JP2005275438A - Automated equipment failure recovery system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide the failure recovery system of automated equipment for realizing the efficiency of processing, and for improving reliability. <P>SOLUTION: This host computer 100 is connected through a network to a terminal 130, and provided with an on-line processing system 102, an operation management system for receiving a console message and an automated equipment failure recovery system 110 for controlling the failure recovery of automated equipment. The management system 103 which has received a message outputted when any failure is generated in the terminal notifies the restoration system 110 of the failure information of the terminal, and the restoration system 110 which has received notification decides whether or not the terminal where the failure has been generated is automated equipment, and when the terminal is the automated equipment, automatically generates a command for carrying out the recovery processing of the automated equipment, and issues the command to the terminal 130. When the recovery processing fails, the processing is repeated, and when the number of times of repetition reaches the predetermined number of times, a start command is registered in a table 150. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an automatic failure recovery technology, and more particularly, to a system, method, and program capable of performing control for automatically reconnecting a session when a session failure occurs to an automated device existing on a network.

  FIG. 3 shows a typical example of processing of a conventional system for controlling an automated device. With reference to FIG. 3, the processing procedure of the conventional system will be described.

  The operator monitors (visually) that the terminal session failure message is output to the console. When a console message (B11) (terminal failure message) is displayed on the console (for example, “VISC39 terminal = XXXX open processing ended abnormally”) and the operator detects that a terminal failure message has been output The operator determines from the terminal information list (list of terminal configuration information to be connected and managed by the host) whether or not the faulty terminal is an automated device, and the operator manually operates the online processing system from the console (operation console). A session connection command (“CV SA TRM = XXXX”) for VIS (Versatile Online System) is input (B12).

  Upon receiving this command input, the VIS performs terminal activation processing for instructing the terminal to start session connection (B14). When the session connection start at the terminal is successful, a console message (B15) (also referred to as “terminal recovery message”, for example, “VISC31 terminal = XXX session start request accepted”) is displayed. When the session connection start at the terminal fails, the session failure message (B11) is displayed and output on the console by VIS.

  In the operation of an automated device represented by an automatic deposit payment machine (ATM), as a method of operating the automated device in the event of a failure of a line connecting the host computer of the center and the automated device or a failure of the host computer, 2 of the host computer is used. There is known a method in which the response to the customer and the service are excellent without duplication or duplication of the line connecting the host computer and the automation device (see, for example, Patent Document 1). As will be apparent from the following description, unlike the conventional system, the present invention discriminates a failure of an automated device and automatically generates a failure recovery command for the automated device.

  In addition, as a conventional technique for notifying failure information, for example, in a digital wireless network, communication in which a procedure for reconnection to a partner station is repeatedly performed at a predetermined time interval for each type of failure detected by the own station. A method is also known (see, for example, Patent Document 2).

  Further, regarding the online processing system (VIS), in the hot standby compatible loosely coupled multi-hot standby computer system having a plurality of active and standby online processing systems (VIS), a transmission request command from the operator command distribution means When the destination VIS status is stored in the operator command transmission request holding table, the transmission command in the hot standby state is stored in the operator command transmission request holding table. There is known a system in which the transmission request command is read out and re-entered into the operator command distribution means, thereby eliminating the lost transmission command when the transmission destination VIS is in the hot standby (for example, Patent Documents). 3 participation ).

Japanese Patent No. 2944138 (page 2-3, FIG. 1) JP-A-5-37434 (page 2-3, FIGS. 1 and 3) JP-A-5-265986 (page 3, FIG. 1)

  By the way, the conventional system described with reference to FIG. 3 has a problem that it is difficult to reduce the work burden on the operator and there is a possibility of oversight. The reason is that the operator must always monitor the console and monitor the messages that are output, so that the operator cannot leave the console and visually monitors the console messages, thus overlooking faults. May occur.

  Further, the conventional system has a problem that it lacks immediacy. That is, in the conventional system, even if the message is confirmed, the operator then refers to the terminal information list to determine whether the device is an automated device, and the operator manually inputs a session connection command for the VIS. A series of operations are required. For this reason, it takes about 1 minute at the minimum from the output of the console message notifying the occurrence of the failure to the start of the recovery process.

  Further, the conventional system has a problem that a human error inherent in manual operation may occur. That is, the system may malfunction due to an erroneous input of a session connection command to the VIS by the operator.

  In order to overcome these drawbacks, a prior application (Japanese Patent Application No. 2003-014304) has been invented. The invention of the prior application is a host including an online processing system, an operation management system that receives a console message, and an automated equipment failure recovery system that controls failure recovery of the automated equipment, connected to at least one terminal made of automated equipment. In the computer, the operation management system that has received the console message that is output when a failure occurs in the terminal notifies the automation device failure recovery system of the failure information of the terminal and receives the failure information notification. The recovery system determines whether or not the terminal in which the failure has occurred is an automated device. If the terminal is an automated device, the recovery system automatically generates a command for performing a recovery process of the automated device, and performs the recovery process. Control to issue commands for terminal to terminal A. Further, in the invention of the prior application, when the failure is not recovered in the terminal to which the command for performing the recovery process is issued from the automation device failure recovery system, the host computer performs the recovery process for the predetermined number of times at the maximum. Try to retry.

  According to the invention of the prior application, it takes only a few seconds, for example, until the session connection process is completed at the terminal after the failure message due to the session connection failure at the terminal is output. In addition, according to the invention of the prior application, there is no loss of monitoring by the manual monitoring method, and the monitoring load (operator workload) can be reduced. That is, according to the invention of the prior application, the monitoring / failure recovery processing can be made more efficient. Furthermore, according to the present invention of the prior application, it is possible to prevent malfunction of the system due to erroneous input by the operator when issuing the session connection command, and to improve the reliability of the system.

  However, in the invention of the prior application, in the case of retrying the recovery process, if the predetermined number of times is exceeded, a fault message is output to the console and the automatic fault recovery process is interrupted. Continuing is not designed to further improve system reliability.

  Accordingly, an object of the present invention is to provide a system, method, and program for improving efficiency of failure recovery processing, reducing the load of monitoring work, and further improving reliability.

A method according to one aspect of the present invention that achieves the above object is to provide an operation management system that receives a console message by connecting to at least one terminal including an automation device, and an automation device failure recovery that controls failure recovery of the automation device. A failure recovery method for the automated device by a host computer including the system,
(A) The operation management system that has received a console message output when a failure occurs in the terminal notifies the automation device failure recovery system of failure information of the terminal;
(B) The automation device failure recovery system that has received the notification of the failure information determines whether or not the terminal where the failure has occurred is an automation device, and when the terminal is an automation device, the automation device recovery A step of automatically generating a command for processing;
(C) the automated equipment failure recovery system issuing a command for performing the recovery process to the terminal;
including.
Further, when a failure is not recovered in the terminal for which the command for performing the recovery process is issued by the automated device failure recovery system, the host computer is the maximum number of times (a), Repeat steps (b) and (c)
When the number of repetitions reaches the predetermined number, a step of registering an activation command in a predetermined table is included.

  In the method according to the present invention, the automated device failure recovery system that has received the notification of the failure information determines whether or not the terminal is an automated device by referring to a storage device that stores the configuration information of the terminal. It may be made to include the step to do.

  In the method according to the present invention, when the session connection process fails in the terminal, the automated device failure recovery system that has received the failure information automatically generates a command that instructs the terminal to start the session connection process. Then, it may be controlled to output to the terminal.

  A system according to another aspect of the present invention is a system including at least one terminal made of an automation device and a host computer connected to the terminal through a network, wherein the host computer is an automation that controls failure recovery of the automation device. Equipment failure recovery means, and means for receiving a console message output when a failure occurs in the terminal, and notifying the automation equipment failure recovery means of terminal failure information, the automated equipment failure recovery means, When a failure information notification is received, it is determined whether or not the terminal in which the failure has occurred is an automated device. If the terminal is an automated device, a command for performing a recovery process of the automated device is automatically generated. And means for performing control to issue a command for performing the generated recovery process to the terminal; If the failure recovery means does not receive a notification from the terminal after issuing a command for performing the recovery processing of the automated device to the terminal, the host computer is determined in advance. Means for controlling the recovery process to be retried the same number of times, and means for registering an activation command in a predetermined table when the number of times of retry of the recovery process reaches the predetermined number of times, It is equipped with.

  The system which concerns on this invention WHEREIN: The said failure recovery means is good also as a structure which determines whether the said terminal is an automation apparatus with reference to the automation apparatus information table previously memorize | stored in the memory | storage device.

  In the system according to the present invention, when the session connection process fails in the terminal, the automated device failure recovery means that has received notification of failure information automatically generates a command that instructs the terminal to start the session connection process. The control for outputting the command to the terminal may be performed.

A computer program according to still another aspect of the present invention provides a host computer connected to a network with at least one terminal made of an automation device.
(A) When receiving a console message output when a failure occurs in the terminal, a process of notifying the failure information of the terminal to the automated device failure recovery process;
(B) In the automated device failure recovery process that has received the notification of the failure information, it is determined whether or not the terminal where the failure has occurred is an automated device, and when the terminal is an automated device, the automated device is restored. A process for automatically generating a command for processing,
(C) In the automated device failure recovery process, a process for issuing a command for performing the recovery process to the terminal;
From the program that executes the processing of (a), (b), and (c), and when the number of repetitions reaches the predetermined number of times, the process of registering the activation command in a predetermined table Become.

  In the program according to the present invention, in the process (b), the activated failure recovery system refers to an automated equipment information table stored in advance in a storage device, and whether the terminal is an automated equipment. You may make it make the said host computer perform the process which determines whether or not.

  In the program according to the present invention, when session connection processing fails in the terminal, a command for instructing the terminal to start session connection processing is automatically generated in the automated device failure recovery processing that has received notification of failure information. Then, the host computer may be caused to execute a process of controlling to output to the terminal.

  As described above, according to the present invention, it is possible to improve the efficiency of the failure recovery process, reduce the load of monitoring work, and when the predetermined number of times is exceeded in the retry of the recovery process, the start command By registering, reliability can be improved by continuing the recovery process by the operator.

  Embodiments of the present invention will be described. FIG. 1 is a diagram showing the configuration of an embodiment of the present invention. Referring to FIG. 1, in the system according to this embodiment, a host 100 including a computer system connected to an ATM terminal 130 that is an automated device performs online control in cooperation with an operating system 101 and the operating system 101. VIS (Versatile Online System) 102 that forms an online processing system, TOM / EDF (Total Operation Management System / Event Drive Facility) 103, and an automated equipment failure recovery system 110, which are event-driven systems responsible for system operation management. , A host console 120, a storage device storing the automation device information 140, and a startup command table 150. It has to a storage apparatus, a.

  The TOM / EDF 103 receives a system console message output (for example, a failure message display) generated by the computer system, and automatically generates a system console command on behalf of the operator (that is, instead of the operator inputting from the console 120). It is a system that supports the labor saving and automation of system operation.

  The automation device failure recovery system 110 refers to the automation device information 140 when it receives notification of failure information from the TOM / EDF 103, and controls to issue a connection command to the VIS 102 when the terminal is an automation device. (A program system executed on the host 100).

  The automated device information 140 is a table that stores the configuration information of all ATM devices that are connected by the host 100 and managed by the host 100. When there is a change in the ATM device, the configuration is updated to the latest one. It is an information management table.

  The activation command table 150 is a table for registering an activation command to which an identification code is added when the host 100 is connected and the session connection failure at the terminal in the host 100 is repeated a predetermined number of times.

  In FIG. 1, only one ATM terminal is shown for simplicity, but the number of ATM terminals is not limited to one, and may be plural.

  Hereinafter, a specific operation example of the embodiment shown in FIG. 1 will be described as an example of the present invention. FIG. 2 is a flowchart for explaining the operation of this embodiment. The operation of this embodiment will be described with reference to FIGS.

  If an attempt is made to connect a session to the ATM terminal 130 (hereinafter also simply referred to as “terminal”), but the session connection process fails for some reason, the VIS 102 of the host 100 displays a session failure message (console message). (“VISC39 terminal = XXXX open processing has ended abnormally”) (A11). In the console message, “XXXX” of “terminal = XXXX” is a definition ID (identification code) in the VIS 102 of the ATM terminal, and is composed of, for example, four digits and one alphabetic character. The session failure message is delivered to the TOM / EDF 103 as a text code.

  The TOM / EDF 103 receives and analyzes the console message (“VISC39 terminal = XXXX open process ended abnormally”), recognizes that this is a message notifying the terminal session connection process failure, and the TOM / EDF 103 Notifies the failure information to the automated device failure recovery system 110. More specifically, the TOM / EDF 103 uses, as failure information to be notified to the automated device failure recovery system 110, an activation command (for example, “/ TC SA TRM = XXXX”) for the failed terminal (ID = XXXX) ( Direct command) is issued (A12).

  The automated device failure recovery system 110 receives a command (“/ TC SA TRM = XXXX”) (A13) for notifying failure information from the TOM / EDF 103, and determines whether or not the terminal (ID = XXXX) is an automated device. The determination is made with reference to the information table (A14: corresponding to 140 in FIG. 1). The automated device information table includes at least an ID of a terminal connected to the host 100 and information indicating whether the terminal is an automated device.

  When it is determined that the failed terminal is an automated device (ATM terminal), the automated device failure recovery system 110 automatically generates a session connection command (“CV SA TRM = XXXX”) (A15) for the VIS 102. Automatic issue for terminals. In the session connection command, “XXXX” of “TRM = XXXX” is a definition ID (identification code) in the VIS 102 of the ATM terminal 130, and when the ATM terminal 130 receives this command from the VIS 102, Perform the connection process. In this embodiment, it is assumed that the ATM terminal 130 and the host 100 are connected at the network level (physical layer or network layer, etc.), and the session connection processing in the terminal is restored automatically. And

  For the same terminal, for example, as a retry process, a session connection process is continuously performed up to three times (A17). At the time of the fourth abnormality in the session connection process of the retry process, that is, when the retries have failed four times, the activation command with the identification code added is registered in the activation command table 150 (A19).

  If all the retries fail four times, the operator can input a new start command while referring to the start command registered in the start command table 150 from the console terminal 120 and confirming the contents of the failure. . Therefore, the reliability can be improved by continuing the recovery process by the operator.

  On the other hand, the VIS 102 receives the issuance of the session connection command (A15) and performs terminal activation processing (A17). That is, “CV SA TRM = XXXX” is issued to the ATM terminal 130, and an instruction to start session connection processing is issued to the terminal XXXX (A17).

  When the ATM terminal 130 receives an instruction to start the session connection process and the session connection process is successful, the VIS 102 displays a terminal recovery message (A18) as a console message when the session connection process is successful.

  When a time from when a failure message (console message) due to failure of the session connection processing at the ATM terminal 130 is output to when the session connection processing is completed at the failure ATM terminal 130 is measured, when there is no retry, several seconds. It turns out that it only takes a certain amount of time.

  Although the present invention has been described with reference to the above-described embodiments, the present invention is not limited to the configurations of the above-described embodiments, and can be made by those skilled in the art within the scope of the claims. Of course, various modifications and corrections will be included.

It is a figure which shows the structure of one Embodiment of this invention. It is a figure for demonstrating the process of one Example of this invention. It is a figure for demonstrating the process of a conventional system.

Explanation of symbols

100 Host 101 Operating system 102 VIS
103 TOM / EDF
110 Automated equipment failure recovery system 120 Console 130 Automated equipment (ATM terminal)
140 Automated device information 150 Startup command table

Claims (9)

A method of recovering a failure of an automated device by a host computer including at least an operation management system that connects to at least one terminal made of an automated device and receives a console message, and an automated device failure recovery system that controls failure recovery of the automated device Because
(A) The operation management system that has received a console message output when a failure occurs in the terminal notifies the automation device failure recovery system of failure information of the terminal;
(B) The automation device failure recovery system that has received the notification of the failure information determines whether or not the terminal where the failure has occurred is an automation device, and when the terminal is an automation device, the automation device recovery A step of automatically generating a command for processing;
(C) the automated equipment failure recovery system issuing a command for performing the recovery process to the terminal;
Including
When the failure is not recovered in the terminal to which the command for performing the recovery process is issued by the automated device failure recovery system, the host computer can perform the above (a), (b) at the maximum number of times. ) And (c) are repeated,
A method of recovering a failure of an automated device, comprising a step of registering an activation command in a predetermined table when the number of repetitions reaches the predetermined number.   The automated device failure recovery system which has received the notification of the failure information includes a step of determining whether or not the terminal is an automated device with reference to a storage device storing the configuration information of the terminal. The failure recovery method for an automated device according to claim 1.   The automated device failure recovery system that has received the notification of failure information when the session connection processing fails in the terminal automatically generates a command that instructs the terminal to start session connection processing, and sends the command to the terminal. 3. The failure recovery method for an automated device according to claim 1, wherein control is performed so that the output is output. At least one terminal of automated equipment;
A host computer connected to the terminal via a network;
In a system that includes
The host computer
Automated equipment failure recovery means for controlling the failure recovery of automated equipment,
Means for receiving a console message output when a failure occurs in the terminal, and notifying the failure information of the terminal to the automated equipment failure recovery means;
The automated device failure recovery means determines whether or not the failed terminal is an automated device upon receiving notification of failure information. If the terminal is an automated device, the automated device failure recovery means Means for automatically generating a command for performing, and issuing a command for performing the generated recovery processing for the terminal;
When the automated device failure recovery means does not receive a notification of recovery from the terminal after issuing a command for performing the recovery processing of the automated device to the terminal, the host computer is predetermined in advance. Means to control the recovery process to be retried as many times as specified,
Means for registering an activation command in a predetermined table when the number of retries of the recovery process reaches the predetermined number of times;
An automated equipment failure recovery system characterized by comprising: The host computer includes a storage device that stores at least information regarding whether or not the terminal is an automated device as configuration information of a terminal to be connected;
5. The automated equipment failure recovery system according to claim 4, wherein the automated equipment failure recovery means determines whether or not the terminal is an automated equipment with reference to the storage device.   When the terminal fails in session connection processing at the terminal, the automated device failure recovery means that has received notification of failure information automatically generates a command that instructs the terminal to start session connection processing, and sends the command to the terminal 5. The automated equipment failure recovery system according to claim 4, wherein control to output to the system is performed. To a host computer connected to a network with at least one terminal made of automation equipment,
(A) receiving a console message that is output when a failure occurs in the terminal, and notifying the failure information of the terminal to the automated device failure recovery processing;
(B) In the automated device failure recovery process that has received the notification of the failure information, it is determined whether or not the terminal where the failure has occurred is an automated device, and when the terminal is an automated device, the automated device is restored. A process for automatically generating a command for processing,
(C) In the automated device failure recovery process, a process for issuing a command for performing the recovery process to the terminal;
(A), (b), and (c) are repeated, and when the number of repetitions reaches the predetermined number of times, a process of registering an activation command in a predetermined table,
The program to be executed. The program according to claim 7, wherein
In the process (b), the automated device failure recovery process determines whether or not the terminal is an automated device by referring to a storage device that stores information on whether or not the terminal is an automated device. A program for causing the host computer to execute processing. The program according to claim 7 or 8,
When session connection processing fails at the terminal, in the automated device failure recovery processing that has received notification of failure information, a command for instructing the terminal to start session connection processing is automatically generated and output to the terminal A program for causing the host computer to execute a process for controlling as described above.

Images