JP4722724B2 - Supervisory control system - Google Patents

Description

  The present invention relates to a supervisory control system, and more particularly to a redundancy technique in a horizontally distributed configuration.

  Conventional monitoring control devices (OpS) usually have a server client configuration, and such a monitoring control system is disclosed in, for example, Patent Document 1. In the technique described in Patent Document 1, the monitoring control system is configured by separating a client server type OPS into a client OPS1 and a server OPS2, and including the client OPS1, the server OPS2, and a controller 3.

Japanese Patent Laid-Open No. 2002-073166

  However, in a server client type system such as the monitoring control device described in Patent Document 1, when a redundant configuration is considered in consideration of actual operation, a system in which a plurality of clients are installed, a server and a hard disk are duplicated, and a failure occurs It is necessary to introduce middleware for switching. Such a redundancy measure has a problem that the burden of hardware costs and system maintenance / management costs increases for small and medium-sized systems.

  On the other hand, when multiple redundant monitoring control devices are installed and a redundant configuration is used, a horizontal distribution configuration using multiple monitoring control devices is possible, but there is no data linkage between the monitoring control devices. There was a problem that it was distributed and management became complicated.

  Therefore, an object of the present invention is to provide a monitoring control system that can avoid data distribution in a horizontal distribution configuration and can be redundant at low cost.

A monitoring control system according to a first aspect of the present invention is a horizontally distributed monitoring control system comprising a plurality of monitoring target devices and monitoring control devices connected to the monitoring target devices via a communication network. The monitoring control device includes a GUI unit that performs GUI (Graphical User Interface) display, a device IF unit that can communicate with the monitoring target device, a data management unit that manages data held therein, and a data management unit. A remote object registry unit in which a remote object performing access processing is registered; and a connection control unit that controls a connection with the GUI unit, the device IF unit, and the remote object unit, and any one of the monitoring control devices The data management unit possessed by the stand is used as the active system, and the data management possessed by the other stand All the monitoring control devices share the active and standby data management units, and the connection control units of the plurality of monitoring control devices are any one of the monitoring control devices. Obtaining the remote object from the remote object registry unit belonging to one unit or the remote object registry unit belonging to the other one unit, in each of the one and the other one of the monitoring control device, Redundant control data having status information indicating whether or not both are valid in communication and working / standby information indicating whether the data management unit of both is a working system or a standby system is the data management unit And the data management units of the both communicate with each other to update the redundancy control data, and the monitoring control devices other than the both are updated. In each of the devices, redundancy management data having the state information is stored in the connection control unit, and the connection control unit does not access the data management unit in which the state information of the redundancy management data is invalid. The status information of the one of the redundant management data is invalidated when access to one of the data management units cannot be executed normally, and the redundancy management data invalidates the status information. Updating the status information of the redundancy management data to the status information of the redundancy control data when the status information of the redundancy control data is different from the status information of the redundancy management data. Features.

Monitoring and control system of claim 1, wherein according to the present invention can avoid the dispersion of the data, so it is possible to realize redundancy at a low cost.

(Embodiment 1)
FIG. 1 shows a schematic configuration diagram of the monitoring control system according to the first embodiment of the present invention. As shown in FIG. 1, the monitoring control system according to the first embodiment includes a monitoring target device 20 (# 1 to #n), a monitoring target device 20 (# 1 to #n), and an information communication network (DCN). This is a horizontally distributed supervisory control system comprising a plurality of supervisory control devices 10 (# 1 to #n) connected via the. Here, the # symbol in parentheses indicates a device number.

  FIG. 2 is a block diagram showing the internal configuration of the monitoring control apparatus 10. The monitoring control device 10 includes a GUI unit 1 that performs GUI (Graphical User Interface) display, a device IF unit 2 that performs communication control with the monitoring target device 20, and a data management unit that manages data held in the monitoring control device 10. 3, a connection control unit 4 that controls connection of each unit, and a remote object registry 5 in which a remote object that performs access processing to the data management unit 3 is registered. The data managed by the data management unit 3 is, for example, data collected from the monitoring target device 20, and the data management unit 3 stores a database that holds the data.

  1 all have the internal configuration shown in FIG. 2, all the monitoring control of the data management unit 3 included in the predetermined monitoring control device 10 is performed. Shared by device 10. Here, as an example, the shared data management unit 3 is included in the monitoring control device 10 (# 1), and the data management units 3 included in the other monitoring control devices 10 (# 2 to #n) are not used. As an example, the operation of the monitoring control system will be described in the first embodiment. In the following description, for example, the data management unit 3 included in the monitoring control device 10 (# 1) is also expressed as the data management unit 3 (# 1).

  FIG. 3 shows an example of a flowchart showing the operation of the monitoring control system. In FIG. 3, a reference request to data (data held by the data management unit 3 (# 1)) generated in the supervisory control device 10 (# 1) is generated by an operator operation of the supervisory control device 10 (for example, # 2). Take the case as an example. First, as a pre-stage of this operation, the data management unit 3 (# 1) registers a remote object that performs access processing to the remote object registry 5 (# 1) at the time of activation. This operation is also performed by the supervisory control device 10 (# 2 to #n), but the data management unit 3 (# 2 to #n) is not shared and is not used in subsequent operations.

  In step ST1, the GUI unit 1 (# 2) receives an operator operation.

  In step ST2, GUI unit 1 (# 2) transmits a data acquisition request signal as a data management unit access request to connection control unit 4 (# 2).

  In step ST3, the connection control unit 4 (# 2) that has received the data acquisition request signal acquires the IP address of the monitoring control device 10 (# 1) having the shared data management unit 3 (# 1). .

  In step ST4, it is determined whether or not a remote object for performing access processing to the shared data management unit 3 (# 1) has been acquired.

  If the remote object has not been acquired as a result of the determination in step ST4, the connection control unit 4 (# 2) acquires the remote object from the remote object registry 5 (# 1) in step ST5.

  In step ST6, the connection control unit 4 (# 2) accesses the shared data management unit 3 (# 1) using the acquired remote object method, and acquires desired data from the database.

  In step ST7, the acquired data is transmitted from the connection control unit 4 (# 2) to the GUI unit 1 (# 2) and output as a result to the operator.

  If the remote object has already been acquired as a result of the determination in step ST4, the result is output to the operator through steps ST6 and ST7.

  The operation of the supervisory control system has been described with reference to the data management unit 3 (# 1). However, the data update to the data management unit 3 (# 1) is the same.

  Therefore, the supervisory control system according to the first embodiment can be configured in a horizontal distribution in which the data management unit is shared, and can avoid the problem of data being distributed to each supervisory control device. Further, by setting the IP address of the data management unit to be shared as the IP address of the own monitoring control device, it can be used as a single monitoring control device.

  That is, while maintaining the advantages of being able to be used alone and having high maintainability, it is possible to solve the shortcomings that occur during horizontal distribution, in which data is distributed during multiple use and management becomes complicated.

(Embodiment 2)
The configuration of the monitoring control system according to the second embodiment is the same as that shown in FIGS. 1 and 2 described in the first embodiment. However, in the second embodiment, redundancy is taken into consideration in the monitoring control system according to the first embodiment to improve availability when a failure occurs in the shared monitoring control device 10 (# 1).

  Among the monitoring control devices 10 (# 1 to #n), all the monitoring control devices 10 share the data management unit 3 of a predetermined unit with the active system and the data management unit 3 of the other unit with the standby system. Data update / reference processing is performed for both the active and standby data management units 3. Further, as will be described later, the connection control unit 4 holds redundancy management data indicating the state (valid / invalid) of the data management unit 3, and the data management unit 3 performs the state (valid / invalid) of the data management unit 3. ), Redundancy control data including the active / standby system and the update date is held, and the connection control unit 4 and the data management unit 3 use the redundancy management data and the redundancy control data to System state management is performed to prepare for failures.

  If a failure occurs in any one of the systems, the one-system operation is performed using only the remaining systems. Here, as an example, the monitoring control device 10 (# 1) and the monitoring control device 10 (# 2) have the active and standby data management units 3 respectively, and the other monitoring control devices 10 (# 3 to # 3). The data management unit 3 included in #n) is not used. When the connection control unit 4 (# 1 to #n) accesses the data management unit (# 1, # 2), as described in the first embodiment, the remote object is acquired. Since the description of the operation that occurs every time is superposition, it will be omitted in the following description.

  Next, the redundant operation of the monitoring control system according to the second embodiment will be described in detail with reference to FIG. FIG. 4 is a diagram showing an operation of redundancy control using redundancy control data necessary for state management. As shown in FIGS. 4A to 4E, the data management unit 3 holds redundancy control data, and the connection control unit 4 holds redundancy management data.

  Each time the access to the data management unit 3 is accessed, the connection control unit 4 adds and transmits redundancy management data. The data management unit 3 receives the received redundancy management data and the redundancy control data held therein. Based on the above, the statuses of the active system and the standby system are determined and the response to the connection control unit 4 is made. Based on the response, the connection control unit 4 performs an access process to the data management unit 3 as shown in FIGS. In the following description, the operation that occurs for each access will be described in a simplified manner.

  FIG. 4A shows a state in which the active supervisory control device 10 (# 1) is in an initial startup state and the standby supervisory control device 10 (# 2) is not active. At this time, the data management unit 3 (# 1) performs state matching with the data management unit 3 (# 2), and as a result, holds the redundancy control data shown in FIG. The status update date stores the time when the data management unit 3 (# 1) starts operating as an active system. Since standby data management unit 3 (# 2) is not activated, the state is invalidated. The data management unit 3 (# 1, # 2) performs state matching at the time of activation and every predetermined time.

  At this time, if the connection control unit 4 (for example, #n) accesses both the active and standby data management units 3 (# 1, # 2), the standby data management unit 3 (# 2) Inability to access, only the active data management unit 3 (# 1) is accessed, and the redundancy control data held by the data management unit 3 (# 1) is read to make the redundancy as shown in FIG. Update management data.

  FIG. 4B shows a state where the standby supervisory control device 10 (# 2) is activated. The standby data management unit 3 (# 2) performs state matching with the active data management unit 3 (# 1), and holds data (for example, monitoring) in the active data management unit 3 (# 1). (Data collected from the target device 20) is synchronized with and updated to the database, then the redundancy control data is updated, and the activation as the standby system is completed. At the same time, the redundant control data is also updated in the active data management unit 3 (# 1).

  When the connection control unit 4 (#n) accesses the active data management unit 3 (# 1), the redundancy control data is read and the redundancy management data is updated. Thereafter, the active data management is performed. Access to both unit 3 (# 1) and standby data management unit 3 (# 2) is started, and a transition to redundant operation is made. For example, when the connection control unit 4 (#n) accesses the data management unit 3 and updates data, the active data management unit 3 (# 1) and the standby data management unit 3 (# 2) Update both stored databases with transaction processing.

  FIG. 4C shows a state where a failure has occurred due to a communication cable failure in the active data management unit 3 (# 1). When the connection control unit 4 (#n) fails to access the active data management unit 3 (# 1), the connection control unit 4 (#n) within one transaction, the standby data management unit 3 (#n) Of the redundancy control data of # 2), the data management unit 3 (# 1) is updated to an invalid state and the data management unit 3 (# 2) is updated to the active system. The redundancy management data held by the connection control unit 4 (#n) is also invalidally updated by the data management unit 3 (# 1), and thereafter, the data management unit 3 (# 1) is not accessed. From this state, the single system operation is performed only by the data management unit 3 (# 2). Since each supervisory control device 10 is horizontally distributed, a fault is individually detected when the data management unit 3 (# 1) is accessed, and the above operation allows only one system operation of the data management unit 3 (# 2). Transition sequentially.

  FIG. 4D shows a state immediately after the failure of the communication cable of the data management unit 3 (# 1) is recovered. In this case, the data management unit 3 (# 1) and the data management unit 3 (# 2) respectively hold different redundancy control data. The connection control unit 4 (#n) continues to access only the data management unit 3 (# 2) because the data management unit 3 (# 1) is disabled in the redundancy management data. Note that the connection control unit 4 (for example, # 3) that has never accessed the data management unit 3 (# 1, # 2) during the failure is the data management unit 3 (# 1) and the data management unit 3 (# 2), there is a possibility of accessing both, but in this case, it is read that the redundancy control data is inconsistent in both systems, and the connection control unit 4 (# 3) reads the working system with the new update date (in this case) Determines that the data management unit 3 (# 2)) is a legitimate working system, and thereafter continues to access only the data management unit 3 (# 2).

  FIG. 4E shows a state after the state matching with the data management unit 3 (# 2) is performed after the data management unit 3 (# 1) is restored. The data management unit 3 (# 1) synchronizes with the data held in the data management unit 3 (# 2) by state matching, updates the database, and starts as a standby system. The redundant control data is also updated, the state of the data management unit 3 (# 1) is made valid, and the active / standby is set to the standby system. The connection control unit 4 (#n) reads the redundancy control data of the data management unit 3 (# 2) and identifies that the data management unit 3 (# 1) is activated as a standby system. Access to both data management unit 3 (# 2) and standby data management unit 3 (# 1) is started, and the operation returns to the redundant operation.

  Therefore, the supervisory control system according to the second embodiment can realize redundancy to the data management unit 3 while sharing data during horizontal distribution, and can improve availability. Further, since the shared data management unit 3 is only the active system and the standby system, data distribution can be avoided. Furthermore, since the redundant configuration can be realized by software, it is not necessary to duplicate hard disks and servers, and the initial investment can be suppressed, so that it can be introduced into a system for small and medium scales at low cost.

1 is a schematic diagram illustrating a monitoring control system according to a first embodiment. It is a block diagram which shows the internal structure of a monitoring control apparatus. 3 is a flowchart showing the operation of the monitoring control system according to the first embodiment. FIG. 10 is a diagram illustrating an operation of the monitoring control system according to the second embodiment.

Explanation of symbols

1 GUI unit, 2 device IF unit, 3 data management unit, 4 connection control unit, 5 remote object registry.

Claims (1)

A horizontally distributed monitoring control system comprising a plurality of monitoring target devices and a plurality of monitoring control devices connected to the monitoring target devices via a communication network,
The monitoring and control device includes:
A GUI unit for displaying a GUI (Graphical User Interface);
A device IF unit capable of communicating with the monitored device;
A data management unit for managing the data held;
A remote object registry unit in which a remote object that performs access processing to the data management unit is registered;
A connection control unit that controls connection with the GUI unit, the device IF unit, and the remote object unit;
The data management unit included in any one of the monitoring control devices is used as an active system, the data management unit included in the other one is used as a standby system, and all the monitoring control devices are configured as the active system and the standby system. Share the data management department of
The connection control unit of the plurality of the monitoring control devices acquires the remote object from the remote object registry unit belonging to any one of the monitoring control devices or the remote object registry unit belonging to the other one And
In each of the one of the monitoring control devices and the other one, status information indicating whether or not both are valid in communication, and whether the data management unit of the both is an active system or a standby system Redundant control data having working / standby information indicating whether or not there is stored in the data management unit,
The two data management units communicate with each other to update the redundancy control data,
In each of the monitoring control devices other than the both, the redundancy management data having the state information is stored in the connection control unit , and the connection control unit is the data in which the state information of the redundancy management data is invalid. Accessing the data management unit that is valid without accessing the management unit, and when the access to one of the data management units of the both cannot be executed normally, the one state in the redundancy management data Invalidate information, and when the status information of the redundancy control data and the status information of the redundancy management data are different from each other, the status information of the redundancy management data is changed to the state of the redundancy control data. A supervisory control system characterized by updating to status information.

Images