Voting architecture for safety and mission critical systems
View Patent ↗A fault-tolerant failsafe computer voting system includes a switch module that generates a first copy of a first data packet and a second copy of the first data packet and that communicates the first copy and the second copy. The system also includes a first voting module that generates a first packet signature based on the first copy and communicates the first packet signature. The system further includes a second voting module that generates a second packet signature based on the second copy and communicates the second packet signature.
1. A fault-tolerant failsafe computer voting system comprising:
a switch module that generates a first copy of a first data packet and a second copy of the first data packet and that communicates the first copy and the second copy;
a first voting module that generates a first packet signature based on the first copy and communicates the first packet signature; and
a second voting module that generates a second packet signature based on the second copy and communicates the second packet signature;
wherein the first voting module generates a first voting signal based on a comparison between the first packet signature and the second packet signature and the second voting module generates a second voting signal based on a comparison between the first packet signature and the second packet signature; and
wherein the first voting module communicates the first copy based on the first voting signal and the second voting signal.
2. The system of claim 1 wherein the first voting module includes a first incoming voting module and wherein the second voting module includes a second incoming voting module.
3. The system of claim 2 wherein the switch module communicates the first copy to the first incoming voting module and the second copy to the second incoming voting module.
4. The system of claim 3 wherein the first incoming voting module generates the first packet signature and communicates the first packet signature to the second incoming voting module and wherein the second incoming voting module generates the second packet signature and communicates the second packet signature to the first incoming voting module.
5. The system of claim 4 wherein the first incoming voting module determines whether the first packet signature is identical to the second packet signature and wherein the second incoming voting module determines whether the second packet signature is identical to the first packet signature.
6. The system of claim 5 wherein the first incoming voting module generates the first voting signal in response to a determination that the first packet signature is identical to the second packet signature and wherein the second incoming voting module generates the second voting signal in response to a determination that the second packet signature is identical to the first packet signature.
7. The system of claim 1 wherein the first voting module communicates the first copy to a processing module.
8. The fault-tolerant failsafe computer voting system of claim 1 wherein the first voting module and the second voting module are identical and comprise separate components.
9. A fault-tolerant failsafe computer voting system comprising:
a first processing module that generates a first outgoing data packet and communicates the first outgoing data packet;
a second processing module that generates a second outgoing data packet and communicates the second outgoing data packet;
a first voting module that generates a first packet signature based on first outgoing data packet and communicates the first packet signature; and
a second voting module that generates a second packet signature based on the second outgoing data packet and communicates the second packet signature;
wherein the first voting module generates a first voting signal based on a comparison between the first packet signature and the second packet signature and the second voting module generates a second voting signal based on a comparison between the first packet signature and the second packet signature; and
wherein the first voting module communicates the first outgoing data packet based on the first voting signal and the second voting signal.
10. The system of claim 9 wherein the first voting module includes a first outgoing voting module and wherein the second voting module includes a second outgoing voting module.
11. The system of claim 10 wherein the first processing module communicates the first outgoing data packet to the first outgoing voting module and the second processing module communicates the second outgoing data packet to the second outgoing voting module.
12. The system of claim 11 wherein the first outgoing voting module generates the first packet signature and communicates the first packet signature to the second outgoing voting module and wherein the second outgoing voting module generates the second packet signature and communicates the second packet signature to the first outgoing voting module.
13. The system of claim 12 wherein the first outgoing voting module determines whether the first packet signature is identical to the second packet signature and wherein the second outgoing voting module determines whether the second packet signature is identical to the first packet signature.
14. The system of claim 13 wherein the first outgoing voting module generates the first voting signal in response to a determination that the first packet signature is identical to the second packet signature and wherein the second outgoing voting module generates the second voting signal in response to a determination that the second packet signature is identical to the first packet signature.
15. The system of claim 9 wherein the first voting module communicates the first outgoing packet to a switch module based on header information included with the first outgoing data packet.
16. The fault-tolerant failsafe computer voting system of claim 9 wherein the first processing module and the second processing module are identical and comprise separate components, and the first voting module and the second voting module are identical and comprise separate components.
17. A fault-tolerant failsafe computer voting method comprising:
generating a first copy of a first data packet and a second copy of the first data packet;
communicating the first copy and the second copy;
generating a first packet signature based on the first copy;
communicating the first packet signature;
generating a second packet signature based on the second copy;
communicating the second packet signature;
generating a first voting signal based on a comparison between the first packet signature and the second packet signature;
generating a second voting signal based on a comparison between the first packet signature and the second packet signature; and
communicating the first copy based on the first voting signal and the second voting signal.
18. The method of claim 17 further comprising determining whether the first packet signature is identical to the second packet signature.
19. The method of claim 18 further comprising generating the first voting signal in response to a determination that the first packet signature is identical to the second packet signature.
20. The method of claim 17 further comprising determining whether the second packet signature is identical to the first packet signature.
21. The method of claim 20 further comprising generating the second voting signal in response to a determination that the second packet signature is identical to the first packet signature.
22. The fault-tolerant failsafe computer voting method of claim 20 wherein the communicating the first packet signature and the second packet signature further comprises communicating the first packet signature to first components and communicating the second packet signature to identical, separate second components.
23. The method of claim 17 further comprising communicating the first copy to a processing module.