JP2008181240A - Redundant distributing control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To switch between a main system and an auxiliary system appropriately and smoothly when a fault occurs in CSV or in an LOC in redundant configuration. <P>SOLUTION: In a redundant distributed control system, a plurality of control server stations CSV(11), CSV(12) are composed of a redundant configuration of the main system and the auxiliary system, connected to a computer for control LOC via a transmission path for control 31, and connected to a human interface station HIS via a transmission path for control 21. The CSV(11), CSV(12) monitor mutually through the transmission path for information 21 and the transmission path for control 31, and switches between the main system and the slave system of the plurality of CSV(11), CSV(12) in response to a mutual monitor fault situation. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a redundant distributed control system that monitors and controls plant equipment in various buildings such as multipurpose intelligent buildings, office buildings, and residential buildings, water supply plants, sewerage plants, and airport systems.

  In recent years, plant monitoring and control systems such as buildings and water plants have shifted to distributed control systems. In a distributed control system, it is rare to form a redundant configuration of a system, and generally a single configuration is mostly used.

  However, if the control computers connected in a distributed configuration have a redundant configuration, if the primary system fails, depending on the connection status of the network, it may take time to switch to the secondary system. There is a possibility that the problem of switching in a situation that should not occur.

Further, since a control computer of LON (Registered Trademark: Local Operating Network) rarely has a redundant configuration, a signal managed by the control computer is usually managed when the control computer becomes abnormal. There is a problem that it becomes impossible to monitor.
Japanese Patent Publication No. 2003-271419 Japanese Patent Publication No. 2002-251203 Japanese Patent Publication 2001-325157

  The present invention has been made in view of the above-described conventional technical problems. When a failure occurs in a control server station or a control computer having a redundant configuration, the master system and the slave system are appropriately and smoothly connected. It is an object of the present invention to provide a redundant distributed control system that can switch between the two.

  The present invention is connected to a human interface station, a plurality of control computers, the human interface station via an information transmission path, and connected to the plurality of control computers via a control transmission path. A plurality of control server stations, and the human interface station sets and displays data necessary for each of the plurality of control server stations through the information transmission path, displays measurement data of the control computer, and displays a status. Remote control of the control target, the plurality of control computers are distributedly connected to the control transmission line, measure and collect data necessary for control of the control target, and control the plurality of control computers, The control server station is for the control The data of each of the plurality of control computers is stored and managed through a transmission path, a control output request is output when a set control condition is satisfied, and each of the plurality of control server stations is A redundant configuration of the system and the slave system is performed, the mutual monitoring is performed through the information transmission path and the control transmission path, and the master system and the slave system of the plurality of control server stations according to the mutual monitoring failure status. It features a redundant distributed control system having a master-slave switching function for switching.

  Further, the present invention is connected to a human interface station, a plurality of control computers, the human interface station via an information transmission path, and connected to the plurality of control computers via a control transmission path. And a plurality of control server stations connected to each other via a mutual monitoring transmission path, and the human interface station is necessary for each of the plurality of control server stations through the information transmission path. Data setting and display, measurement data display of the control computer, status display, remote control of the control target, the plurality of control computers are distributedly connected to the control transmission line for control of the control target Measure and collect necessary data and control it, Several control server stations store and manage data of each of the plurality of control computers through the control transmission path, and output a control output request when a set control condition is satisfied, and Each of the plurality of control server stations has a redundant configuration of a master system and a slave system, and performs mutual monitoring through the mutual monitoring transmission path, and according to the mutual monitoring failure status, Another feature is a redundant distributed control system having a master-slave switching function for switching between a master system and a slave system.

  In addition, the present invention provides a plurality of control computers that are distributedly connected to a LON transmission line, measure and collect data necessary for control of a control target, perform control, the plurality of control computers, and the LON transmission. A control server station that is connected through a path, manages data of the plurality of control computers, and outputs a control output request when a set control condition is satisfied; and transmission of information to and from the control server station A plurality of units connected to each other by a human interface station that is connected via a road and performs setting and display of data necessary for the control server station, measurement data display of the control computer, status display, and remote operation of a control target. Each of the control computers has a redundant configuration for the LON transmission line. And the other control computers and control server stations having the redundant configuration are mutually monitored via the LON transmission line, and according to the failure status detected by the mutual monitoring, A redundant distributed control system having a master-slave switching function that automatically performs node replacement when the control computer is switched from the main system to the main system for binding between the control computer and the control server station. Another feature.

Furthermore, the present invention provides a plurality of control computers that are distributedly connected to a LON transmission line, measure and collect data necessary for control of a control target, perform control, the plurality of control computers, and the LON transmission. A control server station that is connected through a path, manages data of the plurality of control computers, and outputs a control output request when a set control condition is satisfied; and transmission of information to and from the control server station A plurality of units connected to each other by a human interface station that is connected via a road and performs setting and display of data necessary for the control server station, measurement data display of the control computer, status display, and remote operation of a control target. Each control computer is made redundant with respect to the LON transmission line. The plurality of control computers in the redundant configuration are mutually monitored by their external interface port mutual monitoring transmission lines, and other control computers are also used in the LON transmission line. And the control server station to monitor the state of each other, and depending on the failure status detected by the mutual monitoring, the binding between the other control computer and the control server station from the main system of the control computer Another feature of the present invention is a redundant distributed control system having a master-slave switching function that automatically replaces a node when a slave is switched to the main.

  According to the present invention, in a distributed control system having redundantly configured control server stations, system status confirmation between the control server stations is performed through a plurality of transmission paths, so that the master system and the slave system can be switched more appropriately. This can be performed, and the non-monitoring state duration time can be shortened and the uncontrollable state duration time can be shortened.

  In addition, according to the present invention, the redundant configuration of the control computer that is the LON node corresponding to the LON can be automatically switched between the primary system and the secondary system of the control computer, thereby shortening the uncontrollable state duration time. Can be planned.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  (First Embodiment) FIG. 1 shows the configuration of a redundant distributed control system according to a first embodiment of the present invention. The redundant distributed control system according to the first embodiment includes a human interface station HIS, a plurality of control computers LOC (11) to LOC (16), LOC (21) to LOC (26), and a human interface station. HIS (1), HIS (2) are connected to each other via the information transmission path 21, and a plurality of control computers LOC are connected to the control transmission paths 31, 32, and two units are connected. A pair of control computers CSV (11) and CSV (12), CSV (21) and CSV (22), and a printer PRT connected to the information transmission path 21 are configured.

  The control server station CSV is periodically transmitted between the primary and secondary devices, such as between the CSV (11) and the CSV (12), and between the CSV (21) and the CSV (22). Send and receive system status and perform mutual monitoring. Here, the system state refers to a process operation status of the control server station CSV, a hardware failure status of the control server station CSV, a diagnosis result of the information transmission path 21, a diagnosis result of the control transmission paths 31, 32, and the like. An information transmission path 21 or a control line is used between the main system and the subordinate apparatus, here between the CSV (11) and the CSV (12), and between the CSV (21) and the CSV (22). If there is a failure in the transmission line 31 or 32, data cannot be transmitted / received via the abnormal transmission line. Therefore, the system status is mutually grasped through the other transmission line, and the own control server station CSV and the partner control server The system state of the station CSV is confirmed, and the switching process between the master system and the slave system is performed in accordance with a rule set in advance according to the content of the failure.

  Human interface stations HIS (1) and HIS (2) are computer stations for setting the input / output signals of the equipment to be monitored, displaying the equipment data, and interfacing the equipment remotely, and display devices such as CRTs and LCDs. Multi-window display that can display multiple windows at the same time is possible. The multi-window display uses an OS (operating system) compatible with the multi-window display system, and can display different equipment screens at the same time, and can simultaneously display a monitoring screen and a trend graph. In addition, HIS (1) and HIS (2) human machine interface functions enable daily / monthly report settings, graph settings, graphic screen creation / change and print requests, and execution / stop operations for various automatic control applications. Screen switching and the like can be performed by mouse operation, pen operation, or keyboard operation. In the redundant distributed control system, a plurality of HISs are connected in one system, such as HIS (1) and HIS (2), and can be operated similarly. One unit may be used as the present invention.

  Ethernet (registered trademark) is used for the information transmission path 21 and the transmission protocol is BACnet (trade name), TCP / IP, a combination of UDP / IP and BACnet, or the original protocol and TCP / IP, UDP / Use in combination with IP. In particular, the communication protocol is not limited. BACnet is a protocol standardized by the American academic society ASHRAE.

  In order to connect a plurality of HIS (1) and HIS (2) and display the same data in each HIS, each of the HIS (1) and HIS (2) has control server stations CSV (11) and CSV (12 In addition, the display data is read out from the CSV (21) and the CSV (22).

  The control computers LOC (11) to LOC (16) are connected to the control server stations CSV (12) and CSV (12) via a control transmission line 31, and LOC (21) to LOC (26) are control servers. Stations CSV (21) and CSV (22) are connected by a control transmission line 32. These control computers LOC monitor and control equipment and manage process input / output signals based on setting information necessary for various automatic controls. The types of process signals include analog input, analog output, analog input / output, digital input, digital output, digital input / output, and integrated value.

  The control transmission lines 31 and 32 use LON (Registered Trademark: Local Operating Network), a computer link, or a non-procedural transmission system. For the control transmission lines 31 and 32, Ethernet (registered trademark) may be adopted. When Ethernet (registered trademark) is adopted, the transmission protocol is BACnet or TCP / IP, a combination of UDP / IP and BACnet, or the original protocol and TCP / IP, as in the case of the information transmission path 21. In combination with UDP / IP. Note that this communication protocol is not limited to these.

  The pair of CSV (11) and CSV (12) are connected together to the information transmission path 21 and the control transmission path 31 and correspond to the transmission protocols of the information transmission path 21 and the control transmission path 31. . Similarly, another one of the CSV (21) and the CSV (22) is connected to the information transmission line 21 and another control transmission line 32, and is transmitted through the information transmission line 21 and the control transmission line 32. It corresponds to the protocol.

  These CSV (11) and CSV (12) are installed in a redundant configuration in a redundant configuration in a plurality of units, here two units as a pair, and connected to a control computer LOC (11) connected by a control transmission path 31. ) To LOC (16) input / output data instantaneous value / average value / integrated value data filing, history data saving, system data backup. Similarly, another pair of CSV (21) and CSV (22) also have instantaneous values of input / output data of control computers LOC (21) to LOC (26) connected by another control transmission path 32. Performs filing of average / integrated value data, saving of history data, and backup of system data. Here, depending on the scale of the distributed control system, a plurality of groups of CSV and LOC connected by the control transmission line are installed according to the system scale as illustrated in the system configuration of FIG. There is also.

  Each of CSV (11) to CSV (22) receives input / output data of LOC (11) to LOC (16) and LOC (21) to LOC (26) in response to requests from HIS (1) and HIS (2). Send and receive. When the control transmission lines 31 and 32 are LON, CSV (11) and CSV (12) interface with data by binding to network variables of LOC (11) to LOC (16). Similarly, CSV (21), CSV (22) interfaces data by binding with network variables of LOC (21) to LOC (26). Here, the “bind” is a soft signal line connection.

  The printer PRT is a network printer, and prints out control messages, device status ON / OFF history, alarm or abnormality occurrence / recovery history, and daily / monthly reports. Also, hard copies of the HIS (1) and HIS (2) screens can be printed. A plurality of network printers PRT can be connected to one system, and printing control to the network printer PRT is performed by the HIS (1) and the HIS (2), respectively, and by the CSV (11) to the CSV (22). be able to.

  The CSV (11) and the CSV (12) forming the redundant configuration in the redundant distributed control system of the present embodiment are the information transmission seen from itself via the information transmission path 21 and the control transmission path 31. System states such as the state of the line 21 and the control transmission line 31, its own process state, memory state, and CPU operating state are transmitted and received. Similarly, the CSV (21) and the CSV (22) that form a redundant configuration include the information transmission path 21 and the control transmission path 32 as viewed from the CSV transmission line 21 and the control transmission path 32. , System status such as its own process status, memory status, CPU operating status, etc. are transmitted to and received from each other.

  The functional configuration of each CSV for fulfilling these functions is shown in FIG. That is, the transmission path (1) that controls communication with respect to the information transmission path 21 (1) The communication control section 101, the transmission path that controls communication control with respect to the control transmission path 31 or 32, (2) the communication control section 102, and the information transmission path 21 side (1) Abnormality diagnosis unit 111, transmission line (2) abnormality diagnosis unit 112 for determining presence / absence of abnormality on the control transmission line 31 or 32 side, and these transmission lines (1) abnormality diagnosis Unit 111 and transmission path (2) Master / slave switching determination unit 120 for determining switching between the main system and the slave system based on the abnormality diagnosis result of abnormality diagnosis unit 112, human interface station HIS, printer PRT, and other control server stations The information communication is performed with the CSV via the information transmission path 21, and each control computer LOC and other controls It performs the information communication via chromatography bus station CSV and control transmission channel 31 or 32, and a main control processing unit 130 which performs further operations required control.

  FIG. 3 shows an example of the system state. The system abnormality includes an OS operation abnormality, a hardware abnormality, a transmission line (1) transmission abnormality that is a transmission abnormality of the information transmission line 21, a transmission line (1) reception abnormality that is a reception abnormality, a control transmission line 31 or There are 32 transmission abnormalities (2) transmission abnormalities, transmission abnormalities (2) reception abnormalities that are abnormally received, and abnormalities of applications installed in the transmission lines.

  As shown in the flowchart of FIG. 4, each CSV periodically diagnoses whether any abnormality has occurred in the master-slave switching determination unit 120 (steps S <b> 1 and S <b> 2). If an abnormality occurs, a master-slave switching determination signal is sent to the main control processing unit 130 (YES in step S3 or YES in step S4), and the main control processing unit 130 transmits the communication path 21 or 31 or 32 is used to communicate with the CSV of the other party, and the master-slave promotion / demotion is determined under a predetermined condition, and the master-slave switching is performed (steps S5 and S6).

  For example, between a pair of CSV (11) and CSV (12), normally, the CSV (11) operates as a master system and the CSV (12) as a slave system. If the main system CSV (11) is normal in the system state, the main system and the sub system are not switched. If the slave CSV (12) is normal and an error has occurred in the system status of the master CSV (11) until then, the CSV (12) issues a demote request to the CSV (11), and the CSV ( 12) is promoted to the primary, and CSV (11) is demoted to the secondary. Thereafter, this state is continued, and if the situation is reversed, the same promotion / demotion operation is performed. As for another pair of CSV (21) and CSV (22), the main system normally operates as CSV (21) and the subordinate system operates as CSV (22), and performs the operation of promotion / demotion similar to the above.

  In the conventional general distributed control system, mutual monitoring between the control server stations CSV (11) and CSV (12) and between the CSV (21) and CSV (22) is confirmed only on the information transmission path 21. Met. On the other hand, the redundant distributed control system of the present embodiment performs mutual monitoring of the system state on the information transmission path 21 and also performs mutual monitoring of the system state on the other control transmission path 31 or 32. As a result, the following operations and effects can be achieved.

  In the case of the conventional mutual monitoring performed only on the information transmission path 21, if a failure occurs between the CSV (11) and the information transmission path 21, the mutual monitoring cannot be performed, and the CSV (11) is the main. The CSV (12), which has been a subordinate system until then, is also promoted to the main system. At that time, CSV (11) no longer exists from HIS (1) and HIS (2), and it appears that CSV (12) has been promoted. In this case, both CSV (11) and CSV (12) behave as main systems. However, since the CSV that can be seen from the HIS (1) and HIS (2) is only the CSV (12), the CSV (12) is requested to read and write data. When the control setting is changed from HIS (1) or HIS (2), it is reflected only in CSV (12). For this reason, inconsistency between the CSV (11) and the CSV (12) occurs, and control is executed from both, so that control different from the intended setting is performed. On the other hand, in the system according to the present embodiment, in addition to mutual monitoring on the information transmission line 21, the control transmission line 31 also performs mutual monitoring on the CSV (11) and the CSV (12). If the abnormality of the system state of the CSV (11) is transmitted to the CSV (12) and the CSV (12) is normal, a demotion request is transmitted to the CSV (11) via the control transmission line 31, and the CSV (12 ) Is promoted to the main system. Therefore, mutual monitoring can be performed more reliably, and the main system and the slave system can be appropriately switched. The same applies to another pair of CSV (21) and CSV (22) sides.

(Second Embodiment)
The redundant distributed control system according to the second embodiment of the present invention will be described with reference to FIGS. The system according to the present embodiment connects the external interface ports of the redundantly configured control server stations CSV (11) and CSV (12) through a mutual monitoring transmission line 51, and this mutual monitoring transmission line. The system status is mutually monitored via 51, and the external interface ports of the CSV (21) and the CSV (22) are also connected by the mutual monitoring transmission line 52. The system status is mutually monitored via When the information transmission line 21 becomes abnormal, the main system and the subordinate CSV are switched in accordance with a preset rule according to the state of occurrence of another abnormality. As an external interface port for this mutual monitoring, a serial port, a parallel port, a USB port, or the like is used. Which is used is not particularly limited, but is a port different from the connection port of the information transmission path 21 and the connection port of the control transmission path 31 or 32.

  In the present embodiment, the information transmission path 21 and the control transmission path 31 are provided between the redundant configuration CSV (11) and CSV (12) and between the CSV (21) and CSV (22). Alternatively, mutual monitoring is performed at 32, and further, mutual monitoring is performed at the transmission path 51 or 52 for mutual monitoring. For this purpose, each CSV has the functional configuration shown in FIG. That is, a transmission path (1) that controls communication for the information transmission path 21 (1) a communication control section 101, a transmission path that controls communication control for the control transmission path 31 or 32, (2) a communication control section 102, and a mutual monitoring transmission path 51. Alternatively, a transmission line that controls communication for 52 (3) the communication control unit 103, the transmission line abnormality diagnosis shown in the list of FIG. 3 as in the first embodiment, that is, the presence or absence of abnormality on the information transmission line 21 side The transmission line abnormality diagnosis unit 110 for diagnosing the presence or absence of abnormality on the control transmission line 31 or 32 side and the presence or absence of abnormality in the mutual monitoring transmission line, based on the abnormality diagnosis result of the transmission line abnormality diagnosis unit 110 / Master / slave switching determination unit 120 for determining switching between slaves, human interface station HIS, printer PRT, and other control servers Information communication via the communication CSV and the information transmission line 21, and information communication via the control computer LOC and other control server stations CSV and the control transmission line 31 or 32, A main control processing unit 130 is provided for communicating mutual monitoring information via the mutual monitoring transmission line 51 or 52 and further performing necessary arithmetic control.

  Even in the present embodiment, the master-slave switching determination unit 120 is installed in the transmission line abnormality, the state of the CSV of the other party of mutual monitoring based on the system state shown in FIG. 3 as in the first embodiment. Determine whether there is an abnormality in the running application, and execute master-slave switching determination. The master-slave switching determination procedure is as shown in the flowchart of FIG. 4 as in the first embodiment. However, in the case of the present embodiment, the mutual monitoring transmission line 51 or 52 determines whether there is an abnormality in the CSV or other information transmission line 21 or the control transmission line 31 or 32 in the redundant configuration. The point is different.

  According to the redundant distributed control system of the present embodiment, by using the mutual monitoring transmission paths 51 and 52 that are not related to the information transmission path 21 and the control transmission paths 31 and 32 of the distributed control system, Since the mutual monitoring of the system state can be performed without affecting the communication of the information transmission line 21 and the control transmission lines 31 and 32, the conventional information is added to the effect of the first embodiment. Compared with the mutual monitoring of only the transmission line, the mutual monitoring can be performed more reliably, and the main system and the slave system can be appropriately switched.

  Even in the present embodiment, LON can be adopted for the control transmission line 31 or 32 as in the first embodiment. In the description of the above embodiment, the transmission line abnormality diagnosis unit 110 performs mutual monitoring between CSVs using the information transmission line 21, the control transmission line 31 or 32, and the mutual monitoring transmission line 51 or 52. However, the present invention is not limited to this. The information transmission line 21 and the mutual monitoring transmission line 51 or 52, or the control transmission line 31 or 32 and the mutual monitoring transmission line 51 or 52, can be connected between the CSVs. Monitoring may be performed.

  (Third Embodiment) A redundant distributed control system according to a third embodiment of the present invention will be described with reference to FIG. The present embodiment employs LON transmission lines LON31 and LON32 as control transmission lines between the control server station CSV and the control computer LOC with respect to the system of the first embodiment shown in FIG. It is characterized by that. In LON (registered trademark), transmission / reception of the system state is performed through the transmission path, and switching processing between the primary system and the secondary system is performed according to a rule set in advance according to the content of the failure. Since replacement (software signal connection update) is performed, there is an advantage that the non-monitoring time can be avoided in a short time by switching the main system and the sub system in the redundant configuration. In order to employ the LON transmission lines LON31 and LON32, all devices connected to the LON transmission line as nodes, that is, control server stations CSV (11), CSV (12), CSV (21), CSV (22) Each of the control computers LOC (11) to LOC (16) and LOC (21) to LOC (26) is equipped with a LON neuron chip NR having a unique NEURON ID for identifying each.

  In the following description, the control server stations CSV (11) and CSV (12) connected through the LON transmission line LON31 and the control computers LOC (11) to LOC (16) will be described, but they are connected through the LON transmission line LON32. The same applies to the control server stations CSV (21) and CSV (22) and the control computers LOC (21) to LOC (26).

  The redundant distributed control system according to this embodiment operates in the same manner as in the first embodiment. However, in LON, the communication protocol is LonTalk (trade name). In the case of LON, nodes connected to the LON generally perform signal transmission and reception by performing a soft connection called bind between the nodes. In the redundant control server stations CSV (11) and CSV (12), mutual monitoring of the system state is performed, and when switching between the primary system and the secondary system becomes necessary, control with the primary system CSV (11) is performed. If the bind data between the computer LOC (11) to LOC (16) for the computer is not inherited to the slave CSV (12), between the CSV (12) and LOC (11) to LOC (16) As a result, the current value of the signal cannot be updated in the human interface stations HIS (1) and HIS (2). Conventionally, a system in which a LON-compliant CSV has a redundant configuration has not been common, but in this embodiment, when the primary system and the secondary system are switched, the CSV (11) that was the primary system is bound. A command for automatically performing the node replacement is issued to the CSV (12) that has been the slave until then. Information necessary for this node replacement is a NEURON ID and an XIF file. Therefore, the XIF file need not be changed if the CSV (11) and the CSV (12) are the same. With regard to the NEURON ID, the CSV (11) ID is registered in advance in the CSV (11), and the CSV (11) ID is registered in the CSV (12) in advance, so that the node replacement is automatically performed. .

  According to the present embodiment, by performing this node replacement, the control server station CSV can be made redundant in the distributed control system using LON, and as a result, the same operations and effects as in the first embodiment can be achieved.

  (Fourth Embodiment) A redundant distributed control system according to a fourth embodiment of the present invention will be described with reference to FIG. The redundant distributed control system of this embodiment is different from the system of the second embodiment shown in FIG. 5 in that a LON transmission line is used as a control transmission line between the control server station CSV and the control computer LOC. It is characterized by adopting LON31 and LON32. Also in this embodiment, in order to adopt the LON transmission lines LON31 and LON32 as the control transmission lines, the LON neuron having a unique NEURON ID for identifying each device connected to the LON transmission line as a node. A chip NR is mounted.

  The redundant distributed control system according to this embodiment operates in the same manner as in the second embodiment. However, as a feature of the LON transmission path, nodes connected to the LON transmission path perform signal transmission and reception by performing a soft connection called binding between the nodes. As in the third embodiment, when the primary system and the secondary system are switched, the node (replacement) of the primary system CSV (11) is replaced with the secondary system CSV (12). Issue automatic commands.

  According to the present embodiment, by performing this node replacement, the control server station CSV can be made redundant in the distributed control system using LON, and as a result, the same operations and effects as in the second embodiment can be achieved.

  (Fifth Embodiment) A fifth embodiment of the redundant distributed control system of the present invention will be described with reference to FIGS. 9, 10, and 11. FIG. The present embodiment is characterized in that the control computer LOC has a redundant configuration by adopting LON in the transmission path connecting the control server station CSV and the control computer LOC. That is, the control server station CSV (11) is single, the control computers LOC (11) to LOC (14) are made redundant A and B, and similarly, the control server station CSV (21) is also single. The control computers LOC (21) to LOC (24) are redundantly configured with A and B redundancy. In the following, only the control server station CSV (11) and the control LOC (11) to LOC (14) connected by one LON transmission line LON31 will be described, but the same applies to the other.

  In LON, the communication protocol is LonTalk. As shown in FIG. 9, the control computer LOC has a redundant configuration by attaching sub-numbers A and B such as LOC (11A) and LOC (11B), LOC (12A) and LOC (12B), and the like. A control computer is shown. A pair of control computers LOC (11A) and LOC (11B) are connected to the devices A1 and A2 to be controlled by the control signal line 60, and the control computers LOC (12A) and LOC ( 12B) is connected to each of the devices B1 and B2 to be controlled by the control signal line 60, and others are similarly connected.

  The control server station CSV and the control computer LOC connected to the LON transmission line LON31 are all LON nodes and are equipped with a neuron chip NR.

  Each control computer LOC (here, LOC (11A) will be described but the same applies to other LOCs) performs master-slave switching control on the control target devices A1 and A2 with the functional configuration shown in FIG. That is, the control signal line communication control unit 201 that sends and receives control signals to the devices A1 and A2, the LON communication control unit 202 that controls communication with the LON transmission line LON31, and the abnormality in the control signal line 60 with the devices A1 and A2 Control signal line abnormality diagnosis unit 211 for diagnosing presence / absence, LON abnormality diagnosis unit 212 for diagnosing presence / absence of abnormality in LON transmission line LON (11), and abnormality diagnosis of these control signal line abnormality diagnosis unit 211 or LON abnormality diagnosis unit 212 Based on the result, the master / slave switching judgment unit 220 that performs master / slave switching judgment, and the control server station CSV (11) communicate with the LON transmission line LON31, and the control target via the control signal line 60 Communicating with the devices A1, A2, etc., and the master-slave switching request Send to 11), and a main control processing unit 230 that performs the CSV (11) receiving Node replace command from performing nodes replace the control and other operations required control.

  In the present embodiment, as shown in the flowchart of FIG. 11, the main control computer LOC (11A) and the secondary control computer LOC (11B) are controlled devices A1 and A2. The system is individually monitored (step S11), and the system information on the LON transmission line LON31 side is mutually monitored via the LON31 (step S12). When the system status is monitored and it is determined that the master side becomes abnormal and the slave system needs to be promoted to the master system (YES in step S13 or YES in step S14), the slave LOC (11B) is the control server station. The switch is notified to the CSV (11), and a command for automatically replacing the binding of the LOC (11A) where the CSV (11) is the primary system to the LOC (11B) which is the secondary system is issued (Step S15 or Step S15) S16). The information of the control computer LOC necessary for this node replacement is the NEURON ID and the XIF file, but the XIF file is registered in advance in the CSV (11) as in the third and fourth embodiments. Then, node replacement is performed automatically. Thereby, the redundancy of the LON-compatible control computers LOC (11A) and LOC (11B) can be realized.

  As described above, the same applies to the other LOC (12A) and LOC (12B) connected to the LON transmission line LON31 in a redundant configuration, and the CSV connected to another LON transmission line LON32 The same applies to (21) and the control computers LOC (21A) and LOC (21B).

  (Sixth Embodiment) A sixth embodiment of the redundant distributed control system of the present invention will be described with reference to FIGS. In the system of this embodiment, the redundant distributed control system of the fifth embodiment shown in FIG. 9 is provided between the primary and secondary control computers LOC (11A) and LOC (11B). The mutual monitoring of the system state such as between the LOC (21A) and the LOC (21B) can be performed using the mutual monitoring transmission lines 411, 421 connected to the external interface port of each control computer LOC. It is characterized by that.

  A pair of control computers LOC (11A) and LOC (11B) are connected to the devices A1 and A2 to be controlled by the control signal line 60, and the control computers LOC (12A) and LOC ( 12B) is connected to each of the devices B1 and B2 to be controlled by the control signal line 60, and others are similarly connected.

  As shown in FIG. 13, both the control computers LOC (11A) and LOC (11B) are connected to the control signal line communication control unit 201 and LON transmission line LON31 that send and receive control signals to the devices A1 and A2 to be controlled. Diagnose the presence or absence of abnormality in the LON transmission line LON31, the presence or absence of abnormality in the LON transmission line LON31, the transmission line (4) communication control part 203 responsible for communication control for the mutual monitoring transmission line 411 The transmission path abnormality diagnosis section 210, the master / subsidiary switching determination section 220 for determining the switching between the main system and the slave system based on the abnormality diagnosis result of the transmission path abnormality diagnosis section 210, and the control server station CSV (11) and the LON 31. Through the control signal line 60, and communicate with the devices A1, A2, etc. to be controlled through the control signal line 60. Sends e request to CSV (11), and a main control processing unit 230 that performs the CSV (11) received performing node replace the control and other necessary arithmetic control nodes replace command from. Other control computers LOC (12A), LOC (12B), LOC (21A), LOC (22B), and the like have the same configuration.

  In the redundant distributed control system of this embodiment, as in the fifth embodiment, between the control computers LOC (11A) and LOC (11B), and between LOC (21A) and LOC (21B). The master-slave switching control by mutual monitoring is performed, and the presence or absence of abnormality in the LOC of the other party in the redundant configuration, the other control signal line 60, the LON transmission line LON31, etc. is determined by the mutual monitoring transmission lines 411, 421, etc. The master-slave switching is performed as described above.

  According to the redundant distributed control system of the present embodiment, by using the mutual monitoring transmission lines 411, 421, etc. that are not related to the control signal line 60, the LON transmission lines LON31, LON32, etc. of the distributed control system, Since mutual monitoring of the system state can be performed without affecting the communication of the control signal line and the LON transmission path, in addition to the effect of the fifth embodiment, the LOC can be more reliably monitored. Therefore, it is possible to appropriately switch between the main system and the slave system.

  Even in this embodiment, the external interface port used by each LOC for mutual monitoring may be a serial communication port, a parallel communication port, a USB port, or even a wireless communication port, and the type of communication is not particularly limited. .

(Other examples)
In the present invention, the system state acquisition of the control server station CSV of the redundant configuration of the first embodiment and the second embodiment is transmitted / received through a network or signal line different from the trunk information transmission line 21, Regarding the method of acquiring system information through a plurality of paths and switching between the primary and secondary systems of the control server station CSV according to the situation, the transmission system of the transmission system to which the control computer LOC of this system is connected is not necessarily used. Regardless, wireless or power line carrier (PLC) may be used for the transmission path, and the transmission method is not limited. That is, the information transmission path 21 and the control transmission paths 31 and 32 may be Ethernet (registered trademark), LON, or field bus, and the type and protocol of the transmission path are not particularly limited.

  Further, when the control server station CSV is single and there is only one control server station, it may be integrated with the human interface station HIS.

  In the present invention, the information transmission path 21 may be single or double, or may be a loop type. The connection form of the control transmission lines 31 and 32 connecting the control server station CSV and the control computer LOC may be a bus type, a star type, or a free topology.

  In addition, the system according to each of the above embodiments can include a data server station that stores history data transmitted from the control server station CSV and filing measurement data.

1 is a block diagram of a redundant distributed control system according to a first embodiment of this invention. The block diagram which shows the function structure of the control server station CSV in the said embodiment. The list of items for which the CSV determines normality / abnormality in the above embodiment. The flowchart of the master-slave switching control of CSV in the said embodiment. The block diagram of the redundant distributed control system of the 2nd Embodiment of this invention. The block diagram which shows the function structure of CSV in the said embodiment. The block diagram of the redundant distributed control system of the 3rd Embodiment of this invention. The block diagram of the redundant distributed control system of the 4th Embodiment of this invention. The block diagram of the redundant distributed control system of the 5th Embodiment of this invention. The block diagram which shows the function structure of CSV in the said embodiment. The flowchart of the master-slave switching control of the control computer LOC in the said embodiment. The block diagram of the redundant distributed control system of the 6th Embodiment of this invention. The block diagram which shows the function structure of LOC in the said embodiment.

Explanation of symbols

HIS (1), HIS (2) Human interface station CSV (11), CSV (12), CSV (21), CSV (22) Control server station LOC (11) to LOC (16), LOC (21) to LOC (26) Control computer LOC (11A), LOC (11B) to LOC (14A), LOC (14B), LOC (21A), LOC (21B) to LOC (24A), LOC (24B) Control computer PRT Printer LON31, LON32 LON transmission path 21 Information transmission path 31, 32 Control transmission path 51, 52 Mutual monitoring transmission path 411-414, 421-424 Mutual monitoring transmission path 60 Control signal line

Claims (5)

A human interface station, a plurality of control computers, and a plurality of controls connected to the human interface stations via an information transmission path and connected to the plurality of control computers via a control transmission path A server station,
The human interface station performs setting and display of data necessary for each of the plurality of control server stations through the information transmission path, measurement data display of the control computer, status display, and remote control of the control target,
The plurality of control computers are distributedly connected to the control transmission line, measure and collect data necessary for control of a control target, and perform control.
The plurality of control server stations store and manage data of the plurality of control computers through the control transmission path, and output a control output request when a set control condition is satisfied, and ,
Each of the plurality of control server stations has a redundant configuration of a primary system and a secondary system, and performs mutual monitoring through the information transmission path and the control transmission path, and the plurality of control server stations according to the mutual monitoring failure status. A redundant distributed control system comprising a master-slave switching function for switching between a master system and a slave system of a control server station. A human interface station, a plurality of control computers, connected to the human interface station via an information transmission path, connected to the plurality of control computers via a control transmission path, and mutually A plurality of control server stations connected via a mutual monitoring transmission line,
The human interface station performs setting and display of data necessary for each of the plurality of control server stations through the information transmission path, measurement data display of the control computer, status display, and remote control of the control target,
The plurality of control computers are distributedly connected to the control transmission line, measure and collect data necessary for control of a control target, and perform control.
The plurality of control server stations store and manage data of the plurality of control computers through the control transmission path, and output a control output request when a set control condition is satisfied, and ,
Each of the plurality of control server stations has a redundant configuration of a master system and a slave system, and performs mutual monitoring through the mutual monitoring transmission path, and according to the mutual monitoring failure status, A redundant distributed control system having a master-slave switching function for switching between a master system and a slave system. The control transmission line is a LON transmission line,
The control server station automatically replaces a node between the control computer and the control server station according to the failure status detected by the mutual monitoring when the main system is switched to the main system. The redundant distributed control system according to claim 1, wherein: A plurality of control computers that are distributedly connected to the LON transmission line, measure and collect data necessary for control of the control target, and perform control;
A control server that is connected to the plurality of control computers via the LON transmission path, manages data of the plurality of control computers, and outputs a control output request when a set control condition is satisfied Station,
A human interface station that is connected to the control server station via an information transmission path and performs setting and display of data necessary for the control server station, measurement data display of the control computer, status display, and remote control of the control target And consists of
Each of the plurality of control computers has a redundant configuration with respect to the LON transmission path, and the other control computers and control server stations that have the redundant configuration via the LON transmission path. When the status of each other is monitored and the slave system switches from the main system of the control computer to the main system for the binding between other control computers and the control server station according to the failure status detected by the mutual monitoring A redundant distributed control system having a master-slave switching function for automatically replacing a node. A plurality of control computers that are distributedly connected to the LON transmission line, measure and collect data necessary for control of the control target, and perform control;
A control server that is connected to the plurality of control computers via the LON transmission path, manages data of the plurality of control computers, and outputs a control output request when a set control condition is satisfied Station,
A human interface station that is connected to the control server station via an information transmission path and performs setting and display of data necessary for the control server station, measurement data display of the control computer, status display, and remote control of the control target And consists of
Each of the plurality of control computers has a redundant configuration with respect to the LON transmission line, and the plurality of control computers having the redundant configuration mutually communicate with each other through the external interface port mutual monitoring transmission line. In addition, the LON transmission line also monitors the mutual status between the other control computer and the control server station, and the other control computer according to the failure status detected by the mutual monitoring. Redundant distributed control characterized by having a master / slave switching function that automatically replaces nodes when the master system of the control computer is switched from the master system to the main system for binding to the control server station system.

Images