REDUNDANCY CONTROL SYSTEM AND METHOD OF TRANSMITTING COMPUTATIONAL DATA THEREOF

• US 20120047406A1
• Filed: 08/10/2011
• Published: 02/23/2012
• Est. Priority Date: 08/19/2010
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: NAKATANI, Hiroshi, Toko, Makoto, Okabe, Motohiko, Ohnishi, Naoya
• Granted Patent: US 8,762,788 B2
• Time in Patent Office: Days
• US Class Current: 714/49
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G05B 2219/24187 Redundant processors run identical programs
• CPC Class Codes: G05B 9/03 with multiple-channel loop, i.e. redundant control systems

Abstract

A method of transmitting computational data comprising: a step of generating first computational data and generating first generated data using a first generation algorithm for error detection on return; a step of generating second computational data and generating second generated data using a second generation algorithm for error detection; a step of mutually comparing the first/second computational data; a step of transmitting transmission data including coincident computational data and first/second generated data; in the receiving device, a step of generating computational data and third/fourth generated data from preset first/second generation algorithms; and a step of comparing the first/third generated data and the first/third generated data, and detecting error in the received computational data.

Claims

1. A redundancy control system having a redundant processing device of a comparison redundancy type that compares first computational data of a first processing device and second computational data of a second processing device that receive same control data and that execute a same computational processing in parallel and that returns coincident computational data, said redundancy control system comprising:

(1) a control device wherein (i) said first processing device generates said first computational data in accordance with said control data and generates first generated data using a first preset generation algorithm for error detection on response in respect of said first computational data;

said second processing device generates said second computational data in accordance with said control data and generates second generated data using a second preset generation algorithm for error detection on response in respect of said second computational data, and, in addition,

said first processing device comprises;

a redundant processing device that compares said first computational data and said second computational data and outputs coincident said computational data and said first generated data/second generated data; and

(ii) a first transmission device that receives transmission data including said computational data and said first generated data/second generated data and sends these from said redundant processing device to a transmission source of said control data; and

(2) a receiving device that comprises

a second transmission device that transmits said control data to said first transmission device and that receives said transmission data from said first transmission device; and

a third processing device that respectively generates third generated data/fourth generated data from received said computational data and said preset first generation algorithm/said second generation algorithm and identifies the presence of an error of said received computational data by comparison of received said first generated data and said third generated data and received said second generated data and said fourth generated data and a presence of failure of said first processing device or said second processing device,

wherein a presence of error in received computational data is identified using a generation algorithm of each processing device that generates computational data.

2. The redundancy control system according to claim 1, wherein, in said redundant processing device,

said first processing device comprises:

(a) a first transmission data management section that receives said control data from said first transmission device, sends said control data and said first computational data to said first data switching section and mutually switches said first computational data and said second computational data, to confirm coincidence of a mutual comparison result, and returns transmission data including coincident said computational data to said first transmission device;

(b) a first computational data creation section that receives said control data from said first transmission data management section, and creates and returns said first computational data after executing a preset computational program;

(c) a first generated data creation section that receives said first computational data and generates and returns said first generated data for error detection on return of said first computational data, using a preset said first generation algorithm; and

(d) a first data switching section that transmits said first computational data to said second processing device and that sends said transmission data including said second computational data delivered from said second processing device and said comparison result to said first transmission data management section, and

said second processing device comprises;

(d)′

a second data switching section that receives said control data and said first computational data from said first processing device and sends said transmission data including the comparison result of said first computational data and said second computational data to said first data switching section;

(a)′

a second transmission data management section that receives said control data from said second data switching section, creates said transmission data, and returns said transmission data to said first processing device through said first data switching section;

(b)′

a second computational data creation section that receives said control data from said second transmission data management section, executes preset said computational program to create said second computational data, which said second computational data then returns; and

(c)′

a second generated data creation section that receives said second computational data from said second transmission data management section and generates and returns, using preset said second generation algorithm, said second generated data for error detection, on return of said second computational data.

3. The redundancy control system according to claim 1, wherein, in said redundant processing device:

said first processing device additionally creates first signature data in respect of said control data by encryption processing using a first signature algorithm of a preset common key cryptosystem;

said second processing device additionally creates second signature data in respect of said control data by encryption processing using a second signature algorithm of a preset common key cryptosystem;

said first processing device additionally returns to said first transmission device said transmission data including said first signature data/second signature data; and

said first transmission device additionally receives from said redundant processing device said transmission data including said computational data, said first generated data/second generated data and said first signature data/second signature data and sends these data to a transmission source of said control data; and

said third processing device, additionally, is arranged to perform decoding processing on received respective said first signature data and said second signature data, using the preset said first signature algorithm and said second signature algorithm, so as thereby to authenticate and identify received said first signature data as having been generated by said first processing device and to authenticate and identify the received said second signature data as having been generated by said second processing device.

4. The redundancy control system according to claim 3, wherein, in said redundant processing device,

said first processing device comprises:

(a) a first transmission data management section that receives said control data from said first transmission device, sends said control data and said first computational data to a first data switching section, and mutually switches said first computational data and said second computational data, to confirm coincidence of a mutual comparison result, and creates said transmission data including said coincident computational data, and returns said transmission data including said coincident computational data to said first transmission device;

(b) a first computational data creation section that receives said control data from said first transmission data management section and creates and returns said first computational data, after executing a preset computational program;

(c) a first generated data creation section that receives said first computational data and that generates and returns said first generated data for error detection on transmission of said first computational data, using preset said first generation algorithm;

(d) a first data switching section that transmits said first computational data to said second processing device and that sends said transmission data, including said second computational data and said comparison result delivered from said second processing device to said first transmission data management section; and

(e) in addition, a first signature data creation section that creates first signature data by encryption processing using a first signature algorithm of a preset common key cryptosystem in respect of said control data delivered from said first transmission data management section, and sends said first signature data to said first transmission data management section; and

said second processing device comprises;

(d)′

a second data switching section that receives said control data and said first computational data from said first processing device and sends to said first data switching section said transmission data including a comparison result of said first computational data and said second computational data;

(a)′

a second transmission data management section that receives said control data from said second data switching section, creates said transmission data and returns said transmission data to said first processing device, through said first data switching section;

(b)′

a second computational data creation section that receives said control data from said second transmission data management section and creates and returns said second computational data, after executing preset said computational program;

(c)′

a second generated data creation section that receives said second computational data from said transmission data management section and that generates and returns said second generated data for error detection on return of said second computational data, using preset said second generation algorithm; and

(e)′

in addition, a second signature data creation section that creates second signature data by encryption processing using a second signature algorithm of a preset common key cryptosystem in respect of said control data delivered from said second transmission data management section, and sends said second signature data to said second transmission data management section.

5. A redundancy control system having a redundant processing device of a comparison redundancy type that compares first computational data of a first processing device and second computational data of a second processing device that receive same control data and that execute a same computational processing in parallel and that returns coincident computational data, said redundancy control system comprising:

(1) a control device wherein (i) said first processing device generates said first computational data in accordance with said control data and generates first generated data using a first generation algorithm for error detection on response in respect of said first computational data;

said second processing device generates said second computational data in accordance with said control data and generates second generated data using a second generation algorithm for error detection on response in respect of said second computational data, and, in addition,

said first processing device comprises;

a redundant processing device that compares said first computational data and said second computational data and, if coincidence is found, outputs said first computational data/second computational data and said first generated data/second generated data; and

(ii) a first transmission device that receives transmission data including said first computational data/second computational data and said first generated data/second generated data and sends these data from said redundant processing device to a transmission source of said control data; and

(2) a receiving device that comprises;

a second transmission device that transmits said control data to said first transmission device and that receives said transmission data from said first transmission device; and

a third processing device that respectively generates fifth generated data from received said first computational data and said preset first generation algorithm and generates sixth generated data from said second computational data and said preset second generation algorithm and detects a presence of an error of said received first computational data and said second computational data by comparison of said first generated data and said fifth generated data with said second generated data and said sixth generated data and detects a presence of failure by comparison of received first computational data and second computational data;

wherein a respective presence of error in received first computational data/second computational data is identified by performing comparison of said first computational data and second computational data in parallel at a sending end and a receiving end.

6. A method of transmission of computational data in a redundancy control system having a control device that compares first computational data of a first processing device and second computational data of a second processing device that receive same control data and execute a same computational processing in parallel, and that returns coincident computational data, and a receiving device that receives said computational data, said method of transmission of computational data comprising:

(1) in a control device;

(i) in said first processing device, generating said first computational data in accordance with said control data and generating first generated data using a first preset generation algorithm for error detection on response in respect of said first computational data;

(ii) in said second processing device, generating said second computational data in accordance with said control data and generating second generated data using a second preset generation algorithm for error detection on response in respect of said second computational data;

(iii) in said first processing device and said second processing device, mutually comparing said first computational data and said second computational data and mutually switching a comparison result;

(iv) in said first processing device, confirming coincidence of a comparison result of said first computational data and said second computational data and transmitting transmission data including coincident said computational data, said first generated data and said second generated data;

(2) (i) in said receiving device, receiving said transmission data, and generating third generated data and fourth generated data from said computational data and preset said first generation algorithm and said second generation algorithm;

(ii) comparing said first generated data and said third generated data and said first generated data and said third generated data, to detect error in received said computational data; and

wherein a presence of an error of received computational data is identified using a generation algorithm for each processing device that generates computational data.

7. A method of transmission of computational data in a redundancy control system having a control device that compares first computational data of a first processing device and second computational data of a second processing device that receive same control data and execute a same computational processing in parallel, and that returns coincident computational data, and a receiving device that receives said computational data, said method of transmission of computational data comprising:

(1) in said control device,

(i) in said first processing device, generating said first computational data in accordance with said control data and generating first generated data using a first preset generation algorithm for error detection on response in respect of said first computational data;

(ii) in addition, generating first signature data in respect of said first computational data, using a preset first signature algorithm;

(iii) in said second processing device, generating said second computational data in accordance with said control data and generating second generated data using a second preset generation algorithm for error detection on response in respect of said second computational data;

(iv) in addition, generating second signature data in respect of said second computational data, using a preset second signature algorithm;

(v) in said first processing device and said second processing device, mutually comparing said first computational data and said second computational data, mutually switching a comparison result, and sending said second generated data to said first processing device;

(vi) in said first processing device, confirming coincidence of said comparison result of said first computational data and said second computational data and transmitting transmission data including said computational data, said first generated data, said second generated data and said first signature data/said second signature data;

(2) (i) in said receiving device, receiving said transmission data, and generating third generated data and fourth generated data from said computational data and preset said first generation algorithm and said second generation algorithm;

(ii) comparing said first generated data and said third generated data and said second generated data and said fourth generated data, to detect error in received said computational data;

(iii) generating respectively third signature data and fourth signature data, using preset said first signature algorithm and said second signature algorithm, from said computational data; and

(iv) independently comparing said first signature data and said third signature data, and said second signature data and said fourth signature data, to perform authentication and identification as to whether or not received computational data is data from preset processing device,

wherein error identification of said received computational data and authentication and identification of a device that generated said computational data are thereby performed.

8. A method of transmission of computational data in a redundancy control system having a control device that compares first computational data of a first processing device and second computational data of a second processing device that receive same control data and execute a same computational processing in parallel, and that returns coincident computational data, and a receiving device that receives said computational data, said method of transmission of computational data comprising:

(1) in said control device,

(i) in said first processing device, generating said first computational data in accordance with said control data and generating first generated data using a first preset generation algorithm for error detection on response in respect of said first computational data;

(ii) in said second processing device, generating said second computational data in accordance with said control data and generating second generated data using a second preset generation algorithm for error detection on response in respect of said second computational data;

(iii) in said first processing device and said second processing device, mutually comparing said first computational data and said second computational data and mutually switching a comparison result;

(iv) in said first processing device, confirming coincidence of said comparison result of said first computational data and said second computational data and transmitting transmission data including said first computational data and said second computational data, said first generated data and said second generated data;

(2) (i) in said receiving device, receiving said transmission data, and generating fifth generated data from said first computational data and preset said first generation algorithm;

(ii) receiving said transmission data, and generating sixth generated data from said second computational data and preset said second generation algorithm;

(iii) comparing said first generated data and said fifth generated data and said second generated data and said sixth generated data, to detect error in received said first computational data and said second computational data and comparing received said first computational data and said second computational data,

wherein detection of respective presence of error in received first computational data/second computational data and comparison of first computational data and second computational data are thus effected in parallel at a transmitting end and a receiving end.