发明名称 System and method for fault tolerant computing using generic hardware
摘要 A dual redundant process controller is provided. The controller comprises a process control application that executes on a first and a second module. When executed by the first module, a first application instance writes a first synchronization information to the second module, reads a second synchronization information from the first module, and, when the second disagrees with the first synchronization information after passage of a time-out interval, performs a resynchronization function; and wherein, when executed by the second module, the second application instance writes the second synchronization information to the first module, reads the first synchronization information from the second module, and, when the first disagrees with the second synchronization information after passage of the time-out interval, performs the resynchronization function. The first application instance calls the synchronization function provided by the multitasking real-time operating system before invoking a set events function provided by a multitasking real-time operating system.
申请公布号 US8966340(B2) 申请公布日期 2015.02.24
申请号 US201414263553 申请日期 2014.04.28
申请人 Invensys Systems, Inc. 发明人 Gale Alan A.;Kling Andrew L.;Timperley Mark E.;Bass Lawrence T.;Lavallee John J.;Cranshaw George W.;Foskett Alan M.
分类号 H03M13/00;G06F11/10;G06F11/16;H04L1/00;H04L1/22;G06F9/48;H03M13/15 主分类号 H03M13/00
代理机构 代理人 Roth, Esq. Thomas J.
主权项 1. A dual redundant process controller, comprising: a first processor; a first memory; a first instance of a process control application stored in the first memory; a second processor; a second memory; and a second instance of the process control application stored in the second memory, wherein, when executed by the first processor, the first instance of the process control application: forms a first payload and a first cyclic redundancy check (CRC),compares the first cyclic redundancy check with a second cyclic redundancy check determined by the second instance of the process control application based on a second payload formed by the second instance of the process control application that executes on the second processor, andtransmits the first payload and the first cyclic redundancy check only when the first cyclic redundancy check agrees with the second cyclic redundancy check.
地址 Foxboro MA US