[go: up one dir, main page]

CN103139060A - High-fault-tolerance controller area network (CAN) bus digital gateway based on double digital signal processors (DSPs) - Google Patents

High-fault-tolerance controller area network (CAN) bus digital gateway based on double digital signal processors (DSPs) Download PDF

Info

Publication number
CN103139060A
CN103139060A CN2013100658295A CN201310065829A CN103139060A CN 103139060 A CN103139060 A CN 103139060A CN 2013100658295 A CN2013100658295 A CN 2013100658295A CN 201310065829 A CN201310065829 A CN 201310065829A CN 103139060 A CN103139060 A CN 103139060A
Authority
CN
China
Prior art keywords
dsp
bus
network
driver
port
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2013100658295A
Other languages
Chinese (zh)
Other versions
CN103139060B (en
Inventor
刘晓胜
张鹏宇
海天翔
徐殿国
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hit Robot Group Co ltd
Original Assignee
Harbin Institute of Technology Shenzhen
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Harbin Institute of Technology Shenzhen filed Critical Harbin Institute of Technology Shenzhen
Priority to CN201310065829.5A priority Critical patent/CN103139060B/en
Publication of CN103139060A publication Critical patent/CN103139060A/en
Application granted granted Critical
Publication of CN103139060B publication Critical patent/CN103139060B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Small-Scale Networks (AREA)

Abstract

基于双DSP的高容错性CAN总线数字网关,属于CAN总线网关技术领域。本发明是为了解决现有CAN总线网关在单子节点整体故障时,会导致通信中断,造成数据帧丢失或大延时情况发生的问题。它包括主节点、从节点、双路冗余CAN网络A、双路冗余CAN网络B、非冗余子网络总线#E1和非冗余子网络总线#E2,双路冗余CAN网络A包括网络总线#A1和网络总线#A2;双路冗余CAN网络B包括网络总线#B1和网络总线#B2;它提供了双链路冗余的CAN主干网络之间、CAN主干网络与单链路非冗余的CAN子网之间的协议转换和数据高速缓存及转发。本发明作为CAN总线数字网关。

The invention relates to a highly fault-tolerant CAN bus digital gateway based on double DSPs, belonging to the technical field of CAN bus gateways. The invention aims to solve the problem that the existing CAN bus gateway will cause communication interruption when a single sub-node fails as a whole, resulting in data frame loss or large delay. It includes master node, slave node, dual redundant CAN network A, dual redundant CAN network B, non-redundant sub-network bus #E1 and non-redundant sub-network bus #E2, dual redundant CAN network A includes Network bus #A1 and network bus #A2; dual redundant CAN network B includes network bus #B1 and network bus #B2; it provides dual-link redundant CAN backbone network, CAN backbone network and single-link Protocol conversion and data caching and forwarding between non-redundant CAN subnets. The invention serves as a CAN bus digital gateway.

Description

High fault tolerance CAN bus digital gateway based on two DSP
Technical field
The present invention relates to the high fault tolerance CAN bus digital gateway based on two DSP, belong to CAN bus gateway technical field.
Background technology
The CAN bussing technique has been widely used in industrial automation, and it has the excellent properties such as highly reliable, anti-interference, simple in structure and low-cost.Along with reaching its maturity of technical elements, the CAN bus is just progressively moved towards the safety-critical field SCS such as space flight, aviation, the energy and health care, and development prospect is very wide.
Yet, Safety-Critical System is the cascade of a large amount of electric room complexity and the interoperability frequently of relating to not only more, networking is larger, transmission performance is had relatively high expectations, in case and generation systems disabler, to cause the heavy losses of life and property, therefore design or network operator often are placed on the most primary position with the reliability of system.The network that consists of Safety-Critical System is the single local area network (LAN) of structure just, but a plurality of regional subnet is interconnected and multiple network topology, agreement and be used for realizing isolated fault, balanced bandwidth and simplified wiring; And the CAN buses that adopt with redundancy scheme in the system backbone network with the reliability of strengthening system and the certainty of transmission of messages more.
Therefore, whether CAN gateway gateway can effectively support this class Safety-Critical System networking as realizing the infrastructure of complex network, and constraint, the especially requirement of reliability aspect of satisfying its design aspect become very important.Existing CAN bus gateway is designed with the defective of following two aspects:
1. existing CAN bus gateway adopts the local redundancy structure more, namely only to link, transceiver and the controller hardware backup of CAN bus.Although can tackle single failure or combined fault during transmission medium damages, port is loosening, bus driver lost efficacy, helpless to the global failure of cpu fault, power module fault and even the Control card of gateway.
2. existing CAN gateway aspect communication mechanism and unrealized real hot redundancy, is only real-time listening from backup node or port.In case host node or port break down, still needing to carry out master and slave internodal function switches, thereby introduced certain self-healing time, it is switching time, so easily cause the situations generations such as admission control or large time-delay, this is to can not put up with for the system that reliability and certainty are had relatively high expectations.
Summary of the invention
The present invention seeks to can cause communication disruption in order to solve existing CAN bus gateway when the list node overall failure, the problem that causes admission control or time-delay situation greatly to occur provides a kind of high fault tolerance CAN bus digital gateway based on two DSP.
High fault tolerance CAN bus digital gateway based on two DSP of the present invention, it comprises host node, from node, two-way redundancy CAN network A, two-way redundancy CAN network B, nonredundancy sub-network bus #E1 and nonredundancy sub-network bus #E2,
Two-way redundancy CAN network A comprises network-bus #A1 and network-bus #A2;
Two-way redundancy CAN network B comprises network-bus #B1 and network-bus #B2;
Host node comprises DSP#A1, DSP#A2, CAN bus port #A11, CAN bus port #A12, CAN bus port #A21 and CAN bus port #A22;
Comprise DSP#B1, DSP#B2, CAN bus port #B11, CAN bus port #B12, CAN bus port #B21 and CAN bus port #B22 from node;
Pass through SPI data channel the transmission of data between DSP#A1 and DSP#A2, DSP#A1 is connected with network-bus #A1 by CAN bus port #A11, DSP#A1 is connected with nonredundancy sub-network bus #E1 by CAN bus port #A12, DSP#A2 is connected with network-bus #B2 by CAN bus port #A21, and DSP#A2 is connected with nonredundancy sub-network bus #E2 by CAN bus port #A22;
Pass through SPI data channel the transmission of data between DSP#B1 and DSP#B2, DSP#B1 is connected with network-bus #B1 by CAN bus port #B11, DSP#B1 is connected with nonredundancy sub-network bus #E2 by CAN bus port #B12, DSP#B2 is connected with network-bus #A2 by CAN bus port #B21, and DSP#B2 is connected with nonredundancy sub-network bus #E1 by CAN bus port #B22;
The DSP#A1 of host node and DSP#A2 and between the DSP#B1 of node and DSP#B2 by SPI data channel the transmission of data.
Host node also comprises CAN driver #A11, CAN driver #A12, CAN driver #A21 and CAN driver #A22,
CAN driver #A11 is arranged between DSP#A1 and CAN bus port #A11, CAN driver #A12 is arranged between DSP#A1 and CAN bus port #A12, CAN driver #A21 is arranged between DSP#A2 and CAN bus port #A21, and CAN driver #A22 is arranged between DSP#A2 and CAN bus port #A22;
Also comprise CAN driver #B11, CAN driver #B12, CAN driver #B21 and CAN driver #B22 from node,
CAN driver #B11 is arranged between DSP#B1 and CAN bus port #B11, CAN driver #B12 is arranged between DSP#B1 and CAN bus port #B12, CAN driver #B21 is arranged between DSP#B2 and CAN bus port #B21, and CAN driver #B22 is arranged between DSP#B2 and CAN bus port #B22.
Host node also comprises main storage #A1 and main storage #A2,
Be connected by external expansion interface between main storage #A1 and DSP#A1, be connected by external expansion interface between main storage #A2 and DSP#A2;
Also comprise from memory #B1 with from memory #B2 from node,
Be connected by external expansion interface between memory #B1 and DSP#B1, be connected by external expansion interface between memory #B2 and DSP#B2.
It also comprises liquid crystal display and operator,
Liquid crystal display and operator are connected with DSP#A1, DSP#A2, DSP#B1 and DSP#B2 respectively as man-machine interface.
It also comprises power supply, and power supply is used to DSP#A1, DSP#A2, DSP#B1 and DSP#B2 that working power is provided.
Advantage of the present invention: digital gateway of the present invention has high fault tolerance, it can realize comprising the hot redundancy of total system bimodulus of link port, bus transceiver, bus control unit, gateway CPU and power module etc., under the local or whole condition that breaks down of the list node of intra-gateway, still can guarantee the not interrupt of communicating by letter, and without the self-healing time, be conducive to improve failure tolerant and the reliability of network interconnection comprehensively.
The present invention possesses very strong compatibility and versatility, provide between the CAN backbone network of dual link redundancy, protocol conversion and data cache and forwarding between CAN backbone network and the nonredundant CAN subnet of single-link, can reduce significantly inter-net communication time-delay, be adapted at the actual industrial field and popularize.
The present invention has the network bridging passage of the complete hot redundancy of two-way, in the situation that the single channel fault still can guarantee not interrupt of the two real-time connections of netting, has high reliability.It has adopted inside to be integrated with the dsp chip that enriches control module and high-performance CPU, thereby has strengthened the processing of data and the speed that the transmitting-receiving of CAN bus is controlled, and has greatly reduced the technology time-delay of gateway.The present invention uses the SPI interface and substitutes two-port RAM and realize between two DSP at a high speed exchanges data, simplified wiring, reduces costs and has reduced that in plate, electromagnetic interference on the impact that high-speed data communication brings, has improved the reliability of system.
The present invention has stronger fault diagnosis functions, host node, from node by periodically or the time mutual inspection that triggers property can find in time fault and to the host computer warning, be conducive to reliability service and the repair and replacement of system with self check.Be equipped with liquid crystal display and operator, make gateway use simple to operation, running status can be obtained by user's Real Time Monitoring.Compare with other existing product: there is no on the market similarly can be applied at present the industrial circle technical products very high to reliability requirement.
Description of drawings
Fig. 1 is the structured flowchart of the high fault tolerance CAN bus digital gateway based on two DSP of the present invention;
Fig. 2 is host node and from the internal structure block diagram of node;
Fig. 3 is the annexation figure that two-way redundancy CAN network A and two-way redundancy CAN network B are passed through the mutual bridge joint of CAN gateway;
Fig. 4 passes through the annexation figure of the mutual bridge joint of CAN gateway between nonredundancy sub-network bus #E1 and nonredundancy sub-network bus #E2;
Fig. 5 is take the bridge joint between nonredundancy sub-network bus #E1 and nonredundancy sub-network bus #E2 as example, the workflow diagram of host node;
Fig. 6 is as example, from the workflow diagram of node take the bridge joint between nonredundancy sub-network bus #E1 and nonredundancy sub-network bus #E2;
Fig. 7 is the data forwarding channel schematic diagram of redundant network and nonredundant network;
Fig. 8 is the air environment networking schematic diagram that the present invention is applied to the small commercial secondary-line-aircraft.
Embodiment
Embodiment one: present embodiment is described below in conjunction with Fig. 1, the described high fault tolerance CAN bus digital gateway based on two DSP of present embodiment, it comprises host node 1, from node 2, two-way redundancy CAN network A 3, two-way redundancy CAN network B 4, nonredundancy sub-network bus #E15 and nonredundancy sub-network bus #E26
Two-way redundancy CAN network A 3 comprises network-bus #A1 and network-bus #A2;
Two-way redundancy CAN network B 4 comprises network-bus #B1 and network-bus #B2;
Host node 1 comprises DSP#A11-1, DSP#A21-2, CAN bus port #A111-3, CAN bus port #A121-4, CAN bus port #A211-5 and CAN bus port #A221-6;
Comprise DSP#B12-1, DSP#B22-2, CAN bus port #B112-3, CAN bus port #B122-4, CAN bus port #B212-5 and CAN bus port #B222-6 from node 2;
Pass through SPI data channel the transmission of data between DSP#A11-1 and DSP#A21-2, DSP#A11-1 is connected with network-bus #A1 by CAN bus port #A111-3, DSP#A11-1 is connected with nonredundancy sub-network bus #E15 by CAN bus port #A121-4, DSP#A21-2 is connected with network-bus #B2 by CAN bus port #A211-5, and DSP#A21-2 is connected with nonredundancy sub-network bus #E26 by CAN bus port #A221-6;
Pass through SPI data channel the transmission of data between DSP#B12-1 and DSP#B22-2, DSP#B12-1 is connected with network-bus #B1 by CAN bus port #B112-3, DSP#B12-1 is connected with nonredundancy sub-network bus #E26 by CAN bus port #B122-4, DSP#B22-2 is connected with network-bus #A2 by CAN bus port #B212-5, and DSP#B22-2 is connected with nonredundancy sub-network bus #E15 by CAN bus port #B222-6;
The DSP#A11-1 of host node 1 and DSP#A21-2 and between the DSP#B12-1 of node 2 and DSP#B22-2 by SPI data channel the transmission of data.
Shown in Figure 1, the digital gateway internal main will be comprised of identical two separate child nodes, is called the host node 1 of gateway and from node 2.Host node 1 and from node 2 physically fully the isolation, work on power simultaneously, for different tasks, cooperation and the division of labor are arranged respectively, only loose coupling is connected with nonredundancy sub-network bus #E26 by nonredundancy sub-network bus #E15 each other, is the relation of Hot Spare each other on function.
8 independently CAN bus ports are provided in present embodiment, be CAN bus port #A111-3, CAN bus port #A121-4, CAN bus port #A211-5, CAN bus port #A221-6, CAN bus port #B112-3, CAN bus port #B122-4, CAN bus port #B212-5 and CAN bus port #B222-6, can realize between two-way redundancy CAN network A 3 and two-way redundancy CAN network B 4, internet bridge joint between two-way redundancy CAN network A 3 and two-way redundancy CAN network B 4 and nonredundancy sub-network bus #E15 and nonredundancy sub-network bus #E26, in the situation that host node or from part or the global failure of node, still the use of can demoting, guarantee that internetwork the interruption is communicated with.
Embodiment two: present embodiment is described below in conjunction with Fig. 1 and Fig. 2, present embodiment is described further execution mode one, the described host node 1 of present embodiment also comprises CAN driver #A111-7, CAN driver #A121-8, CAN driver #A211-9 and CAN driver #A221-10
CAN driver #A111-7 is arranged between DSP#A11-1 and CAN bus port #A111-3, CAN driver #A121-8 is arranged between DSP#A11-1 and CAN bus port #A121-4, CAN driver #A211-9 is arranged between DSP#A21-2 and CAN bus port #A211-5, and CAN driver #A221-10 is arranged between DSP#A21-2 and CAN bus port #A221-6;
Also comprise CAN driver #B112-7, CAN driver #B122-8, CAN driver #B212-9 and CAN driver #B222-10 from node 2,
CAN driver #B112-7 is arranged between DSP#B12-1 and CAN bus port #B112-3, CAN driver #B122-8 is arranged between DSP#B12-1 and CAN bus port #B122-4, CAN driver #B212-9 is arranged between DSP#B22-2 and CAN bus port #B212-5, and CAN driver #B222-10 is arranged between DSP#B22-2 and CAN bus port #B222-6.
In present embodiment, dsp chip is as gateway child node nucleus module, inside is integrated with CPU and CAN bus control module, its fast operation, reliability are high, transmitting-receiving control, rate-matched, the address of not only being in charge of the CAN bus of data remaps the buffer memory with data, and each other by SPI, CAN#E1 and three kinds of data channel of CAN#E2, remove redundancy, information redundancy, data shaping, scheduling controlling scheduling algorithm based on certain information, according to the actual requirements, realize protocol conversion and data retransmission between heterogeneous networks.
Embodiment three: below in conjunction with Fig. 2, present embodiment is described, present embodiment is described further execution mode two, and the described host node 1 of present embodiment also comprises main storage #A11-11 and main storage #A21-12,
Be connected by external expansion interface between main storage #A11-11 and DSP#A11-1, be connected by external expansion interface between main storage #A21-12 and DSP#A21-2;
Also comprise from memory #B12-11 with from memory #B22-12 from node 2,
Be connected by external expansion interface between memory #B12-11 and DSP#B12-1, be connected by external expansion interface between memory #B22-12 and DSP#B22-2.
By the interconnection of SPI serial ports, not only provide speed up to the 10M/b exchanges data between two DSP, and taken into account anti-interference and the reliability of transmission.The CAN driver can be realized the physical layer function of differential code and binary data conversion.Each DSP respectively is furnished with the buffer memory that a memory SRAM is used for treating forwarding data frame, and DSP is connected by external expansion interface X1NTF with memory SRAM.
Embodiment four: below in conjunction with Fig. 2, present embodiment is described, present embodiment is described further execution mode one, two or three, and present embodiment also comprises liquid crystal display and operator 7,
Liquid crystal display and operator 7 are connected with DSP#A11-1, DSP#A21-2, DSP#B12-1 and DSP#B22-2 respectively as man-machine interface.
Liquid crystal display and operator 7 are used for configuration and the fault alarm of gateway child node as man-machine interface.
Embodiment five: present embodiment is described below in conjunction with Fig. 1 to Fig. 8, present embodiment is described further execution mode one, two, three or four, present embodiment also comprises power supply 8, and power supply 8 is used to DSP#A11-1, DSP#A21-2, DSP#B12-1 and DSP#B22-2 that working power is provided.
Operation principle of the present invention and running:
The bridge joint that two-way redundancy CAN network A 3 and two-way redundancy CAN network B are 4:
Two-way redundancy CAN network A 3 and two-way redundancy CAN network B 4 are by the mutual bridge joint of CAN gateway, as shown in Figure 3.At this moment, the host node 1 of gateway and from node 2 synchronous workings is realized the two-way converting of two net data frames.
Figure BDA00002876366200061
With
Figure BDA00002876366200062
Two data passages are Hot Spare each other, the break-make of link P, Q and Z is relevant with the health status that CAN#A11 port, CAN#A21 port, CAN transceiver, DSP#A1, the DSP#A2 of gateway host node reach SPI interface between two DSP, and the break-make of link L, M and N is relevant from the health status of SPI interface between CAN#B21 port, CAN#B11 port, CAN transceiver, DSP#A1, DSP#A2 and two DSP of node with gateway.
Because be mutually fully independently from node and host node, so on the host node of hypothesis gateway, certain software occurs or hardware fault causes in Fig. 3
Figure BDA00002876366200063
Data channel disconnects, so the data channel of gateway
Figure BDA00002876366200064
Still can work, can not cause the interruption of transfer of data between two nets, namely the communication node in two-way redundancy CAN network A 3 and two-way redundancy CAN network B 4 still can pass through link CAN network-bus #A2 Gateway is from node
Figure BDA00002876366200072
CAN network-bus #B1 realizes mutual communication.In like manner, when part or global fault occurring from node, the gateway host node can be completed the interconnection between two nets too.
Bridge joint between nonredundancy sub-network bus #E15 and nonredundancy sub-network bus #E26:
Pass through the mutual bridge joint of CAN gateway between nonredundancy sub-network bus #E15 and nonredundancy sub-network bus #E26, as shown in Figure 4.At this moment, the host node of gateway and working simultaneously from node, monitoring mutually respectively has the task division of labor.The real time bidirectional that host node is responsible for Frame between two nets forwards, wouldn't forward after receiving data frames from node, but the Frame that the monitoring host node forwards in stand-by period window Skew_Max, and by contrasting content and the sequence number of the Frame that self receives and the host node forwarding data frame that monitors, judge whether host node the situations such as frame mistake, LOF, Transmission or large time-delay occur in the process that Frame forwards.If monitor host node, above-mentioned mistake occuring, reissues in real time correct Frame, send the fault inquiry frame and report to the police to host computer to host node from node.At this moment, host node can be manually be set as from node under fault condition, perhaps repeatedly automatically switch to host node from node during double faults when host node, and handoff procedure communication disruption can be do not caused.Take the bridge joint between nonredundancy sub-network bus #E15 and nonredundancy sub-network bus #E26 as example, host node and from the workflow of node respectively as shown in Figure 5 and Figure 6.
As above-mentioned principle, even if host node or occur from the serious situation of node generation local fault or global failure, nonredundancy sub-network bus #E15 still can not interrupt with the intercommunication mutually between nonredundancy sub-network bus #E26, and the stand-by period setting of window Skew_Max is no more than 1ms, in case namely host node breaks down, from the reissuing the technology time-delay that Frame introduces and can not surpass 1ms of node, it is definite that the CAN bus communication of this moment remains Millisecond.The working method of this mode of structural redundancy to greatest extent and Hot Spare has greatly improved the reliability of CAN gateway.
The bridge joint of redundant network and nonredundant network:
The present invention can realize redundancy CAN network and the internetwork bridge joint of nonredundancy CAN.Network-bus #A1 and network-bus #A2 be hot redundancy each other, as shown in Figure 7, passage in figure (one) is realized the data retransmission between network-bus #A1 and nonredundancy sub-network bus #E15, passage (two) is realized the data retransmission between network-bus #A2 and nonredundancy sub-network bus #E15, and two data passages are the relations of Hot Spare each other.In like manner, passage (three) and (four) realize the data retransmission between network-bus #B1 or network-bus #B2 and nonredundancy sub-network bus #E2.
The bridge joint of redundant network and nonredundant network is divided into redundancy process and nonredundancy process, and the below illustrates as an example of the bridge joint between redundant network bus #A1 or network-bus #A2 and nonredundancy sub-network bus #E15 example:
The redundancy process:
Nonredundancy sub-network bus #E15 to network-bus #A1 or network-bus #A2 be the redundancy process, relate to the CAN gateway Frame on nonredundancy sub-network bus #E15 is carried out information redundancy, and be forwarded to simultaneously two of network-bus #A1 and network-bus #A2 each other on the communication link of hot redundancy.In the redundancy process, gateway host node and be reciprocity from node is completed identical Frame repeating process.And, process in order to reduce the gateway data as far as possible the technology time-delay of introducing, do not carry out mutual real-time contrast monitoring in repeating process.It is no matter host node or from node, when receiving the Frame of nonredundancy sub-network bus #E15, as long as verification correctly just forwards immediately.Simultaneously, in order to guarantee the gateway host node and from internodal synchronous, two nodes can carry out periodic synchronous and state by nonredundancy sub-network bus #E15 and examine mutually in the course of the work.
Go the redundancy process: be the redundancy process by network-bus #A1 and network-bus #A2 to nonredundancy sub-network bus #E15, host node 1, from node 2 based on certain Redundant Control algorithm that goes, described control algolithm is relevant with the concrete agreement of CAN network using, here take the ARINC825 agreement as example, Frame on network-bus #A1 and network-bus #A2 is carried out the redundancy of going of information, then be forwarded on nonredundancy sub-network bus #E15.Go in the redundancy process, the host node of gateway is responsible for the forwarding of data, in the situation that working, gateway only forwards to host node the Frame that its CAN bus port #B212-5 receives from node, and completed for two-way by host node and have same sequence number, namely the comparison test of mutually redundant Frame, redundant information remove and to the forwarding of nonredundancy sub-network bus #E15.In going the redundancy process, due to the impact of two-way redundant link transmission delay and fault, the situation that has following three kinds is occured, respectively three kinds of mode of operations of corresponding gateway:
1 hypothesis is owing to the situations such as time-delay occurring from node failure or network-bus #A2, the CAN bus port #A111-3 of host node first receives the Frame that network-bus #A1 mails to nonredundancy sub-network bus #E1, it will in stand-by period window Skew_Max, wait for the backup frame that forwarding comes through nonredundancy sub-network bus #E1 from node so.If host node can be received the backup frame from node in the stand-by period window, and can be by the contrast verification, host node externally forwards this frame, and renewal sequence decision threshold PSN=PSN+1, and can think that the state of gateway and link all is in good range this moment.If received in time window the backup frame sent from node but comparison test do not pass through, think so on link or from intra-node generation disturbance, host node can report an error to host computer, and in request two-way redundancy CAN network A 3, the respective end node resends this frame.And if do not receive backup frame from node in waiting for window, host node will directly forward to nonredundancy sub-network bus #E15 the Frame that receives so, then to sending the status poll frame from node and host computer being carried out fault alarm, inform that the situation of frame losing has appearred in the user.
2 hypothesis are due to situations such as master node port fault or network-bus #A1 appearance time-delays, host node first receives by forwarding by nonredundancy sub-network bus #E15 the backup frame of coming from node, and it will wait for the same serial number data frame that has on network-bus #A1 in the stand-by period window so.Then, if received this Frame in the stand-by period window, and passed through the contrast verification, host node will externally forward this frame so.If do not receive this frame in the stand-by period window, forward to nonredundancy sub-network bus #E15 the backup frame of sending from node, and renewal sequence decision threshold PSN=PSN+1, carry out fault alarm to host computer simultaneously.
3 hypothesis are due to situations such as host node permanent fault or network-bus #A1 disconnections, so from node to host node after the backup frame on success transmission network bus #A2, to can not monitor the Frame that host node externally forwards in the stand-by period window, can directly externally forward this backup frame from node this moment so, and renewal sequence decision threshold PSN=PSN+1, carry out fault alarm to host computer simultaneously.
The present invention can be applied to the air environment networking of small commercial secondary-line-aircraft, completes the bus based on aviation CAN, i.e. the avionics system backbone network of ARINC825 bus and the bridge joint between the subregion sub-network.As shown in Figure 8, CAN#A1/CAN#A2 and CAN#B1/CAN#B2 consist of two two redundant backbones networks of certain small commercial secondary-line-aircraft electronic system, wherein CAN#A1/#A2 is the actor network of air environment, redundancy each other, and CAN#A1/#A2 is sensor network.The passenger cabin control system is as the control terminal of whole avionics system, and its inner airborne computer is in charge of all airborne electronic equipment resources by four independently CAN port and two backbone network interconnection.In the cabin, each avionics subsystem must access backbone network by the network equipment, completes control command transmission and information sharing highly.Digital gateway of the present invention can effectively be supported the ARINC825 agreement, and the interconnected Reliable guarantee that provides of high speed of subsystem network and backbone network is provided.Conversion by digital gateway, avionics system trunk redundant network CAN#A1/CAN#A2 and CAN#B1/CAN#B2 realize interconnected bridge joint with nonredundant network CAN#E1 and the CAN#E2 of subsystem #3 inside respectively, and as long as have one can normally work in two child nodes of intra-gateway, so
Figure BDA00002876366200091
With
Figure BDA00002876366200092
Data communication just any interruption can not occur.

Claims (5)

1.一种基于双DSP的高容错性CAN总线数字网关,其特征在于,它包括主节点(1)、从节点(2)、双路冗余CAN网络A(3)、双路冗余CAN网络B(4)、非冗余子网络总线#E1(5)和非冗余子网络总线#E2(6),1. A kind of high fault-tolerant CAN bus digital gateway based on double DSP, it is characterized in that, it comprises master node (1), slave node (2), two-way redundant CAN network A (3), two-way redundant CAN network A (3), two-way redundant CAN Network B(4), non-redundant subnet bus #E1(5) and non-redundant subnet bus #E2(6), 双路冗余CAN网络A(3)包括网络总线#A1和网络总线#A2;Dual redundant CAN network A (3) includes network bus #A1 and network bus #A2; 双路冗余CAN网络B(4)包括网络总线#B1和网络总线#B2;Dual redundant CAN network B (4) includes network bus #B1 and network bus #B2; 主节点(1)包括DSP#A1(1-1)、DSP#A2(1-2)、CAN总线端口#A11(1-3)、CAN总线端口#A12(1-4)、CAN总线端口#A21(1-5)和CAN总线端口#A22(1-6);The master node (1) includes DSP#A1(1-1), DSP#A2(1-2), CAN bus port #A11(1-3), CAN bus port #A12(1-4), CAN bus port# A21(1-5) and CAN bus port #A22(1-6); 从节点(2)包括DSP#B1(2-1)、DSP#B2(2-2)、CAN总线端口#B11(2-3)、CAN总线端口#B12(2-4)、CAN总线端口#B21(2-5)和CAN总线端口#B22(2-6);The slave node (2) includes DSP#B1(2-1), DSP#B2(2-2), CAN bus port #B11(2-3), CAN bus port #B12(2-4), CAN bus port# B21(2-5) and CAN bus port #B22(2-6); DSP#A1(1-1)和DSP#A2(1-2)之间通过SPI数据通道传输数据,DSP#A1(1-1)通过CAN总线端口#A11(1-3)与网络总线#A1连接,DSP#A1(1-1)通过CAN总线端口#A12(1-4)与非冗余子网络总线#E1(5)连接,DSP#A2(1-2)通过CAN总线端口#A21(1-5)与网络总线#B2连接,DSP#A2(1-2)通过CAN总线端口#A22(1-6)与非冗余子网络总线#E2(6)连接;DSP#A1(1-1) and DSP#A2(1-2) transmit data through SPI data channel, DSP#A1(1-1) communicates with network bus #A1 through CAN bus port #A11(1-3) connection, DSP#A1(1-1) is connected to the non-redundant sub-network bus #E1(5) through CAN bus port #A12(1-4), and DSP#A2(1-2) is connected through CAN bus port #A21( 1-5) Connect with network bus #B2, DSP#A2 (1-2) connect with non-redundant sub-network bus #E2 (6) through CAN bus port #A22 (1-6); DSP#B1(2-1)和DSP#B2(2-2)之间通过SPI数据通道传输数据,DSP#B1(2-1)通过CAN总线端口#B11(2-3)与网络总线#B1连接,DSP#B1(2-1)通过CAN总线端口#B12(2-4)与非冗余子网络总线#E2(6)连接,DSP#B2(2-2)通过CAN总线端口#B21(2-5)与网络总线#A2连接,DSP#B2(2-2)通过CAN总线端口#B22(2-6)与非冗余子网络总线#E1(5)连接;DSP#B1(2-1) and DSP#B2(2-2) transmit data through SPI data channel, DSP#B1(2-1) communicates with network bus #B1 through CAN bus port #B11(2-3) Connection, DSP#B1(2-1) is connected with non-redundant subnetwork bus #E2(6) through CAN bus port #B12(2-4), DSP#B2(2-2) is connected through CAN bus port #B21( 2-5) Connect with network bus #A2, DSP#B2 (2-2) connect with non-redundant sub-network bus #E1 (5) through CAN bus port #B22 (2-6); 主节点(1)的DSP#A1(1-1)和DSP#A2(1-2)与从节点(2)的DSP#B1(2-1)和DSP#B2(2-2)之间通过SPI数据通道传输数据。Pass between DSP#A1(1-1) and DSP#A2(1-2) of the master node (1) and DSP#B1(2-1) and DSP#B2(2-2) of the slave node (2) The SPI data channel transmits data. 2.根据权利要求1所述的基于双DSP的高容错性CAN总线数字网关,其特征在于,主节点(1)还包括CAN驱动器#A11(1-7)、CAN驱动器#A12(1-8)、CAN驱动器#A21(1-9)和CAN驱动器#A22(1-10),2. the high fault-tolerant CAN bus digital gateway based on double DSP according to claim 1, is characterized in that, master node (1) also comprises CAN driver #A11 (1-7), CAN driver #A12 (1-8 ), CAN driver #A21(1-9) and CAN driver #A22(1-10), CAN驱动器#A11(1-7)设置于DSP#A1(1-1)与CAN总线端口#A11(1-3)之间,CAN驱动器#A12(1-8)设置于DSP#A1(1-1)与CAN总线端口#A12(1-4)之间,CAN驱动器#A21(1-9)设置于DSP#A2(1-2)与CAN总线端口#A21(1-5)之间,CAN驱动器#A22(1-10)设置于DSP#A2(1-2)与CAN总线端口#A22(1-6)之间;CAN driver #A11(1-7) is set between DSP#A1(1-1) and CAN bus port #A11(1-3), CAN driver #A12(1-8) is set between DSP#A1(1- 1) Between CAN bus port #A12(1-4), CAN driver #A21(1-9) is set between DSP#A2(1-2) and CAN bus port #A21(1-5), CAN Driver #A22(1-10) is set between DSP#A2(1-2) and CAN bus port #A22(1-6); 从节点(2)还包括CAN驱动器#B11(2-7)、CAN驱动器#B12(2-8)、CAN驱动器#B21(2-9)和CAN驱动器#B22(2-10),The slave node (2) also includes CAN driver #B11 (2-7), CAN driver #B12 (2-8), CAN driver #B21 (2-9) and CAN driver #B22 (2-10), CAN驱动器#B11(2-7)设置于DSP#B1(2-1)与CAN总线端口#B11(2-3)之间,CAN驱动器#B12(2-8)设置于DSP#B1(2-1)与CAN总线端口#B12(2-4)之间,CAN驱动器#B21(2-9)设置于DSP#B2(2-2)与CAN总线端口#B21(2-5)之间,CAN驱动器#B22(2-10)设置于DSP#B2(2-2)与CAN总线端口#B22(2-6)之间。CAN driver #B11(2-7) is set between DSP#B1(2-1) and CAN bus port #B11(2-3), CAN driver #B12(2-8) is set between DSP#B1(2- 1) Between CAN bus port #B12(2-4), CAN driver #B21(2-9) is set between DSP#B2(2-2) and CAN bus port #B21(2-5), CAN Driver #B22(2-10) is set between DSP#B2(2-2) and CAN bus port #B22(2-6). 3.根据权利要求2所述的基于双DSP的高容错性CAN总线数字网关,其特征在于,主节点(1)还包括主存储器#A1(1-11)和主存储器#A2(1-12),3. the high fault-tolerant CAN bus digital gateway based on double DSP according to claim 2, is characterized in that, main node (1) also comprises main memory #A1 (1-11) and main memory #A2 (1-12 ), 主存储器#A1(1-11)与DSP#A1(1-1)之间通过外部扩展接口相连接,主存储器#A2(1-12)与DSP#A2(1-2)之间通过外部扩展接口相连接;The main memory #A1(1-11) is connected to the DSP#A1(1-1) through the external expansion interface, and the main memory #A2(1-12) is connected to the DSP#A2(1-2) through the external expansion interface The interface is connected; 从节点(2)还包括从存储器#B1(2-11)和从存储器#B2(2-12),Slave node (2) also comprises from memory #B1 (2-11) and from memory #B2 (2-12), 从存储器#B1(2-11)与DSP#B1(2-1)之间通过外部扩展接口相连接,从存储器#B2(2-12)与DSP#B2(2-2)之间通过外部扩展接口相连接。Connect from memory #B1(2-11) to DSP#B1(2-1) through external expansion interface, from memory #B2(2-12) to DSP#B2(2-2) through external expansion The interface is connected. 4.根据权利要求1、2或3所述的基于双DSP的高容错性CAN总线数字网关,其特征在于,它还包括液晶显示及操作器(7),4. according to claim 1,2 or 3 described high fault-tolerant CAN bus digital gateway based on double DSP, it is characterized in that, it also comprises liquid crystal display and manipulator (7), 液晶显示及操作器(7)作为人机接口,分别与DSP#A1(1-1)、DSP#A2(1-2)、DSP#B1(2-1)和DSP#B2(2-2)连接。Liquid crystal display and manipulator (7) are used as man-machine interface, respectively connected with DSP#A1(1-1), DSP#A2(1-2), DSP#B1(2-1) and DSP#B2(2-2) connect. 5.根据权利要求4所述的基于双DSP的高容错性CAN总线数字网关,其特征在于,它还包括电源(8),电源(8)用于为DSP#A1(1-1)、DSP#A2(1-2)、DSP#B1(2-1)和DSP#B2(2-2)提供工作电源。5. the high fault-tolerant CAN bus digital gateway based on double DSP according to claim 4, is characterized in that, it also comprises power supply (8), and power supply (8) is used for DSP#A1 (1-1), DSP #A2(1-2), DSP#B1(2-1) and DSP#B2(2-2) provide working power.
CN201310065829.5A 2013-03-01 2013-03-01 Based on the high fault tolerance CAN digital gateway of two CSTR Active CN103139060B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310065829.5A CN103139060B (en) 2013-03-01 2013-03-01 Based on the high fault tolerance CAN digital gateway of two CSTR

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310065829.5A CN103139060B (en) 2013-03-01 2013-03-01 Based on the high fault tolerance CAN digital gateway of two CSTR

Publications (2)

Publication Number Publication Date
CN103139060A true CN103139060A (en) 2013-06-05
CN103139060B CN103139060B (en) 2015-10-28

Family

ID=48498390

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310065829.5A Active CN103139060B (en) 2013-03-01 2013-03-01 Based on the high fault tolerance CAN digital gateway of two CSTR

Country Status (1)

Country Link
CN (1) CN103139060B (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104363156A (en) * 2014-10-31 2015-02-18 北奔重型汽车集团有限公司 Dual-redundancy network topology structure and method
CN105323162A (en) * 2015-09-29 2016-02-10 深圳市安冠科技有限公司 Internet of Things routing system and method
CN107453913A (en) * 2017-08-14 2017-12-08 深圳通业科技股份有限公司 Gateway redundancy method with high-speed communication between processors
CN107992376A (en) * 2017-11-24 2018-05-04 西安微电子技术研究所 Dsp processor data storage Active Fault Tolerant method and apparatus
CN109104348A (en) * 2017-06-21 2018-12-28 比亚迪股份有限公司 Train network data transmission method, system and its apparatus based on CANopen agreement
CN110134631A (en) * 2019-05-09 2019-08-16 中国航空工业集团公司西安航空计算技术研究所 A kind of self- recoverage spi bus communication interface and its self-recovery method
CN110650073A (en) * 2019-09-12 2020-01-03 江苏伦肯智能科技有限公司 CAN bus communication method for mass data transmission
CN111510359A (en) * 2020-03-23 2020-08-07 许昌中科森尼瑞技术有限公司 Low-delay end-to-end communication method based on CAN bus
CN111614532A (en) * 2020-05-13 2020-09-01 湖北三江航天万峰科技发展有限公司 CAN redundant communication system based on DSP
CN112291128A (en) * 2020-10-29 2021-01-29 黑芝麻智能科技(上海)有限公司 Bus-based communication system, system on chip, and method therefor
CN112929265A (en) * 2021-02-08 2021-06-08 上海弘积信息科技有限公司 Method for any node to place VRRP any node in main in real time
CN113722250A (en) * 2021-09-15 2021-11-30 上海赛治信息技术有限公司 Two-way redundant data exchange method and system based on Aurora protocol
CN114338275A (en) * 2021-12-31 2022-04-12 北京神经元网络技术有限公司 Management method, device, equipment and storage medium for AUTBUS bus network node
CN114802820A (en) * 2022-05-12 2022-07-29 中国电子科技集团公司第十研究所 Power management control structure and method for spacecraft payload

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050259669A1 (en) * 2004-05-18 2005-11-24 Mitsubishi Denki Kabushiki Kaisha Media gateway device
CN1889543A (en) * 2006-07-17 2007-01-03 朱宁宁 A communication gate in automatic system
CN101908974A (en) * 2010-07-16 2010-12-08 北京航天发射技术研究所 CAN bus dual redundant hot switching system and hot switching method
CN102063095A (en) * 2009-11-18 2011-05-18 吉林大元电子科技有限公司 CAN bus electronic control device for automobile
CN202190288U (en) * 2011-08-23 2012-04-11 中国北方车辆研究所 Double-gateway redundancy structure for vehicle
CN202737473U (en) * 2012-08-03 2013-02-13 北京东展科博电子有限公司 Dual-redundancy DSP control device for SVG controller

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050259669A1 (en) * 2004-05-18 2005-11-24 Mitsubishi Denki Kabushiki Kaisha Media gateway device
CN1889543A (en) * 2006-07-17 2007-01-03 朱宁宁 A communication gate in automatic system
CN102063095A (en) * 2009-11-18 2011-05-18 吉林大元电子科技有限公司 CAN bus electronic control device for automobile
CN101908974A (en) * 2010-07-16 2010-12-08 北京航天发射技术研究所 CAN bus dual redundant hot switching system and hot switching method
CN202190288U (en) * 2011-08-23 2012-04-11 中国北方车辆研究所 Double-gateway redundancy structure for vehicle
CN202737473U (en) * 2012-08-03 2013-02-13 北京东展科博电子有限公司 Dual-redundancy DSP control device for SVG controller

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
卢玉传 等: ""车载双路CAN总线冗余网关的设计"", 《车辆与动力技术》 *
崔勇,黄金泉: ""航空发动机双余度智能位置控制器设计"", 《推进技术》 *
强宁: ""基于双DSP的航空发动机电子控制器设计及仿真验证"", 《现代制造工程》 *

Cited By (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104363156B (en) * 2014-10-31 2017-12-01 北奔重型汽车集团有限公司 A kind of dual redundant network topological method
CN104363156A (en) * 2014-10-31 2015-02-18 北奔重型汽车集团有限公司 Dual-redundancy network topology structure and method
CN105323162A (en) * 2015-09-29 2016-02-10 深圳市安冠科技有限公司 Internet of Things routing system and method
CN109104348B (en) * 2017-06-21 2020-09-15 比亚迪股份有限公司 Train network data transmission method, system and device based on CANopen protocol
CN109104348A (en) * 2017-06-21 2018-12-28 比亚迪股份有限公司 Train network data transmission method, system and its apparatus based on CANopen agreement
US11356293B2 (en) 2017-06-21 2022-06-07 Byd Company Limited Canopen-based train network data transmission method, system and apparatus
CN107453913A (en) * 2017-08-14 2017-12-08 深圳通业科技股份有限公司 Gateway redundancy method with high-speed communication between processors
CN107453913B (en) * 2017-08-14 2020-08-07 深圳通业科技股份有限公司 Gateway redundancy method with high-speed communication between processors
CN107992376A (en) * 2017-11-24 2018-05-04 西安微电子技术研究所 Dsp processor data storage Active Fault Tolerant method and apparatus
CN107992376B (en) * 2017-11-24 2020-10-30 西安微电子技术研究所 Active fault tolerance method and device for data storage of DSP (digital Signal processor)
CN110134631A (en) * 2019-05-09 2019-08-16 中国航空工业集团公司西安航空计算技术研究所 A kind of self- recoverage spi bus communication interface and its self-recovery method
CN110134631B (en) * 2019-05-09 2023-05-23 中国航空工业集团公司西安航空计算技术研究所 Self-recovery SPI bus communication interface and self-recovery method thereof
CN110650073B (en) * 2019-09-12 2021-06-11 江苏伦肯智能科技有限公司 CAN bus communication method for mass data transmission
CN110650073A (en) * 2019-09-12 2020-01-03 江苏伦肯智能科技有限公司 CAN bus communication method for mass data transmission
CN111510359A (en) * 2020-03-23 2020-08-07 许昌中科森尼瑞技术有限公司 Low-delay end-to-end communication method based on CAN bus
CN111510359B (en) * 2020-03-23 2022-03-11 许昌中科森尼瑞技术有限公司 Low-delay end-to-end communication method based on CAN bus
CN111614532A (en) * 2020-05-13 2020-09-01 湖北三江航天万峰科技发展有限公司 CAN redundant communication system based on DSP
CN112291128B (en) * 2020-10-29 2022-10-21 黑芝麻智能科技(上海)有限公司 Bus-based communication system, system on chip and method therefor
CN112291128A (en) * 2020-10-29 2021-01-29 黑芝麻智能科技(上海)有限公司 Bus-based communication system, system on chip, and method therefor
US12189557B2 (en) 2020-10-29 2025-01-07 Black Sesame Technologies Inc. Bus-based communication system, system-on-chip and method therefor
CN112929265A (en) * 2021-02-08 2021-06-08 上海弘积信息科技有限公司 Method for any node to place VRRP any node in main in real time
CN113722250A (en) * 2021-09-15 2021-11-30 上海赛治信息技术有限公司 Two-way redundant data exchange method and system based on Aurora protocol
CN114338275A (en) * 2021-12-31 2022-04-12 北京神经元网络技术有限公司 Management method, device, equipment and storage medium for AUTBUS bus network node
CN114338275B (en) * 2021-12-31 2023-09-19 北京神经元网络技术有限公司 AUTBUS bus network node management method, device, equipment and storage medium
CN114802820A (en) * 2022-05-12 2022-07-29 中国电子科技集团公司第十研究所 Power management control structure and method for spacecraft payload

Also Published As

Publication number Publication date
CN103139060B (en) 2015-10-28

Similar Documents

Publication Publication Date Title
CN103139060A (en) High-fault-tolerance controller area network (CAN) bus digital gateway based on double digital signal processors (DSPs)
CN104579606B (en) Double-unit traction controller network system redundancy design method
US7707281B2 (en) Redundant input/output management device, notably for data routing
US9413609B2 (en) Communication device and method for transmitting messages in a redundantly operable industrial communication network
CN203747852U (en) Communication devices for redundantly operable industrial communication networks
CN104669268B (en) A kind of redundancy underwater robot self-control system based on Hot Spare and method
US20080205416A1 (en) Flight control computers with ethernet based cross channel data links
CN101753348A (en) High-availability industrial Ethernet redundancy method
US10405185B2 (en) Redundantly operable industrial communication system, method for operation thereof and radio subscriber station
US10484199B2 (en) Redundantly operable industrial communication system, method for operating the communication system, and radio transceiver station
US20140086136A1 (en) Redundantly Operable Industrial Communication System and Method for Operation Thereof
CN102035688B (en) Design method for rapidly controlling network link access
CN102904818A (en) Method and device for updating ARP (Address Resolution Protocol) information table
US8812759B2 (en) Bus subscriber device for connection to a line-redundant data bus, and method for controlling the communication of a bus subscriber with a line-redundant serial data bus
CN111711583B (en) Switch supporting configuration of multiple redundancy protocols and transformer substation network system
CN210225442U (en) double-CAN redundancy system based on full backup
US10484238B2 (en) Radio communication system for an industrial automation system, method for operating said radio communication system, and radio transceiver station
US10122835B2 (en) Method and radio communication system for an industrial automation system, radio subscriber station and serialization unit
CN106789511A (en) Train based on FPGA CAN communication switching control method and modular converter
CN101547131B (en) EAPS looped network single-channel fault location and protection method
CN107888404A (en) The communication system and its operation method of the energy redundancy running of industrial automation system
CN118381691B (en) A rail transit door system network architecture and network communication method
CN104007657B (en) The docking facilities and method of a kind of triplex level redundancy system and double redundant system
CN109361587B (en) Intelligent station control layer networking system and method based on HSR (high speed railway) ring network and PRP (redundancy protocol) redundant network
CN100496005C (en) A Large Scale Network Control System

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20190611

Address after: 150000 Heilongjiang Harbin Dalian economic and Trade Zone, the North Road and Xingkai Road intersection

Patentee after: HIT ROBOT GROUP Co.,Ltd.

Address before: 150001 No. 92 West straight street, Nangang District, Heilongjiang, Harbin

Patentee before: Harbin Institute of Technology

TR01 Transfer of patent right
PP01 Preservation of patent right

Effective date of registration: 20240626

Granted publication date: 20151028

PP01 Preservation of patent right