JP2006209624A - Dual information processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a dual information processing system capable of instantaneously switching an information processor that is to be an active side. <P>SOLUTION: The information processor 101 comprises a master device 102 and a slave device 103 which execute the same processing. The slave device 103 includes a signal output means 104 outputting a switching signal instructing switching of an active-side device toward the master device 102. The master device 102 includes an interruption processing execution means 106 executing, with detection of the switching signal outputted by the signal output means 104 as a trigger, processing for switching a counter information processor 105 to the active-side device by interruption processing. The slave device 103 includes a signal generation means 107 generating the switching signal based on a plurality of signals, and the signal output means 104 outputs the switching signal generated by the signal generation means 107 toward the master device 102. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a duplex information processing system that includes two systems of information processing devices and is capable of switching information processing devices on the operating side.

  There is known a plant control system that manages and controls field devices arranged in a plant. Moreover, in such a plant, a safety system for safety of the plant is introduced. The safety system is a system that notifies an alarm and executes necessary measures when an abnormality is recognized in a field device, and is provided as a part of the plant control system or independently of the plant control system. .

JP 2000-347706 A

  Safety systems are required to have extremely high reliability due to their intended functions. For this reason, there is a case where a duplex system is constructed in which two systems of modules are prepared and the operating module can be switched. In this case, when the above occurs in the operating module, it is desired to quickly switch the standby module to the operating state.

  An object of the present invention is to provide a duplex information processing system that can immediately switch an information processing device on the operating side.

The duplexed information processing system of the present invention includes two systems of information processing devices, and in the duplexed information processing system in which the information processing device on the operating side can be switched, the information processing device includes a master device that executes the same processing, and Comprising a slave device, the slave device comprising a signal output means for outputting a switching signal for instructing switching of the operation side device to the master device, wherein the master device is output by the signal output means An interrupt processing execution means is provided for executing processing for switching between the information processing apparatus of the counterparty and the operating side apparatus by the interrupt processing with the detection of the switching signal as a trigger.
According to this duplex information processing system, the master device executes processing for switching between the partner information processing device and the operation side device by interrupt processing, triggered by detection of the switching signal output by the signal output means. The information processing apparatus on the operating side can be switched immediately.

The slave device includes signal generation means for generating the switching signal based on a plurality of signals, and the signal output means outputs the switching signal generated by the signal generation means to the master device. May be.
In this case, since the signal generation unit generates a switching signal as a summary signal based on a plurality of signals, only the summary signal needs to be output to the master device.

  The interrupt processing execution means may detect the switching signal by edge detection.

  The master device and the slave device may be mounted insulated from each other.

  According to the present invention, the master device executes the process for switching between the partner information processing device and the operating device by using the detection of the switching signal output by the signal output means as a trigger. The information processing apparatus to be switched can be switched immediately.

  FIG. 1 is a block diagram functionally showing the configuration of the duplex information processing system of the present invention.

  In FIG. 1, the information processing apparatus 101 includes a master device 102 and a slave device 103 that execute the same processing. The slave device 103 includes signal output means 104 that outputs a switching signal for instructing switching of the operation side device to the master device 102.

  The master device 102 includes interrupt processing execution means 106 that executes processing for switching between the other information processing device 105 and the active device by interrupt processing, triggered by detection of the switching signal output by the signal output means 104. To do.

  The slave device 103 includes a signal generation unit 107 that generates a switching signal based on a plurality of signals, and the signal output unit 104 outputs the switching signal generated by the signal generation unit 107 to the master device 102.

  Hereinafter, an embodiment of a duplex information processing system according to the present invention will be described with reference to FIGS.

  FIG. 2 is a block diagram showing the configuration of a safety system to which the duplex information processing system of this embodiment is applied. This safety system is configured as part of the plant control system.

  As shown in FIG. 2, the plant control system is interposed between a controller 2 that integrally manages and controls field devices such as electromagnetic valves and sensors arranged in each part of the plant, and between the controller 2 and the field devices. Input / output devices 3, 3,. The input / output devices 3, 3,... Are connected to the controller 2 via the network 4.

  As shown in FIG. 2, input / output modules 31 and 32 for executing an interface process between the field device 1 and the controller 2 are mounted on the input / output device 3.

  In this embodiment, the input / output modules 31 and 32 have the same configuration, and a duplexer is configured by two modules. In normal times, the input / output module 31 is on the active side and the input / output module 32 is on the standby side. However, when an abnormality occurs in the operation using the input / output module 31, the input / output module 32 is switched to the operating side.

  FIG. 3 is a block diagram showing the configuration of the duplexer.

  The duplexing device shown in FIG. 3 is a device that receives information from the field device 1 side via the input unit 5 and converts it into data that can be used by the host system on the controller 2 side. The same information is input to the input / output module 31 and the input / output module 32 from the input unit 5. However, only the operating module outputs the converted data to the host system, and the standby module does not output the data.

  As shown in FIG. 3, the input / output module 31 includes a master CPU 10 that executes the same processing for data conversion and a slave CPU 20. The master CPU 10 and the slave CPU 20 execute inter-CPU communication using asynchronous communication (UART), and synchronize their processes. In addition, by exchanging the data generated by the process, comparing the data of itself with the data received from other CPUs, if the data does not match, it is judged as abnormal, thereby improving the reliability of the process I am letting.

  The input / output module 32 includes a master CPU 10A that executes the same processing for data conversion and a slave CPU 20A. The master CPU 10A and the slave CPU 20A execute inter-CPU communication using asynchronous communication (UART), and synchronize their processes. In addition, by exchanging the data generated by the processing, comparing the data with the data received from other CPUs, if the data does not match, it is judged as abnormal, improving the reliability of the processing I am letting.

  As shown in FIG. 3, the master CPU 10 of the input / output module 31 and the master CPU 10A of the input / output module 32 communicate with each other and exchange duplex control signals. The duplex control signal is a signal that defines which of the input / output module 31 and the input / output module 32 is on the operating side. By exchanging a duplex control signal between the master CPU 10 and the master CPU 10A, the same recognition of the module on the operating side is shared between the input / output modules 31 and 32. Further, by switching the duplex control signal between the master CPU 10 and the master CPU 10A, it is possible to switch the operating side module.

  FIG. 4 is a block diagram showing processing in the input / output module 31.

  As shown in FIG. 4, the input / output module 31 is configured across the insulation boundary L between the host system side (controller 2 side) and the field device 1 side. A master device provided with a master CPU 10 is mounted on the host system side, and a slave device provided with a slave CPU 20 is mounted on the field device 1 side.

  The master CPU 10 communicates between an edge detection unit 11 that detects an edge of a switching signal, which will be described later, a processing unit 12 that executes the data conversion process and the data collation process, and the slave CPU 20. The communication part 14 which performs is provided.

  In addition, the master device on the host system side on which the master CPU 10 is mounted is provided with a diagnosis unit 15 to which diagnosis information on the host system side is input and an OR determination unit 16 that outputs an OR signal of a switching signal. .

  The slave CPU 20 is connected between the diagnostic unit 25 to which diagnostic information on the field device 1 side is input, the processing unit 22 for executing the processing for data conversion and the processing for data collation, and the master CPU 10. And a communication unit 24 for executing communication.

  Next, the operation of the input / output module 31 will be described.

  Each of the processing unit 12 of the master CPU 10 and the processing unit 22 of the slave CPU 20 receives information from the input unit 5 and executes processing for converting the information into data usable in the host system. When the input / output module 31 is on the operating side, the data created in the processing unit 12 is output to the host system through host communication.

  In addition, the data generated by the respective processes are exchanged via communication between the CPUs by the communication unit 14 and the communication unit 24, and both data are collated in the processing unit 12 and the processing unit 24. When the data of the processing unit 12 or the processing unit 24 does not match, it is determined that the processing is abnormal, and the recognition of the abnormality is shared by inter-CPU communication. Further, the processing unit 12 notifies the host system of processing abnormality via host communication. Further, the processing unit 12 sets the input / output module 32 to the operating side by exchanging a duplex control signal with the input / output module 32.

  Furthermore, the master CPU 10 and the slave CPU 20 exchange synchronization signals for synchronization via inter-CPU communication by the communication unit 14 and the communication unit 24. The synchronization signal is executed for each predetermined processing phase, and the same processing phrase is executed simultaneously between both CPUs. The exchange of the synchronization signal and the execution of the corresponding processing phase are alternately repeated. The inter-CPU communication for exchanging data and sharing the recognition of abnormality is executed as part of the processing in this processing phase. Therefore, the exchange of synchronization signals and the exchange of various data between CPUs are alternately executed at a predetermined cycle using inter-CPU communication.

  Diagnostic information on the higher system side is input to the diagnosis unit 15. The diagnosis information is various information for determining the necessity of switching the operating module. The diagnostic information includes diagnostic information on peripheral circuits of the master CPU 10. Based on the input diagnostic information, the diagnosis unit 15 generates a switching signal that is a signal indicating the necessity of switching modules. The switching signal is given to the OR determination unit 16.

  The diagnosis unit 25 receives a plurality of pieces of diagnosis information on the field device 1 side. Similar to the diagnostic information input to the diagnostic unit 15, this diagnostic information is various information for determining the necessity of switching the operating module. The diagnostic information includes diagnostic information of peripheral circuits of the slave CPU 20. The diagnosis unit 25 generates a switching signal that is a signal indicating the necessity of switching modules based on the input diagnostic information. The switching signal is output from the port of the slave CPU 20 and is output to the higher system side through the photocoupler 27 through the signal line 28. This switching signal is given to the OR determination unit 16.

  The switching signals output from the diagnosis unit 15 and the diagnosis unit 25 are converted into an OR signal by the OR determination unit 16 and given to the edge detection unit 11 of the master CPU 10. The OR determination unit 16 outputs a switching signal indicating the necessity of switching when any of the switching signals output from the diagnosis unit 15 or the diagnosis unit 25 indicates the necessity of switching. That is, the output signal is turned on.

  The edge detection unit 11 detects the rising edge at which the output signal of the OR determination unit 16 is turned on by edge detection. When the edge detection unit 11 detects the rising edge of the signal, the master CPU 10 shifts to interrupt processing.

  In the interrupt processing, module switching is immediately executed by exchanging a duplex control signal with the slave CPU 20.

  As described above, in the present embodiment, the switching signal is transmitted from the slave CPU 20 to the master CPU 10 by providing the signal line 28. Therefore, when the slave CPU 20 determines that the module needs to be switched, that is, when a switching signal is output from the diagnosis unit 25, the edge detection unit 11 of the master CPU 10 can immediately detect the rising edge of the switching signal. . Then, using the detection of the rising edge of the signal in the edge detection unit 11 as a trigger, the process proceeds to interrupt processing, and module switching processing is executed in the interrupt processing. For this reason, when an abnormality that requires module switching is detected on the field device 1 side, it is possible to immediately switch modules without using inter-CPU communication.

  Information including the switching signal generated in the diagnosis unit 25 is given to the processing unit 22 and processed into necessary information. The processed information is transferred to the master CPU 10 via inter-CPU communication and notified to the host system. Therefore, after the module is immediately switched, more detailed information for notifying the cause of the abnormality or the like is provided to the host system.

  As described above, in this embodiment, even when an abnormality or the like that requires module switching is detected on the slave CPU 20 side, the module is immediately switched without delay as in the case of detecting an abnormality on the master CPU 10 side. Can be executed. Further, since edge detection can be realized as a function provided in the master CPU 10, it is not necessary to add a circuit.

  Even when the CPUs are insulated from each other, it is sufficient that the signal line 28 connecting the slave CPU 20 and the master CPU 10 can transmit the switching signal, so there is no difficulty in mounting. For example, if diagnostic information is acquired on the higher system side (master CPU 10 side) and a switching signal is generated on the higher system side, a signal line for transferring diagnostic information is required. However, the diagnostic information usually consists of a large number of pieces of information, and it is difficult to implement and increase the cost to transmit the signal line for transferring all of the information beyond the insulation boundary L. . On the other hand, in the present embodiment, the diagnosis unit 25 receives a lot of diagnosis information, and the diagnosis unit 25 determines the necessity for switching modules, and summarizes it into a switching signal substantially necessary for the master CPU 10. Is output. Since the switching signal may be, for example, a binary signal, it is easy to provide the signal line 28.

  In the above embodiment, an example in which one master CPU and one slave CPU are used has been described. However, two or more slave CPUs can be used for one master CPU. In this case, the relationship between the master CPU and each slave CPU may be configured similarly to the above embodiment.

  The scope of application of the present invention is not limited to the above embodiment. The present invention can be widely applied not only to a safety system but also to an information processing system that handles various types of information.

The block diagram which shows the structure of the duplex information processing system of this invention functionally. The block diagram which shows the structure of the safety system to which the duplex information processing system of this embodiment is applied. The block diagram which shows the structure of a duplication apparatus. The block diagram which shows the process in an input / output module.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Information processing apparatus 102 Master apparatus 103 Slave apparatus 104 Signal output means 105 Information processing apparatus 106 Interrupt process execution means 107 Signal generation means

Claims (4)

In a duplex information processing system that includes two systems of information processing devices and is capable of switching between information processing devices on the active side,
The information processing apparatus includes a master device and a slave device that execute the same processing,
The slave device comprises a signal output means for outputting a switching signal for instructing switching of the operation side device to the master device,
The master device includes interrupt processing execution means for executing processing for switching between the other information processing apparatus and the operating side apparatus by interrupt processing, triggered by detection of the switching signal output by the signal output means. A dual information processing system characterized by this. The slave device comprises signal generation means for generating the switching signal based on a plurality of signals,
The duplex information processing system according to claim 1, wherein the signal output unit outputs the switching signal generated by the signal generation unit toward the master device. The duplex information processing system according to claim 1, wherein the interrupt processing execution unit detects the switching signal by edge detection. The duplex information processing system according to any one of claims 1 to 3, wherein the master device and the slave device are mounted insulated from each other.

Images