US20100281099A1 - Systems and Methods of Providing Redundant Communication to an Electronic Device - Google Patents

Systems and Methods of Providing Redundant Communication to an Electronic Device Download PDF

Info

Publication number
US20100281099A1
US20100281099A1 US12/835,463 US83546310A US2010281099A1 US 20100281099 A1 US20100281099 A1 US 20100281099A1 US 83546310 A US83546310 A US 83546310A US 2010281099 A1 US2010281099 A1 US 2010281099A1
Authority
US
United States
Prior art keywords
data
data stream
redundancy manager
validity status
data streams
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US12/835,463
Inventor
Baha T. Tanju
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
OneSubsea IP UK Ltd
Original Assignee
Cameron International Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Cameron International Corp filed Critical Cameron International Corp
Priority to US12/835,463 priority Critical patent/US20100281099A1/en
Publication of US20100281099A1 publication Critical patent/US20100281099A1/en
Assigned to ONESUBSEA, LLC reassignment ONESUBSEA, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: CAMERON INTERNATIONAL CORPORATION
Assigned to ONESUBSEA IP UK LIMITED reassignment ONESUBSEA IP UK LIMITED ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: ONESUBSEA, LLC
Assigned to ONESUBSEA IP UK LIMITED reassignment ONESUBSEA IP UK LIMITED CORRECTIVE ASSIGNMENT TO CORRECT THE PATENT NO. 8385005 PREVIOUSLY RECORDED ON REEL 035135 FRAME 0474. ASSIGNOR(S) HEREBY CONFIRMS THE CORRECT PATENT NO. IS 8638005. Assignors: ONESUBSEA, LLC
Assigned to ONESUBSEA, LLC reassignment ONESUBSEA, LLC CORRECTIVE ASSIGNMENT TO CORRECT THE INCORRECT PATENT NO. 8385005 PREVIOUSLY RECORDED AT REEL: 035134 FRAME: 0239. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Assignors: CAMERON INTERNATIONAL CORPORATION
Abandoned legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L12/403Bus networks with centralised control, e.g. polling
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00Safety arrangements
    • G05B9/02Safety arrangements electric
    • G05B9/03Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L1/00Arrangements for detecting or preventing errors in the information received
    • H04L1/22Arrangements for detecting or preventing errors in the information received using redundant apparatus to increase reliability
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L12/40169Flexible bus arrangements
    • H04L12/40176Flexible bus arrangements involving redundancy
    • H04L12/40202Flexible bus arrangements involving redundancy by using a plurality of master stations
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/12Avoiding congestion; Recovering from congestion
    • H04L47/125Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L2012/4026Bus for use in automation systems
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Definitions

  • Modern petroleum exploration and drilling systems may implement electronic-based tools in remote locations (e.g., downhole locations or subsea locations).
  • the tools may comprise sensors, actuators, motors, drills, or other electronic-based tools.
  • a user interface such as a computer at the earth/sea surface may be employed. If the ability to communicate with and/or control the tools is lost or delayed, undesirable costs may be incurred.
  • the costs may be associated with replacing or repairing at least part of a petroleum mining system. The costs also may be associated with downtime of the petroleum mining system.
  • some petroleum mining systems implement redundant electronics to communicate with and/or control the remote tools.
  • an existing petroleum mining system may implement multiple user interfaces having a programmable logic controller (PLC) assigned to each user interface. Therefore, if one PLC malfunctions, or is otherwise inoperable, another PLC may be configured to transmit data from a user interface to the remote tools.
  • PLC programmable logic controller
  • implementing the redundant PLC system is expensive. Moreover, improvements in the reliability of petroleum mining systems are desirable.
  • a system may comprise a first master device, a second master device, a redundancy manager coupled to the first and second master devices, and a slave device coupled to the redundancy manager.
  • the redundancy manager is operable to receive a first data stream from the first master device and a second data stream from the second master device.
  • the redundancy manager is further operable to selectively forward one of the first and second data streams to the slave device according to a prioritization of factors calculated to optimize an amount of valid communication to the slave device.
  • FIG. 1 illustrates a petroleum mining system in accordance with preferred embodiments of the invention
  • FIG. 2 illustrates a block diagram of a redundancy manager in accordance with preferred embodiments of the invention
  • FIG. 3 illustrates another petroleum mining system in accordance with preferred embodiments of the invention
  • FIG. 4 illustrates a dual-redundant tool that may be used with the petroleum mining system of FIG. 3 ;
  • FIG. 5 illustrates a method in accordance with preferred embodiments of the invention.
  • Embodiments of the invention are directed to systems and methods of providing redundant data communication to one or more electronic slave devices.
  • an electronic slave device refers to any device that is configured to perform a function according to data provided by a master device such as a computer.
  • an electronic slave device may comprise a tool or sensor implemented in a petroleum mining system.
  • a redundancy manager device coupled between the electronic slave device and a plurality of master devices may provide redundant data communication to one or more electronic slave devices.
  • the redundancy manager device is preferably configurable to selectively forward data from one of the plurality of master devices to the slave device.
  • the master device associated with the data that is forwarded to the slave device is said to have “mastership” of the slave device.
  • Preferably one master device has mastership of the slave device while the other master devices are “idle” masters devices.
  • Implementing the redundancy manager device in such a system is intended to provide several benefits. For example, the redundancy manager may improve the reliability and availability of data communications to a slave device, simplify redundant system designs, provide low cost system redundancy, permit high-speed communication between a master device and a slave device and/or provide other benefits.
  • FIG. 1 illustrates a system 100 in accordance with preferred embodiments of the invention.
  • the system 100 illustrates a redundancy manager device 106 implemented in a petroleum mining system.
  • the system 100 may comprise a redundancy manager 106 coupled to a first master device 102 and a second master device 104 .
  • the redundancy manager 106 also may couple to a modem 108 .
  • the modem 108 may couple to a subsea tool 110 .
  • the redundancy manager 106 is operable to examine a data stream 112 received from the first master device 102 .
  • the data stream 112 may comprise, for example, data packets of encoded information such as a sender address (i.e., an address assigned to the first master device 102 ), a recipient address (i.e., an address assigned to the subsea tool 110 ), a command, data, and CRC (cyclic redundancy check) information.
  • the redundancy manager 106 is further operable to examine a data stream 114 received from the second master device 104 .
  • the data stream 114 also may comprise data packets of encoded information as described above.
  • the redundancy manager 106 preferably forwards one of the data streams 112 and 114 to the modem 108 .
  • the modem prepares the data stream received from the redundancy manager 106 for transmission to the subsea tool 110 .
  • the data stream output from the redundancy manager 106 will be referred to as the redundancy manager output (RMO) data.
  • the modem 108 may implement frequency modulation and/or phase modulation techniques to prepare the RMO data. Thereafter, the RMO data may be transmitted to the subsea tool 110 as a modulated analog signal via an electrical conductor 114 .
  • the electrical conductor 114 may comprise a cable (e.g., a coaxial cable, a shielded twisted pair) that is several kilometers in length.
  • the subsea tool 110 may receive the modulated analog signal via the electrical conductor 114 and recover the RMO data using digitization, demodulation, decoding and/or other techniques.
  • the RMO data may cause the subsea tool 110 to perform one or more functions such as operating a motor, operating an actuator, outputting sensor measurements, etc. Alternatively, the subsea tool 110 may ignore the RMO data as will later be described.
  • the subsea tool 110 also may function to transmit a data stream 118 to the first master device 102 and the second master device 104 .
  • the data stream 118 may comprise data packets of encoded information such as a sender address (i.e., the address of the subsea tool 110 ), a recipient address (i.e., an address assigned to the first master device 102 or the second master device 104 ), data, and CRC (cyclic redundancy check) information.
  • the recipient address of each data packet of the data stream 118 corresponds to the sender address of each data packet received by the subsea tool 110 .
  • Both the first master device 102 and the second master device 104 may receive and examine the data stream 118 using digitization, demodulation, and decoding techniques.
  • the data stream 118 may provide several types of information to the first master device 102 and the second master device 104 .
  • the data stream 118 may include sensor data, subsea tool health information, a verification of received commands and/or data, a response to a query, or other information.
  • the redundancy manager 106 may select one of the data streams 112 and 114 to be forwarded to the subsea tool 110 .
  • the redundancy manager's selection to forward the first data stream 112 or the second data stream 114 may be based on a variety of factors such as whether the first master device 102 is functioning properly, whether the second master device 104 is functioning properly, whether the first master device 102 has requested to transfer mastership, whether the second master device 104 has requested to transfer mastership, timing considerations, or other factors.
  • the redundancy manager 106 may be initially configured to forward the first data stream 112 . If the redundancy manager 106 determines that the first data stream 112 is invalid, then the second data stream 114 may be forwarded to the subsea tool 110 . Additionally, if the second master device 104 requests mastership, the redundancy manager 106 may forward the second data stream 114 to the subsea tool 110 . The second master device 104 may request mastership using a predetermined command transmitted to the redundancy manager 106 via the second data stream 114 . The second master device 104 also may request that mastership be transferred to the first master device 102 using another predetermined command transmitted to the redundancy manager 106 via the second data stream 114 .
  • the redundancy manager 106 operates to examine the data streams 112 and 114 , but does not alter, store, or buffer the data streams 112 and 114 . Therefore, a command to transfer mastership (or other non-slave commands), may be detected by the redundancy manager 106 , but still may be forwarded to the subsea tool 110 . Preferably, commands to transfer mastership have no significance to the subsea tool 110 and are ignored. Alternatively, the subsea device 110 may at least confirm that the command was received by transmitting a response to the master devices via the data stream 118 .
  • the master devices 102 and 104 may request to transfer mastership as controlled by a user and/or in response to the content of the data stream 118 .
  • a user that does not have access to the first master device 102 e.g., the master devices 102 and 104 may be far away from each other
  • a user of the second master device 104 may want to transfer mastership from the second master device 104 to the first master device 102 .
  • the second master device 104 require servicing or may be needed to perform tasks other than communicating with the subsea tool 110 .
  • the second master device 104 also may request mastership in response to the content of the data stream 118 .
  • the data stream 118 may comprise data packets, each including a destination address and confirmation information (i.e., information that confirms that a command and/or data was received). If the destination address indicates that the subsea tool 110 received a data packet from the first master device 102 and the confirmation information indicates that the command and/or the data is not valid, the second master device 104 may request that mastership be transferred from the first master device 102 to the second master device 104 .
  • confirmation information i.e., information that confirms that a command and/or data was received.
  • the second master device 104 may request mastership when no data stream 118 is transmitted by the subsea device 110 .
  • the absence of the data stream 118 may be an indication that the first master device 102 is not effectively communicating with the subsea device 110 .
  • the second master device 104 may be configured to wait for a predetermined amount of time after recognizing an input from a user to transfer mastership or after recognizing potential communication problems between the first master device 102 and the subsea tool 110 before transmitting a mastership transfer command to the redundancy manager 106 .
  • the first master device 102 may request mastership as controlled by a user and/or in response to the content of the data stream 118 in the same or similar fashion as described above for the second master device 104 .
  • the redundancy manager 106 may cycle between forwarding the first data stream 112 and the second data stream 114 until a valid data stream is discovered.
  • the cycling may occur at a predetermined frequency such as every fifteen seconds.
  • FIG. 2 illustrates a block diagram of a redundancy manager 106 in accordance with preferred embodiments of the invention.
  • the redundancy manager 106 may comprise a first processor 120 coupled to a second processor 122 .
  • the first processor 120 may comprise a memory 123 that stores computer-readable instructions 127 .
  • the computer-readable instructions 127 preferably cause the first processor 120 to manage a switching device 124 and communicate with the second processor 122 as will later be described.
  • the second processor 122 also may comprise a memory 125 that stores computer-readable instructions 129 .
  • the computer-readable instructions 129 preferably cause the second processor 122 to communicate with the first processor 120 as will later be described.
  • the first processor 120 may couple to the first master device 102 and may receive the first data stream 112 as input.
  • the second processor 122 may couple to the second master device 104 and may receive the second data stream 114 as input.
  • the switching device 124 may couple to the first master device 102 and the second master device 104 and may receive the data streams 112 and 114 as input, whereby the switching device 124 forwards one of the data streams 112 and 114 to an electrical slave device such as the subsea tool 110 of FIG. 1 .
  • execution of the computer-readable instructions 127 may cause the first processor 120 to examine the first data stream 112 and determine if the first data stream 112 contains any errors such as invalid commands, addresses, data, etc. If the first processor 120 detects an error in the first data stream 112 (or if the first data stream 112 is not provided), the first processor 120 may assert a signal 135 to the switching device 124 . In response to the signal 135 being asserted, the switching device 124 may forward the second data stream 114 instead of the first data stream 112 to a slave device. Additionally, execution of the computer-readable instructions 127 may cause the first processor 120 to wait a predetermined amount of time or detect a threshold number of errors before asserting the signal 135 .
  • execution of the computer-readable instructions 127 may cause the first processor 120 to assert and de-assert the signal 135 in response to mastership transfer commands from the first master device 102 .
  • two mastership transfer commands (hereinafter referred to as the “1-to-2 command” and the “2-to-1 command”) may be implemented.
  • the 1-to-2 command preferable causes the mastership to change from the first master device 102 to the second master device 104
  • the 2-to-1 command causes the mastership to change from the second master device 104 to the first master device 102 .
  • the first master device 102 may be configured to execute various applications in addition to providing the first data stream 112 . Therefore, if the first master device 102 is overburdened with tasks, occupied with performing a high priority task, or is otherwise unable to satisfactorily provide the first data stream 112 to the subsea tool 110 , the first master device 102 may send the 1-to-2 command to the first processor 120 via the first data stream 112 . In response to receiving the 1-to-2 command, the first processor 120 may assert the signal 135 thereby causing the switching device 124 to transfer mastership from the first master device 102 to the second master device 104 .
  • the first master device 102 may send the 2-to-1 command to the first processor 120 .
  • the 2-to-1 command may be sent when the first master device 102 examines a data stream (e.g., the data stream 118 ) from the slave device and determines that the second master device 104 is not effectively communicating with and/or controlling the slave device.
  • the first processor 120 may de-assert the signal 135 causing the mastership to change from the second master device 104 to the first master device 102 .
  • the signal 135 need not be continually asserted to provide mastership to the second master device 104 or continually de-asserted to provide mastership to the first master device 102 .
  • the signal 135 may comprise a pulse signal transmitted by the first processor 120 . Therefore, the switching device 124 may be configured to respond to one or more pulses by switching mastership to either the first master device 102 or the second master device 104 (e.g., one pulse may correspond to the first master device 102 and two pulses may correspond to the second master device 104 ). Alternatively, the switching device 124 may be configured to switch upon receive each consecutive pulse signal.
  • the switching device 124 may comprise a relay 128 coupled between a relay drive 126 and a switch 130 .
  • the relay drive 126 is configured to receive the signal 135 .
  • the relay drive 126 may provide power to the relay 128 , which may comprise, for example, an electro-mechanical relay.
  • the relay 128 may cause the switch 130 to forward the second data stream 114 to the subsea tool 110 instead of the first data stream 112 .
  • the relay 128 may cause a metal contact 129 coupled to the subsea tool 110 to shift between contacting a conductor carrying the first data stream 112 and a conductor carry the second data stream 114 .
  • switch device 124 embodiments may comprise the relay drive 126 , the relay 128 , and switch 130 as described above, other switch device 124 embodiments are available.
  • the switch device 124 may comprise a solid-state (semiconductor) switch.
  • the switch device 124 may comprise any electronic switch or electro-mechanical switch.
  • the first processor 120 may control the switching device 124 according to several factors such as the validity of the first data stream 112 and mastership transfer commands received from the first master device 102 .
  • the first processor 120 may control the switching device 124 according to input received from the second processor 122 .
  • a description of the operation of the second processor 122 is given below.
  • the second processor 122 may be configured to execute the computer-readable instructions 129 .
  • execution of the computer-readable instructions causes the second processor 122 to examine the second data stream 114 and determine if the second data stream 114 contains any errors such as invalid commands, addresses, data, etc. If the second processor 122 detects an error in the second data stream 114 (or if the second data stream 114 is not provided), the second processor 120 may assert a signal (“H 2 ” or “health of master 2 ”) to the first processor 120 that indicates when the second master device 104 is not functioning correctly.
  • Execution of the computer-readable instructions 129 may further cause the second processor 122 to assert signals (shown as “X 1 ” and “X 2 ” in FIG. 2 ) to the first processor 120 when the second master device 104 transmits mastership transfer commands to the second processor 122 via the second data stream 114 .
  • signals shown as “X 1 ” and “X 2 ” in FIG. 2
  • the 1-to-2 command and the 2-to-1 command may be implemented.
  • the second master device 104 may be configured to execute various applications in addition to providing the second data stream 114 . Therefore, if the second master device 104 is overburdened with tasks, occupied with performing a high priority task, or is otherwise unable to satisfactorily provide the second data stream 114 to a slave device, the second master device 104 may send the 2-to-1 command to the second processor 122 . In response to receiving the 2-to-1 command, the second processor 122 may assert the X 1 (transfer to master 1 ) signal to the first processor 120 . In response to the asserted the X 1 signal, the first processor 120 may de-assert the signal 135 , thereby causing the switching device 124 to transfer mastership from the second master device 104 to the first master device 102 .
  • the second master device 104 may send the 1-to-2 command to the second processor 122 .
  • the 1-to-2 command may be sent when the second master device 104 examines a data stream (e.g., the data stream 118 shown in FIG. 1 ) from the slave device and determines that the first master device 102 is not effectively communicating with and/or controlling the slave device.
  • the second processor 122 may assert the X 2 (transfer to master 2 ) signal to the first processor 120 .
  • the first processor 120 may assert the signal 135 , thereby causing the switching device 124 to transfer mastership from the first master device 102 to the second master device 104 .
  • execution of the computer-readable instructions 127 may cause the first processor 120 to sample the H 2 , X 1 , and X 2 signals at a programmable rate (e.g., once every second).
  • a reset signal (“RS”) may be transmitted to the second processor 122 , which may cause the second processor 122 to reset (de-assert) any asserted H 2 , X 1 , and X 2 signal.
  • the assertion or reassertion of the H 2 , X 1 , and X 2 signals may occur as described above.
  • the first processor 120 may consider several factors, such as those described above, to manage the switching device 124 such that the first data stream 112 or the second data stream 114 is forwarded to the subsea tool 110 .
  • the first processor 120 may manage the switching device 124 according to a prioritization of the health (functional condition) of the master devices 102 and 104 , the mastership transfer commands received from the master devices 102 and 104 , and timing considerations.
  • the health of the master devices 102 and 104 may be given first priority and may be indicated to the first processor 120 according to an examination of the first data stream 112 and the H 2 signal described above.
  • the mastership transfer commands may be given second priority and may be indicated to the first processor 120 according to the 1-to-2 command, the 2-to-1 command, the X 1 signal, and the X 2 signal described above.
  • the timing considerations may be given third priority and may be indicated to the first processor 120 by timers that are controlled according to the computer-readable instructions 127 .
  • the timing considerations permit the first processor 120 to control the switching device 124 such as to maximize the amount of time during which the slave device receives valid commands and/or data.
  • the timing considerations may be beneficial when both of the data streams 112 and 114 are indicated to be invalid.
  • the downtime of communication between the master devices 102 and 104 and the slave device may be minimized by successively switching between transferring the first data stream 112 and the second data stream 114 until one of the data streams 112 and 114 is determined to be valid. Thereafter, the valid data stream may be forwarded until the switching device 124 is instructed otherwise.
  • the timing considerations also may be beneficial when multiple mastership transfer commands are received within a threshold amount of time. In such case, it may not be desirable to switch back and forth between forwarding the first data stream 112 and the second data stream 114 . For example, if the both of the data streams 112 and 114 are valid, then switching between forwarding the first data stream 112 and the second data stream 114 may result in a lower data transfer rate than would exist otherwise. The lower data transfer rate may result from latency associated with operating the switching device 124 . Therefore, the timing considerations may prevent mastership transfer commands from being performed if doing so is calculated to improve the overall efficiency of communicating to the slave device.
  • the redundancy manager 106 also may comprise monitoring units 132 and 136 .
  • the monitoring units 132 and 136 may comprise one or more electrical-based indicators 134 .
  • the electrical-based indicators 134 may comprise light emitting diodes (LEDs).
  • the indicators 134 preferably permit a user to easily inspect the various functions of the redundancy manager 106 .
  • the monitoring unit 132 may comprise indicators 134 associated with the health of the first master device 102 (“H 1 ”), the health of the second master device 104 (“H 2 ”), the health of the first processor 120 (“HP 1 ”), the health of the second processor 122 (“HP 2 ”), the first data stream 112 being forwarded (“F 1 ”), and the second data stream 114 being forwarded (“F 2 ”).
  • the monitoring unit 136 may comprise an indicator 134 associated with the assertion and de-assertion of the signal 135 (“SW”).
  • FIG. 3 illustrates another petroleum mining system 150 in accordance with preferred embodiments of the invention.
  • the system 150 may comprise a first master device 102 and a second master device 104 each coupled to two redundancy managers 106 A and 106 B.
  • the redundancy managers 106 A and 106 B may each couple to a modem (“MODEM A 1 ” 108 A and “MODEM B 1 ” 108 B respectively).
  • the modems 108 A and 108 B may couple to a subsea tool 180 via the conductors 116 A and 116 B.
  • the master devices 102 and 104 , the redundancy managers 106 A and 106 B, and the modems 108 A and 108 B may function in the same or similar fashion as the master devices 102 and 104 , the redundancy manager 106 , and the modem 108 described in FIGS. 1 and/or 2 .
  • FIG. 3 illustrates that an increased number of data paths (i.e., paths associated with first data stream 112 , the second data stream 114 , the RMO data, and the data stream 118 ) may be implemented to further increase the reliability of successful communication to the subsea tool 180 .
  • an increased number of data paths i.e., paths associated with first data stream 112 , the second data stream 114 , the RMO data, and the data stream 118 .
  • FIG. 4 illustrates a dual-redundant tool 180 that may be implemented with the system 150 of FIG. 3 .
  • the tool 180 may comprise a modem (“MODEM A 2 ”) 182 A that is operable to receive a signal from the MODEM A 1 108 A.
  • the tool 180 may further comprise a modem (“MODEM B 2 ”) 182 B that is operable to receive a signal from the MODEM B 1 108 B.
  • the modems 182 A and 182 B may digitize, demodulate, and decode data streams received from the master devices 102 and 104 .
  • the data streams may be provided to sensors 184 A and 184 B.
  • the sensors 184 A and 184 B are preferably independent from each other and provide sensor data in response to environment input.
  • the sensor data may be transmitted to the master devices 102 and 104 via the modems 108 A and 108 B.
  • the data streams also may be provided to controllers 186 A and 186 B.
  • the controllers 186 A and 186 B are preferably independent from each other and may be associated with valves, actuators, motors, or other functions of the tool 180 . As shown, the controllers 186 A and 186 B may receive analog input signals and may provide an output function (e.g., controlling a drill, actuator, valve, or other device).
  • FIG. 5 illustrates a method 500 in accordance with preferred embodiments of the invention.
  • the method 500 may comprise receiving a plurality of data streams from two or more master devices (block 502 ).
  • the method 500 further comprises checking the validity of the data streams at block 504 . If there is not a valid data stream as determined at block 506 , the data streams may be forwarded in a cycled (switching back and forth) fashion (block 508 ). For example, the data streams may be forwarded via a relay that is able to forward one of the plurality of data streams at a time according to a setting of the relay. If none of the data streams are valid, the relay may forward each data stream in turn according to a predetermined pattern and timing. The method 500 may then return to block 506 to determine if there is a valid data stream.
  • a relay may be set to forward the valid data stream (block 510 ). Thereafter, a determination is made as to whether a request to transfer mastership to a healthy master has occurred (block 512 ). If, at block 512 , a determination is made that no request to transfer mastership to a healthy master has occurred, the valid data stream may be forwarded via the relay (block 518 ). If, at block 512 , a determination is made that a request to transfer mastership to a healthy master has occurred, then a determination is made as to whether the request to transfer mastership to a healthy master occurred within a threshold amount of time (block 514 ).
  • the valid data stream may be forwarded via the relay (block 518 ). If, at block 514 , a determination is made that the request to transfer mastership to a healthy master occurred within the threshold amount of time, the relay may be set to transfer mastership according to the request (block 516 ). Thereafter, a valid data stream (from a healthy master device having mastership) may be forwarded via the relay (block 518 ). The method 500 may be repeated continually to provide efficient, redundant communication from the master devices to one or more slave devices.

Abstract

In at least some embodiments a system may comprise a first master device, a second master device, a redundancy manager coupled to the first and second master devices, and a slave device coupled to the redundancy manager. The redundancy manager is operable to receive a first data stream from the first master device and a second data stream from the second master device. The redundancy manager is further operable to selectively forward one of the first and second data streams to the slave device according to a prioritization of factors calculated to optimize an amount of valid communication to the slave device.

Description

    CROSS-REFERENCE TO RELATED DOCUMENTS
  • This application contains subject matter that may be related to the doctoral dissertation, “Redundancy Manager for Subsea Control Systems” by Baha T. Tanju. The above referenced dissertation is to be submitted to Kennedy Western University after the filing of this Application and is hereby incorporated by reference.
  • BACKGROUND
  • Modern petroleum exploration and drilling systems (hereinafter referred to as “petroleum mining systems”) may implement electronic-based tools in remote locations (e.g., downhole locations or subsea locations). For example, the tools may comprise sensors, actuators, motors, drills, or other electronic-based tools. To communicate with and/or control the tools, a user interface such as a computer at the earth/sea surface may be employed. If the ability to communicate with and/or control the tools is lost or delayed, undesirable costs may be incurred. For example, the costs may be associated with replacing or repairing at least part of a petroleum mining system. The costs also may be associated with downtime of the petroleum mining system.
  • To reduce the frequency of incurring such costs, some petroleum mining systems implement redundant electronics to communicate with and/or control the remote tools. For example, an existing petroleum mining system may implement multiple user interfaces having a programmable logic controller (PLC) assigned to each user interface. Therefore, if one PLC malfunctions, or is otherwise inoperable, another PLC may be configured to transmit data from a user interface to the remote tools. However, implementing the redundant PLC system is expensive. Moreover, improvements in the reliability of petroleum mining systems are desirable.
  • SUMMARY
  • In at least some embodiments a system may comprise a first master device, a second master device, a redundancy manager coupled to the first and second master devices, and a slave device coupled to the redundancy manager. The redundancy manager is operable to receive a first data stream from the first master device and a second data stream from the second master device. The redundancy manager is further operable to selectively forward one of the first and second data streams to the slave device according to a prioritization of factors calculated to optimize an amount of valid communication to the slave device.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • For a detailed description of various embodiments of the invention, reference will now be made to the accompanying drawings in which:
  • FIG. 1 illustrates a petroleum mining system in accordance with preferred embodiments of the invention;
  • FIG. 2 illustrates a block diagram of a redundancy manager in accordance with preferred embodiments of the invention;
  • FIG. 3 illustrates another petroleum mining system in accordance with preferred embodiments of the invention;
  • FIG. 4 illustrates a dual-redundant tool that may be used with the petroleum mining system of FIG. 3; and
  • FIG. 5 illustrates a method in accordance with preferred embodiments of the invention.
  • NOTATION AND NOMENCLATURE
  • Certain terms are used throughout the following description and claims to refer to particular system components. As one skilled in the art will appreciate, companies may refer to a component by different names. This document does not intend to distinguish between components that differ in name but not function. In the following discussion and in the claims, the terms “including” and “comprising” are used in an open-ended fashion, and thus should be interpreted to mean “including, but not limited to . . . ”. Also, the term “couple” or “couples” is intended to mean either an indirect or direct electrical connection. Thus, if a first device couples to a second device, that connection may be through a direct electrical connection, or through an indirect electrical connection via other devices and connections.
  • DETAILED DESCRIPTION
  • Embodiments of the invention are directed to systems and methods of providing redundant data communication to one or more electronic slave devices. As used herein, an electronic slave device refers to any device that is configured to perform a function according to data provided by a master device such as a computer. For example, an electronic slave device may comprise a tool or sensor implemented in a petroleum mining system.
  • In at least some embodiments, a redundancy manager device coupled between the electronic slave device and a plurality of master devices may provide redundant data communication to one or more electronic slave devices. The redundancy manager device is preferably configurable to selectively forward data from one of the plurality of master devices to the slave device. The master device associated with the data that is forwarded to the slave device is said to have “mastership” of the slave device. Preferably one master device has mastership of the slave device while the other master devices are “idle” masters devices. Implementing the redundancy manager device in such a system is intended to provide several benefits. For example, the redundancy manager may improve the reliability and availability of data communications to a slave device, simplify redundant system designs, provide low cost system redundancy, permit high-speed communication between a master device and a slave device and/or provide other benefits.
  • FIG. 1 illustrates a system 100 in accordance with preferred embodiments of the invention. In particular, the system 100 illustrates a redundancy manager device 106 implemented in a petroleum mining system. As shown in FIG. 1, the system 100 may comprise a redundancy manager 106 coupled to a first master device 102 and a second master device 104. The redundancy manager 106 also may couple to a modem 108. As shown in FIG. 1, the modem 108 may couple to a subsea tool 110.
  • In at least some embodiments, the redundancy manager 106 is operable to examine a data stream 112 received from the first master device 102. The data stream 112 may comprise, for example, data packets of encoded information such as a sender address (i.e., an address assigned to the first master device 102), a recipient address (i.e., an address assigned to the subsea tool 110), a command, data, and CRC (cyclic redundancy check) information. The redundancy manager 106 is further operable to examine a data stream 114 received from the second master device 104. The data stream 114 also may comprise data packets of encoded information as described above.
  • The redundancy manager 106 preferably forwards one of the data streams 112 and 114 to the modem 108. The modem prepares the data stream received from the redundancy manager 106 for transmission to the subsea tool 110. Hereinafter the data stream output from the redundancy manager 106 will be referred to as the redundancy manager output (RMO) data.
  • The modem 108 may implement frequency modulation and/or phase modulation techniques to prepare the RMO data. Thereafter, the RMO data may be transmitted to the subsea tool 110 as a modulated analog signal via an electrical conductor 114. In at least some embodiments, the electrical conductor 114 may comprise a cable (e.g., a coaxial cable, a shielded twisted pair) that is several kilometers in length.
  • The subsea tool 110 may receive the modulated analog signal via the electrical conductor 114 and recover the RMO data using digitization, demodulation, decoding and/or other techniques. The RMO data may cause the subsea tool 110 to perform one or more functions such as operating a motor, operating an actuator, outputting sensor measurements, etc. Alternatively, the subsea tool 110 may ignore the RMO data as will later be described.
  • The subsea tool 110 also may function to transmit a data stream 118 to the first master device 102 and the second master device 104. The data stream 118 may comprise data packets of encoded information such as a sender address (i.e., the address of the subsea tool 110), a recipient address (i.e., an address assigned to the first master device 102 or the second master device 104), data, and CRC (cyclic redundancy check) information. Preferably, the recipient address of each data packet of the data stream 118 corresponds to the sender address of each data packet received by the subsea tool 110.
  • Both the first master device 102 and the second master device 104 may receive and examine the data stream 118 using digitization, demodulation, and decoding techniques. The data stream 118 may provide several types of information to the first master device 102 and the second master device 104. For example, the data stream 118 may include sensor data, subsea tool health information, a verification of received commands and/or data, a response to a query, or other information.
  • As previously explained, the redundancy manager 106 may select one of the data streams 112 and 114 to be forwarded to the subsea tool 110. The redundancy manager's selection to forward the first data stream 112 or the second data stream 114 may be based on a variety of factors such as whether the first master device 102 is functioning properly, whether the second master device 104 is functioning properly, whether the first master device 102 has requested to transfer mastership, whether the second master device 104 has requested to transfer mastership, timing considerations, or other factors.
  • In at least some embodiments, the redundancy manager 106 may be initially configured to forward the first data stream 112. If the redundancy manager 106 determines that the first data stream 112 is invalid, then the second data stream 114 may be forwarded to the subsea tool 110. Additionally, if the second master device 104 requests mastership, the redundancy manager 106 may forward the second data stream 114 to the subsea tool 110. The second master device 104 may request mastership using a predetermined command transmitted to the redundancy manager 106 via the second data stream 114. The second master device 104 also may request that mastership be transferred to the first master device 102 using another predetermined command transmitted to the redundancy manager 106 via the second data stream 114.
  • Preferably, the redundancy manager 106 operates to examine the data streams 112 and 114, but does not alter, store, or buffer the data streams 112 and 114. Therefore, a command to transfer mastership (or other non-slave commands), may be detected by the redundancy manager 106, but still may be forwarded to the subsea tool 110. Preferably, commands to transfer mastership have no significance to the subsea tool 110 and are ignored. Alternatively, the subsea device 110 may at least confirm that the command was received by transmitting a response to the master devices via the data stream 118.
  • In at least some embodiments, the master devices 102 and 104 may request to transfer mastership as controlled by a user and/or in response to the content of the data stream 118. For example, a user that does not have access to the first master device 102 (e.g., the master devices 102 and 104 may be far away from each other) may wish to transmit information to the subsea tool 110 using the second master device 104. Therefore, the user may access the second master device 104 and provide input (e.g., via a keyboard and/or a mouse) to request that the mastership be transferred from the first master device 102 to the second master device 104. Furthermore, a user of the second master device 104 may want to transfer mastership from the second master device 104 to the first master device 102. For example, the second master device 104 require servicing or may be needed to perform tasks other than communicating with the subsea tool 110.
  • The second master device 104 also may request mastership in response to the content of the data stream 118. For example, the data stream 118 may comprise data packets, each including a destination address and confirmation information (i.e., information that confirms that a command and/or data was received). If the destination address indicates that the subsea tool 110 received a data packet from the first master device 102 and the confirmation information indicates that the command and/or the data is not valid, the second master device 104 may request that mastership be transferred from the first master device 102 to the second master device 104.
  • Additionally or alternatively, the second master device 104 may request mastership when no data stream 118 is transmitted by the subsea device 110. The absence of the data stream 118 may be an indication that the first master device 102 is not effectively communicating with the subsea device 110. In at least some embodiments, the second master device 104 may be configured to wait for a predetermined amount of time after recognizing an input from a user to transfer mastership or after recognizing potential communication problems between the first master device 102 and the subsea tool 110 before transmitting a mastership transfer command to the redundancy manager 106.
  • Likewise, the first master device 102 may request mastership as controlled by a user and/or in response to the content of the data stream 118 in the same or similar fashion as described above for the second master device 104.
  • If neither of the data streams 112 and 114 are valid, the redundancy manager 106 may cycle between forwarding the first data stream 112 and the second data stream 114 until a valid data stream is discovered. The cycling may occur at a predetermined frequency such as every fifteen seconds.
  • FIG. 2 illustrates a block diagram of a redundancy manager 106 in accordance with preferred embodiments of the invention. As shown in FIG. 2, the redundancy manager 106 may comprise a first processor 120 coupled to a second processor 122. The first processor 120 may comprise a memory 123 that stores computer-readable instructions 127. When executed by the first processor 120, the computer-readable instructions 127 preferably cause the first processor 120 to manage a switching device 124 and communicate with the second processor 122 as will later be described. The second processor 122 also may comprise a memory 125 that stores computer-readable instructions 129. When executed by the second processor 122, the computer-readable instructions 129 preferably cause the second processor 122 to communicate with the first processor 120 as will later be described.
  • As shown in FIG. 2, the first processor 120 may couple to the first master device 102 and may receive the first data stream 112 as input. Likewise, the second processor 122 may couple to the second master device 104 and may receive the second data stream 114 as input. The switching device 124 may couple to the first master device 102 and the second master device 104 and may receive the data streams 112 and 114 as input, whereby the switching device 124 forwards one of the data streams 112 and 114 to an electrical slave device such as the subsea tool 110 of FIG. 1.
  • In at least some embodiments, execution of the computer-readable instructions 127 may cause the first processor 120 to examine the first data stream 112 and determine if the first data stream 112 contains any errors such as invalid commands, addresses, data, etc. If the first processor 120 detects an error in the first data stream 112 (or if the first data stream 112 is not provided), the first processor 120 may assert a signal 135 to the switching device 124. In response to the signal 135 being asserted, the switching device 124 may forward the second data stream 114 instead of the first data stream 112 to a slave device. Additionally, execution of the computer-readable instructions 127 may cause the first processor 120 to wait a predetermined amount of time or detect a threshold number of errors before asserting the signal 135.
  • Furthermore, execution of the computer-readable instructions 127 may cause the first processor 120 to assert and de-assert the signal 135 in response to mastership transfer commands from the first master device 102. In some embodiments, two mastership transfer commands (hereinafter referred to as the “1-to-2 command” and the “2-to-1 command”) may be implemented. The 1-to-2 command preferable causes the mastership to change from the first master device 102 to the second master device 104, while the 2-to-1 command causes the mastership to change from the second master device 104 to the first master device 102.
  • As an example, the first master device 102 may be configured to execute various applications in addition to providing the first data stream 112. Therefore, if the first master device 102 is overburdened with tasks, occupied with performing a high priority task, or is otherwise unable to satisfactorily provide the first data stream 112 to the subsea tool 110, the first master device 102 may send the 1-to-2 command to the first processor 120 via the first data stream 112. In response to receiving the 1-to-2 command, the first processor 120 may assert the signal 135 thereby causing the switching device 124 to transfer mastership from the first master device 102 to the second master device 104.
  • Alternatively, the first master device 102 may send the 2-to-1 command to the first processor 120. For example, the 2-to-1 command may be sent when the first master device 102 examines a data stream (e.g., the data stream 118) from the slave device and determines that the second master device 104 is not effectively communicating with and/or controlling the slave device. In response to receiving the 2-to-1 command, the first processor 120 may de-assert the signal 135 causing the mastership to change from the second master device 104 to the first master device 102.
  • In at least some embodiments, the signal 135 need not be continually asserted to provide mastership to the second master device 104 or continually de-asserted to provide mastership to the first master device 102. For example, the signal 135 may comprise a pulse signal transmitted by the first processor 120. Therefore, the switching device 124 may be configured to respond to one or more pulses by switching mastership to either the first master device 102 or the second master device 104 (e.g., one pulse may correspond to the first master device 102 and two pulses may correspond to the second master device 104). Alternatively, the switching device 124 may be configured to switch upon receive each consecutive pulse signal.
  • As shown in FIG. 2, the switching device 124 may comprise a relay 128 coupled between a relay drive 126 and a switch 130. In at least some embodiments, the relay drive 126 is configured to receive the signal 135. In response to an assertion of the signal 135, the relay drive 126 may provide power to the relay 128, which may comprise, for example, an electro-mechanical relay. Upon receiving power, the relay 128 may cause the switch 130 to forward the second data stream 114 to the subsea tool 110 instead of the first data stream 112. For example, the relay 128 may cause a metal contact 129 coupled to the subsea tool 110 to shift between contacting a conductor carrying the first data stream 112 and a conductor carry the second data stream 114.
  • While some switch device 124 embodiments may comprise the relay drive 126, the relay 128, and switch 130 as described above, other switch device 124 embodiments are available. For example, the switch device 124 may comprise a solid-state (semiconductor) switch. As implemented herein, the switch device 124 may comprise any electronic switch or electro-mechanical switch.
  • As explained above, the first processor 120 may control the switching device 124 according to several factors such as the validity of the first data stream 112 and mastership transfer commands received from the first master device 102. In addition, the first processor 120 may control the switching device 124 according to input received from the second processor 122. A description of the operation of the second processor 122 is given below.
  • The second processor 122 may be configured to execute the computer-readable instructions 129. In at least some embodiments, execution of the computer-readable instructions causes the second processor 122 to examine the second data stream 114 and determine if the second data stream 114 contains any errors such as invalid commands, addresses, data, etc. If the second processor 122 detects an error in the second data stream 114 (or if the second data stream 114 is not provided), the second processor 120 may assert a signal (“H2” or “health of master 2”) to the first processor 120 that indicates when the second master device 104 is not functioning correctly.
  • Execution of the computer-readable instructions 129 may further cause the second processor 122 to assert signals (shown as “X1” and “X2” in FIG. 2) to the first processor 120 when the second master device 104 transmits mastership transfer commands to the second processor 122 via the second data stream 114. As described previously, two mastership transfer commands referred to as the 1-to-2 command and the 2-to-1 command may be implemented.
  • In similarity to the first master device 102, the second master device 104 may be configured to execute various applications in addition to providing the second data stream 114. Therefore, if the second master device 104 is overburdened with tasks, occupied with performing a high priority task, or is otherwise unable to satisfactorily provide the second data stream 114 to a slave device, the second master device 104 may send the 2-to-1 command to the second processor 122. In response to receiving the 2-to-1 command, the second processor 122 may assert the X1 (transfer to master 1) signal to the first processor 120. In response to the asserted the X1 signal, the first processor 120 may de-assert the signal 135, thereby causing the switching device 124 to transfer mastership from the second master device 104 to the first master device 102.
  • Alternatively, the second master device 104 may send the 1-to-2 command to the second processor 122. For example, the 1-to-2 command may be sent when the second master device 104 examines a data stream (e.g., the data stream 118 shown in FIG. 1) from the slave device and determines that the first master device 102 is not effectively communicating with and/or controlling the slave device. In response to receiving the 1-to-2 command, the second processor 122 may assert the X2 (transfer to master 2) signal to the first processor 120. In response to the asserted X2 signal, the first processor 120 may assert the signal 135, thereby causing the switching device 124 to transfer mastership from the first master device 102 to the second master device 104.
  • In at least some embodiments, execution of the computer-readable instructions 127 may cause the first processor 120 to sample the H2, X1, and X2 signals at a programmable rate (e.g., once every second). After the first processor 120 has sampled the H2, X1, and X2 signals, a reset signal (“RS”) may be transmitted to the second processor 122, which may cause the second processor 122 to reset (de-assert) any asserted H2, X1, and X2 signal. The assertion or reassertion of the H2, X1, and X2 signals may occur as described above.
  • In summary, the first processor 120 may consider several factors, such as those described above, to manage the switching device 124 such that the first data stream 112 or the second data stream 114 is forwarded to the subsea tool 110. In at least some embodiments, the first processor 120 may manage the switching device 124 according to a prioritization of the health (functional condition) of the master devices 102 and 104, the mastership transfer commands received from the master devices 102 and 104, and timing considerations.
  • The health of the master devices 102 and 104 may be given first priority and may be indicated to the first processor 120 according to an examination of the first data stream 112 and the H2 signal described above. The mastership transfer commands may be given second priority and may be indicated to the first processor 120 according to the 1-to-2 command, the 2-to-1 command, the X1 signal, and the X2 signal described above. The timing considerations may be given third priority and may be indicated to the first processor 120 by timers that are controlled according to the computer-readable instructions 127. Preferably, the timing considerations permit the first processor 120 to control the switching device 124 such as to maximize the amount of time during which the slave device receives valid commands and/or data.
  • In particular, the timing considerations may be beneficial when both of the data streams 112 and 114 are indicated to be invalid. In such case, the downtime of communication between the master devices 102 and 104 and the slave device may be minimized by successively switching between transferring the first data stream 112 and the second data stream 114 until one of the data streams 112 and 114 is determined to be valid. Thereafter, the valid data stream may be forwarded until the switching device 124 is instructed otherwise.
  • The timing considerations also may be beneficial when multiple mastership transfer commands are received within a threshold amount of time. In such case, it may not be desirable to switch back and forth between forwarding the first data stream 112 and the second data stream 114. For example, if the both of the data streams 112 and 114 are valid, then switching between forwarding the first data stream 112 and the second data stream 114 may result in a lower data transfer rate than would exist otherwise. The lower data transfer rate may result from latency associated with operating the switching device 124. Therefore, the timing considerations may prevent mastership transfer commands from being performed if doing so is calculated to improve the overall efficiency of communicating to the slave device.
  • As shown in FIG. 2, the redundancy manager 106 also may comprise monitoring units 132 and 136. The monitoring units 132 and 136 may comprise one or more electrical-based indicators 134. For example, the electrical-based indicators 134 may comprise light emitting diodes (LEDs). The indicators 134 preferably permit a user to easily inspect the various functions of the redundancy manager 106. For example, the monitoring unit 132 may comprise indicators 134 associated with the health of the first master device 102 (“H1”), the health of the second master device 104 (“H2”), the health of the first processor 120 (“HP1”), the health of the second processor 122 (“HP2”), the first data stream 112 being forwarded (“F1”), and the second data stream 114 being forwarded (“F2”). The monitoring unit 136 may comprise an indicator 134 associated with the assertion and de-assertion of the signal 135 (“SW”).
  • FIG. 3 illustrates another petroleum mining system 150 in accordance with preferred embodiments of the invention. As shown in FIG. 3, the system 150 may comprise a first master device 102 and a second master device 104 each coupled to two redundancy managers 106A and 106B. The redundancy managers 106A and 106B may each couple to a modem (“MODEM A1108A and “MODEM B1108B respectively). The modems 108A and 108B may couple to a subsea tool 180 via the conductors 116A and 116B. The master devices 102 and 104, the redundancy managers 106A and 106B, and the modems 108A and 108B may function in the same or similar fashion as the master devices 102 and 104, the redundancy manager 106, and the modem 108 described in FIGS. 1 and/or 2.
  • The exemplary embodiment of FIG. 3 illustrates that an increased number of data paths (i.e., paths associated with first data stream 112, the second data stream 114, the RMO data, and the data stream 118) may be implemented to further increase the reliability of successful communication to the subsea tool 180.
  • FIG. 4 illustrates a dual-redundant tool 180 that may be implemented with the system 150 of FIG. 3. As shown in FIG. 4, the tool 180 may comprise a modem (“MODEM A2”) 182A that is operable to receive a signal from the MODEM A1 108A. The tool 180 may further comprise a modem (“MODEM B2”) 182B that is operable to receive a signal from the MODEM B1 108B. The modems 182A and 182B may digitize, demodulate, and decode data streams received from the master devices 102 and 104. The data streams may be provided to sensors 184A and 184B. The sensors 184A and 184B are preferably independent from each other and provide sensor data in response to environment input. The sensor data may be transmitted to the master devices 102 and 104 via the modems 108A and 108B. The data streams also may be provided to controllers 186A and 186B. The controllers 186A and 186B are preferably independent from each other and may be associated with valves, actuators, motors, or other functions of the tool 180. As shown, the controllers 186A and 186B may receive analog input signals and may provide an output function (e.g., controlling a drill, actuator, valve, or other device).
  • FIG. 5 illustrates a method 500 in accordance with preferred embodiments of the invention. As shown in FIG. 5, the method 500 may comprise receiving a plurality of data streams from two or more master devices (block 502). The method 500 further comprises checking the validity of the data streams at block 504. If there is not a valid data stream as determined at block 506, the data streams may be forwarded in a cycled (switching back and forth) fashion (block 508). For example, the data streams may be forwarded via a relay that is able to forward one of the plurality of data streams at a time according to a setting of the relay. If none of the data streams are valid, the relay may forward each data stream in turn according to a predetermined pattern and timing. The method 500 may then return to block 506 to determine if there is a valid data stream.
  • When a data stream is valid as determined at block 506, a relay may be set to forward the valid data stream (block 510). Thereafter, a determination is made as to whether a request to transfer mastership to a healthy master has occurred (block 512). If, at block 512, a determination is made that no request to transfer mastership to a healthy master has occurred, the valid data stream may be forwarded via the relay (block 518). If, at block 512, a determination is made that a request to transfer mastership to a healthy master has occurred, then a determination is made as to whether the request to transfer mastership to a healthy master occurred within a threshold amount of time (block 514).
  • If, at block 514, a determination is made that the request to transfer mastership to a healthy master occurred within the threshold amount of time, the valid data stream may be forwarded via the relay (block 518). If, at block 514, a determination is made that the request to transfer mastership to a healthy master did not occur within the threshold amount of time, the relay may be set to transfer mastership according to the request (block 516). Thereafter, a valid data stream (from a healthy master device having mastership) may be forwarded via the relay (block 518). The method 500 may be repeated continually to provide efficient, redundant communication from the master devices to one or more slave devices.
  • The above discussion is meant to be illustrative of the principles and various embodiments of the present invention. Numerous other variations and modifications will become apparent to those skilled in the art once the above disclosure is fully appreciated. It is intended that the following claims be interpreted to embrace all such variations and modifications.

Claims (21)

1-27. (canceled)
28. A system, comprising:
a modem; and
a data redundancy manager coupled to the modem;
wherein the data redundancy manager is configured to receive a plurality of data streams and to select only one of said data streams to forward to the modem based on a validity status for each data stream,
wherein the data redundancy manager is configured to analyze each data stream to determine its validity status.
29. The system of claim 28 wherein the data redundancy manager is configured to detect a request embedded in a first data stream being forwarded to switch to a second data stream.
30. The system of claim 29 wherein the data redundancy manager is configured to check the validity status of the second data stream before completing said request.
31. The system of claim 30 wherein, if the validity status of the second data stream is positive, the data redundancy manager begins forwarding the second data stream.
32. The system of claim 30 wherein, if the validity status of the second data stream is negative, the data redundancy manager continues to forward the first data stream.
33. The system of claim 28 wherein the data redundancy manager is configured to detect a request embedded in a non-forwarded data stream to begin forwarding the non-forwarded data stream and wherein the data redundancy manager selectively complies with the request based on the determined validity status for the non-forwarded data stream.
34. The system of claim 28 wherein the data redundancy manager is configured to limit switching between said data streams to less than a predetermined switch rate even if requests to switch data streams are received at a rate greater than the predetermined switch rate.
35. The system of claim 28 wherein, if the determined validity status of all data streams is negative, the data redundancy manager is configured is configured to switch between forwarding different data streams at a predetermined switch rate.
36. The system of claim 28 wherein the data redundancy manager is configured to analyze said data streams to determine each validity status and to detect any switch requests embedded in said data streams without altering the data streams.
37. The system of claim 28 wherein the data redundancy manager is configured to analyze said data streams to determine each validity status and to detect any switch requests embedded in said data streams without buffering the data streams.
38. The system of claim 28 further comprising a remote tool coupled to the modem, wherein each data stream selectively comprises commands to the remote tool and switch commands that are recognized by the data redundancy manager, but not the remote tool.
39. A method, comprising:
receiving, by a data redundancy manager, a plurality of data streams;
analyzing, by the data redundancy manager, each data stream to detect its validity status;
forwarding, by the data redundancy manager, one of said data stream based on the validity status for each data stream.
40. The method of claim 39 further comprising detecting a request embedded in a first data stream being forwarded to switch to a second data stream.
41. The method of claim 40 further comprising checking the validity status of the second data stream before completing said request.
42. The method of claim 41 wherein, if the validity status of the second data stream is positive, forwarding the second data stream in response to the request.
43. The method of claim 41 wherein, if the validity status of the second data stream is negative, ignoring the request and continue forwarding the first data stream.
44. The method of claim 39 further comprising detecting a request embedded in a non-forwarded data stream to begin forwarding the non-forwarded data stream and complying with the request based on the detected validity status for the non-forwarded data stream.
45. The method of claim 39 further comprising limiting switching between said data streams to less than a predetermined switch rate even if requests to switch data streams are received at a rate greater than the predetermined switch rate.
46. The method of claim 39 wherein, if the detected validity status of all data streams is negative, switching back and forth between forwarding two different data streams at a predetermined switch rate until one of the two data streams is detected to have a positive validity status.
47. The method of claim 39 wherein analyzing said data streams to determine each validity status and to detect any switch requests embedded in said data streams is performed with out altering and without buffering the data streams.
US12/835,463 2004-04-15 2010-07-13 Systems and Methods of Providing Redundant Communication to an Electronic Device Abandoned US20100281099A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US12/835,463 US20100281099A1 (en) 2004-04-15 2010-07-13 Systems and Methods of Providing Redundant Communication to an Electronic Device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US10/825,337 US7768908B2 (en) 2004-04-15 2004-04-15 Systems and methods of providing redundant communication to an electronic device
US12/835,463 US20100281099A1 (en) 2004-04-15 2010-07-13 Systems and Methods of Providing Redundant Communication to an Electronic Device

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US10/825,337 Continuation US7768908B2 (en) 2004-04-15 2004-04-15 Systems and methods of providing redundant communication to an electronic device

Publications (1)

Publication Number Publication Date
US20100281099A1 true US20100281099A1 (en) 2010-11-04

Family

ID=34620786

Family Applications (2)

Application Number Title Priority Date Filing Date
US10/825,337 Active 2027-06-27 US7768908B2 (en) 2004-04-15 2004-04-15 Systems and methods of providing redundant communication to an electronic device
US12/835,463 Abandoned US20100281099A1 (en) 2004-04-15 2010-07-13 Systems and Methods of Providing Redundant Communication to an Electronic Device

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/825,337 Active 2027-06-27 US7768908B2 (en) 2004-04-15 2004-04-15 Systems and methods of providing redundant communication to an electronic device

Country Status (3)

Country Link
US (2) US7768908B2 (en)
BR (1) BRPI0501310A (en)
GB (1) GB2413247B (en)

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7768908B2 (en) * 2004-04-15 2010-08-03 Cameron International Corporation Systems and methods of providing redundant communication to an electronic device
US20070058530A1 (en) * 2005-09-14 2007-03-15 Sbc Knowledge Ventures, L.P. Apparatus, computer readable medium and method for redundant data stream control
US8149133B2 (en) * 2006-10-20 2012-04-03 Hydril Usa Manufacturing Llc MUX BOP database mirroring
DE102008037610A1 (en) * 2008-01-07 2009-07-09 Fachhochschule Rosenheim Device and method for the selective switching of two masters for assigned slaves
TWI350453B (en) * 2008-06-13 2011-10-11 Phison Electronics Corp Method, system and controller thereof for transmitting and dispatching data stream
DE102009050449C5 (en) * 2009-10-23 2012-11-15 Siemens Aktiengesellschaft Automation system and method for operating an automation system
US8708054B2 (en) * 2009-12-09 2014-04-29 Schlumberger Technology Corporation Dual path subsea control system
EP2466405A1 (en) * 2010-12-15 2012-06-20 Siemens Aktiengesellschaft Control system for an industrial device with optional switching to different central units
EP2543811A1 (en) 2011-07-06 2013-01-09 Vetco Gray Controls Limited Subsea electronics module
WO2013128499A1 (en) * 2012-02-27 2013-09-06 パナソニック株式会社 Master device, communication system, and communication method
GB2514150B (en) * 2013-05-15 2016-05-18 Aker Subsea Ltd Subsea connections
EP2924928B1 (en) * 2014-03-25 2019-07-17 Siemens Aktiengesellschaft Receiver network component for operation in a communication network and method for operation of a communication network
EP2993548B1 (en) * 2014-08-06 2023-09-06 Siemens AG Österreich Control of a voltage feed-in
US10196871B2 (en) 2014-09-30 2019-02-05 Hydril USA Distribution LLC Sil rated system for blowout preventer control
US10876369B2 (en) * 2014-09-30 2020-12-29 Hydril USA Distribution LLC High pressure blowout preventer system
EP3026513B1 (en) * 2014-11-28 2018-01-03 Siemens Aktiengesellschaft Redundant automation system and method for operating same
KR101704787B1 (en) * 2014-12-31 2017-02-22 주식회사 효성 Dual apparatus for controller
DE102015208836B4 (en) * 2015-05-12 2017-01-05 Trumpf Werkzeugmaschinen Gmbh + Co. Kg Device, system and method for communication bus control
WO2016180550A1 (en) * 2015-05-12 2016-11-17 Siemens Ag Österreich Method for updating components in automation systems
DE102017010691B4 (en) * 2017-11-18 2019-05-29 WAGO Verwaltungsgesellschaft mit beschränkter Haftung Secure transmission of data in an automation system
US11144358B1 (en) 2018-12-06 2021-10-12 Pure Storage, Inc. Asynchronous arbitration of shared resources
DE102020127804B4 (en) * 2020-10-22 2022-05-05 Beckhoff Automation Gmbh Automation system with a master-slave structure and method for telegram transmission
CN114765591B (en) * 2020-12-31 2023-07-18 大唐移动通信设备有限公司 Data transmission method, device and storage medium
CN113867126B (en) * 2021-09-30 2023-10-03 南京国电南自维美德自动化有限公司 Real-time control system synchronization performance test method and system with redundancy mechanism

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4812840A (en) * 1987-06-29 1989-03-14 Ncr Corporation Multiple mode switching means
US5038318A (en) * 1987-12-17 1991-08-06 Square D Company Device for communicating real time data between a programmable logic controller and a program operating in a central controller
US5907485A (en) * 1995-03-31 1999-05-25 Sun Microsystems, Inc. Method and apparatus for flow control in packet-switched computer system
US6023730A (en) * 1996-09-13 2000-02-08 Digital Vision Laboratories Corporation Communication system with separate control network for managing stream data path
US6757777B1 (en) * 1998-04-03 2004-06-29 Siemens Aktiengesellschaft Bus master switching unit
US6910078B1 (en) * 2001-11-15 2005-06-21 Cisco Technology, Inc. Methods and apparatus for controlling the transmission of stream data
US20050204084A1 (en) * 2004-02-20 2005-09-15 Kee-Won Joe Bus system and method thereof
US7068712B1 (en) * 2000-01-18 2006-06-27 Cisco Technology, Inc. Cable network redundancy architecture
US7768908B2 (en) * 2004-04-15 2010-08-03 Cameron International Corporation Systems and methods of providing redundant communication to an electronic device

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3158517B2 (en) 1991-08-26 2001-04-23 富士通株式会社 Failure detection method
GB9212685D0 (en) * 1992-06-15 1992-07-29 Flight Refueling Ltd Data transfer
US6116345A (en) * 1995-03-10 2000-09-12 Baker Hughes Incorporated Tubing injection systems for oilfield operations
US20020101888A1 (en) * 2001-02-01 2002-08-01 Keck Steven W. Method and system for controlling the flow of data in a base transceiver station

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4812840A (en) * 1987-06-29 1989-03-14 Ncr Corporation Multiple mode switching means
US5038318A (en) * 1987-12-17 1991-08-06 Square D Company Device for communicating real time data between a programmable logic controller and a program operating in a central controller
US5907485A (en) * 1995-03-31 1999-05-25 Sun Microsystems, Inc. Method and apparatus for flow control in packet-switched computer system
US6023730A (en) * 1996-09-13 2000-02-08 Digital Vision Laboratories Corporation Communication system with separate control network for managing stream data path
US6757777B1 (en) * 1998-04-03 2004-06-29 Siemens Aktiengesellschaft Bus master switching unit
US7068712B1 (en) * 2000-01-18 2006-06-27 Cisco Technology, Inc. Cable network redundancy architecture
US6910078B1 (en) * 2001-11-15 2005-06-21 Cisco Technology, Inc. Methods and apparatus for controlling the transmission of stream data
US20050204084A1 (en) * 2004-02-20 2005-09-15 Kee-Won Joe Bus system and method thereof
US7768908B2 (en) * 2004-04-15 2010-08-03 Cameron International Corporation Systems and methods of providing redundant communication to an electronic device

Also Published As

Publication number Publication date
US20050232145A1 (en) 2005-10-20
GB2413247B (en) 2008-08-06
US7768908B2 (en) 2010-08-03
BRPI0501310A (en) 2006-11-28
GB2413247A (en) 2005-10-19
GB0507539D0 (en) 2005-05-18

Similar Documents

Publication Publication Date Title
US20100281099A1 (en) Systems and Methods of Providing Redundant Communication to an Electronic Device
US8082373B2 (en) Specialized universal serial bus controller
KR0121880B1 (en) A series controller
US8281189B2 (en) SATA primitive prediction and correction
US8290103B2 (en) Method for transmitting parallelization signals of uninterruptible power supplies
US20130132625A1 (en) Methods and devices for extending usb 3.0-compliant communication
US6845274B2 (en) Communication port control module for lighting systems
CN1901436A (en) System and method for providing data communication between computing nodes
US9217326B2 (en) Systems and methods for implementing different modes of communication on a communication line between surface and downhole equipment
CN100553256C (en) A kind of monobus communication means of a plurality of node equipment interconnections
GB2440867A (en) A plurality of redundant devices each send a data stream, and one of the streams is selected to be forwarded, the selection being based on several factors
US10476504B1 (en) Signal interface system and data transmission method thereof
CN1316387C (en) Series interface bus communications controller
US8533307B2 (en) Method and device for monitoring a data transmission
CN109144937B (en) High-reliability transmission method for multi-path serial port
CN101053188A (en) Infrared adapter with data packet throttle
JP2007026101A (en) Power supply controller
CN103229159A (en) Smart aging retry buffer
WO2002008912A2 (en) Ground level shift detection in can systems
KR100525677B1 (en) Apparatus and method for duplication of communication control module
Jose An FPGA implementation of 1553 protocol controller
CN1964300A (en) A readable-writable communication controller of serial interface bus
CN1159859C (en) Reset bus and interface apparatus
JP2720513B2 (en) Communication method and communication system device used for the communication method
CN1964302A (en) A communication controller of serial interface bus with SPI interface

Legal Events

Date Code Title Description
AS Assignment

Owner name: ONESUBSEA IP UK LIMITED, ENGLAND

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ONESUBSEA, LLC;REEL/FRAME:035135/0474

Effective date: 20141205

Owner name: ONESUBSEA, LLC, TEXAS

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:CAMERON INTERNATIONAL CORPORATION;REEL/FRAME:035134/0239

Effective date: 20130630

STCB Information on status: application discontinuation

Free format text: ABANDONED -- AFTER EXAMINER'S ANSWER OR BOARD OF APPEALS DECISION

AS Assignment

Owner name: ONESUBSEA IP UK LIMITED, ENGLAND

Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE PATENT NO. 8385005 PREVIOUSLY RECORDED ON REEL 035135 FRAME 0474. ASSIGNOR(S) HEREBY CONFIRMS THE CORRECT PATENT NO. IS 8638005;ASSIGNOR:ONESUBSEA, LLC;REEL/FRAME:039505/0298

Effective date: 20141205

Owner name: ONESUBSEA, LLC, TEXAS

Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE INCORRECT PATENT NO. 8385005 PREVIOUSLY RECORDED AT REEL: 035134 FRAME: 0239. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT;ASSIGNOR:CAMERON INTERNATIONAL CORPORATION;REEL/FRAME:039515/0224

Effective date: 20130630