JP2009042846A - Distributed monitoring control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To quickly restore a distributed multi-system monitoring control system to a sound state when the abnormality of a facility database is generated. <P>SOLUTION: In this distributed monitoring control system composed of main computers 1 and 2 equipped with a monitoring control processing function; and a maintenance computer 3 for generating a facility database, main computers 1 and 2 are respectively provided with facility databases 14 and 24 for on-line and replicas 15 and 25 of the facility database for on-line arranged in a main memory; monitoring control processing parts 11 and 21; abnormality detection processing parts 12 and 22 for detecting the abnormality of the facility databases for on-line; and facility database switching processing parts 13 and 23 for switching the facility databases for on-line to replicas when abnormality is detected, wherein the facility database 34 for storage of the maintenance computer 3 is transferred and restored to the facility database whose abnormality is generated after switching to the replica. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a distributed monitoring control system including a plurality of distributed computers such as a power system monitoring control system, and more particularly to a database switching technique when an equipment database abnormality occurs.

  In systems that monitor and control equipment such as electric power systems and power plants, the equipment to be monitored and controlled is increasing and becoming more complex year by year. High performance and high reliability are desired. Under such circumstances, the supervisory control system employs multiplexing and decentralization of computers and transmission lines constituting the system, and is generally configured by a plurality of computers.

  These monitoring control systems are provided with an equipment database for recognizing equipment to be monitored and controlled, and each business process is executed by referring to the equipment database. For example, the power system includes equipment such as generators, transmission lines, transformers, and switches, and the data related to these equipments constitutes records for each type, and these records together form the equipment database. is doing.

  Thus, while the system configuration of the supervisory control system is complicated, the equipment database held by the system must be updated frequently in order to adapt to the equipment to be monitored that changes daily. In addition, it is necessary to make the system downtime for updating the equipment database as short as possible so that online operations such as monitoring and control are not hindered. This is also the case when an abnormality occurs in the equipment database, and it is necessary to quickly restore the equipment database and resume system operation in a short time. For this reason, techniques for restoring and switching equipment databases at high speed have been developed.

Patent Document 1 is composed of a dual main computer that executes online business processing and a maintenance computer that updates the equipment database. The equipment database is placed in the main memory, and the system is stopped due to database update or database failure. There is a disclosure about an example of a distributed monitoring control system that updates and restores the equipment database at high speed by distributing the equipment database held in the maintenance computer when recovering from the system.
Japanese Patent Laying-Open No. 2005-301438

  By the way, the conventional distributed monitoring and control system adopts a method in which the equipment database updated by the maintenance computer is distributed to all computers equipped with the equipment database and placed in an external storage device such as a hard disk or main memory. Yes. However, when an abnormality occurs in the equipment database of a certain computer, it is necessary to redistribute and restore the equipment database of the maintenance computer or sound computer to the computer where the abnormality occurred, so it cannot be immediately restored to normal. There was a problem.

  Further, conventionally, when an abnormality occurs in the equipment database, the program of the monitoring control processing unit that refers to the equipment database ends abnormally, causing a system stop. For this reason, after the equipment database is restored by transferring it from a maintenance computer, etc., it is necessary for the system administrator to restart the system and resume operation. It took a lot of labor and time.

  The present invention has been made in view of the above points, and in a distributed multiple system monitoring and control system, when an abnormality occurs in the equipment database, the computer in which the abnormality has occurred without redistributing a sound equipment database from another computer The purpose is to make it possible to quickly restore the facility database to a healthy state.

  The present invention is a distributed monitoring control system comprising a plurality of main computers having a monitoring control processing function and a maintenance computer having a database maintenance function for generating an equipment database to be referred to when the monitoring control processing is executed. A facility database maintenance processing unit that generates a facility database and stores the generated facility database in a storage facility database, and transfers the storage facility database to the main memory of the main computer, and a replica of the online facility database and the online facility database The main computer consists of a monitoring control processing unit that monitors and controls equipment, an abnormality detection processing unit that detects abnormalities in the online equipment database, and an abnormality by the abnormality detection processing unit. Upon detection Switch the online equipment database to the replica are those constructed from the facility database switching unit.

  According to the present invention, by placing an online equipment database and its replica in the main memory of the main computer, when an abnormality occurs in the online equipment database, switching to a replica makes it possible to switch to a sound equipment database at high speed. Can be implemented. Therefore, the system operation stop can be minimized.

  Further, by providing the facility database abnormality detection processing means, it is possible to detect an abnormality in the facility database before a failure due to the facility database abnormality occurs in the monitoring control process. Therefore, it is possible to prevent the system from being stopped due to an equipment database failure, switch to a sound equipment database while continuing system operation, and restore the equipment database in which an abnormality has occurred. Thereby, stable operation of the system can be realized, and high reliability of the system can be achieved. In addition, since recovery from an abnormality can be performed automatically, the burden on the system administrator can be greatly reduced.

  Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

  FIG. 1 shows a system configuration example according to this example. The system configuration of this example will be described with reference to FIG.

  In this example, for example, the main computer A1 and the main computer B2 having a monitoring control function for monitoring the operating state of equipment such as an electric power system and a power plant and performing operation by remotely controlling the equipment, and supervisory control The maintenance computer 3 is used to maintain and manage the equipment database of the target equipment. Although FIG. 1 shows an example of a dual system including two main computers, a configuration including three or more main computers or a configuration in which different functions are distributed and installed in a plurality of computers. It is good. Moreover, it is good also as a structure provided with the computer for a test which performs the test, when an equipment database is produced | generated or changed with a maintenance computer, or the program etc. which comprise the monitoring control processing means are changed.

  The main computer A1 and the main computer B2 in this example have the same configuration, both for monitoring and control processing units 11 and 21 for executing business processing functions such as monitoring and control, and for detecting abnormalities in the online equipment database. In addition, the abnormality detection processing units 12 and 22 that refer to the equipment database at regular intervals to determine whether or not there is an abnormality, and when the abnormality detection processing units 12 and 22 detect an abnormality in the online equipment database, the abnormality detection processing unit 12 and 22, and equipment database switching processing sections 13 and 23 for switching the online equipment database to the replica. In addition, online facility databases 14 and 24 that are referred to when the monitoring control processes 11 and 21 are executed, and online facility database replicas 15 and 25 that are replicas of the online facility database are arranged in the main memory.

  The maintenance computer 3 generates a facility database based on the update facility database 33, stores the generated facility database in the storage facility database 34, and stores the storage facility database 34 in the main computer A1, Transfer to the main memory of the main computer B2, arrange as online equipment databases 14, 24 and online equipment database replicas 15, 25, manage the status of the equipment database placed on the main computer, and generate an abnormality in the equipment database An equipment database management processing unit 32 that sometimes performs database restoration processing, and an equipment database state table 35 for registering the equipment database arranged in the main computer and the equipment database provided in the maintenance computer.

  Here, the storage equipment database 34 is a master database of an online equipment database and a replica of the online equipment database arranged in the main computer, and the contents of the equipment database on the main computer are the same as the storage equipment database 34. .

  Further, in this example, an update equipment database 33 is provided as a work equipment database when the equipment database is updated in response to the addition or change of equipment. When the facility database is updated, the facility database maintenance processing unit 31 performs an update operation, and the generated facility database is temporarily stored in the update facility database 33. After that, when an equipment database test or the like is performed and the system becomes operational, the updated equipment database 33 is written into the storage equipment database 34, and the updated equipment database is transferred to the main computer to reflect the updated contents. .

  FIG. 2 is a flowchart illustrating a processing example of equipment database maintenance processing by the equipment database maintenance processing unit 31. Of the facility database maintenance processing, the processing for performing the test based on the updated facility database before reflecting it to the main computer is the same as that of the conventional system, and thus detailed description thereof is omitted. FIG. 2 shows a processing example related to processing reflected in the main computer after the facility database test, and details of processing for reflecting the updated facility database in the main computer will be described with reference to FIG.

  First, the update equipment database 33 for which the maintenance work and the test work have been completed by the maintenance computer 3 is written into the storage equipment database 34 (step S201). Next, it is determined whether or not the facility database has been successfully written (step S202). If the facility database is successfully written, the database state of the storage facility database in the facility database state table 35 is “normal” and the processing state is “in operation”. Is set (step S203). Details of the equipment database state table 35 will be described later. Next, two sets of the online facility database and the online facility database replica are transferred to the main memory of the main computer and arranged for one of the main computers (step S204). In addition, in order not to interfere with the system operation, take measures such as continuing the operation of the active main computer and working the target main computer in the system stopped state before processing the main computer. . After the transfer of the equipment database, it is determined whether the transfer is successful (step S205). If the transfer is successful as a result of the determination, a flag of “normal” is set in the database status of the online equipment database of the main computer in the equipment database status table, and an “in operation” flag is set in the processing status. Further, a flag of “normal” is set in the replica database state, and a “standby” flag is set in the processing state (step S206). Next, it is determined whether or not the transfer of the equipment database to the main computer has been completed (step S207). If not completed, the process returns to step S204, and the transfer processing of the equipment database to the next main computer is similarly performed. . As a result of the determination in step S207, when the transfer of the database to all the main computers is completed, the main computer is returned to the normal operation state and the operation is resumed (step S208), and the process is terminated.

  If the result of determination in step S202 is that writing to the storage facility database 34 of the maintenance computer 3 has failed, “abnormal” is set in the database state of the storage facility database in the facility database state table 35 (step S209), The process ends. If the result of the determination in step S205 is that the transfer of the equipment database to the main computer has failed, “abnormal” is set in the equipment database online table of the main computer in the equipment database status table 35 or the database status of the replica ( Step S210), the process ends.

  Thus, in this example, unlike the conventional case, when the updated equipment database is transferred to the main computer, it is arranged in the main memory of the main computer, and two sets of the online equipment database and the replica of the online equipment database are transferred. Process to do.

  Next, a configuration example of the equipment database state table 35 and a usage example of the equipment database state table 35 by each process will be described.

  FIG. 3 shows a configuration example of the equipment database state table 35. The equipment database status table includes a management code 351 for identifying the equipment database, a computer 352 in which the equipment database is arranged, a database type (online / replica / for storage) 353, and a database status (normal / abnormal). 354 and processing state 355. In the database state 354, a flag indicating whether the database is normal or abnormal is set. For example, the flag is normal = 0 and abnormal = 1. Further, as the database processing state 355, flags representing the operation state and maintenance state of the equipment database are set. For example, in operation = 0, waiting = 1, database switching = 2, restoring = It is represented by a status flag such as “3”, “stopping = 4”, “database updating = 5”

  In this example, the database is managed by registering the state in the equipment database state table 35 for each database arranged in the computer constituting the system. In the equipment database state table 35, the abnormality detection processing sections 12 and 22 of the main computer, the equipment database switching processing sections 13 and 23, the equipment database management processing section 32 of the maintenance computer, and the equipment database maintenance processing section 31 are provided. A status flag is registered according to the processing result. Further, the facility database state table 35 is referred to in order to confirm the state of each facility database when each process is executed.

  When detecting an abnormality in the equipment database, the abnormality detection processing units 12 and 22 register an “abnormal” flag in the database state 352 of the equipment database in which the abnormality has been detected. The equipment database switching processing units 13 and 23 perform processing to switch between the on-line equipment database and the replica in which an abnormality has been detected, and after switching, the database type 353 of the equipment database switched to online is changed from “replica” to “online”. Then, the database type 353 of the equipment database that has been detected and switched is changed from “online” to “replica”. Also, a processing state flag 355 is registered according to the processing state. For example, in FIG. 3, when an abnormality occurs in the database in which the management code 351 is DB2, that is, the on-line equipment database of the main computer A, after switching, DB2 is set to “replica” and DB3 is set to “online”. Also, during database switching, “database switching” is registered in the processing state 355 of DB2 and DB3, and after switching is completed, DB2 is set to “standby” and DB3 is set to “in operation”.

  The facility database management processing unit 32 receives the notification of the switching end of the facility database switching processing units 13 and 23, and the switched facility database, that is, the database type is “replica”, the database state is “abnormal”, and the processing state Transfers the maintenance computer storage facility database to the “standby” database and restores it. After restoration, change the database status to “normal”. Further, the facility database maintenance processing unit 31 registers “database update in progress” in the database processing state 355 of the storage database 34 when the maintenance computer 3 performs the facility database update process.

  In addition, when the process of referring to the online equipment database is performed from the monitoring control process, the equipment database state table 35 is referred to, and the database is referred to when the database state 352 is “normal” and the processing state 355 is “in operation”. When the database status 352 is other than “abnormal” or the processing status 355 is other than “in operation”, the database reference is disabled and the database is not referred to. The occurrence of abnormalities can be prevented. In addition, when the database cannot be referred to, the database switching is completed by referring to the reference again after waiting for a predetermined time, and the normal facility database can be referred to. Thus, by managing the database by the equipment database state table 35, it is possible to prevent the system from being stopped due to a database abnormality.

  Hereinafter, details of each of the above processes will be described. First, an overview of the monitoring process of the on-line equipment database that is performed during the operation of the main computer according to this example will be described.

  In this example, the equipment database is arranged in the main memory of the main computer, and the processing programs of the monitoring control processing units 11 and 21 execute processing while referring to the online equipment database on the main memory. At that time, if an error occurs in the equipment database, the program terminates abnormally, such as when an error occurs during execution of processing using the referenced equipment data due to a memory access error or destruction of data on the memory. As a result, a serious system failure such as a system stoppage occurs. Therefore, in this example, in order to prevent the occurrence of a system failure due to an abnormality of the equipment database, a monitoring process for constantly monitoring the equipment database is provided.

  FIG. 4 is a flowchart showing a processing example of the facility database monitoring processing according to this example. In this example, during the system operation, this equipment database is constantly monitored at regular intervals, and when an equipment database abnormality is detected, the online equipment database is switched and the equipment database in which an abnormality has occurred is restored. carry out.

  First, the abnormality detection processing of the online equipment database by the abnormality detection processing units 12 and 22 is executed to detect an abnormality in the online equipment databases 14 and 24 on the main memory (step S401). Next, as a result of the abnormality detection process, it is determined whether or not there is an abnormality in the online equipment databases 14 and 24 (step S402), and when it is determined that there is an abnormality, the relevant data in the equipment database state table 35 of the maintenance computer 3 “Abnormal” is set in the database state 354 of the equipment database (step S403). Next, upon receipt of an abnormality occurrence notification from the abnormality detection processing units 12 and 22, the facility database switching processing by the facility database switching processing units 13 and 23 is executed (step S404). In the equipment database switching process, the online equipment database referred to by the monitoring control processing sections 11 and 21 is switched from the online equipment database in which an abnormality has occurred to a replica of the online equipment database, and the equipment database management processing section 32 of the maintenance computer 3 is used. Notify the end of switching. Next, the facility database management processing unit 32 of the maintenance computer 3 that has received the notification transfers the storage facility database 34 to the facility database of the main computer in which an abnormality has occurred and restores it (step S405). After the restoration process is completed, “normal” is set in the database state of the equipment database in the equipment database state table 35 of the maintenance computer 3 (step S406), and it is determined whether the monitoring process is finished. The process returns to (Step S407). If there is an instruction to end the monitoring process, such as when the system is stopped, the process ends. As a result of the determination in step S402, if there is no abnormality in the online equipment database, a delay is performed for a certain time (step S408), and it is determined whether the monitoring process in step S407 is completed.

  Next, details of each process executed in the facility database monitoring process will be described. First, processing of the abnormality detection processing units 12 and 22 of the equipment database will be described.

  FIG. 5 is a flowchart showing a processing example of the abnormality detection processing units 12 and 22 according to this example. First, the top address of the main memory in which the on-line equipment databases 14 and 24 to be subjected to the abnormality detection process are registered is acquired (step S501). Next, the equipment data is obtained by referring to the online equipment database based on the obtained address (step S502). Here, the facility data acquisition method is, for example, by specifying an area corresponding to the data size of the facility from a specified address and acquiring the value from the main memory by memory access. Processing may be performed according to the database access method. Next, it is determined whether the data reference has been normally performed (step S503). If the determination result is normal, the database reference address is updated to the address of the next area (step S504). Next, it is determined whether the updated address is larger than the maximum address of the equipment database (step S505). If the updated address is larger than the maximum address of the equipment database, all the areas of the equipment database in the main memory are checked. For this reason, the processing is terminated with no abnormality in the equipment database (step S506). If the updated address is smaller than the maximum address of the equipment database, the process returns to step S502, and the processing from step S502 to step S505 is repeated until the address becomes larger than the maximum address of the equipment database.

  As a result of the determination in step S503, when a memory access error or an abnormality in the acquired data occurs when referring to the facility database, and the facility database cannot be referred to normally, it is determined that there is an abnormality in the facility database (step S507). The switching processing units 13 and 23 are notified of the occurrence of an abnormality in the equipment database (step S508), and the process is terminated.

  Next, processing of the facility database switching processing units 13 and 23 for receiving the notification of the occurrence of the abnormality from the abnormality detection processing units 12 and 22 and switching the online facility database to the replica will be described.

  FIG. 6 is a flowchart showing a processing example of the equipment database switching processing units 13 and 23 according to this example. First, “database switching in progress” is set in the processing state 355 of the online equipment database in which an abnormality has occurred in the equipment database state table 35 of the maintenance computer 3 (step S601). Next, the reference destination of the online equipment database is changed from the online equipment database in which an abnormality has occurred to a replica of the online equipment database (step S602). For example, in the process of referring to the online equipment database from the monitoring control process, define which equipment database on the main memory is the equipment database to be referenced, and refer to it when an abnormality occurs in the equipment database. The reference destination can be changed by changing the definition of the previous equipment database to the replica side. As a method of defining the facility database of the reference destination, there are a method of specifying the head address of the facility database, a method of defining a code for identifying the facility database, and the like.

  Next, the equipment database that was the replica before switching is changed to “online” and the equipment database in which the abnormality occurred online before switching is changed to “replica” in the database type 353 of the equipment database status table 35 of the maintenance computer (step). S603). Next, the processing state 355 of the equipment database set to “online” after switching is changed to “in operation”, and the processing state 355 of the equipment database set to “replica” after switching is changed to “stopped” (step S604). As a result, the equipment database that was the replica before switching as the equipment database reference destination becomes the database type 353 “online”, the processing state 355 becomes “in operation”, and the equipment database can be operated as the equipment database reference destination. Become. At this point in time, the facility database in which the abnormality that has become “replica” after the switching has occurred remains in the processing state 355 “stopped” and the database state 354 remains “abnormal”. Finally, the end of the database switching process is notified to the equipment database management processing unit 32 of the maintenance computer (step S605), and the process ends.

  Next, processing of the facility database management processing unit 32 of the maintenance computer 3 that receives the notification of the end of the database switching from the facility database switching processing units 13 and 23 and performs restoration processing of the facility database will be described.

  In FIG. 7, the flowchart showing the process example of the equipment database restoration process of the equipment database management process part 32 by this example is shown. First, with reference to the equipment database state table 35 of the maintenance computer 3, the state 354 of the storage equipment database 34 is acquired (step S701). The state of the acquired storage facility database 34 is determined, and if it is normal, the subsequent processing is performed, and if it is not normal, this processing is terminated (step S702). When the state of the storage facility database 34 is normal, first, an abnormality occurs, and “restoring” is set in the processing state 355 of the facility database state table 35 for the facility database to be restored (step S703). Next, the storage equipment database 34 of the maintenance computer 3 is transferred via the network to the computer where the restoration target equipment database is located (step S704). After the transfer of the equipment database is completed, the processing state 355 of the equipment database to be restored is changed to “standby” (step S705), and the process is terminated.

  In this example, when the state of the storage facility database 34 of the maintenance computer 3 is normal, the facility database in which an abnormality has occurred is restored. However, the case where the storage facility database 34 is abnormal is also performed. The restoration processing can also be performed by using a replica of the online equipment database of another healthy main computer as a restoration source and transferring the database from the healthy main computer side to the equipment database of the main computer in which an abnormality has occurred.

  Further, in the maintenance computer 3, when the facility database is updated, the maintenance computer 3 is used for writing the updated database from the update facility database 33 to the storage facility database 34. In that case, since the equipment database is rewritten, it cannot be used for system operation in the middle of rewriting. Therefore, during the update operation of the equipment database, the processing state 355 of the equipment database state table 35 of the storage equipment database is set to “updating database”, and when the processing state is “updating database”, the equipment database restoration process is performed. In FIG. 5, it is possible to perform processing so as not to perform restoration. In this case as well, the restoration can be performed using a replica of the online equipment database of another healthy main computer.

  In this way, in this example, by arranging the online equipment database and the replica of the online equipment database in the main memory of the main computer and providing the processing for detecting the occurrence of the abnormality in the online equipment database, Abnormalities can be detected and dealt with before the system is shut down. Therefore, it is possible to prevent the system from being stopped due to the equipment database abnormality and to realize the stable operation of the system. Furthermore, even in the restoration process of the equipment database in which an abnormality has occurred, the restoration process can be executed while the system is in operation without stopping the system.

It is a block diagram which shows the system configuration example by one embodiment of this invention. It is a flowchart which shows the equipment database maintenance process example by one embodiment of this invention. It is explanatory drawing which shows the structural example of the equipment database state table by one embodiment of this invention. It is a flowchart which shows the monitoring process example of the equipment database by one embodiment of this invention. It is a flowchart which shows the example of an abnormality detection process by one embodiment of this invention. It is a flowchart which shows the example of an equipment database switching process by one embodiment of this invention. It is a flowchart which shows the example of an equipment database restoration process by one embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Main computer A, 2 ... Main computer B, 3 ... Maintenance computer, 11, 21 ... Monitoring control processing part, 12, 22 ... Abnormality detection processing part, 13, 23 ... Equipment database switching processing part, 14, 24 ... Online Equipment database, 15, 25 ... replica of online equipment database, 31 ... equipment database maintenance processing section, 32 ... equipment database management processing section, 33 ... update equipment database, 34 ... storage equipment database, 35 ... equipment database status table

Claims (3)

Multiple main computers with supervisory control processing functions;
In a distributed monitoring control system configured from a maintenance computer having a database maintenance function for generating a facility database to be referred to when executing the monitoring control process,
The maintenance computer is
An equipment database maintenance processing unit for generating an equipment database and storing the generated equipment database in a storage equipment database;
Transferring the storage equipment database to the main memory of the main computer, comprising an equipment database management processing unit arranged as a replica of the online equipment database and the online equipment database,
The main computer is
A monitoring and control processing unit for monitoring and controlling equipment;
An abnormality detection processing unit that detects an abnormality in the online equipment database;
A distributed monitoring control system comprising an equipment database switching processing section for switching the online equipment database to a replica when an abnormality is detected by the abnormality detection processing section. The distributed monitoring control system according to claim 1,
The maintenance computer includes a facility database state table for registering a state of a facility database provided in the main computer and the maintenance computer,
Register the processing state by the equipment database management processing unit of the maintenance computer and the state of the equipment database determined by the abnormality detection processing unit of the main computer in the equipment database state table,
When an abnormality is detected in the equipment database by the abnormality detection processing section of the main computer, the equipment database management processing section of the maintenance computer is switched to the replica of the online equipment database by the equipment database switching processing section. A distributed monitoring control system, wherein the facility database is restored by writing the storage facility database into the online facility database of the main computer in which an abnormality is detected based on the state table. The distributed monitoring control system according to claim 2,
When an abnormality is detected in the maintenance facility database of the maintenance computer when the abnormality is detected in the maintenance facility database of the maintenance computer, the online storage arranged in the main memory of the healthy main computer among the plurality of maintenance computers A distributed monitoring control system, wherein a facility database is restored by writing a replica of the facility database into an on-line facility database of a main computer in which an abnormality is detected.

Images