CN107942820B - High-reliability analog quantity redundant output device and method - Google Patents
High-reliability analog quantity redundant output device and method Download PDFInfo
- Publication number
- CN107942820B CN107942820B CN201711375698.5A CN201711375698A CN107942820B CN 107942820 B CN107942820 B CN 107942820B CN 201711375698 A CN201711375698 A CN 201711375698A CN 107942820 B CN107942820 B CN 107942820B
- Authority
- CN
- China
- Prior art keywords
- module
- output
- cpu
- switch
- acquisition
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 20
- 238000004891 communication Methods 0.000 claims abstract description 19
- 238000006243 chemical reaction Methods 0.000 claims description 25
- 230000005540 biological transmission Effects 0.000 claims description 3
- 238000012790 confirmation Methods 0.000 claims description 3
- 238000002955 isolation Methods 0.000 description 3
- 238000000605 extraction Methods 0.000 description 2
- 238000005259 measurement Methods 0.000 description 2
- 238000011084 recovery Methods 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24175—Redundant communication channel, if one fails use the other
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The utility model relates to a high-reliability analog quantity redundant output device and a method, wherein the device comprises a device A and a device B, the device A and the device B are respectively connected and communicated with a host computer through a system communication bus, the device A and the device B are redundant and identical, one device in the device A and the device B is a main device and works in a main output state, the other device is a standby device and works in a standby state, and when the main device fails, the device A and the device B can be reliably switched to the standby device and work in the standby state; the original standby device is immediately switched into the main device to continue to output and works in the main output state. Compared with the prior art, the utility model has the advantages of reducing the cost, improving the reliability of the system and the like.
Description
Technical Field
The utility model relates to the field of rail transit scheduling, in particular to a high-reliability analog quantity redundant output device and method.
Background
In the rail traffic industry, systems are required to be able to operate uninterrupted, so that very high availability of the systems is required. To achieve high availability, systems within the industry basically employ redundant architectures, such as two-by-two or two-three architectures. Whether a two-by-two or a two-by-three architecture, in principle, the system is operated simultaneously by 2 or 3 identical modules, with the output improving the usability of the system. The redundant output of the communication function and the digital output function is easier, but the redundant output of the analog is technically complex, the output state is required to be strictly detected, and meanwhile, the redundant analog output is required to be selected and switched by an independent physical switching device.
In a real-time system, the following problems are faced in implementing the redundancy quantity management by using an independent physical switching device:
1. real-time performance: the independent physical switching device is adopted to manage redundant analog quantity output, and because the switching device is independent of the analog quantity output device and is not commonly grounded, the time for switching by controlling the relay after detecting the fault is long, so that the system is discontinuous in external output;
2. flexibility: because the independent device is adopted to manage the output condition of the redundant analog quantity, the system-level switching is adopted in consideration of cost and convenience, that is, when one or more paths of one system fail, all the outputs are switched to the other standby system, and the plate-level hot standby and plate-level switching cannot be realized;
3. reliability: when the redundant switching device is externally arranged, the switching device is still a single point, single point failure possibility exists, and the failure of the switching device can cause redundant failure of the system, influence the operation and cause serious consequences;
4. cost: when the redundant switching device is externally arranged, electromechanical components are required to be adopted in order to obtain relatively high reliability, so that the cost is increased;
through retrieval, chinese patent publication No. CN202735735U discloses a low-cost on-site measurement and control I/O module for wired and wireless hot standby redundant communication, which comprises an analog input interface, a switching value I/O interface, an A/D conversion unit, a digital isolation unit, a central processing unit, a wired communication unit, a wireless communication unit, a D/A conversion unit and an analog output interface. The slave has an I/O interface that can be directly connected to the meter or field actuator to obtain the status of the meter or control the field device. Meanwhile, the wired and wireless communication units can realize redundant communication by adopting the algorithm, so that a field-level dual-network redundant communication measurement and control system can be constructed. The reliability of the industrial field monitoring and control system is improved. The utility model relates to the field of network redundancy communication, and does not meet the technical requirements of the scheme.
Disclosure of Invention
The utility model aims to overcome the defects of the prior art and provide a high-reliability analog quantity redundant output device and a high-reliability analog quantity redundant output method.
The aim of the utility model can be achieved by the following technical scheme:
the device is characterized by comprising a device A and a device B, wherein the device A and the device B are respectively communicated with a host through a system communication bus, the device A and the device B are redundant and identical, one device in the device A and the device B is a main device and works in a main output state, the other device is a standby device and works in a standby state, and when the main device fails, the device A and the device B can be reliably switched to the standby device and work in the standby state; the original standby device is immediately switched into the main device to continue to output and works in the main output state.
Preferably, the device A comprises a power supply 1 module, a power supply 2 module, a CPU_1 module, a CPU_2 module, a digital-to-analog conversion module, a switch 1 module, a switch 2 module, an acquisition 1 module and an acquisition 2 module;
the CPU_1 module and the CPU_2 module are respectively connected and communicated with the host through serial buses, the CPU_1 module and the CPU_2 module are mutually connected and communicated, the power supply 1 module is connected with the digital-to-analog conversion module through the CPU_1 module, the power supply 2 module is connected with the switch 2 module through the CPU_2 module, the CPU_1 module is connected with the switch 1 module through an IO control line, the digital-to-analog conversion module is connected with the switch 2 module through the switch 1 module, the acquisition ends of the acquisition 1 module and the acquisition 2 module are respectively connected with the output interface of the switch 2 module, the output end of the acquisition 1 module is connected with the CPU_1 module, and the output end of the acquisition 2 module is connected with the CPU_2 module.
Preferably, the power supply 1 module and the power supply 2 module, the CPU_1 module and the CPU_2 module, the switch 1 module and the switch 2 module, and the acquisition 1 module and the acquisition 2 module are respectively identical and isolated and independent.
Preferably, the output interface of the switch 2 module of the device a and the output interface of the switch 2 module of the device B are connected together in parallel to realize analog quantity redundancy output.
Preferably, the acquisition 1 module and the acquisition 2 module respectively comprise an amplifying circuit and an AD chip which are sequentially connected, and the acquisition 1 module and the acquisition 2 module convert the analog output state into a digital value and respectively send the digital value to the CPU_1 module and the CPU_2 module.
Preferably, the cpu_1 module can control the digital-to-analog conversion module to output an analog quantity according to a host command, and the analog quantity is converted into a voltage output or a current output according to different amplifying circuits.
Preferably, the switch 1 module and the switch 2 module respectively allow analog output or close analog output according to control decisions of the CPU_1 module and the CPU_2 module.
Preferably, the digital-to-analog conversion module is of the type: digital-to-analog conversion module of LTC 8043F.
A method of said high reliability analog redundant output apparatus, said method comprising the steps of:
(1) After the equipment device is started, initializing equipment information by an initialization module of the device A and the device B, and configuring an output port according to a set state table;
(2) Setting the command variable as not outputting '0', and controlling the switch 1 module and the switch 2 module to close analog quantity output of the device by the CPU_1 module and the CPU_2 module through IO control lines respectively;
(3) The device A and the device B carry out self-checking on the self-states, including the power supply health state, the CPU health state and the storage equipment health state, if the failure is detected, the output needs to be closed, otherwise, the step (4) is executed;
(4) The device A and the device B are communicated with a host through a serial bus and output or set as a standby machine according to a host command;
(5) Judging whether the host machine requires the device to be used as a main device or a standby device according to the host machine command analyzed in the step (4), if the host machine requires the device to be used as the standby device, directly entering the step (2) to perform self-checking and receiving the host machine command again; if the host computer requests the device to be used as a main output device, the step (6) is carried out to execute the output function;
(6) Only the CPU_1 module can control the digital-to-analog conversion module to output analog quantity according to a host command, and the analog quantity is converted into voltage output or current output according to different amplifying circuits;
(7) The CPU_1 module and the CPU_2 module respectively open the switch 1 module and the switch 2 module, and allow the analog quantity to be output to the outside of the device through 2 switches;
(8) The CPU_1 module and the CPU_2 module respectively acquire the output voltage or current state through the acquisition 1 module and the acquisition 2 module;
(9) The CPU_1 module and the CPU_2 module mutually transmit the acquired output states to each other, and each CPU module can acquire 2 pieces of acquired data of the output states after the mutual transmission is completed;
(10) Each CPU module firstly compares whether the difference of the 2 output state stoping values is smaller than an allowable error, and if the difference is smaller than the allowable error, the stoping circuit is indicated to be normal in function; after the two-channel acquisition value confirmation is completed and meets the requirements, each channel is compared with an output command value sent by a host by utilizing the value acquired by the acquisition 1 module, if the difference between the two values exceeds the allowable error, the step (11) is carried out, the output is closed, the host is informed of the failure of the device, and the standby device is started; if the difference between the two values is smaller than the allowable error, the device is indicated to work normally, and the step (3) is entered to perform self-checking again and accept commands to continue working;
(11) The CPU_1 module and the CPU_2 module control the switch 1 module and the switch 2 module to close analog output of the device through the IO control line respectively, and simultaneously inform a host that the device has faults and enable the standby device.
Preferably, the allowable errors in the step (10) are set to be +/-2%.
Compared with the prior art, the utility model has the following advantages:
1. in the scheme, analog quantity output is realized through the main device and the standby device, an arbitration switching device is not needed, and one of the two devices is in a main working state and the other is in a standby working state when in work. The fault device is automatically switched to the standby working state, and the original standby device is switched to the main output state according to communication. Since the switching device is not needed, the cost is reduced and the reliability and the real-time performance are improved.
2. In order to improve reliability in this scheme, gather analog output state through 2 independent collection modules, prevent that single acquisition circuit's inefficacy from leading to judging the mistake, can't in time convert healthy device to work. The reliability, the instantaneity and the flexibility of the system are improved.
3. In the scheme, 2-level switch control is added for analog output, and a fault device can be reliably switched to a standby state no matter a digital-to-analog conversion module is faulty or a single switch is faulty, so that the original standby device is automatically switched to a main working state. Any single point of failure within the device will not affect system availability. Improved reliability and real-time performance of the system.
Drawings
FIG. 1 is a schematic view of the apparatus of the present utility model;
fig. 2 is a flow chart of a method of using the device of the present utility model.
Detailed Description
The following description of the technical solutions in the embodiments of the present utility model will be clear and complete, and it is obvious that the described embodiments are some embodiments of the present utility model, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present utility model without making any inventive effort, shall fall within the scope of the present utility model.
As shown in fig. 1, a high-reliability analog quantity redundancy output device comprises a device a and a device B, wherein the device a and the device B are respectively connected and communicated with a host through a system communication bus, the device a and the device B are redundant and identical, one of the device a and the device B is a main device and works in a main output state, the other device is a standby device and works in a standby state, and when the main device fails, the device a and the device B can be reliably switched to the standby device and work in the standby state; the original standby device is immediately switched into the main device to continue to output and works in the main output state.
The method of the utility model comprises the following steps:
1) Initializing the system after the device is started, setting the output state of the device to be not output, and preventing other normal devices from being influenced when the fault device is started;
2) The device checks the health state of the device, including checking a communication function, an operation function and an output recovery function, if a fault is detected, the output needs to be closed, and fault isolation is ensured;
3) The device comprises a main output state and a standby state, wherein 2 operation CPUs in the device are simultaneously communicated with the main machine, according to the communication judgment whether the device works in the main output state or the standby state, only 2 CPUs can execute output after receiving an allowable command working in the main output state, CPU_1 outputs an analog value according to the main machine command and simultaneously turns on an allowable output switch, and CPU_2 turns on the allowable output switch, so that the device executes a specified analog output function;
4) CPU_1 and CPU_2 in the device recover the analog output state through 2 sets of independent acquisition modules, and compare the recovery state with a host command, and only if the device works normally, analog output is continuously allowed;
5) Any one of the 2 CPUs in the device detects that the output state is inconsistent with the host command or abnormal, and the output function of the device can be independently closed. The device is switched to a standby state after failure, so that the work of the main device is not influenced;
the device A comprises a power supply 1 module a, a power supply 2 module b, a CPU_1 module c, a CPU_2 module d, a digital-to-analog conversion module e, a switch 1 module f, a switch 2 module g, a collection 1 module h and a collection 2 module i. The cpu_1 module c and the cpu_2 module d communicate with the host via a serial bus, and the outputs of the device a and the device B are directly connected together to realize redundant outputs.
The modules are described:
1. power supply 1 module a:
providing power for the CPU_1module c, the digital-to-analog conversion module e, the switch 1 module f and the acquisition 1 module h, and in order to improve the reliability and prevent redundancy failure caused by common mode faults, the switch 1 module f and the acquisition 1 module h are powered by different power supplies (a power supply 1 module a and a power supply 2 module b) and keep isolation and independence with a switch 2 module g and an acquisition 2 module i;
2. power supply 2 module b:
providing power for the CPU_2 module d, the switch 2 module g and the acquisition 2 module i;
3. cpu_1 module c:
the digital-to-analog conversion module is controlled to output analog quantity according to the host command through the serial bus and the host communication, and meanwhile, the switch 1 module f is driven according to the state and command consistency of the acquisition 1 module h. The CPU_1module c is a main control module and is responsible for communication, detection and output management;
4. cpu_2 module d:
the CPU_2 module d has basically the same function as the CPU_1 module c, and the only difference is that the CPU_2 module d does not drive the digital-to-analog conversion module e;
5. digital-to-analog conversion module e:
the analog quantity is output to an amplifying circuit through communication of a serial bus interface and a CPU_1module c, and then the output value is transmitted to a switch 1 module f and a switch 2 module g;
6. switch 1 module f:
controlled by the CPU_1 module c, and according to the control of the CPU_1 module c, determining to allow analog output or close analog output;
7. switch 2 module g:
the analog quantity output is controlled by the CPU_2 module d, and the analog quantity output is allowed or closed according to the control decision of the CPU_2 module d;
8. acquisition 1 module h:
collecting an analog output state, comprising an amplifying circuit and an AD chip, converting the analog output state into a digital value and transmitting the digital value to a CPU_1 module c, wherein the CPU_1 module c judges whether the output state is normal according to the stoping state;
9. acquisition 2 module i:
collecting an analog output state, comprising an amplifying circuit and an AD chip, converting the analog output state into a digital value and transmitting the digital value to a CPU_2 module d, and judging whether the output state is normal or not by the CPU_2 module d according to the stoping state;
the digital-to-analog conversion module is of the type: digital-to-analog conversion module of LTC 8043F.
As shown in fig. 2, a method for using a highly reliable analog redundant output apparatus, the method comprising the steps of:
(1) After the equipment device is started, initializing equipment information by an initialization module of the device A and the device B, and configuring an output port according to a set state table;
(2) Setting a command variable (a register for receiving a control command of a main control machine) to be not output 0, and controlling a switch 1 module and a switch 2 module to close analog quantity output of the device by a CPU_1 module and a CPU_2 module through IO control lines respectively;
(3) The device A and the device B perform self-checking on the self-states, including checking on the power health state, the CPU health state and the storage device health state, and checking whether the output state is consistent with the command. If step (3) is entered from step (2), the command variable has been set to "0" in step (2), so this step checks if the analog output has been turned off. If yes, entering the step (3) from the step (11), and not checking whether the output state is consistent with the command, and performing device self-checking only;
(4) Both device a and device B communicate with the host via the serial bus and perform output or set as a standby (no output) according to the host command. In this step, device a and device B will check the communication buffer and parse the host command;
(5) Judging whether the host computer requires the device to be used as a main device or a standby device according to the host computer command analyzed in the step (4), if the host computer requires the device to be used as the standby device, directly entering the step (2) to perform self-checking and receiving the host computer command again. If the host computer requests the device to be used as a main output device, the step (6) is carried out to execute the output function;
(6) Only the CPU_1 module can control the digital-to-analog conversion module to output analog quantity according to a host command, and the analog quantity is converted into voltage output or current output according to different amplifying circuits;
(7) The CPU_1 module and the CPU_2 module respectively open the switch 1 module and the switch 2 module, and allow the analog quantity to be output to the outside of the device through 2 switches;
(8) The CPU_1 module and the CPU_2 module respectively acquire the output voltage or current state through the acquisition 1 module and the acquisition 2 module;
(9) The CPU_1 module and the CPU_2 module mutually transmit the acquired output states to each other, and each CPU module can acquire 2 pieces of acquired data of the output states after the mutual transmission is completed;
(10) Each CPU module firstly compares whether the difference of the 2 output state extraction values is smaller than the allowable error, and if the difference is smaller than the allowable error, the extraction circuit is normal. After the two-channel acquisition value confirmation is completed and meets the requirements, each channel is compared with an output command value sent by the host by utilizing the value acquired by the acquisition 1 module, if the difference between the two values exceeds the allowable error, the step (11) is carried out, the output is closed, the host is informed of the failure of the device, and the standby device is started. If the difference between the two values is smaller than the allowable error, the device is indicated to work normally, and the step (3) is entered to perform self-checking again and accept commands to continue working;
(11) The CPU_1 module and the CPU_2 module control the switch 1 module and the switch 2 module to close analog output of the device through IO control lines respectively, and simultaneously inform a host that the device has faults and enable a standby device.
The allowable error in the step (10) is set to be +/-2%.
The principle of the utility model is as follows: the two-by-two redundant system architecture is adopted, the analog output is realized by two devices which are redundant and identical to each other, one device is a main device and works in a main output state, the other device is a standby device and works in a standby state, when the main device fails, the standby device can be reliably switched to the standby state, and the original standby device is immediately switched to the main device for continuous output and works in the main output state.
The utility model is applied to the analog quantity control module of the vehicle-mounted safety platform, and the adoption of the technology can reduce the extra redundancy switching module and reduce the complexity of system hardware. Because the redundant output, the redundant stoping and the redundant switching are adopted, the cost is reduced and the reliability of the system is effectively improved.
The design scheme has been tested in detail in the project development, and the scheme is proved to be feasible.
While the utility model has been described with reference to certain preferred embodiments, it will be understood by those skilled in the art that various changes and substitutions of equivalents may be made and equivalents will be apparent to those skilled in the art without departing from the scope of the utility model. Therefore, the protection scope of the utility model is subject to the protection scope of the claims.
Claims (8)
1. A method for adopting high-reliability analog quantity redundant output device is characterized in that the device comprises a device A and a device B, wherein the device A and the device B are respectively connected and communicated with a host through a system communication bus, the device A and the device B are redundant and identical, one device in the device A and the device B is a main device and works in a main output state, the other device is a standby device and works in a standby state, and when the main device fails, the device A and the device B can be reliably switched to the standby device and work in the standby state; the original standby device is immediately switched into the main device to continue to output and works in a main output state;
the device A comprises a power supply 1 module, a power supply 2 module, a CPU_1 module, a CPU_2 module, a digital-to-analog conversion module, a switch 1 module, a switch 2 module, a collection 1 module and a collection 2 module;
the CPU_1 module and the CPU_2 module are respectively connected and communicated with the host through serial buses, the CPU_1 module and the CPU_2 module are mutually connected and communicated, the power supply 1 module is connected with the digital-to-analog conversion module through the CPU_1 module, the power supply 2 module is connected with the switch 2 module through the CPU_2 module, the CPU_1 module is connected with the switch 1 module through an IO control line, the digital-to-analog conversion module is connected with the switch 2 module through the switch 1 module, the acquisition ends of the acquisition 1 module and the acquisition 2 module are respectively connected with the output interface of the switch 2 module, the output end of the acquisition 1 module is connected with the CPU_1 module, and the output end of the acquisition 2 module is connected with the CPU_2 module;
the method comprises the following steps:
(1) After the equipment device is started, initializing equipment information by an initialization module of the device A and the device B, and configuring an output port according to a set state table;
(2) Setting the command variable as not outputting '0', and controlling the switch 1 module and the switch 2 module to close analog quantity output of the device by the CPU_1 module and the CPU_2 module through IO control lines respectively;
(3) The device A and the device B carry out self-checking on the self-states, including the power supply health state, the CPU health state and the storage equipment health state, if the failure is detected, the output needs to be closed, otherwise, the step (4) is executed;
(4) The device A and the device B are communicated with a host through a serial bus and output or set as a standby machine according to a host command;
(5) Judging whether the host machine requires the device to be used as a main device or a standby device according to the host machine command analyzed in the step (4), if the host machine requires the device to be used as the standby device, directly entering the step (2) to perform self-checking and receiving the host machine command again; if the host computer requests the device to be used as a main output device, the step (6) is carried out to execute the output function;
(6) Only the CPU_1 module can control the digital-to-analog conversion module to output analog quantity according to a host command, and the analog quantity is converted into voltage output or current output according to different amplifying circuits;
(7) The CPU_1 module and the CPU_2 module respectively open the switch 1 module and the switch 2 module, and allow the analog quantity to be output to the outside of the device through 2 switches;
(8) The CPU_1 module and the CPU_2 module respectively acquire the output voltage or current state through the acquisition 1 module and the acquisition 2 module;
(9) The CPU_1 module and the CPU_2 module mutually transmit the acquired output states to each other, and each CPU module can acquire 2 pieces of acquired data of the output states after the mutual transmission is completed;
(10) Each CPU module firstly compares whether the difference of the 2 output state stoping values is smaller than an allowable error, and if the difference is smaller than the allowable error, the stoping circuit is indicated to be normal in function; after the two-channel acquisition value confirmation is completed and meets the requirements, each channel is compared with an output command value sent by a host by utilizing the value acquired by the acquisition 1 module, if the difference between the two values exceeds the allowable error, the step (11) is carried out, the output is closed, the host is informed of the failure of the device, and the standby device is started; if the difference between the two values is smaller than the allowable error, the device is indicated to work normally, and the step (3) is entered to perform self-checking again and accept commands to continue working;
(11) The CPU_1 module and the CPU_2 module control the switch 1 module and the switch 2 module to close analog output of the device through the IO control line respectively, and simultaneously inform a host that the device has faults and enable the standby device.
2. The method of claim 1, wherein the power 1 module and the power 2 module, the cpu_1 module and the cpu_2 module, the switch 1 module and the switch 2 module, and the collection 1 module and the collection 2 module are identical and isolated, respectively.
3. The method of claim 1, wherein the output interface of the switch 2 module of the device a and the output interface of the switch 2 module of the device B are connected together to realize an analog redundancy output.
4. The method of claim 1, wherein the acquisition 1 module and the acquisition 2 module each comprise an amplifying circuit and an AD chip which are sequentially connected, and the acquisition 1 module and the acquisition 2 module convert the analog output state into a digital value and send the digital value to the cpu_1 module and the cpu_2 module respectively.
5. The method of claim 1, wherein the cpu_1 module is capable of controlling the digital-to-analog conversion module to output an analog quantity according to a host command, and the analog quantity is converted into a voltage output or a current output according to different amplifying circuits.
6. The method of claim 1, wherein the switch 1 module and the switch 2 module allow analog output or shut off analog output according to control decisions of the cpu_1 module and the cpu_2 module, respectively.
7. The method of claim 1, wherein the digital-to-analog conversion module is of a model number: digital-to-analog conversion module of LTC 8043F.
8. The method of claim 1, wherein the tolerance in step (10) is set to ±2%.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711375698.5A CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711375698.5A CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107942820A CN107942820A (en) | 2018-04-20 |
| CN107942820B true CN107942820B (en) | 2024-03-29 |
Family
ID=61940821
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711375698.5A Active CN107942820B (en) | 2017-12-19 | 2017-12-19 | High-reliability analog quantity redundant output device and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107942820B (en) |
Families Citing this family (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109164787A (en) * | 2018-08-31 | 2019-01-08 | 杭州和利时自动化有限公司 | A kind of analog signals acquisition device |
| CN109634171B (en) * | 2018-12-06 | 2020-09-25 | 通号万全信号设备有限公司 | Dual-core dual-lock-step two-out-of-two framework and safety platform thereof |
| JP7188285B2 (en) * | 2019-06-14 | 2022-12-13 | 株式会社デンソー | power system |
| CN110456688A (en) * | 2019-07-22 | 2019-11-15 | 北京交大微联科技有限公司 | Output control system, method, equipment and the vehicle of signal |
| CN111405047B (en) * | 2020-03-19 | 2023-04-07 | 北京永列科技有限公司 | Method for realizing two-by-two-out-of-two axle counting communication interface switching |
| CN113110258B (en) * | 2021-05-21 | 2022-04-05 | 华自科技股份有限公司 | Control system and redundancy switching method of control device |
| CN113741250B (en) * | 2021-08-16 | 2024-03-26 | 辽宁荣信电力电子技术有限公司 | Redundancy control system and method for SVG |
| CN113885401B (en) * | 2021-10-27 | 2024-02-20 | 杭州和利时自动化有限公司 | Analog quantity output method, device and medium |
| CN115276922B (en) * | 2022-07-15 | 2023-10-31 | 卡斯柯信号有限公司 | Main and standby state control method suitable for all-electronic system |
Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0915400A2 (en) * | 1997-11-06 | 1999-05-12 | Siemens Aktiengesellschaft | Peripheral control unit for a process control system |
| JP2008312327A (en) * | 2007-06-13 | 2008-12-25 | Meidensha Corp | Analog input circuit of digital protection relay |
| CN101552662A (en) * | 2008-04-03 | 2009-10-07 | 卡斯柯信号有限公司 | Data transmission system for telecommunication |
| CN201909961U (en) * | 2010-05-18 | 2011-07-27 | 北京捷世伟业电子科技有限公司 | Redundancy control system |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN202735735U (en) * | 2012-06-11 | 2013-02-13 | 成都瑞特数字科技有限责任公司 | Low-cost on-site measurement and control I/O module of wired and wireless hot standby redundancy communication |
| CN103176870A (en) * | 2013-03-21 | 2013-06-26 | 中国铁道科学研究院 | Multi-mode information interaction redundancy safety computer platform |
| CN203617395U (en) * | 2013-11-28 | 2014-05-28 | 中国科学院沈阳自动化研究所 | PEMFC (proton exchange membrane fuel cell) two-unit standby controller |
| CN203786481U (en) * | 2013-12-19 | 2014-08-20 | 上海新华控制技术(集团)有限公司 | Gas turbine redundancy control system analog quantity input module |
| CN204229171U (en) * | 2014-11-27 | 2015-03-25 | 华车（北京）交通装备有限公司 | A kind of air-conditioner set control circuit based on dual processors backup |
| CN104597827A (en) * | 2014-12-31 | 2015-05-06 | 上海自动化仪表股份有限公司 | Smart electric control execution system supporting loop redundancy control and control method thereof |
| CN104714406A (en) * | 2014-12-31 | 2015-06-17 | 重庆川仪自动化股份有限公司 | Redundancy switching method of input and output module |
| KR101554249B1 (en) * | 2015-06-30 | 2015-09-18 | 주식회사 나라컨트롤 | Total dual type control system based on detection of abnormal state at a control point and Control method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
| CN205656443U (en) * | 2016-04-29 | 2016-10-19 | 固安信通信号技术股份有限公司 | Controlling means based on two take advantage of two to get two safe redundant systems |
| CN106502158A (en) * | 2016-11-16 | 2017-03-15 | 东南大学 | A kind of novel ship propulsion controlling system based on bottom dual redundant structure |
| WO2017107665A1 (en) * | 2015-12-21 | 2017-06-29 | 湖南中车时代通信信号有限公司 | Safety computer system for use in train control |
| CN107168284A (en) * | 2017-05-23 | 2017-09-15 | 深圳市汇辰自动化技术有限公司 | A kind of apparatus and method of automatic calibration PLC analog output modules |
| CN206749825U (en) * | 2017-05-02 | 2017-12-15 | 华东交通大学 | One kind two multiplies two and takes two wheel counting apparatus |
| CN207689863U (en) * | 2017-12-19 | 2018-08-03 | 卡斯柯信号有限公司 | The analog quantity redundant output device of high reliability |
-
2017
- 2017-12-19 CN CN201711375698.5A patent/CN107942820B/en active Active
Patent Citations (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0915400A2 (en) * | 1997-11-06 | 1999-05-12 | Siemens Aktiengesellschaft | Peripheral control unit for a process control system |
| JP2008312327A (en) * | 2007-06-13 | 2008-12-25 | Meidensha Corp | Analog input circuit of digital protection relay |
| CN101552662A (en) * | 2008-04-03 | 2009-10-07 | 卡斯柯信号有限公司 | Data transmission system for telecommunication |
| CN201909961U (en) * | 2010-05-18 | 2011-07-27 | 北京捷世伟业电子科技有限公司 | Redundancy control system |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN202735735U (en) * | 2012-06-11 | 2013-02-13 | 成都瑞特数字科技有限责任公司 | Low-cost on-site measurement and control I/O module of wired and wireless hot standby redundancy communication |
| CN103176870A (en) * | 2013-03-21 | 2013-06-26 | 中国铁道科学研究院 | Multi-mode information interaction redundancy safety computer platform |
| CN203617395U (en) * | 2013-11-28 | 2014-05-28 | 中国科学院沈阳自动化研究所 | PEMFC (proton exchange membrane fuel cell) two-unit standby controller |
| CN203786481U (en) * | 2013-12-19 | 2014-08-20 | 上海新华控制技术(集团)有限公司 | Gas turbine redundancy control system analog quantity input module |
| CN204229171U (en) * | 2014-11-27 | 2015-03-25 | 华车（北京）交通装备有限公司 | A kind of air-conditioner set control circuit based on dual processors backup |
| CN104597827A (en) * | 2014-12-31 | 2015-05-06 | 上海自动化仪表股份有限公司 | Smart electric control execution system supporting loop redundancy control and control method thereof |
| CN104714406A (en) * | 2014-12-31 | 2015-06-17 | 重庆川仪自动化股份有限公司 | Redundancy switching method of input and output module |
| KR101554249B1 (en) * | 2015-06-30 | 2015-09-18 | 주식회사 나라컨트롤 | Total dual type control system based on detection of abnormal state at a control point and Control method thereof |
| CN105187248A (en) * | 2015-09-16 | 2015-12-23 | 浙江众合科技股份有限公司 | Redundancy switching system |
| WO2017107665A1 (en) * | 2015-12-21 | 2017-06-29 | 湖南中车时代通信信号有限公司 | Safety computer system for use in train control |
| CN205656443U (en) * | 2016-04-29 | 2016-10-19 | 固安信通信号技术股份有限公司 | Controlling means based on two take advantage of two to get two safe redundant systems |
| CN106502158A (en) * | 2016-11-16 | 2017-03-15 | 东南大学 | A kind of novel ship propulsion controlling system based on bottom dual redundant structure |
| CN206749825U (en) * | 2017-05-02 | 2017-12-15 | 华东交通大学 | One kind two multiplies two and takes two wheel counting apparatus |
| CN107168284A (en) * | 2017-05-23 | 2017-09-15 | 深圳市汇辰自动化技术有限公司 | A kind of apparatus and method of automatic calibration PLC analog output modules |
| CN207689863U (en) * | 2017-12-19 | 2018-08-03 | 卡斯柯信号有限公司 | The analog quantity redundant output device of high reliability |
Non-Patent Citations (4)
| Title |
|---|
| 基于Markov过程的二乘二取二计算机联锁系统的可靠性和安全性分析;黄鲁江等;《技术创新》;20171025;第14卷(第5期);1-4、17 * |
| 基于PLC的二极管电路在某能源化工公司的应用;张健;郭红波;;自动化与仪器仪表(12);全文 * |
| 基于Ｓｔａｔｅｆｌｏｗ的轨旁安全平台主备切换机制设计;周宇恒等;《铁道通信信号》;20150617;第51卷(第6期);88-91 * |
| 安全冗余结构铁路信号配电系统研究;董长青;《铁路通信信号》;第43卷(第8期);7-9页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107942820A (en) | 2018-04-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107942820B (en) | High-reliability analog quantity redundant output device and method | |
| CN110361979B (en) | Safety computer platform in railway signal field | |
| WO2017107665A1 (en) | Safety computer system for use in train control | |
| JP5433115B1 (en) | Process bus protection control system, merging unit and arithmetic unit | |
| CN110351174B (en) | Module redundancy safety computer platform | |
| CN103149907B (en) | Hot-redundancy CAN (Controller Area Network)-bus high-fault-tolerance control terminal and method based on dual DSPs (Digital Signal Processors) | |
| CN109677468A (en) | Train logic control element and logic control method | |
| US11718331B2 (en) | Non-national standard turnout drive system based on double 2-vote-2 architecture | |
| CN110376876B (en) | Double-system synchronous safety computer platform | |
| CN106444553B (en) | Scattered acquisition driving system based on two-by-two-out-of-two architecture | |
| CN101916218A (en) | Double-CPU redundancy control system based on analysis redundancy mechanism | |
| US8340793B2 (en) | Architecture using integrated backup control and protection hardware | |
| US9367375B2 (en) | Direct connect algorithm | |
| JP2023539613A (en) | Functionally safe switch quantity output module and diagnostic processing method | |
| CN108255123B (en) | Train LCU control equipment based on two software and hardware voting | |
| CN111874049B (en) | Brake control system for safety computer of train control | |
| CN209739079U (en) | Logic control unit for train | |
| CN107272399B (en) | Computer interlocking core control equipment | |
| US10298520B2 (en) | Relay apparatus | |
| US20130178176A1 (en) | Method for monitoring a transmitter and corresponding transmitter | |
| CN101126773A (en) | Electronic type transformer high voltage side redundant backup circuit and failure detection method | |
| US9053245B2 (en) | Partial redundancy for I/O modules or channels in distributed control systems | |
| US20100229050A1 (en) | Apparatus having first bus and second bus connectable to i/o device, information processing apparatus and method of controlling apparatus | |
| US9665447B2 (en) | Fault-tolerant failsafe computer system using COTS components | |
| CN115098016B (en) | Redundant computer high-precision AD acquisition equipment based on LRM |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |