The present invention is a U.S. National Stage under 35 USC 371 patent application, claiming priority to Serial No. PCT/EP2018/085600, filed on 18 Dec. 2018; which claims priority of DE 102017130386.3, filed on 18 Dec. 2017, the entirety of both of which are incorporated herein by reference.
The present invention relates to a vehicle having fail-safe internal data transfer, in particular, a ship or submarine with a highly available navigation network.
The constant, current availability of navigation data is essential for survival on vehicles, in particular, military vehicles such as ships and submarines. The use of Ethernet-based networks on vehicles is known, however, these networks are normally designed as a star network with a star topology with network switches or as a bus network, where all subscribers are connected to a common data transfer medium (bus) via short lines. Thus, due to the use of network switches, so-called single points of failure exist, which restrict the availability and reliability of the network. One approach to eliminate this source of error by a second parallel network leads to an increased wiring expenditure and additional switches on board the vehicle, in particular, a ship. Also, the messages in the applications are doubled and transmitted via the two parallel networks. The receiver must then filter out the duplicate.
The present invention is therefore based on the object to provide a vehicle having fail-safe internal data transfer, which provides high reliability of the internal data transfer with reduced wiring expenditure at the same time.
This object of the present invention is solved by the vehicle having fail-safe internal data transfer according to claim 1. Advantageous embodiments and further developments of the invention are stated in the sub-claims.
According to the invention, a vehicle having fail-safe internal data transfer is provided, which has a vehicle body, a wired data transfer network provided on the vehicle body, and network subscribers provided on the vehicle body. The network subscribers are connected to one another via network nodes of the data transfer network. The data transfer network has a data-transferring ring wiring.
Thus, the invention relates to highly available navigation networks for ships and submarines where high reliability is achieved by redundancy and the avoidance of single points of failure. In this process, a data-transferring ring wiring is laid within a vehicle body such as a ship's hull, an air vehicle body or a land vehicle body in such a manner that, in the case of transection of the network cable, a connection of all network nodes and connected devices remains in place. Thus, it can be ensured especially for use in the military area that, in the case of destruction of an area of the vehicle body, it is ensured that a weapons system is still supplied with corresponding position and navigation data and thus remains fit for military service.
In this process, it is advantageous for a fail-safe use in water, air or on land if the vehicle comprises a water vehicle, an air vehicle or a land vehicle.
For use in the military area, it is practical if the vehicle is a military vehicle, which has at least one weapon and at least one position detection device as network subscribers.
To ensure maximum reliability in the case of bombardment or in the case of damage of the vehicle, it is advantageous if a minimum area defined by the data-transferring ring wiring is larger than 20% of a maximum cross-sectional area of the vehicle body.
In the case of bombardment or damage due to an air raid, it is particularly advantageous if a minimum area defined by the data-transferring ring wiring is larger than 20% of a maximum cross-sectional area of the vehicle body parallel to the horizontal.
To exclude the destruction of a majority of the data-transferring ring wiring according to the invention, it is practical if the minimum area defined by the data-transferring ring wiring is larger than 5 m2.
For additional redundancy and a reduction of single points of failure, it is advantageous if the data transfer network has at least two data-transferring ring wirings.
For maximized fail safety of the data transfer network according to the invention, it is particularly advantageous if, in exactly the same way as the World Wide Web, the data-transferring ring wirings form a network wiring.
In order to be able to provide separated network segments with different security requirements or operating periods, it is advantageous if at least two of the data-transferring ring wirings are designed separately and, in each case, decoupleably connected to one another via a connecting means.
In this process, it is practical if the connecting means couples the data-transferring separate ring wirings to one another in a redundant manner.
To avoid problems due to cable lengths in the case of a large expansion of the data transfer network according to the invention, it is practical if the data-transferring ring wiring comprises a fiber optic cable or a twisted pair line.
For the provision of exact time synchronization with high fail safety, it is advantageous if the data transfer network is suited for synchronization of the network subscribers.
For the optimum support of bidirectional and full duplex communication between two network nodes, it is advantageous if the data transfer network is suited for Ethernet-based data transfer by means of an HSR/PRP protocol.
For simultaneous fail safety of the power supply of the network subscribers of the data transfer network according to the invention, it is practical if the vehicle has a power supplying ring wiring for supplying the network subscribers of the data-transferring ring wiring with energy.
For universal use of devices of the vehicle according to the invention it is practical if the network subscribers have at least one appliance selected from a group which comprises a weapons control system, an integrated platform management system, an integrated monitoring and control system for helicopters, a demagnetizing system, a gyrocompass, a magnetic compass or a GPS/GLONASS receiver, an EM log, a Doppler log, an echo device, an automatic identification system AIS, an integrated control and monitoring system ICMS, a sonar, a periscope system, a weather station, a radar, a communication system, friend/foe identification IFF, an electronics assistance device, a repeater or empennage stabilization.
The invention is described in detail in the following text, with reference to the figures in an exemplary manner. The subject matter of the invention is defined by the claims, in which:
In data transfer networks and, in particular, computer networks, the following basic network topologies, i.e. the topological structure of a computer network, are known.
In a star network or a star topology, the individual network subscribers are each connected to a central node in the form of a star, with communication of the network subscribers taking place via a so-called network switch. However, this so-called star network has the disadvantage that, in the case of a failure of the central network node, the entire network fails. In addition, this can lead to overloading of the central network node in the case of too many transmission requests of the network subscribers taking part in the network communication.
In a so-called bus network, all subscribers are connected to a common data transfer medium, the so-called bus, via short lines. In this process, data is transmitted via a passive medium without a central coordination function, with the failure of one subscriber not having any effects on the communication of the remaining network subscribers. If, however, the bus wiring is damaged, the network subscribers are separated due to the defect within the bus network.
In a so-called tree network, there is a hierarchical connection between the individual network nodes, with the communication always taking place between the respective network nodes of a hierarchical level via the so-called root node.
In a ring network or loop network, each network subscriber is connected to exactly one precursor and one successor.
Transmission is controlled on the basis of the so-called token procedure. Token-Ring is a networking technology for computer networks, which is specified in specification IEEE 802.5. The logical topology of Token-Ring is a ring. In this process, a so-called token circles over the ring in Token-Ring networks. The token is always passed on from one node to the next. Even in idle mode, the stations continuously pass on the package. If a network subscriber wants to transmit data, it will wait until the token has reached it, then it will attach its user data to it. At the same time, it supplements the token with control signals and, in addition, sets the token bit from zero (for a free token) to one, i.e. the free token becomes a data frame. After this process, the computer places the data frame on the ring again, where it, similarly to the free token before, is passed on by the individual nodes. Every computer checks whether the package is addressed to it, and otherwise places it back on the ring. If the intended network subscriber receives the data frame addressed to it, it will copy the user data and acknowledge the data reception. The transmitter receives the acknowledgment and transmits the token with the next user data or places a free token on the ring. In this process, a transmitter may only use the token for a specific time, before it must release it again. In this way, each node in a ring is guaranteed that it, after this specified time (“token holding time”) has expired, may transmit in a ring.
A further development of a ring or loop topology for Ethernet-based networks is a “High Available Seamless Redundancy” (HSR) or “Parallel Redundant Protocol (PRP)” data transfer architecture, which is defined by the standard IEC 62439-3 Clause 5 or Clause 4. In an HSR/PRP data transfer architecture, the network subscriber need not, when transmitting messages via two parallel networks, filter out any duplicates, since this is efficiently realized and managed in the hardware. In this process, the data transfer network with a data-transferring ring wiring 230 can have standard Ethernet components or standard gigabit Ethernet components. The communication between two network nodes 220 is bidirectional and full duplex. Thus, only one cable between two network nodes 220 is required. The data is transmitted in both directions by the transmitting network node 220 and deleted again upon the receipt of the same data.
In accordance with the invention, a vehicle 10 is now provided, which has a data transfer network 200 with a ring or loop topology. In this process, the data transfer network 200 can be suited for Ethernet-based data transfer by means of an HSR/PRP protocol described above.
As shown in
In
The network subscribers shown in
For example, the network subscribers 210 can have at least one appliance selected from a group which comprises a weapons control system, an integrated platform management system, an integrated monitoring and control system for helicopters, a demagnetizing system, a gyrocompass, a magnetic compass or a GPS/GLONASS receiver, an EM log, a Doppler log, an echo device, an automatic identification system AIS, an integrated control and monitoring system ICMS, a sonar, a periscope system, a weather station, a radar, a communication system, friend/foe identification IFF, an electronics assistance device, a repeater or empennage stabilization. Thus, the vehicle 10 can, as a network subscriber 210, have at least one of the aforementioned devices.
However, for maximization of the fail safety of the ring wiring 230, not only the pure provision of a ring architecture is decisive, but also the genuine real topology of the ring wiring 230. This is to be illustrated based on
The network wiring of the data transfer network 200 forms a closed ring or loop and is provided on the vehicle body 100. In the case of a plurality of data-transferring ring wirings 230, or in the case of the design of a data-transferring network wiring as described further below, that wiring is to be selected as the decisive data-transferring ring wiring 230, which defines the largest area by its wiring. The minimum area MF is to be used as the decisive area. Mathematically, a minimum area is defined as an area in space, which locally has a minimum surface area for a given boundary line in space. For example, soap films take on such forms if stretched over a corresponding frame such as a blow ring. In the simplest case, in which the data-transferring ring wiring 230 is completely within a plane, the minimum area MF is a plane annular surface.
The larger the minimum area MF defined by the data-transferring ring wiring 230, the lower the probability of failure in the case of a defect or a location of the data-transferring ring wiring 230 hit. Although an arbitrarily large minimum area MF is particularly preferred, it is normally not larger than a maximum cross-sectional area MQF of the vehicle body 100. Therefore, it is preferred that a minimum area MF defined by the data-transferring ring wiring 230 is larger than 20%, larger than 30%, larger than 40%, larger than 50%, larger than 60%, larger than 70%, larger than 80% or larger than 90% of a maximum cross-sectional area MQF of the vehicle body 100.
The maximum cross-sectional area MQF of the vehicle body 100 is to be defined as an area, which is defined by an outer shell of the vehicle body 100 and intersects the vehicle body 100 in a straight plane. In this process, the largest possible cross section, i.e. maximum cross-sectional area MQF, is selected from all possible cross sections of the vehicle body 100. In this process, the maximum cross-sectional area MQF need not constantly lie within the vehicle body 100, but can, as, for example, in a catamaran water vehicle, also form a non-closed area. In a horizontal cross section of a catamaran, for example, the maximum cross-sectional area MQF is composed of two separate cross-sectional areas which lie within the two hulls of the catamaran.
In another preferred embodiment, a minimum area MF defined by the data-transferring ring wiring 230 is larger than 20%, larger than 30%, larger than 40%, larger than 50%, larger than 60%, larger than 70%, larger than 80% or larger than 90% of a maximum cross-sectional area MQFH of the vehicle body 100 parallel to the horizontal H. The horizontal H is illustrated in
In the maximum cross-sectional area MQF of the vehicle body 100 shown by the cross section AA′ in
When using a mixed topology, i.e. a combination of various network types such as a bus network, a star network and a ring network, the network subscribers can initially also be connected to the network node 220 in the form of a star, which are provided in the data-transferring ring wiring 230. However, in this mixed topology it is practical if the data-transferring ring wiring 230 cannot be destroyed by a single hit. Thus, the minimum area MF defined by the data-transferring ring wiring 230 is larger than 5 m2, larger than 7 m2, larger than 10 m2, larger than 15 m2, larger than 20 m2, larger than 25 m2, larger than 30 m2, larger than 50 m2, larger than 100 m2, larger than 200 m2 or larger than 500 m2.
By providing a minimum area MF with a specific minimum size, the fail safety is decisively reduced when a portion of the vehicle 10 is hit. For this purpose, the ring wiring 230 can be routed along a marginal area of the vehicle 10 to maximize the enclosed minimum area MF.
The aforedescribed network subscribers 210 are connected to the data-transferring ring wiring 230 via network nodes 220. In a preferred embodiment, the data transfer network 200 is Ethernet-based, with the data being transmitted by means of an HSR/PRP protocol. “High Available Seamless Redundancy” (HSR) is a network protocol for Ethernet, which provides a seamless failure protection against an error of an arbitrary network component. HSR network nodes have two ports and act as a switch (bridge), which enables their use within a ring or a network structure, without using dedicated switches. An HSR network node 220 has at least two Ethernet ports, which are each connected to an adjacent HSR network node 220, so that two paths exist between two nodes at any time. Therefore, as long as a path is in operation, the target application receives a data frame at any time. The HSR network nodes 220 continuously check the redundancy to detect hidden errors. When using an HSR ring as the data transfer network 200, the additional network switches are omitted, which are necessary for a star topology, which must be installed, configured and maintained distributed over the ship.
The HSR ring is designed for a maximum of 512 nodes, which is sufficient for a navigation data distribution. Since both standard twisted pair lines (CAT6) and fiber optic cables can be used, there are no length problems for the networking of the vehicle 10, in particular, for the ship networking. By using standard gigabit Ethernet components, good testability and short transmission times are ensured. The ring wiring 230 must be installed only once. The network nodes 220 can be integrated into the data-transferring ring wiring 230 at appropriate locations and thus be placed close to the network subscribers 210 configured as sensors or actuators. Interface converters or computers can be integrated into the network node 220.
As shown in
Exact time synchronization on board the vehicle 10 is elementary to allocate asynchronous events in a chronologically correct manner. The “Network Time Protocol” (NTP) only allows synchronization in the range of milliseconds which, however, are not precisely enough for some specific applications. For this reason, additional synchronization lines had to be laid in known vehicles such as ships and submarines. By using synchronization of the time on board the vehicle 10 by means of the “Precise Time Protocol” (PTP) according to IEEE 1588 v2 in conjunction with HSR, i.e. by using an HSR/PTP protocol (
In the aforedescribed exemplary embodiments, the data transfer network 200 according to the invention has been described with a data-transferring ring wiring 230. However, it is also possible that the data transfer network 200 has at least two data-transferring ring wirings. This is illustrated in
A separation of the data-transferring ring wirings 230, 240 is illustrated in
A separation of the individual separate data-transferring ring wirings 230, 240 configured as an HSR ring is reasonable, since all network nodes 220 designed as “Dual-Attached-Nodes” (DAN) on a ring should be supplied with power preferably at the same time. Different networks can also be decoupled with regard to their security requirements via additional routers/firewalls. It is thereby possible to integrate existing network components. These can be connected to the data-transferring ring wiring 240 or 230 via a so-called RedBox (redundancy box) 270.
Network components, which only have one network connection, are referred to as SAN (single attached node). The exemplary embodiment shown in
As shown in
Accordingly, a highly available navigation network for vehicles, in particular, for ships and submarines, is provided in accordance with the invention. The object of the invention is a secured receipt of data from all network subscribers 210 of the vehicle 10. In the case of ships and submarines, data must be collected, checked for plausibility and distributed. For example, a depth sensor must have information as to in which direction to determine the depth. A radar sensor further requires corresponding navigation data. Weapons systems must react in a fraction of seconds to maintain their fitness for military service.
According to the IEC standard IEC62439-3, ring topologies have been used in data transfer networks in control units, however, mixed topologies have been used there, where the HSR ring within a control cabinet is connected to network subscribers connected in the form of a star. An application of the aforedescribed HSR data transfer architecture to vehicles, in particular, military vehicles, leads to enhanced fail safety and reliability, as well as availability of the data transfer network according to the invention within the vehicle and is therefore of great advantage especially in a military use.
Number | Date | Country | Kind |
---|---|---|---|
102017130386.3 | Dec 2017 | DE | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/EP2018/085600 | 12/18/2018 | WO | 00 |
Publishing Document | Publishing Date | Country | Kind |
---|---|---|---|
WO2019/121750 | 6/27/2019 | WO | A |
Number | Name | Date | Kind |
---|---|---|---|
4651317 | Tashiro | Mar 1987 | A |
7698039 | Uchida | Apr 2010 | B2 |
8582424 | Kirrmann | Nov 2013 | B2 |
9908523 | Kimura | Mar 2018 | B2 |
20110029687 | Kirrmann et al. | Feb 2011 | A1 |
20110116508 | Kirrmann | May 2011 | A1 |
20150138954 | Ross | May 2015 | A1 |
20160231749 | Shimamura | Aug 2016 | A1 |
20190385057 | Litichever | Dec 2019 | A1 |
Number | Date | Country |
---|---|---|
10163393 | Jul 2003 | DE |
102012214849 | Feb 2013 | DE |
102015010969 | Mar 2017 | DE |
102016110148 | Dec 2017 | DE |
102016110150 | Dec 2017 | DE |
0018064 | Mar 2000 | WO |
Number | Date | Country | |
---|---|---|---|
20200412575 A1 | Dec 2020 | US |