JP2011253242A - Duplexing system, active device, standby device and method for updating data - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a duplexing system capable of preventing an increase in size of the device while securing redundancy.SOLUTION: A duplexing system comprises an active device and a standby device, and duplexed data is updated between the active device and the standby device. The active device includes an active side storage part storing one of the data from the duplexed data, an active side update part updating one of the data, and a write part writing one of data update locations and one of data updated values at the update location to the standby device. The standby device includes an standby side storage part storing one of the other data of the duplexed data, an update information storage part storing an update location associated with an update value written by the active device. Further, the standby device includes a standby side update part updating the other data value at the location corresponding to the update location by the update value associated with the update location.

Description

  The present invention relates to a duplex system, an active device, a standby device, and a data update method.

  Cold standby (cold standby) that guarantees system redundancy by operating one of the duplicated MCUs (Micro Controller Units) as the active device and the other as a standby device, and making the standby device active as necessary ) Is known. When this cold standby is adopted, the standby device is made active by using the same data as the active device when a failure occurs in the active device. Therefore, every time the data held in the active device is updated, the active device writes the updated data to the standby device.

  A method for updating such data will be described. FIG. 9 is a diagram for explaining a conventional data update method (part 1). In the data update method shown in FIG. 9, when a hardware setting change or the like is performed, the CPU (Central Processing Unit) of the active device updates the setting information (Provisioning information) held in the DB (Database) in the own device. (Refer to (1) in FIG. 9). Then, the CPU of the active device performs inter-device communication and writes the updated setting information to the DB in the standby device (see (2) in FIG. 9). Thereby, the setting information in the standby device is updated.

  Here, in the data update method described with reference to FIG. 9, if a failure occurs in the active device when writing to the DB in the standby device has not yet been completed, the setting information held in the DB in the standby device is stored. Destroyed. When the setting information is destroyed, the standby device is prevented from being activated, and the redundancy of the system is lost.

  As a technique for avoiding such a situation, a data update technique that improves the security of setting information is known. FIG. 10 is a diagram for explaining a conventional data update method (part 2). In the example shown in FIG. 10, two DBs, a main DB and a sub DB, are provided on the standby device side. In the data update method shown in FIG. 10, when a hardware setting change or the like is performed, the CPU of the active device updates the setting information held in the DB in the own device (see (1) in FIG. 10). Then, the CPU of the active device performs inter-device communication and writes the updated setting information to the main DB in the standby device (see (2) in FIG. 10). When the writing to the main DB is completed, the CPU of the active device executes inter-device communication and copies the setting information written to the main DB to the sub-DB in the standby device (see (3) in FIG. 10). Thereafter, each time the CPU of the active device updates the setting information held in the DB in the own device, it executes a write process to the main DB and a copy process from the main DB to the sub DB. As a result, even if the setting information held in the main DB or sub DB is destroyed due to the failure of the active device, the standby device can be activated using the setting information held in the sub DB or main DB. it can.

JP-A-8-212289

  However, in the conventional method of updating data using the above two DBs, while it is possible to increase the safety of the setting information and ensure system redundancy, there is a storage area for accommodating the two DBs. There is a problem that the size of the entire apparatus increases.

  The disclosed technology has been made in view of the above, and an object thereof is to provide a duplex system, an active device, a standby device, and a data update method capable of suppressing the increase in size of the device while ensuring redundancy. And

  The duplex system disclosed in the present application is a duplex system having an active device and a standby device. The working device has a working side storage unit for holding one of the duplicated data, a working side updating unit for updating the one data, an update position of the one data, and the one at the update position And a writing unit for writing the updated value of the data to the standby device. The standby device includes a standby storage unit that holds the other data of the duplicated data, and an update information storage unit that holds the update position and update value written from the active device in association with each other. . Furthermore, the standby device includes a standby-side update unit that updates the value of the other data at a position corresponding to the update position with the update value associated with the update position.

  According to one aspect of the duplex system disclosed in the present application, it is possible to suppress the increase in size of the apparatus while ensuring redundancy.

FIG. 1 is a block diagram illustrating the configuration of each device included in the duplex system according to the first embodiment. FIG. 2 is a diagram for explaining the data update method according to the second embodiment. FIG. 3 is a diagram illustrating the system configuration of the duplex system according to the second embodiment. FIG. 4 is a block diagram illustrating configurations of the active MCU and the standby MCU according to the second embodiment. FIG. 5 is a diagram illustrating an example of information held in the update information buffer. FIG. 6 is a flowchart illustrating a processing procedure performed by the active MCU according to the second embodiment. FIG. 7 is a flowchart illustrating a processing procedure performed by the standby MCU according to the second embodiment. FIG. 8 is a diagram illustrating an update mode of the update information buffer. FIG. 9 is a diagram for explaining a conventional data update method (part 1). FIG. 10 is a diagram for explaining a conventional data update method (part 2).

  Hereinafter, embodiments of a duplex system, an active device, a standby device, and a data update method disclosed in the present application will be described in detail with reference to the drawings. Note that this embodiment does not limit the disclosed technology.

  FIG. 1 is a block diagram illustrating the configuration of each device included in the duplex system according to the first embodiment. In the duplex system 1 shown in FIG. 1, the active device 3 and the standby device 5 are duplexed, and the duplexed data between the active device 3 and the standby device 5 is updated.

  The working device 3 includes a working storage unit 3a, a working updating unit 3b, and a writing unit 3c. The active storage unit 3a holds one of the duplicated data. The working side update unit 3b updates the data held in the working side storage unit 3a. The writing unit 3 c writes the update position of the data updated by the active side update unit 3 b and the update value of the data at the update position to the standby device 5.

  The standby device 5 includes a standby side storage unit 5a, an update information storage unit 5b, and a standby side update unit 5c. The standby storage unit 5a holds the other data of the duplicated data. The update information storage unit 5b holds the update position and the update value written from the active device 3 in association with each other. The standby side update unit 5c reads the update position and the update value held in the update information storage unit 5b, and sets the value of the other data in the standby side storage unit 5a at the position corresponding to the read update position to the update position. Update with the update value associated with.

  Thus, in the duplex system 1 according to the present embodiment, the active device 3 writes only the update position and update value of the updated data to the update information storage unit 5b of the standby device 5, and the written update position and update value. The standby device 5 updates the data held by itself using the. For this reason, in the duplex system 1 according to the present embodiment, it becomes unnecessary for the active device 3 to directly write the updated data to the standby side storage unit 5a of the standby device 5 and the data held by the standby device 5 is destroyed. This can be avoided and the redundancy can be ensured. Further, in the duplex system 1 according to the present embodiment, the size of the update information storage unit 5b that holds only the update position and the update value can be reduced as compared with the standby side storage unit 5a. The entire apparatus can be made smaller than the configuration in which two storage units are provided. That is, according to the duplex system 1 according to the present embodiment, it is possible to suppress increase in size of the apparatus while ensuring redundancy.

  Subsequently, a duplex system according to the second embodiment will be described. First, a data update method by the duplex system according to the second embodiment will be briefly described. FIG. 2 is a diagram for explaining a data update method by the duplex system according to the second embodiment.

  As shown in FIG. 2, in the duplex system according to the present embodiment, when a hardware setting change or the like is performed, the CPU of the active device updates the setting information held in the setting information DB in the own device (FIG. 2). 2 (see (1)). Then, the CPU of the active device executes inter-device communication, and writes the updated position of the updated setting information and the updated value of the setting information at the updated position to the standby device (see (2) in FIG. 2). On the other hand, the CPU of the standby device periodically refers to the update information buffer that holds the update position and the update value written from the active device in association with each other. Then, the CPU of the standby device reads the update position and the update value from the update information buffer, and updates the value of the setting information in the setting information DB at the position corresponding to the update position with the update value associated with the update position. (Refer to (3) in FIG. 2).

  Thus, in the data update method according to the present embodiment, the active device writes only the update position and update value of the updated setting information to the update information buffer of the standby device, and uses the written update position and update value. The standby device updates the setting information held by itself.

  Next, the system configuration of the duplex system according to the second embodiment will be described. FIG. 3 is a diagram illustrating the system configuration of the duplex system according to the second embodiment. As shown in FIG. 3, the duplex system 10 is mounted on a transmission device 100 for optical communication, and includes an active MCU (Micro Controller Unit) 30 and a standby MCU 50. Here, the following description will be made on the assumption that the MCU 30 operates as a currently used apparatus and the MCU 50 operates as a standby apparatus that waits for future activation.

  The MCU 30 and the MCU 50 are management devices that manage a plurality of LIUs (Line Interface Units) 70 based on commands received from an OS (Operating System) 20. The MCU 30 and the MCU 50 adopt a cold standby configuration, and hold setting information indicating a connection relationship between the slots in the transmission apparatus 100 and the LIU 70, a connection relationship between the LIUs 70, and the like. When the cold standby configuration is adopted as described above, the setting information is synchronized between the MCU 30 and the MCU 50 so that the MCU 50 can operate instead when the failure of the MCU 30 occurs.

  The MCU 30 and the MCU 50 are communicably connected to the OS 20 and a plurality of LIUs 70. The OS 20 is basic software that performs management operations and the like of the hardware configuration inside the transmission apparatus 100. When the OS 20 receives a setting change of the hardware configuration such as the LIU 70 newly installed in the slot from the user, the OS 20 notifies the MCU 30 of a setting update command including the contents of the setting change. The LIU 70 is an interface that transmits and receives various types of data between the transmission apparatus 100 and other external transmission apparatuses.

  Next, the configuration of the active MCU 30 and the standby MCU 50 according to the present embodiment will be described. FIG. 4 is a block diagram illustrating the configuration of the active MCU 30 and the standby MCU 50 according to the second embodiment. In the following, after describing the configuration of the active MCU 30, the configuration of the standby MCU 50 will be described.

  First, the configuration of the active MCU 30 will be described. As shown in FIG. 4, the working MCU 30 includes a working I / F unit 31, a working port unit 32, a switching control unit 33, an inter-MCU communication unit 34, a setting information DB 35, and a working side update. Unit 36 and an update information writing unit 37.

  When receiving the setting update command from the OS 20, the working side I / F unit 31 notifies the switching control unit 33 and the working side updating unit 36 of the received setting update command. The working side port unit 32 is a physical port group connected to a plurality of LIUs 70.

  When the switching control unit 33 receives a setting change command from the OS 20 via the working side I / F unit 31, the switching control unit 33 performs physical port switching control according to the setting change command. For example, the switching control unit 33 switches the physical port of the working port unit 32 according to the setting change command, and establishes a connection between the slot in the transmission apparatus 100 and the newly installed LIU 70. Further, for example, the switching control unit 33 switches the physical port of the working port unit 32 according to the setting change command, and establishes a connection between the existing LIU 70 and the newly installed LIU 70.

  The inter-MCU communication unit 34 establishes a communication link between the active MCU 30 and the standby MCU 50 and transmits / receives various data through the established communication link. For example, the inter-MCU communication unit 34 transmits, to the standby MCU 50 side, update information that an update information writing unit 37 (to be described later) writes in the standby MCU 50.

  The setting information DB 35 is a database that holds one of the setting information duplexed between the active MCU 30 and the standby MCU 50. For example, the setting information DB 35 holds the connection relationship between the slots in the transmission apparatus 100 and each LIU 70, the connection relationship between the LIUs 70, and the like as setting information.

  When the working side update unit 36 receives a setting update command from the OS 20 via the working side I / F unit 31, the working side update unit 36 performs setting information update processing according to the setting update command. For example, the working side update unit 36 stores the connection relationship between the slot in the transmission apparatus 100 and the newly installed LIU 70 according to the setting update command by overwriting and registering the setting information stored in the setting information DB 35 in the setting information DB 35. Update the set information. Further, for example, the active side update unit 36 holds the connection relationship between the newly installed LIU 70 and the existing LIU 70 by overwriting the setting information held in the setting information DB 35 according to the setting update command, thereby holding the setting information DB 35. Update the setting information.

  The update information writing unit 37 writes the update address of the setting information and the update value of the setting information at the update address as update information to the MCU 50 on the standby side via the inter-MCU communication unit 34. Here, the update address refers to the address (position) of the storage area in the storage area of the setting information DB 35 where the updated portion of the setting information is held. Further, the update value refers to the data value of the update part of the setting information updated by the working side update unit 36. The processing performed by the update information writing unit 37 will be described in detail later.

  Next, the configuration of the standby MCU 50 will be described. The standby MCU 50 includes a standby-side I / F unit 51, a standby-side port unit 52, a switching control unit 53, an inter-MCU communication unit 54, a setting information DB 55, an update information buffer 56, and a standby-side update unit. 57, an operation monitoring unit 58, and an activation processing unit 59.

  Among these, the standby side I / F unit 51, the standby side port unit 52, and the switching control unit 53 are the same as the working side I / F unit 31, the working side port unit 32, and the switching control unit 33 of the working MCU 30, respectively. It is a processing unit that demonstrates its functions. The standby side I / F unit 51, the standby side port unit 52, and the switching control unit 53 do not operate until the system is switched between the active system and the standby system.

  The inter-MCU communication unit 54 establishes a communication link between the active MCU 30 and the standby MCU 50 and transmits / receives various data through the established communication link. For example, the inter-MCU communication unit 54 receives update information written by the active MCU 30 and outputs it to the update information buffer 56.

  The setting information DB 55 is a database that holds the setting information of the other of the setting information duplicated between the active MCU 30 and the standby MCU 50. For example, the setting information DB 55 holds the connection relationship between the slots in the transmission apparatus 100 and each LIU 70, the connection relationship between the LIUs 70, and the like as setting information.

  The update information buffer 56 is a buffer used to synchronize setting information between the MCU 30 and the MCU 50. The update information buffer 56 stores the update address and the update value included in the update information written from the active MCU 30 in association with each other.

  FIG. 5 is a diagram illustrating an example of information held in the update information buffer 56. The update information buffer 56 shown in FIG. 5 includes, on each address 0X000 to 0X1F0, the working side update start address, the working side update end address, the working side update start flag, the working side update completion flag, the update address, the update value, and the standby side update. Holds the middle flag and standby update start address.

  The “working side update start address” indicates the address of the start point where the update address and the update value are actually written in the storage area of the update information buffer 56. The “working side update end address” indicates an end address where the update address and the update value are actually written in the storage area of the update information buffer 56.

  The “working side update start flag” is a flag indicating whether or not writing of an update address and an update value has been started from the active MCU 30. For example, when the working side update start flag is ON, this means that writing of the update address and update value has started from the working MCU 30, and when the working side update start flag is OFF, the update address and update Indicates that value writing has not started.

  The “working side update completion flag” is a flag indicating whether or not the writing of the update address and the update value from the working MCU 30 has been completed. For example, when the working side update completion flag is ON, it indicates that the update address and update value have been written from the working MCU 30, and when the working side update completion flag is OFF, the working MCU 30 Indicates that the update address and writing from have not been completed.

  The “update address” is an update address written from the active MCU 30. The “update value” is an update value written from the active MCU 30.

  The “standby side updating flag” is a flag indicating whether or not the setting information DB 55 is being updated by the standby side update unit 57 described later. For example, when the standby side update flag is ON, it indicates that the setting information DB 55 is being updated by the standby side update unit 57, and when the standby side update flag is OFF, the standby side update is performed. This indicates that the setting information DB 55 has not been updated by the unit 57.

  “Standby side update start address” is the case where the standby side update unit 57 reads the update address and update value held in the storage area of the update information buffer 56 from the current side update start address to the current side update end address. Is a storage area where the working side update start address is copied. This standby-side update start address represents from which address the active MCU 30 should write the next update information when the update processing of the setting information DB 55 by the standby-side update unit 57 is completed.

  Returning to the description of FIG. 4, the standby side update unit 57 updates the setting information held in the setting information DB 55 using the update address and update value held in the update information buffer 56. The processing performed by the standby side updating unit 57 will be described in detail later.

  The operation monitoring unit 58 monitors the operation state of the active MCU 30 at a predetermined cycle, and detects whether there is a failure in the active MCU 30. For example, the operation monitoring unit 58 detects a failure of the MCU 30 when the operating MCU 30 is removed. Further, the operation monitoring unit 58 notifies the standby side update unit 57 and the activation processing unit 59 of the monitoring result of the active MCU 30.

  The activation processing unit 59 executes an activation process for switching the MCU 50 from the standby system to the active system when the operation monitoring unit 58 detects a failure of the active MCU 30. For example, the activation processing unit 59 activates the switching control unit 53 and the like using the setting information read from the setting information DB 55, and implements physical port switching control.

  Next, a processing procedure by the duplex system 10 according to the present embodiment will be described. Here, after describing the processing procedure by the active MCU 30, the processing procedure by the standby MCU 50 will be described. FIG. 6 is a flowchart illustrating a processing procedure performed by the active MCU 30 according to the second embodiment. FIG. 7 is a flowchart illustrating a processing procedure performed by the standby MCU 50 according to the second embodiment. FIG. 8 is a diagram showing how the update information buffer 56 is updated.

  First, a processing procedure by the active MCU 30 will be described. As shown in FIG. 6, the MCU 30 first determines whether or not a setting update command has been received from the OS 20 (step S11). When the setting update command is not received from the OS 20 (No at Step S11), the MCU 30 waits as it is. On the other hand, when a setting update command is received from the OS 20 (Yes at Step S11), the switching control unit 33 of the MCU 30 performs physical port switching control according to the setting update command (Step S12). Subsequently, the working side update unit 36 updates the setting information held in the setting information DB 35 in accordance with the setting change command (step S13).

  Subsequently, the update information writing unit 37 refers to the update information buffer 56 of the standby MCU 50 and determines whether or not the standby side update flag is ON (step S14). If the standby side updating flag is ON (Yes at Step S14), the update information writing unit 37 waits for a predetermined time, for example, 1 second (Step S15), and is the standby side updating flag ON? It is determined again whether or not (step S14).

  On the other hand, if the standby side update flag is OFF (No at Step S14), the update information writing unit 37 refers to the update information buffer 56 of the standby MCU 50 and determines whether the active side update completion flag is ON. It is determined whether or not (step S16). When the working side update completion flag is ON (Yes at Step S16), the update information writing unit 37 acquires the working side update end address from the update information buffer 56 (Step S18). By obtaining the working side update end address when the working side update completion flag is ON, the update information writing unit 37 can continuously write the current update information at the address where the previous update information was written. .

  On the other hand, when the working side update completion flag is OFF (No at Step S16), the update information writing unit 37 acquires the standby side update start address from the update information buffer 56 (Step S17). By acquiring the standby side update start address when the working side update completion flag is OFF, the update information writing unit 37 adds the current update information to the previous update information that has already been read on the standby MCU 50 side. Can be overwritten.

  Thereafter, the update information writing unit 37 sets the working side update start flag of the update information buffer 56 to ON and sets the working side update completion flag to OFF (step S19). Then, the update information writing unit 37 writes the update information (update address and update value) in the update information buffer 56 using the address acquired in step S17 or step S18 as the write start address (step S20).

  Here, (a) and (b) of FIG. 8 illustrate the mode of the update information buffer 56 before and after the update information is written by the processing of step S19 to step S20. For example, as shown in FIG. 8A, in the update information buffer 56 before update information is written, the working side update start flag and the working side update completion flag are set to OFF, and the standby side update start address Assume that “0X020” is held as the initial value. In such a case, the update information writing unit 37 sets the working side update start flag of the update information buffer 56 from OFF to ON and also sets the working side update completion flag to OFF, as shown in FIG. 8B. Reset it. Then, the update information writing unit 37 writes the update information (update address and update value) in the update information buffer 56 using the standby side update start address “0X020” acquired in step S17 as the write start address. For example, as illustrated in FIG. 8B, the update address “address01” and the update value “data01” are written in association with the address “0X020” of the update information buffer 56. Further, the update address “address02” and the update value “data02” are written in association with the address “0X030” of the update information buffer 56. Further, the update address “address03” and the update value “data03” are written in association with the address “0X040” of the update information buffer 56.

  When step S20 is completed, the update information writing unit 37 sets the start point address and the end point address at which the update address and the update value are actually written in the update information buffer 56 to the active side update start address and the active side update end address. Each is written (step S21). Then, the update information writing unit 37 sets the working side update start flag of the update information buffer 56 to OFF and sets the working side update completion flag to ON (step S22). Thereafter, the update information writing unit 37 outputs a response indicating that a series of processing (physical port switching control, updating of its own setting information and writing to the update information buffer 56) is completed to the display device or the like (step S23). ).

  Here, FIG. 8C illustrates an aspect of the update information buffer 56 after the address is written by the processing of steps S21 to S22. For example, as shown in FIG. 8B, it is assumed that the update address and the update value are written in the addresses “0X020” to “0X040” of the update information buffer 56. In such a case, as shown in FIG. 8C, the update information writing unit 37 updates the start-side address “0X020” and the end-point address “0X040” into which the update address and the update value have been written. Write to the start address and the working side update end address respectively. Then, the update information writing unit 37 sets the working side update start flag of the update information buffer 56 to OFF and sets the working side update completion flag to ON.

  Next, a processing procedure by the standby MCU 50 will be described. As shown in FIG. 7, the operation monitoring unit 58 of the MCU 50 monitors the operation state of the active MCU 30 at a predetermined period, for example, 500 ms (step S31).

  When the failure of the active MCU 30 is not detected by the operation monitoring unit 58 (No at Step S32), the standby side update unit 57 refers to the update information buffer 56 and the active side update completion flag is ON. Is determined (step S33). When the working side update completion flag is OFF (No at Step S <b> 33), the standby side update unit 57 returns the process to Step 31.

  On the other hand, when the working side update completion flag is ON (Yes at Step S33), the standby side update unit 57 sets the standby side updating flag in the update information buffer 56 to ON (Step S34). When the standby side updating flag is set to ON, the write processing of the update information buffer 56 by the update information writing unit 37 of the MCU 30 is temporarily stopped, and the update information buffer 56 is updated during the update processing by the standby side update unit 57. The situation where the information inside is changed is avoided.

  Subsequently, the standby side update unit 57 acquires the working side update start address and the working side update end address from the update information buffer 56 (step S35). Then, the standby side update unit 57 reads the update address and the update value held in the storage area from the obtained working side update start address to the working side update end address in the storage area of the update information buffer 56. Then, the standby side update unit 57 updates the value of the setting information in the setting information DB 55 at the address corresponding to the read update address with the update value associated with the update address (step S36).

  Here, FIG. 8D illustrates an aspect of the update information buffer 56 from which the update address and the update value are read out by the processes in steps S34 to S36. For example, as shown in FIG. 8C, it is assumed that the addresses “0X020” and “0X040” of the update information buffer 56 are written in the working side update start address and the working side update end address, respectively. In such a case, the standby side update unit 57 sets the standby side updating flag in the update information buffer 56 from OFF to ON as shown in FIG. Subsequently, the standby side update unit 57 acquires the working side update start address “0X020” and the working side update end address “0X040” from the update information buffer 56. Then, the standby side update unit 57 reads the update address and the update value held in the storage area from the acquired address “0X020” to the address “0X040” in the storage area of the update information buffer 56. Then, the standby side update unit 57 sets the value of the setting information in the setting information DB 55 at the address corresponding to the read update address (for example, “address01”) to the update value (for example, “data01”) associated with the update address. Update with.

  When step S36 is completed, the standby side update unit 57 copies the working side update start address read in step S35 to the standby side update start address (step S37). Thereafter, the standby side update unit 57 sets the standby side updating flag to OFF, sets the working side update completion flag to OFF (step S38), and returns the process to step S31.

  Here, FIG. 8E illustrates an aspect of the update information buffer 56 after the setting information update processing by the standby side update unit 57 is completed by the processing of steps S37 to S38. As shown in FIG. 8E, the standby side update unit 57 copies the working side update start address “0X020” read from the update information buffer 56 to the standby side update start address. Thereafter, the standby side updating unit 57 sets the standby side updating flag to OFF and sets the working side update completion flag to OFF. Thus, the setting information update process by the standby side update unit 57 is completed.

  On the other hand, when the failure of the active MCU 30 is detected by the operation monitoring unit 58 (Yes at step S32), the activation processing unit 59 activates the switching control unit 53 and the like using the setting information read from the setting information DB 55. (Step S39). Then, the activation processing unit 59 initializes the update information buffer 56 (step S40) and ends the process.

  As described above, in the duplex system 10 according to the present embodiment, the active MCU 30 writes only the update address and update value of the updated setting information in the update information buffer 56 of the standby MCU 50. Then, the standby MCU 50 updates the setting information held by itself using the update address and the update value written in the update information buffer 56. For this reason, in the duplex system 10 according to the present embodiment, it becomes unnecessary for the active MCU 30 to directly write the updated setting information to the setting information DB 55 of the standby MCU 50, and the setting information held by the MCU 50 is destroyed. This can be avoided and the redundancy can be ensured. Further, in the duplex system 10 according to the present embodiment, the size of the update information buffer 56 that holds only the update address and the update value can be reduced as compared with the setting information DB 55, and the setting information DB can be reduced to 2 as in the conventional case. The entire apparatus can be made smaller than the configuration in which two are provided. That is, according to the duplex system 10, the active MCU 30, and the standby MCU 50 according to the present embodiment, it is possible to suppress an increase in size of the apparatus while ensuring redundancy.

  Further, in the duplex system 10 according to the present embodiment, the standby MCU 50 provides the update information buffer 56 with a working side update completion flag indicating whether or not the writing of the update address and the update value by the working MCU 30 has been completed. Hold further. Then, the standby MCU 50 refers to the update information buffer 56, and when the working side update completion flag is ON indicating completion, the standby MCU 50 uses its update address and update value written in the update information buffer 56 to hold it. Update the setting information. For this reason, in the duplex system 10 according to the present embodiment, the standby MCU 50 uses the incomplete data in the update information buffer 56 before using the incomplete data in the update information buffer 56 before the writing of the update address and update value by the active MCU 30 is completed. A situation in which the setting information is updated can be avoided. Further, according to the duplex system 10 according to the present embodiment, since the reliability of the setting information in the standby MCU 50 is improved, the validity check of the setting information performed at the time of current use can be eliminated, and the standby system This makes it possible to use the MCU 50 at high speed.

  In the duplex system 10 according to the present embodiment, the standby MCU 50 monitors the operation state of the active MCU 30 at a predetermined cycle. Then, the standby MCU 50 refers to the update information buffer 56 at a cycle for monitoring the operation state of the active MCU 30, and determines whether or not the active-side update completion flag is ON indicating completion. Therefore, according to the duplex system 10 according to the present embodiment, the working side update completion flag can be checked in conjunction with the monitoring process cycle for the working system that is normally performed by the standby MCU 50 that employs cold standby. Can be simplified.

  Although the embodiments related to the disclosed apparatus have been described above, the present invention may be implemented in various different forms other than the above-described embodiments. Therefore, another embodiment included in the present invention will be described below.

  For example, in the second embodiment, switching between the active system and the standby system in the duplexed MCU 30 and MCU 50 is executed when the standby MCU 50 detects a failure of the MCU 30. However, the opportunity to switch the MCU 50 from the standby system to the active system is not limited to this. For example, the switching between the active system and the standby system in the MCU 30 and MCU 50 to be duplexed may be executed when an instructing instruction is received from an external control terminal.

  In addition, each component of each illustrated apparatus does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. For example, a part of the working side update unit 36 or the update information writing unit 37 may be connected as an external device of the working MCU 30 via a network. For example, a part of the standby side update unit 57 may be connected as an external device of the standby MCU 50 via a network. Further, the functions of the above-described active MCU 30 may be realized by having the active side update unit 36 or the update information writing unit 37 respectively connected to a network and cooperating with each other. Further, the standby side update unit 57 may be provided in each of the other devices, and the functions of the standby MCU 50 may be realized by being connected to a network and cooperating. Further, the function of the above-described active MCU 30 may be realized by having all or a part of the setting information DB 35 respectively provided in another device and connected to the network to cooperate. Alternatively, the setting information DB 55 or the update information buffer 56 may have all or a part of each of the devices, and the functions of the standby MCU 50 may be realized by being connected to the network and cooperating. Absent.

  The following supplementary notes are further disclosed with respect to the embodiments including the above examples.

(Appendix 1) A duplex system having an active device and a standby device,
The working device is
A working storage unit that holds one of the duplicated data; and
A working side updating unit for updating the one data;
A writing unit that writes the update position of the one data and the update value of the one data at the update position to the standby device, and
The standby device is
A standby storage unit for holding the other data of the duplicated data;
An update information storage unit that holds the update position and the update value written from the active device in association with each other;
A duplex system, comprising: a standby side update unit that updates the value of the other data at a position corresponding to the update position with the update value associated with the update position.

(Supplementary Note 2) The update information storage unit further holds a working side update completion flag indicating whether or not the writing of the update position and the update value has been completed,
The standby side update unit refers to the update information storage unit, and associates the value of the other data at the position corresponding to the update position with the update position when the working side update completion flag indicates completion. The duplex system according to claim 1, wherein the system is updated with the updated value.

(Appendix 3) The standby device is
An operation monitoring unit that monitors an operation state of the active device at a predetermined period;
The standby-side update unit refers to the update information storage unit at the predetermined cycle, and when the working-side update completion flag indicates completion, the standby-side update unit sets the value of the other data at the position corresponding to the update position. The duplex system according to appendix 2, wherein the update is performed with the update value associated with the update position.

(Appendix 4) A working device that is duplicated with a standby device,
A working storage unit that holds one of the duplicated data; and
A working side updating unit for updating the one data;
An active device, comprising: a writing unit that writes an update position of the one data and an update value at the update position to the standby device.

(Additional remark 5) It is a standby | standby apparatus duplexed with an active apparatus,
A standby storage unit for holding one of the duplicated data;
An update information storage unit that holds the update position and update value of the other data of the duplicated data written from the active device in association with each other;
A standby apparatus, comprising: a standby-side update unit that updates the value of the one data at a position corresponding to the update position with the update value associated with the update position.

(Supplementary note 6) A data update method in a duplex system having an active device for holding one of the duplicated data in the active storage unit and a standby device for holding the other data in the standby storage unit,
The working device is
A working side update step for updating the one data;
A write step of writing the update position of the one data and the update value at the update position to the standby device,
The standby device is
Read the update position and the update value held in the update information storage unit that holds the update position and the update value written from the active device in association with each other, and the other data at the position corresponding to the update position A data update method comprising: a standby side update step of updating the value of the value with the update value associated with the update position.

(Supplementary note 7) A data update method in a duplex system having an active device that holds one of the duplicated data in the active storage unit and a standby device that holds the other data in the standby storage unit,
The working device is
A working side update step for updating the one data;
A data updating method comprising: a writing step of writing an update position of the one data and an update value at the update position to the standby device.

(Supplementary note 8) A data update method in a duplex system having an active device that holds one of the duplicated data in the active storage unit and a standby device that holds the other data in the standby storage unit,
The standby device is
Read the update position and the update value held in the update information storage unit that holds the update position and the update value written from the active device in association with each other, and the other data at the position corresponding to the update position A data update method comprising: a standby side update step of updating the value of the value with the update value associated with the update position.

DESCRIPTION OF SYMBOLS 1 Duplexing system 3 Working apparatus 3a Working side memory | storage part 3b Working side updating part 3c Writing part 5 Standby apparatus 5a Standby side memory | storage part 5b Update information storage part 10 Duplexing system 20 OS
30 Active MCU
31 working side I / F unit 32 working side port unit 33 switching control unit 34 inter-MCU communication unit 35 setting information DB
36 Working side update unit 37 Update information writing unit 50 Standby MCU
51 Standby-side I / F unit 52 Standby-side port unit 53 Switching control unit 54 Inter-MCU communication unit 55 Setting information DB
56 Update information buffer 57 Standby side update unit 58 Operation monitoring unit 59 Start processing unit 70 LIU
100 Transmission equipment

Claims (6)

A duplex system having an active device and a standby device,
The working device is
A working storage unit that holds one of the duplicated data; and
A working side updating unit for updating the one data;
A writing unit that writes the update position of the one data and the update value of the one data at the update position to the standby device, and
The standby device is
A standby storage unit for holding the other data of the duplicated data;
An update information storage unit that holds the update position and the update value written from the active device in association with each other;
A duplex system, comprising: a standby side update unit that updates the value of the other data at a position corresponding to the update position with the update value associated with the update position. The update information storage unit further holds a working side update completion flag indicating whether or not the writing of the update position and the update value is completed,
The standby side update unit refers to the update information storage unit, and associates the value of the other data at the position corresponding to the update position with the update position when the working side update completion flag indicates completion. The duplex system according to claim 1, wherein the update is performed using the updated value. The standby device is
An operation monitoring unit that monitors an operation state of the active device at a predetermined period;
The standby-side update unit refers to the update information storage unit at the predetermined cycle, and when the working-side update completion flag indicates completion, the standby-side update unit sets the value of the other data at the position corresponding to the update position. The duplex system according to claim 2, wherein updating is performed with the update value associated with an update position. A working device duplexed with the standby device,
A working storage unit that holds one of the duplicated data; and
A working side updating unit for updating the one data;
An active device, comprising: a writing unit that writes an update position of the one data and an update value at the update position to the standby device. A standby device that is duplicated with the active device,
A standby storage unit for holding one of the duplicated data;
An update information storage unit that holds the update position and update value of the other data of the duplicated data written from the active device in association with each other;
A standby apparatus, comprising: a standby-side update unit that updates the value of the one data at a position corresponding to the update position with the update value associated with the update position. A data update method in a duplex system having an active device for holding one of the duplicated data in the active storage unit and a standby device for holding the other data in the standby storage unit,
The working device is
A working side update step for updating the one data;
A write step of writing the update position of the one data and the update value at the update position to the standby device,
The standby device is
Read the update position and the update value held in the update information storage unit that holds the update position and the update value written from the active device in association with each other, and the other data at the position corresponding to the update position A data update method comprising: a standby side update step of updating the value of the value with the update value associated with the update position.

Images