一种星载嵌入式软件容错启动系统设计  

Design for fault-tolerant boot loading system for on-board embedded software

作　　者：王钊[1] 李勇 崔维鑫[1] 雒莎 WANG Zhao;LI Yong;CUI Wei-xin;LUO Sha(Shanghai Institute of Technical Physics,Chinese Academy of Sciences,Shanghai 200083,China)

机构地区：[1]中国科学院上海技术物理研究所,上海200083

出　　处：《电子设计工程》2019年第8期1-5,共5页Electronic Design Engineering

基　　金：国家重大科学仪器设备开发专项(2013YQ47076706)

摘　　要：为提高空间复杂电离环境下星载嵌入式系统的可靠性,提出一种容错启动系统设计方法。该启动方法利用SPARC V8架构处理器(AT697)的异常处理陷阱机制,将EDAC和三模冗余两种方法结合起来,确保星载嵌入式系统在空间复杂环境下实现容错启动和运行。该系统将BOOT(引导)区域和主程序区域备份三份存储于EEPROM中。在启动阶段,利用AT697的EDAC功能对BOOT区域进行检查和纠错,当遇一位翻转时直接纠正;当遇到多位翻转时记录出错地址并进入特定陷阱,在陷阱通过三取二仅对翻转位进行纠正,不必对整个代码进行三取二对比,从而提高系统的启动速度和可靠性。该设计适用于信息存储系统,可为星载嵌入式容错启动设计提供参考。A new design for fault-tolerant boot loading system in which fault module on space borne embedded software can be repaired without affecting the system’s normal operation.The method makes use of the exception handling mechanism of SPARC V8 architecture processor(at697)with EDAC and TMR to ensure that the space borne embedded system is fault-tolerant and run in the complex space environment.Three copies of boot area and main program are stored in EEPROM firstly.When system booting,the BOOT area is checked and corrected by EDAC function of AT697,and is corrected directly when 1bit turns over.When multiple bits are over turned,record the error address and enter a specific trap,and take two only to correct the translocation in the trap by three.It is not necessary to compare the whole code by three and two so that improving the booting speed and reliability of the system.The design is suitable for information storage system,and can provide reference for space borne embedded fault tolerant boot design.

关 键 词：SPARC V8 AT697 三模冗余 容错启动 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论]