The Bendix Corporation

Morris D Freedman

Arliss E Whiteside

Omur Tasar

Alexander M Rothschild

A Fault-Tolerant Multi-Computer System for control applications is disclosed. The system has a plurality of Computers (10a-10n), each having an assigned set of tasks which it is capable of executing. No one Computer in the system acts as a master and no one Computer executes all of the tasks. Communication between the Computers is by individual communication links (16, 18, 20) over which each Computer sends information directly to all other Computers in the system. Each Computer comprises an Applications Computer (100) and an Operations Controller (200). The Operations Controller receives messages over the communication links and selects, from the assigned tasks, the tasks to be performed by the associated Applications Computer. Each Operations Controller includes a fault handler which checks the messages received from the other Computers. The fault handlers send and receive error messages, over the communication links, to assist in the identification of a faulty Computer. Subsequent messages from the Computers deemed to be faulty are ignored, and the tasks assigned to the faulty Computer are executed by alternate Computers in the system.

Fault-tolerant multi-computer system

A communication system for a multiple computer or distributed computing system is disclosed. The communication system comprises a set of individual communication links. Each computer (10a through 10n) has its own communication link (16, 18, and 20), over which it alone can transmit messages to every other computer in the system. Each computer (10a through 10n) includes a plurality of receivers, one receiver for each computer in the system. Each receiver is connected to one of the communication links, and only receives messages transmitted by the single computer which transmits messages over that communication link.

Communication system for a multiple-computer system

A task communicator for each computer in a multiple computer system is disclosed. The task communicator provides communication of data values between cooperating tasks executed by different computers. The task communicator comprises a data values table (804) storing the current data values required for the execution of each task assigned to its computer. A store data value module (802) which stores the data values received from the other computers in the data values table. A task dispatcher (806) which copies the data values required for the execution of a selected task into a task input table (810). A release task module (814), which releases for execution the identified task and data values stored in the task input table. A task output table (812) storing the values of the data resulting from the execution of each task by its own computer. A task results message sender (818) which sends to all of the computers in the system messages containing the new data values stored in the task output table by the executed task.

Task communicator for multiple computer system

The invention is a synchronizer for synchronizing the operation of the computers in a multiple computer system. One synchronizer is associated with each computer, and it regularly generates signals to initiate the operations in its own computer which must be synchronized among the computers. The synchronizer comprises a start synchronizer module (458), a sampling data table including a sampling timer (460), a check sampling timer module (464), and a find sampling number agreement module (466). The sampling period timer times a sampling period having a predetermined time interval. At the end of each sampling period, the check sampling timer module sends a sampling number message containing a new sampling number. The find sampling number agreement module (466) generates a voted sampling number when sampling number messages received from like synchronizers in a predetermined number of computers contain the same sampling number. When a voted sampling number is obtained, the synchronizer generates a signal initiating in its own computer the operations which are to be synchronized among the computers. Also, the remaining time in the sampling period timer is adjusted to synchronize its period with like sampling period timers in the other computers. When no voted sampling number is obtained, the start synchronizer module (458) is enabled to restart the synchronizer.

Synchronizer and synchronization system for a multiple computer system

An operations controller for each computer in a multiple computer system is disclosed. Each operations controller controls the operations of its associated computer, so that all of the computers cooperate to perform system functions in a fault-tolerant manner. Each operations controller comprises a fault handler (204), a scheduler (206), a task communicator (208), plus a transmitter (212) and requisite receivers (202) which receive and send messages to all the other computers in the system. The fault handler (204) checks each message received and decides which computers are operating correctly and which are faulty. A scheduler (206) selects each task its own computer will execute, from the tasks assigned to its own computer. A task communicator (208) assembles the data values required for the execution of the selected task, and forwards this data to the computer for execution. The operations controller sends messages to all of the other computers in the system, informing them of which computer it deems to be faulty, the tasks it selects to execute, when it starts and completes the execution of each selected task, and the data variable values produced by the execution of each task.

Operations controller for a fault-tolerant multiple computer system

A fault handler for each computer in a multiple computer system is disclosed, which excludes faulty computers from participating in the operation of the multiple computer system. The fault handler comprises one or more message checkers (216, 218, 220, 222 and 224) and a fault tolerator (228). In the disclosed embodiment, the fault handler further includes a synchronizer (226) for synchronizing the operation of the associated computer with the operation of the other computers in the system. The checker modules check each message received from the other computers, and forward the messages to the fault tolerator. From error messages received from the other computers and errors detected by its own checker modules, the fault tolerator (228) decides which computers are faulty and discards the messages received from those computers. Only messages received from non-faulty computers are passed on for further processing. When an error is detected in a message, the fault tolerator sends a message to all of the other computers identifying the computer which sent the message.

Fault handler for a multiple computer system

A scheduler for selecting and scheduling the tasks to be executed by a computer in a multiple computer system is disclosed. One scheduler is associated with each computer, and the schedulers coordinate their operation by sending and receiving messages. Each scheduler comprises a status table (604) storing the status of each task assigned to its computer, and a scheduling status table (608) storing the tasks recently selected for execution by the computer. The scheduler further includes a record data ready module (600) which records in the status table (604) the reception of the data variables required for the execution of each task. A completed task recorder (612) records which tasks have been executed by itself or any other computer in the system. An unselected/selected task recorder records the selection and unselection of tasks by other computers. A task unselector records the tasks which have been unselected by itself. A task selector (610) selects from the status table and records in the scheduling status table the highest priority task ready for execution which has not been selected by any computer in the system. A task releaser (618) forwards the selected task for execution each time the computer signals the completion of the preceding scheduled task.

Growing community of inventors

Southfield, MI, United States of America

Morris D Freedman