JP2000207252A - Remote controller, fault information processing method therefor and recording medium recorded with control program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a central processor from being troubled with a fault information process. SOLUTION: If a fault occurs in a remote controller 4, circuits 41 to 46 having detected the fault send fault information to a fault analyzing circuit 45. When it is decided that the operation is disabled, the input of a data switching circuit 43 is switched to data (q) by using a switching signal (p) and a transfer control circuit 31 decodes the sent data, and when it is recognized that the given indication is fault information from the remote controller, the central processor 1 disconnects the remote controller 4 where the fault has occurred from a computer system according to the fault information and carries on the operation of the system without the use of the remote controller 4. The remote controller 4, where the fault has occurred, initializes itself.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a remote control device, a fault information processing method therefor, and a recording medium on which a control program is recorded. More particularly, the present invention relates to a remote control device connected to a general-purpose large-scale computer system, a fault information processing method therefor, and a method thereof. The present invention relates to a recording medium on which a control program is recorded.

[0002]

2. Description of the Related Art A remote control device connected to a general-purpose large-sized computer is connected to a main storage device and a central processing unit (computer main body; CPU) via a channel device in an input / output processing device via a serial interface. Data read and write control is performed between the external storage device. Further, when the channel device is instructed to read the data in the external storage device from the central processing unit and store the data in the main storage device, the channel device notifies the remote control device of the instruction from the central processing unit and transmits the data from the external storage device. Read and write to main memory via I / O processor.

Further, when the central processing unit instructs to write the data stored in the main storage device to the external storage device, the input / output processing device reads the data from the main storage device and sends the data via the channel device. The data is transferred to the control device and written to the external storage device.

Japanese Patent Application Laid-Open No. Hei 5-15109 discloses a communication control adapter connected to a computer for general control.
A system having a RAM (random access memory) for storing firmware for performing communication control, a ROM (read only memory) for storing firmware for transferring dump information in advance, and an external storage device for storing dump information has been proposed. . That is, a RAM for storing firmware for performing communication control and a ROM for storing firmware for transferring dump information in advance are provided in the communication control adapter, and are connected to a computer (central processing unit) for overall control.

In response to the notification of the occurrence of the failure during the communication processing, the firmware on the ROM is started via the bus, and the dump information on the RAM is stored in the firmware via the bus. The firmware is re-implemented (re-initialized) to the RAM via the bus and restarted, thereby achieving automatic recovery. Further, the software of the host computer monitors the communication control adapter, and when a failure is detected, dump information is automatically collected and re-IMPL is executed to achieve automatic recovery.

[0006]

Problems to be Solved by the Invention
In the case of the proposal described in Japanese Patent Application Laid-Open No. 9, when a failure occurs in the communication control adapter, dump information is always collected and automatically restored (initialized). Repeats the same operation. For this reason, there is a problem that the processing efficiency during the normal operation of the host computer (central processing unit) is significantly reduced.

An object of the present invention is to provide a remote control device which does not involve a central processing unit in fault information processing, a fault information processing method thereof, and a recording medium on which a control program is recorded.

[0008]

A remote control device according to the present invention is a remote control device for connecting an external storage device to a computer system via a channel device,
Failure analysis means for determining whether the failure can be recovered when a failure has occurred in its own device, and self-initialization means for performing self-initialization when it is determined that the failure can be recovered And characterized in that:

Further, if a failure occurs again within a predetermined time after the occurrence of the failure, the computer system is disconnected from the computer system.

Further, when the failure analysis means determines that the failure is irrecoverable, the failure analysis means is disconnected from the computer system.

Further, there is provided a failure information processing method for a remote control device for connecting an external storage device to a computer system via a channel device, wherein the failure can be recovered when a failure occurs in the remote control device. Determining whether the failure is recoverable, performing self-initialization when the failure is determined to be recoverable, and disconnecting from the computer system if the failure occurs again within a predetermined time after the failure occurs And a step of disconnecting from the computer system when the failure is determined to be unrecoverable.

The operation of the present invention is as follows. In the event of a failure, instead of performing automatic recovery (initialization) by software running on the CPU of a higher-level computer (central processing unit), the failed device analyzes and analyzes the failure information in the device. If it is determined that the operation is possible as a result, the (self) initialization is performed again, a retransfer request is issued to the higher-level device, and the operation is performed again. In addition, the failure is monitored again for a predetermined time using a timer, and in the case of a fixed failure, the failed device is quickly disconnected so that the load is not applied to the host device (central processing unit). To

That is, when a fault occurs in the remote control device, the own remote control device analyzes the fault information in the device. As a result of the analysis, if it is determined that the operation is possible, the (self) initialization is performed again, and a retransfer request is issued to the channel device to perform the operation again. Start the monitoring timer at the timing of issuing the retransfer request, measure the elapse of the predetermined time, and if the failure recurs at the time of the predetermined time,
The failure information is determined and transferred to the channel device.

If it is determined that the operation is not possible, the failure information is immediately transferred to the channel device. The channel device reports to the central processing unit that the remote control device has failed. The central processing unit disconnects the failed remote control device and continues operation.

[0015]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an embodiment of a remote control device according to the present invention. FIG.
In the computer system related to the present invention,
When a data transfer instruction is issued between the main storage device 2 and the external storage device 5 and a failure occurs in the remote control device 4,
It has a central processing unit (CPU; computer) 1 that disconnects the remote control device 4 in which a failure has occurred.

Further, it has a main storage device 2 for storing processing data of the central processing unit 1 and an external storage device 5 for storing various data in the system. The transmitted data is decoded by the transfer control circuit 31, and data is read or written from the main storage device 2 in accordance with a given instruction. If the decoded data is fault information, the central processing unit 1 4 has a channel device 3 for notifying that a failure has occurred in the failure notification f and transferring the failure information c.

Further, there is provided a remote control device 4 which decodes data transmitted from the channel device 3 and reads and writes data from the external storage device 5 in accordance with a given instruction. Furthermore, a serial interface 6 for connecting the channel device 3 and the remote control device 4,
It has an input / output interface 7 for connecting the remote control device 4 and the external storage device 5.

The channel device 3 converts the parallel data sent from the transfer control circuit 31 into serial data,
A transmission circuit 33 that transmits serial data via the serial interface 6 is provided. Further, it has a receiving circuit 32 for converting serial data received via the serial interface 6 into parallel data and transmitting the parallel data to the transfer control device 31, and a transfer control circuit 31 for controlling data transfer.

The remote controller 4 has a transmission circuit 44 which converts the parallel data sent from the data switching circuit 43 into serial data and transmits the serial data via the serial interface 6. The receiving circuit 41 converts the serial data received through the serial interface 6 into parallel data and transmits the parallel data to the transfer control device 31. The data that controls transmission and reception of data to and from the external storage device 5 through the input / output interface 7. It has a transfer control circuit 42.

Further, a fault signal j, t, o, and a fault signal from a fault detection circuit provided in each of the circuits 41 to 46 in the remote control device 4 for detecting a fault are included, including a computer for controlling the entire remote control device 4. i, v, y
It has a fault analysis circuit 45 for decoding fault information. The monitoring system includes a monitoring timer 46 that is started by the failure analysis circuit 45 and monitors whether a failure occurs again within a predetermined time, and a data switching circuit 43 that switches various signals (data) k, p, q, and s. You.

It is assumed that the serial interface 6 is composed of an optical fiber cable, an electric cable, and the like.

The operation of the embodiment of the present invention will be described with reference to FIGS. In FIG. 1 and FIG. 3 which is an operation flowchart, when writing data stored in the main storage device 2 to the external storage device 5, the central processing unit 1 gives an instruction to the channel device 3 using the data d. The designated channel device 3 decodes the instruction in the transfer control circuit 31 and reads out the data a stored in the main storage device 2 according to the given instruction. The read data a is sent out from the transfer control device 31 via the transmission circuit 33 onto the serial interface 6 and sent to the remote control device 4. The transmitted data is transmitted to the data transfer control circuit 4 via the reception circuit 41.
Sent to 2. The data transfer control circuit 42 decodes the received data and writes it in the external storage device 5 using the input / output interface 7 according to the given instruction.

When writing data stored in the external storage device 5 to the main storage device 2, the central processing unit 1 gives an instruction to the channel device 3 using the data d. The designated channel device 3 decodes the instruction in the transfer control circuit 31, sends the given instruction to the serial interface 6 via the transmission circuit 33, and sends it to the remote control device 4. The sent instruction is sent to the data transfer control circuit 42 via the receiving circuit 41. Data transfer control circuit 420
The received instruction is decoded, and the data stored in the external storage device 5 is read out using the input / output interface 7 in accordance with the given instruction. The read data is transmitted from the data transfer control circuit 42 to the serial interface 6 via the data switching circuit 43 and the transmission circuit 44, and is transmitted to the transfer control circuit 31 via the reception circuit 32 in the channel device 3. .

The transfer control circuit 31 decodes the transmitted data and stores the data b in the main storage device 2 in accordance with a given instruction.
Is written to the central processing unit 1 using the data c to notify that the data b has been written to the main storage device 2 (step 11). If a fault occurs in the remote control device 4 during the above operation (YES in step 12), the circuits 41 to 46 that have detected the fault send fault signals j, t, o, i, v,
The failure information is sent to the failure analysis circuit 45 using y (step 13). For example, when a failure is detected by the receiving circuit 41, the failure information is transmitted to the failure analyzer 4 using the failure signal j.
Send to 5.

If the monitoring timer 46 is not counting (time) (NO in step 14), the failure analysis circuit 45 that has received the failure information analyzes the failure information (step 15), and can be operated again by performing initialization. (Step 1).
6). As a result of the determination, if the operation is possible (YES in step 16), the remote control device 4 itself (self) is initialized using the initialization signal k (step 17). As a matter of course, the failure analysis circuit 45 and the monitoring timer 46 are not initialized at this timing. The monitoring timer 46 measures the elapse of a predetermined time (step 14), and monitors whether a failure occurs again during the counting. However, when the monitoring timer 46 detects a failure, (self) initialization is performed.

After (self) initialization, the data transfer control circuit 42 is notified using the retransfer request signal w (step 1).
8) and start the monitoring timer 46 (step 1)
9). The data transfer control circuit 42 that has received the notification of the retransfer request makes a retransfer request to the channel device 3 via the data switching circuit 43 and the transmission circuit 44. After making the retransfer request, the failure analysis circuit 45 is initialized. The transfer control circuit 31 decodes the transmitted data and, when recognizing the given instruction as a retransfer request, reports the fact to the central processing unit 1 using the data c and restarts the data transfer.

It is determined that the operation is not possible (step 16 is N
O) In the case, the input of the data switching circuit 43 is switched to the data q using the switching signal p, and the failure information is used in the normal data transfer using the data q. It is sent to the transfer control circuit 31. The transfer control circuit 31 decodes the transmitted data, recognizes that the given instruction is failure information from the remote control device 4 (step 21), and performs central processing using the failure (report) signal f. It reports to the device 1 and sends the fault information to the central processing unit 1 as data c.

The central processing unit 1, which has been notified of the occurrence of the fault in the remote control unit 4 by the fault signal f (step 22), receives the fault from the computer system based on the fault information. 4 is disconnected (step 23), and the operation of the system is continued without using the failed remote control device 4. Further, when data transfer is performed across a plurality of remote control devices 4,
An instruction is issued using the data d to restart the data transfer performed when the failure occurred from the beginning.

Next, referring to FIG.
The operation of the monitoring timer 46 will be described in detail. However, only the operation when a failure is detected by the receiving circuit 41 will be described. When a failure is detected by the receiving circuit 41, the failure information is sent to the failure analyzer 45 using the failure signal j. Upon receiving the failure information, the failure analysis circuit 45 stores the failure information in the failure information storage register 81. The failure information analysis circuit 82 includes a computer that controls the entire remote control device 4 and analyzes the failure information stored in the failure information storage register 81. If the operation is possible as a result of the analysis, the initialization circuit 8
Remote control device 4 using the initialization signal r generated by
Initialize itself (self).

As described above, at this timing, the failure analysis circuit 45 and the monitoring timer 46 are not initialized. The control program of the failure information analysis circuit 45 is stored in the failure information storage register 81. After the (self) initialization, the data transfer control circuit 42 is notified using the retransfer request signal w, and the monitoring timer 46 is started. The started monitoring timer 46 measures the elapse of a predetermined time by comparing the count value of the timer 85 with a comparison value 86 set in advance by a comparison circuit 87, and uses the time signal u to count. The fault information analysis circuit 82 is informed that the time is being measured. It should be noted that the comparison value 86 corresponds to the normal data transmission path x
Can be rewritten arbitrarily.

As a result of the analysis, if the operation is impossible, the input of the data switching circuit 43 is switched to the data q using the switching signal p, and the fault information is used in the normal data transfer using the data q. The data is sent to the transfer control circuit 31 of the channel device 3 via the path. If a failure occurs in the remote control device 4 that has requested retransmission while the monitoring timer 46 is counting the elapse of the predetermined time, the data switching circuit is switched using the switching signal p in the same manner as when it is determined that the remote control device 4 cannot operate. The input of 43 is switched to data q, and the failure information is transmitted to the transfer control circuit 31 of the channel device 3 using the data q via the path used in normal data transfer. If a failure occurs in the remote control device 4 that has requested retransmission after the monitoring timer 46 completes counting the predetermined time, the process returns to the start of the operation flowchart illustrated in FIG.

[0032]

As described above, according to the present invention, in a remote control device in which a fault has occurred, a fault information storage register for storing fault information, a fault information analysis circuit for analyzing fault information, As a result, a failure analysis circuit provided with an initialization circuit for re-initializing (self) the remote control device itself when it is determined that the remote control device is operable,
A monitoring timer that monitors whether a failure occurs again within a predetermined time, and a data switching circuit that switches a data line used for normal data transfer when a failure occurs to transfer failure information to a higher-level device. By providing the above, the upper central processing unit operates without being aware of the failure of the lower-level device (remote control device), and the lower-level device in which the failure has occurred is repaired by itself (recovery; self-initialization).
There is an effect of doing.

[Brief description of the drawings]

FIG. 1 is a block diagram of an embodiment of the present invention.

FIG. 2 is a detailed block diagram of a failure analysis circuit and a monitoring timer.

FIG. 3 is a block diagram of an embodiment of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 central processing unit 2 main storage device 3 channel device 4 remote control device 5 external storage device 6 serial interface 7 input / output interface 31 transfer control circuit 32, 41 reception circuit 33, 44 transmission circuit 42 data transfer control circuit 43 data switching circuit 45 Fault analysis circuit 46 Monitoring timer

Claims (5)

[Claims] 1. A remote control device for connecting an external storage device to a computer system via a channel device, wherein when a fault occurs in its own device, a fault for determining whether the fault can be recovered is determined. A remote control device comprising: an analysis unit; and a self-initialization unit that performs self-initialization when it is determined that the failure can be recovered. 2. The remote control device according to claim 1, further comprising a disconnection from said computer system when a failure occurs again within a predetermined time after said failure occurs. 3. The remote control device according to claim 1, further comprising disconnecting from the computer system when the failure analysis unit determines that the failure cannot be recovered. 4. A failure information processing method for a remote control device for connecting an external storage device to a computer system via a channel device, wherein the failure can be recovered when a failure has occurred in its own device. Determining whether the failure is recoverable, performing self-initialization if it is determined that the failure can be recovered, and disconnecting from the computer system if the failure occurs again within a predetermined time after the failure occurs And a step of disconnecting from the computer system when the failure is determined to be unrecoverable. 5. A recording medium recording a control program of a method for processing a failure information of a remote control device for connecting an external storage device to a computer system via a channel device, wherein the control program stores a failure in its own device. A step of determining whether the failure is recoverable when it occurs; a step of performing self-initialization if the failure is determined to be recoverable; and A recording medium comprising: a step of disconnecting from the computer system when a failure occurs; and a step of disconnecting from the computer system when the failure is determined to be unrecoverable.