System and method for introducing redundancy mechanisms into a communication system

Abstract

System and method for introducing redundancy mechanisms into a communication system, comprising the following steps:

Description

FIELD OF INVENTION

[0001] The invention relates to a system and method for introducing redundancy mechanisms into a communication system.

BACKGROUND OF THE INVENTION

[0002] The reference DE 42 15 380 A1 discloses a method for synchronizing local timers of an automation system wherein a local timer is synchronized with time information which is formed from the time information of a central timer and a correction corresponding to the transmission and processing time. The time information is only transmitted by a transmission unit belonging to the central timer when it deviates by less than a predetermined amount from the current time. The disadvantage with this known method is that when the central timer fails or the bus line to the central timer is interrupted, the local timers can no longer be synchronized.

[0003] The reference DE 197 03 963 A1 discloses a method for exchanging data between electronic modules which can be arranged remotely. In this method, one module is used as clock generator without any redundancy mechanism.

[0004] Various standardized communication systems, also called bus systems, for exchanging data between two or more electronic modules or devices are known, especially also for use in automation systems also known in the prior art. Examples of such communication systems are fieldbus, Profibus, Ethernet, industrial Ethernet, FireWire or also bus systems within PCs (PCI). These bus systems are designed or optimized for different fields of application and allow a decentralized control system to be built up. The process control and monitoring in automated production and especially in digital drive technologies require very fast and reliable communication systems with predictable response times.

[0005] A very fast and simple communication between various modules can be built up by means of parallel bus systems such as, for example, SMP, ISA, PCI or VME. These known bus systems are used, in particular, in computers and PCs.

[0006] Synchronous clocked communication systems having equidistant characteristics are known from automation technology. They are understood to be a system of at least two users which are connected to one another via a data network for the purpose of the mutual exchange of data or the mutual transmission of data. The data exchange takes place cyclically in equidistant communication cycles which are predetermined by the communication clock used by the system. Users are, for example, centralized automation devices, programming, planning or operating devices, peripheral devices such as, e.g., input/output modules, drives, actuators, sensors, stored-program controls (SPCs) or other control units, computers or machines which exchange electronic data with other machines, particularly process data from other machines. In the text which follows, control units are understood to be closed-loop or open-loop control units of any type.

[0007] An equidistant deterministic cyclic data exchange in communication systems is based on a common clock or time base of all components involved in the communication. The clock or time base is transmitted to the other components by a distinct component (timing generator). In an isochronous real-time Ethernet, the clock or time base is predetermined by a synchronization master by sending synchronization messages. When the timing generator component or a connecting path of the timing generator fails, the clock or time base for the remaining components involved in the communication fails.

SUMMARY OF THE INVENTION

[0008] It is the object of the invention to prevent a loss of a clock or time base for the other components involved in a communication system.

[0009] This object is achieved by a method for synchronizing nodes of a communication system wherein a data message is transmitted for synchronization from a timing generator via disjoint paths to the nodes and in the event of an interruption of the transmission in one of the paths, the data message is transmitted via a first partial path of the interrupted path, and transmitting the data message via an uninterrupted path and from there via a second partial path of the interrupted path.

[0010] Accordingly, a redundancy mechanism for the clock synchronization is established in such a manner that the clock is transmitted on disjoint paths by a timing generator. This principle can be applied both when only one timing generator is used or also when a number of timing generators are used. If there is a break in one of the paths, the corresponding data messages of the timing generator are fed into the subnetworks produced due to the break.

[0011] In a preferred embodiment of the invention, a redundancy mechanism is introduced in which there are a number of timing generators, each having a different priority in the communication system. In this arrangement, the timing generator having the highest priority also synchronizes all other timing generators so that the clock signals of timing generators and of replacement timing generators are almost identical in normal operation. If the timing generator with the highest priority fails, the timing generator having the next highest priority is then automatically selected as the timing generator for a particular node in the communication system. This selection can be done in such a manner that each data message of a timing generator also contains its priority and a node in the communication system can then select the data message of the timing generator with the highest priority by means of the priority. The priorities can be permanently allocated or the priorities can be newly issued, for example when one of the timing generators fails. For example, when the timing generator with the highest priority fails, a replacement timing generator can be selected via corresponding planning of the communication system. It is particularly preferred if the timing generators can have information on the timing generators existing or planned in the system so that prioritization takes place, for example, via the planning. In the nodes of the communication system which are to be synchronized, it is either only the clock signal with the highest priority available at the relevant node which is used, or a clock signal weighted from a number of or all clock signals available at a node which is generated. The weighting can be generated by averaging the individual clock signals or by another type of filtering.

[0012] The present invention allows a redundancy mechanism to be introduced into a communication system by means of the simultaneous use of a number of timing generators or by means of a mechanism for activating replacement timing generators in the case of a malfunction. An advantage of this arrangement is the increase in availability of such systems which can be achieved by means of the invention, since the failure of a single component (timing generator) or of a connecting path does not lead to the failure of the total system. This advantage according to the invention is of particular significance in an application for packaging machines, presses, plastic injection moulding machines, textile machines, printing machines, machine tools, robots, handling systems, wood processing machines, glass processing machines, ceramic processing machines and lifting tools.

BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Preferred exemplary embodiments of the invention are described hereinbelow in greater detail, in connection with the drawings, in which:

[0014] FIG. 1 shows a block diagram of a first embodiment of a communication system according to the invention;

[0015] FIG. 2 shows a flowchart of a first embodiment of the method according to the invention;

[0016] FIG. 3 shows a block diagram of a second preferred embodiment of a communication system according to the invention, having at least one replacement timing generator;

[0017] FIG. 4 shows a flowchart of a second embodiment of the method according to the invention, having at least one replacement timing generator; and

[0018] FIG. 5 shows a flowchart of a further embodiment of the method according to the invention, having replacement timing generators.

DETAILED DESCRIPTION OF THE INVENTION

[0019] FIG. 1 shows an embodiment of a communication system according to the invention comprising nodes 1 to 5. Each of the nodes 1 to 5 contains a component device of the communication network such as a timing generator or a control unit. The component of node 1 is a timing generator which generates data messages for synchronizing the components of the other nodes 2 to 5. These data messages are transmitted in the communication system via lines 6 to 10 which connect the individual nodes 1 to 5 to one another. In this arrangement, a data message is transmitted from node 1, on the one hand, via a path P1 which contains lines 6 and 7, to nodes 2 and 3. Nodes 2 and 3 form a set M1 which belongs to path P1. On the other hand, the data messages are transmitted to nodes 4 and 5 via lines 8 and 9. Furthermore, nodes 3 and 4 are connected to one another via a line 10. Lines 8, 9 and 10 form a path P2 to which the set M2 of nodes 4 and 5 belongs. The two paths P1 and P2 are connected to one another at their end points by line 10 of path P2. Due to the ring topology resulting from this, both the data message sent via path P1 and the data message sent via path P2, of the timing generator of node 1 can be received in each of nodes 2 to 5.

[0020] For synchronization the relevant component in a node can then only use the data message which has been sent out via the path to which the relevant component belongs. In the case of node 2 this means that the component of node 2 only evaluates the data message of the timing generator of node 1 which has been received via line 6.

[0021] It is also possible for a component to use both data messages, i.e., both the data message of the path to which the component belongs and the data message of the other path) for synchronization so that, for example, a signal weighted or filtered for synchronization is generated from the two data messages. For the component of node 2, this means that both the data message of the timing generator of component 1 received via line 6 and that received via line 7 are used for synchronization.

[0022] In the case of a fault, for example if there is a break at the location on the network identified by the vertical line X in line 7 in FIG. 1. This means that path P1 is opened between nodes 2 and 3. The result is a partial path P11 with line 6 and node 2 and a partial path P12 with node 3. In this case, nodes 2 to 5 of the communication system are supplied with data messages for synchronization via the resultant subnetworks, i.e., the component of node 2 receives a data message from the timing generator of node 1 via line 6, and components 4 and 5 receive a data message via lines 8 and 9 of path P2. The partial path P12 consisting of node 3 is connected to path P2 via line 10 so that the component of node 3 also receives a data message for synchronization in spite of the break in line 7. The disjoint paths of P1 and P2 thus ensure that the communication system can continue to work even in the case of a line break.

[0023] FIG. 2 shows a corresponding flowchart for the embodiment shown in FIG. 1. In normal operation of the communication system (step 20), data messages from a timing generator of the communication system are transmitted via disjoint paths. Thus, the data messages are transmitted via path P1 to nodes of the communication system of set M1, and via a path P2 to nodes of set M2. Paths P1 and P2 are disjoint and preferably have the same end point or are connected to one another via a line at their end points.

[0024] In step 21, a fault occurs resulting in an interruption in path P1 and path P1 is split into two partial paths P11 and P12. The partial path P11 has a direct connection to the node of the communication system which contains the timing generator. This partial path P11 has a subset M11 of nodes of set M1. Partial path P12 does not have a direct connection to the node of the communication network with the timing generator and contains a subset M12 of nodes of set M1. Partial path P12, however, has a connection to path P2.

[0025] In step 22, the timing generator transmits a data message via partial path P11 to the nodes of set M11. Due to the break in path P1, a chained path Pver is produced which consists of the interconnected paths P2 and P12. The timing generator transmits the corresponding data message to the nodes of the union of sets M2 and M12 via this chained path. The resultant paths P11 and Pver are also disjoint but do not have a common end point or a connection between their end points.

[0026] FIG. 3 shows an alternative embodiment of a communication system according to the present invention. The communication system of FIG. 3 contains nodes 11 to 15 which are connected to one another via lines 16 to 19. A timing generator each is located in at least two different nodes of the communication system; these are nodes 11 and 15 in the example of FIG. 3. The timing generators of nodes 11 and 15 have different priorities. For example, the timing generator of node 11 is the timing generator with the highest priority and the timing generator of node 15 is a timing generator with a lower priority which is also called the replacement timing generator.

[0027] In normal operation, both the timing generator of the node 11 and the replacement timing generator of node 15 are active and send out corresponding data messages. The priority is a characteristic of the respective timing generator and is statically fixed during the parameterization of the communication system, and/or can be dynamically adapted to the respective situation. The respective priority is known to the components to be synchronized and/or is transmitted together with the data message of the clock signal. All components exclusively use the clock signal of the highest priority, which includes the replacement clock generator or generators, for their synchronization with the timing generator having the highest priority in each case. In normal operation of the communication system of FIG. 3, the timing generators of nodes 11 and 15 in each case send data message for synchronization. The respective data messages contain an identification code from which the priority of the timing generator which has sent the data message is obtained.

[0028] Thus, the components in nodes 12, 13 and 14 in each case receive two data messages having a different priority which is obtained from the respective identification code contained in the data message. The corresponding component can then select the data message from the timing generator with the higher priority and only use this for synchronization. However, the component can also take into consideration both data messages and generate a signal for synchronizing the local clock signal of the component by filtering, for example weighting the corresponding synchronization data.

[0029] In the case of a fault, for example, the timing generator in node 11 fails. In this case, the components to be synchronized in nodes 12, 13 and 14 now only receive data messages for the synchronization from the replacement timing generator of node 15 which, at the same time, is also the remaining timing generator in the communication system due to the failure of the timing generator of node 11. Thus the timing generator 15 becomes the timing generator with the highest priority and takes the place of the failed timing generator.

[0030] When the individual data messages of the timing generator and of the replacement timing generator are weighted, and when one of the timing generators fails, algorithms using previous values can be used for adapting the clock (or time base) of the relevant component to the clock signal of the remaining replacement timing generator without discontinuity. Such an algorithm can also be used when the communication system is broken, for example at the location designated by X in FIG. 3, in which case only either the clock signal of the main timing generator or the clock signal of the replacement timing generator is then received in the individual components.

[0031] If the system is interrupted at location X, e.g. due to a cable break, the network is split into two subnetworks. The components within the subnetworks, however are still synchronous due to the data message received in each case from one of the timing generators of nodes 11 and 15, respectively.

[0032] In a further preferred embodiment of the communication system as shown in FIG. 3, only the timing generator with the highest priority, that is to say the timing generator of node 11, transmits in normal operation. The data signals sent by the timing generator of node 11 are also received by the replacement timing generator of node 15. If the timing generator of node 11 fails, the replacement timing generator in node 15 no longer receives a clock signal. After a plannable number of communication cycles, the replacement timing generator of node 15 then begins to operate and sends data messages for synchronization to the components to be synchronized in the network.

[0033] The cycles between the failure of the timing generator with the highest priority in node 11 and the start of operation by the replacement timing generator of node 15 are bridged by the internal clock generation in the components. The transition from synchronization by means of the data messages received from the main timing generator to synchronization due to data messages of the replacement timing generator, or from the internal clock to the clock of the replacement timing generator, is controlled without discontinuity by algorithms using previous values. The same applies to an interruption of the system, for example at the location identified by X in FIG. 3. Assuming that both timing generators are still active in the case of such a line break, the network is again split into two subnetworks which are in each case synchronized by means of the main timing generator or the replacement timing generator, respectively.

[0034] FIG. 4 shows a flowchart of another embodiment of the method according to the invention. Step 40 relates to normal operation. A number of timing generators T1 to Tn in each case send data messages into the network. The individual timing generators have different priorities, i.e., each priority occurs only once in the communication system. For example, timing generator T1 is the timing generator having the highest priority and timing generator Tn is the timing generator having the lowest priority, with the priorities of timing generators T2 to Tn-1 decreasing, for example, linearly with their consecutive index.

[0035] The individual data messages of the timing generators contain an identification code from which the priority of the corresponding timing generator can be detected for each node in the communication system. For example, each node only takes into consideration for synchronization the data message originating from the timing generator T1, i.e., the one with the highest priority. This also applies to the timing generators T2 to Tn with lower priorities which in turn synchronize to the timing generator T1 with the highest priority by means of its data messages.

[0036] In step 41, the timing generator T1 with the highest priority fails due to a defect and/or a line break which separates the timing generator T1 from at least some of the nodes of the communication system.

[0037] An arbitrary node Ki, which no longer receives the data messages of the timing generator T1, is described hereinbelow. In step 42, node Ki first checks whether data messages of the timing generator having the next-lower priority (the timing generator T2,) are being received. If so, timing generator T2 is selected by node Ki as the timing generator for the further synchronization in step 43. If this is not so, node Ki checks in step 44 for timing generators Tj in the order of decreasing priorities as to whether a data message can be received from the relevant timing generator Tj. If this is so, the relevant timing generator Tj is selected for further synchronization in step 45. If not, a check is made in step 46 with regard to timing generator Tn having the next lowest priority as to whether a data message from this timing generator Tn can be received in node Ki. If this is so, this timing generator is selected for further synchronization by the node Ki in step 47, and if not, the failure of the relevant node Ki is reported in step 48 for example by means of a signal lamp that lights up.

[0038] Depending on the type of fault, the relevant nodes can obtain different results, that is to say a different selection of timing generators, on the basis of the checks 42 and 46 running in the nodes of the communication system. For example, due to one or more line breaks, the communication network can be split into subnetworks which are then supplied by different replacement timing generators of different priority. It is particularly advantageous in this context that replacement timing generators are selected remotely in the individual nodes.

[0039] FIG. 5 shows a flowchart of a further preferred embodiment of the method according to the invention. Step 50 relates to normal operation in which only one of the timing generators, that is to say the timing generator with the highest priority e.g., T1 sends data messages into the network of the communication system for synchronizing components. The communication system contains further timing generators T2 to Tn which in each case have a decreasing priority from T2 to Tn. These replacement timing generators receive the data messages of the timing generator T1 with the highest priority, as do the other components of the communication system in the nodes of the network. However, the replacement timing generators do not send any data messages for synchronization in normal operation. Also in normal operation, the components of the nodes of the network utilize the data message of the timing generator T1 with the highest priority for sychronizing the corresponding local clock signal in step 51. This also applies to the replacement timing generators which keep their respective internal oscillator in synchronism with that of the main timing generator T1.

[0040] In step 52 a fault occurs due to the fact that the timing generator fails for at least some of the nodes of the network due to a defect and/or a line break. A replacement timing generator must then be activated for the relevant nodes of the network. In step 53, a timing generator Tj from the set of replacement timing generators T2 to Tn checks whether it is receiving a data message from a replacement timing generator with higher priority after no further data message has been received from the main timing generator T1 after a period of dead time. If this is so, the timing generator Tj utilizes the data message of the timing generator with the next highest priority for synchronizing its internal oscillator in step 54. If, however, the timing generator Tj cannot receive a data message from a timing generator with the next highest priority after a period dead time, this timing generator Tj automatically activates itself in step 55 by sending out data messages for synchronization. This timing generator Tj is then used as replacement timing generator for the synchronization, at least for a subnetwork.

[0041] When the network has split into different subnetworks, there can be different replacement timing generators for the different subnetworks due to the check in step 53. Again, it is of particular advantage in this context that the check occurs remotely in the individual replacement timing generators, thus providing a maximum of flexibility with regard to failure redundancy.

[0042] In summary, the invention relates to a system and method for introducing redundancy mechanisms into a communication system, comprising the following steps:

[0043] a. Transmission of a data message for synchronization from a timing generator via disjoint paths to the nodes,

[0044] b. In the case of an interruption of the transmission in one of the disjoint paths:

[0045] i. Transmission of the data message from the timing generator via a first partial path of the interrupted path and

[0046] ii. Transmission of the data message from the timing generator via the uninterrupted path and from there via a second partial path of the interrupted path.

[0047] The method here is therefore one for synchronizing nodes of a communication system, particularly an automation system, and a corresponding computer program and system.

Claims

1. A method for synchronizing nodes of a communication system, comprising transmission of a data message for synchronization from a timing generator via disjoint paths to the nodes wherein in the event of an interruption of the transmission in one of the disjoint paths the data message is transmitted via a first partial path of the interrupted path and via an uninterrupted path and from there via a second partial path of the interrupted path.

2. The method for synchronizing nodes of a communication system, comprising transmission of a data message for synchronization from a timing generator having the highest priority to the nodes and wherein if a timing generator having a lower priority does not receive a data message of a timing generator having a higher priority, the data message is transmitted from a timing generator having a lower priority to at least a subset of the nodes.

3. A method for synchronizing nodes of a communication system, comprising transmission of data messages for synchronization from at least two timing generators having different priority to the nodes and selecting the data message from a timing generator with the highest priority from the data messages received by a node.

4. The method according to claims 1, 2 or 3, wherein the timing generator having the highest priority synchronizes all other timing generators.

5. The method according to claims 1, 2 or 3, wherein data for synchronization in the data messages of the timing generators having different priorities are essentially identical.

6. The method according to claims 1, 2 or 3, wherein each data message contains the priority of the timing generator which has sent the data message.

7. The method according to claim 3, wherein during the selection, the timing generator having the next highest priority automatically becomes the timing generator with the highest priority.

8. The method according to claim 7, wherein a priority identification code of the timing generator having the next lower priority is incremented.

9. The method according to claims 1, 2 or 3, wherein each of the data messages contains a priority identification code of the corresponding timing generator and the selection of a timing generator with the highest priority in a node takes place on the basis of the priority identification codes.

10. The method according to claims 1, 2 or 3, in which the timing generators receive and/or can obtain information on the timing generators existing or planned in the system.

11. The method according to claims 1, 2 or 3, wherein a selection and prioritization of the timing generators is carried out at least once during system start-up and/or the timing generators are prioritized through planning.

12. The method according to claims 1, 2 or 3, wherein a user uses a clock signal having the highest priority or a signal weighted from all clock signals.

13. A communication system for carrying out the method according to claims 1, 2 or 3.

14. A computer program product, comprising computer-readable means for carrying out the method according to claims 1, 2 or 3, when the computer program is executed in a communication system.