KR20030063847A - Duplex control apparatus for micro control of diesel dispersion control system remote terminal equipment - Google Patents

Abstract

PURPOSE: A micro-controller duplexing control system is provided to enable a user to set controllers as main and assistant, to make the two controllers monitor each other, and to make the assistant controller perform a function of the main controller if there occurs a failure at the main controller. CONSTITUTION: The system comprises a controller role setter, a main controller(10), an assistant controller(20) and a memory(30). The controller role setter enables a user to set one controller as a main controller(10) or set the other controller as an assistant controller(20). The memory(30), storing the data collected by the two controllers(10, 20), is shared by the two controllers(10, 20) for a prevention of data damage via a controller switching operation. Each controller(10, 20) comprises a watch dog(11, 21), a watch dog monitoring module(12, 22), a heart bit generator(15, 25), a check buffer(16, 26), a controller(17, 27), and a main memory(18, 28). The watch dog(11, 21) generates a watch dog signal for each task. The watch dog monitoring module(12, 22) monitors a state of the watch dog(11, 21). The heart bit generator(15, 25) generates a heart bit according to each task error or a watch dog state for notifying the other side controller of the task error or the watch dog state. The check buffer(16, 26) receives the heart bit from the other side controller. The controller(17, 27) determines a current set state, monitors the heart bit state input by the heart bit generator(15, 25), monitors an operation state of the other side controller based on the input heart bit, and performs a proper controller role, main or assistant, according to the monitoring result. The main memory(18, 28) reads the data from the shared memory(30).

Description

Duplex control apparatus for micro control of diesel dispersion control system remote terminal equipment

The present invention provides a remote terminal device for a diesel power distribution control system in a distributed power generation control system for a diesel power generation control system, which enables the control of each facility driving device and the field data changing in real time in each facility driving device to be collected from an input / output module. It relates to a microcontroller.

Diesel generation distributed control system (DCS) is a digital input, analog input and pulse input from analog sensors and digital state contacts installed in various facilities such as engines, power and boilers in power plants. (pulse input) The signal can be received from the main process module of the remote terminal unit (RTU), the lower terminal of the system, via the communication relay, and displayed on the monitor. (Digital output), Analog output (Analog output) signal is transmitted to the main process module of the remote terminal device through the communication relay device to the main process module is output to the drive device of each facility.

The digital output and analog output signals output to the main process module of the remote terminal device may be controlled manually or may be controlled by the communication relay itself logic.

The present invention relates to the configuration of the main process module of such a remote terminal device.

In the case of a main process module of a remote terminal device, if a failure or fault occurs, serious data loss and system operation may be stopped.

In the present invention, such a controller (MPM) is configured as a dual, in each of the two controllers, by setting the user to set each controller to perform the main control operation and the sub-control operation, by monitoring the operation state of each other When the main controller detects a defect, the sub-controller recognizes this and transfers in real time so that the main controller can perform the main control operation without losing data, thereby providing a reliable main process module of the remote terminal device.

1 is a block diagram showing the configuration of a microcontroller redundancy control device of a remote terminal device for a diesel power distribution control system.

The present invention comprises two controllers, the controller setting means for setting one of the two controllers as the main controller and another controller as the sub-controller, and stores the data collected from the main controller or the sub-controller In order to prevent data loss through controller switching, the controller includes a memory means shared by two controllers. Each controller includes a watchdog that generates a watchdog signal for each task. , Watchdog monitoring means for monitoring the status of watchdog, heart-bit generating means for notifying the counterpart according to the task-specific error or watchdog status, check for receiving the heartbeat signal of the counterpart controller It judges the buffer and its current setting state, and monitors the heartbeat of the state inputted from the heartbeat generation means according to the setting state. And control means for monitoring the operation state and performing a controller operation according to the monitoring result, and a main memory means for reading and storing data stored in the memory means.

The configuration and operation of the microcontroller redundancy control device of the remote terminal device for diesel power distribution control system of the present invention characterized by such a configuration will be described below with reference to the embodiment shown in FIG.

Composed of two controllers 10 and 20, each controller 10 and 20 operates as a main controller 10 and a sub-controller 20 by a controller setting unit configured on a back plain. A variety of data collected from the local data bus in the device 10 or the sub-controller 20, and shared memory shared by the two controllers (10, 20) to prevent data loss It is configured to include a dual port RAM (30),

The main controller 10 checks a watch dog 11, which is an alarm means for each task, a watch dog monitoring unit 12 for monitoring the presence or absence of a watch dog, and checks for disconnection or continuous communication error. Communication status monitoring task 13, a control logic task 14 that detects and compares the state of a storage device or a buffer and reports a normal / abnormal state, and an error or watchdog error state for each task 13 and 14. When the combination occurs by the heart-bit (heart-bit) generation unit 15 for notifying the other party and each task (13, 14) in progress, the error state is detected, and the resulting heartbeat And the setting state of the current controller setting unit is determined, and by monitoring the opposite heartbeat bit inputted to the check buffer 16 according to the setting state, the operating state of the counterpart sub-controller 20 is monitored and according to the monitoring result. Control unit (DSP) 17 performing a controller operation And it is configured to include a main memory unit 18 for storing read data stored in the shared memory unit 30.

The sub-controller 20 has the same configuration as the main controller 10.

In the redundant control apparatus of the present invention, one of the two controllers is set as the main controller 10, and the other controller 20 is set as the sub-controller 20 by the controller setting means configured on the backplane.

Since the two controllers 10 and 20 have the same configuration and share information through the shared memory 18, there is no problem in setting any one of the two controllers as the main controller 10.

The redundant operation state and various operation data of the main controller 10 share information in the shared memory unit 30 as described above, and provide the information to the user through an LCD display connected to the two systems, It is designed to provide via system status indicator (LED).

As described above, the controller 10, 20 determines the setting state of the controller setting means, and determines whether the main controller 10 or the sub-controller 20 is the main controller according to the setting state. In the case of 10), the main control operation is performed, and in the case of the sub-controller 20, when the fault is generated by monitoring the main control unit 10, the main control operation is continued.

The main controller 10 collects various data from the local data bus, and the collected data are stored in the shared memory unit 30 through the system data bus.

Thereafter, the data stored in the shared memory unit 30 is stored in the main memory unit 18.

At this time, the sub-controller 20 always reads the stored data while monitoring the shared memory unit 30 in the standby state and stores the stored data in its main memory unit 28.

Through this process, the main controller 10 and the sub-controller 20 have the current data at the same time, even if the main controller 10 is switched from the main controller 10 to the sub-controller 20 does not cause data loss.

Detecting the operation state of each other, and describes the switching process of the controller to the main controller 10 as follows.

The watchdog 11 generates a watchdog signal for each task, and the watchdog monitoring unit 12 checks the watchdog state.

That is, the watchdog 11 generates a watchdog signal to reset the system when an error occurs in each task. The watchdog monitor 12 checks the state of the watchdog 11. It transmits to the heartbeat generation unit 15.

The communication status monitoring task 13 checks for a communication disconnection or a continuous communication error, and the control logic task 14 detects / compares the status of a storage device or a buffer.

The control unit 17 monitors the communication state task 13 and the control logic task 14 and transmits them to the heartbeat generation unit 15 according to the result information.

The heartbeat generation unit 15 generates a heartbeat signal.

The sub-controller 20 constantly monitors the state of the heartbeat generation unit 15, and when a change occurs in the signal of the heartbeat generation unit 15, it determines that the main controller 10 is abnormal and performs main control operation. Will be performed.

At this time, since the data up to the present of the main controller 10 is stored in the main memory unit 28 of the sub-controller 20, the work of the main controller 10 is performed without loss of data.

Here, the main controller 10 is restored by the reset of the manager or itself, the signal of the heartbeat generator 15 is normally restored, the main controller 10 at this time performs a sub-control operation, By performing the operation of the sub-controller 20 as described above, if the sub-controller 20 has a fault occurs, the main control operation is performed again.

The signal of the heartbeat generator 15 is a signal having the same period and amplitude in a normal state, and when such a signal is changed irregularly, it is regarded as a fault.

That is, in the present invention, the heartbeat signal is generated by the physical heartbeat signal due to the watchdog 11 state and the heartbeat control of the controller 17 due to the communication state and the error state of the control logic. Signals are monitored by the counter controllers 10 and 20, and the controllers 10 and 20 are switched according to the user's setting state to perform main control operations.

As described above, the two controllers are set to the main control and the sub-control according to the user's setting, the sub-controller monitors the main controller's system, and a fault is generated in the operation state of the main controller. By performing the operation, and by sharing data with each other so that the operation can be performed without loss of data, it is possible to provide a reliable microcontroller of the remote terminal device for a diesel power distribution control system.

Claims (1)

Consists of two controllers, the controller setting means for setting one of the two controllers as the main controller and another controller as the sub-controller, and stores the data collected from the main controller or the sub-controller, controller switching In order to prevent data loss through switching, the controller includes a memory means shared by two controllers. Each controller includes a watchdog that generates a watchdog signal for each task and a watchdog. A watchdog monitoring means for monitoring the status of the controller, a heartbeat generating means for informing the counterpart according to an error or watchdog status for each task, a check buffer for receiving a heartbeat signal of the counterpart controller, Judging one's current setting state and monitoring the heartbeat of the state input from the heartbeat generation means according to the setting state, the operation state of the counterpart controller And a control means for monitoring and performing a controller operation according to the monitoring result, and a main memory means for reading and storing data stored in the shared memory means. Controller redundancy control.