CN107942820A - The analog quantity redundant output device and method of a kind of high reliability - Google Patents
The analog quantity redundant output device and method of a kind of high reliability Download PDFInfo
- Publication number
- CN107942820A CN107942820A CN201711375698.5A CN201711375698A CN107942820A CN 107942820 A CN107942820 A CN 107942820A CN 201711375698 A CN201711375698 A CN 201711375698A CN 107942820 A CN107942820 A CN 107942820A
- Authority
- CN
- China
- Prior art keywords
- modules
- module
- output
- cpu
- analog quantity
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 14
- 238000004891 communication Methods 0.000 claims abstract description 31
- 238000004519 manufacturing process Methods 0.000 claims description 12
- 230000003862 health status Effects 0.000 claims description 10
- 238000012360 testing method Methods 0.000 claims description 10
- 238000002955 isolation Methods 0.000 claims description 4
- 238000006243 chemical reaction Methods 0.000 claims description 3
- 230000005611 electricity Effects 0.000 claims 2
- 230000003321 amplification Effects 0.000 claims 1
- 238000003199 nucleic acid amplification method Methods 0.000 claims 1
- 230000008859 change Effects 0.000 description 3
- 238000001514 detection method Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000009414 blockwork Methods 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000009977 dual effect Effects 0.000 description 1
- 230000036541 health Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24175—Redundant communication channel, if one fails use the other
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The present invention relates to the analog quantity redundant output device and method of a kind of high reliability, the device includes device A and device B, the device A and device B passes through system communications bus and host connection communication respectively, the device A is mutually redundant and identical with device B, one of device is operated in main output state for master device in the device A and device B, another device is operated in stand-by state for stand-by provision, stand-by provision can be reliably switched to when the master device failure, is operated in stand-by state；Stand-by provision originally switches to master device and continues to output immediately, is operated in main output state.Compared with prior art, the present invention has the advantages that to reduce cost, improves system reliability.
Description
Technical field
The present invention relates to track traffic scheduling field, more particularly, to a kind of analog quantity redundant output device of high reliability
And method.
Background technology
In track transportation industry, it is desirable to which system can run without interruption, and the system that it requires has very high available
Property.In order to realize high availability, the system in industry is substantially using redundancy structure, such as two multiply two and take two frameworks or three
Take two frameworks.Either two, which multiply two, takes two frameworks or two from three framework, is all by 2 or 3 identical moulds in principle
Block works at the same time, while exports to improve the availability of system.It is defeated that redundancy is carried out for communication function and digital quantity output function
Go out to be easier to, but export technically more complicated, it is necessary to strictly detect output state for the redundancy of analog quantity, while also need
Separate physical switching device is wanted to make choice and switch the analog output of redundancy.
In real-time system, asked as follows using independent physical switch device to realize that amount of redundancy outgoing management can face
Topic：
1st, real-time：Using independent physical switch device come managing redundant analog output, since switching device is independent
In analogue quantity output device, not altogether, so it is time-consuming very long to control relay to switch over again upon failure detection, cause be
Externally output is discontinuous for system；
2nd, flexibility：Due to using self-contained unit come managing redundant analog output situation, it is contemplated that cost and convenience,
All be system-level switching, that is to say, that when system all the way or a few roads are broken down, all outputs are all switched to another
One back-up system, can not accomplish that plate level is hot standby, the switching of plate level；
3rd, reliability：When matching somebody with somebody redundancy switching device outside, switching device is still a single-point, may there are Single Point of Faliure
Property, the failure of switching device may cause the loss of redundancy of system, influence to run, and cause serious consequence；
4th, cost：It is outer when matching somebody with somebody redundancy switching device, in order to obtain relatively high reliability, it is necessary to first device using electrical category
Part, causes cost to raise；
By retrieval, China Patent Publication No. discloses a kind of wired and wireless hot backup redundancy communication for CN202735735U
Inexpensive site measuring and control I/O modules, it is single which includes analog input interface, switching value I/O interfaces, A/D conversions
Member, digital isolated location, central processing unit, Landline communication unit, wireless communication unit, D/A converting units, analog output connect
Mouthful.Slave has I/O interfaces, can directly either live actuator is connected and obtains state or the control of instrument with instrument
Field device.Its wired and wireless communication unit can realize redundancy communication using the algorithm above at the same time, so then can be with structure
Build the TT＆C system of the dual network redundancy communication of a field level.Improve the reliability of industry spot Monitoring and control system.
But the invention refers to the network redundancy communications field, the technical requirements together in this programme are not inconsistent.
The content of the invention
It is an object of the present invention to overcome the above-mentioned drawbacks of the prior art and provide a kind of mould of high reliability
Analog quantity redundant output device and method.
The purpose of the present invention can be achieved through the following technical solutions：
The analog quantity redundant output device of a kind of high reliability, it is characterised in that the device includes device A and device B, institute
The device A and device B stated is mutually redundant by system communications bus and host connection communication, the device A and device B respectively
And it is identical, one of device is operated in main output state for master device in the device A and device B, another dress
It is set to stand-by provision and is operated in stand-by state, can be reliably switched to stand-by provision when the master device failure, be operated in
Stand-by state；Stand-by provision originally switches to master device and continues to output immediately, is operated in main output state.
Preferably, the device A includes 1 module of power supply, 2 module of power supply, CPU_1 modules, CPU_2 modules, digital-to-analogue turn
Change the mold block, 1 module of switch, 2 modules of 2 modules of switch, 1 module of collection and collection；
The CPU_1 modules and CPU_2 modules pass through universal serial bus and host connection communication, the CPU_1 respectively
Module and CPU_2 modules interconnect communication, and 1 module of power supply connects D/A converter module by CPU_1 modules, described
2 module of power supply 1 mould of IO control lines connecting valve is passed through by 2 module of CPU_2 modules connecting valve, the CPU_1 modules
Block, the D/A converter module is by switching 1 module connecting valve, 2 module, 1 module of collection and 2 modules of collection
Collection terminal distinguishes the output interface of 2 module of connecting valve, and the output terminal connection CPU_1 modules of 1 module of collection are described
Gather the output terminal connection CPU_2 modules of 2 modules.
Preferably, 2 module of 1 module of power supply and power supply, CPU_1 modules and the CPU_2 modules, switch and are opened 1 module
Close 2 modules, 1 module of collection and collection 2 modules difference is identical and isolation is independent.
Preferably, the output interface of 2 module of switch of the output interface of 2 module of switch of the device A and device B is simultaneously
It is connected to and realizes that analog quantity redundancy exports together.
Preferably, 1 module of collection and 2 modules of collection include sequentially connected amplifying circuit and A/D chip, institute
Analog output State Transferring is sent respectively to CPU_1 modules and CPU_2 by 1 module of collection stated with 2 modules of collection into numerical value
Module.
Preferably, the CPU_1 modules can control D/A converter module output analog quantity according to Host Command, described
Analog quantity be converted into voltage output or electric current according to different amplifying circuits and export.
Preferably, 1 module of switch and 2 modules of switch are determined according to the control of CPU_1 modules and CPU_2 modules respectively
Surely allow analog output or close analog output.
Preferably, the D/A converter module is model：The D/A converter module of LTC8043F.
A kind of method of the analog quantity redundant output device of the high reliability, the method comprise the following steps：
(1) after apparatus starts, the initialization module of device A and device B initialize facility information, and according to
The state table configuration output port of setting；
(2) for setting command variable not export " 0 ", CPU_1 modules and CPU_2 modules control line traffic control to open by IO respectively
Close 1 module and switch the analog output that 2 modules close the present apparatus；
(3) device A and device B carries out self-test to oneself state, including power supply health status, CPU health status and deposits
Storage equipment health status is checked, if detecting that failure needs to close output, otherwise performs step (4)；
(4) device A and device B are by universal serial bus and main-machine communication, and perform output according to Host Command or set
It is set to standby host；
(5) Host Command parsed according to step (4) judges that the host requirement present apparatus is used as master device or standby
With device, if host requires the present apparatus to be used as stand-by provision, it is directly entered step (2) and carries out self-test and again receiving host life
Order；If host requires the present apparatus to enter step (6) as main output device and perform output function；
(6) only have CPU_1 modules can according to Host Command control D/A converter module output analog quantity, analog quantity according to
Different amplifying circuits are converted into voltage output or electric current output；
(7) CPU_1 modules and CPU_2 modules open 2 modules of 1 module of switch and switch respectively, it is allowed to which analog quantity passes through 2
Switch is output to outside device；
(8) CPU_1 modules and CPU_2 modules respectively by gather 1 module and gather the collection output of 2 modules voltage or
Current status；
(9) CPU_1 modules and CPU_2 modules mutually pass the output state oneself collected to other side, complete after mutually passing, each
CPU module can all obtain the gathered data of 2 parts of output states；
(10) each CPU module compares whether 2 the poor of output state back production values are less than allowable error first, if less than
Allowable error illustrates that back production circuit function is normal；After completion double channels acquisition value confirms and meets the requirements, each passage can profit
The output bid value that the value gathered with 1 module of collection is sent with host is contrasted, if the difference of two values exceedes allowable error
Enter step (11), close output and notify the host present apparatus failure at the same time, enable stand-by provision；If two value it is poor small
In allowable error, illustrate that the present apparatus is working properly, entering step (3), self-test and taking orders works on again；
(11) CPU_1 modules and CPU_2 modules control 1 module of line control switch and 2 modules of switch to close by IO respectively
The analog output of the present apparatus, while notify the host present apparatus failure, enable stand-by provision.
Preferably, the allowable error in the step (10) is set to ± 2%.
Compared with prior art, the present invention has the following advantages：
1st, in the program, analog output is realized by active and standby two devices, it is not necessary to arbitrary switch-over device, two devices
One is main working status during work, another is standby working status.Failed equipment is automatically switched to standby working status, former spare
Device is switched to main output state according to communication.Since switching device is not required, improved at the same time reliably so reducing cost
Property and real-time.
2nd, in order to improve reliability in the program, analog output state is gathered by 2 independent acquisition modules, is prevented
The failure of single Acquisition Circuit causes error in judgement, and the device that can not be transformed into health in time works.The system of improving can
By property, real-time and flexibility.
3rd, in the program, 2 grades of switch controls, either D/A converter module failure are added still for analog output
Single switch failure, failed equipment can reliably be transformed into stand-by state, and stand-by provision originally automatically switches to main work
Make state.Any Single Point of Faliure is all without influence system availability inside device.The reliability and real-time of the system of raising.
Brief description of the drawings
Fig. 1 is the device of the invention structure diagram；
Fig. 2 is the method flow diagram of the use of the present invention device.
Embodiment
The technical solution in the embodiment of the present invention will be clearly and completely described below, it is clear that described implementation
Example is the part of the embodiment of the present invention, rather than whole embodiments.Based on the embodiments of the present invention, ordinary skill
Personnel's all other embodiments obtained on the premise of creative work is not made, should all belong to the model that the present invention protects
Enclose.
As shown in Figure 1, a kind of analog quantity redundant output device of high reliability, which includes device A and device B, institute
The device A and device B stated is mutually redundant by system communications bus and host connection communication, the device A and device B respectively
And it is identical, one of device is operated in main output state for master device in the device A and device B, another dress
It is set to stand-by provision and is operated in stand-by state, can be reliably switched to stand-by provision when the master device failure, be operated in
Stand-by state；The original stand-by provision switches to master device and continues to output immediately, is operated in main output state.
The method of the present invention includes following steps：
1) device initializes system after starting, and sets device output state to prevent failed equipment from opening not export
Other normal appts are had an impact when dynamic；
2) device is to itself progress health status inspection, including checks communication function, calculation function and output back production function,
If detecting that failure needs to close output, ensure Fault Isolation；
3) 2 computing CPU at the same time and main-machine communication, main output state are operated in also according to communication judgment means inside device
Stand-by state, only 2 CPU all receive be operated in main output state allow order after can just perform output, CPU_1 roots
Being opened at the same time according to Host Command output analog value allows output to switch, and CPU_2, which is opened, allows output to switch, and device performs at this time
Defined analog output function；
4) CPU_1 inside device and CPU_2 is by 2 sets of independent acquisition module back production analog output states, and handle
Compared with Host Command, only device is working properly just may proceed to allow analog output back production state；
5) any one in 2 CPU inside device detects that output state is inconsistent or abnormal with Host Command, all
The output function of shutoff device that can be independent.Stand-by state is transformed into after plant failure, does not influence master device work；
The device A includes 1 module a of power supply, 2 module b, CPU_1 module c, CPU_2 module d of power supply, and digital-to-analogue turns
Block e is changed the mold, switchs 1 module f, switchs 2 module g, 2 module i of 1 module h of collection and collection.CPU_1 module c and CPU_2 modules d leads to
Cross universal serial bus and main-machine communication, the output of device A and device B directly and are connected to and realize that redundancy exports together.
Each module is illustrated：
1st, 1 module a of power supply：
Power supply is provided for CPU_1 modules c, D/A converter module e, 1 module f of switch, 1 module h of collection, it is reliable in order to improve
Property prevent that common mode failure from causing loss of redundancy, 1 module f of switch, 1 module h of collection are with 2 module g of switch, 2 module i of collection using not
With power supply power supply, (power supply 1 module a and 2 module b) of power supply simultaneously keeps isolation independent；
2nd, 2 module b of power supply：
Power supply is provided for CPU_2 modules d, 2 module g of switch, 2 module i of collection；
3rd, CPU_1 modules c：
By universal serial bus and main-machine communication, D/A converter module output analog quantity, while root are controlled according to Host Command
State according to 1 module h of collection carrys out 1 module f of driving switch with order uniformity.CPU_1 modules c is main control module, responsible communication,
Detection, outgoing management；
4th, CPU_2 modules d：
By universal serial bus and main-machine communication, according to the state of 2 module i of collection with order uniformity come 2 mould of driving switch
The function and CPU_1 modules c of block g, CPU_2 module d is essentially identical, and unique difference is that CPU_2 modules d does not drive digital-to-analogue modulus of conversion
Block e；
5th, D/A converter module e：
Communicated by serial bus interface with CPU_1 modules c, export analog quantity to amplifying circuit, then output valve transmission
Give 1 module f of switch and switch 2 module g；
6th, 1 module f is switched：
Controlled by CPU_1 modules c, determine to allow analog output according to the control of CPU_1 modules c or close analog quantity
Output；
7th, 2 module g are switched：
Controlled by CPU_2 modules d, determine to allow analog output according to the control of CPU_2 modules d or close analog quantity
Output；
8th, 1 module h is gathered：
Analog output state is gathered, comprising amplifying circuit and A/D chip, analog output State Transferring is sent out into numerical value
CPU_1 modules c, CPU_1 module c is given according to this back production state to determine whether output state is normal；
9th, 2 module i are gathered：
Analog output state is gathered, comprising amplifying circuit and A/D chip, analog output State Transferring is sent out into numerical value
CPU_2 modules d, CPU_2 module d is given according to this back production state to determine whether output state is normal；
The D/A converter module is model：The D/A converter module of LTC8043F.
As shown in Fig. 2, a kind of method of analog quantity redundant output device using high reliability, the method include with
Lower step：
(1), after apparatus starts, the initialization module of device A and device B initialize facility information, and press
Output port is configured according to the state table of setting；
(2), the setting command variable register of host machine control command (receive) is do not export " 0 ", CPU_1 modules and
CPU_2 modules control 1 module of line control switch by IO respectively and switch the analog output that 2 modules close the present apparatus；
(3), device A and device B carries out self-test to oneself state, including power supply health status, CPU health status and deposits
Whether storage equipment health status is checked, while check output state with ordering unanimously.If entered step from step (2)
(3), in step (2), command argument is already set as " 0 ", so this step checks whether analog output has been off.
If entering step (3) from step (11), output state is not reexamined whether with ordering consistent, a progress self-check of device；
(4), device A and device B are by universal serial bus and main-machine communication, and perform output according to Host Command or set
It is set to standby host (not exporting).In this step, device device A and device B can check communication buffer area, parse Host Command；
(5), the Host Command parsed according to step (4) judges that the host requirement present apparatus is used as master device or standby
With device, if host requires the present apparatus to be used as stand-by provision, it is directly entered step (2) and carries out self-test and again receiving host life
Order.If host requires the present apparatus to enter step (6) as main output device and perform output function；
(6), only CPU_1 modules can control D/A converter module output analog quantity, analog quantity root according to Host Command
Voltage output or electric current output are converted into according to different amplifying circuits；
(7), CPU_1 modules and CPU_2 modules open 2 modules of 1 module of switch and switch respectively, it is allowed to which analog quantity passes through 2
A switch is output to outside device；
(8), CPU_1 modules and CPU_2 modules respectively by gather 1 module and gather the collection output of 2 modules voltage or
Person's current status；
(9), CPU_1 modules and CPU_2 modules mutually pass the output state oneself collected to other side, complete after mutually passing, often
A CPU module can all obtain the gathered data of 2 parts of output states；
(10), each CPU module compares whether 2 the poor of output state back production values are less than allowable error first, if small
Illustrate that back production circuit function is normal in allowable error.After completion double channels acquisition value confirms and meets the requirements, each passage can
The output bid value sent using the value of collection 1 module collection with host is contrasted, and allows to miss if the difference of two values exceedes
Difference enters step (11), closes output and notifies the host present apparatus failure at the same time, enables stand-by provision.If the difference of two values
Less than allowable error, illustrate that the present apparatus is working properly, entering step (3), self-test and taking orders works on again；
(11), CPU_1 modules and CPU_2 modules control 1 module of line control switch and 2 modules of switch to close by IO respectively
The analog output of the present apparatus, while notify the host present apparatus failure, enable stand-by provision.
Allowable error in the step (10) is set to ± 2%.
The principle of the present invention is：Multiply the two redundant system frameworks for taking two using two, analog output is mutually redundant by two
And identical device is realized, a device is operated in main output state for master device, another device is stand-by provision
Stand-by state is operated in, stand-by state can be reliably switched to when master device failure, stand-by provision originally switches to immediately
Master device continues to output, and is operated in main output state.
The present invention is applied in the analog quantity control module of on-vehicle safety platform, the use of this technology, can be with
Extra redundancy handover module is reduced, reduces system hardware complexity.Exported as a result of redundancy, redundancy back production, redundancy is cut
Change, so while cost is reduced, be effectively improved system reliability.
The designing scheme carried out detailed test in project development, it was demonstrated that scheme is feasible.
The above description is merely a specific embodiment, but protection scope of the present invention is not limited thereto, any
Those familiar with the art the invention discloses technical scope in, various equivalent modifications can be readily occurred in or replaced
Change, these modifications or substitutions should be covered by the protection scope of the present invention.Therefore, protection scope of the present invention should be with right
It is required that protection domain subject to.
Claims (10)
1. the analog quantity redundant output device of a kind of high reliability, it is characterised in that the device includes device A and device B, described
Device A and device B be mutually redundant respectively by system communications bus and host connection communication, the device A and device B and
Identical, one of device is operated in main output state for master device in the device A and device B, another device
Stand-by state is operated in for stand-by provision, stand-by provision can be reliably switched to when the master device failure, be operated in standby
Use state；Stand-by provision originally switches to master device and continues to output immediately, is operated in main output state.
A kind of 2. analog quantity redundant output device of high reliability according to claim 1, it is characterised in that the dress
Putting A includes 1 module of power supply, 2 module of power supply, CPU_1 modules, CPU_2 modules, D/A converter module, 1 module of switch, 2 moulds of switch
2 modules of block, 1 module of collection and collection；
The CPU_1 modules and CPU_2 modules pass through universal serial bus and host connection communication, the CPU_1 modules respectively
Interconnect and communicate with CPU_2 modules, 1 module of power supply connects D/A converter module, the electricity by CPU_1 modules
2 module of source passes through 1 module of IO control lines connecting valve, institute by 2 module of CPU_2 modules connecting valve, the CPU_1 modules
The D/A converter module stated is by switching 1 module connecting valve, 2 module, the collection terminal of 2 modules of 1 module of collection and collection
The output interface of 2 module of connecting valve respectively, the output terminal connection CPU_1 modules of 1 module of collection, the collection 2
The output terminal connection CPU_2 modules of module.
A kind of 3. analog quantity redundant output device of high reliability according to claim 2, it is characterised in that the electricity
2 modules of 2 module of 1 module of source and power supply, CPU_1 modules and CPU_2 modules, 1 module of switch and switch, 1 module of collection and collection 2
Module difference is identical and isolation is independent.
A kind of 4. analog quantity redundant output device of high reliability according to claim 2, it is characterised in that the dress
Put the output interface of the output interface of 2 module of switch of A and 2 module of switch of device B and be connected to and realize analog quantity redundancy together
Output.
5. the analog quantity redundant output device of a kind of high reliability according to claim 2, it is characterised in that described adopts
Collecting 1 module and 2 modules of collection includes sequentially connected amplifying circuit and A/D chip, 2 modules of 1 module of collection and collection
Analog output State Transferring is sent respectively to CPU_1 modules and CPU_2 modules into numerical value.
6. the analog quantity redundant output device of a kind of high reliability according to claim 2, it is characterised in that described
CPU_1 modules can control D/A converter module output analog quantity according to Host Command, and the analog quantity is according to different amplifications
Circuit conversion is exported into voltage output or electric current.
7. the analog quantity redundant output device of a kind of high reliability according to claim 2, it is characterised in that described opens
1 module and 2 modules of switch are closed to be determined to allow analog output or pass respectively according to the control of CPU_1 modules and CPU_2 modules
Close analog output.
A kind of 8. analog quantity redundant output device of high reliability according to claim 2, it is characterised in that the number
Mould modular converter is model：The D/A converter module of LTC8043F.
A kind of 9. method of the analog quantity redundant output device of high reliability using described in claim 2, it is characterised in that institute
The method stated comprises the following steps：
(1) after apparatus starts, the initialization module of device A and device B initialize facility information, and according to setting
State table configuration output port；
(2) for setting command variable not export " 0 ", CPU_1 modules and CPU_2 modules control line control switch 1 by IO respectively
Module and 2 modules of switch close the analog output of the present apparatus；
(3) device A and device B carries out oneself state self-test, including power supply health status, CPU health status and storage are set
Standby health status is checked, if detecting that failure needs to close output, otherwise performs step (4)；
(4) device A and device B are by universal serial bus and main-machine communication, and perform output according to Host Command or be arranged to
Standby host；
(5) Host Command parsed according to step (4) judges the host requirement present apparatus as master device or spare dress
Put, if host requires the present apparatus to be directly entered step (2) as stand-by provision and carry out self-test and receiving host order again；
If host requires the present apparatus to enter step (6) as main output device and perform output function；
(6) CPU_1 modules control D/A converter module output analog quantity according to Host Command, analog quantity is according to difference
Amplifying circuit is converted into voltage output or electric current output；
(7) CPU_1 modules and CPU_2 modules open 2 modules of 1 module of switch and switch respectively, it is allowed to which analog quantity passes through 2 switches
It is output to outside device；
(8) CPU_1 modules and CPU_2 modules are respectively by gathering 1 module and gathering the voltage or electric current of the collection output of 2 modules
State；
(9) CPU_1 modules and CPU_2 modules mutually pass the output state oneself collected to other side, complete after mutually passing, each CPU
Module can all obtain the gathered data of 2 parts of output states；
(10) each CPU module compares whether 2 the poor of output state back production values are less than allowable error first, if less than permission
Error note back production circuit function is normal；After completion double channels acquisition value confirms and meets the requirements, each passage can be utilized and adopted
Collect the output bid value that the value that 1 module gathers is sent with host to be contrasted, if the differences of two values enter more than allowable error
Step (11), closes output and notifies the host present apparatus failure at the same time, enable stand-by provision；Permit if the difference of two values is less than
Perhaps error, illustrates that the present apparatus is working properly, and entering step (3), self-test and taking orders works on again；
(11) CPU_1 modules and CPU_2 modules control 1 module of line control switch and 2 modules of switch to close this dress by IO respectively
The analog output put, while notify the host present apparatus failure, enable stand-by provision.
10. a kind of method of the analog quantity redundant output device according to claim 9 using high reliability, its feature exist
In the allowable error in the step (10) is set to ± 2%.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711375698.5A CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711375698.5A CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107942820A true CN107942820A (en) | 2018-04-20 |
| CN107942820B CN107942820B (en) | 2024-03-29 |
Family
ID=61940821
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711375698.5A Active CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107942820B (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109164787A (en) * | 2018-08-31 | 2019-01-08 | 杭州和利时自动化有限公司 | A kind of analog signals acquisition device |
| CN109634171A (en) * | 2018-12-06 | 2019-04-16 | 通号万全信号设备有限公司 | Double-core twin-lock step two takes two frameworks and its security platform |
| CN110456688A (en) * | 2019-07-22 | 2019-11-15 | 北京交大微联科技有限公司 | Output control system, method, equipment and the vehicle of signal |
| CN111405047A (en) * | 2020-03-19 | 2020-07-10 | 北京永列科技有限公司 | Method for realizing two-by-two-out-of-two axle counting communication interface switching |
| CN112087154A (en) * | 2019-06-14 | 2020-12-15 | 株式会社电装 | Power supply system |
| CN113110258A (en) * | 2021-05-21 | 2021-07-13 | 华自科技股份有限公司 | Control system and redundancy switching method of control device |
| CN113741250A (en) * | 2021-08-16 | 2021-12-03 | 辽宁荣信兴业电力技术有限公司 | Redundancy control system and method for SVG |
| CN113885401A (en) * | 2021-10-27 | 2022-01-04 | 杭州和利时自动化有限公司 | Analog quantity output method, device and medium |
| CN115276922A (en) * | 2022-07-15 | 2022-11-01 | 卡斯柯信号有限公司 | Main/standby state control method suitable for full electronic system |
Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0915400A2 (en) * | 1997-11-06 | 1999-05-12 | Siemens Aktiengesellschaft | Peripheral control unit for a process control system |
| JP2008312327A (en) * | 2007-06-13 | 2008-12-25 | Meidensha Corp | Analog input circuit of digital protection relay |
| CN101552662A (en) * | 2008-04-03 | 2009-10-07 | 卡斯柯信号有限公司 | Data transmission system for telecommunication |
| CN201909961U (en) * | 2010-05-18 | 2011-07-27 | 北京捷世伟业电子科技有限公司 | Redundancy control system |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN202735735U (en) * | 2012-06-11 | 2013-02-13 | 成都瑞特数字科技有限责任公司 | Low-cost on-site measurement and control I/O module of wired and wireless hot standby redundancy communication |
| CN103176870A (en) * | 2013-03-21 | 2013-06-26 | 中国铁道科学研究院 | Multi-mode information interaction redundancy safety computer platform |
| CN203617395U (en) * | 2013-11-28 | 2014-05-28 | 中国科学院沈阳自动化研究所 | PEMFC (proton exchange membrane fuel cell) two-unit standby controller |
| CN203786481U (en) * | 2013-12-19 | 2014-08-20 | 上海新华控制技术(集团)有限公司 | Gas turbine redundancy control system analog quantity input module |
| CN204229171U (en) * | 2014-11-27 | 2015-03-25 | 华车（北京）交通装备有限公司 | A kind of air-conditioner set control circuit based on dual processors backup |
| CN104597827A (en) * | 2014-12-31 | 2015-05-06 | 上海自动化仪表股份有限公司 | Smart electric control execution system supporting loop redundancy control and control method thereof |
| CN104714406A (en) * | 2014-12-31 | 2015-06-17 | 重庆川仪自动化股份有限公司 | Redundancy switching method of input and output module |
| KR101554249B1 (en) * | 2015-06-30 | 2015-09-18 | 주식회사 나라컨트롤 | Total dual type control system based on detection of abnormal state at a control point and Control method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
| CN205656443U (en) * | 2016-04-29 | 2016-10-19 | 固安信通信号技术股份有限公司 | Controlling means based on two take advantage of two to get two safe redundant systems |
| CN106502158A (en) * | 2016-11-16 | 2017-03-15 | 东南大学 | A kind of novel ship propulsion controlling system based on bottom dual redundant structure |
| WO2017107665A1 (en) * | 2015-12-21 | 2017-06-29 | 湖南中车时代通信信号有限公司 | Safety computer system for use in train control |
| CN107168284A (en) * | 2017-05-23 | 2017-09-15 | 深圳市汇辰自动化技术有限公司 | A kind of apparatus and method of automatic calibration PLC analog output modules |
| CN206749825U (en) * | 2017-05-02 | 2017-12-15 | 华东交通大学 | One kind two multiplies two and takes two wheel counting apparatus |
| CN207689863U (en) * | 2017-12-19 | 2018-08-03 | 卡斯柯信号有限公司 | The analog quantity redundant output device of high reliability |
-
2017
- 2017-12-19 CN CN201711375698.5A patent/CN107942820B/en active Active
Patent Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0915400A2 (en) * | 1997-11-06 | 1999-05-12 | Siemens Aktiengesellschaft | Peripheral control unit for a process control system |
| JP2008312327A (en) * | 2007-06-13 | 2008-12-25 | Meidensha Corp | Analog input circuit of digital protection relay |
| CN101552662A (en) * | 2008-04-03 | 2009-10-07 | 卡斯柯信号有限公司 | Data transmission system for telecommunication |
| CN201909961U (en) * | 2010-05-18 | 2011-07-27 | 北京捷世伟业电子科技有限公司 | Redundancy control system |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN202735735U (en) * | 2012-06-11 | 2013-02-13 | 成都瑞特数字科技有限责任公司 | Low-cost on-site measurement and control I/O module of wired and wireless hot standby redundancy communication |
| CN103176870A (en) * | 2013-03-21 | 2013-06-26 | 中国铁道科学研究院 | Multi-mode information interaction redundancy safety computer platform |
| CN203617395U (en) * | 2013-11-28 | 2014-05-28 | 中国科学院沈阳自动化研究所 | PEMFC (proton exchange membrane fuel cell) two-unit standby controller |
| CN203786481U (en) * | 2013-12-19 | 2014-08-20 | 上海新华控制技术(集团)有限公司 | Gas turbine redundancy control system analog quantity input module |
| CN204229171U (en) * | 2014-11-27 | 2015-03-25 | 华车（北京）交通装备有限公司 | A kind of air-conditioner set control circuit based on dual processors backup |
| CN104597827A (en) * | 2014-12-31 | 2015-05-06 | 上海自动化仪表股份有限公司 | Smart electric control execution system supporting loop redundancy control and control method thereof |
| CN104714406A (en) * | 2014-12-31 | 2015-06-17 | 重庆川仪自动化股份有限公司 | Redundancy switching method of input and output module |
| KR101554249B1 (en) * | 2015-06-30 | 2015-09-18 | 주식회사 나라컨트롤 | Total dual type control system based on detection of abnormal state at a control point and Control method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
| WO2017107665A1 (en) * | 2015-12-21 | 2017-06-29 | 湖南中车时代通信信号有限公司 | Safety computer system for use in train control |
| CN205656443U (en) * | 2016-04-29 | 2016-10-19 | 固安信通信号技术股份有限公司 | Controlling means based on two take advantage of two to get two safe redundant systems |
| CN106502158A (en) * | 2016-11-16 | 2017-03-15 | 东南大学 | A kind of novel ship propulsion controlling system based on bottom dual redundant structure |
| CN206749825U (en) * | 2017-05-02 | 2017-12-15 | 华东交通大学 | One kind two multiplies two and takes two wheel counting apparatus |
| CN107168284A (en) * | 2017-05-23 | 2017-09-15 | 深圳市汇辰自动化技术有限公司 | A kind of apparatus and method of automatic calibration PLC analog output modules |
| CN207689863U (en) * | 2017-12-19 | 2018-08-03 | 卡斯柯信号有限公司 | The analog quantity redundant output device of high reliability |
Non-Patent Citations (4)
| Title |
|---|
| 周宇恒等: "基于Ｓｔａｔｅｆｌｏｗ的轨旁安全平台主备切换机制设计", 《铁道通信信号》, vol. 51, no. 6, 17 June 2015 (2015-06-17), pages 88 - 91 * |
| 张健;郭红波;: "基于PLC的二极管电路在某能源化工公司的应用", 自动化与仪器仪表, no. 12 * |
| 董长青: "安全冗余结构铁路信号配电***研究", 《铁路通信信号》, vol. 43, no. 8, pages 7 - 9 * |
| 黄鲁江等: "基于Markov过程的二乘二取二计算机联锁***的可靠性和安全性分析", 《技术创新》, vol. 14, no. 5, 25 October 2017 (2017-10-25), pages 1 - 4 * |
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109164787A (en) * | 2018-08-31 | 2019-01-08 | 杭州和利时自动化有限公司 | A kind of analog signals acquisition device |
| CN109634171A (en) * | 2018-12-06 | 2019-04-16 | 通号万全信号设备有限公司 | Double-core twin-lock step two takes two frameworks and its security platform |
| CN109634171B (en) * | 2018-12-06 | 2020-09-25 | 通号万全信号设备有限公司 | Dual-core dual-lock-step two-out-of-two framework and safety platform thereof |
| CN112087154A (en) * | 2019-06-14 | 2020-12-15 | 株式会社电装 | Power supply system |
| CN110456688A (en) * | 2019-07-22 | 2019-11-15 | 北京交大微联科技有限公司 | Output control system, method, equipment and the vehicle of signal |
| CN111405047A (en) * | 2020-03-19 | 2020-07-10 | 北京永列科技有限公司 | Method for realizing two-by-two-out-of-two axle counting communication interface switching |
| CN113110258A (en) * | 2021-05-21 | 2021-07-13 | 华自科技股份有限公司 | Control system and redundancy switching method of control device |
| CN113741250A (en) * | 2021-08-16 | 2021-12-03 | 辽宁荣信兴业电力技术有限公司 | Redundancy control system and method for SVG |
| CN113741250B (en) * | 2021-08-16 | 2024-03-26 | 辽宁荣信电力电子技术有限公司 | Redundancy control system and method for SVG |
| CN113885401A (en) * | 2021-10-27 | 2022-01-04 | 杭州和利时自动化有限公司 | Analog quantity output method, device and medium |
| CN113885401B (en) * | 2021-10-27 | 2024-02-20 | 杭州和利时自动化有限公司 | Analog quantity output method, device and medium |
| CN115276922A (en) * | 2022-07-15 | 2022-11-01 | 卡斯柯信号有限公司 | Main/standby state control method suitable for full electronic system |
| CN115276922B (en) * | 2022-07-15 | 2023-10-31 | 卡斯柯信号有限公司 | Main and standby state control method suitable for all-electronic system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107942820B (en) | 2024-03-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107942820A (en) | The analog quantity redundant output device and method of a kind of high reliability | |
| CN102664465B (en) | Breaker controller with dual-power-source switching function, switching system and switching method | |
| CN110351174A (en) | A kind of safety computer platform of module redundancy | |
| CN103683218B (en) | Distributed Busbar Protection Device based on HSR looped networks | |
| CN110361979A (en) | A kind of safety computer platform in railway signal field | |
| CN110376876A (en) | A kind of safety computer platform that double systems are synchronous | |
| CN104966538B (en) | A kind of nuclear power plant instrument control system based on FPGA technology | |
| CN201789336U (en) | Remote service device for bus bar products | |
| CN104967220A (en) | Transformer substation monitoring system | |
| CN101710737A (en) | Bus intelligent control system | |
| CN105652852A (en) | Detection and monitoring system of high-voltage frequency converter power unit and mainboard thereof | |
| CN100507580C (en) | Electronic type transformer high voltage side redundant backup circuit and failure detection method | |
| CN100470976C (en) | Integrated automation converting station debugging apparatus | |
| CN207689863U (en) | The analog quantity redundant output device of high reliability | |
| CN103633936B (en) | A kind of photovoltaic header box automatic test system | |
| CN105301451A (en) | Intelligent feed line control terminal | |
| CN106602514A (en) | Substation area dead zone protection system based on area information sharing | |
| CN202421854U (en) | Triplex level redundancy switching value output module for DCS (data communication system) | |
| CN114006804B (en) | Distribution edge server system based on centralized protection control system architecture | |
| CN105868138A (en) | Automatic switching device of USB (Universal Serial Bus) interface | |
| CN110412862A (en) | Computer interlock system and its method for handover control, equipment, storage medium | |
| CN107688335A (en) | A kind of cruise mode and the changeable launch vehicle measurement of emission mode | |
| CN205247185U (en) | Secondary control system of water cooling transformer | |
| KR20010041271A (en) | Dual optical communication network for reactor protection systems | |
| CN206440960U (en) | A kind of active power filter control system based on FPGA |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |