JP2006268882A - Process-controlling device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce the cost and installation space of a multiplex controlling device and maintain its reliability. <P>SOLUTION: A process-controlling controller is provided with; an execution counter 116 which is updated when process input instructions are made in the case of an execution system; an outputting means which outputs a RUN signal while the process-controlling controller is active; an counter which monitors whether execution counter signals inputted from the corresponding computation device access control parts 45, 46 and 47 are updated, outputs an N signal if not updated, and outputs a Y signal if updated; a timer means to which the N signal of the counter is inputted; an OR circuit which receives the output of the timer means as an input to one side; a WO circuit which receives the output of the OR circuit and uses the Y signal as a deletion signal; and an AND circuit which receives the output of the WO circuit as an input to one side and uses the RUN signal as an input to the other side. The process-controlling controller stops a computation device access control parts corresponding to a process-controlling computation device when a signal is outputted from the AND circuit. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a process input / output device of a control device required to have high reliability such as nuclear power / thermal power generation and chemical plant.

  Conventionally, in a process input / output device of a control device that requires high reliability, as shown in Non-Patent Document 1, a process control input / output device and a process input / output device are combined into a multiplexed configuration, The apparatus is configured to be shared by a plurality of process control processing units.

  Further, as shown in Patent Document 1, there is a configuration in which a plurality of process control devices and a plurality of process input / output devices are connected by a common communication circuit, and each accesses as necessary.

  In addition, the multiplexing structure which this invention makes object means the structure more than triple. This is because at least a tripled configuration is required to use the majority circuit.

JP 08-044647 A Hitachi Review Vol68-6 P18 Fig.5

  In the above-described prior art method for multiplexing a process control processing unit and a process input / output device, when the process size is increased, the size of the device is increased, and the complexity and cost are increased.

  In addition, in a configuration in which process input / output devices are shared by multiple process control processing devices, if the number of process control processing devices increases, input / output operations for the process input / output devices increase, and it is necessary to improve the performance of process input / output devices. As a result, the cost increased and the complexity and reliability decreased.

  Furthermore, in the technique of Patent Document 1, a plurality of process control devices and a plurality of process input / output devices are connected via a common communication circuit. Arithmetic units cannot be accessed together. Further, since redundant devices are connected to the communication circuit, it cannot be said that there is no possibility that control will be impossible or process input / output may not be possible due to the failure of this common part.

  In a normal redundant system configuration, a standby system that does not follow the input signal of the execution system is excluded from the control system because control cannot be taken over when the execution system goes down. In the case where there are a plurality of standby systems, if the tracking on the standby system side becomes impossible due to a failure of the execution system, all the standby systems are excluded at once and the redundant configuration collapses, resulting in a single operation.

  Furthermore, in this case, in order to repair the faulty part, it is necessary to stop the running system that continues the operation, and eventually it is necessary to stop the single operating system, and therefore the plant operation must be temporarily stopped. There is.

  An object of the present invention is to reduce cost and installation space and maintain reliability in a multiplexing control apparatus.

  In the present invention, the process input / output device is shared by a plurality of process control arithmetic devices, and the process input / output devices are individually provided for each of the multiplexed process control arithmetic devices. And an arithmetic device access control unit. Then, the actual output to the process input / output device is performed in accordance with an instruction to the arithmetic device access control unit of one of the process control arithmetic devices. In addition, the process input / output device is configured to include a mutual communication unit that enables communication between the plurality of arithmetic device access control units, and the plurality of arithmetic device access control units correspond to the corresponding process control arithmetic unit. Controls signal input / output to / from the device. The multiplexed process control processing units perform output operations independently from each other to the processing unit access control unit, and from one of the multiplexed process control processing units. An actual output from the process input / output device is performed by an instruction to the corresponding arithmetic device access control unit.

  In addition, the actual input from the process input / output device is performed by the arithmetic device access control unit of any one of the process control arithmetic devices specified in advance from the process control arithmetic device.

  In a processing unit access control unit or a processing control processing unit, a process that is being transmitted from a processing unit access control unit that is performing actual input by means of mutual communication between processing unit access control units to another processing unit access control unit The input signal transmission update was monitored. If there is more than one standby system and the follow-up on all the standby systems becomes impossible due to a failure of the active system, all the standby systems are excluded at once and the redundant configuration will not collapse and single operation will not occur. As described above, the processing device access control unit of the process input / output device is provided with a mechanism (monitoring means) for detecting the presence / absence of access from the processing control processing device. That is, the processing device access control unit continues to access the other processing device from the processing device access control unit to the one processing device access control unit that is actually outputting through the mutual communication means between the processing unit access control units. The other control unit access control unit notified to the control unit notifies the process control processing unit connected to itself of this notification, and the notified process control processing unit calculates the connection to which it is connected. Return to the device access control unit, the computing device access control unit returns this to the notification source computing device access control unit, and the notification source computing device access control unit returns this notification to connect to itself Confirmed that it was notified of the presence of access from the control arithmetic unit.

  In addition, among the multiplexed process control processing devices, the execution system process control processing device outputs a signal indicating that it is operating soundly to a processing device access control corresponding to the process control processing device. To the other arithmetic device access control unit through the mutual communication means between the arithmetic device access control units, and the other arithmetic device access control unit that has been notified The process control arithmetic unit that inputs / outputs (corresponds) to the process control arithmetic unit is notified, and the notified process control arithmetic unit returns it to the arithmetic unit access control unit corresponding to itself, and the returned arithmetic unit access control unit reports this Returned to the processing unit access control unit of the notification source.

  Also, between the arithmetic device access control units that incorporate the majority decision determination circuit of the process output signal, the intermediate value selection circuit, the average value calculation circuit in the arithmetic device access control unit, and connect through the mutual communication means between the arithmetic device access control units, Process output signals from the processing control processing units connected to each other are mutually notified.

  In the process input / output device to be shared, an arithmetic device access control unit is individually installed for each process control arithmetic device, and any one of the process control arithmetic devices is instructed from the process input / output device by an instruction to the arithmetic device access control unit. Since the actual output is performed, each process control processing unit can independently execute the output operation to the processing unit access control unit. In addition, since the actual output from the process input / output device is performed via one arithmetic device access control unit designated by the process control arithmetic device, a plurality of process output signals are not output simultaneously. .

  An intercommunication means is provided between a plurality of arithmetic unit access control units, and the arithmetic unit access control unit that performs actual input uses the process input / output device signal input by itself to access another arithmetic unit via this. Since the information is transmitted to the control unit, the process control arithmetic devices connected to the respective arithmetic device access control units can independently input process input signals from the respective arithmetic device access control units connected thereto.

  The processing device access control unit monitors the update of transmission of the process input signal transmitted from the processing unit access control unit that is performing actual input by means of mutual communication between the processing unit access control units, or for process control In the arithmetic unit, update the transmission of the process input signal transmitted from the arithmetic unit access control unit that is performing the actual input by the mutual communication means between the arithmetic unit access control units to the arithmetic unit access control unit to which it is connected. Since signal monitoring from the processing unit access control unit in the execution system is stopped, it is determined that a failure has occurred in the process control processing unit / processing unit access control unit in the execution system, and the control operation is performed immediately. -Process I / O operations can be taken over in a healthy system.

  The arithmetic device access control unit continues the arithmetic device access for process control to one arithmetic device access control unit that is actually outputting the arithmetic device access control unit through mutual communication means between the arithmetic device access control units. To the other arithmetic device access control unit, the notified other arithmetic device access control unit notifies this notification to the process control arithmetic device connected to itself, and the notified process control arithmetic device Is returned to the computing device access control unit to which it is connected, and the computing device access control unit returns this to the computing device access control unit that is the notification source. In the other arithmetic device access control unit, the mutual communication means between itself and this, via the process control arithmetic device connected to this, It is possible to input folded his own notification information.

  For this reason, it is possible to confirm that this notification, which has been returned from the processing unit access control unit of the notification source, is a notification of the presence of access from the processing control processing unit connected to itself. Thus, it is possible to check the operational soundness of each passage route.

  In addition, the execution system process control processing unit notifies the processing unit access control unit corresponding to the process control processing unit of a signal indicating that it is operating soundly, and this is transmitted between the processing unit access control units. The other processing unit access control unit notifies the other processing unit access control unit from the processing unit access control unit through the mutual communication means, and the notified other processing unit access control unit inputs / outputs (corresponds to) the notification to itself. The process control processing device notified is returned to the other processing device access control unit that inputs / outputs it, and the other processing device access control unit returns this to the notifying processing device access control unit. Therefore, in the execution process process control processing device that is the notification source, the processing device access control unit to which it is connected and the other processing device access control unit are connected. And interconnection means between the via process control calculation device connected thereto, it is possible to obtain folding the notification information of the self. For this reason, the execution-system process control processing device that is the notification source can confirm that it has been notified that it is healthy, and the operational soundness of each passing route can be confirmed.

  As a result, when the process signal transmission update from the input / output execution system is not performed in the arithmetic device access control unit, all the confirmation results are obtained by comprehensively confirming the operational soundness confirmation results of each of the plurality of passage paths. If the update is stopped, it can be determined that there is a possibility of failure in the execution system process control processing unit or the processing unit access control unit. Therefore, it is possible to determine that the faulty part is faulty, and it is possible to identify the faulty part.

  In each arithmetic device access control unit, a process decision signal majority decision circuit, an intermediate value selection circuit, an average value calculation circuit are built in, and the arithmetic device access control units connected through the mutual communication means between the arithmetic device access control units, respectively, Since the process output signals from the process control arithmetic devices connected to each other are notified to each other, each arithmetic device access control unit has the output signals of each process control arithmetic device, the majority decision of the process output signals, Intermediate value selection and average value calculation can be performed, and a more reliable signal can be output to the plant.

As a first specific configuration, a multiplexed process control computing device that computes a process output signal, and a process equipment controlled by the process output signal or a process equipment that outputs a process input signal representing a process state And a process input / output device that performs signal output to the process equipment and signal input from the process equipment, interposed between the process control processing unit and the process control processing unit.
The process input / output devices are individually provided corresponding to each of the multiplexed process control arithmetic devices, and a plurality of arithmetic device access control units for controlling signal input / output between the corresponding process control arithmetic devices; The plurality of arithmetic device access control units are configured to have mutual communication means that enable communication between the plurality of arithmetic device access control units, and each of the multiplexed process control arithmetic devices is an execution system, a process input command, Means for outputting a RUN signal to another process control arithmetic device while the process control arithmetic device is alive, and the arithmetic device access control unit corresponding to each of the process control arithmetic devices has a corresponding process control The execution counter signal output from the processing unit for operation is received and transmitted to the processing unit access control unit corresponding to the processing unit for non-execution process control And a reception unit that receives an execution counter signal transmitted from a transmission unit of another arithmetic device access control unit and transmits the execution counter signal to a corresponding process control arithmetic device, and each of the process control arithmetic devices further includes: The execution counter signal input from the corresponding arithmetic unit access control unit is monitored to see if it has been updated with respect to the signal previously input, and when not updated, the N signal is output and updated. A counter that outputs a Y signal sometimes, timer means to which the N signal of the counter is input, an OR operation section that receives the output of the timer means as one input, and an output of the OR operation section as an input A WO operation unit that uses the signal as an erasure signal, and an AND operation unit that uses the output of the WO operation unit as one input and the RUN signal as the other input. When there is an output signal of the section, characterized in that it is configured to stop the operation device access control unit corresponding to the process control calculation device.

  As a second specific configuration, a multiplexed process control computing device that computes a process output signal and a process equipment that is controlled by the process output signal or that outputs a process input signal representing a process state And a process input / output device that intervenes between the process control arithmetic device and outputs a signal to the process equipment and inputs a signal from the process equipment. A plurality of processing unit access control units for individually controlling and inputting / outputting signals to / from the corresponding processing control processing units, and the plurality of processing unit access control units. The multiplexed processing control processing unit configured to have mutual communication means for enabling mutual communication Performs an output operation to the arithmetic device access control unit independently of each other, and instructs one of the multiplexed process control arithmetic devices to the corresponding arithmetic device access control unit. According to the present invention, actual output from the process input / output device is performed.

Also, as a third specific configuration, a multiplexed process control arithmetic unit that calculates a process output signal, and a process input signal representing a process device or a process state controlled by the process output signal are output. In a process control device comprising a process input / output device that intervenes between a process device and the process control arithmetic device and performs signal output to the process device and signal input from the process device,
The process input / output devices are individually provided corresponding to each of the multiplexed process control arithmetic devices and a plurality of arithmetic device access control units for controlling signal input / output with the corresponding process control arithmetic devices The plurality of arithmetic device access control units are provided with mutual communication means for enabling communication between them, and any one arithmetic device access designated in advance from the arithmetic device for process control is provided. A process input signal from the process device is transmitted to the corresponding processing control arithmetic device via the arithmetic device access control unit via the control unit, and another arithmetic device access control is performed from the arithmetic device access control unit. It is configured to be transmitted to each processing control processing device corresponding to another processing device access control unit via the unit. To.

  As a fourth specific configuration, in each of the second and third configurations, a process output to each arithmetic device access control unit from a process control arithmetic device corresponding to the arithmetic device access control unit. Storage means for storing the output signal and the process output signal output from the arithmetic device for process control corresponding to the other arithmetic device access control unit, majority decision circuit for inputting a plurality of process output signals, intermediate value selection Circuit and one or more average value calculation circuits are built-in, and each arithmetic device access control unit is a processing unit from the processing control arithmetic device to which the arithmetic device access control units are connected through the mutual communication means. Notify each other of output signals, and determine the majority of process output signals, select intermediate values, and calculate average values in the processing unit access control unit Characterized in that it is configured to output either of the result in the process.

  In the second to fourth configurations, each arithmetic device access control unit monitors the update of the process input signal transmitted from the arithmetic device access control unit that performs the actual input, and performs the actual input. When the signal transmission from the operating device access control unit is stopped, it may be a process control device characterized by having a monitoring response means that detects that and responds in a preset procedure. .

  In the second to fourth configurations, each process control arithmetic unit monitors the update of the process input signal transmitted from the arithmetic unit access control unit that performs the actual input, and performs the actual input. When the signal transmission from the computing device access control unit is stopped, the process control device is characterized by having a monitoring response means that detects that and responds in a preset procedure Also good.

  In each of the second to fourth configurations, each arithmetic device access control unit controls the process to one arithmetic device access control unit that performs actual output through the mutual communication means between the arithmetic device access control units. Is notified from the arithmetic device access control unit to the other arithmetic device access control unit, and the notified other arithmetic device access control unit notifies the processing control arithmetic device connected to itself of the notification. Then, the notified processing control processing device returns this to the processing device access control unit to which it is connected, and the processing device access control unit returns this to the notification source processing device access control unit, and the notification source processing device This notification, which has been returned in the access control unit, is a notification of the presence of access from the processing control processing device connected to itself. Preparative may process control apparatus characterized by being configured to confirm.

  In each of the second to fourth configurations, each of the process control arithmetic units notifies a corresponding arithmetic unit access control unit of a signal indicating that the process control arithmetic unit is operating properly, and the arithmetic unit access control And a means for returning to the arithmetic device access control unit a signal indicating that another processing control arithmetic device notified by the unit is operating soundly. The arithmetic device access control unit Notifying the other arithmetic device access control unit through the mutual communication means of the signal indicating that the arithmetic device for process control notified from the arithmetic device for process control is operating soundly, and other arithmetic device access control For notifying the process control arithmetic unit that inputs and outputs to itself a signal indicating that other process control arithmetic units notified by the unit are operating soundly And means for transmitting the signal indicating that the other process control arithmetic unit returned from the process control arithmetic unit is operating soundly to the arithmetic unit access control unit that is the notification source, It is good also as a process control device characterized by being constituted.

  According to the present invention, in the multiplexing control device, there is an effect of reducing cost and installation space and maintaining reliability.

  The first embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows the configuration of the present embodiment. In the illustrated embodiment, three process control controllers 1, 2, 3 having the same configuration and connected to each other by a communication circuit 5, and process contacts 15 connected to the process control controllers 1, 2, 3 respectively. , 25, 35, a majority circuit 8 connected to the process control controllers 1, 2, 3 on the input side, a shared process input / output device 4 connected to the process control controllers 1, 2, 3, and a shared process A monitoring contact 51 connected to the input / output device 4, a lamp 52, a setting device 53, and an indicator 54 are included.

  The three process control controllers 1, 2, 3 constitute a triple system, and each of the CPUs 11, 21, 31 and the interfaces (I / F) 14, 24, 34 has independent process inputs and outputs. The apparatus DI12, DO13, DI22, DO23, DI32, and DO33 are included.

  The shared process input / output device 4 includes input devices DI41 and AI43, output devices DO42 and AO44, and three unit drivers 45, 46 and 47 having the same configuration. DI 41 is connected to the monitoring contact 51, DO 42 is connected to the lamp 52, AI 43 is connected to the setting device 53, AO 44 is connected to the indicator 54, and unit drivers 45, 46, and 47 are connected to the process control, respectively. The controller 1, 2, 3 is connected to the I / F 14, 24, 34 via the communication circuit 6. That is, the unit drivers 45, 46, and 47 operate as an arithmetic device access control unit corresponding to each process control controller. The unit drivers 45, 46, and 47 are also connected to each other by a communication circuit 7 that forms mutual communication means, and can exchange signals with each other, and are connected to the input devices DI41 and AI43, and the output devices DO42 and AO44. ing.

  The individual process input / output devices DI12, DO13, DI22, DO23, DI32, and DO33 are used for important signal input / output of processes such as control signals, and the CPUs 11, 21, 31 of each process control controller. Belong to each. The input devices DI12, DI22, DI32 are connected to the process contacts 15, 25, 35 to receive inputs from the process contacts 15, 25, 35, and the output devices DO13, DO23, DO33 are external majority. (Here 2 out of 3) is connected to the circuit 8. The process contacts 15, 25, and 35 are contacts (triple contacts) that output the same signal, and are the individual process input / output devices DI12, DO13, DI22, DO23, DI32, and DO33 of the process control controllers 1, 2, and 3. Even if any one of them fails, the individual process input / output devices of the other process control controllers 1, 2, 3 remain alive so that the control can be continued (redundant).

  On the other hand, the input from the monitoring contact 51 and the setting device 53 and the output to the indicator 54 and the lamp 52 do not cause any trouble in the operation of the plant even if they break down. , 3 share the input devices DI41 and AI43 and the output devices DO42 and AO44 connected to them, thereby limiting the external majority circuit, reducing the installation space, and reducing the cost.

  FIG. 2 shows a route of process signal input from the shared process input / output device 4 to the process control controllers 1, 2 and 3. When inputting / outputting signals to / from the shared process input / output device 4, one of the process control controllers 1, 2, and 3 becomes the execution system and performs the actual input / output, and the rest is the non-execution system. However, FIG. 2 shows an example in which the process control controller 1 (CPU 11) is an execution system for process input / output operations.

  The unit driver 45 is connected to the PIO card interface circuit 450, the process input data storage unit 453 connected to the PIO card interface circuit 450 via the switch 452, and the process input data storage unit 453 to send input data to the interface 14. Transmitting unit 451 for transmitting, transmitting unit 457 connected to process input data storage unit 453 and transmitting input data to unit drivers 46 and 47 via switch 454, non-execution system end of switch 454 and process input data storage And a receiving unit 456 that is interposed between the units 453 and transmits a process input signal received via the switch 454 to the process input data storage unit 453. Switches 452 and 454 are processing switching execution switches for the execution system 111 and the non-execution system.

  The unit drivers 46 and 47 are also configured in the same manner as the unit driver 45, and thus description thereof is omitted. In FIG. 2, only the configuration relating to the input of the process input signal is shown.

  When the CPU 11 is the execution system 111, the unit driver 45 receives input signals from the DI 41 and AI 43 of the shared process input device via the bus 459 and the PIO card interface circuit 450 of the unit driver 45 and the switch 452 in response to an input command of the CPU 11. To the process input data storage unit 453. The captured signal is sent to the interface 14 via the transmission unit 451 and to the unit drivers 46 and 47 connected to the other process control controllers 2 and 3 via the transmission unit 457 and the switch 454. It is done.

  In the non-execution system unit drivers 46 and 47, since the switches 462 and 472 are opened and the switches 464 and 474 are on the non-execution side, the input signals from the DI 41 and AI 43 flowing to the bus 459 are sent to the unit drivers 46 and 47. Rather than being taken into the process input data storage units 463 and 473 via the PIO card interface circuits 460 and 470, a signal (process input data) transmitted from the execution system unit driver 45 via the switch 454 is sent. The signals are received via the switch 464 and the receiving unit 466, the switch 474 and the receiving unit 476, respectively, and stored in the process input data storage units 463 and 473. The stored process input data is sent to the interfaces 24 and 34 via the transmission units 461 and 471, respectively.

  Thus, each process control controller 1, 2, 3 can input a process input signal in the same process regardless of its own execution system / non-execution system.

  In the present embodiment, the non-execution system CPU 21, unit driver 46, CPU 31, and unit driver 47 receive process input signals from the execution system CPU 11 and unit driver 45 due to, for example, failure of the non-execution system unit drivers 46 and 47. This system is configured to be excluded when the copy of is no longer executed.

  However, when this cannot be executed due to a failure of the transmission unit 457 of the execution system unit driver 45, the two non-execution systems are excluded. In addition, the execution system unit driver 45 is stopped at the time of replacement maintenance of the failed part, and as a result, there is a possibility that the entire system is stopped. Therefore, a soundness monitoring mechanism as shown in FIG. Yes.

  FIG. 3 shows the route of the process signal output from each process control controller 1, 2, 3 to the shared process input / output device 4.

  The unit driver 45 includes a process output data storage unit 45B connected to the PIO card interface circuit 450 via a switch 45A, and a reception unit 458 connected to the process output data storage unit 45B via a switch 45C. The receiving unit 458 is connected to the CPU 11 via the interface 14. In FIG. 3, only the configuration related to the output of the process output signal is shown. The unit drivers 46 and 47 also have the same configuration and will not be described.

  As in FIG. 2, the CPU 11 is the execution system 111 for the process input / output operation, and the operation when the switches 45A and 45C are closed is shown. The process output signal of the execution system CPU 11 is stored in the process output data storage unit 45B via the interface 14, the reception unit 458 of the unit driver 45, and the switch 45C. The process output signal stored in the process output data storage unit 45B is output to the bus 459 via the switch 45A and the PIO card interface circuit 450 of the unit driver 45, and is written in the DO42 and AO44 of the shared process output device.

  The non-execution CPUs 21 and 31 perform the same control operation as the execution CPU 11 based on the process input signal, and the same process output signals are sent to the interface 24, the reception unit 458, the interface 34, and the reception unit 468, respectively. To the unit drivers 46 and 47. In the unit drivers 46 and 47, the switches 46C, 46A, 47C and 47A are on the non-execution system side (open), and even if the process output signal is received from the CPUs 21 and 31, the write operation to the DO 42 and AO 44 via the bus 459 is performed. Is not implemented.

  As a result, even if the process control controllers 1, 2, and 3 perform the output operation in the same process regardless of their own execution system / non-execution system, the process output signal of the execution system is actually output as a process.

  FIG. 4 shows an operation of confirming whether the execution system is normal when the CPU 11 is the execution system 111.

  The CPU 11 includes an execution counter 116 that is updated at the time of a process input command, a means for outputting a signal (RUN signal 110) while the CPU 11 is alive to the non-execution system unit drivers 46 and 47, and a signal that is returned from the CPU 21. The counter 112 that monitors whether the signal 72 is updated with respect to the signal 72 that has been returned last time and outputs a signal when the signal 72 has not been updated, and the signal 73 that has been returned from the CPU 31 have been returned last time. The counter 118 that outputs a signal when it is not updated and the output of the counter 112 as one input, and the RUN signal 210 of the CPU 21 output from the CPU 21 as the other input The AND circuit 113 and the counter 118 output as one input, and C An AND circuit 117 having the RUN signal 310 of the CPU 31 output from the U31 as the other input and an AND circuit 114 having the output of the AND circuit 113 as one input and the output of the AND circuit 117 as the other input are provided. ing.

  The CPUs 21 and 31 update the CPU 71 with the means for outputting the RUN signals 210 and 310 to the CPU 11 while they are alive, and the signal 71 input through the unit drivers 46 and 47 with respect to the signal 71 input last time. Counters 217 and 317 that monitor whether or not they are updated, output a signal to that effect (N signal) when not updated, and output a signal to that effect (Y signal) when updated, 217 connected to the N signal output side of 217, an OR circuit having the output of the timer means 216, 316 as one input, the output of the OR circuit as an input, and the Y signal as an erasure signal And an AND circuit 219, 319 having the output of the WO circuit as one input and the RUN signal 110 of the CPU 11 as the other input. It is. The output of the WO circuit is also the other input of the AND circuits 219 and 319.

  In the above description, the configuration that operates when the CPU 11 is an execution system has been described. However, the configuration provided in the CPU 11 includes the CPUs 21 and 31 in the same manner, and the configuration provided in the CPUs 21 and 31 includes the CPU 11 in the same manner. It includes means 110, 210, 310 for outputting the RUN signal, counters 112, 116, 118, 217, 317, AND circuits 113, 114, 117, 219, 319, an OR circuit, and timer means 216, 316 to cope with an abnormality. Monitoring response means is configured.

  Next, the operation will be described. When the CPU 11 is the execution system 111, the execution counter 116 is updated at the time of a process input command, and the updated count (execution counter) is notified to the unit driver 45. The unit driver 45 transmits this to the non-execution system unit drivers 46 and 47 as a signal 71 from the transmission unit 457, and the non-execution system unit drivers 46 and 47 receive them by the reception units 466 and 476, respectively. This is notified to the CPUs 21 and 31 of the process control controllers 2 and 3 to be connected.

  The CPUs 21 and 31 of the process control controllers 2 and 3 send back the notified signal 71 to the unit drivers 46 and 47 to which they are connected during their own process input operation, and the unit drivers 46 and 47 send them back to the execution system. The signals are transmitted to the unit driver 45 from the transmission units 467 and 477 as signals 72 and 73, respectively. The unit driver 45 notifies the execution system CPU 11 of the execution counters (signals 72 and 73) notified from the non-execution system unit drivers 46 and 47.

  The execution system CPU 11 monitors whether the execution counters of the signals 72 and 73 returned from the non-execution system unit drivers 46 and 47 are updated by comparing with the execution counters of the signals 72 and 73 returned last time. If not, a signal (N signal) is output to one input of the AND circuits 113 and 117, respectively. RUN signals 210 and 310 indicating whether or not the non-execution CPUs 21 and 31 are alive are input to the other inputs of the AND circuits 113 and 117. If all of the four inputs of the AND circuits 113 and 117 have signal inputs, the output of the AND circuit 114 is present, and there is a failure in which the self-system counter update 116 is not notified to all non-execution systems due to a problem with the self-system transmission unit. Judgment was made and the own system unit driver stopped.

  The non-execution CPUs 21 and 31 monitor the counters 217 and 317 to check whether the received signal (execution counter) 71 has been updated from the contents of the signal 71 up to the previous time. , 317 output an N signal. The N signal is passed through the timer means 216 and 316, and when the N signal continues after a predetermined time, it is transmitted to one input of the AND circuits 219 and 319 via the WO circuit. The RUN 110 of the execution CPU 11 is input to the other input of the AND circuits 219 and 319. When there is an output signal from the AND circuits 219 and 319, necessary processing such as stopping the own unit driver is performed.

  As a result, if the notified execution counter has not been updated, it is found that there is a failure on the way, and if this is the result of confirming the update of notifications from all non-execution systems, multiple non-execution systems can be multiplexed. Since there is a higher possibility of an internal failure of the execution system than a failure, this detection is sufficiently early compared to the process change to the extent that there is no problem even if control is continued with the process input data input from the execution system in the non-execution system In this case, the redundant operation of the control system can be continued by excluding the execution system side and taking over the non-execution system as the execution system. Various methods are conventionally known for taking over from an execution system to a non-execution system when an abnormality is detected, and an appropriate one of them may be selected.

  In the embodiment shown in FIG. 4, a counter, an AND circuit, an OR circuit, a WO circuit, and the like are provided in the CPU. However, these may be provided in the unit driver.

  According to the present embodiment, the process input / output device shared by the multiplexed process control arithmetic devices is provided, and the signal input / output individually corresponding to each process control arithmetic device is provided in the shared process input / output device. Since each of the process control arithmetic devices can simultaneously receive the same process input signal and independently execute a control operation and an input / output operation, the process control arithmetic device The control operation executed in step 1 is highly independent and the reliability can be improved.

  Further, by using the shared process input / output device, the number of parts is reduced, and not only the cost of the device but also the necessary space is reduced and the probability of failure is reduced, so that the reliability is improved.

  In addition, if an abnormality occurs, it is possible to specify the fault location, whether it is a fault in the active system or any other fault, and multiple standby systems cannot follow the active system at the same time due to the fault in the active system. In this case, it is possible for the executing system side to quickly abandon the execution right, prevent the standby system from being excluded, and maintain a redundant configuration even when repairing a failure. The operation can be continued.

  FIG. 5 shows a second embodiment of the present invention. In the embodiment shown in FIG. 3, the process output signal calculated by the CPU 11 of the execution system is directly written to the DO 42 and AO 44 of the shared process input / output device 4 via the bus 459. In FIG. 4, the calculation results of the non-execution CPUs 21 and 31 are reflected in the process output.

  Specifically, in the configuration shown in FIG. 5, the process output signals of the process control CPUs 11, 21, 31 are calculated in the unit drivers 45, 46, 47, and the intermediate value / average value / majority decision result is executed. The unit driver outputs a process. Also in the figure, the CPU 11 is an execution system.

  The unit driver 45 connected to the execution system CPU 11 includes a receiving unit 458 connected to the interface 14 attached to the CPU 11, a process output data A storage unit 45 E connected to the receiving unit 458, and a process output data A storage unit. Connected to the receiving unit 456, a transmitting unit 457 that is connected to the 45E and transmits the stored data to the unit drivers 46 and 47, a receiving unit 456 that receives the process output data transmitted from the unit drivers 46 and 47, and the receiving unit 456 Calculation provided in connection with the process output data B storage unit 45F and the process output data C storage unit 45G, the process output data A storage unit 45E, the process output data B storage unit 45F, and the process output data C storage unit 45G. Unit 45D and process output data storage connected to operation unit 45D And 45B, a PIO card interface circuit 450 connected to the process output data storage unit 45B via the switch 452, is configured to include a. Since the CPU 11 is the execution system, the operation when the switch 452 is the execution system 111 (closed) is performed.

  The unit drivers 46 and 47 have the same configuration and will not be described. The switches 462 and 472 of the unit drivers 46 and 47 are in an open state indicating the non-execution system because the CPUs 21 and 31 are non-execution systems.

  In the above configuration, the process output signal (process output data A) of the CPU 11 is stored in the process output data A storage unit 45E via the interface 14 and the receiving unit 458. The process output data A stored in the process output data A storage unit 45E is transmitted to the unit drivers 46 and 47 via the transmission unit 457, and stored in the process output data A storage unit 46E and the process output data A storage unit 47E, respectively. The The process output data B of the CPU 21 is stored in the process output data B storage unit 46F of the unit driver 46, and is transmitted to the other system unit drivers 45 and 47 by the transmission unit 467. The transmitted process output data B is stored in the process output data B storage unit 45F and the process output data B storage unit 47F, respectively. Further, the process output data C of the CPU 31 is stored in the process output data C storage unit 47G of the unit driver 47, and is transmitted to the other system unit drivers 45 and 46 by the transmission unit 477. The transmitted process output data C is stored in the process output data C storage unit 45G and the process output data C storage unit 46G, respectively.

The calculation unit 45D of the unit driver 45 includes process output data A, process output data B, and process output data stored in the process output data A storage unit 45E, the process output data B storage unit 45F, and the process output data C storage unit 45G, respectively. With C as an input, a predetermined majority calculation, average value calculation, or intermediate value calculation is performed, and the result is output to the process output data storage unit 45B.

  The calculation result stored in the process output data storage unit 45B is sent to the bus 459 via the switch 452 and the PIO card interface circuit 450, and is written in the DO42 and AO44.

  The calculation unit 46D of the unit driver 46 also has process output data A, process output data B, and process output data C stored in the process output data A storage unit 46E, process output data B storage unit 46F, and process output data C storage unit 46G, respectively. Are input to the process output data storage unit 46B by performing any one of a predetermined majority calculation, average value calculation, and intermediate value calculation, and the calculation unit 47D of the unit driver 47 is also processed by the process output data A storage unit 47E. The process output data A, process output data B, and process output data C respectively stored in the process output data B storage unit 47F and the process output data C storage unit 47G are input, and a predetermined majority calculation and average value calculation are performed. Process output data by performing any of the intermediate value operations And outputs to pay part 47B. However, since the switches 462 and 472 are open, the data of the process output data storage units 46B and 47B is not output to the bus 459, and the output of the unit driver 45 attached to the CPU 11 which is the execution system is output. As described above, the actual output is written in DO42 and AO44.

  Normally, the average value calculation result is output for analog signals, and the majority result is output for digital signals of 1 and 0, respectively. The intermediate value calculation is performed in the case of an analog signal or a digital signal indicating a numerical value.

  According to the present embodiment, each processing device access control unit stores all output signals of each processing control processing device, and each processing device access control unit determines the majority of process output signals, selects an intermediate value, averages. Value calculation can be performed, and a more reliable signal can be output to the plant, and control can be continued regardless of which process control arithmetic device is in the execution system. Further, in the present embodiment, the arithmetic unit access control unit is provided with the arithmetic unit for performing the majority decision of the process output signal, the intermediate value selection, and the average value calculation, but the majority decision, the intermediate value selection, and the average value are not necessarily provided. It is not necessary to perform all of the calculations, and one or more of them may be arranged according to the needs of the process.

  In the embodiment shown in FIG. 3, the output of the CPU 11 which is the execution system is an actual output, and in the embodiment shown in FIG. 5, the result reflecting each output of the CPUs 11, 21, 31 is the execution system. The configuration is output from a unit driver 45 corresponding to a certain CPU 11, but both may be combined to select which method to output according to the type of process output signal.

It is a block diagram which shows the 1st Embodiment of this invention. It is a block diagram which shows the flow of the process input data of embodiment shown in FIG. It is a block diagram which shows the flow of the process output data of embodiment shown in FIG. It is a block diagram which shows the flow of the data in the case of soundness confirmation of embodiment shown in FIG. It is a block diagram which shows the flow of the other process output data in the 2nd Embodiment of this invention.

Explanation of symbols

1, 2, 3 Process control controller 4 Shared process input / output device 5 Communication circuit 6 Communication circuit 7 Communication circuit (mutual communication means)
8 Majority circuit 11 CPU-A
12, 13 Individual process input / output device 14 I / F-A
15 Process contact 21 CPU-B
22, 23 Individual process input / output device 24 I / F-B
25 Process contact 31 CPU-C
32, 33 Individual process input / output device 34 I / F-C
35 Process contact 41, 43 Input device 42, 44 Output device 45, 46, 47 Arithmetic unit access control unit (unit driver)
51 Monitoring contact 52 Lamp 53 Setting device 54 Indicator

Claims (1)

A multiplexed process control computing device that computes a process output signal, a process device controlled by the process output signal or a process device that outputs a process input signal representing a process state, and the process control computing device In a process control device comprising a process input / output device for intervening signal output to the process equipment and signal input from the process equipment,
The process input / output devices are individually provided corresponding to each of the multiplexed process control arithmetic devices, and a plurality of arithmetic device access control units for controlling signal input / output between the corresponding process control arithmetic devices; The plurality of arithmetic device access control units are configured to have mutual communication means that enable communication between the plurality of arithmetic device access control units, and each of the multiplexed process control arithmetic devices is an execution system, a process input command, A means for outputting a RUN signal to another process control arithmetic device while the process control arithmetic device is alive, and an arithmetic device access control unit corresponding to each of the process control arithmetic devices, A transmission that receives the execution counter signal output from the arithmetic unit and transmits it to the arithmetic unit access control unit corresponding to the non-executable process control arithmetic unit And a reception unit that receives an execution counter signal transmitted from a transmission unit of another arithmetic device access control unit and transmits the execution counter signal to a corresponding process control arithmetic device, and each of the process control arithmetic devices further includes: When the execution counter signal input from the corresponding arithmetic unit access control unit is updated with respect to the signal input last time, the N signal is output when it is not updated, and when it is updated A counter for outputting a Y signal to the counter, a timer means for receiving the N signal of the counter, an OR operation section using the output of the timer means as one input, and an output of the OR operation section as an input for the Y signal And an AND operation unit having the output of the WO operation unit as one input and the RUN signal as the other input. When there is an output signal, a process control apparatus characterized by being configured to stop the operation device access control unit corresponding to the process control calculation device.

Images