JP2011145861A - Disaster time automatic switching system and method for processing the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an disaster time automatic switching system for, even when a natural disaster occurs, quickly restoring a failure due to the damage. <P>SOLUTION: The disaster time automatic switching system determines whether natural disaster intensity included in a natural disaster news flash is equal to or more than fixed intensity, and to, when the natural disaster intensity is equal to or more than the fixed intensity, transmit natural disaster occurrence notification to a backup designation system, and to, after transmitting the natural disaster occurrence notification, determine the presence/absence of the failure occurrence of its own system, and to, when determining that the failure occurrence is present, determine the failure occurrence factor, and to specify a corresponding mail transmission destination corresponding to the failure occurrence factor based on the determined failure occurrence factor, and to transmit corresponding mail requesting the facilitation of countermeasures to the determined failure occurrence factor to the corresponding mail transmission destination. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a disaster automatic switching system that switches processing to a backup system based on an emergency earthquake bulletin transmitted by the Japan Meteorological Agency and a processing method therefor.

After detecting that a natural disaster such as an earthquake has occurred, switching the processing from the main system that normally performs operations to the backup system that performs operations when the main system fails, or the location of the main system A technique for manually or automatically performing such changes has been proposed.
As a technology related to this, there is a technology for starting a backup process based on reception of an earthquake early warning.

JP 2009-115625 A

  By the way, in the system technology as described above, even if a backup system was prepared before the occurrence of a natural disaster, it was confirmed that a failure occurred or the system stopped in the main system, Since switching is performed, there is a possibility that a certain stop time occurs in the service provided by the main system or the backup system.

Further, in the system technology as described above, even if automatic switching of the system that performs the operation process is performed from the main system to the backup system, the switching is started after the disaster occurs. It is assumed that switching cannot be performed due to a network failure caused by the failure of a device that constitutes the system, or the like.
Furthermore, after the occurrence of a natural disaster such as an earthquake disaster, it is necessary to manually investigate the status of the entire system, check the operation, and request repairs in the affected areas, and it is assumed that it takes a long time to restore the system.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide an automatic switching system at the time of a disaster and a method for processing the same that can quickly recover from a failure caused by a natural disaster such as an earthquake. .

  In order to achieve the above object, the present invention provides a natural disaster early warning receiving unit for receiving natural disaster early warning information, and a natural disaster intensity determination for determining whether or not a natural disaster intensity included in the natural disaster early warning is equal to or greater than a certain intensity. A natural disaster occurrence notification transmission unit that transmits a natural disaster occurrence notification to a backup destination system when the natural disaster intensity is equal to or greater than a certain intensity, and a failure of the own system occurs after the natural disaster occurrence notification is transmitted. A failure occurrence presence / absence determination unit that determines the presence / absence of failure, a failure occurrence cause determination unit that determines a cause of failure when it is determined that the failure has occurred, and the failure based on the determined failure occurrence cause A mail transmission unit that identifies a corresponding mail transmission destination according to the cause of occurrence and transmits a corresponding mail requesting the corresponding mail transmission destination to respond to the determined cause of the failure A disaster automatic switching system comprising: a.

  Further, the present invention is the above-described automatic switching system at the time of disaster, wherein the mail transmitting unit is directed to an administrator terminal when the natural disaster intensity is less than a certain intensity or when it is determined that the failure has not occurred. It is characterized by automatically transmitting a normal operation mail indicating no abnormality.

  Further, the present invention provides the above-described automatic switching system at the time of disaster, in which the power supply source switching is performed to switch the power supply source from the normal power source used at the normal time to the uninterruptible power source when the natural disaster intensity is a certain level or more. And a section.

  Further, the present invention is characterized in that, in the above-described automatic switching system at the time of a disaster, the failure occurrence cause determination unit specifies a failure occurrence location when it is determined that the failure has occurred.

  The present invention also provides a communication connection determination unit that determines whether communication connection can be established with the backup destination system via a normal use network in the disaster automatic switching system described above, and a natural disaster from the backup destination system. A natural disaster occurrence notification receiving unit that determines whether or not a natural disaster occurrence notification is received via the use network at the time of occurrence, a communication connection via the normal use network with the backup destination system is determined, and the backup A normal use network failure occurrence determination unit for determining the occurrence of a failure in the normal use network when it is determined that a natural disaster occurrence notification has not been received from the previous system via the use network during a natural disaster occurrence; It is characterized by providing.

  The present invention also relates to a processing method in a disaster automatic switching system, wherein a natural disaster early warning receiving unit receives natural disaster early warning information, and a natural disaster intensity determining unit has a constant natural disaster intensity included in the natural disaster early warning. When the natural disaster occurrence notification transmitting unit determines that the natural disaster intensity is equal to or greater than a certain level, the natural disaster occurrence notification is transmitted to the backup destination system, and the failure occurrence existence determining unit After the occurrence notification is transmitted, it is determined whether or not a failure has occurred in the own system, and when the failure occurrence cause determination unit determines that the failure has occurred, the failure occurrence cause is determined, and the mail transmission unit determines the determination Based on the cause of the failure, the correspondence mail transmission destination corresponding to the cause of the failure is specified, and the correspondence mail transmission destination is requested to respond to the determined cause of the failure. A processing method characterized by sending a response mail.

According to the present invention, when an earthquake of a certain seismic intensity or more occurs, it is possible to switch from the main site to the backup site before the occurrence of the earthquake by receiving an emergency earthquake bulletin. When this occurs, system switching and operation location changes can be performed automatically.
In addition, according to the above processing, after an earthquake occurs, a series of operations such as e-mail notification to the main site administrator, contact to the repair department, and confirmation of the operating status of each device in the system are automated. It is possible to reduce the labor required to restore the data, thereby increasing the possibility of shortening the time until restoration.

It is a block diagram which shows the structure of the automatic switching system at the time of a disaster by 1st Embodiment. It is a functional block diagram of a failure management device. It is a functional block diagram of an earthquake early warning receiver. It is a figure which shows the processing flow of the automatic switching system at the time of a disaster by 1st Embodiment. It is a block diagram which shows the structure of the automatic switching system at the time of a disaster by 2nd Embodiment. It is a figure which shows the processing flow of the automatic switching system at the time of a disaster by 2nd Embodiment.

The disaster automatic switching system according to the first embodiment will be described below with reference to the drawings.
FIG. 1 is a block diagram showing the configuration of a disaster automatic switching system according to the first embodiment.
In this figure, reference numeral 1 denotes a main system that performs operation processing during normal operation. The main system 1 includes a failure management device 10 that manages failures in each device in the main system 1 and a communication network, an earthquake early warning reception device 20 that receives an earthquake early warning, and power supply from a commercial power supply is stopped. In-house power generator 30 that generates electricity using kerosene or the like as fuel and supplies power to the main system, and temporarily supplies power to the system in the event of a momentary interruption of the commercial power supply or a momentary power outage when switching from commercial power supply to private power generation A power failure power supply 40 is provided. The failure management device 10, the earthquake early warning reception device 20, the private power generation device 30, and the uninterruptible power supply 40 are connected via a control network 50, respectively.

FIG. 2 is a functional block diagram of the failure management apparatus.
FIG. 3 is a functional block diagram of the earthquake early warning receiving device.
In the failure management apparatus 10 shown in FIG. 2, reference numeral 101 denotes a natural disaster intensity determination unit that determines whether the seismic intensity level (natural disaster intensity) included in the emergency earthquake early warning (natural disaster early warning) is a certain level or higher. Reference numeral 102 denotes a natural disaster occurrence notification transmission unit that transmits a natural disaster occurrence notification to the backup destination system 2 when the seismic intensity level is a certain level or higher. Reference numeral 103 denotes a failure occurrence / non-occurrence determination unit that determines whether or not a failure has occurred in the own system after transmission of a natural disaster occurrence notification. Reference numeral 104 denotes a failure cause determination unit that determines the cause of a failure when it is determined that a failure has occurred. Reference numeral 105 denotes a power supply source switching unit that switches the power supply source from the normal power source used during normal operation to the uninterruptible power supply 40 when the seismic intensity level is a certain level or higher. Reference numeral 106 denotes a communication connection determination unit that determines whether a communication connection can be established with the backup destination system 2 via a normal use network (such as the Internet). Reference numeral 107 denotes a natural disaster occurrence notification receiving unit that determines whether or not a natural disaster occurrence notification is received from a backup destination system via a natural disaster occurrence use network (satellite line or the like). Reference numeral 108 denotes a mail transmission unit that identifies a corresponding mail transmission destination corresponding to the cause of the failure and transmits a corresponding mail requesting the corresponding mail transmission destination to take a countermeasure for the cause of the failure. Reference numeral 109 denotes a state confirmation unit that confirms the state of the private power generator 30 or the uninterruptible power supply 40. Reference numeral 110 denotes an integrated management unit that performs integrated management with other systems.
Further, in the earthquake early warning receiving apparatus 20 shown in FIG. 3, reference numeral 201 denotes a natural disaster early warning receiving unit that receives emergency earthquake early warning information from a server that transmits an emergency earthquake early warning. Reference numeral 202 denotes a natural disaster bulletin notification unit for notifying the failure management apparatus 10 of information on emergency earthquake bulletins.

And in the automatic switching system at the time of a disaster by this embodiment, the earthquake early warning receiver 20 receives the earthquake early warning, and the fault management apparatus 10 determines whether the seismic intensity level included in the earthquake early warning is a certain level or higher. When it is determined that the level is above a certain level, a natural disaster occurrence notification is transmitted to the backup destination system. Then, the failure management apparatus 10 determines whether or not a failure has occurred in its own system after transmission of the notification of occurrence of a natural disaster. If it is determined that a failure has occurred, the failure management device 10 determines the cause of the failure and determines the cause of the failure as determined. Based on this, a corresponding mail transmission destination corresponding to the cause of the failure is identified, and a corresponding mail is sent to the corresponding mail transmission destination for requesting a response to the determined cause of the failure.
By such processing, the automatic switching system at the time of a disaster provides a function capable of quickly recovering from a failure caused by a natural disaster such as an earthquake.

FIG. 4 is a diagram showing a processing flow of the disaster automatic switching system according to the first embodiment.
Next, the processing flow of the above-described disaster automatic switching system will be described in order with reference to FIG.
First, in the earthquake early warning receiver 20 of the main system 1, the natural disaster bulletin receiving unit 201 receives the emergency earthquake bulletin (step S401). Then, the natural disaster bulletin notification unit 202 of the emergency earthquake bulletin receiving device 20 transfers the emergency earthquake bulletin to the failure management apparatus 10.
Next, when the failure management device 10 receives the emergency earthquake bulletin from the emergency earthquake bulletin receiving device 20, the natural disaster intensity determination unit 101 extracts the seismic intensity level stored in the emergency earthquake bulletin information. Then, the natural disaster intensity determination unit 101 compares the seismic intensity level threshold recorded in the storage unit or the like in the failure management apparatus 10 with the seismic intensity level extracted from the emergency earthquake warning (step S402), and the extraction is performed. Determine whether the seismic intensity level is greater than the seismic intensity level threshold. The value of the seismic intensity level threshold can be changed by the administrator registering in the failure management apparatus 10. If the seismic intensity level extracted from the earthquake early warning is not equal to or greater than the threshold value, the mail transmission unit 108 is instructed to transmit a normal operation mail indicating no abnormality to the administrator terminal without any system failure. Then, the mail transmission unit 108 reads the mail address addressed to the administrator terminal from the storage unit, and transmits the normal operation mail addressed to the mail address (step S403).

  On the other hand, if the seismic intensity level extracted from the earthquake early warning is equal to or higher than the threshold in the comparison in step S402, the natural disaster occurrence notification transmission unit 102 transmits a natural disaster occurrence notification to the backup destination system 2 (step S402). S404). As a result, the operation processing is switched from the main system 1 to the backup destination system 2 that received the natural disaster occurrence notification. At this time, the power supply source switching unit 105 of the main system 1 performs control such as switching the connection switch and the like with the private power generator 30 from OFF to ON, and the private power generator 30 from the general commercial power supply that is normally used. Switch the power supply source to. Further, the failure management apparatus 10 of the main system 1 stops the operation process (for example, functions as a web server) in order to stop the normal operation process of the main system 1. On the other hand, when the natural disaster occurrence notification is received, the backup destination system 2 starts the operation processing program and operates instead of the main system 1.

  In the failure management apparatus 10, when a natural disaster occurrence notification is transmitted, the failure occurrence presence / absence determination unit 103 determines whether or not a failure has occurred in the own system (step S405). In this determination, for example, the communication connection determination unit 106 transmits a response request signal to the emergency earthquake warning receiver 20, the private power generator 30, and the uninterruptible power supply 40 that belong to the main system 1, and as a result, the response signal is transmitted from all devices. Is returned, the failure occurrence presence / absence determination unit 103 determines that no failure has occurred, and determines that a failure has occurred if there is a device that does not return a response signal. If it is determined in step S405 that no failure has occurred (No), the process proceeds to step S403, and a normal operation mail is transmitted to the administrator terminal. If it is determined that a failure has occurred (Yes), the operation differs depending on the failure location, so the failure occurrence cause determination unit 104 determines which device has a failure (step S406). In this determination, an abnormality of a power source such as a commercial power supply device, a private power generation device or an uninterruptible power supply device, a communication network error, or a hardware error of each device in the main system 1 is detected. Determine.

  For example, the failure cause determination unit 104 transmits a power supply abnormality determination signal to each device in the main system 1, and as a result, a power supply normal operation signal is transmitted from all the devices. In this case, it is determined that there is no abnormality in the power supplies of each device. Here, when a power failure signal is received from any of the devices, the mail transmission unit 108 generates a power failure response mail that includes a text indicating the power failure and information on the device that has transmitted the power failure. (Step S407), the mail address addressed to the manager of the device that sent the power failure and the mail address addressed to the repair person are read from the storage unit, etc., and the determined cause of failure occurrence is addressed to the mail address. A power failure response mail requesting to be sent is transmitted (step S408). When the failure management device 10 detects that the power failure of the device determined by the failure cause determination unit 104 to be abnormal in the power supply has recovered (for example, the power failure determination signal is generated a plurality of times at predetermined intervals). As a result, when a power supply normal operation signal is transmitted from a device that has been determined to have an abnormality in the past, it is determined that the power supply abnormality has been recovered in the device). An error recovery mail indicating that the system has returned to normal is generated and transmitted to the mail address addressed to the administrator (step S409).

  If the communication network is abnormal, a device that has not transmitted a response signal corresponding to the response request signal transmitted in the process of step S405 is detected, and a sentence indicating a communication network abnormality and a response signal are not transmitted. A communication network abnormality response mail describing the device information is generated (step S410), and the mail address addressed to the manager of the device that has not transmitted the response signal and the mail address addressed to the person in charge of repair are stored in the storage unit or the like. The communication network abnormality response mail requesting that the determined cause of the failure be dealt with is transmitted to the mail addresses (step S411). When the failure management apparatus 10 detects that the abnormality of the communication network determined by the failure cause determination unit 104 is recovered (for example, a response request signal is transmitted a plurality of times at predetermined intervals. As a result, when a response signal is received from a device that has not transmitted a response signal corresponding to the response request signal in the past, it is determined that the communication network abnormality has been recovered in the device). An error recovery mail indicating that the system has returned to normal is generated and transmitted to the mail address addressed to the administrator (step S412).

  If the hardware is abnormal, the failure cause determination unit 104 transmits a hardware abnormality determination signal to each device in the main system 1. As a result, the hardware normal operation signal is transmitted from all the devices. Is transmitted, it is determined that there is no abnormality in the hardware of each device. Here, when a hardware abnormality signal is received from any device, the hardware abnormality signal is analyzed, and when the analysis is completed, text indicating the hardware abnormality, information on the device that transmitted the hardware abnormality Then, a hardware abnormality correspondence mail describing the analysis contents of the abnormality signal is generated (step S413), and the mail address addressed to the administrator of the apparatus that transmitted the hardware abnormality and the mail address addressed to the repair person are stored. The hardware abnormality response mail requesting that the cause of the determined failure occurrence is dealt with is transmitted to the mail address (step S414). When the failure management apparatus 10 detects that the hardware abnormality of the apparatus that the failure cause determination unit 104 has determined that there is an abnormality in the hardware has been recovered (for example, a hardware abnormality determination signal is transmitted a plurality of times at a predetermined interval). When a hardware normal operation signal is transmitted from a device that has been determined to have an abnormality in the past as a result, it is determined that the hardware abnormality has been recovered in the device). An error recovery mail indicating that the supply of the wear has returned to normal is generated and transmitted to the mail address addressed to the administrator (step S415).

  If the hardware abnormality signal cannot be analyzed in the process of step S413, a hardware abnormality correspondence mail describing a sentence indicating the hardware abnormality and information on the device that has transmitted the hardware abnormality to a predetermined mail transmission destination. Is read from the storage unit or the like, and a hardware abnormality response mail requesting that the determined cause of failure be addressed is transmitted to the mail address. As a result, the administrator manually isolates the hardware abnormality and repairs it. Then, after the above-mentioned correspondence mails are transmitted, when the failure is recovered, the administrator performs a switching operation from the backup destination system 2 to the main system 1.

FIG. 5 is a block diagram showing the configuration of a disaster automatic switching system according to the second embodiment.
The disaster automatic switching system shown in FIG. 5 is an example when the backup system 2 of the disaster automatic switching system shown in FIG. 1 has the same configuration as the main system 1. In the present embodiment, the two main systems 1 are referred to as a site A and a site B. As shown in FIG. 5, the site B includes a failure management device 70, an earthquake early warning reception device 80, a private power generation device 90, and an uninterruptible power supply device 100, and these devices are connected via a control network 110. Yes. The functional configurations of the failure management device 70 and the earthquake early warning reception device 80 are the same as those shown in FIGS. Further, as shown in FIG. 5, the site A and the site B are connected by communication via the Internet 60, and further connected by a satellite line 120 used when a failure occurs. The site A and the site B operate the same application, and at the initial stage, the site A is operating as a main system, and the site B is waiting as a backup system. And site B exists in the remote place of site A, and emergency earthquake bulletin receiver 20 of site A and emergency earthquake bulletin receiver 80 of site B receive earthquake bulletins generated in different areas, respectively. Shall.

FIG. 6 is a diagram showing a processing flow of the disaster automatic switching system according to the second embodiment.
Next, the processing flow of the disaster automatic switching system according to the second embodiment will be described with reference to FIGS.
In the disaster automatic switching system according to the second embodiment, when the earthquake early warning receiving device 20 at the site A receives the earthquake early warning, the operation at the site A is changed to the operation at the site B by the same processing as in the first embodiment. Can be switched automatically. Similarly, when the site B is operating as the main system and the earthquake early warning receiving device 80 receives the earthquake early warning, the operation at the site B is automatically switched to the site A operation.
Here, the failure management device 10 at the site A and the failure management device 70 at the site B constantly exchange setting information and the like via the integrated management unit 110 and are synchronized so as to have the latest information on each other's site. It is assumed that even if a failure occurs in one of the failure management devices, all devices at other sites including the local site can be managed.

  During normal operation, the integrated management unit 110 transmits a response request signal to other sites via the Internet 60 at each of the sites A and B, and from the other sites via the Internet 60. It is determined whether a response signal corresponding to the response request signal has been received (step S601). If received, a response request signal is transmitted at predetermined intervals. If a response request corresponding to the response request signal cannot be received, it is next determined whether the natural disaster occurrence notification receiving unit 107 has received a natural disaster occurrence notification from another site via the satellite line 120 ( Step S602). When the natural disaster occurrence notification receiving unit 107 determines that a natural disaster occurrence notification has been received from another site via the satellite line 120, the natural disaster occurrence notification reception unit 107 determines that an earthquake may occur in the area where the other site is located. (Step S603), it is determined whether or not an abnormality has occurred in each device at its own site in the same manner as Step S405 in the first embodiment (Step S604). If it is determined in step S604 that there is an abnormality in the own site, the processing after step S406 described above is performed.

  If it is determined in step S602 that a natural disaster occurrence notification has not been received via the satellite line 120, an abnormality is confirmed in the communication network of the Internet 60 normally used with other sites (step S602). S605). If it is determined that the communication network is abnormal, a communication network abnormality response mail indicating the communication network abnormality is transmitted to the administrator terminal as in step S411 (step S606). If it is determined that there is no abnormality in the communication network, it is determined that a failure may have occurred in the failure management apparatus at another site (step S607). If there is no abnormality in each device at the own site in step S604, the failure management device 10 that has detected that communication via the Internet 60 has been interrupted is the administrator of the site A and the administrator of the site B. An incommunicable mail is transmitted to both sides (step S608). Thereby, the managers of each other communicate with each other and investigate the cause of the failure.

As described above, the automatic switching system at the time of disaster has been explained. According to the above-mentioned processing, when an earthquake of a certain seismic intensity or more occurs, the emergency site is received to switch from the main site to the backup site before the earthquake occurs. As a result, when a disaster such as an earthquake occurs, the system can be switched or the operation location can be automatically changed.
In addition, according to the above processing, after an earthquake occurs, a series of operations such as e-mail notification to the main site administrator, contact to the repair department, and confirmation of the operating status of each device in the system are automated. It is possible to reduce the labor required to restore the data, thereby increasing the possibility of shortening the time until restoration.
The above-described automatic switching system at the time of a disaster can be integrated and managed at one place when a company operating a plurality of data centers and a backup site is constructed in a remote place. It is also possible to respond to disasters other than earthquakes by linking with various alarm devices such as fire detection devices, smoke detection devices, tsunami warnings, flood warnings, and trespassing alarms.

  Each of the above devices has a computer system inside. Each process described above is stored in a computer-readable recording medium in the form of a program, and the above process is performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... Main system 2 ... Backup system 10 ... Fault management device 20 ... Earthquake early warning receiver 30 ... Private power generation device 40 ... Uninterruptible power supply device 50 ... Control network 60 ···the Internet

Claims (6)

A natural disaster bulletin receiving unit for receiving natural disaster bulletin information;
A natural disaster intensity determination unit for determining whether the natural disaster intensity included in the natural disaster bulletin is equal to or greater than a certain intensity;
When the natural disaster intensity is equal to or higher than a certain intensity, a natural disaster occurrence notification transmission unit that transmits a natural disaster occurrence notification to a backup destination system;
After the transmission of the natural disaster occurrence notification, a failure occurrence presence / absence determination unit that determines whether or not a failure has occurred in the own system;
When it is determined that the failure has occurred, a failure cause determination unit that determines the cause of the failure;
Based on the determined cause of the failure, the correspondence mail transmission destination corresponding to the cause of the failure is identified, and the corresponding mail is transmitted to the corresponding mail transmission destination for requesting the response to the determined cause of the failure. An email sender to
A disaster automatic switching system characterized by comprising: The mail sending unit
The normal operation mail indicating no abnormality is automatically transmitted to an administrator terminal when the natural disaster intensity is less than a certain intensity or when it is determined that the failure has not occurred. Automatic switching system at the time of disaster described. When the natural disaster intensity is equal to or greater than a certain intensity, a power supply source switching unit that switches a power supply source from a normal power source used during normal time to an uninterruptible power source, and
The disaster automatic switching system according to claim 1 or 2, further comprising: The disaster automatic switching system according to any one of claims 1 to 3, wherein the failure cause determination unit specifies a failure occurrence location when it is determined that the failure has occurred. A communication connection determination unit that determines whether communication connection can be established with the backup destination system via a normal use network;
A natural disaster occurrence notification receiving unit that determines whether or not a natural disaster occurrence notification is received from the backup destination system via a natural disaster occurrence use network, and
The failure cause determination unit
It is determined that communication connection with the backup destination system via the normal use network is not possible, and it is determined that no natural disaster occurrence notification is received from the backup destination system via the natural disaster occurrence use network. In this case, the occurrence of a failure in the normal use network is determined. The automatic switching system during disaster according to any one of claims 1 to 4. A processing method in a disaster automatic switching system,
The natural disaster bulletin receiving unit receives the natural disaster bulletin information,
The natural disaster intensity determination unit determines whether the natural disaster intensity included in the natural disaster bulletin is equal to or greater than a certain intensity,
When the natural disaster occurrence notification transmitting unit has the natural disaster intensity equal to or greater than a certain intensity, the natural disaster occurrence notification is transmitted to the backup destination system,
After the transmission of the natural disaster occurrence notification, the failure occurrence presence / absence determination unit determines whether or not a failure has occurred in the own system,
If the failure cause determination unit determines that the failure has occurred, determine the cause of the failure,
Based on the determined cause of failure, the mail transmission unit identifies a corresponding mail transmission destination corresponding to the cause of the failure, and requests the corresponding mail transmission destination to respond to the determined cause of the failure. A processing method characterized by sending correspondence mail.

Images