【摘要】 针对控制系统易受单粒子翻转影响，导致存储单元比特位翻转引发程序执行异常的问题，现有方法在可用性、安全性和执行效率上仍显不足。文中提出动态二乘二取二冗余(double 2-vote-2 redundancy, D2V2R)软件架构。系统硬件采用双模冗余架构，当系统发现故障时，子系统从单任务动态切换到冗余任务计算，从而保证系统的安全性和可用性。通过马尔可夫模型对该系统架构和传统方法进行了建模和对比分析，通过仿真实验验证，在无故障时，动态D2V2R软件架构的执行效率较静态D2V2R架构提高36%。在发生随机比特位翻转时，动态D2V2R软件架构的系统可用性较双模冗余架构从72.75%提高至98.79%。理论与实验表明：动态D2V2R软件架构在可用性、安全性和执行效率上具有显著优势，适用于高要求控制系统。更多还原

【Abstract】 To address the vulnerability of control systems to single-event upsets causing bit flips in memory and program execution errors, the current methods still show shortcomings in terms of usability, security, and execution efficiency.A dynamic double two-vote-two redundancy software architecture was proposed.The system employed a dual-modular redundancy hardware framework, dynamically switching from single-task to redundant task computation upon fault detection, ensuring safety and availability of the system.The system architecture and traditional methods were modeled and compared through Markov model.Simulation results show a 36% improvement in execution efficiency of the dynamic D2V2R software architecture over the static version under fault-free conditions.Under random bit-flip conditions, the system’s availability of the D2V2R software architecture increases from 72.75% to 98.79% compared to dual-modular redundancy.Theoretical and experimental findings confirm the significant advantages of the dynamic D2V2R software architecture in availability, safety, and execution efficiency, making it well-suited for high-demand control systems.更多还原