RU2347264C2 - Three-element majority device of reservation - Google Patents

Abstract

FIELD: physics; guidance.

SUBSTANCE: invention concerns to radio engineering and automatics field and can be used in systems and processing devices of the numeral information with reservation. Technical effect of the invention is aimed at, pinch of reliability of system of reservation at the expense of the control of working capacity of reserve devices and their protection against malfunctions is. The device consists of three reserve devices, three electronic keys, three "2И" devices, one "3ИЛИ" device and the generator of clock impulses. The technical effect is reached at the expense of introduction of the block of the analysis, the block of definition of failures and the block of mapping of a state and communications between them.

EFFECT: increase of reliability of system of reservation at the expense of the control of working capacity of reserve devices and their protection against malfunctions.

4 dwg

Description

The present invention relates to the field of radio engineering and automation and can be used in systems and devices for processing digital information with redundancy.

A known backup device ["Duplicate system with a delay" and.with. No. 1538758, cl. H05K 10/00, 06.29.88]. It contains two redundant discrete devices, two shift registers, three AND elements, an OR element, an adder modulo 2, two JK flip-flops. The disadvantage of this device is the low reliability of decision making, which consists in the impossibility of detecting failures and failures of the "short circuit" type.

A device of a duplicated system with a delay is known [Copyright certificate No. 1660231 of the USSR, IPC ⁶ H05K 10/00, dated 30.06.91]. It consists of two redundant devices, two shift registers, an adder modulo 2, two JK-triggers, three AND elements, a single-vibrator, an OR element, a D-trigger, an OR-NOT element, an installation unit, discrete device input, a synchronization bus input, two output tires.

The disadvantage of this device is the low probability of an accurate decision to connect a backup device. Only failures can be detected in this device, and failures in its operation cannot be detected, therefore there is no possibility of prohibiting the transmission of a distorted information sequence of pulses from the output of the reserved system to the communication channel.

A redundant device is also known [Author's certificate No. 314206, IPC ⁶ Н05К 10/00, dated June 30, 2003], which contains a redundant block, a majority control element, an ambiguity element, an integrating element, a memory element, an OR-I element, and a recovery element in each channel organ.

A disadvantage of the known device is its low noise immunity, since it does not provide protection against failures of redundant units. In case of failures, it is possible to disable all channels sequentially, which as a result leads to the failure of the entire redundant device. Failure occurs despite the fact that all redundant blocks can be operational in this case, and the device could continue to function normally. Lack of protection against failures reduces the reliability of the redundant device.

The closest in technical essence to the claimed device is a device [Chernyshev A.A. Fundamentals of design and reliability of electronic computing tools. - M .: Radio and communications, 1998. - S.350], consisting of three backup elements, three elements 2I, one element 3OR, to the input of which the outputs of the three elements 2I are connected. In this case, the first input of the first element 2I is connected to the first input of the third element 2I, the second input of which is connected to the first input of the second element 2I, the second input of which is connected to the second input of the first element 2I.

However, this device has low reliability due to the lack of control of the operability of the backup elements, which leads to a violation of the masking algorithm for failures in case of failure of two or more backup elements, and low noise immunity, because it does not provide protection against failures of the reserved elements.

The technical result of the invention is the development of a three-element majority backup device, which allows to increase the reliability of the backup system by monitoring the health of backup elements and protecting them from failures.

The technical result is achieved in that in a three-element majority backup device containing three redundant elements, the combined inputs of which are the information input of the device, three elements 2I, the outputs of which are connected respectively to different inputs of the element 3 OR, the first input of the first element 2I is connected to the first input of the third element 2I, the second input of which is connected to the first input of the second element 2I, the second input of which is connected to the second input of the first element 2I, an analysis block is additionally introduced , Failure determining unit, a clock generator, a display unit state, first, second and third electronic switches. The outputs of the first, second and third backup elements are connected respectively to the information inputs of the first, second and third electronic keys and connected to the second, fourth and sixth inputs of the analysis unit, the three outputs of which are connected to three inputs of the failure detection unit. The fourth input of the failure detection unit is connected to the output of the clock generator, and the three outputs of this unit are connected to the three inputs of the status display unit and are connected respectively to the control inputs of the three electronic keys. The output of the first electronic key is connected to the first inputs of the first and third elements 2I, the output of the second key is connected to the second inputs of the first and second elements 2I, and the output of the third electronic key is connected to the first input of the second element 2I and the second input of the third element 2I. The output of the 3OR element is connected to the first, third and fifth inputs of the analysis unit and is connected to the output of the device.

Thanks to the new set of essential features implemented through the introduction of new units and the links between them, it is possible to protect against accidental failures of the backup elements and their technical condition is monitored. In case of accidental failure of one of the backup elements, it is possible for maintenance personnel to immediately begin to replace the failed channel, which ensures higher reliability of the claimed device in comparison with the known ones.

The analysis of the prior art made it possible to establish that analogues that are characterized by a set of features identical to all the features of the claimed technical solution are absent, which indicates the compliance of the claimed device with the patentability condition of "novelty".

Search results for known solutions in this and related fields of technology in order to identify features that match the distinctive features of the prototypes of each claimed invention have shown that they do not follow explicitly from the prior art. From the prior art determined by the applicant, the influence of the provided by the essential features of the claimed invention on the achievement of the specified technical result is not known. Therefore, the claimed invention meets the condition of patentability "Inventive step".

The claimed device is illustrated by diagrams:

figure 1 shows the structural diagram of a three-element majority backup device;

figure 2 shows the structural diagram of the analysis unit;

figure 3 shows the structural diagram of the unit for determining failures;

figure 4 is a structural diagram of a failure determination analyzer.

The three-element majority backup device shown in figure 1, consists of three backup elements 1, 2, 3, first 4, second 5, third 6 electronic keys, three elements 2I 7, 8, 9, element 3 OR 10, analysis unit 11, a clock generator 12, a fault detection unit 13, and a status display unit 14.

The information input of the three-element majority backup device is connected to the inputs of three backup elements 1, 2, 3, the output of each of which is connected to the information input of the first 4, second 5, third 6 electronic keys, and connected to the second, fourth and sixth inputs of the analysis block 11. The output of the first electronic key 4 is connected to the first inputs of the first 7 and third 9 elements 2I, the output of the second electronic key 5 is connected to the second inputs of the second 8 and first 7 elements 2I, and the output of the third electronic key Cha 6 is connected to the first input of the second 8 and to the second input of the third 9 elements 2I. The control inputs of the electronic keys 4, 5, 6 are connected respectively to the first, second, third inputs of the state display unit 14 and are connected to the first, second and third outputs of the failure detection unit 13. The fourth input of the failure detection unit 13 is connected to the output of the clock generator 12, and the first, second and third inputs of block 13 are connected respectively to the first, second, third outputs of the analysis block 11. The first, third and fifth inputs of the analysis block 11 are connected to the output of the three-element majority reserve device and with the output of the element 3 OR 10, the first, second, third inputs of which are connected respectively to the outputs of the first 7, second 8, third 9 elements 2I.

The analysis unit 11 (figure 2) is designed to compare the information sequence of signals supplied from the output of the element 3 OR 10 and from the outputs of the backup elements 1, 2, 3 and the formation of the resulting signals for the failure detection unit 13.

Analysis block 11 consists of three adders modulo two 11.1, 11.2 and 11.3, the first inputs of which are the first, third, fifth inputs of analysis block 11, to which the output of element 3 OR 10 is connected. The second inputs of the adders modulo two 11.1, 11.2, 11.3 are connected respectively, with the outputs of the backup elements 1, 2, 3. The three outputs of the adders modulo two 11.1, 11.2, 11.3 are the outputs of the analysis unit 11.

The clock generator 12 is designed to generate a clock sequence of pulses. As a clock generator, a generator described in the book [Integrated Circuits Reference] can be used. / Under the total. ed. B.V. Tarabrina. - M .: Energy, 1977, p.521].

The fault detection unit 13 generates electronic key control signals 4, 5, 6 and provides information to the state display unit 14. The fault detection unit 13 consists of three identical fault detection analyzers 13.1, 13.2 and 13.3 (Fig. 3).

The first, second and third outputs of the analysis unit 11 are connected respectively to the first, second and third inputs of the failure detection unit 13, the outputs of which are connected respectively to the first inputs of the failure detection analyzers 13.1, 13.2 and 13.3, to the second inputs of which the output of the clock generator 12 is connected. The outputs of the failure detection analyzers 13.1, 13.2 and 13.3 are respectively the first, second and third outputs of the failure detection unit 13 and generate control signals for electronic keys 4, 5, 6 and the status display unit I'm 14.

Failure analyzers 13.1, 13.2 and 13.3 generate electronic key control signals 4, 5, 6 and failure signals for the status display unit.

The fault detection analyzer 13.1 (Fig. 4) consists of a timer 13.1.1 and a pulse counter 13.1.2 with the combined first inputs. The clock input is connected to the counting inputs of the timer 13.1.1 and the pulse counter 13.1.2. The output of the timer 13.1.1 is connected to the input of the preset pulse counter 13.1.2, the output of which is the output of the fault detection analyzer 13.1.

The status display unit 14 (FIG. 1) is intended to indicate the status of each of the three backup elements 1, 2, 3 and contains three indicator lights. The first, second and third inputs of the state display unit 14 are connected to the first contacts of the light indicators, the second contacts of which are connected to the chassis bus. The light indicators used in the circuit are known: [V.N. Veniaminov, O.N. Lebedev, A.I. Miroshnichenko. Microcircuits and their application. - Radio and communications, 1989. - P.197, Fig. 7.1].

The elements 2I, 3OR included in the considered blocks are known: [Digital Integrated Circuits: Reference Book / P.P. Maltsev, N.S. Dolidze, M.I.Kritenko et al. - M.: Radio and Communications, 1994, p. 234 -237, pulse counters - on page 68]. Timers are also known: and are described, for example, in the book Digital Computer Reference: processors and memory. / B.N. Malinovsky, E.I. Bryukhovich, E.L. Denisenko and others. Ed. B.N. Malinovsky. - Kiev: Technique, 1979, pp. 27-35, pp. 176-180. Two adders modulo two are also known: [Microcircuits and their application / V.A. Batushev, V.I. Veniaminov, V. G. Kovalev and others - M .: Energy, 1978, pp. 178-180].

The claimed device operates as follows.

The information sequence of pulses from the input of the device is supplied to the inputs of three backup elements 1, 2, 3, where it is processed in accordance with the established function.

From the output of the backup elements 1, 2, 3, the converted information sequence simultaneously arrives at the information inputs of the three keys 4, 5, and 6. At the same time, the information sequence of signals from the outputs of the backup elements 1, 2, 3 enters the second, fourth, and sixth inputs of the analysis block, respectively 11, in which three resulting signals are generated that are fed to the three inputs of the fault detection unit 13.

The analysis unit (figure 2) is three identical adders modulo two 11.1, 11.2, 11.3. The information sequence of signals from the output of the 3 OR 10 element is supplied to their first inputs, and the information sequence of signals from the outputs of the backup elements 1, 2, 3 is fed to the second inputs. If these information sequences of signals coincide, the modulo two 11.1, 11.2, 11.3 at the outputs of the adders the signal is a logical "0", and if it does not match, the signal is a logical "1". Logical signal "1" indicates that the output of the corresponding backup element receives a distorted information sequence of signals due to the failure or failure of one of the backup elements 1, 2, 3. Signals from the three outputs of the analysis unit 11 (from the outputs of the three adders 11.1, 11.2 , 11.3) go to the inputs of the block failure detection 13.

The fault detection unit 13 generates control signals for the first 4, second 5, third 6 electronic keys and for the state display unit 14. Moreover, the control signals are generated only when any of the backup elements 1, 2, 3 is in a state of stable failure and its replacement is required.

Block failure detection 13 eliminates the response of the device to failures of the type "failure".

The principle of operation of the fault detection unit 13 can be considered by the example of the operation of the fault analyzer 13.1 (Fig. 4). When a logical “1” signal appears at the first output of analysis block 11, this signal is supplied to the second inputs of timer 13.1.1 and pulse counter 13.1.2. At the first inputs of the timer 13.1.1 and pulse counter 13.1.2, a clock signal from a clock generator 12 is supplied. A pulse counter 13.1.2 with a clock frequency f _T = const counts the number of pulses of a logical “1” signal for a set time T _U = const, which is set by the timer 13.1.1. If the number of pulses of the logical "1" signal does not exceed the established norm N _n = f _T · T _y <N _add , then at the end of the timer 13.1.1 the pulse counter 13.1.2 is reset to zero. This suggests that the failure of one of the backup elements 1, 2, 3 had a malfunctioning nature and its shutdown is not required. Otherwise, when before the end of the allotted time interval the capacity of the counter 13.1.2 is completely filled with N _n > N _nom , then a logical 1 signal will appear on its output. This signal is prohibitive for the electronic key 4.

When three backup elements 1, 2, 3 are working properly, a signal with a logic level of "0" from the outputs of the fault detection unit 13 is fed to the control inputs of the electronic keys 4, 5, 6, leaving the keys open, and also goes to the inputs of the status display unit 14. In this case, the light indication does not turn on, which indicates the operational state of all backup elements 1, 2, 3. In this case, identical information sequences from the outputs of three backup elements 1, 2, 3 pass through electronic keys 4, 5, 6, elements 2I 7 , 8, 9 and h Res 3or element 10 to output a three-element backup majority device.

When a failure occurs in one of the backup elements 1, 2, 3, for example, in the backup element 1, the information sequence of the signals from their outputs enters through electronic keys 4, 5, 6 and elements 2I 7, 8, 9 to the inputs of the element 3 OR 10. In elements 2I 7, 8, 9 and element 3 OR 10, the well-known majority function “two out of three” is realized [A. Chernyshev Fundamentals of design and reliability of electronic computing tools. - M .: Radio and communications, 1998. - S.350]. If the information does not coincide in one of the three backup elements, information from two operational reserve elements 2 and 3 passes to the output of the 3 OR 10 element, and information does not pass from the output of the backup element 1. From the output of element 3 OR 10, the signal enters the first inputs of the adders modulo two 11.1, 11.2, 11.3 analysis unit 11, and the second inputs of which receive an informational sequence of signals from the outputs of the backup elements 1, 2, 3. At the two outputs of the adders modulo two 11.2, 11.3 of analysis block 11 there will be a logical “0” signal, and at the output of the adder modulo two 11.1 will be a logical “1” signal due to a mismatch of signals at its input. From the outputs of the analysis unit 11, the signals are fed to the inputs of the failure detection unit 13 and, accordingly, to the failure analyzers 13.1, 13.2, 13.3. In the analyzer failures 13.1 at the end of a predetermined time interval timer 13.1.2 T _U capacity memory counter 13.1.2 completely filled and appears at its output a signal of logic "1", and outputs pulse counters 13.2.2 and 13.3.2 will signal logical "0". These signals control the operation of electronic keys 4, 5, 6, so the electronic key 4 will be closed, and the electronic keys 5, 6 will be open, and through them will pass an informational sequence of signals from the outputs of the backup elements 2, 3 through elements 2I 7, 8, 9 and element 3 OR 10 to the output of the device. Logical signal "1" from the output of the pulse counter 13.1.2 also arrives at the first input of the state display unit 14, in which the first indicator lights up, indicating the failure of the backup element 1. Having received a light indication, the operator must decide to replace the failed backup element 1 etc.

Thanks to the new set of essential features in the claimed three-element majority backup device, the ability to protect against failures of the backup elements, monitoring their technical condition is achieved, and if one of them fails, maintenance personnel can immediately begin to replace the failed backup element, which ensures higher reliability of the claimed device .

Claims (1)

A three-element majority backup device containing three backup elements, the combined inputs of which are the information input of the device, three elements 2I, the outputs of which are connected to different inputs of the ZILI element, and the first input of the first element 2I is connected to the first input of the third element 2I, the second input of which is connected to the first input of the second element 2I, the second input of which is connected to the second input of the first element 2I, characterized in that it includes an analysis unit, a failure determination unit s, a clock generator, a state display unit, first, second and third electronic keys, the outputs of the first, second and third backup elements being connected respectively to the information inputs of the first, second and third electronic keys and connected to the second, fourth and sixth inputs of the analysis unit , the three outputs of which are connected to the three inputs of the failure detection unit, the fourth input of which is connected to the output of the clock generator, and the three outputs of the failure detection unit are connected to the three inputs of as a state display and to the control inputs of three electronic keys, the output of the first key is connected to the first inputs of the first and third elements 2I, the output of the second key is connected to the second inputs of the first and second elements 2I, the output of the third electronic key is connected to the first input of the second element 2I and the second input of the third element 2I, and the output of the ZILI element is connected to the first, third and fifth inputs of the analysis unit and the output of the device.

Images