摘要:
The invention relates to a method for allocating control in a system-of-systems, in particular a dynamic system-of-systems consisting of a physical system PS, an autonomous control system CS, a human operator HO, a monitor component MK and an actuator controller AST, or comprising a physical system PS, an autonomous control system CS, a human operator HO, a monitor component MK and an actuator controller AST, wherein the CS uses a sensor system assigned thereto to cyclically monitor surroundings and/or the physical system itself and creates an internal model of the surroundings and/or the PS on the basis of this monitoring and performs an analysis of this model in order to determine control values for the AST and a criticality index KI of the scenario in a cycle, in particular in the current cycle, and wherein the MK cyclically monitors the HO and/or the actions thereof, in particular the current actions thereof, in order to determine an engagement index EI of the HO in a cycle, in particular in the current cycle, on the basis of this monitoring, and wherein the control over the PS is allocated to the HO when EI>KI.
摘要:
In a network based on IEEE 1588, comprising a plurality of nodes (201, 501) and a plurality of connections where each connection connects at least two nodes to allow communication between nodes including the exchange of messages according to a network protocol, the synchronization of IEEE 1588 is improved by allowing multiple grandmaster clocks (701) to operate simultaneously in the system. Thus, the re-election protocol of IEEE 1588 is made obsolete. For this, a multitude of nodes form a subsystem implementing a high-availability grand master clock (301) according to the IEEE 1588 Standard, wherein the subsystem is configured to tolerate the failure of at least one of said nodes forming said subsystem. Bi-directional communication link (401) are configured for physically connecting a IEEE 1588 Master clocks (201) and/or IEEE 1588 Slave clocks (201) to the subsystem implementing a high-availability grand master clock (301).
摘要:
The invention relates to a method for the reliable switching of synchronisation messages in a distributed computer system consisting of a number of node computers, wherein the management of a transparent clock conforming to IEEE Standard 1588 is supported, wherein a switching unit consists of four separate FCUs, specifically an input system EIN, two independent switching systems VER1 and VER2, and an output system AUS, and wherein a message arriving at EIN from a transmitting node computer is forwarded immediately in unmodified form from EIN directly to the two independent switching systems VER1 and VER2, and wherein VER1 provides the event of the arrival of the message with a timestamp, analyses the message and switches said message to (an) output port(s) associated with an address field of the message, and wherein VER1 opens the message and modifies a TIC field within the message in order to determine the delay period of the message in VER1, and wherein VER1 closes the message again by re-calculating a CRC field of the modified message and forwarding the closed message to AUS, and wherein VER2 provides the event of the arrival of the message with a timestamp, analyses the message and switches said message to the output port(s) associated with the address field of the message, and wherein VER2 opens the message and modifies the TIC field within the message in order to determine the delay period of the message in VER2, and wherein VER2 closes the message again by re-calculating the CRC field of the modified message and forwarding the closed message to AUS, and wherein AUS checks whether the content of the message delivered from VER1 matches the content of the message delivered from VER2, and wherein AUS checks whether the interval between the moment of receipt of the message delivered from VER1 and the moment of receipt of the message delivered from VER2 is smaller than a first interval determined a priori, referred to hereinafter as the interval_1, and whether the absolute value of the difference of the delay values stored in the two TIC fields is smaller than a second interval known a priori, referred to hereinafter as the interval_2, and wherein, in the case that one of these checks is negative, AUS interrupts the transmission of the message that is outbound via the addressed output ports or changes the outbound message in such a way that each message receiver identifies the incoming message as faulty.
摘要:
The invention relates to a method for monitoring, at the correct time, TTEthernet (TT) messages communicated by a TTEthernet switch (TTE switch) in a distributed real-time computer system. According to the invention, the TTE switch has a global time having precision P and accuracy A, and the TTE switch has a plurality of communication channels and one or more monitoring channels, and the TTE switch contains a selection data structure that specifies which TT message classes are to be monitored, and a copy of a TT message which belongs to a TT message class selected for monitoring is formed in the TTE switch and is transmitted by the TTE switch via a monitoring channel to a monitoring node, and the TTE switch subsequently autonomously transmits an ET message containing an identifier and the exact transmission time of the monitored TT message via a monitoring channel to a monitoring node.
摘要:
In a network based on IEEE 1588, comprising a plurality of nodes (201, 501) and a plurality of connections where each connection connects at least two nodes to allow communication between nodes including the exchange of messages according to a network protocol, the synchronization of IEEE 1588 is improved by allowing multiple grandmaster clocks (701) to operate simultaneously in the system. Thus, the re-election protocol of IEEE 1588 is made obsolete. For this, a multitude of nodes form a subsystem implementing a high-availability grand master clock (301) according to the IEEE 1588 Standard, wherein the subsystem is configured to tolerate the failure of at least one of said nodes forming said subsystem. Bi-directional communication link (401) are configured for physically connecting a IEEE 1588 Master clocks (201) and/or IEEE 1588 Slave clocks (201) to the subsystem implementing a high-availability grand master clock (301).
摘要:
The invention relates to a method for fault identification in a System-on-Chip (SoC) consisting of a number of IP cores, wherein each IP core is a fault containment unit, and where the IP cores communicate with one another by means of messages via a Network-on-Chip, and wherein an excellent IP core provides a TRM (Trusted Resource Monitor), wherein a faulty control message which is sent from one non-privileged IP core to another non-privileged IP core is identified and projected by an (independent) fault container unit, as a result of which this faulty control message cannot cause any failure of the message receiver.
摘要:
The goal of the present invention is to improve the useful data efficiency and reliability in the use of commercially available ETHERNET controllers, in a distributed real time computer system, by a number of node computers communicating via one or more communication channels by means of TT ETHERNET messages. To achieve this goal, a distinction is made between the node computer send time (KNSZPKT) and the network send time (NWSZPKT) of a message. The KNSZPKT must wait for the NWSZPKT, so that under all circumstances, the start of the message has arrived in the TT star coupler at the NWSZPKT, interpreted by the clock in the TT star coupler. The TT star coupler is modified, so that a message arriving from a node computer is delayed in an intelligent port of the TT star coupler until the NWSZPKT can send it precisely at the NWSZPKT into the TT network.
摘要:
A coupling circuit for a bus subscriber on a bus line of a field bus with DC-voltage-free and differential EIA-485/EIA-422-compliant signal transmission according to a TTP protocol, in which the two inputs/outputs of a transmission/reception component of the bus subscriber are connected to a first winding of a signal transformer, and the two poles of the bus line are connected to a second winding of the signal transformer, and the first winding has a center tap, wherein the center tap is connected to the local reference-earth potential of the bus subscriber via a capacitor, the capacitance of which is at least 100 times the parasitic capacitance of the transformer.
摘要:
The invention concerns a method for transmitting messages in a computer network, wherein the computer network comprises a first set of computing nodes (101-105), which computing nodes (101-105) are connected to each other by means of at least one star coupler (201, 202) and/or at least one multi-hop network (1000), wherein each of the computing nodes of the first set of computing nodes (101-105) is connected by means of at least one communication line (110) to the at least one star coupler (201, 201) or the at least one multi-hop network (1000), and wherein the computing nodes (101-105) exchange Ethernet messages with each other and the exchange of at least some of the Ethernet messages of the computing nodes (101-105) occurs in time controlled manner. It is provided that a) the computer network comprises a second set of computing nodes (106-108), which are connected to each other by a bus (210), and wherein the bus (210) is connected to the at least one star coupler (201) and/or the at least one multi-hop network (1000), and wherein b) the second set of computing nodes (106-108) exchange Ethernet messages with each other and the exchange of at least some of the Ethernet messages of the computing nodes (106-108) occurs in time controlled manner, and wherein preferably c) the second set of computing nodes (106-108) exchange Ethernet messages with the first set of computing nodes (101-105) and the exchange of at least some of the Ethernet messages of the computing nodes (101-108) occurs in time controlled manner.
摘要:
A method for executing a comprehensive real-time computer application including an application software including a description of functions on a distributed real-time computer system including sensors, actuators, computing nodes, and distributor units having access to a global time. The application software including a number of real-time software components (RTSWCs). When executed, the RTSWCs exchange information by time-triggered messages. Each RTSWC is allocated a time-triggered virtual machine TTVM, wherein, during a service interval SI, an operating system running on a computing node provides a TTVM realized on the computing node with protected access to the network resources and memory resources of the computing node assigned to the TTVM, and wherein, during the SI, a defined computing power for processing the RTSWCs running in the TTVM is allocated to the TTVM by the operating system of the computing node such that the RTSWCs provide a result before the end of the SI.