JP2017116976A - Monitoring control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a monitoring control system for preventing data from being erroneously transmitted by improving a data protection function in a disaster such as an earthquake.SOLUTION: In the case that an information processing device 210a determines that acceleration data from an acceleration sensor 111a is equal to or more than a determination specified value Xa by an acceleration data determination part 22a, a plant data processing part 23a requests a control device 300 so as to transfer plant data to be stored in a plant data storage part 131a to an information processing device 210b and an information processing device 210c through a network 400, and the control device 300 receiving the request stores the plant data of the information processing device 210a in respective plant data storage parts 131b, 131c of the information processing device 210b and the information processing device 210c.SELECTED DRAWING: Figure 4

Description

  The present invention relates to a supervisory control system, and more particularly to a supervisory control system having a data protection function.

  In a monitoring control system such as a nuclear power generation system or a thermal power generation system, various plant data are stored in an information processing device, and if the stored data is missing, there is a possibility that plant operation will be greatly affected. . Therefore, it is necessary to protect stored data even when an acceleration equal to or greater than a specified value is applied to the information processing apparatus due to an earthquake or the like. In addition, when erroneous data is transmitted on the same network due to a failure or destruction of the information processing apparatus, there is a possibility that the plant operation of other information processing apparatuses may be hindered.

  On the other hand, the conventional supervisory control system temporarily saves data stored in the storage device of the information processing device to a static storage element when the acceleration exceeds a specified value, and the acceleration reaches the specified value. If it falls below, some data protection is realized by returning the data stored in the static storage element to the storage device (see, for example, Patent Document 1). Some have a function of stopping the function of the storage device when the acceleration exceeds a specified value and causing a degenerate operation (see, for example, Patent Document 2).

Sho 64-14765 (page 3, upper left column, line 18 to upper right column, line 9, line 4) JP 2006-293614 A (paragraph 0028, FIG. 3)

  However, Patent Document 1 has a problem that data protection cannot be performed when the information processing apparatus itself falls into a case where it cannot be recovered due to destruction or the like. Further, in Patent Document 2, only the storage device of the storage system is controlled to stop and degenerate, and only the storage device itself is in the range. Like Patent Document 1, the storage device itself cannot be recovered due to destruction or the like. In such a case, there is a problem that data protection cannot be performed.

  The present invention has been made to solve the above-described problems, and it is an object of the present invention to provide a monitoring control system that improves the data protection function in the event of a disaster such as an earthquake and prevents erroneous data transmission. And

  The monitoring control system according to the present invention includes an acceleration sensor that acquires acceleration data, an acceleration data determination unit that compares a determination specified value that is held with acceleration data from the acceleration sensor, a plant data storage unit that stores plant data, and A plant data processing unit for requesting transmission of plant data stored in the plant data storage unit to the outside when the acceleration data determination unit determines that acceleration data from the acceleration sensor is equal to or greater than the predetermined determination value; Each of the first and second information processing devices that transmit and receive signals to and from each other via a network, and connected to the network, from the plant data processing unit of the first or second information processing device. Storage of plant data of the first or second information processing device based on the request Plant data to be stored in, is transferred to the second or plant data storage unit of the first information processing apparatus, characterized by comprising a control device for storing.

  According to the present invention, acceleration data is acquired from an acceleration sensor provided in the information processing apparatus, and when the acceleration data becomes equal to or greater than a predetermined determination value, plant data is transmitted to another information processing apparatus connected on the same network. When the acceleration data that is equal to or greater than the specified threshold value is detected by another information processing device that has the function of transferring data and is connected to the same network, the plant data stored in the other information processing device is received. By having such a function, it is possible to protect data even when the information processing apparatus itself falls into a case where it cannot be recovered due to destruction or the like.

BRIEF DESCRIPTION OF THE DRAWINGS It is a block diagram of the monitoring control system concerning Embodiment 1 of this invention. It is a block diagram of the information processing apparatus in the monitoring control system concerning Embodiment 1 of this invention. It is a flowchart figure for demonstrating operation | movement of the information processing apparatus in the monitoring control system concerning Embodiment 1 of this invention. It is a block diagram of the whole supervisory control system concerning Embodiment 1 of this invention. It is a block diagram of the whole supervisory control system concerning Embodiment 2 of this invention. It is a flowchart figure for demonstrating operation | movement of the information processing apparatus in the monitoring control system concerning Embodiment 2 of this invention. It is a block diagram of the whole supervisory control system concerning Embodiment 3 of this invention. It is a flowchart figure for demonstrating operation | movement of the information processing apparatus in the monitoring control system concerning Embodiment 3 of this invention.

Embodiment 1 FIG.
FIG. 1 is a configuration diagram showing an entire monitoring control system 510 according to Embodiment 1 of the present invention. As shown in FIG. 1, the monitoring control system 510 includes information processing devices 210 a, 210 b, 210 c connected to a network 400 and a control device 300. The control device 300 controls transmission / reception of plant data held by each of the information processing devices 210a, 210b, and 210c in accordance with requests from the information processing devices 210a, 210b, and 210c connected to the same network 400. . The information processing device 210a as the first information processing device is connected to the control device 300, the information processing device 210b, and the information processing device 210c via the network 400, and the plant data held by the information processing device 210a is controlled by the control device 300. 210b and the information processing apparatus 210c. Each of the information processing apparatus 210b and the information processing apparatus 210c as the second information processing apparatus has the same function as the information processing apparatus 210a. The network 400 connects the information processing device 210a, the information processing device 210b, the information processing device 210c, and the control device 300, and transmits a request from each of the information processing devices 210a, 210b, and 210c to the control device 300, or the control device 300. Under the control, the plant data held by each of the information processing devices 210a, 210b, and 210c is transferred to the information processing device 210a, the information processing device 210b, and the information processing device 210c. Each information processing device 210a, 210b, 210c connected on the network 400 transmits a ping, which is a network command, to the information processing devices other than itself at regular intervals. It is possible to confirm whether the information processing apparatus is in operation.

  FIG. 2 is a block diagram showing the internal configuration of the information processing apparatus 210a according to Embodiment 1 of the present invention. As shown in FIG. 2, the information processing apparatus 210a includes an acceleration sensor 111a, a CPU (Central Processing Unit) 121a, and a plant data storage unit 131a. The acceleration sensor 111a includes an acceleration data unit 12a that acquires acceleration data, and an acceleration data writing unit 11a that writes acceleration data stored in the acceleration data unit 12a to an acceleration data storage unit 21a provided in the CPU 121a. The CPU 121a includes an acceleration data storage unit 21a that stores acceleration data acquired by the acceleration data unit 12a of the acceleration sensor 111a, an acceleration data determination unit 22a for determining acceleration data acquired by the acceleration data storage unit 21a, and an acceleration An acceleration data processing unit 23a that processes plant data based on the determination of the data determination unit 22a. The acceleration data determination unit 22a has a specified determination value Xa inside. The CPU 121a is connected to the acceleration sensor 111a through a signal line 141a, and is connected to the plant data storage unit 131a through a signal line 151a. The acceleration data processing unit 23a is connected to the external network 400, is activated in accordance with the activation command from the acceleration data determination unit 22a, and the plant data stored in the plant data storage unit 131a is the same via the network 400. The control apparatus 300 is requested to transfer to all the information processing apparatuses 210b and 210c connected on the network. The plant data storage unit 131a holds plant data. In the information processing apparatus 210a, the plant data stored in the plant data storage section 131a is requested to the control apparatus 300 via the network 400 by the acceleration data processing section 23a of the CPU 121a, so that the control apparatus 300 performs other external information processing. It is transferred to the devices 210b and 210c. Each of the information processing apparatus 210b and the information processing apparatus 210c has the same configuration as the information processing apparatus 210a.

  Next, the operation of the information processing apparatus 210a of the monitoring control system 510 according to the first embodiment will be described with reference to FIG. FIG. 3 is a flowchart showing the operation of the information processing apparatus 210a of the monitoring control system 510 according to the first embodiment. First, the information processing apparatus 210a acquires acceleration data by the acceleration data unit 12a of the acceleration sensor 111a (step S301). Subsequently, the information processing apparatus 210a writes the acquired acceleration data to the acceleration data storage unit 21a of the CPU 121a by the acceleration data writing unit 11a of the acceleration sensor 111a (step S302). Next, the information processing device 210a compares the acceleration data written in the acceleration data storage unit 21a with the determination standard value Xa held in the acceleration data determination unit 22a by the acceleration data determination unit 22a of the CPU 121a, and the acceleration data storage unit It is determined whether or not the acceleration data written in 21a is equal to or greater than the determination standard value Xa (step S303). If the acceleration data written in the acceleration data storage unit 21a is greater than or equal to the determination standard value Xa, the information processing apparatus 210a activates the acceleration data processing unit 23a by the acceleration data determination unit 22a of the CPU 121a (step S304), The plant data stored in the plant data storage unit 131a of the information processing device 210a is externally transmitted to the control device 300 on the network 400 by the data processing unit 23a with respect to all the other information processing devices 210b and 210c on the network 400. It requests to transfer to the other information processing apparatuses 210b and 210c (step S305).

  FIG. 4 is an overall block diagram of the supervisory control system 510 according to the first embodiment of the present invention. When the control device 300 shown in FIG. 4 receives a request from the acceleration data processing unit 23a of the information processing device 210a via the network 400, the control device 300 stores the acceleration data processing unit 23a of the information processing device 210a in the plant data storage unit 131a. The plant data to be stored is transmitted to the outside. The control device 300 transmits the plant data of the information processing device 210a transmitted on the network 400 to the plant data storage units 131b and 131c by the acceleration data processing units 23b and 23c of the information processing devices 210b and 210c. The plant data of the processing device 210a is stored, and the transfer ends.

  On the other hand, when the acceleration data written in the acceleration data storage unit 21a is lower than the determination standard value Xa in step S303, the information processing apparatus 210a again performs acceleration by the acceleration data unit 12a of the acceleration sensor 111a. Data is acquired (step S301), and the operations from S301 to S303 are repeated. Note that each of the information processing apparatus 210b and the information processing apparatus 210c has the same operation as the information processing apparatus 210a.

  As described above, the acceleration data is acquired from the acceleration sensor provided in the information processing device, and the plant data is transferred to another information processing device connected on the same network when the acceleration data is equal to or greater than the predetermined determination value. A function for receiving plant data stored in another information processing device when acceleration information equal to or greater than a predetermined value is detected by another information processing device connected to the same network. Thus, even if the information processing apparatus itself falls into a case where it cannot be recovered due to destruction or the like, data protection can be achieved.

  As described above, according to the monitoring control system 510 according to the first embodiment of the present invention, the information processing device 210a determines that the acceleration data from the acceleration sensor 111a is equal to or greater than the determination specified value Xa by the acceleration data determination unit 22a. In this case, the plant data processing unit 23a requests the control device 300 to transfer the plant data stored in the plant data storage unit 131a to the information processing device 210b and the information processing device 210c via the network 400, and receives the request. Since the apparatus 300 stores the plant data of the information processing apparatus 210a in the plant data storage units 131b and 131c of the information processing apparatus 210b and the information processing apparatus 210c, the information processing apparatus itself cannot recover due to destruction or the like. Data protection is possible even if it happens It can be.

Embodiment 2. FIG.
In the first embodiment, the case where the plant data is transferred to another information processing apparatus connected to the same network when the acceleration data exceeds the predetermined determination value in the information processing apparatus has been described. In Embodiment 2, a case will be described in which operation is stopped after plant data is transferred to all information processing apparatuses.

  FIG. 5 is a diagram showing the overall configuration of the monitoring control system 520 and the internal configuration of the information processing apparatus 220a according to Embodiment 2 of the present invention. As illustrated in FIG. 5, the information processing device 220 a includes a function stop processing unit 24 a that stops the function of the information processing device 220 a in accordance with an instruction from the plant data processing unit 23 a in the CPU 122 a. Other configurations of the information processing device 220a are the same as those of the information processing device 210a of the first embodiment, and corresponding portions are denoted by the same reference numerals and description thereof is omitted.

  Next, the operation of the information processing apparatus 220a of the monitoring control system 520 according to Embodiment 2 of the present invention will be described with reference to FIG. FIG. 6 is a flowchart for explaining the operation of the information processing apparatus 220a in the monitoring control system 520 according to the second embodiment of the present invention. First, the information processing apparatus 220a performs the same operation as in steps S301 to S305 in the first embodiment. Subsequently, the information processing apparatus 220a uses the plant data processing unit 23a of the CPU 122a to transfer the plant data stored in the plant storage unit 131a of the information processing apparatus 220a to all the other information processing apparatuses 220b and 220c on the network 400. It is confirmed whether or not all the processes are completed (step S601). When the transfer of all the plant data has been completed, the information processing device 220a sends information to all the other information processing devices 220b and 220c and the control device 300 on the network 400 by the plant data processing unit 23a. The stop of the operation of the processing device 220a is notified (step S602), and the function stop processing unit 24a of the CPU 122a is activated (step S603). After activation, the information processing apparatus 220a causes the function stop processing unit 24a of the CPU 122a to stop acquiring acceleration data by the acceleration data unit 12a of the acceleration sensor 111a (step S604), and the acceleration data writing unit 11a stores the acceleration data of the CPU 121a. The acceleration data writing to the unit 21a is stopped (step S605), and the plant data receiving function of the other information processing devices 210b and 210c from the network 400 to the plant data storage unit 131a by the plant data processing unit 23a is stopped. (Step S606). Thereafter, the information processing apparatus 220a confirms whether or not the stop processing of each step of Step 604, Step 605, and Step S606 has been completed by the function stop processing unit 24a of the CPU 121a (Step S607). If each step has completed all the stop processing, finally, the information processing device 220a causes the function stop processing unit 24a to stop the operation of the CPU 122a and shift the information processing device 220a to the standby state. (Step S608), the process ends.

  On the other hand, if the transfer of the plant data is not completed at the stage of step S601, the information processing apparatus 220a continues the transfer operation by the plant data processing unit 23a (S305), and the predetermined time is reached. After the elapse of time, it is confirmed again whether or not the transfer of all plant data has been completed (step S601). If the stop process has not been completed in any step in step S607, the stop process of the step in which the stop process has not been completed is continued (steps S604, S605, S606). After the elapse of time, it is confirmed again whether each unit has completed all the stop processing (step S607). It is assumed that the time specified in advance is set in the plant data processing unit 23a in advance by the user. Note that each of the information processing device 220b and the information processing device 220c has the same operation as the information processing device 220a.

  Thus, after transferring plant data to another information processing apparatus connected on the same network, a notice to stop operation in advance is sent to other information processing apparatuses and control apparatuses connected on the same network. By transmitting, the control device that controls the transfer of plant data and the information processing device of the receiving source can confirm the operating status of the information processing device of the sending source in advance, and further the operation of the information processing device of the sending source By stopping, it is possible to suppress erroneous data transmission on the same network due to failure or destruction of the information processing apparatus, and to prevent troubles in plant operation of other information processing apparatuses.

  As described above, according to the monitoring control system 520 according to the second embodiment of the present invention, after the information processing apparatus 220a completes the transfer of plant data, all other data on the network 400 is transmitted by the plant data processing unit 23a. The information processing devices 220b and 220c and the control device 300 are notified of the stop of the operation of the information processing device 220a, and the function stop processing unit 24a of the CPU 122a is activated. Acquisition of acceleration data by the acceleration data unit 12a is stopped, writing of acceleration data to the acceleration data storage unit 21a of the CPU 121a by the acceleration data writing unit 11a is stopped, and plant data storage unit 131a by the plant data processing unit 23a is stopped. From the network 400 Since the reception function of the plant data of the other information processing apparatuses 210b and 210c is stopped, it is possible to protect data even when the information processing apparatus itself falls into a case where it cannot be recovered such as destruction. In addition, the operational status of the information processing apparatus can be confirmed in advance, and erroneous data transmission to the same network due to failure or destruction of the information processing apparatus can be suppressed. Moreover, the trouble with respect to the plant operation | movement of another information processing apparatus can be prevented beforehand.

Embodiment 3 FIG.
In the second embodiment, the case where the operation is temporarily stopped and transferred to the standby state after transferring own plant data to another information processing apparatus connected to the same network due to the influence of an earthquake or the like has been described. However, in the third embodiment, a case will be described in which the apparatus returns from the standby state and restarts after confirming the soundness of the information processing apparatus.

  FIG. 7 is a diagram showing the overall configuration of the monitoring control system 530 and the internal configuration of the information processing apparatus 230a according to Embodiment 3 of the present invention. As illustrated in FIG. 7, the information processing device 230 a includes a soundness confirmation unit 25 a that activates the stored diagnostic program Pa and confirms the soundness of the information processing device 230 a in accordance with an instruction from the function stop processing unit 24 a in the CPU 123 a. . Other configurations of the information processing device 220a are the same as those of the information processing device 210a of the first embodiment, and corresponding portions are denoted by the same reference numerals and description thereof is omitted.

  Next, the operation of the information processing device 230a of the monitoring control system 530 according to the third embodiment of the present invention will be described with reference to FIG. FIG. 8 is a flowchart for explaining the operation of the information processing apparatus 230a in the monitoring control system 530 according to the third embodiment of the present invention. First, the information processing apparatus 230a performs the same operation from step S301 to step S305 in the first embodiment, and subsequently from step S601 to step S608 in the second embodiment. Next, the control device 300 that has received the notification to stop the operation from the information processing device 230a measures a predetermined time (step S801), and when the predetermined time has passed, the control device 300 A confirmation packet is transmitted to 230a (step S802), and transmission is confirmed (step S803). In addition, about the time prescribed | regulated previously, it shall be set to the control apparatus 300 in advance by the user. Subsequently, when the information processing apparatus 230a receives the confirmation packet and confirms the reception of the confirmation packet by the function stop processing unit 24a of the CPU 123a, the CPU 123a is returned from the standby state by using the received confirmation packet as a trigger (step S804). Next, the information processing device 230a activates the soundness confirmation unit 25a by the function stop processing unit 24a (step S805), activates the confirmation program Pa stored by the soundness confirmation unit 25a, and checks the soundness of the information processing device 230a. Confirmation is made (step S806). If the soundness is confirmed, the information processing apparatus 230a resumes the operation from step S301 in the first embodiment.

  On the other hand, in the case where failure or deficiency is confirmed in the information processing apparatus 230a at the stage of step S806, and the soundness cannot be confirmed, the information processing apparatus 230a uses the soundness confirmation unit 25a to perform other operations on the network 400. The occurrence of a failure in the information processing device 230a is notified to all the information processing devices 230b and 230c and the control device 300 (step S807). After the notification, the operations from step S604, step S605, and step S606 in the second embodiment are continued.

  In this way, the information processing apparatus automatically returns from the standby state, triggered by a confirmation packet transmitted via the network, from the control apparatus that has received the notification to stop operation from the information processing apparatus. If there is no problem in soundness, restarting the operation can reduce troubles in the operation of the own information processing apparatus.

  As described above, according to the monitoring control system 530 according to the third embodiment of the present invention, the control device 300 that has received the notification that the information processing device 230a has stopped operating from the information processing device 230a has passed a predetermined time. With the confirmation packet to be transmitted later as a trigger, the soundness confirmation unit 25a activated by the function stop processing unit 24a confirms the soundness of the information processing device 230a, and when the soundness is confirmed, the operation is resumed. Therefore, even if the information processing device itself falls into a case where it cannot be recovered, such as destruction, it is possible to protect data, check the operating status of the information processing device in advance, and failure or destruction of the information processing device In addition to preventing erroneous transmission of data on the same network, it can automatically restart when health is confirmed, supporting plant operation. It can be reduced.

  In the present embodiment, the number of other information processing apparatuses that transfer plant data is two, but the present invention is not limited to this. If the number of other information processing apparatuses that transfer plant data is 1 or more, the same effect can be exhibited. Further, within the scope of the present invention, the present invention can be freely combined with each other, and each embodiment can be appropriately modified or omitted.

22a, 22b, 22c acceleration data determination unit,
23a, 23b, 23c Plant data processing unit,
24a, 24a, 24c function stop processing unit,
25a, 25b, 25c soundness confirmation part,
111a, 111b, 111c acceleration sensor,
131a131b, 131c plant data storage unit,
210a, 210b, 210c, 220a, 220b, 220c, 230a, 230b, 230c Information processing device,
300 controller,
400 network,
510, 520, 530 supervisory control system,
Xa, Xb, Xc Determination standard value

Claims (3)

An acceleration sensor that acquires acceleration data, an acceleration data determination unit that compares a predetermined determination value possessed with acceleration data from the acceleration sensor, a plant data storage unit that stores plant data, and the acceleration data determination unit Each having a plant data processing unit for requesting to transmit the plant data stored in the plant data storage unit to the outside when it is determined that the acceleration data from is greater than or equal to the predetermined determination value, via a network First and second information processing devices that transmit and receive signals to and from each other;
Plant data to be stored in the plant data storage unit of the first or second information processing device based on a request from the plant data processing unit of the first or second information processing device connected to the network And a control device that transfers the data to the plant data storage unit of the second or first information processing device and stores it. A function stop processing unit for stopping the function of each of the first and second information processing apparatuses;
Each of the function stop processing units stores all the plant data stored in the plant data storage unit of the first or second information processing device in the plant data storage unit of the second or first information processing device. After being transferred to and stored in, the second or the first information processing device and the control device are notified of the stoppage of operation, and the function of the first or the second information processing device is stopped. The supervisory control system according to claim 1. A soundness confirmation unit for confirming soundness in each of the first and second information processing apparatuses;
Each of the soundness confirmation units is triggered by a confirmation packet transmitted by the control device 300 that has received a notification to stop operation from the first or second information processing device after a predetermined time has elapsed. 3. The soundness of the first or second information processing apparatus is confirmed, and the operation is resumed when the soundness of the first or second information processing apparatus is confirmed. The monitoring control system described in 1.

Images