JP2001159974A - Automatic operating device and automatic operation system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an automatic operating device and an automatic operation system capable of smoothly and safely performing a transition processing in the case of change of automatic operation programs to control an automatic operation processing of the automatic operation system. SOLUTION: This device is provided with a storage means capable of storing an automatic operation program before change and an automatic operation program after change respectively, a switching means to switch programs to be executed and an abnormal state detecting means and constituted so as to allow return of the program to the original one only when a specified abnormal state is caused after execution of the program is started by changing it to the program after change. In addition, it is constituted so as to inhibit the return of the program to the original one including when the abnormal state is caused after completion of confirmation whether a specified fundamental operation is normally operated or not after the change to a new program.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a CD corner of a financial institution, an unmanned store of a financial institution, an unmanned store in which a number of vending machines are installed, a building management including elevator management, and an unmanned factory. Automatic operation system for operating the various automatic devices that have been unmanned, particularly in these automatic operation systems, provided for each branch such as a store, to manage the operation status of each automatic device of the branch It relates to an automatic operation device to be controlled.

[0002]

2. Description of the Related Art An automatic operation system performs sales, management, operation, operation, processing, and the like of a store or the like in an unmanned state or without human intervention. In this system, for example,
In addition to opening and closing the shutter when opening or closing the store, operating the crime prevention and disaster prevention system, managing the operation of elevators, etc., it performs automatic operation processing of store facilities, vending machines, automatic cash deposit payment machines (ATM, CD etc.), automatic Various business such as transfer machine,
Manage automated equipment for operation or service provision,
Many items, such as controlling the operation, need to be processed quickly and safely.

[0003] Such an automatic operation system is generally provided at one or several locations such as branches (hereinafter referred to as "sites") which are automatically operated, such as stores provided at a plurality of locations. The central control device is connected via a communication line such as a telephone line or a dedicated line, and automatic operation is performed under remote monitoring of the central control device.

[0004] However, since the environment of each site is different and it is desirable to reduce the load on the communication line as much as possible, the operation of each site is configured so that each site can operate automatically independently as much as possible. Such automatic operation at each site is performed by a branch automatic operation device (hereinafter simply referred to as “automatic operation device”) provided at each site. More specifically, the automatic operation device at each site executes an automatic operation program according to each site environment, thereby automatically operating various devices at its own site as independently as possible.

In such an automatic operation apparatus, it may be necessary to change the automatic operation program in use. For example, when a new facility is introduced at a CD corner of a financial institution or the like, a part of the automatic operation program may be changed according to the facility. In the case of such a change of the program, if there is an abnormality in the program after the change, there is a problem that the operation of the CD corner or the factory is stopped or the safe operation cannot be performed.

Conventionally, in order to provide safety, after performing a sufficient safety confirmation test of the program at the center, a technician goes to each site and replaces the ROM in which the automatic operation program is stored. The safety operation confirmation test was performed again. Therefore, changing the automatic operation program took a lot of manpower and time.

On the other hand, in a computer system,
As a method of changing a program in a remote place, there is a method of downloading a program from a central controller to a remote place. Japanese Patent Laying-Open No. 10-83285 discloses an electronic computer system that checks the operation of a downloaded program in a computer system, and switches an execution program back to an original program when an error occurs.

In this publication, a date and time at which the execution program is switched from the current program to the new program is set, and when the date and time arrives, the computer automatically switches between the old and new programs. An invention is described which restores the original execution program when it occurs.

However, since the invention described in this publication is for switching programs in a computer system, there is a problem in directly applying it to an automatic operation system. That is, in the invention described in the gazette, after switching to the new program, if an error occurs regardless of the type of error, the original program is immediately returned to the original program. Guarantee. However, since there are various types of computer systems, there are many cases where it is difficult to perform a sufficient test corresponding to the individuality of each system at the center in advance. For this reason, if an error occurs at the time of migration, all the errors are restored, but such a process is not appropriate for an automatic operation device.

[0010] Errors that may occur when the automatic operation program is changed in the automatic operation device include a serious error and a case where the error is not significantly affected. An example of the former case is a case where an abnormality occurs in opening / closing of a shutter or operation management of an elevator due to a runaway of an automatic operation program or the like.

On the other hand, since each automatic device connected to the automatic operation device has a relatively high degree of independence, it is not always necessary to immediately stop the automatic operation program for a minor error in the automatic operation program situation. Often there is no need to take emergency action. In such an environment, if the prior art invention relating to the computer system that always returns to the old program when an error occurs is applied to the automatic operation system, the automatic operation program is not stable for a long time, which is undesirable.

[0012]

Therefore, in the present invention,
Only when a serious error occurs during the transition to the change program, return to the original automatic operation program, isolate minor errors from the transition process, and make it possible to respond by partial restoration etc. after the transition I have.

[0013] Further, for example, it is assumed that a lightning strike occurs two days after the switching, and the program hangs up or runs away. In such a case, the important program itself is normal and there is no need to return to the original automatic operation program. If the program is restored in spite of the error due to such external factors, the program will not end even if the program is changed indefinitely.

Therefore, in the other invention, the safety is ensured by returning to the original program only when an error occurs in a short period of time at the time of program transfer, and the subsequent abnormal state is considered to be due to external factors. Switching to the original program is prohibited, and the transition to the new automatic operation program is completed early. As described above, by automatically and securely performing the program transfer process accompanying the program change, it is not always necessary for an engineer to go to each site and perform a confirmation test at the time of transfer. If the safety check test in the presence of the engineer is unnecessary, the engineer does not need to visit each site and install the change program, and the change program can be installed by download. Therefore, it is extremely advantageous in terms of manpower, time, and cost.

[0015] Accordingly, an object of the present invention is to provide an automatic operation system capable of ensuring the safety of an automatic operation system while smoothly and reliably switching an automatic operation program without substantially interrupting the operation state. And Another object of the present invention is to provide an automatic operation system that allows the automatic operation program to be re-switched to the original automatic operation program only in a specific abnormal state accompanying the execution of the new automatic operation program. The purpose is to: Still another object of the present invention is to provide an automatic operation system in which the switching of the automatic operation program to the original automatic operation program is limited to a predetermined time immediately after the switching. Another object of the present invention is to provide an automatic operation system in which a technician does not need to exchange ROMs at a site when the automatic operation program is changed, and can switch the automatic operation program reliably and safely. .

[0016]

In order to achieve the above object, an automatic operation device according to a first aspect of the present invention comprises: an execution unit for executing an automatic operation program; A program storage unit that stores the above-mentioned automatic operation program, an abnormality detection unit that detects a specific abnormal state accompanying the execution of the automatic operation program, and the automatic operation program that is executed by the execution unit. Program switching means for switching an execution program to return the running automatic operation program to the original automatic operation program when the abnormality detection means detects the specific abnormal state after the switching. And

According to the present invention, the switching to the original automatic operation program is performed only when a serious abnormal condition occurs. Therefore, the switching of the automatic operation program is not interrupted by the occurrence of a minor error, and the switching is performed. Work proceeds smoothly. For minor errors for each site, it is possible to respond after switching, and individual responses are sufficient.

The automatic operation device according to the second aspect of the present invention further comprises a basic operation confirmation means for confirming a basic operation of the automatic operation program immediately after switching of the automatic operation program, wherein the program switching means Further, after the completion of the confirmation of the basic operation by the basic operation confirmation unit, even if the abnormality detection unit detects the specific abnormal state, the automatic operation program returns to the original automatic operation program before switching. It is characterized by comprising means for prohibiting returning.

According to the present invention, after the confirmation of the basic operation of the post-switching automatic operation program is completed, the program is not returned to the original automatic operation program. And the transition process can be performed smoothly.

[0020] In the automatic operation device according to a third aspect of the present invention, the specific abnormal condition is a runaway of the automatic operation program.

According to the present invention, when the program runs away during execution of the new automatic operation program, it is possible to immediately return to the old program. Here, program runaway means not only program runaway that is not planned,
This includes the case where a loop state or a hang-up state occurs.
If the program runs away in this way, the shutter may suddenly close or the elevator may stop, resulting in a serious abnormal condition. In such a case, the program is restored and the safety is ensured.

The automatic operation device according to a fourth aspect of the present invention is arranged such that the basic operation check means completes the basic operation when the predetermined operation of the automatic operation program switched by the program switching means is completed. It is a means for completing confirmation.

According to a fifth aspect of the present invention, there is provided an automatic operation device, wherein the basic operation confirmation means confirms the basic operation by a lapse of a predetermined time immediately after the automatic operation program is switched by the program switching means. It is a means for completing.

According to these inventions, it is possible to confirm that the minimum necessary processing can be performed smoothly and safely, and it is possible to make the program migration processing more reliable.

An automatic operation device according to a sixth aspect of the present invention is characterized in that the program storage means is a read-only memory provided individually for each of the automatic operation programs. is there.

According to the present invention, the physical independence of the automatic operation program can be enhanced, and the danger of data destruction when the change program is set in the automatic operation apparatus can be further reduced.

[0027] In an automatic operation device according to a seventh aspect of the present invention, the program storage means comprises a single readable memory, and the two or more automatic operation programs are stored in different address areas of the readable memory. Each of them is stored. With this aspect, the new R
Since there is no need to provide an OM, the cost of the program memory can be reduced.

An automatic operation device according to an eighth aspect of the present invention is characterized in that the program switching means is means for switching the automatic operation program to another automatic operation program in response to an external switching signal. .

According to the present invention, for example, by inputting a program switching signal via a communication line, a program switching process can be started by remote control.

[0030] In the automatic operation device according to a ninth aspect of the present invention, the program switching means forcibly converts the automatic operation program into another automatic operation program in response to an external forced switching signal or a forced stop signal. It is characterized by comprising means for controlling the switching or the execution of the automatic operation program to be forcibly stopped.

According to the present invention, for example, by inputting a program switching signal via a communication line, the program switching process can be started by remote control, and can be forcibly terminated by remote control as needed. Also,
By the input device provided in the automatic operation device, it is also possible to forcibly terminate at the site in an emergency.

An automatic operation system according to a tenth aspect of the present invention includes the following elements. That is, (a) the automatic operation system includes a central control device and at least one or more automatic operation devices connected to the central control device via a communication line, and (b) the automatic operation device includes: i) execution means for executing the automatic operation program; (ii) program storage means for respectively storing two or more of the automatic operation programs executed exclusively from each other; and (iii) the automatic operation executed by the execution means. When the operation program is changed, a basic operation check means for checking the basic operation of the automatic operation program,
(Iv) abnormality detecting means for detecting a specific abnormal state accompanying the execution of the automatic operation program, and (v) the first automatic operation being executed by the execution means when a switching signal is received from outside. The program is switched to the second automatic operation program, and the second automatic operation program is executed only when the specific abnormality is detected by the abnormality detection unit before completion of the basic operation confirmation processing by the basic operation confirmation unit. Program switching means for switching a program to return to the first automatic operation program; and (c) the central control device transmits the automatic operation program and the switching signal to the automatic operation device via the communication line. The automatic operation device stores the operation program received from the central control device in the program storage unit and performs the switching. It is intended to initiate the switching process of the automatic operation program upon receiving the items.

According to the present invention, the automatic operation program can be installed and migrated by remote control, so that the technician does not need to go to the store where the automatic operation device is installed, which saves a lot of labor and time. it can. Also, even if any problem occurs due to such remote installation of the program,
Switch to the original automatic operation program only when a serious abnormal condition occurs. Therefore, when a serious abnormality occurs, the safety of switching to the original program is ensured, but in the case of a minor error, the switching of the automatic operation program is not interrupted, and the switching work can be smoothly performed. . This is because minor errors at each site can be individually dealt with after switching.

[0034]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 is a configuration diagram for explaining an outline of the entire automatic operation system. A central controller 10 is installed in the center 100 and is connected to a plurality of stores or sites 102 via a communication line 101 such as a dedicated line or a public line. The central control device of the center 100 monitors each store 102 in a form of receiving information (including data; the same applies hereinafter) from each store, and various information including control information for each store 102. Can be transmitted to control the automatic operation device 1 of each store 102.

FIG. 2 is a functional block diagram showing the configuration of an embodiment of the automatic operation device installed in each store 102.
In this embodiment, the automatic operation device 1 is connected to a central control device 10 of a center 100 via a telephone line 15 as a communication line. In addition, the automatic operation device 1 includes:
Electric locks, shutters, lights, elevators, surveillance cameras, CDs, ATMs, vending machines, and other various facilities 16
Are connected, fire detectors, intrusion detectors,
A destruction detector and other various sensors 17 are connected.

The telephone line 15 is connected to the control unit 2 via the communication means 12 and exchanges information with the central control device 10 of the center 100 or receives control information. The various facilities 16 are connected to the control unit 2 via a facility interface 13 (hereinafter, the interface is referred to as “I / F”). The control unit 2 transmits a control signal such as a power ON / OFF signal to the various facilities 16 and receives information or a signal from the various facilities 16. Similarly, the various sensors 17 are connected to the control unit 2 via the sensor I / F 14, and detection signals from the various sensors 17 are transmitted to the control unit.

The operating means 11 is connected to the control unit 2 to check the state of the automatic operation device 1 and to operate the operation of the automatic operation device 1 from outside as necessary. The operation unit 11 can be configured by a person skilled in the art by selecting an input unit such as a keyboard or a touch plate and various display units (not shown) such as a CRT or a liquid crystal display as necessary. The power supply 18 supplies electric power to the automatic operation device 1, and is supplied with 100V AC in this embodiment.

The program memories A and B store automatic operation programs for operating the automatic operation device 1, respectively. The control unit 2 executes any one of the automatic operation programs stored in the program memory A or B to automatically operate the various facilities 16 and, when necessary, transmits predetermined information to the central control device 10 of the center 100. Send.

Here, two program memories A and B are provided. For example, the program A stores the currently used automatic operation program, and the program memory B partially changes the program A. This is for storing the program. Such a change in the automatic operation program during operation is performed, for example, when new equipment is introduced at the CD section of a financial institution, or when the program is upgraded.

Although two program memories A and B are provided in this embodiment, three or more program memories may be provided. For example, if it is determined that facilities or services will be upgraded in stages at a certain store, and automatic operation programs corresponding to each stage have been completed, an automatic operation program for each stage Can be stored in three or more memories.

Here, the program memory may be two or more physically separate memories, or a part of one or a plurality of memories may be divided into partitions and used. Further, the memory may be any type of memory, for example, a read only memory (ROM) or a readable memory (RAM), but is preferably a non-volatile storage element. Further, the program memory may be a disk. In this case, the control unit 2
However, if necessary, the automatic operation program will be loaded from the disk into the internal memory (not shown) and executed.

The control unit 2 executes one of the automatic operation programs stored in the program memory A or B to automatically operate the various equipments 16 and, if necessary, to transmit predetermined information to the central control of the center 100. Transmit to the device 10. As can be seen from the above, the automatic operation programs stored in the program memories A and B are executed mutually exclusively, and these automatic operation programs are not executed simultaneously. Basically, it is desirable to shift the changed automatic operation program as soon and smoothly as possible on the scheduled change date.

A method of exchanging the automatic operation program will be described. As described above, stepwise program changes are determined from the beginning, and if the changed programs are also completed, those programs may be stored in the program memories A and B of the automatic operation device 1 from the beginning. it can.
However, such cases are usually rare, and expansion of the facilities is determined at a later date, and the program is changed. In such a case, as described above, it is sufficient for the technician to go to each store, replace the ROM storing the changed automatic operation program, and check the operation in the presence of the technician. Would be desirable in terms of attributing

However, it takes a lot of time and effort for a technician to go and exchange programs at each site or store, and it takes a lot of time and effort, and if possible, the central control device 10 of the center 101 automatically controls each store (site) 102. It is desirable to transmit the automatic operation program to the operation device 1 and automatically shift the execution program of the automatic operation device 1 to the changed automatic operation program. For this purpose, the transition from the current automatic operation program to the new automatic operation program must be performed automatically and safely and reliably. According to the present invention, the transition to the new program can be automatically and safely and reliably performed irrespective of the method of exchanging the changed program.

FIG. 3 is a functional block diagram showing the configuration of a part of the control unit 2 relating to the change of the automatic operation program.
As will be apparent to those skilled in the art, the automatic operation device 1 can be configured by a microprocessor (MPU), ROM, RAM, various registers, input / output I / F, communication control device, various control programs, and the like. 2 can also be configured as a part thereof, but in this figure, only a part related to the change of the automatic operation program of the control unit 2 is represented as a functional block.

The program switching means 5 is connected to the program memories A and B and selects one of the automatic operation programs A and B executed by the execution means 6 in accordance with a switching signal from the outside. The switching signal from the outside may be a switch (not shown) provided in the automatic operation device 1 or a specific key switch, or a control signal transmitted from the central control device 10 of the center 100 via a communication line. It may be a signal. The execution means 6 is connected to the program switching means 5 and executes the automatic operation program A or B selected by the program switching means 5.

The abnormality detecting means 7 detects only a predetermined specific error among errors which may occur during the execution of the executing means 6. Here specific errors include:
For example, a program runaway that may cause a situation involving human life if left unchecked,
Identify potential accidents that could have significant social consequences. As means for specifying and detecting such an error, any means known to those skilled in the art can be adopted. For example, with respect to detection of program runaway, means such as a watch dog timer (WDT) can be employed.

The abnormality detecting means 7 is also connected to the program switching means 5 and notifies the program switching means 5 when a specific abnormal state is detected. Program switching means 5
Upon receiving the abnormality detection signal from the abnormality detecting means, the current automatic operation program is switched back to the original automatic operation program executed immediately before.

FIG. 4 is a flowchart showing the operation at the time of switching the automatic operation program according to the first embodiment of the present invention. In the following, the automatic operation program stored in the program memory A is referred to as a program A, and the automatic operation program stored in the program memory B is referred to as a program B. The description will be made assuming that the mode is switched to.

First, when a switching signal is received from the outside (step 70), the program switching means 5 switches the currently running program A to the program B (step 7).
1). On the other hand, the abnormality detecting means 7 checks whether an abnormal state has occurred, as indicated by the block 75. Basically, when an error occurs, the processing of this block 75 is executed by the error and wrap routine. In this example, first, the watch dog timer WDT
It is checked whether or not a program runaway state has occurred (step 72). When the WDT times out, the program is determined to be in a runaway state, and processing for switching the automatic operation program to be executed to program A is performed (step 72). Step 74).

If the program does not run away, it is tested whether another specific error has occurred (step 73). This can be detected by checking the error code when an interrupt due to an error occurs. For example, a specific error code is stored in the table 76 in advance, and this is compared with the error code. If a specific error has not occurred, the execution of the current automatic operation program B is continued (step 77).

With this configuration, when an abnormal situation such as a runaway of the program occurs due to some problem in the new automatic operation program B, the program A is immediately returned to the original program A and the abnormal situation is restored. To avoid. A point to be noted here is that, when an error occurs, the program is not always returned to the original program, but is returned to the original program A only when an error that may cause a serious accident occurs. . This allows for minor errors to be a separate process from the migration process,
The processing can be performed, and the problem that the transition to the new environment cannot be completed forever is eliminated.

FIG. 5 is a functional block diagram showing another embodiment of the present invention. 3 shows a configuration of a part related to the change of the automatic operation program of the control unit 2 as in FIG. The difference from FIG. 3 lies in that a basic operation checking means 8 is added. The basic operation check means 8 is connected to the execution means 6 and the program switching means 5 and checks whether the new automatic operation program has normally completed a predetermined basic operation when the automatic operation program is switched.

The confirmation operation is started when a signal indicating that the program has been switched is received from the program switching means 5. When the confirmation of the basic operation is completed, a confirmation completion signal is output to the program switching means 5. The program switching means 5 according to this embodiment switches the execution program so as to return to the original automatic operation program only when an abnormality detection signal is received from the abnormality detection means 7 before receiving the confirmation end signal from the basic operation confirmation means 8, After receiving the confirmation end signal, the automatic operation program is not switched even if the abnormality detection signal is received.

The operation of this embodiment will be described with reference to the flowchart of FIG. When an external switching signal is received
(Step 80: hereinafter indicated only by numerals), the program switching means 5 switches the program executed by the execution means 6 from the automatic operation program A to the automatic operation program B (81). Thereafter, a signal indicating that the program has been switched is output to the basic operation check means 8, and the basic operation check flag is turned ON (82). Next, it is confirmed whether a specific abnormal condition has occurred (83). If no abnormal condition is detected, it is confirmed whether the basic operation has been confirmed (84). If not, the process returns to step 83 again. Return.

When the confirmation of the basic operation is completed without detecting the abnormal state (84), the basic operation confirmation flag is set to OF.
F is set (86), and this process ends. When a predetermined abnormal state is detected, the execution program is switched to the automatic operation program B (85), the basic operation confirmation flag is turned off, and this processing is terminated (86, 87). Step 83
The detection of the specific abnormal state can be performed by the same processing as that of the block 75 in FIG.

As is apparent from the above description, in this embodiment, the execution program is returned to the original automatic operation program B only when a predetermined abnormal state occurs before the confirmation of the basic operation is completed. After the completion of the operation check, even if a predetermined abnormal state occurs, the program is not returned to the original automatic operation program B. This is because such an abnormal situation after the confirmation of the basic operation is extremely likely to be caused by an external factor.

Therefore, for example, even after the basic operation is confirmed, even if the automatic operation program B runs away under the influence of electromagnetic waves such as lightning, it does not return to the original program. This is because switching to the automatic operation program B in spite of such a runaway due to an external factor tends to cause confusion in the transition of the program and makes it difficult to determine the cause.

The basic operation can be confirmed by confirming that the basic operation has been completed when the automatic operation program after the switching has completed the processing up to the predetermined step, or for a predetermined time after the program switching. The confirmation of the basic operation may be completed when the time has elapsed. In addition, it is assumed that, when the automatic operation program is switched, all devices such as facilities and sensors connected to the automatic operation device are accessed, and when these controls are normally completed, the basic operation has been confirmed. It is also possible.

It is also possible to incorporate a predetermined diagnostic test into the confirmation of such a basic operation, and complete the switching only when these have been normally completed. In this case, all errors in this diagnostic test can be treated as specific errors, and need not be limited to serious errors such as runaway as described above. However, if such confirmation of the basic operation is performed for a long time, stable automatic operation program cannot be shifted. Therefore, the confirmation must be completed in a relatively short period of time.

FIG. 7 is a timing chart showing a case where the switching operation of the automatic operation program according to the embodiment of FIG. 5 ends normally. When a switching signal is input from the central control device 10 via input means or a communication line provided in the automatic operation device 1, the switching device stops using the currently used automatic operation program A, and automatically operates. Switch the execution program to use program B,
Turn on the basic operation check flag.

The actual switching of the program and the like requires a preprocessing and the like, and a time lag occurs after the input of the switching signal. Here, for the sake of simplicity,
It is shown that the program is switched as soon as the switching signal is input, and the flag is turned ON.

In FIG. 7, since the specific abnormality detection signal is not generated while the basic operation confirmation flag is ON,
The transition of the automatic operation program ends normally. The specific abnormality detection signal is generated after the basic operation confirmation flag is turned off. In this case, the confirmation of the basic operation has already been completed. It is not likely to affect the program migration process as it is likely to be due to factors. In such a case, for example, a measure corresponding to the generally performed abnormality such as restarting the program is taken.

FIG. 8 is a timing chart showing a case where the program transfer cannot be completed normally. Switching from the automatic operation program A to the automatic operation program B by the switching signal and turning on the basic operation confirmation flag is the same as in the case of FIG. As shown in FIG.
During basic operation check, that is, basic operation check flag is ON
When the specific abnormal state is detected when the condition is set to, the automatic operation program executed by the execution means is switched from B to A. Therefore, the transition from the program A to the program B is interrupted, and the analysis of the cause of the occurrence of the specific abnormality is performed.

When a specific abnormal state is detected immediately after switching to the new automatic operation program B, the operation is immediately returned to the original automatic operation program A. The reason is that, even in such a case, the abnormal state may be caused by an external factor, but since the confirmation of the basic operation has not been completed, the automatic operation program B after the switching is performed.
It is not possible to say that there is no possibility of an abnormal state due to the failure, so it is to be restored just in case.

It should be noted that the error is restored only when a specific abnormal condition specified in advance occurs, and is not always restored when an error occurs. As a result, the shift of the program is stopped only when there is a possibility that there is a serious problem in the operation by the new automatic operation program B, and otherwise, at least the process of shifting to the new program is terminated. , Smooth transition processing becomes possible.

In the above description, a signal indicating that the program has been switched is output from the program switching means 5 to the basic operation confirmation means 8, but the execution means 6 is configured to output this signal. You may. Also,
Program switching means 5, execution means 6, abnormality detection means 7,
The example in which the basic operation check means 8 is constituted by separate blocks has been described, but this is so as to clearly explain the functions required for the present invention.

Therefore, for example, the execution means 6 may be configured to have all of these functions, or any of the other functional blocks may be configured to have all or some of the functions. . Also, the present invention is referred to as CP
It is obvious to those skilled in the art that the configuration can be made of a U, a ROM, a RAM, various registers, various I / Fs, and a control program (including firmware) stored in the ROM or the RAM.

Further, the program memories A, B and C
May be allocated as separate address areas on one memory as shown in FIG. 8, or may be allocated as different recording areas on the same disk as shown in FIG.

When the automatic operation program is stored in the program memory A or B, the ROM storing the automatic operation program can be exchanged as described above. However, the automatic operation program is stored in the readable and writable program memory A or B. Floppy disk (F
D), a magnetic tape (MT), an MD, a CD, etc., to load the program memory A or B. Further, the program can be downloaded from the central control device 10 of the center 100 to the program memory A or B via a communication line.

Further, the automatic operation device according to the present invention forcibly switches the automatic operation program to another automatic operation program or executes the operation of executing the automatic operation program by a forced switching signal or a forced stop signal from the outside. It is also possible to forcibly stop. In this case, the external may be an input device provided in the automatic operation device or a signal input via a communication line.

Further, a change date and time of the automatic operation program is set in advance, and when it is confirmed by a clock means (not shown) provided in the control section that the date and time has arrived, the switching signal is automatically set to the program. Output to the switching means,
Thereby, the switching process can be started.

[0073]

As described above, according to the present invention, switching to the original program is permitted only when a specific abnormal condition occurs after the execution of the changed automatic operation program is started. According to another embodiment of the present invention, after the confirmation of the basic operation of the automatic operation program after the switching is completed, the return to the original program including the case where the abnormal state occurs is prohibited. Therefore, it has become possible to provide an automatic operation system capable of smoothly and reliably changing an automatic operation program used in the automatic operation system.

[Brief description of the drawings]

FIG. 1 is a configuration diagram for explaining an outline of an entire automatic operation system.

FIG. 2 is a functional block diagram illustrating a configuration of an embodiment of an automatic operation device installed in a store or a site.

FIG. 3 is a functional block diagram showing a configuration of a part related to a change of an automatic operation program of a control unit 2.

FIG. 4 is a flowchart showing an operation when the automatic operation program is switched according to the first embodiment of the present invention.

FIG. 5 is a functional block diagram showing another embodiment of the present invention. 3 shows a configuration of a part related to the change of the automatic operation program of the control unit 2 as in FIG.

FIG. 6 is a flowchart showing an operation of the embodiment shown in FIG. 5 when the automatic operation program is switched.

FIG. 7 is a timing chart showing an operation when the switching of the automatic operation program of the embodiment shown in FIG. 5 is completed normally.

8 is a timing chart showing an operation when an abnormality occurs during the switching of the automatic operation program of the embodiment shown in FIG.

FIG. 9 is a diagram showing an example in which a program memory is provided in one memory.

FIG. 10 is a diagram showing an example in which a program memory is allocated to one disk.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Automatic operation device 2 Control part of automatic operation device 5 Program switching means 6 Execution means 7 Abnormality detection means 8 Basic operation confirmation means 10 Central control device 11 Operation means 12 Communication means 13 Equipment I / F 14 Sensor I / F 15 Telephone line 16 Equipment 17 Sensor 50 Electric Lock 51 Lighting 52 CD / ATM 100 Center 101 Communication Line 102 Store A, B Program Memory

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (Reference) H04Q 9/02 G06F 15/30 310 (72) Inventor Takeshi Iimura 1-19-43 Higashi-Oizumi, Nerima-ku, Tokyo Stock Company Inside the Tamura Works (72) Koji Kobayashi, Inventor 1-19-43 Higashi Oizumi, Nerima-ku, Tokyo Co., Ltd. Inside the Tamura Works Co., Ltd. (72) Inventor Satoru Yano 1-19-43 Higashi-Oizumi, Nerima-ku, Tokyo F-term (reference) in the Tamura Corporation 5B055 BB01 BB03 NF04 5B076 AC03 EA12 5K048 AA05 AA06 BA21 BA47 DA02 DC04 DC07 FA07 FC01 GB05 HA01 HA02 5K101 KK11 LL01

Claims (10)

[Claims] 1. An execution means for executing an automatic operation program, a program storage means for storing two or more automatic operation programs executed exclusively each other, and a specific abnormality accompanying the execution of the automatic operation program Switching between the automatic operation program executed by the abnormality detection means for detecting a state and the automatic operation program executed by the execution means, and when the abnormality detection means detects the specific abnormal state after the switching, the automatic operation program being executed is restored to its original state. Program switching means for switching an execution program so as to return to the automatic operation program. 2. The automatic operation device further includes a basic operation confirmation unit that confirms a basic operation of the automatic operation program immediately after the automatic operation program is switched, and the program switching unit further includes: Means for prohibiting returning of the automatic operation program to the original automatic operation program before switching even if the abnormality detection means detects the specific abnormal state after the completion of the confirmation of the basic operation by the operation confirmation means. 2. The method according to claim 1, further comprising:
Automatic operation device as described. 3. The automatic operation device according to claim 1, wherein the specific abnormal state is a runaway of the automatic operation program. 4. The basic operation confirmation means is means for completing confirmation of basic operation when processing of a predetermined step of the automatic operation program switched by the program switching means is completed. The automatic operation device according to claim 2. 5. The basic operation confirming means is means for completing confirmation of a basic operation after a lapse of a predetermined time immediately after switching of the automatic operation program by the program switching means. Or the automatic operation device according to 3. 6. The automatic operation apparatus according to claim 1, wherein the program storage means is a read-only memory provided separately for each of the automatic operation programs. . 7. The program storage means according to claim 1, wherein said two or more automatic operation programs are respectively stored in different address areas of said readable and writable memory. The automatic operation device according to any one of claims 1 to 5. 8. The program according to claim 1, wherein the program switching means is means for switching the automatic operation program to another automatic operation program in response to an external switching signal. Automatic operation device. 9. The program switching means forcibly switching the automatic operation program to another automatic operation program or forcibly executing an operation of the automatic operation program in response to a forced switching signal or a forced stop signal from the outside. The automatic operation device according to any one of claims 1 to 8, further comprising a control unit configured to stop the automatic operation device. 10. An automatic operation system comprising the following means. (A) The automatic operation system includes a central control device, and at least one or more automatic operation devices connected to the central control device via a communication line. (B) The automatic operation device includes: (i) Execution means for executing the automatic operation program; (ii) program storage means for storing two or more of the automatic operation programs executed exclusively each other; and (iii) the automatic operation program executed by the execution means. (V) an abnormality detecting means for detecting a specific abnormal state accompanying execution of the automatic operation program; and (v) a basic operation confirmation means for confirming a basic operation of the automatic operation program when is changed. A) switching the first automatic operation program being executed by the execution means to the second automatic operation program when a switching signal is received from the outside, and Wherein only when it detects the specific abnormality by said abnormality detection means prior to completion of the confirmation processing of the basic operation of the certification means second
Program switching means for switching a program to return the automatic operation program to the first automatic operation program, and (c) the central control device transmits the automatic operation program and the switching signal via the communication line. The automatic operation device transmits the automatic operation device to the automatic operation device, and the automatic operation device stores the operation program received from the central control device in the program storage unit and starts a switching process of the automatic operation program when the switching signal is received. .