JPH0635758A - Program monitor controller - Google Patents

Abstract

PURPOSE:To flexibly use watchdog timers relating to a program monitor controller for monitoring a program by the watchdog timers. CONSTITUTION:In the program monitor controller 1 for controlling the monitoring of the program by providing the watching timers 2-1 to 2-n, the plural watchdog timers 2-1 to 2-n and a monitoring object setting means 3 for setting validity or invalidity for the respective watchdog timers 2-1 to 2-n, are provided and the validity or the invalidity is set for the respective watchdog timers 2-1 to 2-n.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a program monitoring control device for monitoring a program with a watchdog timer.

A program monitoring control device uses a watchdog timer to monitor whether a program is completed within a preset time and detect runaway of the program. When a program runaway is detected, the entire device is reset.

[0003]

2. Description of the Related Art Usually, a watchdog timer of a conventional program monitoring device is one, and an abnormal process when a program runs out is fixedly fixed such as resetting the entire device.

FIG. 14 shows a conventional program supervisory control device. In the figure, reference numeral 100 is a watchdog timer, which is restarted every time the execution of the program is started,
It is reset each time it is finished. Then, it is determined whether the program is operating normally by determining whether the program has ended within a preset time. Reference numeral 101 is an abnormality processing means, which operates when the watchdog timer detects a program runaway. 102 is a monitored program.

The operation of the configuration shown in the figure will be described. The watchdog timer 100 is preset with a program monitoring time. The monitored program 102 restarts the watchdog timer 100 when the processing is started. Then, when the program ends, the watchdog timer is reset.

Since the timer setting time of the watchdog timer 100 is set to be equal to or longer than the time from the start to the end of the monitored program, if the monitored program 102 is operating normally, when the program execution ends. Since the watchdog timer 100 is reset, it does not time out. However, if the monitored program runs out of control due to a loop or the like, the monitored program 102 does not complete the termination processing, and thus the processing is not terminated. Therefore, the watchdog timer 100 times out and detects an abnormality in the monitored program. And
A signal indicating an abnormality of the monitored program 102 is output to the abnormality processing means 101. As a result, the abnormality processing means 101 performs predetermined abnormality processing such as resetting the entire device.

[0007]

The conventional program monitoring and control apparatus is usually controlled by one watchdog timer, and the control for abnormality processing is fixedly fixed such as resetting the entire apparatus. . In some cases, multiple watchdog timers are used to monitor and control the program. In that case, however, the error handling is fixed, and the error handling means is finely determined according to the importance of the monitored program. There wasn't.

An object of the present invention is to provide a program monitoring control device which can flexibly operate a watchdog timer.

[0009]

According to the present invention, when a plurality of watchdog timers are provided, it is possible to freely set validity / invalidity for each watchdog timer. In addition, the contents of the process when an abnormality is detected can be set according to the program so that it is the optimum abnormality process.

FIG. 1 is a diagram showing a basic configuration (1) of the present invention. The figure shows the basic configuration in the case where a plurality of (n) watchdog timers are provided and the enable / disable is set for each watchdog timer.

In the figure, reference numeral 1 is a program monitoring controller, 2-1 is a watchdog timer 1, which is the first watchdog timer. 2-n is a watchdog timer n, which is an nth watchdog timer. Reference numeral 3 is a monitoring target setting means for setting valid / invalid for each watchdog timer. Reference numeral 4 denotes an abnormality processing starting means, which is a watchdog timer (2-1
The 2-n) timeout signal is input to activate the abnormality processing means 7. A CPU 4'executes the abnormality processing means 7 and the like. Reference numeral 7 denotes an abnormality processing means, which performs abnormality processing when the watchdog timer times out. Reference numeral 11-1 is a monitored program 1 whose operation is monitored by the watchdog timer 2-1. Reference numeral 11-n is a monitored program n, whose operation is monitored by the watchdog timer 2-n.

In the figure, the CPU for controlling the whole is omitted. The operation of the configuration shown in the figure will be described later (see operation).
FIG. 2 shows the basic configuration (2) of the present invention.

In the figure, 1 is a program monitoring control device, 2 is a watchdog timer, and 4 is an abnormality processing starting means for inputting a time-out signal of the watchdog timer 2 to start the abnormality processing means 7. . 4 '
Is a CPU that executes the abnormality processing means 7 and the like. Reference numeral 5 denotes an abnormality processing definition holding unit, which holds information for selecting the abnormality processing means 7. For example, the start address of a program (abnormality processing means 7) which is constituted by a register and defines an abnormal processing is stored. Reference numeral 6 denotes an abnormal processing setting means for setting the start address of the abnormal processing means in the abnormal processing definition holding unit 5, for example. 7 is an abnormality processing means, for example,
This is a program that performs abnormality processing stored in memory.

The operation of the configuration shown in the figure will be described later (see operation).
It is a basic configuration (3) of the present invention. In the figure, 1 is a program monitoring control device, 2 is a watchdog timer, and 8 is an abnormality recording means, which inputs a time-out signal of the watchdog timer and records the abnormality of the monitored program 11 in the abnormality record holding unit 8 '. To do. Reference numeral 8'denotes an abnormality record holding unit for holding abnormality information of the monitored program 11. Reference numeral 9 denotes a processing delegation means, which is used when a processing request is issued from the processing requesting source 10 and stores an abnormal record.
If the requested monitored program 11 is normal, it is executed, and if an abnormality is recorded, the alternative processing means 12 is designated and executed. Reference numeral 10 denotes a processing request source, which requests execution of the monitored program 11 and the like. Reference numeral 12 is an alternative processing means for performing alternative processing when the monitored program 11 is abnormal.

Reference numeral 14 denotes another device, which has an alternative processing means 12 for the monitored program 11 (for example, if the program monitoring control device is the workstation A, another workstation B, etc.). ). In the other device 14, 13 is a process receiving means. 12 'is an alternative processing means.

Reference numeral 15 is another program monitoring control device, which replaces the program monitoring control device 1 and performs alternative processing. In another program monitoring control device 15, 9'is a processing delegating means, 10 'is a processing requesting means, 1
2 "is a monitored program. In the figure, the entire operation is controlled, and the monitored program 11 and the alternative processing means 1 are controlled.
2. The CPU that executes the processing transfer means 9 and the like is omitted.

The operation of the configuration shown in the figure will be described later (see operation).

[0018]

FIG. 4 is a diagram for explaining the operation of the basic configurations (1) and (2) of the present invention. In the figure, 2 is a watchdog timer, 3 is
Is a monitoring target setting means, 4 is an abnormal processing starting means, and 4'is C
PU, 5 is an abnormal process definition holding unit, and 6 is an abnormal process setting means. Reference numeral 7 denotes an abnormality processing means, which is a program for performing abnormality processing stored in the memory 7 ". 7'is a start address of the abnormality processing means. 7" is a monitored program 11, the abnormality processing means 7, etc. Is a memory for storing.
Reference numeral 11 is a monitored program. Reference numeral 11 'is a start-up process of the watchdog timer 2 in the monitored program 11 (WDT represents a watchdog timer (hereinafter the same)). Reference numeral 11 ″ is a reset process of the watchdog timer 2 in the monitored program 11.

The operation of the basic configuration (1) of the present invention shown in FIG. 1 and the basic configuration (2) of the present invention shown in FIG. 2 will be described with reference to the drawings. The watchdog timer 2 is enabled or disabled in the monitoring target setting means 3 (for example, a mask for enabling or disabling the time-out signal of the watchdog timer is set. Alternatively, a mask for enabling or disabling the start operation) Set). When there are a plurality of watchdog timers (2-1 to 2-n) as shown in FIG. 1, each of them is set to valid or invalid.

When the monitored program 11 is executed, W
The watchdog timer 2 is activated in the DT activation process 11 '. Then, the watchdog timer 2 is reset by the WDT reset processing 11 ″. The time-out setting time of the watchdog timer 2 is from the WDT start processing 11 ′ to the WDT reset processing when the monitored program 11 is operating normally. It is set longer than the time until 11 ". Therefore, when the monitored program 11 is operating normally, the watchdog timer 2 does not time out. However, if the monitored program 11 runs out of control due to a loop, WDT reset processing 11 "
The process does not proceed until and the watchdog timer 2 times out. The watchdog timer 2 which has detected the abnormality of the monitored program 11 notifies the abnormality processing starting means 4 of the abnormality of the monitored program.

The abnormal processing starting means 4 sets the address held by the abnormal processing definition holding portion 5 (start address 7'of the abnormal processing means 7) in the instruction counter of the CPU 4 ', and C
The PU 4'executes the abnormality processing means 7 from the start address 7 '. For example, if the monitored program 11 is a printer output control program, various settings can be made, such as resetting the corresponding printer, turning on a warning lamp, or issuing a buzzer warning.

(In FIG. 1 and FIG. 2, the signal line is drawn from the abnormal process starting means 4 directly to the abnormal process means 7 by a solid line, but the operation of the CPU 4'is omitted for convenience sake. The CPU 4'is omitted in the following description).

When the invalid mask is set in the watchdog timer 2, if the mask suppresses the time-out output, the time-out signal of the watchdog timer 2 is not input to the abnormal process starting means 4. Since it does not exist, abnormal processing is not started.

As described above, according to the basic configuration (1) of the present invention, when a plurality of watchdog timers are provided, it is possible to individually enable or disable the program according to the development status of the program. Therefore, it is possible to prevent the watchdog timer from operating unnecessarily and hindering the program development at the time of program development.

Further, in the basic configuration (2), if the plurality of abnormality processing means 7 are set for device reset, lamp warning, buzzer warning, etc. and selected according to the contents of the monitored program 11, the monitored program can be selected. It is possible to finely determine the abnormality processing according to the degree of importance of 11.

Next, the operation of the basic configuration (3) of the present invention shown in FIG. 3 will be described. When the watchdog timer 2 detects an abnormality in the monitored program 11, it notifies the abnormality recording means 8 of the abnormality in the monitored program 11. The abnormality recording means 8 records the abnormality of the monitored program 11 in the abnormality record holding unit 8 '.

After that, when the processing request source issues a processing request to the monitored program 11, the processing delegating means 9 refers to the abnormal record holding unit 8 '. When the abnormality of the monitored program 11 is recognized, the alternative processing means 12 is requested to perform the alternative processing of the monitored program 11. For example, if the monitored program 11 is a printer output program and the alternative processing means 12 is a file input / output process, the printer output is not performed and the data is stored in the file for the time being.

As a result of the processing delegating means 9 referring to the abnormal record holding unit 8 ', if there is no abnormal recording, the processing delegating means 9
Executes the monitored program 11. The alternative processing may be the alternative processing means 12 ′ of the other device 14. For example, if the program monitoring controller 1 is for the workstation A and the monitored program is a printer output program, the printer of another workstation may perform the alternative process.

In this case, the process delegating means 9 requests another device 14 (another workstation or the like) for an alternative process. The other device 14 accepts the alternative process by the process accepting unit 13, and the alternative processing unit 12 'performs the alternative process.

Alternatively, the alternative process may be performed in another program monitoring controller 15 (for example, a program monitoring controller of another workstation). In this case, when the process delegating means 9 ′ of the other program monitoring control device 15 receives a request for the alternative process from the program monitoring control device 1, the process delegating means 9 ′ causes the monitored program 12 ″ to substitute the process.

(Note that in FIG. 3, the processing delegating means 9,
The processing request source 10, the monitored program 11, and the alternative processing means 12 are configured by software, and the execution is executed by the CPU, but the CPU is omitted).

The present invention comprises a basic configuration (1), a basic configuration (2),
Basic configuration (3) Each may be independent, but two or three of them may be combined to configure a program monitoring control device.

[0033]

EXAMPLES In the following description, the basic configuration of the present invention (1)
, The same numbers as in the basic configuration (2) and basic configuration (3) represent the same parts.

FIG. 5 shows an embodiment of the present invention. FIG. 5 (a) is an embodiment of the basic configuration (2) of the present invention. The basic configuration (2) of the present invention may have one watchdog timer, but FIG. 5 has a plurality of watchdog timers (WDT).

In the figure, 5-1 is an abnormal processing definition holding unit 1, which is a register for holding the start address of the first abnormal processing means. 5-n is an abnormal process definition holding unit n
And is a register for holding the start address of the n-th abnormality processing means. 7-1 is the abnormality processing means 1 and is the first abnormality processing means. 7-n is an abnormality processing means n, which is the n-th abnormality processing means. 11-1
Is processing 1, and is the first monitored program, 11-
n is the process n, which is the n-th monitored program.

Reference numerals 2-1 and 2-n are a watchdog timer 1, watchdog timers n and 4, an abnormal process starting means, and 6 is an abnormal process setting means. 2-1, 2-n,
Since 4 and 6 are the same as those in FIGS. 1 and 2, their description is omitted (the same applies hereinafter).

It is assumed that any of the watchdog timers 2-1 to 2-n has detected an abnormality in the process to be monitored (process 1 to process n). Depending on the process (process 1 to process n) in which the abnormality is detected, the abnormal process definition holding unit (5-1
~ 5-n) is selected. Then, the abnormal process starting unit 4 selects the abnormal process definition holding unit (5-1 to 5).
Based on the start address of -n), the abnormality processing means (7-1 to 7-n) of the start address is activated. Then, the abnormality processing is executed by the activated abnormality processing means (7-1 to 7-n) (device reset, lamp warning, etc.).

FIG. 5 (b) shows an embodiment in which the basic configuration (1) and the basic configuration (2) of the present invention are combined. Figure 5 (b)
5 (a), the common numbers represent common parts (hereinafter, common numbers represent common parts in the configuration of each embodiment).

(B) differs from (a) in that the monitoring target setting means 3 is provided. The monitoring target setting means 3 is WDT2-
Valid / invalid is set for each of 1 to WDT2-n. A watchdog timer (2-
In 1 to 2-n), the time-out signal is masked, or the activation of the timer is masked and the operation is stopped. Therefore, according to this embodiment, only the necessary watchdog timers (2-1 to 2-n) can be operated, and unnecessary watchdog timers do not operate and become an obstacle. Further, the timeout time can be finely set for each of processing 1 to processing n.

FIG. 6 shows an embodiment of the present invention. Figure 6 (a)
Is an embodiment in which the basic configuration (1) and the basic configuration (3) of the present invention are combined.

In (a), 8-1 'is the abnormal record holding unit 1 and represents the first abnormal record holding unit. 8-n '
Is an abnormal record holding unit n and represents an n-th abnormal record holding unit. Reference numeral 12-1 is the alternative processing means 1, which is the first alternative processing. 12-n is an alternative processing means n,
This is the nth alternative process.

W set to be valid by the monitoring target setting means 3
When any of the DT1 (2-1) to WDTn (2-n) detects an abnormality in the process (process 1 to process n) to be monitored, the abnormality recording unit 8 detects the abnormality (process). Notification of processing 1 to processing n). The abnormality recording means 8 records the abnormality information of the abnormal process in any of the abnormality record holding unit 1 to the abnormality record holding unit n. Next, processing requester 1
When an execution request is sent to process 1 to process n from 0, the process delegating means 9 refers to the abnormal record holding unit 1 to the abnormal record holding unit n. Then, when the abnormality of the process to be executed is recorded, the process delegating means 9 causes the process to perform the alternative process by the alternative process (the alternative process 1 to the alternative process n).

FIG. 6 (b) shows an embodiment in which the basic configuration (2) and the basic configuration (3) of the present invention are combined. In the figure, the area of the abnormal record holding unit 8'is designated by the address stored in the abnormal process definition holding unit 5.

The abnormal process setting means 6 stores the area of the abnormal record holding unit 8'in the abnormal process definition holding unit 5. Other than that, the operation is the same as that of FIG. FIG. 7 shows an embodiment of the present invention.

(A) is a basic configuration (1) and a basic configuration (2) of the present invention
In Fig. 4, the configuration is shown in the case where there are a plurality of abnormality processing means and a plurality of abnormality record holding units of the basic configuration (3) and they are combined.

FIG. 7B is different in that a monitoring target setting means 3 is added to the configuration of FIG. 7A. Watchdog timers 2-1 to 2-by adding the monitoring target setting means 3
The operation of n is the same as that of the basic configuration (1), except that the operation of (b) is the same as the operation of (a).

FIG. 8 shows an embodiment of the present invention. The figure shows that when the basic configuration (1) and the basic configuration (3) are provided with a plurality of abnormal record holding units (8-1 'to 8-n'), the alternative process of the abnormal process is replaced by the alternative process of another device. Means (12-1'-12
-N ') shows the configuration performed.

In the figure, 1'denotes another device (another workstation or the like). 12-1 'is an alternative processing means 1 and 12-n' is an alternative processing means n (for example, a disk device output program).

When a processing request is received from the processing request source 10, the processing delegating means 9 refers to the abnormal record holding unit 1 to the abnormal record holding unit n, and if the requested processing is normal, the designated processing (processing 1 to process n) are executed. If the designated process is recorded as an abnormality in any of the abnormal record holding unit 1 to the abnormal record holding unit n, the other device 1 ′ is requested to perform the process. In the other device 1 ′, the process accepting unit 13 accepts the process request from the process delegating unit 9, and the alternative process unit 1 (12-
1 ')-alternative processing means n (12-n') is selected, and the alternative processing is performed.

FIG. 9 shows an embodiment of the present invention. The figure shows the basic configuration (1), the basic configuration in which a plurality of abnormality processing means are defined (2), and the basic configuration including a plurality of abnormality record holding means.
In the configuration combining (3), the configuration for performing alternative processing to other devices is shown.

FIG. 9 is different from FIG. 8 in that the abnormal process setting means 6 and the abnormal process definition holding sections (5-1 to 5-n) are provided and that a plurality of abnormal process means are provided. The abnormality processing means (7-1) is included in the plurality of abnormality processing definition holding units (5-1 to 5-n).
7-n) start address and abnormal record holding unit (8-
Area addresses 1'to 8-n ') are stored. Otherwise, the operation is the same as in FIG.

FIG. 10 shows an embodiment of the present invention. The figure shows a configuration in which, when the basic configuration (1) and the basic configuration (3) of the present invention are combined, an alternative process is requested to another program monitoring control device.

In the program supervisory control device 1, the process request source 10 sends an abnormal record holding unit (8-1'-8-n ').
When a process request is made to a process (process 1 to process n) in which abnormal recording is performed, the process delegating unit 9 refers to the abnormal record holding units 8-1 'to 8-n' to execute the process in another program. Request the monitoring control device 1 '. In the other program monitoring control device 1 ', the process delegating means 9'receives the process, and selects an appropriate process from process 1 (11-1') to process n (11-n ') according to the content, Perform alternative processing.

FIG. 11 shows a configuration in which the basic configuration (2) and the basic configuration (3) are combined with each other, and another program monitoring and control device performs an alternative process. When the abnormality of the process 11 is recorded in the abnormality record holding unit 8 ′,
The processing delegating means 9 requests the processing request from the processing request source 10 to another program monitoring control device 1 '. In another program supervisory control device 1 ', the same process n as the process 11 of the program supervisory control device 1 is selected and an alternative process is performed.

FIG. 12 shows an embodiment of the present invention. In the figure, when the basic configuration (1) and the basic configuration (2) are provided with a plurality of abnormality processing means, in the basic configuration (3), a plurality of abnormality record holding units 8-1 'to 8-2' are provided. A configuration in which the alternative processing is performed in another program monitoring control device in a configuration in which the provision cases are combined is shown.

The program monitoring control apparatus 1 is the same as FIG. 11 except that the process transfer means 9 operates by referring to a plurality of abnormal record holding units to determine the transfer destination of the process.
FIG. 13 shows the detailed configuration of the embodiment of the present invention.

In the figure, reference numeral 1 is a program monitoring control device, which is included in the network management device on the master side. 1'is a program supervisory controller
It is included in the network management device on the slave side. Normally, the network management device on the master side (including the program monitoring control device 1) monitors the entire high-speed digital network and switches to the slave side (1 ') when the master side (1) becomes abnormal. , The slave side (1 ') controls.

In the program monitoring control device 1,
Reference numeral 1 is a watchdog timer 1 (WDT1), and 2-n is a watchdog timer 2 (WDT2) (for simplification of description, the case where there are two watchdog timers is shown). 3 is a monitoring target setting means, which is WDT1, WD
The interrupt mask for T2 is set. Four
Is an abnormal process starting means for starting post-processing of WDT1 and WDT2 (process in the case of detecting an abnormality of the monitored program), and the abnormal process definition holding unit is triggered by an interrupt signal due to a timeout of WDT1 or WDT2. The contents of the registers (5-1, 5-2) are set in the instruction counter of the CPU, and the reset circuit 72 is activated. Reference numerals 5-1 and 5-2 denote an abnormal process definition holding unit 1 and an abnormal process definition holding unit 2, respectively.
It is an entry register for post-processing of WDT2. And
Abnormality processing means (7-1 to 7-n) to be started when an abnormality is detected by WDT1 or WDT2 (see FIG. 12)
Start address and abnormal record holding unit (8-1 ′ to 8−
n ') is a register for setting the address of the area. 6
Is an abnormality processing setting means, and is WDT1 or WDT
When the abnormality is detected in 2, the start address of the abnormality processing means (7-1 to 7-n) (see FIG. 12) and the address of the abnormality record holding unit (8-1 'to 8-2') to be activated Is registered in the abnormal process definition holding units 5-1 and 5-2. Reference numeral 8 denotes an abnormality recording means, which is a process for recording the detected abnormality in the recording area (memory) when the abnormality is detected by the WDT 1 or WDT 2. 8
Reference numerals -1 'and 8-2' denote an abnormal record holding unit 1 and an abnormal record holding unit 2, respectively, which are memory areas for recording that the WDT1 or WDT2 has detected an abnormality. Reference numeral 9 denotes a process delegating means (dispatch processing unit) which transmits a processing request from a higher-level process (monitoring process, control process, etc.) to a lower-level process (control command editing process, printer output process, file output process, etc.). Alternatively, it is a process of notifying the upper process that the lower process has become abnormal. Reference numeral 10 is a processing request source. Reference numeral 10-1 is a monitoring process, which is a process of monitoring the entire network. Reference numeral 10-2 is a control process, which is a process for controlling the elements forming the network. Reference numeral 11 is a monitored program, 11-1 is a control command editing process, which is a process for editing a control command based on a request from the control process. Reference numeral 11-2 is a printer output process, which is a process for outputting to a printer based on requests from various processes. Reference numeral 12 denotes a file input / output process, which is a process of inputting / outputting to / from a file based on a request from various processes (in the present embodiment, a case of using the file input / output process is shown as an example of the alternative processing means).

Reference numeral 72 is a reset circuit, which is a circuit for resetting the entire apparatus. A restart process 73 is for initializing the apparatus. Reference numeral 74 denotes a warning output process, which notifies a maintenance staff that an abnormality is detected by WDT1 or WDT2 by a lamp or a buzzer. 7
Reference numeral 5 is a degeneration process, which stops the operation of the process in which the abnormality is detected by the WDT1 or WDT2.

In another program monitoring control apparatus 1 ', 9'is a processing delegating means (patch processing section), 10-
1'is a monitoring process, 10-2 'is a control process, and 11' is a printer output process.

In the configuration shown in FIG. 13, when a process abnormality is detected, which of the following processes is to be performed, such as device reset, device restart, warning output, and degeneration of the abnormal process? By changing the contents of the registers (5-1, 5-2) of the abnormal process definition holding units 1 and 2, it is possible to arbitrarily select each WDT monitoring target.

By masking an interrupt from a specific WDT, it is possible to set no processing even if the WDT detects an abnormality. In the configuration shown in the figure, for example, when an error is detected in the printer output process, the file input / output process temporarily stores the subsequent printer output in the disk. Alternatively, the configuration is shown in the case of requesting a program monitoring control device on the slave side for printer output.

Although not shown in the figure, the control process is also monitored by the watchdog timer. In this case, when an abnormality is detected in the control process, the dispatch control unit prohibits the subsequent control operation and the master side. The program supervisory control device 1 is switched to a slave device for monitoring only and starts its operation, and the slave side (the program supervisory control device 1 ') is switched to operate as a master to perform a control operation. It is also possible to request processing.

Although omitted in the figure, control processing (described above), monitoring processing, dispatch processing, etc. are also monitored by the WDT. Further, in the above description, the watchdog timer is configured by the hardware timer, but it is possible to use one WD by using the software timer.
It is also possible to realize a function equivalent to the case where a plurality of WDTs are provided at T. In this case, the structure of other parts is not affected.

In the above description, the abnormality processing starting means is described as a case of using hardware, but it is also possible to configure an equivalent function by software. Further, the abnormality recording means processing, the degeneration processing, and the warning output processing are
In summary, an area in which processing to be performed at the time of abnormality detection is defined is prepared for each WDT, and the abnormality processing may be selected by changing the content of the area.

[0066]

According to the present invention, it is possible to freely set valid / invalid of program monitoring for an arbitrary watchdog timer according to the development situation. Therefore, for example, it is possible to prevent the watchdog timer from being operated more than necessary during the development, which would hinder the program development. In addition, the optimum detection time can be set according to the program to be monitored, and the abnormality processing can be set according to the program to be monitored, so that the operation can be performed finely. Therefore, it becomes possible to take appropriate measures according to the contents of the program in which the abnormality has occurred.

[Brief description of drawings]

FIG. 1 is a diagram showing a basic configuration (1) of the present invention.

FIG. 2 is a diagram showing a basic configuration (2) of the present invention.

FIG. 3 is a diagram showing a basic configuration (3) of the present invention.

FIG. 4 is an operation explanatory diagram of basic configurations (1) and (2) of the present invention.

FIG. 5 is a diagram showing an example of the present invention.

FIG. 6 is a diagram showing an example of the present invention.

FIG. 7 is a diagram showing an example of the present invention.

FIG. 8 is a diagram showing an example of the present invention.

FIG. 9 is a diagram showing an example of the present invention.

FIG. 10 is a diagram showing an example of the present invention.

FIG. 11 is a diagram showing an example of the present invention.

FIG. 12 is a diagram showing an example of the present invention.

FIG. 13 is a diagram showing a detailed configuration of an exemplary embodiment of the present invention.

FIG. 14 is a diagram showing a conventional program monitoring control device.

[Explanation of symbols]

 In FIGS. 1, 2 and 3, 1: program monitoring control device 2-1: watchdog timer 1 2-n: watchdog timer n 3: monitoring target setting means 4: abnormal processing starting means 4 ′: CPU 5: Abnormal processing definition holding unit 6: Abnormal processing setting means 7: Abnormal processing means 8: Abnormal recording means 8 ': Abnormal recording holding unit 9: Processing delegating means 9': Processing delegating means 10: Processing request source 10 ': Processing requesting means 11: Monitored program 12: Substitute processing means 12 ': Substitute processing means 12 ": Monitored program 13: Processing receiving means 14: Other device 15: Other program monitoring control device

Claims (5)

[Claims] 1. A watchdog timer (2-1 to 2-
In the program monitoring control device (1) for monitoring and controlling the program, the plurality of watchdog timers (2-1 to 2-n) and the watchdog timer (2-
Monitoring target setting means (3) for setting valid or invalid of each of the watchdog timers (1 to 2-n).
-1 to 2-n) A program monitoring control device characterized by setting valid or invalid for each. 2. A program supervisory control device (1) comprising a watchdog timer (2) for supervisory control of a program, wherein one or a plurality of fault handlings for carrying out a process when the watchdog timer detects a fault. Means (7),
One or more abnormal processing definition holding units (5) holding information for selecting the abnormal processing means (7), and an abnormal processing definition holding unit (5) for selecting the abnormal processing means (7) Error processing setting means (6) for setting information and time-out signal of watchdog timer (2)
When the watchdog timer (2) detects an error in the monitored program (11), the error processing definition holding unit (5) stores the information stored in the error processing definition holding unit (5). A program supervisory control device characterized by performing abnormality processing by means of abnormality processing means (7) based on the above. 3. A program monitoring controller (1) comprising a watchdog timer (2) for monitoring and controlling a program, wherein an abnormality of a monitored program (11) detected by the watchdog timer (2) is detected. One or more error record holding unit (8 ') to record and watchdog timer
Input the time-out signal of (2) and hold the abnormal record (8 ')
An abnormality recording means (8) for recording an abnormality in the monitored program and a processing delegating means (9) for selecting an alternative processing means (12) for performing an alternative process of the monitored program in which the abnormality has occurred are provided.
When there is a processing request for 1), the processing delegation means (9) refers to the abnormal record holding section (8 '), and if an abnormal record is made for the monitored program, the alternative processing means (1)
A program monitoring and control device characterized by requesting processing to 2). 4. The alternative processing means is an alternative processing means (12) of its own program monitoring and control device which has detected an abnormality, or an alternative processing means (1) for performing alternative processing in another device (14).
2 '), or a monitored program (12 ") which is the monitored program (12") that performs the same processing in another program monitoring controller (15). 5. The program monitoring controller according to claim 1, 2 or 3, or 2 or 3
A program supervisory control device characterized by performing program supervisory control by combining two.