Two-out-of-three secure data processing and arbitration method combined with hardware and software and device thereof

Abstract

The present invention relates to a two-out-of-three secure data processing and arbitration method combined with hardware and software and its device. The method includes two out-of-three operations, which are two out-of-three operations on the system state of the data processing module and two out-of-three operations on the output module. Two out of three operations on the output data, the two out of three operations on the system state are completed by the software arbitration module, and the two out of three operations on the output data are completed by the hardware arbitration module; the device includes a first channel, The second channel, the third channel and the hardware arbitration module, the three channels respectively include corresponding main processors and hardware comparators, the three main processors are connected in pairs, and are respectively connected to the hardware comparators of their corresponding channels, the three hardware The comparators are respectively connected with the hardware arbitration module. Compared with the prior art, the invention has the advantages of high efficiency, reliability and the like.

Description

technical field [0001] The invention relates to a two-out-of-three safe computer system, in particular to a two-out-of-three safe data processing and arbitration method and device thereof combining software and hardware. Background technique [0002] The three out of two safety computer system used in the rail transit industry has three calculation channels, each of which performs logic operations on the received data, and then outputs the results of logic operations to external devices. The output data of the three channels needs to be kept at all times Consistency, in order to maintain the consistency of the output data of the three channels, it is necessary to conduct a majority vote on the output data of the three channels, and if the channel with inconsistent data is found, the channel will be removed from the system. [0003] In the current two-out-of-three security computer system, in order to ensure the consistency of the output data of the three channels, some arbit...

AI Technical Summary

Problems solved by technology

[0004] 1) Some two-out-of-three systems adopt a full software arbitration method, which completely depends on the computing power of the computer, the real-time performance of the arbitration is not good enough, and the accuracy of the arbitration result is not high

[0005] 2) All-software arbitration has particularly high security requirements for software design, and the processing of arbitration results cannot fully meet the security requirements of two-out-of-three safety computers, especially in systems with a safety integrity level of SIL4;

[0006] 3) Some two-out-of-three systems adopt an all-hardware arbitration method, which requires the design of complex arbitration logic circuits, which is difficult to implement and increases development costs;

[0007] 4) The all-hardware arbitration method has relatively high security requirements for the arbiter, and the arbiter is prone to single-point failure, which makes the arbiter invalid

[0008] 5) In many three-out-of-two systems, the hardware or software design of the three channels are the same, which cannot effectively avoid the common mode failure between each channel

Images