JP2018169841A - Control unit, multiplex system, multiplex method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a control unit capable of appropriately performing a recovery operation of an application even when abnormality occurs in the application.SOLUTION: A control unit 10 includes a multiplex control part 12, a screen comparison part 13, an option presenting part 14, and a recovery control part 15. The multiplex control part 12 controls in a manner that identical applications are executed on information processing devices 2A, 2B. The screen comparison part 13 compares whether or not the contents displayed on the screens output in response to inputs to the applications executed on each of the information processing devices 2A, 2B are equivalent. The option presenting part 14 presents, when the contents displayed on the screens are not equivalent, options for recovery processing of the applications to users of the applications. The recovery control part 15 controls the recovery of the applications in accordance with the option selected by the users responding to the presentation of the options.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a control device, a multiplexing system, a multiplexing method, and a program, and more particularly to a control device, a multiplexing system, a multiplexing method, and a program that control execution of an application.

  When a user uses an application on a computer, redundancy at the user's work file level is generally performed by file backup. However, work histories and the like that are not saved in a file in the application are stored in the memory, and therefore cannot be backed up (duplexed) by a user operation. Therefore, when an abnormality such as a hardware failure, an operating system failure, or an application failure occurs, the work on the application is interrupted, and the user cannot work until the application is restored. Moreover, it takes time for the recovery work. In order to solve such a problem, it is conceivable to multiplex (redundant) applications using a fault tolerant technology.

  In relation to this technology, Patent Document 1 discloses a multiplexing system having a production system for processing an application and a standby system. The multiplexing system according to Patent Document 1 performs operation verification by inputting a request to a production calculation system and a standby calculation system and collating responses from these calculation systems. If the result of the collation is that the responses do not match, it is determined that an abnormality has occurred.

International Publication No. 2012/160690

  As in the technique according to Patent Document 1, if the response of the production system is different from the response of the standby system, it may not be possible to determine which one is correct by simply comparing the responses. . In other words, it can be determined that an abnormality has occurred in the system even when an abnormality has occurred in the standby calculation system, not in the case where an abnormality has occurred in the production system. In such a case, even if the processing executed in the production computing system is taken over by the standby computing system, the problem cannot be solved as a whole system. Therefore, in the technique disclosed in Patent Document 1, there is a possibility that an application return operation cannot be performed appropriately when an application abnormality occurs.

  An object of the present invention is to solve such a problem, and is capable of appropriately performing a return operation of an application even when an abnormality occurs in the application. A system, a multiplexing method, and a program are provided.

  The control apparatus according to the present invention includes a multiplexing control unit that controls a plurality of computers that respectively operate as a production system or a standby system to execute the same application, and the application that is executed by each of the plurality of computers. The comparison means for comparing whether or not the screen display contents output with respect to the input to each other match each other, and when the screen display contents do not match, Presenting means for presenting return processing options, and return control means for controlling return of the application based on a selection made by the user in response to the presenting of the options.

  The multiplexing system according to the present invention includes a plurality of computers that respectively operate as a production system or a standby system, and a control device that controls the plurality of computers, and the control devices are the same among the plurality of computers. The multiplexing control means for controlling the application to be executed and the screen display contents output in response to the input to the application executed on each of the plurality of computers are compared with each other. The presenting means for presenting the options for the return processing of the application to the user of the application when the contents displayed on the screen do not match, and the user according to the presentation of the options. And return control means for controlling return of the application based on the selection.

  In addition, the multiplexing method according to the present invention controls a plurality of computers that respectively operate as a production system or a standby system to execute the same application, and applies to the application that is executed by each of the plurality of computers. The screen display contents output in response to the input are compared with each other, and if the screen display contents do not match, the application user is given an option for the return processing of the application. Presenting and controlling the return of the application based on a selection made by the user in response to the presentation of the option.

  The program according to the present invention includes a step of controlling a plurality of computers that operate as a production system or a standby system to execute the same application, and a program for executing the application to each of the plurality of computers. The step of comparing whether or not the screen display contents output in response to the input match each other, and if the screen display contents do not match, the user of the application The step of presenting the option and the step of controlling the return of the application based on the selection made by the user in response to the presenting of the option are executed by a computer other than the plurality of computers.

  According to the present invention, it is possible to provide a control device, a multiplexing system, a multiplexing method, and a program that can appropriately perform a return operation of an application even when an abnormality occurs in the application.

It is a figure which shows the outline | summary of the multiplexing system concerning embodiment of this invention. 1 is a diagram showing a multiplexing system according to a first exemplary embodiment. 1 is a diagram illustrating a configuration of a control device according to a first embodiment. 3 is a flowchart showing a multiplexing method performed by the multiplexing system according to the first exemplary embodiment; 3 is a flowchart showing a multiplexing method performed by the multiplexing system according to the first exemplary embodiment; 1 is a diagram illustrating a multiplexing system subjected to a multiplexing process according to a first embodiment; It is a figure which illustrates the option display screen displayed on the input-output part of a control apparatus by the process of the option presentation part concerning Embodiment 1. FIG. It is a figure which shows the multiplexing system concerning Embodiment 2. FIG. 6 is a flowchart showing a multiplexing method performed by the multiplexing system according to the second exemplary embodiment; 6 is a flowchart showing a multiplexing method performed by the multiplexing system according to the second exemplary embodiment; It is a figure which shows the multiplexing system by which the multiplexing process concerning Embodiment 2 was made | formed.

(Outline of the embodiment of the present invention)
Prior to the description of the embodiment of the present invention, an outline of the embodiment according to the present invention will be described. FIG. 1 is a diagram showing an overview of a multiplexing system 1 according to an embodiment of the present invention.

  The multiplexing system 1 includes a plurality of information processing devices 2A and 2B and a control device 10. The control device 10, the information processing device 2A, and the information processing device 2B are communicably connected to each other via a wired or wireless network 4. The control device 10 and the information processing device 2 are computers having a processor, a memory, a communication device, and the like. The information processing apparatuses 2A and 2B are computers that respectively operate as a production system or a standby system.

  Although FIG. 1 shows an example in which the multiplexing system 1 includes two information processing devices 2A and 2B, the number of information processing devices 2 (2A and 2B) is arbitrary. Note that the information processing apparatus 2A and the information processing apparatus 2B do not need to be physically separate components. Furthermore, the information processing apparatus 2A and the information processing apparatus 2B may be computers that are logically realized separately on one piece of hardware such as a virtual machine. That is, the information processing apparatus 2 does not need to be configured by hardware, and may be a logical component.

  The control device 10 includes a multiplexing control unit 12, a screen comparison unit 13, an option presentation unit 14, and a return control unit 15. The multiplexing control unit 12 has a function as multiplexing control means for controlling the information processing apparatuses 2A and 2B to execute the same application. The screen comparison unit 13 has a function as a comparison unit that compares whether or not screen display contents output in response to input to an application executed in each of the information processing apparatuses 2A and 2B match each other. .

  The option presenting unit 14 has a function as a presenting unit that presents an application return processing option to the application user when the screen display contents do not match. The return control unit 15 has a function as return control means for controlling the return of the application based on the selection made by the user in response to the presentation of the option.

  Since the multiplexing system 1 according to the present embodiment is configured as described above, when an abnormality occurs in which screen display contents relating to applications executed on a plurality of computers do not match each other, the user's A return operation according to the selection can be performed. Therefore, the multiplexing system 1 according to the present embodiment can appropriately perform the return operation of the application even when an abnormality occurs in the application. Even if the control device 10 and the multiplexing method executed by the control device 10 are used or an abnormality occurs in the application, it is possible to appropriately perform the return operation of the application.

(Embodiment 1)
Hereinafter, embodiments will be described with reference to the drawings. For clarity of explanation, the following description and drawings are omitted and simplified as appropriate. Moreover, in each drawing, the same code | symbol is attached | subjected to the same element and duplication description is abbreviate | omitted as needed.

First, the first embodiment will be described.
FIG. 2 is a diagram illustrating the multiplexing system 50 according to the first embodiment. The multiplexing system 50 includes a shared disk device 60, a control device 100, an information processing device 200A (information processing device A), and an information processing device 200B (information processing device B). The shared disk device 60, the control device 100, and the information processing devices 200A and 200B are connected to each other via a wired or wireless network 70.

  The shared disk device 60 is shared by the information processing device 200A and the information processing device 200B, and is accessed from the information processing device 200A and the information processing device 200B. The shared disk device 60 stores data from the information processing device 200A and the information processing device 200B. The shared disk device 60 also provides stored data to the information processing device 200A and the information processing device 200B.

  FIG. 3 is a diagram illustrating a configuration of the control device 100 according to the first embodiment. The control device 100 is a computer that operates as a client PC (Personal Computer) that is operated by a user and provides information to the user. The control device 100 includes a processor 101, a memory 102, a disk device 103, a communication device 104, and an input / output unit 106 as hardware.

  The processor 101 is, for example, a CPU (Central Processing Unit). The processor 101 has a function as an arithmetic device that performs control processing, arithmetic processing, and the like. The memory 102 is, for example, a RAM (Random Access Memory). The memory 102 has a function for temporarily storing processing data related to the processing of the processor 101. The disk device 103 is, for example, a hard disk drive (HDD). The disk device 103 stores various programs that can be executed by the processor 101. The communication device 104 is, for example, a network interface card (NIC). The communication device 104 is used to communicate with other nodes such as the information processing device 200 via the network 70.

  The input / output unit 106 has a function as a user interface. The input / output unit 106 is, for example, a display device such as a display and an input device such as a keyboard or a pointing device (for example, a mouse). Alternatively, the input / output unit 106 is, for example, a touch panel in which a display device and an input device are integrated. The input / output unit 106 displays a screen related to the processing of the program executed by the processor 101 and makes it visible to the user. The input / output unit 106 accepts user operations.

  Furthermore, the control device 100 includes a virtual infrastructure client 110 as software. The virtual infrastructure client 110 is stored in the disk device 103 and installed in the control device 100. The virtual infrastructure client 110 will be described later. The virtual infrastructure client 110 may be realized by a VDI (Virtual Desktop Infrastructure).

  The information processing apparatuses 200A and 200B are computers that operate as servers. One of the information processing apparatus 200A and the information processing apparatus 200B can operate as a production (active) server and the other as a standby (standby) server. The information processing device 200A and the information processing device 200B may be physically incorporated in one device or may be physically separate. Hereinafter, when a plurality of components such as the information processing apparatuses 200A and 200B are described without distinction, they may be simply referred to as the information processing apparatus 200 or the like. 2 shows an example in which the multiplexing system 50 includes two information processing devices 200A and 200B, but the number of information processing devices 200 is arbitrary.

  The information processing device 200A and the information processing device 200B have hardware 202A and hardware 202B, respectively. The hardware 202 has substantially the same configuration as the processor 101, the memory 102, the disk device 103, and the communication device 104.

  Further, the information processing apparatus 200A and the information processing apparatus 200B include a hypervisor 210A and a hypervisor 210B, respectively. The hypervisor 210A and the hypervisor 210B are programs stored in the disk devices of the hardware 202A and the hardware 202B, respectively. The hypervisor 210A has a function as a virtualization control unit that performs processing for executing one or more virtual machines (the virtual machine 220A) on one piece of hardware 202A. Similarly, the hypervisor 210B has a function as a virtualization control unit that performs processing for executing one or more virtual machines (the virtual machine 220B illustrated in FIG. 6) on one piece of hardware 202B. The hypervisor 210A and the hypervisor 210B can write data to the shared disk device 60 and read the data stored in the shared disk device 60. The operation of the hypervisor 210 will be described later.

  Similarly to the hardware 202 that is a physical component, the virtual machine 220 includes a virtual processor, a virtual memory, a virtual disk, and a virtual NIC that are logical components. The virtual machine 220 can communicate with the hypervisor 210 using a virtual NIC. In the example illustrated in FIG. 2, the virtual machine 220A is executed in the information processing apparatus 200A, and the virtual machine 220 is not executed in the information processing apparatus 200B. The virtual machine 220A is installed in the hypervisor 210.

  A guest OS 230A is installed in the virtual machine 220A. The guest OS 230A is an OS (virtual OS) that runs on the virtual machine 220A. The guest OS 230A includes a GUI (Graphical User Interface) that provides a visual interface to the user of the control device 100. The guest OS 230A is installed with an application 240A used by the user using the control device 100. In addition, a VM (Virtual Machine) tool 250A is installed in the guest OS 230A. Note that data for configuring the virtual machine 220A, the guest OS 230A, and the application 240A is stored in a disk device of the hardware 202A. The virtual machine 220B described later is the same as the virtual machine 220A described above.

  The control device 100 transmits an instruction for management to the hypervisor 210 by the function of the virtual infrastructure client 110. Instructions for this management are creation of the virtual machine 220, startup of the virtual machine 220, shutdown of the guest OS 230, restart of the guest OS 230, creation and deployment of a template of the virtual machine 220, installation of the VM tool 250, and hypervisor Including 210 restarts. When the hypervisor 210 receives each instruction, the hypervisor 210 performs processing according to the instruction.

  In addition, the virtual infrastructure client 110 causes the input / output unit 106 to display screen display contents related to the guest OS 230 executed on the hypervisor 210. As a result, the user can visually confirm the screen display content related to the guest OS 230 displayed on the input / output unit 106. Therefore, the user can visually confirm the screen display content of the application 240 using the input / output unit 106. Furthermore, the user can also perform input using a pointing device such as a mouse or a touch panel, a keyboard, or the like via a GUI implemented in the guest OS 230.

  When each hypervisor 210 receives an instruction to generate a template of the virtual machine 220, the template 62 includes the guest OS 230, the VM tool 250, and the application 240 on the virtual machine 220 with reference to the specified virtual machine 220. Is generated. Then, the hypervisor 210 stores the generated template 62 in a designated area on the shared disk device 60. The function of the VM tool 250 will be described later.

  When each hypervisor 210 receives an instruction to expand the template of the virtual machine 220, each hypervisor 210 refers to the specified template and generates a copy of the original virtual machine 220. By storing the template in a disk area on the shared disk device 60 that can be referenced from each hypervisor 210, a replica of the virtual machine 220 can be generated on another hypervisor 210. For example, the hypervisor 210B can expand the template 62 and generate a copy of the virtual machine 220A (virtual machine 220B).

  Each hypervisor 210 has a function of installing the VM tool 250 in the guest OS 230 when receiving an instruction to install the VM tool 250. The hypervisor 210 communicates with the VM tool 250 and has a function of starting and ending the application 240 to be protected. Here, the “application to be protected” refers to an application that should prevent data destruction and inability to continue the application even if there is some abnormality in the system (such as the information processing apparatus 200) that executes the application. That means. In this embodiment, the application can be protected by application redundancy.

  Further, each hypervisor 210 receives a notification indicating that the activation of the guest OS 230 has been completed from the VM tool 250, and that the activation of the guest OS 230 has been completed for the virtual infrastructure client 110 of the control device 100 in response to this notification. It has the function to transmit the notification which shows. Each hypervisor 210 has a function of acquiring information indicating the window range of the application 240 to be protected via the VM tool 250 and transmitting the information to the virtual infrastructure client 110 of the control device 100. . Each hypervisor 210 has a function of acquiring the application environment of the application 240 to be protected from the guest OS 230 via the VM tool 250 and replicating the environment to the other guest OS 230 via the VM tool 250. .

  The application 240A is encapsulated by the guest OS 230A. Therefore, even when the execution environment (application environment) of the application 240A such as binary data, use library, setting file, use file (work file) regarding the application 240A is changed, the application 240A (execution environment) is easy. Can be copied to another guest OS 230. When using the application 240A, the user opens a work file on the application 240A, inputs to the application 240A using a GUI or a keyboard, and saves the work file. The application 240A transmits a response including specific screen display contents in response to the user input. Here, the application 240 according to the present embodiment is preferably a screen display that changes regardless of the input contents of the user, such as an application whose screen display is changed by a random number or system time, a server / client type application, or the like. It is not an application that does.

  The VM tool 250 has a function of starting or terminating the protection target application 240 registered in itself according to an instruction from the hypervisor 210. The VM tool 250 has a function of notifying the hypervisor 210 that the activation of the guest OS 230 in which the VM tool 250 is installed has been completed. The guest OS 230 also has information (window range information) indicating the window range in which the screen display content of the running application 240 is displayed. The VM tool 250 has a function of acquiring this window range information from the guest OS 230 and transmitting it to the hypervisor 210.

  Further, the VM tool 250 has an interface for designating the location of the activation file of the application 240 to be protected to the VM tool 250 when the user starts protection of the application 240. Further, the VM tool 250 has a function of acquiring the execution environment (application environment) of the application 240 to be protected from the guest OS 230 and transmitting it to the hypervisor 210. Further, the VM tool 250 has a function of copying and reflecting the application environment of the protection target application 240 received from the hypervisor 210 to the guest OS 230 in which the VM tool 250 is installed.

  The virtual infrastructure client 110 includes a multiplexing control unit 112, an input transmission unit 120, a screen comparison unit 130, an option presentation unit 140, and a return control unit 150. The multiplexing control unit 112 includes a production system setting unit 114 and a multiplexing processing unit 116. The return control unit 150 includes a production system selection unit 152 and an environment replication unit 154. The multiplexing control unit 112, the screen comparison unit 130, the option presentation unit 140, and the return control unit 150 are respectively the multiplexing control unit 12, the screen comparison unit 13, the option presentation unit 14, and the return control illustrated in FIG. This corresponds to part 15.

  The multiplexing control unit 112 has a function of instructing the hypervisor 210 to install the VM tool 250 in the guest OS 230. Further, the multiplexing control unit 112 has a function for causing the user to designate the application 240 to be protected via the VM tool 250. Further, the multiplexing control unit 112 has a function of setting the protection target application 240, the guest OS 230 in which the application 240 operates, and the hypervisor 210 (and the information processing apparatus 200) that executes the application 240 as the production system. . Also, the multiplexing control unit 112 sets the application 240 to be set as the standby system, the guest OS 230 that the application 240 starts up, and the hypervisor 210 (and the information processing apparatus 200) that starts up the application 240 as the standby system. It has a function. Thereby, the multiplexing control unit 112 has a function as a multiplexing control unit that controls the information processing apparatuses 200A and 200B, which are a plurality of computers that respectively operate as a production system or a standby system, to execute the same application. .

  The input transmission unit 120 receives an input to the application 240 from the user. Then, the input transmission unit 120 transmits the input to the production and standby hypervisors 210 simultaneously. The input transmission unit 120 executes a ping command for the hypervisor 210 that does not respond to the input. In addition, the input transmission unit 120 has a function of notifying the user of the input status in the hypervisor 210 using the input / output unit 106 and presenting corresponding options. Furthermore, the input transmission unit 120 has a function of performing processing according to each option.

  The screen comparison unit 130 acquires the window range information of the application 240 to be protected from each of the production and standby hypervisors 210. Then, the screen comparison unit 130 compares the screen display contents of the production application 240 with the screen display contents of the standby application 240 and determines whether or not they match each other. Thereby, the screen comparison unit 130 determines whether or not the screen display contents output for the inputs to the applications 240A and 240B executed by the information processing apparatuses 200A and 200B, which are a plurality of computers, match. It has a function as a comparison means for comparing.

  When the screen display content of the production application 240 does not match the screen display content of the standby application 240, the option presentation unit 140 notifies the user using the input / output unit 106. Further, the option presenting unit 140 presents options for the return process (recovery process) of the application 240 to be protected. The option presentation unit 140 has a function of presenting the latest screen display contents of the production application 240 and the standby application 240 to the user. The latest screen display content may be presented regardless of whether the screen display content of the production application 240 matches the screen display content of the standby application 240 or not. The option presentation unit 140 has a function as a presentation unit that presents the user of the application 240 with a return processing option of the application 240 when the screen display contents do not match.

  The return control unit 150 has a function of performing return processing according to each option presented by the option presenting unit 140. Further, the return control unit 150 has a function of instructing the hypervisor 210 to copy the application environment of the application 240 to be protected to another guest OS 230. The return control unit 150 has a function as a return control unit that controls the return of the application 240 based on the selection made by the user in response to the presentation of the option.

  4 and 5 are flowcharts illustrating a multiplexing method performed by the multiplexing system 50 according to the first embodiment. The processes shown in FIGS. 4 and 5 can be performed mainly by the control device 100 (virtual infrastructure client 110). 4 and 5, the application 240A (APP_A) is the protection target.

  The VM tool 250 is installed in the guest OS 230A on which the application 240A runs (step S102). Specifically, the multiplexing control unit 112 of the virtual infrastructure client 110 instructs the hypervisor 210A that executes the application 240A to install the VM tool 250A in the guest OS 230A. In response to this instruction, the hypervisor 210A installs the VM tool 250A in the guest OS 230A in which the application 240A operates.

  The virtual infrastructure client 110 sets the production system (step S104). Specifically, the production system setting unit 114 of the multiplexing control unit 112 sets the application 240A to be protected as the production application 240. Further, the production system setting unit 114 configures the guest OS 230A and the virtual machine 220A in which the protection target application 240A operates as the production system guest OS 230 and the virtual machine 220, respectively. Further, the production system setting unit 114 sets the hypervisor 210A that executes the protected application 240A as the production system hypervisor 210, and sets the information processing apparatus 200A as the production system information processing apparatus 200.

  On the other hand, the production system setting unit 114 sets the hypervisor 210B executed by another information processing apparatus 200B different from the information processing apparatus 200A that is the production system, as the standby hypervisor 210. The production system setting unit 114 may set the information processing apparatus 200B as the standby information processing apparatus 200.

  The multiplexing system 50 performs a multiplexing process (step S106). FIG. 6 is a diagram illustrating a multiplexing system 50 subjected to multiplexing processing according to the first embodiment. The multiplexing processing unit 116 of the virtual infrastructure client 110 instructs the hypervisor 210A to generate the template 62. In response to this instruction, the hypervisor 210A shuts down the guest OS 230A and generates the template 62 from the virtual machine 220A. The hypervisor 210A stores the generated template 62 in a specified area on the shared disk device 60.

  The multiplexing processing unit 116 instructs the hypervisor 210B to deploy the template 62 corresponding to the virtual machine 220A stored in the shared disk device 60. In response to this instruction, the hypervisor 210B generates a virtual machine 220B that is a copy of the virtual machine 220A from the template 62. The hypervisor 210B generates a guest OS 230B that is a copy of the guest OS 230A. The hypervisor 210B generates an application 240B that is a copy of the application 240A. Further, the hypervisor 210B generates a VM tool 250B that is a copy of the VM tool 250A. Then, the multiplexing control unit 112 (production system setting unit 114) sets the virtual machine 220B as the standby virtual machine 220, sets the guest OS 230B as the standby guest OS 230, and sets the application 240B as the standby application 240. And set. In this way, a standby system is generated as shown in FIG.

  Next, the multiplexing system 50 performs the activation process of the application 240 (step S108). Specifically, the multiplexing control unit 112 of the virtual infrastructure client 110 instructs the hypervisor 210A and the hypervisor 210B to start the application 240A and the application 240B, respectively. In response to this instruction, the hypervisor 210A and the hypervisor 210B activate the virtual machine 220A and the virtual machine 220B, respectively. The virtual machine 220A and the virtual machine 220B start the guest OS 230A and the guest OS 230B, respectively.

  The hypervisor 210A activates the application 240A via the VM tool 250A after receiving a notification indicating that the activation of the guest OS 230A is completed from the VM tool 250A. Similarly, after receiving a notification indicating that the activation of the guest OS 230B is completed from the VM tool 250B, the hypervisor 210B activates the application 240B via the VM tool 250B.

  Note that the virtual infrastructure client 110 may determine that both the application 240A and the application 240B have completed activation after waiting for a preset standby time Tappwt. Therefore, the standby time Tappwt is sufficiently longer than the actual activation completion time of the application 240A and the application 240B. At this time, the virtual infrastructure client 110 acquires the window range information of the application 240A and the application 240B, and performs the process described later.

  The virtual infrastructure client 110 determines whether or not there is an input from the user for the application 240A (step S110). When there is an input from the user (YES in S110), the input transmission unit 120 transmits the input content to the hypervisor 210A and the hypervisor 210B at the same time (step S112). Upon receiving the transmitted input content, the hypervisor 210A and the hypervisor 210B input and reflect the input content in the application 240A and the application 240B, respectively. Accordingly, the application 240A and the application 240B can perform an operation according to the input content if no abnormality occurs in the system.

  At this time, upon receiving the transmitted input content, the hypervisor 210A and the hypervisor 210B return a response indicating that the input content has been received to the virtual infrastructure client 110. When the response time of the hypervisor 210A and the hypervisor 210B exceeds the response waiting time Trwt set in advance by the virtual infrastructure client 110, the input transmission unit 120 executes the ping command for the hypervisor 210 that does not respond to the input. To do. When it is confirmed that there is no response from the hypervisor 210, the input transmission unit 120 notifies the user that “there is no response to the input to the corresponding hypervisor and no ping response”. If there is a ping response to the ping command, the input transmission unit 120 notifies the user that “the corresponding hypervisor has a ping response but the input processing is delayed”, and “waits for response” or “ The option “Do not wait for response” is presented to the user. When the user selects “wait for response” using the input / output unit 106, the input transmission unit 120 of the virtual infrastructure client 110 again waits for a response to the input for the response waiting time Trwt.

  The screen comparison unit 130 of the virtual infrastructure client 110 compares whether the screen display contents output for the input to the applications 240A and 240B match (step S120). Specifically, the screen comparison unit 130 waits for a waiting time Tuiut preset in the virtual infrastructure client 110 after input to the application 240A. Then, the screen comparison unit 130 compares the screen display contents of the window ranges of the latest application 240A and application 240B after waiting. Note that the screen comparison unit 130 does not have to compare the entire range of the screen display content of the application 240. For example, the screen comparison unit 130 may compare only display contents that have changed within a certain period of time.

  If the screen display contents match (YES in step S130), the process returns to S110, and the screen comparison unit 130 waits until the next input is received. Then, when there is a next input, the screen comparison unit 130 again waits for the waiting time Tuiwt, and then compares the screen display contents of the application 240A and the application 240B. When the next input is made while waiting for the waiting time Tuiwt, the virtual infrastructure client 110 resets the counter of the waiting time Tuiwt and performs re-counting.

  On the other hand, when the screen display contents do not match (NO in S130), the screen comparison unit 130 performs recomparison processing N times (step S132). N is a predetermined integer of 1 or more. Specifically, when the screen comparison unit 130 has not compared the screen display contents N times (NO in S132), the screen comparison unit 130 returns to the process of S120, waits for the waiting time Tuiwt, and then displays the screens of the applications 240A and 240B. Compare the contents again. If an input is made during the re-comparison process, the process returns to S120, and the screen comparison unit 130 compares the screen display contents for the input.

  If the screen display contents do not match even after the recomparison processing is performed N times (YES in S132), the option presenting unit 140 uses the input / output unit 106 to notify the user that the screen display contents do not match and Options for return processing are presented (step S140). At that time, the option presentation unit 140 uses the input / output unit 106 to present the screen display content of the application 240A and the screen display content of the application 240B to the user. The option presentation unit 140 causes the input / output unit 106 to display an option display screen 80 illustrated in FIG.

  FIG. 7 is a diagram illustrating an option display screen 80 displayed on the input / output unit 106 of the control device 100 by the process of the option presenting unit 140 according to the first embodiment. The option display screen 80 illustrated in FIG. 7 includes a screen display content 82A of the information processing apparatus 200A (application 240A) and a screen display content 82B of the information processing apparatus 200B (application 240B). The option display screen 80 includes option # 1 to option # 5.

  Option # 1 is “Ignore the notification and continue as it is”. Option # 2 is “Restart application (APP) because both results are incorrect”. Option # 3 is “restart the guest OS because both results are incorrect”. Option # 4 is “Restart hypervisor (HPV) because both results are incorrect”. Option # 5 is “return processing is performed assuming that any result is correct”.

  The user can select any one of option # 1 to option # 5 while viewing the screen display content 82A and the screen display content 82B. The option display screen 80 can be realized by a GUI, for example. For example, when the input / output unit 106 is a touch panel, the selection operation can be performed by the user touching any one of the options # 1 to # 5.

  If option # 1 “Ignore notification and continue as it is” is selected by the user (YES in step S142), the process returns to S132. When the user selects option # 2 “Restart the application because both results are incorrect” (YES in step S144), the return control unit 150 applies the application 240A to the hypervisor 210A and the hypervisor 210B, respectively. And instructing the application 240B to restart (step S145). Thereby, the hypervisor 210A and the hypervisor 210B restart the application 240A and the application 240B, respectively. Then, the process returns to S110.

  When the user selects option # 3 “restart the guest OS because both results are incorrect” (YES in step S146), the return control unit 150 instructs the hypervisor 210A and the hypervisor 210B to An instruction is given to restart the OS 230A and the guest OS 230B (step S147). Thereby, the hypervisor 210A and the hypervisor 210B restart the guest OS 230A and the guest OS 230B, respectively. Thereafter, the hypervisor 210A and the hypervisor 210B start the application 240A and the application 240B, respectively. Then, the process returns to S110.

  When the user selects option # 4 “restart both hypervisors because both results are incorrect” (YES in step S148), the return control unit 150 restarts the hypervisor 210A and the hypervisor 210B. Is instructed to do so (step S149). Thereby, the hypervisor 210A and the hypervisor 210B restart themselves. Thereafter, the hypervisor 210A and the hypervisor 210B restart the guest OS 230A and the guest OS 230B, respectively. Furthermore, the hypervisor 210A and the hypervisor 210B activate the application 240A and the application 240B, respectively. Then, the process returns to S110.

  When the user selects option # 5 “Perform return processing with any result correct” (YES in step S150), the return control unit 150 presents the selection of the production system to the user (step S152). ). Specifically, the production system selection unit 152 uses the input / output unit 106 to present to the user a selection screen for selecting which of the application 240A and the application 240B is the production system. The user can visually recognize the screen display content 82A and the screen display content 82B and select the application 240 corresponding to the correct screen display content. For example, by blinking the screen display content 82A and the screen display content 82B on the option display screen 80, it can be prompted to select one. Thus, by presenting the screen display content 82A and the screen display content 82B to the user, the user can easily determine which is normal (or neither is normal).

  Then, the production system selection unit 152 sets the application 240 selected by the user as the production system application 240 (step S154). Thereby, the computer (the information processing apparatus 200 or the virtual machine 220) running the application 240 that the user determines to be normal can be appropriately set as the production system. On the other hand, the production system selection unit 152 instructs the hypervisor 210 that executes the application 240 to end the application 240 that has not been selected by the user (step S156). In response to this instruction, the hypervisor 210 terminates the application 240. Thereby, the abnormal application 240 can be appropriately terminated. Then, the production system selection unit 152 sets the guest OS 230 on which the unselected application 240 operates as a new standby system.

  The environment copying unit 154 of the return control unit 150 instructs the user to save the work file with the set production application 240 (step S158). For example, the environment copying unit 154 may display a screen (a pop-up screen or the like) that prompts the production application 240 to save the work file using the input / output unit 106. When the user saves the work file in response to this instruction, the environment duplicating unit 154 instructs the hypervisor 210 to terminate the production application 240. In response to this instruction, the hypervisor 210 terminates the production application 240.

  Then, the environment duplicating unit 154 duplicates the newly set execution environment of the production application 240 to the newly set standby guest OS 230 (step S160). In this way, by copying the normal production application 240 to the standby system, the protection target application 240 can be made redundant. Therefore, the application 240 to be protected can be appropriately protected.

  Note that, since the multiplexing system 50 in the present embodiment is configured by the virtual machine 220, the execution environment of the application 240 can be encapsulated as described above. Therefore, the environment copying unit 154 can easily copy the execution environment of the production application 240. In other words, when the computer is realized by the virtual machine 220, it is possible to easily make the same environment in the production system and the standby system.

  Then, the return control unit 150 instructs the hypervisor 210 to start the production application 240 and the standby application 240 (step S162). In response to this instruction, the hypervisor 210 that executes the production application 240 activates the production application 240. In addition, the hypervisor 210 that executes the standby guest OS 230 activates the standby application 240. Then, the process returns to S110.

  For example, an example in which the user selects the application 240B as the production system according to the processing of S152 will be described. At this time, the hypervisor 210A terminates the application 240A that has not been selected. Then, the guest OS 230A is set as a new standby system. Further, after the user saves the work file with the application 240B newly set as the production system, the hypervisor 210B ends the application 240B. Then, the environment duplicating unit 154 duplicates the newly set execution environment of the production application 240B to the newly set standby guest OS 230A. Thereafter, the hypervisor 210B activates the newly set production application 240B. In addition, the hypervisor 210A activates the newly set standby application 240A.

  As described above, the multiplexing system 50 according to the present embodiment provides the user with the application 240 when an abnormality occurs in which the screen display contents of the applications 240 executed on a plurality of computers do not match each other. It is configured to present options for return processing. Thereby, the multiplexing system 50 according to the present embodiment can perform the return operation of the application 240 according to the user's selection. Therefore, the multiplexing system 50 according to the present embodiment can appropriately perform the return operation of the application according to the user's selection even when an abnormality occurs in the application.

  In the fault-tolerant technique described above, it is necessary to strictly synchronize application processing between the production system and the standby system. However, complicated processing or configuration may be required to perform exact synchronization. Therefore, with the fault-tolerant technology described above, there is a possibility that the application return operation cannot be easily performed when an application abnormality occurs.

  On the other hand, in the multiplexing system 50 according to the present embodiment, it is only necessary for the user to be able to compare the contents displayed on the screen. Therefore, the multiplexing system 50 according to the present embodiment can easily perform an application return operation when an application abnormality occurs, as compared with the fault-tolerant technique described above.

  Note that even if the application 240 is operating normally in response to an input by the user, a screen display delay in one application 240 (information processing apparatus 200) may occur depending on the specifications of the application 240. Specifically, a delay due to disk I / O in the application 240 or a delay due to CPU bound processing of the application 240 may occur. In order to deal with such a delay, the following processing may be performed.

  The virtual infrastructure client 110 determines that the application 240 is in a CPU bound state when the CPU usage rate related to the application 240 exceeds a threshold set by the user. Then, the virtual infrastructure client 110 does not perform the comparison processing of the screen display content, assuming that the processing of the application 240 is normally performed while the CPU bound time does not exceed the time set by the user. It may be. Further, the virtual infrastructure client 110 may compare the screen display contents when the CPU bound time exceeds the set time for both the production system and the standby system application 240.

  Further, the virtual infrastructure client 110 may not perform the screen display content comparison process while the application 240 performs the file read / write process. Specifically, the hypervisor 210 does not perform screen display content comparison processing for the virtual infrastructure client 110 from when the OS (guest OS 230) is called for file read / write until the file read / write is completed. You may notify as follows. Then, the hypervisor 210 may notify the virtual infrastructure client 110 when the reading / writing of the file is completed. Then, the virtual infrastructure client 110 may perform screen display content comparison processing when the reading and writing of the file are completed in both the production system and standby system applications 240. In consideration of the fact that file read / write processing is not completed due to a system error, a waiting time threshold may be set.

(Embodiment 2)
Next, a second embodiment will be described. The second embodiment is different from the first embodiment in that a plurality of applications 240 can be executed by one information processing apparatus 200. In other respects, the second embodiment is substantially the same as the first embodiment. The description of the structure and function of similar constituent elements of the constituent elements according to the first embodiment will be omitted as appropriate.

  FIG. 8 is a diagram illustrating a multiplexing system 50 according to the second embodiment. The multiplexing system 50 includes a control device 100 and one information processing device 200. Unlike the multiplexing system 50 according to the first embodiment, the multiplexing system 50 according to the second embodiment does not have a shared disk device. The control device 100 and the information processing device 200 are connected to each other via the network 70.

  The information processing apparatus 200 includes hardware 202 and one hypervisor 210. The hypervisor 210 performs processing for executing a plurality of virtual machines 220 on one piece of hardware 202. One of the executed virtual machines 220 operates as a real virtual machine (computer), and the other virtual machine 220 operates as a standby virtual machine (computer).

  In the example illustrated in FIG. 8, the virtual machine 220 </ b> A is executed in the hypervisor 210. A guest OS 230A is installed in the virtual machine 220A. An application 240A is installed in the guest OS 230A. A VM tool 250A is installed in the guest OS 230A. Data for configuring the virtual machine 220A, the guest OS 230A, and the application 240A is stored in a disk device of the hardware 202. The hypervisor 210 according to the second embodiment stores the generated template 62 in itself.

  The control device 100 transmits an instruction for management to the hypervisor 210 by the function of the virtual infrastructure client 110. The control device 100 may have substantially the same components as the control device 100 according to the first embodiment shown in FIG. In the second embodiment, there is one information processing apparatus 200 and one hypervisor 210. Therefore, the virtual infrastructure client 110 according to the second embodiment does not distinguish the information processing apparatus 200 and the hypervisor 210 between the production system and the standby system. That is, the virtual infrastructure client 110 according to the second embodiment does not set the hypervisor 210 as a production system or a standby system.

  FIGS. 9 and 10 are flowcharts illustrating a multiplexing method performed by the multiplexing system 50 according to the second embodiment. Similarly to the flowcharts shown in FIGS. 4 and 5, in FIGS. 9 and 10, the application 240A (APP_A) is a protection target.

  Similar to the processing of S102, the VM tool 250 is installed in the guest OS 230A in which the application 240A runs by the processing of the multiplexing control unit 112 of the virtual infrastructure client 110 (step S202). Next, as in the process of S104, the virtual infrastructure client 110 sets the production system (step S204). Specifically, the production system setting unit 114 sets the application 240A to be protected as the production application 240. Further, the production system setting unit 114 configures the guest OS 230A and the virtual machine 220A in which the protection target application 240A operates as the production system guest OS 230 and the virtual machine 220, respectively. As described above, the production system setting unit 114 does not set the hypervisor 210 that executes the protected application 240A as the production system. At this time, the production system setting unit 114 does not need to set the standby system.

  Similar to the process of S106, the multiplexing system 50 performs the multiplexing process (step S206). FIG. 11 is a diagram illustrating a multiplexing system 50 subjected to multiplexing processing according to the second embodiment. The multiplexing processing unit 116 of the virtual infrastructure client 110 instructs the hypervisor 210 to generate the template 62. In response to this instruction, the hypervisor 210 shuts down the guest OS 230A and generates the template 62 from the virtual machine 220A. The hypervisor 210 stores the generated template 62 in itself.

  The multiplexing processing unit 116 instructs the hypervisor 210 to deploy the template 62 corresponding to the virtual machine 220A. In response to this instruction, the hypervisor 210 generates a virtual machine 220B that is a copy of the virtual machine 220A from the template 62. Further, the hypervisor 210 generates a guest OS 230B that is a copy of the guest OS 230A. Further, the hypervisor 210 generates an application 240B that is a copy of the application 240A. Further, the hypervisor 210 generates a VM tool 250B that is a copy of the VM tool 250A. Then, the multiplexing control unit 112 (production system setting unit 114) sets the virtual machine 220B as the standby virtual machine 220, sets the guest OS 230B as the standby guest OS 230, and sets the application 240B as the standby application 240. And set. In this way, a standby system is generated as shown in FIG.

  Next, as in the process of S108, the multiplexing system 50 performs the activation process of the application 240 (step S208). Specifically, the multiplexing control unit 112 of the virtual infrastructure client 110 instructs the hypervisor 210 to start the application 240A and the application 240B. The hypervisor 210 activates the virtual machine 220A and the virtual machine 220B in response to this instruction. The virtual machine 220A and the virtual machine 220B start the guest OS 230A and the guest OS 230B, respectively.

  The hypervisor 210 receives a notification indicating that the activation of the guest OS 230A is completed from the VM tool 250A, and then activates the application 240A via the VM tool 250A. Similarly, after receiving a notification indicating that the activation of the guest OS 230B is completed from the VM tool 250B, the hypervisor 210 activates the application 240B via the VM tool 250B.

  When there is an input from the user to the application 240A (YES in step S210), the input transmission unit 120 transmits the input content to the hypervisor 210 (step S212). When receiving the transmitted input content, the hypervisor 210 inputs and reflects the input content in the application 240A and the application 240B. Accordingly, the application 240A and the application 240B can perform an operation according to the input content if no abnormality occurs in the system.

  Next, similarly to the processing of S120 to S132, the screen comparison unit 130 performs a screen display content comparison process (steps S220 to S232). When the screen display contents of the application 240A and the application 240B do not match (NO in S230 and NO in S232), the option presenting unit 140 performs the option presenting process (step S240) as in the process of S140. Further, similarly to the processes of S142 to S162, the return control unit 150 performs the return process according to the user's selection (steps S242 to S262). Since the processes of S242 to S262 are substantially the same as the processes of S142 to S162, description thereof will be omitted.

  In the restoration process according to the second embodiment, the restoration control unit 150 instructs one hypervisor 210. Then, the hypervisor 210 restarts the application 240A and the application 240B (S245), restarts the guest OS 230A and the guest OS 230B (S247), and restarts itself (S249).

  In the process of S256, the production system selection unit 152 instructs one hypervisor 210 to end the application 240 that has not been selected by the user. In response to this instruction, the hypervisor 210 terminates the application 240 that has not been selected by the user. Then, the production system selection unit 152 sets the guest OS 230 on which the unselected application 240 operates as a new standby system.

  In the process of S262, the return control unit 150 instructs one hypervisor 210 to start the production application 240 and the standby application 240. In response to this instruction, the hypervisor 210 activates the production application 240 on the production guest OS 230. Further, the hypervisor 210 activates the standby application 240 on the standby guest OS 230.

  As described above, even in the multiplexing system 50 according to the second embodiment, when an abnormality occurs in which the screen display contents of the applications 240 executed by the plurality of computers (virtual machines 220) do not match each other, It is configured to present the user with a return processing option of the application 240. Therefore, even in the multiplexing system 50 according to the second embodiment, even when an abnormality occurs in the application, it is possible to appropriately perform the application return operation according to the user's selection. Also in the multiplexing system 50 according to the second embodiment, it is only necessary for the user to be able to compare the screen display contents, and therefore it is not necessary to strictly synchronize the application processing. Therefore, also in the multiplexing system 50 according to the second embodiment, it is possible to easily perform a return operation of an application when an application abnormality occurs, as compared with the fault tolerant technique described above.

  As described above, even when there is not a plurality of hardware 202 like the multiplexing system 50 according to the second embodiment, substantially the same effect as the multiplexing system 50 according to the first embodiment can be obtained. . On the other hand, the multiplexing system 50 according to the first embodiment includes a plurality of hardware 202. In other words, a plurality of computers are mounted on different hardware 202. Therefore, the multiplexing system 50 according to the first embodiment can appropriately cope with even when an abnormality of the application 240 occurs due to the failure of the hardware 202. On the other hand, in the multiplexing system 50 according to the second embodiment, a plurality of computers (virtual machines 220) are mounted on one hardware 202. Therefore, unlike the first embodiment, the multiplexing system 50 according to the second embodiment is difficult to appropriately deal with when an abnormality occurs in the application 240 due to the failure of the hardware 202.

(Modification)
Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention. For example, in the flowcharts described above, the order of each process (step) can be changed as appropriate. One or more of the plurality of processes (steps) may be omitted. Further, the re-comparison process in S132 is not always necessary. In this case, N = 1 is set.

  In the above-described embodiment, the application 240 is executed by the virtual machine 220. However, the configuration is not limited thereto. The hardware 202 (host OS) may directly execute the application 240. On the other hand, as described above, when the application 240 is executed by the virtual machine 220, the execution environment of the application 240 can be easily duplicated.

  Moreover, although the multiplexing system 50 according to the above-described embodiment includes the two computers that execute the application 240, the configuration is not limited thereto. The number of computers that execute the application 240 is arbitrary. On the other hand, when the number of computers is three or more, the fault-tolerant technology described above can determine an abnormal system by majority vote when application responses are different. However, when the number of computers is two, the above-mentioned fault-tolerant technique cannot make a majority decision, so it is difficult to determine an abnormal system. However, in the multiplexing system 50 according to the present embodiment, an abnormal system can be determined without making a majority decision. Therefore, even when the number of computers is two, an abnormal system is appropriately determined. It becomes possible. That is, the multiplexing system 50 according to the present embodiment is particularly effective when the number of computers is two.

  In the above-described embodiment, the guest OS 230 that is newly set as the standby system in the return process is the guest OS 230 on which the application 240 not selected by the user operates. Not limited to. A guest OS 230 that runs the application 240 that is not selected by the user and a guest OS that is different from the new production guest OS 230 may be set as a new standby system. For example, a new virtual machine 220 may be expanded and activated from the template (template 62) of the virtual machine 220, and the guest OS may be set as a new standby system. Alternatively, a guest OS that can be set as a new standby system may be activated in advance separately from the guest OSs 230A and 230B in order to speed up the restoration process.

  In the description of the first embodiment described above, the case where both of the two hardware 202A and 202B fail is not mentioned, but in the present embodiment, both of the two hardware 202A and 202B fail. It is also applicable to cases where In preparation for such a case, three or more pieces of hardware 202 may be mounted, and a guest OS 230 that can be a new standby system may be mounted in advance on these hardware 202.

  In the above example, the program can be stored and supplied to a computer using various types of non-transitory computer readable media. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W, semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (Random Access Memory)) are included. The program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.
(Appendix 1)
Multiplexing control means for controlling a plurality of computers that respectively operate as a production system or a standby system to execute the same application;
A comparing means for comparing whether or not screen display contents output in response to an input to the application executed in each of the plurality of computers match each other;
Presenting means for presenting options for return processing of the application to the user of the application when the screen display contents do not match,
A control device comprising: return control means for controlling return of the application based on a selection made by a user in response to presentation of the option.
(Appendix 2)
The control device according to claim 1, wherein the presenting unit presents the screen display content regarding each of the plurality of computers to a user.
(Appendix 3)
The control device according to claim 1 or 2, wherein the return control unit newly sets the production computer in accordance with a selection made by the user.
(Appendix 4)
The control device according to claim 3, wherein the return control unit controls the application running on the computer that has not been set as the production system to end.
(Appendix 5)
The return control means sets the computer that is not set as the production system as a standby system, and sets the execution environment of the application executed on the computer set as the production system as the standby system. The control device according to appendix 3 or 4, which is copied to the computer.
(Appendix 6)
The control device according to any one of appendices 1 to 5, wherein the computer is realized by a virtual machine.
(Appendix 7)
The control device according to any one of appendices 1 to 6, wherein the number of the plurality of computers is two.
(Appendix 8)
The control device according to any one of appendices 1 to 7, wherein the plurality of computers are mounted on different hardware.
(Appendix 9)
A plurality of computers each operating as a production system or a standby system;
A control device for controlling the plurality of computers,
The control device includes:
Multiplexing control means for controlling the plurality of computers to execute the same application;
A comparing means for comparing whether or not screen display contents output in response to an input to the application executed in each of the plurality of computers match each other;
Presenting means for presenting options for return processing of the application to the user of the application when the screen display contents do not match,
And a return control means for controlling return of the application based on a selection made by a user in response to presentation of the option.
(Appendix 10)
The multiplexing system according to claim 9, wherein the presenting means presents the screen display contents regarding each of the plurality of computers to a user.
(Appendix 11)
The multiplexing system according to appendix 9 or 10, wherein the return control means newly sets the actual computer in accordance with a selection made by the user.
(Appendix 12)
The multiplexing system according to claim 11, wherein the return control means controls to terminate the application being executed on the computer that has not been set as the production system.
(Appendix 13)
The return control means sets the computer that is not set as the production system as a standby system, and sets the execution environment of the application executed on the computer set as the production system as the standby system. The multiplexing system according to appendix 11 or 12, which is replicated in the computer.
(Appendix 14)
The multiplexing system according to any one of appendices 9 to 13, wherein the computer is realized by a virtual machine.
(Appendix 15)
The multiplexing system according to any one of appendices 9 to 14, wherein the number of the plurality of computers is two.
(Appendix 16)
The multiplexing system according to any one of appendices 9 to 15, wherein the plurality of computers are mounted on different hardware.
(Appendix 17)
Control to run the same application on multiple computers that each operate as a production system or standby system,
Comparing whether the screen display contents output for the input to the application being executed in each of the plurality of computers match each other;
If the screen display content does not match, present the application return processing options to the application user,
A multiplexing method for controlling return of the application based on a selection made by a user in response to presentation of the option.
(Appendix 18)
The multiplexing method according to claim 17, wherein the screen display contents relating to each of the plurality of computers are presented to a user.
(Appendix 19)
The multiplexing method according to appendix 17 or 18, wherein the production computer is newly set according to the selection made by the user.
(Appendix 20)
The multiplexing method according to claim 19, wherein control is performed to terminate the application running on the computer that has not been set as the production system.
(Appendix 21)
The computer that is not set as the production system is set as the standby system, and the execution environment of the application executed on the computer set as the production system is copied to the computer that is set as the standby system. The multiplexing method according to 19 or 20.
(Appendix 22)
Controlling to execute the same application on a plurality of computers that respectively operate as a production system or a standby system;
Comparing whether or not screen display contents output in response to an input to the application being executed in each of the plurality of computers match each other;
Presenting the application return processing options to the application user when the screen display contents do not match;
A program for causing a computer other than the plurality of computers to execute the step of controlling return of the application based on a selection made by a user in response to the presentation of the option.

DESCRIPTION OF SYMBOLS 1 Multiplexing system 2 Information processing apparatus 4 Network 10 Control apparatus 12 Multiplexing control part 13 Screen comparison part 14 Option presentation part 15 Return control part 50 Multiplexing system 60 Shared disk apparatus 62 Template 70 Network 100 Control apparatus 106 Input / output part 110 Virtual infrastructure client 112 Multiplexing control unit 114 Production system setting unit 116 Multiplexing processing unit 120 Input transmission unit 130 Screen comparison unit 140 Option presentation unit 150 Return control unit 152 Production system selection unit 154 Environment replication unit 200 Information processing device 202 Hardware 210 Hypervisor 220 Virtual machine 230 Guest OS
240 Application 250 VM Tool

Claims (10)

Multiplexing control means for controlling a plurality of computers that respectively operate as a production system or a standby system to execute the same application;
A comparing means for comparing whether or not screen display contents output in response to an input to the application executed in each of the plurality of computers match each other;
Presenting means for presenting options for return processing of the application to the user of the application when the screen display contents do not match,
A control device comprising: return control means for controlling return of the application based on a selection made by a user in response to presentation of the option. The control device according to claim 1, wherein the presenting unit presents the screen display contents regarding each of the plurality of computers to a user. 3. The control device according to claim 1, wherein the return control unit newly sets the production computer in accordance with a selection made by the user. The control device according to claim 3, wherein the return control unit performs control so as to end the application executed on the computer that has not been set as the production system. The return control means sets the computer that is not set as the production system as a standby system, and sets the execution environment of the application executed on the computer set as the production system as the standby system. The control device according to claim 3, wherein the control device is copied to the computer. The control device according to claim 1, wherein the computer is realized by a virtual machine. The control apparatus according to claim 1, wherein the number of the plurality of computers is two. A plurality of computers each operating as a production system or a standby system;
A control device for controlling the plurality of computers,
The control device includes:
Multiplexing control means for controlling the plurality of computers to execute the same application;
A comparing means for comparing whether or not screen display contents output in response to an input to the application executed in each of the plurality of computers match each other;
Presenting means for presenting options for return processing of the application to the user of the application when the screen display contents do not match,
And a return control means for controlling return of the application based on a selection made by a user in response to presentation of the option. Control to run the same application on multiple computers that each operate as a production system or standby system,
Comparing whether the screen display contents output for the input to the application being executed in each of the plurality of computers match each other;
If the screen display content does not match, present the application return processing options to the application user,
A multiplexing method for controlling return of the application based on a selection made by a user in response to presentation of the option. Controlling to execute the same application on a plurality of computers that respectively operate as a production system or a standby system;
Comparing whether or not screen display contents output in response to an input to the application being executed in each of the plurality of computers match each other;
Presenting the application return processing options to the application user when the screen display contents do not match;
A program for causing a computer other than the plurality of computers to execute the step of controlling return of the application based on a selection made by a user in response to the presentation of the option.

Images