| 摘要 |
A dual-channel hot standby system and a method for carrying out dual-channel hot standby, the system comprises a hot standby status management layer including two hot standby management units, an application processing layer including two application processors, and a data communication layer including two communicators; the hot standby status management layer is used for controlling the setting and switching between a active status and a standby status of the two application processors, monitoring the working status of the data communication layer, and carrying out synchronization of the control cycles for the two channels of the system; wherein one of the hot standby management units controls one of the application processors, and together constitute a channel of the system therewith; the data communication layer is used for receiving data from outside, and forwarding the data to the application processing layer. The present invention avoids the occurrence of “dual-channel-active” or “dual-channel-standby” status; ensures synchronization of the control cycles of two channels; reduces the time of the system for responding to breakdowns; meets the real-time requirements; enhances the reliability and availability of the system; and ensures a seamless switching between active and standby statuses. |
| 主权项 |
1. A dual-channel hot standby system having a hierarchical structure, comprising:
a hot standby status management layer including two hot standby management units as judgment equipments of a third party, an application processing layer including two application processors, and a data communication layer including two communicators; the hot standby status management layer is used for controlling the setting and switching between a active status and a standby status of the two application processors, monitoring the working status of the data communication layer, and carrying out synchronization of the control cycles for the two channels of the system; wherein one of the hot standby management units controls one of the application processors, and together constitute a channel of the system therewith; the data communication layer is used for receiving data from outside, and forwarding the data to the application processing layer; one of the hot standby management units monitors a working status of the application processors and sends working mode codes to one of the application processors to inform its working mode; the other hot standby management unit controls a working mode of the other application processor; the two hot standby management units adopt respective self-lock/interlock logic between each other to select a channel in normal operation to be the one in active status, so as to avoid a “dual-channel-active” or ‘dual-channel-standby” status which may be occurred when the two channels make determination for each other; at the same time, the hot standby status management layer outputs synchronous signals, so that the two application processors of the application layer are in working status with synchronous cycles; the application processing layer includes two application processors; at the beginning of every control cycle, the two application processors receive working mode codes from corresponding hot standby management units, and perform workflow for active status or standby status according to the received working mode codes; upon finishing such workflow, the two application processors report their own working statuses to the corresponding hot standby management units, which determine whether such working statuses are normal or not according to the information regarding working statuses; when either of the application processors is found to be abnormal in working, the hot standby management units control the two application processors to perform a switching of active and standby statuses and take a redundant strategy for the abnormal application processor to stop it from working; the data communication layer includes two communicators which receive data from outside and forward the data to the two application processors of the application processing layer, and meanwhile send calculation results from the application processor which is in active status to an external system; the two communicators operating independently of each other constitute a redundant configuration structure such that when one of them breaks down, the other can still finish data forwarding for the two processors of the application processing layer; the status of each communicator is co-monitored by the two hot standby management units of the hot standby management layer; during normal operation, the communicator can send periodically variable level signals to the hot standby management layer; once this kind of dynamic signal is stopped or anything unusual is happening thereto, the hot standby management layer determines that such communicator is abnormal and sends such status to the two application processors of the application processing layer, so as to facilitate the application processors to select a normal communicator for output; one of the hot standby management units of the hot standby management layer and one of the application processors of the application processing layer together form a channel for the hot standby system; the two communicators of the data communication layer are redundant for each other, and shared by the two channels; the data exchange among the three layers of the structure is realized by a high-speed communication bus; the hot standby management unit, the high-speed communication bus and the communicators all adopt redundant structures; and, in order to ensure a seamless switching of active and standby statuses, three of the following ways are used at the same time: 1) the application processor, before it enters into the standby mode, conducts a synchronization in the synchronous mode according to the data from the application processor which is in the active mode; 2) the hot standby status management layer outputs synchronous signals to the two application processors, which allows the two application processors to work with synchronous control cycles; 3) the data communication layer ensures an consistency of the data sent to the two application processors by identifying the information regarding a serial number of the cycle in the data request from the application processing layer. |
