CAN-FD redundancy for high availability industrial I/O subsystems

Patent metadata

Field	Value
Publication number	US-12567994-B2
Application number	US-202418812210-A
Country	US
Kind code	B2
Filing date	Aug 22, 2024
Priority date	Aug 22, 2024
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Controller Area Network with Flexible Data Rate (CAN-FD) system and method providing high availability, redundant process control I/O. A server device coupled to dual CAN-FD busses generates a SYNC message designating one of the dual busses as active and another one as backup. The server device transmits the SYNC message on the active bus and then immediately transmits the SYNC message on the backup bus. A client device coupled to the dual busses transmits process data frames on the busses in response to the SYNC message. Each of the process data frames includes a sequence number for the current communication cycle and indicates on which of the dual busses the process data frame is being transmitted.

First claim

The invention claimed is:

1 . A method for providing a Controller Area Network with Flexible Data Rate (CAN-FD) high availability, redundant process control input/output (I/O) bus, comprising:
generating a SYNC message by a server device coupled to dual CAN-FD busses, wherein one of the dual CAN-FD busses is designated an active bus and another one of the dual CAN-FD busses is designated a backup bus; transmitting the SYNC message on the active bus and then transmitting the SYNC message on the backup bus, wherein the SYNC message begins a current communication cycle during which communication on the dual CAN-FD busses occurs, and wherein the SYNC message indicates which of the dual CAN-FD busses is the active bus for the current communication cycle; and transmitting one or more process data frames on the dual CAN-FD busses by a client device coupled thereto in response to the SYNC message, wherein each of the process data frames includes a sequence number for the current communication cycle, and wherein each of the process data frames indicates on which of the dual CAN-FD busses the process data frame is being transmitted; and wherein the process data frame received first via either the active bus or the backup bus and having a correct sequence number is processed and the process data frame received later via the other of either the active bus or the backup bus and having the correct sequence number is deleted.

2 . The method of claim 1 , further comprising implementing a frame timeout when transmission of a first process data frame of the process data frames fail on both of the dual CAN-FD busses before beginning transmission of a next process data frame of the process data frames.

3 . The method of claim 1 , further comprising deleting any of the process data frames having an incorrect sequence number received via either the active bus or the backup bus.

4 . The method of claim 1 , further comprising segmenting the current communication cycle into a first window during which the client device is permitted to transmit the process data frames and a second window during which the server device is permitted to transmit the process data frames.

5 . The method of claim 4 , wherein segmenting the current communication cycle comprises performing a time division of a CAN-FD bandwidth.

6 . The method of claim 4 , wherein segmenting the current communication cycle comprises further segmenting the current communication cycle into a third window during which non-sequence numbered universal service data object (USDO) frames are permitted to be transmitted or received via the active bus, the third window following the first and second windows.

7 . The method of claim 1 , further comprising determining health of both of the dual CAN-FD busses by the server device based on the process data frames received from the client device in a previous communication cycle.

8 . The method of claim 7 , further comprises switching the one of the dual CAN-FD busses designated the active bus and the other one of the dual CAN-FD busses designated the backup bus based on the determined the health thereof and transmitting a next SYNC message to begin a next communication cycle during which communication on the dual CAN-FD busses occurs, wherein the next SYNC message switches which of the dual CAN-FD busses is the active bus for the next communication cycle.

9 . The method of claim 1 , further comprising detecting incorrect coupling of the client device to the dual CAN-FD busses by verifying the process data frames are received on the active bus or on the backup bus as indicated in the process data frames.

10 . The method of claim 1 , wherein the server device comprises a main server device and further comprising redundantly generating the SYNC message by a backup server device coupled to the dual CAN-FD busses and interlinked with the main server device.

11 . The method of claim 1 , wherein the client device comprises a main client device and further comprising redundantly transmitting the process data frames by a backup client device coupled to the dual CAN-FD busses and interlinked with the main client device.

12 . A Controller Area Network with Flexible Data Rate (CAN-FD) system for providing high availability, redundant process control input/output (I/O), comprising:
dual CAN-FD busses; a server device coupled to the dual CAN-FD busses, the server device generating a SYNC message for beginning a current communication cycle during which communication on the dual CAN-FD busses occurs, the SYNC message designating one of the dual CAN-FD busses as an active bus and another one of the dual CAN-FD busses as a backup bus, the SYNC message further indicating which of the dual CAN-FD busses is the active bus for the current communication cycle, the server device transmitting the SYNC message on the active bus and then transmitting the SYNC message on the backup bus; and a client device coupled to the dual CAN-FD busses, the client device transmitting one or more process data frames on the dual CAN-FD busses in response to the SYNC message, each of the process data frames including a sequence number for the current communication cycle, and each of the process data frames indicating on which of the dual CAN-FD busses the process data frame is being transmitted; and wherein the process data frame received first via either the active bus or the backup bus and having a correct sequence number is processed and the process data frame received later via the other of either the active bus or the backup bus and having the correct sequence number is deleted.

13 . The system of claim 12 , wherein the current communication cycle comprises a frame timeout when transmission of a first process data frame of the process data frames fail on both of the dual CAN-FD busses before beginning transmission of a next process data frame of the process data frames.

14 . The system of claim 12 , wherein any of the process data frames having an incorrect sequence number received via either the active bus or the backup bus are deleted.

15 . The system of claim 12 , wherein the current communication cycle comprises a first window during which the client device is permitted to transmit the process data frames and a second window during which the server device is permitted to transmit the process data frames.

16 . The system of claim 15 , wherein the current communication cycle is segmented into the first and second windows based on a time division of a CAN-FD bandwidth.

17 . The system of claim 15 , wherein the current communication cycle further comprises a third window during which non-sequence numbered universal service data object (USDO) frames are permitted to be transmitted or received via the active bus, the third window following the first and second windows.

18 . The system of claim 12 , the server device determines health of both of the dual CAN-FD busses based on the process data frames received from the client device in a previous communication cycle.

19 . The system of claim 18 , wherein the server device switches the one of the dual CAN-FD busses designated the active bus and the other one of the dual CAN-FD busses designated the backup bus based on the determined the health thereof and transmits a next SYNC message to begin a next communication cycle during which communication on the dual CAN-FD busses occurs, the next SYNC message switching which of the dual CAN-FD busses is the active bus for the next communication cycle.

20 . The system of

Assignees

• Schneider Electric Systems Usa Inc

Inventors

• Kimber Kevin
• Caperon Matthew

Classifications

• H04L12/4013

  Management of data rate on the bus (systems modifying transmission characteristics according to link quality H04L1/0001) · CPC title

• H04L2012/40215

  Controller Area Network CAN · CPC title

• H04L12/40189 Primary

  by using a plurality of bus systems · CPC title

• H04L12/40182 Primary

  by using a plurality of communication lines · CPC title