Building system with brokering architecture to provide bump-less failover and replay
AssigneeTyco Fire & Security GmbH
InventorsAndrew J. Przybylski, Jon T. Mueller, John H. Burroughs
Life of this patent
Estimating the term…
Abstract
A distributed control system with bump-less failover and replay capability is disclosed. The distributed control system stores the state of each control application in a separate storage system. Each time the control applications runs it can store the results of the calculations required for a subsequent calculation. When a compute environment running the control applications fails another environment can begin performing the same operations. Replay capability is provided to facilitate the investigation of the control application's execution.
Claims20
One or more non-transitory memory devices having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
- operating a first isolated compute environment during a first time period to perform a first set of calculations related to control of a building, to send results of the first set of calculations, and to send commands to an input-output module to apply to the building;
- operating an additional plurality of isolated compute environments to, in combination, perform a second set of calculations related to the control of the building and send results of the second set of calculations;
- operating a second isolated compute environment to store the results of the first set of calculations and the results of the second set of calculations and to receive measurements from the input-output module;
- instructing a failover set of isolated compute environments from the additional plurality of isolated compute environments to perform the first set of calculations during a second time period in response to the first isolated compute environment encountering a failure when performing the first set of calculations during the first time period;
- and
- operating the first isolated compute environment to receive, from the input-output module, a third time period for which it was not applying the commands.
A method for providing disturbance-free control of a building after failure of a control device, the method comprising:
- operating a first isolated compute environment during a first time period to perform a first set of calculations related to control of the building and send results of the first set of calculations;
- instructing a failover set of isolated compute environments to perform the first set of calculations during a second time period in response to the first isolated compute environment encountering a failure when performing the first set of calculations during the first time period;
- applying outputs to the building with an input-output module;
- determining a start of a third time period during which the input-output module was not applying the outputs;
- determining a first output of the input-output module at the start of the third time period;
- and
- determining an initial action predicted to produce a second output that satisfies a similarity criterion with the first output when the initial action is performed by the input-output module.
A method for providing disturbance-free control of a building after failure of a control device, the method comprising:
- operating a first isolated compute environment during a first time period to perform a first set of calculations related to control of a building, to send results of the first set of calculations, and to send commands to an input-output module to apply to the building;
- operating an additional plurality of isolated compute environments to, in combination, perform a second set of calculations related to the control of the building and send results of the second set of calculations;
- operating a second isolated compute environment to store the results of the first set of calculations and the results of the second set of calculations and to receive measurements from the input-output module;
- instructing a failover set of isolated compute environments from the additional plurality of isolated compute environments to perform the first set of calculations during a second time period in response to the first isolated compute environment encountering a failure when performing the first set of calculations during the first time period;
- and
- operating the first isolated compute environment to receive, from the input-output module, a third time period for which it was not applying the commands.
Dependencies are inferred from the claim text.