基于RapidIO总线的机载显示器通信系统设计与实现

本文采用Tsi578交换机构建四级RapidIO总线级联通信系统,设计了一种基于深度优先与交换机端口升序相结合的RapidIO总线自适应动态递归枚举方法,该方法能够有效地实现航空显示器通信主机冗余备份、通信主机热复位以及支持动态修改各级交换机路由信息,实现了航空显示器通信系统冗余备份功能,满足了航空显示器对系统通信可靠性和稳定性要求。     

双主机冗余显示系统的分析和设计

根据大屏幕行业应用的高可靠性要求,设计了双主机冗余视频显示方案.利用目前最新的PCI Exrpess总线技术,在桥芯片PEX8696的基础上搭建双主机通信通道,通过非透明桥的心跳寄存器传送主机的信息,从而实现了从机对主机工作监控的功能,达到高可靠性的要求.在系统启动初期,针对可能出现的情况,设计了系统状态转换机制,保证冗余系统的正常启动和运行.分析结果表明,该视频冗余的设计机制合理,系统中各状态转换安全,大大提高了系统运行的可靠性.     

冗余并机与双总线UPS系统的可靠性及经济性比较分析

首先介绍了信息产业部标准中UPS供电系统的可靠性指标与现网实际对UPS供电可靠性要求的偏离,然后从配置方式、可靠性、投资成本等方面比较了UPS冗余并机系统和冗余式双总线UPS供电系统,说明了采用冗余式双总线UPS供电系统的必要性,并排除了普遍存在的投资会成倍增加的担忧.     

双余度信号容错处理与故障注入方法

在航空、航天以及工业控制领域,为提高系统的可靠性及容错能力,会对关键信号采用冗余设计,而双余度信号则是经常使用的一种冗余策略。文中介绍了一种双余度处理技术,同时为减少系统开发成本,设计采用了软件的故障注入技术,并通过软件故障注入技术对该处理技术进行验证,验证结果表明,该处理技术是有效、可行的。     

光纤通道拓扑结构冗余方法研究

对于采用光纤通道(FC)互连的航空电子系统,在FC3种基本拓扑结构的基础上,分别给出了FC组合拓扑结构和由多个FC交换机组成的FC交换式网络的通信模型。针对航空电子系统的分布式网络模型,给出了基于任务的可靠性分析方法。根据航空电子系统容错功能和提高可靠性的需要,提出了FC的3种基本冗余结构:双环结构、双交换机结构和交换机仲裁环冗余结构,专门针对FC交换式网络提出了两种冗余结构:基本路径冗余和全网络冗余,专门针对FC组合拓扑结构提出了桥端口冗余结构;通过基于任务的可靠性分析,对各种容错拓扑结构进行了比较。对FC各种冗余拓扑结构的研究对于航空电子系统设计阶段的容错设计和冗余结构设计都将起到一定作用。     

基于FPGA的冗余CAN总线通信节点设计

针对航天领域对通信系统可靠性要求高的特点,提出了基于FPGA、SJA1000和PCA82C250的冗余CAN总线通信节点设计。介绍了CAN总线冗余方式的选择原则,详细给出了采用控制器级冗余方式的通信节点硬件设计和FPGA控制程序设计,重点对SJA1000初始化流程、收发报文处理过程、SJA1000错误处理过程和链路热备份条件下的数据选择策略进行了说明。通过FPGA程序仿真,验证了收发报文时SJA1000的控制时序,进行了高低温条件下的节点传输性能测试和冗余数据处理功能测试。测试结果证明,节点工作稳定性高、实时性强,适用于航天和航空等高可靠性要求的领域。     

冗余并联UPS系统改为双单机系统方案的实施

随着石油化工行业自动化水平的不断提高,UPS在易燃易爆的石油化工行业的应用越来越广泛,UPS的运行可靠性显得尤为重要,从UPS的单机运行发展为主从热备串联运行、冗余并联运行模式,经过实践的检验,采用UPS的双单机运行方式符合仪表电源的可靠性要求,文吕从实例出发。介绍冗余并联UPS系统改为双单机系统的可行性及实施情况。     

基于WDM的精确定时器及其在冗余技术中的应用

现代军用电子设备和某些控制系统对设备的可靠性要求越来越高。针对此情况利用设备冗余原理,提出一种基于WDM的精确定时器实现设备冗余的方法。利用此方法设计了双冗余CAN总线板卡及其在Windows XP系统下的驱动程序,给出了部分驱动实现细节和相关流程。结果表明该方法可成功实现双CAN接口卡在总线故障情况下的冗余切换,提高了设备可靠性。     

双冗余网卡的设计

网络通信是现代系统通信的主要方式，而网卡是网络的核心部件，如果网卡出现故障，整个网络系统将处于瘫痪的状态。为了提高通讯网络的可靠性，现代网络系统引入冗余网络构架，其中双冗余网卡是该系统的核心。本文介绍了一种双冗余网卡的组成及工作原理，同时介绍了网卡冗余的实现过程。     

一种VxWorks环境下双冗余网卡的设计与应用

网络通信是现代通信系统领域的主要方式。网卡作为网络通信系统的关键组成部分,一旦发生故障,将导致整个网络通信系统的全部崩溃而不能工作。实现双冗余式网络构架是提高现代网络通信系统的可靠性和稳定性的一种重要方式,而双冗余网卡则是其中核心。文章简要介绍了一种双冗余网卡的实现机理、技术指标、结构特征、硬件组成以及软件描述。     

四余度容错管理算法的设计与实现

利用余度技术可以很好地提高控制系统的任务可靠性。余度设计的关键技术就是余度管理策略和方法,系统的容错能力主要是通过余度管理来实现的。文章详细描述了四余度容错计算机实现余度管理算法的设计思路。采用这样的设计使得系统结构紧凑,在保证实时性的同时提高了系统任务可靠性和安全性。     

飞行控制计算机余度管理策略研究

为满足系统可靠性指标的要求,采用了余度技术,研制了双通道余度飞行控制计算机.在该研究对象的基础上,进行了一种硬件冗余和软件管理的余度管理策略的研究和设计,提出了多余度信号监控表决算法、基于CAN总线的故障检测机制和系统重构与恢复的方法.故障注入实验表明,样例余度飞行控制计算机在遇到故障时能够实时检测出故障,诊断故障类型,并对故障进行处理,完成系统重构,提高了飞行控制系统的任务可靠性,保证无人机的飞行安全.     

Modeling and maximizing burn-in effectiveness

System burn-in can get rid of many residual defects left from component and subsystem burn-in since incompatibility exists not only among components but also among different subsystems and at the system level. Even if system, subsystem, and component burn-in are performed, the system reliability often does not achieve the requirement. In this case, redundancy is a good way to increase system reliability when improving component reliability is expensive. This paper proposes a nonlinear model to: estimate the optimal burn-in times for all levels, and determine the optimal amount of redundancy for each subsystem. For illustration, a bridge system configuration is considered; however, the model can be easily applied to other system configurations. Since there are few studies on system, subsystem, and component incompatibility, reasonable values are assigned for the compatibility factors at each level     

Computer Redundancy: Design, Performance, and Future

The literature on the theoretical aspects of redundancy in digital computers is extensive providing a sound basis for highly reliable design. This paper describes the design problems, the reliability prediction, the field performance, and the future application of redundancy techniques to digital systems. Triple modular redundancy (TMR) is described using the logic of the Launch Vehicle Digital Computer utilized in the uprated Saturn I and the Saturn V vehicles. The self-correcting memory of this computer is described along with the associated design problems and the design verification based on production experience. Consideration is given to system design problems involved with TMR logic. A Monte Carlo technique for predicting computer reliability is considered in a design engineering rather than programmer approach. The unique means of indicating single-channel malfunctions, while continuing to mask these single-channel malfunctions with respect to system operation, is introduced. The result of field operation are given and compared with predicted reliability. Quad redundancy at the component part level is described using the circuitry of the primary processor and data storage (PPDS) for NASA's Orbital Astronomical Observatory. The process of arriving at a quad redundancy implementation is considered in light of the constraints of cost, schedule, and an initial reliability requirement of 95 percent for a year's operation in space. The circuit and system design problems associated with quad redundancy such as impedance and part parameter variations, power consumption, fan out limitations, and testing restrictions are indicated. The results of field operation are given and compared with predicted reliability.     

气球控制安全中的双机冗余设计

分析现代战争的特点和气球载雷达的功能,指出气球载雷达具有长时间浮空的特性。为了满足气球控制系统稳定可靠,能够长时间滞空工作的要求,提出了一种采用双计算机并行工作,热备份冗余切换的双机容错系统的设计方案。通过实际项目验证,气球可以数月系留工作,满足气球载雷达球控系统滞空工作的高可靠性要求。     

霍尼韦尔Master Logic-200冗余PLC在隧道监控系统中的应用

为了提高隧道监控系统的安全可靠性,提出了一种基于霍尼韦尔Master Logic-200PLC的硬件冗余控制设计方案。本文介绍了PLC冗余控制系统的原理和结构,详细分析了应用中的硬件组态和系统构成。本系统已经在国家高速公路十堰至天水段隧道监控中心成功运行。     

相控阵雷达数据处理计算机双机冗余的设计方法

简要阐述了相控阵雷达中数据处理计算机双机冗余的特点，从雷达系统可靠性的角度对双机冗余进行了总体设计。结合软硬件实现数据处理计算机的双机冗余设计，给出了故障监测和系统切换的硬件与软件框图，分析了双机容错结构系统重构策略与过程。最后略述数据处理计算机双机冗余设计在相控阵雷达控制系统中的应用情况。     

The effect of statically and dynamically replicated components onsystem reliability

The reliability of general systems using dynamic and static redundancy schemes is derived, and communication protocols are considered as a representative example. The system reliability for three broadcast protocols using various redundancy-allocation policies is studied. The analytic and simulation results show that, in some cases, static redundancy yields a more reliable system than dynamic redundancy. This is essential for distributed system applications. In some cases, the failure detection time is substantial, so that the hardware reliability and hence the system reliability are adversely affected when using dynamic redundancy. This can be a critical factor for distributed system applications, because a large overhead of communication can be required for error detection. In these cases, unreliable protocols can provide better system reliability than reliable protocols, especially when the communication network is highly reliable and when the machine failure rate is relatively large. Since unreliable protocols generate less load and less resource contention, they are preferable in such cases. The reliability should be analyzed to determine the optimal balance between reliable and unreliable protocols. Static redundancy can be more reliable than dynamic redundancy if the failure-detection time is large