Patent ID: 11904918
Assignee: BYD COMPANY LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC B  G | IPC B  G

Claim 0:
1. A computer interlocking system, comprising:
a first sub-system and a second sub-system that are mutually redundant and that have a same structure and function, wherein:
the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively comprising a main control layer, a network layer, and a communication and execution layer;
the network layer is configured to construct a communication network of a sub-system in which the network layer is located;
the main control layer and the communication and execution layer in the first sub-system are respectively connected to a communication network of the first sub-system; and
the main control layer and the communication and execution layer in the second sub-system are respectively connected to a communication network of the second sub-system,
wherein:
the computer interlocking system further includes a first interlocking module respectively connected to the first sub-system and the second sub-system;
the communication and execution layer in the first sub-system includes a first CPU and a second CPU and is configured to:
determine first sub-data acquired by the first CPU and second sub-data acquired by the second CPU;
perform 2-out-of-2 comparison on the first sub-data and the second sub-data, to determine whether the communication and execution layer in the first sub-system meets an active/standby switching condition, and
acquire, through a communication interface connected to a communication and execution layer in a second sub-system, second data determined by the communication and execution layer in the second sub-system; and the first interlocking module is configured to
control, when it is determined that the first sub-data is consistent with the second sub-data and the second data is fault processing data, the communication and execution layer in the first sub-system to be switched to be active; or
control, when it is determined that the first sub-data is inconsistent with the second sub-data and the second data is non-fault processing data, the communication and execution layer in the first sub-system to be switched to be standby.