TW201122745A - Dual system control device - Google Patents

Dual system control device Download PDF

Info

Publication number
TW201122745A
TW201122745A TW99117365A TW99117365A TW201122745A TW 201122745 A TW201122745 A TW 201122745A TW 99117365 A TW99117365 A TW 99117365A TW 99117365 A TW99117365 A TW 99117365A TW 201122745 A TW201122745 A TW 201122745A
Authority
TW
Taiwan
Prior art keywords
self
control
diagnosis
dual
control device
Prior art date
Application number
TW99117365A
Other languages
Chinese (zh)
Other versions
TWI434159B (en
Inventor
Yasuhiro Iida
Original Assignee
Mitsubishi Electric Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mitsubishi Electric Corp filed Critical Mitsubishi Electric Corp
Publication of TW201122745A publication Critical patent/TW201122745A/en
Application granted granted Critical
Publication of TWI434159B publication Critical patent/TWI434159B/en

Links

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00Safety arrangements
    • G05B9/02Safety arrangements electric
    • G05B9/03Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16Error detection or correction of the data by redundancy in hardware
    • G06F11/20Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • Safety Devices In Control Systems (AREA)
  • Hardware Redundancy (AREA)

Abstract

This invention provides a dual system control device containing a control system (A) having a self-diagnosing function and another control system (B) which is duplicated with the control system (A) and also has a self-diagnosing function. When one of the two control systems operates as a real control system to control an object, the other operates as a system which performs a self-diagnosing, and thus the real control system and the system which perform the self-diagnosing are switched in the way the two systems alternatingly perform the self-diagnosing. Therefore, the diagnosing of the field in which a self-diagnosing could not be performed during a control system was operating in a conventional art can be performed.

Description

201122745 . 六、發明說明: 【發明所屬之技術領域】 本發明係有關一種於例如發電所等所利用的機具設 備(plant)控制裝置。 ~ 【先前技術】 一般而言’於習知的待機冗餘構成的機具設備控制裝 置,為了檢測控制裝置的異常而進行自我診斷。此種自我 診斷’係藉由自我系統的硬體(hardware)及軟體(s〇ftware) 的異常、輸入訊號的上下限異常、以及演算結果異常等來 進行做判斷。尤其是’在雙重系統構成的控制裝置中,其 系統切換係如第10圖所示’一般而言是以在雙重化的控制 系統的任一者的異常檢測為契機而實施。於專利文獻ι所 記載的是,將如此的切換條件作為前提所提出的雙重系統 控制裝置(例如專利文獻1)。 (先前技術文獻) (專利文獻) 專利文獻1 :日本特開平8_1235〇3公報(第3頁, 2圖) ^ 【發明内容】 (發明欲解決之課題) 習知的雙重系統控制裳置,存在有以下課題:為了一 邊進行機具設備的控制一邊實施自我診斷,而留下有主飞 憶體(main memory)等無法自我診斷的區域,此部分圮 只能在定期維瘦時等以離線(offline )診斷。 '、 322037 201122745 本發明係為了解決前述問題所研創者,其目的係提供 一種雙重系統控制裝置,即使在控制中,同樣可診斷習知 中無法自我診斷的區域,可縮短自我診斷的週期,且有高 的安全水準。 ' (解決課題的手段) 本發明的雙重系統控制裝置,係包括:具有自我診斷 功能的控制系統;以及與該控制系統共同雙重化,具有自 我診斷功能的另一個控制系統,其中,上述兩控制系統的 一方作為執行控制對象的實際控制系統運作時,另一方係 作為進行自我診斷的系統而運作,且進行實際控制的系統 及進行自我診斷的系統係交互地切換,兩系統交互地進行 自我診斷。 (發明的效果) 本發明的雙重系統控制裝置,係在上述兩控制系統的 一方作為將控制對象進行實際控制的系統運作時,另一方 係作為進行自我診斷的系統運作,進行實際控制的系統與 進行自我診斷的系統係交互地切換,且兩系統係交互地進 行自我診斷,故使得習知上只能以離線診斷的區域之自我 診斷,變為可以在系統全體運作中實施。於是,由於自我 診斷的範圍擴大,且可縮短自我診斷的週期,故可得到提 升安全性水準的效果。 【實施方式】 (第一實施形態) 以下,依據圖式說明本發明的雙重系統控制裝置之第f 4 322037 201122745 一貫施形態。第1圖係本發明的雙重系統控制裝置的第一 貫施形態的雙重系統控制裝置概略構成圖。於第〗圖,雙 重系統控制裝置係藉由為控制系統的人系統以及為另一控 制系統的B系統所雙重化構成。這些控制系統a&b,係 分別具有進行演算處理等的cpu (中央處理器,eemral processing unit) ΙΑ,1B、連接於這些cpu的記憶體2A, 2B、連接至各個CPU,將來自控制對象的輸入資訊傳達至 這些CPU的輸入控制部3A,3B、以及控制輸出至輸出控 制裝置7的輸出資訊的輸出控制部4A,4B。將這些輸入 控制部3A及3B與輸出控制部4A及4B連接至透過系統 切換指不訊號進行系統切換的切換裝置5,藉以將A系統 或B系統的任一者的輸出資訊,經由輸出裝置了輸出至未 圖不的控制對象,而來自控制對象的輸人資訊,則經由輸 入裝置6輸入至a系統或B系統的任一者。 接著,說明關於雙重系統控制裝置的運作。第2圖係 顯示本發明的雙重系統控制裝置的第一實施形態的運作概 要概念圖。於第2圖,為方便起見’將A系統當作在時間 序列的起點時進行實際控制的系統(以下,稱為實際控制 系統j ’而將B系統當作在時間序列的起點時進行自我診 斷的系統(以下,稱為自我診斷系統)以分別進行實於^ 制或自我診斷者。如苐2圖所示,於第一實施形態,二: 的切換係在同時間點進行。第3圖係詳細地顯示兩 系統的運作的流程圖。以下,使用第3圖說明之。且,鱼 第2圖相同’為方便起見,將“統當作在開始時的實際 322037 5 201122745 . 控制系統,而將B系統當作在開始時的自我診斷系統來說 明。A系統在作為實際控制系統進行一連串的控制時 (S01),B系統係做為自我診斷系統進行自我診斷(S03)。 B系統在確認了本身系統的自我診斷的結束時(S05),發 〜 出系統切換指示(S06),進行系統切換(S02及S04)。 、 另一方面,為實際控制系統的A系統在確認了系統切換的 指示時(S07),進行切換(S02及S04),A系統係做為 自我診斷系統開始自我診斷(S03),而B系統則作為實 際控制系統開始實際控制(S01)。 如此,藉由實際控制系統及自我診斷系統交互地切 換,A、B兩系統交互地進行自我診斷,藉此可達到將習 知只能在離線執行的主記憶體等區域的自我診斷於系統整 體運作中實施。於是,由於自我診斷的範圍擴大,且可縮 短自我診斷的週期,故可得到安全性水準提升的效果。 (第二實施形態) 以下,依據圖式以相異於第一實施形態的部分為中 心,說明本發明的雙重系統控制裝置的第二實施形態。第 4圖係顯示第二實施形態的雙重系統控制裝置的概略構成 圖。於第一實施形態的構成之外,具有連接於CPU 1A及 1B之間的貧料通訊線8。透過此貧料通訊線’於A、B兩 系統間,進行自我診斷系統的診斷狀態的參照。於此診斷 狀恶’自我珍斷糸統係在珍斷結束的情形立起為「診斷結 束」、而在診斷中的情形立起為「診斷中」的旗標(flag)。 接著,以相異於第一實施形態的部分為中心說明關於 r < 6 322037 201122745 雙重系統控制裝置的運作。第5腫 統控制裝置的第-每浐枳能 糸顯不本發明的雙重系 的第—二::施形態的運作概要概念圖。與第2圖 不目…點,係貧際控制系統會表 α 感的點。第二相異點,係當^自我_系統的狀 時,則成待機的點。第三相ν、統結束了自我診斷 了-連串的控制處理而;照::診:=亀結束 機的情形,進行系統切換二= 重系統控制褒置的第二實:形:圖,:本發明的雙 實際控制系統^ :"圖°Α糸統係作為 ,自我診斷系統開始自我診斷(s〇3) = 了-連串的控制處理時,參 :、、,束 ,斷中的情形, 待方面,B系統係在自我診斷結束時, 待機直到有系統切換指示為/騎 了一連串的控制虛理 。系統係在結束 若為吟斷任: ’且> 照B系統的診斷狀態(S201), =讀結束,就發㈣統切換指示⑽2) ) 切換(S02及S04)。i德Λ ^ 進仃系、,充 開始自我診斷(S03):、另二:統係作為自我診斷系統, 換的指示,(S2〇3) κ ,'系統係接收了系統切 作為實際控統,開/實::換(聊及咖)時, 一實施形態相同,反覆的^工’ S〇1) °於是,與第 統交互地進行自我診斷。订系物換,而八系統及㈣ 如此,儘嘗實際控制系統做了系統切換的指示,不但 r C 1 322037 7 201122745 可達成期望的目的,更有可在不造成影響控制序之下進 行糸統切換的效果。 (第三實施形態) 、=下,依據圖式以相異於第二實施形態的部分為中 〜,况明本發明的雙重系統控制裝置的第三實施形態。第 7圖係本發明的雙重系統控制裝置的第三實施形態二流程 圖。與第6圖的相異點,係自我診斷系統透過自我診斷檢 測到了異常的情形,則通知實際控制系統異常的點。亦即, ^為自我診斷系統進行自我診斷的B系統,係在透過自我 線斷了本身系統的異常時⑽2) ’透過資料通訊 線8,發出異常的通知至為實際控制系統的a系統 3〇3)。A系統雖會結束一連串的控制處理,並參照b -、、先的運^狀怨,然在異常的情卵不會進行系統切換指 不,而繼續進行依序控制處 、 除時,再m Γ ) ° B系統係在異常解 斷確認正常後(S3…w 系、、4係在透過自我診201122745. 6. Description of the Invention: [Technical Field of the Invention] The present invention relates to a plant control device for use in, for example, a power generation facility. [Prior Art] In general, the implement device control device constituted by the conventional standby redundancy performs self-diagnosis in order to detect an abnormality of the control device. This kind of self-diagnosis is judged by the abnormality of the hardware and software (s〇ftware) of the self-system, the abnormality of the upper and lower limits of the input signal, and the abnormality of the calculation result. In particular, in a control device having a dual system, the system switching system shown in Fig. 10 is generally implemented by an abnormality detection of any of the dual control systems. The dual system control device proposed as a premise of such a switching condition is described in Patent Document 1 (for example, Patent Document 1). (Prior Art Document) (Patent Document) Patent Document 1: Japanese Patent Publication No. Hei 8_1235〇3 (page 3, 2) ^ [Summary of the Invention] (The problem to be solved by the invention) A conventional dual system control skirt exists. There are the following problems: In order to carry out self-diagnosis while controlling the equipment, leaving an area that cannot be self-diagnosed, such as main memory, this part can only be taken offline during regular thinning (offline) )diagnosis. ', 322037 201122745 The present invention has been made in order to solve the aforementioned problems, and an object thereof is to provide a dual system control device which can diagnose a region which is not self-diagnosable in a conventional manner even in control, and can shorten the period of self-diagnosis, and Have a high level of safety. ' (Means for Solving the Problem) The dual system control device of the present invention includes: a control system having a self-diagnosis function; and another control system having a self-diagnosis function in common with the control system, wherein the two controls When one side of the system operates as the actual control system that performs the control object, the other side operates as a system for self-diagnosis, and the system that performs the actual control and the system that performs the self-diagnosis alternately switch, and the two systems interactively perform self-diagnosis. . (Effect of the Invention) The dual system control device according to the present invention is a system in which the other of the two control systems operates as a system for performing actual control, and the other system operates as a system for performing self-diagnosis, and performs actual control. The system for self-diagnosis is switched interactively, and the two systems interact with each other for self-diagnosis, so that the self-diagnosis of the area that can be diagnosed offline can be implemented in the whole operation of the system. Therefore, since the range of self-diagnosis is expanded and the period of self-diagnosis can be shortened, the effect of improving the safety level can be obtained. [Embodiment] (First Embodiment) Hereinafter, a f 4 322037 201122745 conformation of the dual system control device of the present invention will be described with reference to the drawings. Fig. 1 is a schematic configuration diagram of a dual system control device in a first embodiment of the dual system control device of the present invention. In the figure, the dual system control device is constructed by dualizing the human system for the control system and the B system for the other control system. Each of the control systems a&b has a cpu (emeral processing unit) for performing arithmetic processing and the like, 1B, memory 2A, 2B connected to the cpus, and is connected to each CPU, and is controlled by the control object. The input information is transmitted to the input control units 3A, 3B of these CPUs, and the output control units 4A, 4B that control the output information output to the output control device 7. The input control units 3A and 3B and the output control units 4A and 4B are connected to the switching device 5 that performs system switching by the system switching finger signal, whereby the output information of any of the A system or the B system is passed through the output device. The output is output to an unillustrated control object, and the input information from the control object is input to any of the a system or the B system via the input device 6. Next, the operation of the dual system control device will be described. Fig. 2 is a conceptual view showing the operation of the first embodiment of the dual system control device of the present invention. In Fig. 2, for the sake of convenience, the system is considered to be the actual control system at the start of the time series (hereinafter, referred to as the actual control system j', and the B system is regarded as the self at the beginning of the time series. The system for diagnosis (hereinafter referred to as the self-diagnosis system) performs the actual control or self-diagnosis, respectively. As shown in Fig. 2, in the first embodiment, the switching of the two: is performed at the same time. The figure shows in detail the flow chart of the operation of the two systems. Below, use the figure 3 to illustrate. Moreover, the fish figure 2 is the same 'for convenience, it will be regarded as the actual 322037 5 201122745 at the beginning. Control The system is described as a self-diagnosis system at the beginning of the B system. When the A system performs a series of controls as the actual control system (S01), the B system performs self-diagnosis as a self-diagnosis system (S03). When the system confirms the end of the self-diagnosis of its own system (S05), it sends a system switching instruction (S06) to perform system switching (S02 and S04). On the other hand, it is confirmed by the A system of the actual control system. When the system is switched (S07), the switching is performed (S02 and S04), the A system starts self-diagnosis as the self-diagnosis system (S03), and the B system starts the actual control as the actual control system (S01). The actual control system and the self-diagnosis system are interactively switched, and the A and B systems perform self-diagnosis interactively, thereby realizing self-diagnosis of the main memory such as the main memory that can be performed offline only in the overall operation of the system. Therefore, since the range of self-diagnosis is expanded and the period of self-diagnosis can be shortened, the effect of improving the safety level can be obtained. (Second embodiment) Hereinafter, a portion different from the first embodiment will be described based on the drawings. A second embodiment of the dual system control device according to the present invention will be described. Fig. 4 is a view showing a schematic configuration of a dual system control device according to a second embodiment, and has a connection to the CPU 1A in addition to the configuration of the first embodiment. And the poor communication line 8 between 1B. Through the poor communication line 'between A and B systems, the reference status of the self-diagnosis system is diagnosed. In the case of the diagnosis, the self-reported system is set to the "diagnosis end" in the case where the diagnosis is completed, and the flag in the diagnosis is established as the "diagnosis" flag. The part different from the first embodiment is centered on the operation of the dual system control device of r < 6 322037 201122745. The first - each of the fifth swollen control device can not show the second system of the invention :: Schematic diagram of the operational outline of the application. It is not the point of the second figure. It is the point where the poor control system will show the sense of α. The second difference is when the system is self-systematic. The third phase ν, the end of the self-diagnosis - a series of control processing; Photo:: Diagnosis: = 亀 end of the machine, system switching two = heavy system control device second real: shape :Fig.: The dual actual control system of the present invention ^:"Fig., as the self-diagnosis system starts self-diagnosis (s〇3) = - a series of control processes, parameters:,,, bundle In the case of a break, the aspect of the B system is at the end of the self-diagnosis, waiting until there is a system Switching instruction is / virtual ride control processing series. At the end of the system, if it is : : ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ ’ = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = i 德Λ ^ entry system, charge start self-diagnosis (S03):, the other two: the system as a self-diagnosis system, change instructions, (S2〇3) κ, 'system received the system cut as the actual control system , open / real:: when changing (talking and coffee), the same embodiment, repeated ^ ''〇1) ° Then, interact with the system to conduct self-diagnosis. The order is changed, and the eight systems and (four) are so, the actual control system has made an instruction to switch the system, not only r C 1 322037 7 201122745 can achieve the desired purpose, but also can be carried out without affecting the control order. The effect of switching. (Third Embodiment) The following is a third embodiment of the dual system control device according to the present invention, in which the portion different from the second embodiment is in accordance with the drawings. Fig. 7 is a second flow chart showing a third embodiment of the dual system control device of the present invention. The difference from Fig. 6 is that the self-diagnosis system detects an abnormal situation through self-diagnosis, and notifies the point at which the actual control system is abnormal. That is, the B system for self-diagnosis of the self-diagnosis system is based on the self-diagnosis of the abnormality of the system itself (10) 2) 'Through the data communication line 8, the abnormal notification is sent to the system of the actual control system. 3). Although the A system will end a series of control processing, and refer to the b-, and the first, the grievances, but in the abnormal love, the system will not switch, but continue to control, remove, and then m Γ ) ° B system is confirmed by abnormal dissection (S3...w system, 4 series in self-diagnosis

Cs2〇3)其 ),待機直到有系統切換指示為止 、^203 )。另一方面,a* 時,夫日Λ Ώ / 系統係結束了一連串的控制處理 正二:Β系統的運作狀態(83〇1)。 正常的情形,參,昭丁 初作馮 姓走,祕Φ: 珍斷狀態(S2〇1),若為診斷 、、、。束,就發出系統切換指示( 〜峤 及S〇4)後,作為自我(2〇2)進订了糸統切換(S02 待機的系統,開始自我診斷(S〇3)。 丹機的B糸統係接收了系統切換的 系統切換(S02及S04)後 (3),進行 際控制(S01)。於是 ,、、、貫際控制系統,開始實 、 m官在於自我診斷系統有異常發 322037 201122745 生的情形,亦與第二實施形態相同,反覆的進行系統切換, 而A系統及B系統交互地進行自我診斷。 透過如此的構成與運作,不但可達成期望的目的,更 有即使於自我診斷系統發生故障,全體系統仍可繼續運作 的效果。 (第四實施形態) 以下,依據圖式以相異於第三實施形態的部分為中 心,說明本發明的雙重系統控制裝置的第四實施形態。第 8圖係本發明的雙重系統控制裝置的第四實施形態的流程 圖。與第7圖的相異點,係藉由中斷,自我診斷系統可進 行系統切換指示的點。也就是,做為自我診斷系統進行自 我診斷的B系統,係藉由中斷處理(S401 ),並行於自我 診斷處理,透過資料通訊線8參照為實際控制系統的A系 統的運作狀態(S402 )。異常的情形,B系統係中止自我 診斷處理,並發出系統切換指示(S403),進行了系統切 換(S02及S04)後,作為實際控制系統,開始實際控制 (S01 )。在異常解除時,A系統係做為自我診斷系統,開 始自我診斷(S03 ),經由與第三實施形態相同的步驟 (S302、S203),進行了系統切換(S02及S04)後,作 為實際控制系統,開始一連串的控制(S01 )。於是,與 第三實施形態相同,反覆的進行系統切換,而A系統及B 系統交互地進行自我診斷。 透過如此的構成及運作,不但可達成期望的目的,更 有即使於實際控制系統發生故障,全體系統仍可繼續運作„Cs2〇3)), standby until there is a system switching instruction, ^203). On the other hand, at the time of a*, the Fushun Ώ / system system ends a series of control processes. The second is: the operating state of the system (83〇1). In the normal situation, the ginseng, Zhao Ding, the first feng, the surname, the secret Φ: the state of ruin (S2〇1), if it is a diagnosis, ,,. After the system is switched, the system switching instruction (~峤 and S〇4) is issued, and the system is switched as the self (2〇2) (S02 standby system starts self-diagnosis (S〇3). The system receives the system switching (S02 and S04) of the system switching (3), and conducts the control (S01). Therefore, the control system of the system is started, and the official is in the self-diagnosis system. 322037 201122745 The situation of birth is the same as that of the second embodiment, and the system switching is repeated, and the A system and the B system interactively perform self-diagnosis. Through such composition and operation, not only the desired purpose but also the self-diagnosis can be achieved. (Fourth Embodiment) Hereinafter, a fourth embodiment of the dual system control device according to the present invention will be described focusing on a portion different from the third embodiment in accordance with the drawings. Figure 8 is a flow chart showing a fourth embodiment of the dual system control device of the present invention. In contrast to the seventh embodiment, the self-diagnosis system can perform a system switching instruction by interrupting. That is, the B system that performs self-diagnosis as the self-diagnosis system is in parallel with the self-diagnosis processing by the interrupt processing (S401), and refers to the operational state of the A system of the actual control system through the data communication line 8 (S402). In the case of an abnormality, the B system suspends the self-diagnosis processing and issues a system switching instruction (S403), and after performing system switching (S02 and S04), the actual control system is started as the actual control system (S01). The A system is a self-diagnosis system, and starts self-diagnosis (S03). After the system switching (S02 and S04) is performed in the same steps (S302, S203) as in the third embodiment, the series is started as an actual control system. Control (S01). As in the third embodiment, the system is switched over and over again, and the A system and the B system interactively perform self-diagnosis. Through such a configuration and operation, not only the desired purpose but also the desired purpose can be achieved. In the event of a failure of the actual control system, the entire system can continue to operate „

I £. 9 322037 201122745 的效果。 (第五實施形態) 以下,依據圖式以相異於第四實施形態的部分為中 心,說明本發明的雙重系統控制裝置的第五實施形態。第 9圖係本發明的雙重系統控職置的第五實施形態的流程 圖。與第8圖的相異點,係實際控制系統將與控制對象所 傳送接收的過去的輸人輸出資訊及齡的本身系統的資源 資訊(以下’稱為控制資訊),在系統切換的前-刻,傳 送至自我診斷线的點。也就是,為實際控㈣統的入系 統,係在系統切換之前,透過資料通訊 傳送至B系統),並發“統切換指示 另一方面,為自我診斷系統的B系統係接收控制資訊 (S5〇2)。接收結束後,實施系統的切換(S02及S04), A系統係做為自我診斷系統,開始自我診斷(s〇3),B系 統係作為實際控制系統開始實際控制(s〇1)。於是,與 第四實施形態相同,反覆的進行系統切換,而A系統及b 系統交互地進行自我診斷。 透過如此的構成及運作,不但可達成期望的目的,更 有B系統作為與A系統相同内容的控制系統可繼續進行控 制對象的控制的效果。 上 另外,本發明的實施形態,並不僅限定於上述的實施 例’而無疑問的能在不脫離本發明的要旨的範圍内加 種的變更。 合 【圖式簡單說明】 322037 10 201122745 第1圖係為本發明的雙重系統控制裝置的第一實施形 態的概略構成圖。 第2圖係為顯示本發明的雙重系統控制裝置的第一實 施形態的運作概要概念圖。 ' 第3圖係為本發明的雙重系統控制裝置的第一實施形 • 態的流程圖。 第4圖係為顯示本發明的雙重系統控制裝置的第二實 施形態的雙重系統控制裝置之概略構成圖。 第5圖係為顯示本發明的雙重系統控制裝置的第二實 施形態的運作概要概念圖。 第6圖係為本發明的雙重系統控制裝置的第二實施形 態的流程圖。 第7圖係為本發明的雙重系統控制裝置的第三實施形 態的流程圖。 第8圖係為本發明的雙重系統控制裝置的第四實施形 態的流程圖。 第9圖係為本發明的雙重系統控制裝置的第五實施形 態的流程圖。 第10圖係為顯示習知的雙重系統控制裝置的動作概 要的概念圖。 【主要元件符號說明】 1A、IB CPU 2A、2B 記憶體 3A、3B 輸入控制部 ΓEffect of I £. 9 322037 201122745. (Fifth Embodiment) Hereinafter, a fifth embodiment of the dual system control device according to the present invention will be described with reference to the drawings, which are different from the fourth embodiment. Fig. 9 is a flow chart showing a fifth embodiment of the dual system control device of the present invention. The difference from Fig. 8 is that the actual control system will transmit the received output information of the past and the resource information of the system of the age (hereinafter referred to as control information) with the control object before the system is switched - Engraved to the point of the self-diagnosis line. That is, for the actual control (four) system into the system, before the system is switched, through the data communication to the B system), and concurrently "the system switching instructions on the other hand, for the self-diagnosis system B system receives control information (S5 〇 2) After the reception is completed, the system is switched (S02 and S04), the A system is used as the self-diagnosis system, and the self-diagnosis is started (s〇3), and the B system is used as the actual control system to start the actual control (s〇1). Therefore, as in the fourth embodiment, the system switching is repeated, and the A system and the b system interactively perform self-diagnosis. Through such a configuration and operation, not only the desired purpose but also the B system and the A system can be achieved. The control system of the same content can continue to control the object to be controlled. In addition, the embodiment of the present invention is not limited to the above-described embodiment, and it is possible to add a variety without departing from the gist of the present invention. [Brief Description] 322037 10 201122745 Fig. 1 is a schematic configuration diagram of the first embodiment of the dual system control device of the present invention Fig. 2 is a schematic diagram showing the operation of the first embodiment of the dual system control device of the present invention. Fig. 3 is a flow chart showing the first embodiment of the dual system control device of the present invention. The figure is a schematic configuration diagram showing a dual system control device according to a second embodiment of the dual system control device of the present invention. Fig. 5 is a schematic view showing the operation of the second embodiment of the dual system control device according to the present invention. Figure 6 is a flow chart showing a second embodiment of the dual system control device of the present invention. Fig. 7 is a flow chart showing a third embodiment of the dual system control device of the present invention. A flowchart of a fourth embodiment of the dual system control device. Fig. 9 is a flowchart showing a fifth embodiment of the dual system control device of the present invention. Fig. 10 is a view showing an outline of the operation of the conventional dual system control device. Concept diagram [Main component symbol description] 1A, IB CPU 2A, 2B Memory 3A, 3B Input control sectionΓ

L 11 .322037 201122745 4A、4B 輸出控制部 5 切換裝置 6 輸入裝置 7 輸出裝置 8 貧料通§扎線L 11 .322037 201122745 4A, 4B Output control unit 5 Switching device 6 Input device 7 Output device 8 Poor material

Claims (1)

201122745 Λ 七、申請專利範圍: 1. 一種雙重系統控制裝置,包括具有自我診斷功能的控制 系統、以及與該控制系統共同雙重化,具有自我診斷功 能的另一個控制系統,進行控制對象的控制的雙重化構 ' 成的控制系統,其中, 上述兩控制系統的一方作為執行控制對象的實際 控制系統運作時,另一方係作為進行自我診斷的系統而 運作,並進行實際控制的系統及進行自我診斷的系統係 交互地切換,兩系統交互地進行自我診斷。 2. 如申請專利範圍第1項之雙重系統控制裝置,其中,上 述進行自我診斷的系統,係在結束了自我診斷之時,進 行系統切換。 3. 如申請專利範圍第1項之雙重系統控制裝置,其中,於 上述兩控制系統間,復包括傳送接收診斷狀態的資料通 訊線,且 進行上述實際控制的系統係透過上述資料通訊線 參照進行上述自我診斷的系統的自我診斷狀態,並在進 行上述實際控制的系統的一連串的控制結束,且,進行 上述自我診斷的系統的自我診斷結束之時,進行系統切 換。 4. 如申請專利範圍第3項之雙重系統控制裝置,其中,進 行上述自我診斷的系統,在於自我診斷發現異常之時, 係將本身系統的異常透過上述資料通訊線通知至進行 上述實際控制的系統,而接收了通知的進行上述實際控^ L 13 322037 201122745 制的系統,係在確認了上述異常之時,不進行上述系統 切換而繼續控制對象的控制。 5.如申請專利範圍第3項之雙重系統控制裝置,其中,進 行上述自我診斷的系統,係透過上述資料通訊線參照進 行上述實際控制的系統,而檢測到進行上 ***的異常之時,係中止嶋斷’並進行上;= 換。 6·如申請專利範圍第4項之雙重系統控制裝置,其中,進 2上述自我診斯的系統,係透過上述資料通訊線參照進 行上述實際控制的系統,而檢測到進行上述實際控制的 糸統的異常之時’係中止自我診斷,並進行上述系統切 換。 7·如申味專利範圍第1項至第6項中任一項之雙重系統控 制裝置,其中,於上述兩控制系統間,包括資料通訊線, 其係接收傳送為了進行與上述控制對象之間的控制所 傳送接,的,進行實際控制的系統的過去的輸入資訊以 及進行實際控制的系統的現在的資源資訊;且 透過該資訊通訊線,進行上述實際控㈣系統,係 將控制所必需的資訊,傳送至進行上述自我診斷的系201122745 七 VII. Patent application scope: 1. A dual system control device, including a control system with self-diagnosis function, and another control system with self-diagnosis function, which is controlled by the control object. A dual control system in which one of the two control systems operates as an actual control system for performing control, and the other system operates as a system for self-diagnosis, and performs actual control of the system and performs self-diagnosis. The systems are switched interactively, and the two systems interactively perform self-diagnosis. 2. The dual system control device of claim 1, wherein the system for self-diagnosis performs system switching when the self-diagnosis is completed. 3. The dual system control device of claim 1, wherein the data communication line for transmitting and receiving the diagnostic status is included between the two control systems, and the system for performing the actual control is performed by referring to the data communication line. The self-diagnosis state of the self-diagnosis system is completed when a series of controls of the system for performing the above-described actual control is completed, and when the self-diagnosis of the system for performing the self-diagnosis is completed. 4. The dual system control device of claim 3, wherein the self-diagnosis system is configured to notify an abnormality of the system through the data communication line to perform the actual control when the self-diagnosis finds an abnormality. In the system that has received the notification and the above-mentioned actual control system, the above-mentioned abnormality is confirmed, and the control of the control object is continued without performing the above-described system switching. 5. The dual system control device according to claim 3, wherein the self-diagnosis system is configured to refer to the system for performing the actual control through the data communication line, and when detecting an abnormality of the upper system, Suspend the 'off' and proceed; = change. 6. The dual system control device of claim 4, wherein the system for self-diagnosis refers to the system for performing the above actual control by referring to the system for performing the above actual control through the above data communication line. At the time of the abnormality, the self-diagnosis is suspended and the above system switching is performed. The dual system control device according to any one of claims 1 to 6, wherein the two control systems include a data communication line, which is received and transmitted between the control object and the control object. Controlling the past input information of the system that is actually controlled, and the current resource information of the system that performs the actual control; and through the information communication line, performing the above-mentioned actual control (four) system, which is necessary for control Information transmitted to the department that performs the above self-diagnosis 322037 14322037 14
TW99117365A 2009-12-16 2010-05-31 Dual system control device TWI434159B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
JP2009285257 2009-12-16

Publications (2)

Publication Number Publication Date
TW201122745A true TW201122745A (en) 2011-07-01
TWI434159B TWI434159B (en) 2014-04-11

Family

ID=44166921

Family Applications (1)

Application Number Title Priority Date Filing Date
TW99117365A TWI434159B (en) 2009-12-16 2010-05-31 Dual system control device

Country Status (4)

Country Link
JP (1) JPWO2011074147A1 (en)
CN (1) CN102656528A (en)
TW (1) TWI434159B (en)
WO (1) WO2011074147A1 (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9515944B2 (en) 2011-12-12 2016-12-06 Mitsubishi Electric Corporation Train information management apparatus and train information management method
CN107850873B (en) * 2015-07-23 2021-12-21 三菱电机株式会社 Dual process control device
CN108051998B (en) * 2017-11-16 2020-11-13 中国航空工业集团公司西安飞机设计研究所 Redundant system synchronization and monitoring judgment method

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH03139736A (en) * 1989-10-26 1991-06-13 Oki Electric Ind Co Ltd System switching method in information processing system
JPH06139088A (en) * 1992-10-30 1994-05-20 Fujitsu Ltd Duplex processor system
JPH1115502A (en) * 1997-06-24 1999-01-22 Mitsubishi Electric Corp Digital controller
EP1288757A1 (en) * 2001-08-07 2003-03-05 Siemens Aktiengesellschaft Method and process control system for operating a technical installation
JP2005285018A (en) * 2004-03-30 2005-10-13 Fuji Electric Systems Co Ltd Duplex controller system, method for switching operation/standby thereof
JP4776374B2 (en) * 2005-12-27 2011-09-21 株式会社東芝 Redundant supervisory control system and redundant switching method for the same system

Also Published As

Publication number Publication date
JPWO2011074147A1 (en) 2013-04-25
TWI434159B (en) 2014-04-11
CN102656528A (en) 2012-09-05
WO2011074147A1 (en) 2011-06-23

Similar Documents

Publication Publication Date Title
JP2007304687A (en) Cluster constitution and its control means
JP2012230444A (en) Partial failure processing method in computer system
TW201122745A (en) Dual system control device
JP4291384B2 (en) Detection method of disconnection and power supply disconnection of IO unit connected to numerical controller
CN106559288B (en) A kind of quick fault testing method based on icmp packet
JPH11203157A (en) Redundancy device
JP2007067540A (en) Dual system switch
US10303160B2 (en) Numerical control system and numerical controller having display switching function
TWI544327B (en) Data processing device
WO2016157507A1 (en) Redundant system and communication unit
JP5455846B2 (en) Substation monitoring and control system and control function switching method of console
JP4131263B2 (en) Multi-node system, node device, inter-node crossbar switch, and failure processing method
JP2010118766A (en) Communicating system and diagnosis method thereof
JP2007249389A (en) Cluster system and its failure detection method
CN105939224A (en) Method and device for solving double-master problem of double-equipment hot standby
JP2012070307A (en) Multiplex system and control method of multiplex system
JPH1196033A (en) Information processor
JP2014164472A (en) Information processing system and failure management method of information processing device
JP2008059531A (en) Computer system failure notification method
JP2000244520A (en) Abnormality diagnostic method for duplex network
JP2013025365A (en) Method for notifying of fault of standby device in dual system
JP2011172011A (en) Monitoring system
JP2009146285A (en) Module processor, module maintenance method, and module maintenance program
JP6284795B2 (en) Fault tolerant server device
JPS6213700B2 (en)

Legal Events

Date Code Title Description
MM4A Annulment or lapse of patent due to non-payment of fees