JP2006113840A - Monitoring control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a monitoring control system capable of increasing maintenance and reliability of monitoring control even if duplicated system monitoring control devices stop together and even if a system having not performed processing to the end before the both systems stop comes into a state that the system operates in advance. <P>SOLUTION: This monitoring control system has a control execution means executing processing for output of a control instruction and acquisition of measurement data when set as a master system when a monitoring terminal sets one of the two system monitoring control devices as the master system performing the processing and sets the other as a slave system succeeding to the processing, copying a processing state of the other system in a period when the other system is normal when the latest measurement data are absent or when set as the slave system, executing provisional processing limited only to a failure occurrence period in the period when failure occurs in the other system, and executing processing for connecting a provisional processing state to the processing state of the other system obtained by the copying when the other system returns from the failure. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention is a monitoring control in which one of two system monitoring control devices performs processing, and even if a failure occurs in the system monitoring control device performing processing, the other system monitoring control device can take over the processing. About the system.

  There is disclosed a computer system in which one of two server computers performs processing, and even if a failure occurs in the server computer that is performing processing, the other server computer can take over the processing (for example, the following Patent Document 1).

  This computer system performs the state transition of the server computer according to a predetermined state transition diagram when a failure occurs in at least one of the two server computers and when it recovers from the failure, and whenever a state transition is performed, Record the priority of the server computer itself after the transition, and if a failure occurs in both server computers, and then the server computer that has recovered from the failure, whether or not the server computer has a higher priority based on the priority It is configured to determine and determine whether or not the server computer has performed processing last based on the determination result.

With this configuration, even when a failure occurs in both server computers, it is possible to eliminate the limitation of the number of processing takeovers and realize automatic operation and improve determination accuracy.
JP 2001-175626 A

  The computer system described above can be applied to a monitoring control system in which system monitoring control devices are duplicated so as to reliably acquire measurement data and process it. However, in the above-described computer system, after both the system that performs processing and the system that takes over processing stop, if the system that stopped first (the system that has not been processed until the end) returns first, There is a problem in that the reliability and maintainability of the monitoring control deteriorates because the amount of missing data increases when input data integration processing is involved, until the system that has performed the processing returns.

  Also, if the user of the supervisory control system starts with a time difference after both systems stop, if the system that was started first was a system that had not been processed to the end before both systems stopped, For the same reason as described above, there has been a problem that the reliability and maintainability of the monitoring control are lowered.

  The present invention has been made to solve the above-described problems. The purpose of the present invention is to stop the redundant system monitoring and control apparatus together, and to start the system that has not been processed to the end before both systems stop. An object of the present invention is to provide a supervisory control system capable of improving the reliability and maintainability of supervisory control even when the system is in a state of being operated.

  The present invention acquires measurement data from a monitoring target system, generates a control command based on the measurement data, outputs the control command to the monitoring target system, and acquires one of the measurement data and outputs the control command by an external operation. Two system monitoring control devices and a monitoring terminal that can set the other system as a slave system that takes over the process, and can switch the setting state of the master system and the slave system as needed. In the monitoring and control system provided, the system monitoring and control device executes processing for obtaining measurement data and outputting control commands when set to the main system, and when there is no latest measurement data or set to the secondary system When the other system is normal, the processing status of the other system is copied during the period when the other system is normal, and during the period when the fault has occurred in the other system, provisional processing limited to the fault occurrence period is executed. From failure Further comprising a control execution means for executing a process of combining the tentative processing state in the processing state of the other system obtained by copying when he attributed characterized.

  Since the present invention is configured as described above, both the redundant system monitoring and control devices are stopped, and the system that has not been processed to the end before both systems stop is in a state of operating first. In addition, it is possible to provide a supervisory control system capable of improving the reliability and maintainability of supervisory control.

  FIG. 1 is a block diagram showing a configuration of an embodiment of a supervisory control system according to the present invention. In the figure, in order to monitor and control the monitoring target system 1, a system monitoring control device 10 and a system monitoring control device 20 having the same function form a duplex system, and the monitoring terminal 30 is common to these systems. It is connected to the. The system monitoring control device 10 and the system monitoring control device 20 each include an input unit 2, a data measurement unit 3, a transmission control unit 4, a storage buffer 5, a control execution unit 6, and an output unit 7.

  Among these, the input unit 2 receives state information as a condition of control output from the monitoring target system 1, and the data measurement unit 3 acquires measurement data from the monitoring target system 1. The transmission control unit 4 accepts a control command from a monitoring terminal 30 as an external device, or transmits status information and measurement information of the monitoring target system 1 to the monitoring terminal 30, and the storage buffer 5 is a monitoring target The current status information and interlock conditions of the system 1 are stored. The control execution unit 6 transmits the current state and measurement data of the monitoring target system 1 to the transmission control unit 4 in order to transmit to the monitoring terminal 30, and stores it in the storage buffer 5 as an interlock condition when the state information is controlled and output. Further, when the control command is received from the transmission control unit 4, the control command of the monitored system 1 is transmitted to the output unit 7 according to the current status of the monitored system 1 and the interlock condition. The unit 7 outputs a control command received from the control execution unit 6 to the monitoring target system 1.

  The operation of the embodiment configured as described above will be described below. The monitoring target system 1 includes, for example, a circuit breaker, a disconnector, and the like, and the state information thereof is received by the input unit 2 constituting each system monitoring control device and sent to the control execution unit 6. Further, the transmission control unit 4 receives a control command for the monitoring target system 1 given from the monitoring terminal 30 and sends it to the control execution unit 6, and transmits / receives data between the system monitoring control device 10 and the system monitoring control device 20. Or run. The control execution unit 6 to which the status information of the monitoring target system 1, the measurement data, and the control command for the monitoring target system 1 are sent executes a predetermined process based on those data. That is, status information and measurement data are displayed on the monitoring terminal 30, a control command is transmitted to the monitoring target system 1 via the output unit 7, and status information is stored in the storage buffer 5 as an interlock condition. . When displaying status information and measurement data on the monitoring terminal 30, the information is transmitted via the transmission control unit 4.

  The common operation of the system monitoring control device 10 and the system monitoring control device 20 has been described above. However, the monitoring terminal 30 sets one of these system monitoring control devices as the primary system and the other as the secondary system. In particular, the operation of the control execution unit 6 when the setting state is switched will be described in particular for the part related to the present invention.

(A) When the system monitoring control device 10 is set as the primary system and the system monitoring control device 20 is set as the secondary system, and both of these system monitoring control devices are normal, the presence or absence of the latest measurement data is detected. When there is no measurement data, the processing state of the measurement data processed so far is copied to each other, both systems hold the same processing state, and when there is measurement data, the system monitoring control device set as the main system 10 executes the continuous processing of the measurement data, and the system monitoring control device 20 set as the slave copies the processing state of the system monitoring control device 10.

(B) Next, in order to maintain the system monitoring control device 10, the system monitoring control device 10 is switched from the primary system to the secondary system, and the system monitoring control device 20 is switched from the secondary system to the primary system. When the presence or absence of measurement data is detected and the measurement data is not present, the system monitoring control device 20 holds the processing state so far, and when there is measurement data, the system monitoring control device 20 executes continuous processing of the measurement data. .

(C) Next, when a failure occurs in the system monitoring control device 20 before the maintenance of the system monitoring control device 10 is completed. The system monitoring control device 20 changes the processing status so far regardless of the presence of the latest measurement data. Hold. As a result, there is no problem if there is no measurement data, but when the measurement data is present, the process is not performed, and an error occurs in the processing state.

(D) Next, when the maintenance of the system monitoring control device 10 is finished and only the system monitoring control device 10 is recovered from the failure, the system monitoring control device 10 is detected when the presence of the latest measurement data is detected and there is no measurement data. Does not perform measurement processing, and when there is measurement data, the system monitoring and control device 10 set as a slave executes new processing from the return time point, that is, executes temporary processing from the reset state.

(E) Next, when the system monitoring control device 20 returns from the failure When the latest measurement data is detected, and there is no measurement data, the system monitoring control device 10 and the system monitoring control device 20 are in other processing states. Are copied, the temporary processing state is combined with the processing state up to that point, and both systems hold the same processing state. After that, if measurement data is acquired, the system monitoring control device 20 set as the main system Combines the processing of the newly input measurement data with the previous processing state, and the system monitoring control device 10 set as the slave copies the processing state of the system monitoring control device 20.

  By performing such operations, the reliability and maintainability of monitoring and control can be improved even if the systems that have not been processed to the end before both systems stop after the both systems have stopped are in a state of operating first. Can be increased.

  In FIG. 2, the monitoring target system 1 includes at least one of a circuit breaker and a disconnector (hereinafter referred to as a circuit breaker and a disconnector), the control execution unit 6 counts the number of operations, and an upper limit value (for example, 4095). This is a flowchart showing an example of a specific processing procedure for clearing to zero each time reaching, maintaining the state in the middle and continuing the processing, and will be described below using this flowchart.

  Here, after confirming that the monitoring terminal 30 is normal in step 101, it is determined in step 102 whether or not there is the latest measurement data. If there is measurement data, the processing from step 103 is executed. However, if there is no measurement data, the processing from step 108 is executed. In step 103, it is determined whether or not the system monitoring and control device including the control execution unit 6 is set as the main system. If it is set as the main system, whether or not the circuit breaker and disconnector are operated in step 104. If it is not operating, the processes in steps 103 and 104 are repeated. If it is operating, the count value is incremented by “1” in step 105. In step 106, it is determined whether or not the count value has reached the upper limit value. If the count value has not reached the upper limit value, the process returns to step 103. Is cleared to zero (0), and the process returns to step 103.

  On the other hand, when there is no latest measurement data in step 102, or when the system monitoring control device including the control execution unit 6 is set to the secondary system in step 103, the other system is normal in step 108. If the other system is normal, the count value of the other system is copied at step 109, and it is determined at step 110 whether the own system has a temporary count value. If there is, the count value copied from the other system in step 111 and the provisional count value of the own system are added and the process returns to step 102. If not, the process returns directly to step 102. Next, when it is determined in step 108 that the other system is not normal, it is determined in step 112 whether or not the circuit breaker and disconnector are operated. In step 113, the temporary count value is incremented by “1”. Then, in step 114, it is determined whether or not the count value has reached the upper limit value. If the upper limit value has not been reached, the process returns to step 112. If the upper limit value has been reached, the count value is set in step 115. After clearing to zero (0), the process returns to step 108.

  Thus, according to the processing procedure shown in the flow chart of FIG. 2, even when input data integration processing is involved, it is not possible to acquire data when both systems are stopped. Temporary counting is performed, and when the both systems return to normal, the process of adding the provisional count value is continued, so that the reliability and maintainability of monitoring control can be improved.

  As used herein, “failure occurs” refers to a state in which processing cannot be continued, including a power failure, in addition to a hardware failure, a software failure, and the like. “Recover from failure” means a state in which processing can be continued, including power-on, in addition to recovery from hardware failure and recovery from software failure.

The block diagram which shows the structure of embodiment of the monitoring control system which concerns on this invention. 2 is a flowchart showing an example of a specific processing procedure when the control execution unit counts the number of operations of at least one of a circuit breaker and a disconnecting switch in the embodiment of FIG. 1.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Monitored system 2 Input part 3 Data measuring part 4 Transmission control part 5 Storage buffer 6 Control execution part 7 Output part 10, 20 System monitoring control apparatus 30 Monitoring terminal

Claims (2)

Acquire measurement data from the monitoring target system, generate a control command based on the measurement data, output the control command to the monitoring target system, and perform processing of acquisition of the measurement data and output of the control command by one of the external operations Monitoring control provided with two system monitoring devices and a monitoring terminal, which can set the other to the main system to take over the other and take over the processing, and can switch the setting state of the main system and the subordinate system at any time In the system,
The system monitoring and control device includes:
When set to the main system, execute measurement data acquisition and control command output processing.When there is no latest measurement data, or when set to the secondary system, the other system is in a normal period. Other system obtained by copying the processing status of the system, executing provisional processing only during the failure occurrence period, and copying when the other system recovers from the failure during the period when the failure occurs in the other system Control execution means for executing a process of combining the provisional process state with the process state of
A supervisory control system characterized by comprising:   The monitoring control system according to claim 1, wherein the control execution unit includes an integration process of measurement data.

Images