Dual-core dual-lockstep two-out-of-two architecture and its security platform

Abstract

The invention relates to a double-core double-lock-step two multiply two structure and a safety platform thereof. The structure comprises a main system and a standby system with the same structure, wherein each of the main system and the standby system adopts a double-core double-lock-step two multiply two structure. The double-core double-lock-step two multiply two structure comprises three processing units, specifically, a first processing unit, a second processing unit and a third processing unit. According to the structure, the double-lock step is realized on the basis of the two double-core processing units, a safe structure which is voted by two multiply two is realized through the third processing unit, the safety platform of the two multiply two structure is realized, and the platform meets the requirements of high safety and high reliability in the safety key field.

Description

technical field [0001] The invention belongs to the field of safety-critical related technologies, and in particular relates to a dual-core, dual-lockstep, two-out-of-two architecture and a security platform based on the architecture. Background technique [0002] The safety system based on the two by two architecture has been widely used in safety-critical fields (such as rail transit, nuclear power, etc., and its safety and reliability have been fully certified. The existing general two by two architecture consists of four hardware structures and It is composed of processing units with exactly the same functions, and every two processing units form a single-system two-out-of-two system (refer to figure 2 ), the structure and function of the two systems are exactly the same, and there is a two-by-two redundancy relationship between the two systems. The two processing units in a single system independently perform software data comparisons between the calculation results of...

AI Technical Summary

Problems solved by technology

[0005] Although the improved two-out-of-two architecture realizes the monitoring of two processing units by adding a monitoring unit, it also has the function of cutting off the output of the two-out-of-two comparison unit when the monitoring data is inconsistent, but when the monitoring unit has a specific single point of failure , the monitoring unit cannot guarantee the monitoring of the two processing units, and the improved two-out-of-two architecture is almost downgraded to a general-purpose two-out-of-two security architecture

Therefore, the improved two-for-two architecture does not really solve the problems in the general two-for-two security architecture.

Images