CN103293949B - Output switch parameter passage redundant fault-tolerant control method and Redundanter schalter amount output channel - Google Patents

Abstract

The application discloses a redundant fault-tolerant control method for switch output channels, which is applied to three redundant switch output channels of the DEH control system module. The method includes: the input end of the switch output channel receives the control signal sent by FPGA, Process the control signal to obtain an output signal, and each of the output signals is directly connected in parallel through a diode for redundancy; the switching value output channel judges whether the internal or external failure of the switching value output channel is through a self-test readback mode; The degraded mode is set, and when a fault occurs, the output is output according to the degraded mode. This method uses three independent redundant switching value output channels, has a degraded mode, and uses a self-test readback mechanism to effectively judge internal or external faults in the channel, ensuring the stability of the operating process. The invention also discloses a redundant switching value output channel, which greatly improves the fault tolerance capability of the whole system.

Description

Redundant fault-tolerant control method of switching value output channel and redundant switching value output channel

technical field

The invention relates to the technical field of redundant fault-tolerant control, and more specifically, relates to a redundant fault-tolerant control method of a switching value output channel and a redundant switching value output channel.

Background technique

At present, DCS (Distributed Control System, distributed control system) is a distributed control system, which has been widely used in the fields of petroleum, electric power, chemical industry, steel, cement, manufacturing, water treatment and other automatic control fields. The multi-level computer system formed with the communication network as the link integrates 4C technologies such as computer, communication, display and control. Its basic ideas are decentralized control, centralized operation, hierarchical management, flexible configuration and convenient configuration.

With the development of computer technology and its application in the field of automation, a digital computer-based DEH (Digital Electro-Hydraulic Control System, digital electro-hydraulic control system for steam turbines) has emerged, referred to as digital ESC, which is an important part of DCS. The most important thing in the DCS system is the redundant fault-tolerant control of the switching value. In the prior art, there are two redundant modes of the switching value output channel: a. Dual redundant switching value output channels, which are output through high selection or low selection. ; b. Three redundant switch output channels, using two-out-of-three voting mechanism for output. For the triple redundant switch output module used in the DCS system, it includes three independent output modules, all of which are connected to three independent controllers of the system, receive instructions and data transmitted by the controller, and switch according to the instructions and data The output of the three output modules is finally input to the terminal module, and the terminal module selects two out of three to drive the circuit driver to work. Common dual redundant switching value output channels, when a channel fails, it makes it difficult for the voting circuit to judge, and the data output can only be performed by high selection or low selection, that is, as long as one channel fails in the dual redundancy, the data output It may be incorrect. Although the three redundant switching output channels adopt a two-out-of-three voting mechanism, which greatly provides the correctness of the output data, but when two channels fail, the system will lead to safety, and the operation process cannot be guaranteed. stability.

Therefore, it is an urgent problem to be solved by those skilled in the art to provide a redundant fault-tolerant control method for switching output channels and redundant switching output channels to effectively judge internal or external faults of the channels and ensure the stability of the operation process.

Contents of the invention

In view of this, the present invention provides a redundant fault-tolerant control method for switching value output channels and a redundant switching value output channel to overcome the problem in the prior art that when two channels fail, the system will lead to safety and cannot guarantee operation. The problem of process stability.

To achieve the above object, the present invention provides the following technical solutions:

A redundant fault-tolerant control method for switching value output channels, applied to three redundant switching value output channels of DEH control system modules, the method includes:

The input terminal of the switching value output channel receives the control signal sent by the FPGA, processes the control signal to obtain an output signal, and the output signal is directly connected in parallel through a diode for redundancy;

The switch output channel judges whether there is a fault inside or outside the switch output channel through a self-test readback method, and the specific method for judging an internal fault or an external fault through the self-check readback method includes: by comparing the readback value Whether it is inconsistent with the input value, the fault of the whole loop of self-check, wherein, the readback value is the readback signal reported to FPGA, and the input value is the control signal sent by FPGA;

The degraded mode is set in advance, and when a fault occurs, the output is output according to the degraded mode.

Wherein, the degraded mode is a 3-2-1-0 degraded mode.

Wherein, the 3-2-1-0 degraded mode is specifically: the three redundant switching output channels are directly connected in parallel, and when one of the channel failures does not output, 3 drops to 2; when two of the channel failures do not output 2 is reduced by 1; when the three channels fail to output at the same time, 1 is reduced by 0.

On the basis of the redundant fault-tolerant control method of the switch output channel disclosed above, the present invention also discloses a redundant switch output channel, which is applied to the three redundant switch output channels of the DEH control system module. The switching value output channel includes: three mutually independent switching value output channels, the output ends of the switching value output channels are directly connected in parallel through a diode and the switching value output terminal connected to one end of the diode, the switching value output channel Through the self-test readback method, it is judged whether the internal or external fault of the switching value output channel is judged. The specific method of judging the internal fault or the external fault through the self-test readback method includes: by comparing whether the readback value is inconsistent with the input value, The failure of the entire loop is self-checked, wherein the readback value is a readback signal reported to the FPGA, and the input value is a control signal sent by the FPGA.

Wherein, the circuit of the switching value output channel includes: a power supply circuit, an output circuit connected to the power supply circuit, and a readback circuit connected to the power supply circuit and the output circuit, wherein,

The power supply circuit includes a switch transistor Q1, a first resistor R0 that provides base current for the switch transistor Q1, and a second resistor R and a third resistor R1 with the same resistance divide the voltage when the switch transistor Q1 is turned on, providing a gate voltage for the MOS transistor M1 to turn on the MOS transistor M1;

The output circuit includes two nodes S1 and S2 of the relay, an anti-reverse diode D1 and a clamping diode D2; the S1 is a normally open node, the S2 is a normally closed node, and the anti-reverse diode D1 and the clamping diode D2 is to ensure that the output is a positive value;

The readback circuit includes an optocoupler U1, an inverter, a current limiting resistor R2, a current limiting resistor R3, and a pull-up resistor R4, and the current limiting resistor R3 provides current for the optocoupler U1, so that the optocoupler U1 conducts.

Preferably, the circuit of the switch output channel further includes: a resettable fuse F1 that is blown to protect the switch output channel when a short-circuit fault occurs.

It can be seen from the above-mentioned technical solutions that, compared with the prior art, the present invention discloses a redundant fault-tolerant control method for switching output channels, which is applied to three redundant switching output channels of DEH control system modules. The method includes: The input terminal of the switching value output channel receives the control signal sent by the FPGA, and processes the control signal to obtain an output signal, and the output signals are directly connected in parallel through diodes for redundancy; Judging whether there is a failure inside or outside the switching value output channel; setting a degraded mode in advance, and when a fault occurs, output the output according to the degraded mode. This method uses three independent redundant switching value output channels, has a degraded mode, and uses a self-test readback mechanism to effectively judge internal or external faults in the channel, ensuring the stability of the operating process. The invention also discloses a redundant switching value output channel, the output end of which is directly connected in parallel with a diode for redundancy, and through a degraded mode, thereby greatly improving the fault-tolerant capability of the entire system.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

FIG. 1 is a flow chart of a redundant fault-tolerant control method for switching output channels disclosed in an embodiment of the present invention;

Fig. 2 is a schematic structural diagram of a redundant switch output channel disclosed in an embodiment of the present invention;

Fig. 3 is the circuit hardware block diagram of switch quantity output channel disclosed by the embodiment of the present invention;

Fig. 4 is a circuit schematic diagram of a switch output channel disclosed by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

The invention discloses a redundant fault-tolerant control method for switching value output channels, which is applied to three redundant switching value output channels of a DEH control system module. The method includes: the input end of the switching value output channel receives a control signal sent by FPGA, Process the control signal to obtain an output signal, and each of the output signals is directly connected in parallel through a diode for redundancy; the switching value output channel judges whether the internal or external failure of the switching value output channel is through a self-test readback mode; The degraded mode is set, and when a fault occurs, the output is output according to the degraded mode. This method uses three independent redundant switching value output channels, has a degraded mode, and uses a self-test readback mechanism to effectively judge internal or external faults in the channel, ensuring the stability of the operating process. The invention also discloses a redundant switching value output channel, the output end of which is directly connected in parallel with a diode for redundancy, and through a degraded mode, thereby greatly improving the fault-tolerant capability of the entire system.

Please refer to FIG. 1 , which is a flowchart of a redundant fault-tolerant control method for switching output channels according to an embodiment of the present invention. The embodiment of the present invention discloses a redundant fault-tolerant control method for switching output channels, which is applied to three redundant switching output channels of a DEH control system module. The method steps specifically include:

Step 101: The input terminal of the switching value output channel receives the control signal sent by the FPGA, processes the control signal to obtain an output signal, and the output signals are directly connected in parallel through diodes for redundancy.

Step 102: The switch output channel judges whether the switch output channel is internally or externally faulty by means of self-test readback.

Specifically, the specific way of judging the internal fault or external fault by the self-test readback method:

1. By comparing the readback with the output state, the fault of the entire circuit can be self-checked. As long as there is an inconsistency, whether it is an internal fault or an external fault of the channel, it can be detected.

2. When the power is first turned on, if the readback value DO_TEST is inconsistent with the input value DO, it is judged that the internal fault of the channel.

3. If the inside of the channel is normal, the control relay S1 will be closed, S2 will be disconnected, and the circuit will work normally. When DO_TEST is inconsistent with DO, turn off S1 at this time, and first check whether there is a fault inside the channel. If the inside of the channel is normal, then judge the external short circuit .

4. When an external short circuit occurs, the intermittent control S1 is closed to judge whether the external is back to normal.

Step 103: Preset a degraded mode, and output the output according to the degraded mode when a fault occurs.

Wherein, the above-mentioned degraded mode is a 3-2-1-0 degraded mode. The 3-2-1-0 degraded mode is specifically: the three redundant switching output channels are directly connected in parallel, and when one of the channel failures does not output, 3 drops to 2; when two of the channel failures do not output, then Realize 2 to 1; when three channels fail at the same time and do not output, 1 to 0 is realized.

The invention discloses a redundant fault-tolerant control method for switching value output channels, which is applied to three redundant switching value output channels of a DEH control system module. The method includes: the input end of the switching value output channel receives a control signal sent by FPGA, Process the control signal to obtain an output signal, and each of the output signals is directly connected in parallel through a diode for redundancy; the switching value output channel judges whether the internal or external failure of the switching value output channel is through a self-test readback mode; The degraded mode is set, and when a fault occurs, the output is output according to the degraded mode. This method uses three independent redundant switching value output channels, has a degraded mode, and uses a self-test readback mechanism to effectively judge internal or external faults in the channel, ensuring the stability of the operating process.

On the basis of the above disclosed embodiments of the present invention, the embodiment of the present invention also discloses a redundant switching value output channel, which is applied to the three redundant switching value output channels of the DEH control system module, and the redundant switching value output channel includes : three mutually independent switching value output channels 201, the output terminals of the switching value output channels 201 are directly connected in parallel through the diode 202 and the switching value output terminal 203 connected with one end of the diode 202 respectively. Specifically, please refer to FIG. 2 , which is a schematic structural diagram of a redundant switch output channel disclosed by an embodiment of the present invention. As shown in Figure 2, the three switch output channels are independent on the three modules, and the output terminals are directly paralleled for redundancy through diodes to achieve a degraded mode, thereby greatly improving the fault tolerance of the entire system.

Wherein, the above-mentioned degraded mode is a 3-2-1-0 degraded mode. The 3-2-1-0 degraded mode is specifically: the three redundant switching output channels are directly connected in parallel, and when one of the channel failures does not output, 3 drops to 2; when two of the channel failures do not output, then Realize 2 to 1; when three channels fail at the same time and do not output, 1 to 0 is realized.

Specifically, please refer to FIG. 3 , which is a hardware block diagram of a switch output channel circuit disclosed by an embodiment of the present invention. The circuit of the switching value output channel includes: a power supply circuit, an output circuit connected to the power supply circuit, and a readback circuit connected to the power supply circuit and the output circuit, wherein,

The power supply circuit includes switch transistors Q1 and R0 to provide base current for the switch transistor Q1, and when the switch transistor Q1 is turned on, R and R1 with the same resistance divide the voltage to provide a gate voltage for the MOS transistor M1, so that The MOS transistor M1 is turned on; the output circuit includes two nodes S1 and S2 of the relay, an anti-reverse diode D1 and a clamping diode D2, the S1 is a normally open node, the S2 is a normally closed node, and the The anti-reverse diode D1 and the clamping diode D2 are to ensure that the output is a positive value; the readback circuit includes an optocoupler U1, an inverter, a current limiting resistor R2, a current limiting resistor R3, and a pull-up resistor R4, and the current limiting The resistor R3 provides current for the optocoupler U1 to turn on the optocoupler U1.

Preferably, the above-mentioned circuit of the switching value output channel further includes: a self-recovery fuse F1 that is blown to protect the switching value output channel when a short-circuit fault occurs.

When the control signal DO is "1", U1 is turned on, and the output "0" reads back "1" after passing through the inverter. S1 and S2 are the two nodes of the relay, of which S1 is normally open and S2 is normally closed. Node, D1 is the anti-reverse diode, D2 is the clamping diode to ensure that the output is a positive value.

DO is a control signal sent by the FPGA to control the on-off of the P-channel MOS transistor M1. When DO is "1", the switching transistor Q1 is turned on, the gate voltage of the MOS transistor M1 is 12V, the MOS transistor M1 is turned on, and DO is "0". ”, the switching transistor Q1 is turned off, the gate voltage of the MOS transistor M1 is 24V, and the MOS transistor M1 is cut off. S1 and S2 are two independent nodes of the same relay, S1 is a normally open node, and S2 is a normally closed node. DOUT is the output signal, DO_TEST is the readback signal reported to the FPGA, U1 is the optocoupler isolation switch channel and the readback circuit, and the readback circuit is connected to the on-board controller.

In order to prevent part of the circuit damage of the controller caused by channel short-circuit fault, F1 is a self-recovery fuse with a switching capacity of 200mA. When a short-circuit fault occurs, the 200mA fuse F1 is blown to protect the channel. Return to connected state.

Working principle: when DO is "1", DO_TEST is "1", when DO is "0", DO_TEST is "0", specifically:

1. When the power is first turned on, the relay does not act, switch S1 is disconnected, S2 is closed, and the system output is disconnected from the outside world. Since the switch S1 is disconnected, the signal will not be output through D1, even if S1 is stuck at this time, because S2 is In the closed state, the output is grounded, and it will lead to safety without affecting the external output. Through the readback value DO_TEST, it can be judged whether there is a fault inside the channel. If the channel is normal, control S1 to close, S2 to open, and the circuit works normally. It can be seen from the characteristics of the relay that under the condition of small current, the switch breaks first and then closes.

2. When the circuit is working normally, the relay does not act, and the MOS tube is responsible for the DO output, and the maximum output current is 200mA.

3. If it is detected that the output is inconsistent with the readback, then control S1 to open and S2 to close.

Fault analysis: The principle of self-inspection is to detect channel faults, without distinguishing the specific fault cause. The following does not affect the external state refers to the redundant mode:

1. By comparing the readback with the output state, the fault of the entire circuit can be self-checked. As long as there is an inconsistency, whether it is an internal fault or an external fault of the channel, it can be detected.

2. When the power is first turned on, if the readback value DO_TEST is inconsistent with the input value DO, it is judged that the internal fault of the channel.

3. If the inside of the channel is normal, the control relay S1 will be closed, S2 will be disconnected, and the circuit will work normally. When DO_TEST is inconsistent with DO, turn off S1 at this time, and first check whether there is a fault inside the channel. If the inside of the channel is normal, then judge the external short circuit .

4. When an external short circuit occurs, the intermittent control S1 is closed to judge whether the external is back to normal.

Specifically, please refer to FIG. 4 , which is a schematic diagram of a switch output channel circuit disclosed by an embodiment of the present invention. Figure 4 shows the schematic diagram of the DO circuit, DO1 is the input control signal, DO1_OUT is the output signal, DO1_TEST is the readback signal, and DO_K1 is the relay control signal.

When the input control signal DO1 is "1", Q14 is turned on, and +24V_DO is divided by resistors R810 and R811 to get the gate voltage of the MOS tube to be +12V, and the MOS tube is turned on; when the power is just turned on, the relay does not work. The normally open node is disconnected, the normally closed node is closed, the output is separated from the outside world, and does not affect the external output. Through the readback value DO_TEST, it can be judged whether there is a fault inside the channel. If the channel is normal, control S1 to close, S2 to open, and the circuit works normally. Output a maximum 200mA DO signal through the MOS tube.

When the input control signal DO is "0", the gate voltage of the MOS transistor is +24V, and the MOS transistor is cut off. K9 is Omron's G6B low-power relay, which has one normally open and one normally closed contact independent of each other. The diode D343 protects the MOS tube to prevent the MOS tube from being damaged due to the short circuit of the resistor R810. D130 is an anti-reverse diode. During redundant operation, the diode D130 can prevent the current from pouring back.

In summary: the present invention discloses a redundant fault-tolerant control method for switching output channels, which is applied to three redundant switching output channels of a DEH control system module. The method includes: the input end of the switching output channel receives an FPGA The control signal sent out, the control signal is processed to obtain the output signal, and the output signals are directly connected in parallel through diodes for redundancy; the switching value output channel judges whether the internal or external state of the switching value output channel is Whether there is an external failure; the degraded mode is set in advance, and when a fault occurs, the output will be output according to the degraded mode. This method uses three independent redundant switching value output channels, has a degraded mode, and uses a self-test readback mechanism to effectively judge internal or external faults in the channel, ensuring the stability of the operating process. The invention also discloses a redundant switching value output channel, the output end of which is directly connected in parallel with a diode for redundancy, and through a degraded mode, thereby greatly improving the fault-tolerant capability of the entire system.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (4)

1. an output switch parameter passage redundant fault-tolerant control method, is characterized in that, be applied to deh control system module triple redundance output switch parameter passage, the method comprises:

The input end of described output switch parameter passage receives the control signal that FPGA sends, and described control signal is carried out process and obtain and output signal, described output signal is each via the direct parallel redundancy of diode;

Described output switch parameter passage is by self-inspection retaking of a year or grade mode, judge described output switch parameter channel interior or outside whether fault, describedly judge that the concrete mode of internal fault or external fault comprises by self-inspection retaking of a year or grade mode: by comparing retaking of a year or grade value and whether input value is inconsistent, the fault in the whole loop of self-inspection, wherein, described retaking of a year or grade value is the read back waveform reporting FPGA, and described input value is the control signal that FPGA sends;

Pre-set degraded mode, when there being fault to occur, the output of output quantity is carried out according to described degraded mode, described degraded mode is 3-2-1-0 degraded mode, described 3-2-1-0 degraded mode is specially: described triple redundance output switch parameter passage is directly in parallel, then realizes 3 fall 2 when one of them channel failure does not export; Then realize 2 when wherein two channel failures do not export and fall 1; Then realize 1 when three passage simultaneous faultss do not export and fall 0.

2. a Redundanter schalter amount output channel, it is characterized in that, be applied to deh control system module triple redundance output switch parameter passage, this Redundanter schalter amount output channel comprises: three separate output switch parameter passages, the output terminal of described output switch parameter passage is respectively by the diode directly in parallel and output switch parameter end that is connected with one end of described diode, described output switch parameter passage is by self-inspection retaking of a year or grade mode, judge described output switch parameter channel interior or outside whether fault, describedly judge that the concrete mode of internal fault or external fault comprises by self-inspection retaking of a year or grade mode: by comparing retaking of a year or grade value and whether input value is inconsistent, the fault in the whole loop of self-inspection, wherein, described retaking of a year or grade value is the read back waveform reporting FPGA, described input value is the control signal that FPGA sends.

3. Redundanter schalter amount output channel according to claim 2, it is characterized in that, the circuit of described output switch parameter passage comprises: feed circuit, the output circuit be connected with described feed circuit and the read back circuit be connected with output circuit with described feed circuit, wherein

Described feed circuit comprise switch triode Q1, provide the first resistance R0 of base current for described switch triode Q1, the second resistance R that resistance is identical when described switch triode Q1 conducting and the 3rd resistance R1 dividing potential drop, for metal-oxide-semiconductor M1 provides grid voltage, make described metal-oxide-semiconductor M1 conducting;

Described output circuit comprises two node S1 and S2, counnter attack diode D1 and the clamp diode D2 of relay; Described S1 is for often to open node, and described S2 is normally closed node, described counnter attack diode D1 and clamp diode D2 for ensure export on the occasion of;

Described read back circuit comprises optocoupler U1, phase inverter, current-limiting resistance R2 and current-limiting resistance R3 and pull-up resistor R4, and described current-limiting resistance R3 provides electric current for described optocoupler U1, makes described optocoupler U1 conducting.

4. Redundanter schalter amount output channel according to claim 3, is characterized in that, the circuit of described output switch parameter passage also comprises: when there is short trouble, fuses the resettable fuse F1 protecting described output switch parameter passage.