
Preferably, power supply monitoring boot-strap circuit comprises electric source monitoring circuit and the monostable circuit of series connection, and the input end of electric source monitoring circuit connects power supply and the public power of corresponding unit respectively.
Preferably, port shutdown circuit comprise series connection D flip-flop and with door; The input end of D flip-flop accesses the working signal of corresponding unit, I/O port decoded signal and reset signal respectively.
A kind of cold standby redundant star of the present invention borne computer power up method for handover control, comprise,
A. carry out initialization, after powering to complete machine, send main frame respectively to main frame and power up instruction, send standby host to standby host and close electric instruction;
B. monitoring the read-write operation powering up the I/O port of unit in complete machine, if power up unit do not carry out read-write operation in setting-up time, then sending house dog start-up command to not powering up unit;
C. monitoring powers up unit power supply, if when powering up unit power supply lower than threshold voltage, then sends power supply monitoring start-up command to not powering up unit price;
D. after in complete machine, any one unit powers up, all to other unit transmit port shutdown commands;
E. the main frame in step a powers up instruction, in step b in house dog start-up command and step c the power supply monitoring start-up command of respective hosts together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of main frame; In step b in house dog start-up command and step c the power supply monitoring start-up command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of standby host;
F. in steps d respective hosts port shutdown command through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of main frame; Standby host in step a closes electric instruction, in steps d the port shutdown command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of standby host;
G. the indirect switching machine instruction of unit in parallel with direct switching on and shutting down instruction after as control signal, switching on and shutting down are realized to this unit and control.
Preferably, in step b, realized the Real-Time Monitoring powering up unit by watchdog circuit, to power up the feeding-dog signal of read-write operation signal as corresponding watchdog circuit of the I/O port of unit, feed dog if do not completed in setting-up time, then send house dog start-up command to not powering up unit.
Preferably, in step g, the power input of each unit is respectively arranged with the direct pilot relay of control end parallel connection and indirect pilot relay; In the control signal of each unit, the instruction of indirect switching machine is linked into corresponding indirect pilot relay, is linked in corresponding direct pilot relay and realizes switching on and shutting down control after direct switching on and shutting down instruction parallel connection.
Compared with prior art, the present invention has following useful technique effect:
The present invention is monitored self duty and power supply situation by equipment, complete in real time backup unit between power up handover management; Utilization to the malfunction monitoring of work unit and feedback, completes the automatic switchover between main frame and standby host to the monitoring realization of unit read-write operation; By realizing the monitoring of unit power supply, to the monitoring of work unit when power fail and feedback, completing the automatic switchover between main frame and standby host; By to the port controlling powering up unit, after it powers up, just can realize power down process to other units, ensure the duty of cold standby; Utilize or start that gate logic receives same main frame or shutdown command carry out or process, what realize redundancy backup powers up switching, ensures the reliability of its redundancy backup; Finally change the single control performed by direct instruction in existing Two-channel switching, indirect instruction and direct instruction parallel connection are carried out switching on and shutting down control to each unit, the mutually redundant Standby control of both realizations, eliminate complete machine single-point, improve the reliability of spaceborne computer, when can ensure that satellite is in non-ground station control region, spaceborne computer can manage and switch by teaching display stand, guarantees that satellite task is controlled continuously.
Further, respectively by the concrete setting to each circuit, can ensure stable generation and the transmission of its signal, ensure that the reliability of indirect instruction, utilize watchdog circuit to realize the monitoring operated its I/O port read write, structure is simple, working stability; Realize controlling the binary channel of indirect and direct switching on and shutting down instruction by the relay of control end parallel connection.
Accompanying drawing explanation
Fig. 1 is that in prior art, direct instruction pilot relay adds power down function schematic diagram.
Fig. 2 is the architecture logic schematic diagram of the complete machine power-up circuit described in example of the present invention.
Fig. 3 is the architecture logic schematic diagram of the house dog boot-strap circuit described in example of the present invention.
Fig. 4 is the architecture logic schematic diagram of the power supply monitoring boot-strap circuit described in example of the present invention; Wherein, 4a is the power supply monitoring boot-strap circuit of main frame, and 4b is the power supply monitoring boot-strap circuit of standby host.
Fig. 5 is the architecture logic schematic diagram of the port shutdown circuit described in example of the present invention.
Fig. 6 is the indirect switching machine instruction generation schematic block diagram described in example of the present invention; Wherein, 6a is that the indirect start-up command of main frame generates schematic block diagram, and 6b is that the indirect shutdown command of standby host generates schematic block diagram.
Fig. 7 is the control linkage schematic diagram of the relay described in example of the present invention.
Embodiment
Below in conjunction with specific embodiment, the present invention is described in further detail, and the explanation of the invention is not limited.
A kind of cold standby redundant star of the present invention borne computer power up handover control system, comprise,
Powering up instruction for sending main frame respectively to main frame after complete machine powers up, sending to standby host the complete machine power-up circuit that standby host closes electric instruction, as shown in Figure 2; The house dog boot-strap circuit that corresponding each unit is arranged respectively; As shown in Figure 3, after house dog boot-strap circuit powers up for corresponding unit, to power up the read-write operation signal of the I/O port of unit as feeding-dog signal, once not feed dog at the appointed time, power up unit and send house dog start-up command to not powering up unit; The power supply monitoring boot-strap circuit that corresponding each unit is arranged respectively; As shown in Figure 4, power supply monitoring boot-strap circuit powers up the supply voltage of rear unit for monitoring unit, once power supply can send start-up command to not powering up unit lower than this circuit of agreement threshold value; The port shutdown circuit that corresponding each unit is arranged respectively; As shown in Figure 5, after port shutdown circuit powers up for corresponding unit, to other unit transmit port shutdown commands; As shown in Figure 6, corresponding each unit be arranged in series respectively or gate logic and anti-phase driving circuit; Or gate logic and anti-phase driving circuit are used for the transmission of start or shutdown command indirectly; The start of main frame or the input end of gate logic access corresponding main frame respectively and power up instruction, house dog start-up command and power supply monitoring start-up command, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of main frame; The port shutdown command of the shutdown of main frame or the input end access correspondence of gate logic, the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of main frame; The start of standby host or the input end of gate logic access corresponding house dog start-up command and power supply monitoring start-up command respectively, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of standby host; The standby host of the shutdown of standby host or the input end access correspondence of gate logic closes electric instruction and port shutdown command, and the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of standby host; As shown in Figure 7, the pilot relay of main frame or standby host power input is separately positioned on; Pilot relay comprises the indirect pilot relay of control end parallel connection and direct pilot relay, and the direct switching on and shutting down instruction of corresponding unit is linked into the corresponding control end of direct relay; The indirect switching machine instruction of corresponding unit is linked into the corresponding control end of a contact relay.
Wherein, as shown in Figure 2, complete machine power-up circuit comprises electric source monitoring circuit and the phase inverter of series connection, and the input end of electric source monitoring circuit connects respectively and adds host power supply and public power.As shown in Figure 3, house dog boot-strap circuit comprises the counter of series connection, shift register and three input nand gates; Feeding-dog signal is connected for providing the input end of feeding dog time counter; Shift register and three input nand gates are for obtaining the house dog start-up command to not powering up unit according to feeding-dog signal.As shown in Figure 4, power supply monitoring boot-strap circuit comprises electric source monitoring circuit and the monostable circuit of series connection, and the input end of electric source monitoring circuit connects power supply and the public power of corresponding unit respectively.As shown in Figure 5, port shutdown circuit comprise series connection D flip-flop and with door; The input end of D flip-flop accesses the working signal of corresponding unit, I/O port decoded signal and reset signal respectively.
A kind of cold standby redundant star of the present invention borne computer power up method for handover control, comprise,
A. carry out initialization, after powering to complete machine, send main frame respectively to main frame and power up instruction, send standby host to standby host and close electric instruction;
B. monitoring the read-write operation powering up the I/O port of unit in complete machine, namely perform house dog dog feeding operation, if power up unit do not carry out read-write operation in setting-up time, then sending house dog start-up command to not powering up unit; In this preferred embodiment, realized the Real-Time Monitoring powering up unit by watchdog circuit, to power up the feeding-dog signal of read-write operation signal as corresponding watchdog circuit of the I/O port of unit, feed dog if do not completed in setting-up time, then send house dog start-up command to not powering up unit.
C. monitoring powers up unit power supply, if when powering up unit power supply lower than threshold voltage, then sends power supply monitoring start-up command to not powering up unit price;
D. after in complete machine, any one unit powers up, all to other unit transmit port shutdown commands;
E. the main frame in step a powers up instruction, in step b in house dog start-up command and step c the power supply monitoring start-up command of respective hosts together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of main frame; In step b in house dog start-up command and step c the power supply monitoring start-up command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of standby host;
F. in steps d respective hosts port shutdown command through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of main frame; Standby host in step a closes electric instruction, in steps d the port shutdown command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of standby host;
G. the indirect switching machine instruction of unit in parallel with direct switching on and shutting down instruction after as control signal, switching on and shutting down are realized to this unit and control.In this preferred embodiment, the power input of each unit is respectively arranged with the direct pilot relay of control end parallel connection and indirect pilot relay; In the control signal of each unit, the instruction of indirect switching machine is linked into corresponding indirect pilot relay, is linked in corresponding direct pilot relay and realizes switching on and shutting down control after direct switching on and shutting down instruction parallel connection.
Concrete, when the present invention is applied in actual cold standby redundant star borne computer, first carry out after complete machine powers, provide main frame in two-shipper to power up, standby host closes logic control and the circuit of electricity.As shown in Figure 2, wherein, host power supply and the public power VCOM of+5.5VA are connected in the electric source monitoring circuit of MAX706T, after it powers up, 7 legs can export undersuing, signal becomes positive pulse through phase inverter 54HC14 just as the steering order of relay, thus can realize the function opening main frame, pass standby host through anti-phase driving again.Wherein, public power VCOM no matter main frame or standby host powers up, and all there is electricity in this region.This logic control method and circuit must perform after complete machine powers up, and powers up main frame, carries out pass electricity, thus realize the requirement of cold standby to standby host.
Secondly, be no matter at main frame or standby host operationally, all will carry out the monitoring of its read-write operation to work unit, namely will monitor its duty; In this example by with unit having arranged of house dog boot-strap circuit one to one, using the operation of I/O port read write as dog feeding operation, and dog feeding operation is not completed within the time of setting, house dog boot-strap circuit can send start-up command automatically to the unit that do not work.As shown in Figure 3, wherein, when main frame power up rear operation break down time, house dog boot-strap circuit sends out standby host instruction; When standby host power up rear operation break down time, house dog boot-strap circuit sends out host command.The feeding-dog signal that cycle produces is undersuing, can guarantee shift register 54HC164 and 54HC4060 output low level signal, can not send corresponding start-up command.When feeding-dog signal does not produce by specified period, counter 54HC4060 meeting clock signal, this clock signal can allow shift register 54HC164 export high level step by step, when 3 legs, the 10 legs output high level of this circuit, during 11 leg output low level, three input nand gate 54HC10 output low level signals.The low level signal that three input nand gate 54HC10 export as Control instruction, thus can realize the function opening main frame or standby host through anti-phase driving again after phase place negate.Power up unit power supply VCC to be connected on shift register 54HC164, ensure its synchronous working with corresponding unit and monitoring.
Further, be no matter at main frame or standby host operationally, all will carry out the monitoring of its power supply to work unit, namely whether will monitor normally power supply; After complete machine is powered, the electric source monitoring circuit of work unit is started working, and when powering up unit power supply lower than threshold voltage, electric source monitoring circuit can send the start-up command to not powering up unit automatically.As shown in Figure 4, in fig .4, the host power supply of+5.5VA and the subregion VCOM of public power are connected in the electric source monitoring circuit D5 of respective hosts, monitoring after its power supply goes wrong, sending open standby host instruction to standby host; In fig. 4b, the subregion VCC of the public power of the standby host power supply of+5.5VB is connected in the electric source monitoring circuit D4 of corresponding standby host, monitoring after its power supply goes wrong, sending open host command to main frame.Wherein, 7 legs of electric source monitoring circuit MAX706T are connected with 3 legs of monostable circuit 54HC123, and after powering up, the former output low level can guarantee that the latter can not output error instruction.5 legs of electric source monitoring circuit MAX706T are connected with 1 leg of monostable circuit 54HC123, when the input voltage that electric source monitoring circuit MAX706T monitors self 4 leg is lower than threshold voltage, the output of 5 legs becomes low level from high level thus causes 13 legs of monostable circuit 54HC123 to export positive pulse signal, afterwards this signal is finally produced Control instruction through anti-phase driving, thus realize the power up function not powering up unit.
Then, when main frame and standby host are with when leaving, after the unit opened can send through I/O port operation and close main frame or standby host instruction, namely after any one unit powers up, all will to other unit transmit port shutdown commands.As shown in Figure 5, the power supply VCC powering up unit is linked in D flip-flop, and accesses the working signal of corresponding unit, I/O port decoded signal and reset signal simultaneously; When main frame powers up, send and close standby host instruction; When standby host powers up, send pass host command.Wherein, 5 legs of D flip-flop 54HC74 are connected with 2 legs respectively and with 1 leg of door 54HC08 with 8 legs.After powering on, it is low level that reset signal is guaranteed with the output of door 54HC08, and can guarantee can not output error instruction.I/O port decoded signal can be produced when carrying out port operation, produce working signal SD (6)=1 and the SD (7)=0 of configuration simultaneously, now 5 legs of D flip-flop 54HC74 and the output of 8 legs is high level, exports high level signal with 3 legs of door 54HC08; Afterwards this signal is finally produced Control instruction through anti-phase driving, thus realize the function of closing main frame or pass standby host.
Finally, by the open and close machine signal that foregoing circuit produces, carry out collecting and after driving, finally produce the indirect instruction to Control; As shown in Figure 6, the indirect start-up command of the main frame in Fig. 6 a powers up instruction by the main frame in complete machine power-up circuit, the house dog start-up command in house dog boot-strap circuit and the power supply monitoring start-up command in electric source monitoring circuit together through or gate logic and anti-phase driving circuit process obtain; The indirect shutdown command of the standby host in Fig. 6 b by by the standby host shutdown command in complete machine power-up circuit and the port shutdown command in port shutdown circuit together through or gate logic and anti-phase driving circuit process obtain.The indirect shutdown command of main frame is obtained after treatment by port shutdown command, and the indirect start-up command of standby host is obtained after treatment by the house dog start-up command in house dog boot-strap circuit and the power supply monitoring start-up command in electric source monitoring circuit.
Be linked in the relay group of control end parallel connection after in parallel with direct switching on and shutting down instruction for the indirect switching machine instruction obtained again, power supply control is carried out to the main frame of correspondence and standby host, as shown in Figure 7, the power input of unit all arranges relay group, between in relay group, contact relay input end connects complete machine and powers, the output terminal order machine of direct relay is powered, incoming control signal after both control end parallel connections, direct instruction in control signal accesses the corresponding control end of direct relay, the corresponding control end of contact relay between indirect instruction access.Direct instruction is the negative pulse instruction of outside input, the backup of direct instruction and indirect instruction is realized by relay group with the indirect instruction obtained after above-mentioned process, as long as have one effectively then can power up switching to the redundancy of cold standby in indirect instruction and direct instruction to control, promote self-monitoring and the managerial ability of spaceborne computer.Spaceborne computer, by the indirect instruction produced voluntarily, without the need to outside direct instruction, can guarantee that computer-internal main frame powers up; When satellite is in non-ground station control region or outside direct instruction is invalid, spaceborne computer is once break down, and the redundancy that can initiatively complete between two-shipper switches, and guarantees the smooth execution of whole star task.
On spaceborne computer again specific to two-shipper cold standby redundancy structure, what realize main frame and standby host by direct instruction and indirect instruction powers up switching.After utilizing complete machine power-up circuit to realize complete machine powering, main frame powers up work, and standby host closes electric idle initial state to be determined; When powering up unit and breaking down, the onset of house dog boot-strap circuit, powers up to another power-off unit.By port shutdown circuit closing fault unit after the unit working stability of new startup; When powering up unit and occurring power fail, power supply monitoring boot-strap circuit powers up to another power-off unit.By port shutdown circuit closing fault unit after the unit working stability of new startup.Adopt the spaceborne computer of above-mentioned design good in orbit, do not occur any quality problems, complete the scientific research mission of its survey of deep space smoothly.
Claims (8)
1. cold standby redundant star borne computer power up a handover control system, it is characterized in that, comprise,
Powering up instruction for sending main frame respectively to main frame after complete machine powers up, sending to standby host the complete machine power-up circuit that standby host closes electric instruction;
The house dog boot-strap circuit that corresponding each unit is arranged respectively; After house dog boot-strap circuit powers up for corresponding unit, to power up the read-write operation signal of the I/O port of unit as feeding-dog signal, once not feed dog at the appointed time, power up unit and send house dog start-up command to not powering up unit;
The power supply monitoring boot-strap circuit that corresponding each unit is arranged respectively; Power supply monitoring boot-strap circuit powers up the supply voltage of rear unit for monitoring unit, once power supply can send start-up command to not powering up unit lower than this circuit of agreement threshold value;
The port shutdown circuit that corresponding each unit is arranged respectively; After port shutdown circuit powers up for corresponding unit, to other unit transmit port shutdown commands;
That corresponding each unit is arranged in series respectively or gate logic and anti-phase driving circuit; Or gate logic and anti-phase driving circuit are used for the transmission of start or shutdown command indirectly; The start of main frame or the input end of gate logic access corresponding main frame respectively and power up instruction, house dog start-up command and power supply monitoring start-up command, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of main frame; The port shutdown command of the shutdown of main frame or the input end access correspondence of gate logic, the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of main frame; The start of standby host or the input end of gate logic access corresponding house dog start-up command and power supply monitoring start-up command respectively, and anti-phase driving circuit output terminal of starting shooting exports the indirect start-up command of standby host; The standby host of the shutdown of standby host or the input end access correspondence of gate logic closes electric instruction and port shutdown command, and the anti-phase driving circuit output terminal that shuts down exports the indirect shutdown command of standby host;
Be separately positioned on the pilot relay of main frame or standby host power input; Pilot relay comprises the indirect pilot relay of control end parallel connection and direct pilot relay, and the direct switching on and shutting down instruction of corresponding unit is linked into the corresponding control end of direct relay; The indirect switching machine instruction of corresponding unit is linked into the corresponding control end of a contact relay.
2. a kind of cold standby redundant star borne computer according to claim 1 power up handover control system, it is characterized in that, complete machine power-up circuit comprises electric source monitoring circuit and the phase inverter of series connection, and the input end of electric source monitoring circuit connects respectively and adds host power supply and public power.
3. a kind of cold standby redundant star borne computer according to claim 1 power up handover control system, it is characterized in that, house dog boot-strap circuit comprises the counter of series connection, shift register and three input nand gates; Feeding-dog signal is connected for providing the input end of feeding dog time counter; Shift register and three input nand gates are for obtaining the house dog start-up command to not powering up unit according to feeding-dog signal.
4. a kind of cold standby redundant star borne computer according to claim 1 power up handover control system, it is characterized in that, power supply monitoring boot-strap circuit comprises electric source monitoring circuit and the monostable circuit of series connection, and the input end of electric source monitoring circuit connects power supply and the public power of corresponding unit respectively.
5. a kind of cold standby redundant star borne computer according to claim 1 power up handover control system, it is characterized in that, port shutdown circuit comprise series connection D flip-flop and with door; The input end of D flip-flop accesses the working signal of corresponding unit, I/O port decoded signal and reset signal respectively.
6. cold standby redundant star borne computer power up a method for handover control, it is characterized in that, comprise,
A. carry out initialization, after powering to complete machine, send main frame respectively to main frame and power up instruction, send standby host to standby host and close electric instruction;
B. monitoring the read-write operation powering up the I/O port of unit in complete machine, if power up unit do not carry out read-write operation in setting-up time, then sending house dog start-up command to not powering up unit;
C. monitoring powers up unit power supply, if when powering up unit power supply lower than threshold voltage, then sends power supply monitoring start-up command to not powering up unit price;
D. after in complete machine, any one unit powers up, all to other unit transmit port shutdown commands;
E. the main frame in step a powers up instruction, in step b in house dog start-up command and step c the power supply monitoring start-up command of respective hosts together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of main frame; In step b in house dog start-up command and step c the power supply monitoring start-up command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect start-up command of standby host;
F. in steps d respective hosts port shutdown command through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of main frame; Standby host in step a closes electric instruction, in steps d the port shutdown command of corresponding standby host together through or gate logic and anti-phase driving circuit process obtain the indirect shutdown command of standby host;
G. the indirect switching machine instruction of unit in parallel with direct switching on and shutting down instruction after as control signal, switching on and shutting down are realized to this unit and control.
7. a kind of cold standby redundant star borne computer according to claim 6 power up method for handover control, it is characterized in that, in step b, realized the Real-Time Monitoring powering up unit by watchdog circuit, to power up the feeding-dog signal of read-write operation signal as corresponding watchdog circuit of the I/O port of unit, feed dog if do not completed in setting-up time, then send house dog start-up command to not powering up unit.
8. a kind of cold standby redundant star borne computer according to claim 6 power up method for handover control, it is characterized in that, in step g, the power input of each unit is respectively arranged with the direct pilot relay of control end parallel connection and indirect pilot relay; In the control signal of each unit, the instruction of indirect switching machine is linked into corresponding indirect pilot relay, is linked in corresponding direct pilot relay and realizes switching on and shutting down control after direct switching on and shutting down instruction parallel connection.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410712859.5A CN104407948B (en) | 2014-11-28 | 2014-11-28 | A kind of cold standby redundant star borne computer power up handover control system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410712859.5A CN104407948B (en) | 2014-11-28 | 2014-11-28 | A kind of cold standby redundant star borne computer power up handover control system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104407948A true CN104407948A (en) | 2015-03-11 |
| CN104407948B CN104407948B (en) | 2016-08-17 |
Family
ID=52645581
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410712859.5A Active CN104407948B (en) | 2014-11-28 | 2014-11-28 | A kind of cold standby redundant star borne computer power up handover control system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104407948B (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107302393A (en) * | 2017-05-18 | 2017-10-27 | 上海卫星工程研究所 | Ensure the active and standby interlock system of remote control unit |
| CN110081984A (en) * | 2019-05-07 | 2019-08-02 | 中国科学院上海技术物理研究所 | Spaceborne infrared detector multipath high-speed signal isolation method, infrared imaging system |
| CN111077764A (en) * | 2019-11-26 | 2020-04-28 | 山东航天电子技术研究所 | Cold and hot standby load cross control method and circuit considering power-on and reset |
| CN112066974A (en) * | 2020-09-16 | 2020-12-11 | 上海航天控制技术研究所 | Double-light-source switching circuit for optical fiber gyroscope combined system |
| CN112131055A (en) * | 2020-09-08 | 2020-12-25 | 山东航天电子技术研究所 | Multi-mode three-motor dynamic fault-tolerant system |
| CN112462595A (en) * | 2020-11-10 | 2021-03-09 | 中国科学院空天信息创新研究院 | High-altitude balloon safety control device and method |
| CN113721681A (en) * | 2021-09-13 | 2021-11-30 | 北京微纳星空科技有限公司 | Satellite temperature control device, satellite temperature control method, electronic equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
| CN101833536A (en) * | 2010-04-16 | 2010-09-15 | 北京航空航天大学 | Reconfigurable on-board computer of redundancy arbitration mechanism |
| CN101968756A (en) * | 2010-09-29 | 2011-02-09 | 航天东方红卫星有限公司 | Satellite-borne computer autonomously computer switching system based on field programmable gata array (FPGA) |
| CN102650962A (en) * | 2012-04-10 | 2012-08-29 | 北京航空航天大学 | Soft core fault-tolerant spaceborne computer based on FPGA (Field Programmable Gata Array) |
| US20130299642A1 (en) * | 2012-05-14 | 2013-11-14 | Astrium Gmbh | Multifunctional Controller for a Satellite |
-
2014
- 2014-11-28 CN CN201410712859.5A patent/CN104407948B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101281483A (en) * | 2008-05-12 | 2008-10-08 | 北京邮电大学 | Double-machine redundant tolerant system and redundant switching method thereof |
| CN101833536A (en) * | 2010-04-16 | 2010-09-15 | 北京航空航天大学 | Reconfigurable on-board computer of redundancy arbitration mechanism |
| CN101968756A (en) * | 2010-09-29 | 2011-02-09 | 航天东方红卫星有限公司 | Satellite-borne computer autonomously computer switching system based on field programmable gata array (FPGA) |
| CN102650962A (en) * | 2012-04-10 | 2012-08-29 | 北京航空航天大学 | Soft core fault-tolerant spaceborne computer based on FPGA (Field Programmable Gata Array) |
| US20130299642A1 (en) * | 2012-05-14 | 2013-11-14 | Astrium Gmbh | Multifunctional Controller for a Satellite |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107302393A (en) * | 2017-05-18 | 2017-10-27 | 上海卫星工程研究所 | Ensure the active and standby interlock system of remote control unit |
| CN107302393B (en) * | 2017-05-18 | 2020-03-06 | 上海卫星工程研究所 | Main-standby interlocking system for ensuring remote control single machine |
| CN110081984A (en) * | 2019-05-07 | 2019-08-02 | 中国科学院上海技术物理研究所 | Spaceborne infrared detector multipath high-speed signal isolation method, infrared imaging system |
| CN110081984B (en) * | 2019-05-07 | 2020-11-27 | 中国科学院上海技术物理研究所 | Satellite-borne infrared detector multi-path high-speed signal isolation method and infrared imaging system |
| CN111077764A (en) * | 2019-11-26 | 2020-04-28 | 山东航天电子技术研究所 | Cold and hot standby load cross control method and circuit considering power-on and reset |
| CN111077764B (en) * | 2019-11-26 | 2023-10-20 | 山东航天电子技术研究所 | Cold and hot standby load cross control method and circuit with power-on and reset |
| CN112131055A (en) * | 2020-09-08 | 2020-12-25 | 山东航天电子技术研究所 | Multi-mode three-motor dynamic fault-tolerant system |
| CN112131055B (en) * | 2020-09-08 | 2023-11-14 | 山东航天电子技术研究所 | Multi-mode three-motor dynamic fault-tolerant system |
| CN112066974A (en) * | 2020-09-16 | 2020-12-11 | 上海航天控制技术研究所 | Double-light-source switching circuit for optical fiber gyroscope combined system |
| CN112462595A (en) * | 2020-11-10 | 2021-03-09 | 中国科学院空天信息创新研究院 | High-altitude balloon safety control device and method |
| CN113721681A (en) * | 2021-09-13 | 2021-11-30 | 北京微纳星空科技有限公司 | Satellite temperature control device, satellite temperature control method, electronic equipment and storage medium |
| CN113721681B (en) * | 2021-09-13 | 2022-04-26 | 北京微纳星空科技有限公司 | Satellite temperature control device, satellite temperature control method, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104407948B (en) | 2016-08-17 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104407948A (en) | Power-up switching control system and method of cold backup redundant satellite-carried computer | |
| CN103631178B (en) | A kind of double-unit backup redundancy control device | |
| CN101902069B (en) | Cold backup double-machine switching circuit | |
| CN100492223C (en) | Switch circuit for engine redundant electrically-controlled system | |
| CN102163071B (en) | Control circuit and power control method during reset thereof | |
| CN203786723U (en) | Dual redundant system based on X86 PC/104 embedded CPU modules | |
| CN104182305A (en) | Triple modular redundancy control and data management computer and using method thereof | |
| CN1716212B (en) | System and method for recovery from disaster | |
| US20140201513A1 (en) | Power management circuit, server, and power management method thereof | |
| CN102200933A (en) | System BIOS (Basic Input/Output System) automatic restoring method based on dual SPI (Serial Peripheral interface) Flashes | |
| CN108304223A (en) | A kind of operating system for power supply dormancy mechanism and hardware platform exchange method | |
| CN101916068B (en) | Computer control system based on 2-out-of-2 structure and implementation method thereof | |
| CN112182876B (en) | Dual-redundancy steering engine channel fault switching system and logic design method | |
| RU2554124C2 (en) | Switchbox and respective switching method | |
| CN205068150U (en) | Redundant control system | |
| CN103309422A (en) | Power supply device | |
| CN103457586A (en) | Method for achieving electronic device shutdown zero power consumption | |
| CN106598017A (en) | Redundancy control system | |
| JP5445572B2 (en) | Computer system, standby power reduction method, and program | |
| CN101430550B (en) | Switch control method of engine redundancy electric-control system | |
| CN103399807A (en) | Dynamic scene spontaneous recovering method used for triplication redundancy computers | |
| CN107861421B (en) | Dual-redundancy control device and method based on distributed system master-slave rotation type | |
| CN103095502B (en) | The dynamically single channel IIC machine frame management system of two-shipper Switchover mechanism | |
| CN208596339U (en) | A kind of double mainboard computers | |
| CN109782578A (en) | A kind of high reliability deep-sea autonomous underwater vehicle control method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |