基于数据总线的故障容错体系结构的仿真研究  

Simulation Study on Data Bus Based Fault-Tolerant Architecture

作　　者：高亚楠[1] 贾英民[2] 蔺玥 

机构地区：[1]北京控制工程研究所,北京100190 [2]北京航空航天大学第七研究室,北京100191

出　　处：《计算机仿真》2014年第5期17-21,共5页Computer Simulation

基　　金：国家自然科学基金(F0301);国家973计划项目(2012CB821200-G)

摘　　要：针对特殊任务航天器的高可靠性和高安全性要求,提出了一种并行通道(parallel channel)配合计算机交联(Computer Cross Talk)的导航制导与控制分系统(GNC分系统)体系结构。上述体系结构使用1553B数据总线和TTP(Time Triggered Protocol)数据总线,配合拜占庭交联模式的GNC控制器,通过数据交换和数据比对满足系统故障检测和故障容错的要求。使用SCADE系统设计工具软件对上述系统进行正常情况和故障情况建模,并对系统的故障容错特性进行形式化验证,验证结果表明,系统可以容忍任意一重故障且不损失任何性能,并具备实时现场恢复的能力。For high reliability and high security requirements of special mission spacecraft, a systematic architecture of parallel channel with computer cross talk was proposed. This architecture is based on MIL-1553B data bus and TTP data bus, its time triggered protocol and hardware redundancy meet the requirement of safety-critical system. By the exchange and comparison of the system critical data, the architecture can tolerate at least one Byzantine fault. Simulation and verification of the system have been carried out by SCADE toolset. The result shows that the system architecture fulfills the fault-tolerance requirements of safety-critical system, and the system-level field data recovery is also possible on this architecture.

关 键 词：总线 容错 体系结构 仿真 形式化 

分 类 号：V448.253[航空宇航科学与技术—飞行器设计]