JP2527964B2 - Backup system initial startup control method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Outline] In a redundant system, an initial start signal is added from an active system to a standby system, and a program type is designated.
A program for reading the specified program from the file memory, transferring it to the main memory, and executing the transferred program. A program for reading data on the main memory of the spare system and sweeping it to a floppy disk, It is possible to arbitrarily select and execute a diagnostic program or the like that searches for a failure point in the standby system.

[Industrial applications]

The present invention relates to a standby system program initial activation control system for diagnosing a standby system in a redundant system.

The failure includes a state of unstable operation and a destructive failure such that the operation does not completely operate, and a diagnosis for finding a part of the unstable operating state before the destructive failure is meaningful. Therefore, in a redundant system, if a failure occurs in the active system, the active system is switched to the standby system, and the existing standby system is switched to the active system, and the newly active system becomes the standby system. It will be necessary to start the diagnostic program of the system that has become defective and pursue the cause of failure and the location of the failure. There is a demand for facilitating the diagnosis of the standby system in such a duplex system.

[Conventional technology]

The conventional duplex system has, for example, the configuration shown in FIG. In the figure, 11-0 and 11-1 are central processing units (CC), 12-0 and 12-1 are file memories (F
M), 13-0, 13-1 is main memory (MM), 14-0, 14-
Reference numeral 1 is an initial program starting circuit (IPL), 15-0 and 15-1 are intersystem communication control units (ISC), and 16-0 and 16-1 are common buses.

When the # 0 system is the active system and the # 1 system is the standby system, the initial activation of the standby system program is as follows: (a) A method of transferring all programs from the active system # 0 to the standby system # 1 and then activating, b) A method in which the standby system # 1 itself transfers all programs from the file memory 12-1 of the standby system # 1 by a start signal from the active system # 0, and the standby system # 1 itself starts when the transfer is completed. Is.

The above-mentioned method (a) uses the central processing unit 11 of the active system # 0.
By the control of -0, the file memory 12-0 of the active system # 0
All programs stored in the standby system # 1 are read out via the inter-system communication control devices 15-0 and 15-1.
Transfer to 13-1. This transfer means transfers a program in the same manner as the well-known DMA (Direct Memory Access) control method, and when the transfer of all programs is completed, it is initialized from the central processing unit 11-0 of the active system # 0. A start signal is applied to the standby system # 1 via the program start circuits 14-0 and 14-1. As a result, the central processing unit 11-1 of the standby system # 1 executes the program written in the main memory 13-1.

The above-mentioned method (b) is the central processing unit of the active system # 0.
An activation signal is applied from 11-0 to the standby system # 1 via the initial program activation circuits 14-0 and 14-1. In the standby system # 1, all programs stored in the file memory 12-1 of the own system are transferred to the main memory 13-1 of the own system by the control of the central processing unit 11-1 by starting the initial program, The central processing unit 11-1 executes the program transferred to the main memory 13-1 by using the transfer end signal of the program as a start signal.

[Problems to be solved by the invention]

The above-mentioned method (a) is applied to the inter-system communication control devices 15-0, 15-
When a failure occurs in No. 1, a large amount of data such as a program cannot be transferred. For example, inter-system communication control device
15-0 and 15-1 have a configuration including a buffer memory for inter-system communication, an address counter, etc. When a failure occurs in the address counter, the first communication unit of 1 to 3 bytes Although it is possible to transfer the data, the contents of the address counter do not change due to the failure, so that the subsequent data cannot be transferred. Further, when the device is in an unstable operation state, by resetting the inter-system communication control device in the unstable operation state, the first 1
Although it is possible to transfer data of one communication unit of about 3 bytes, it is general that the data cannot be transferred thereafter due to unstable operation.

Therefore, since the diagnostic program and the like are a large amount of data, it is practically impossible to transfer them via the intersystem communication control devices 15-0 and 15-1 in which a failure has occurred.

Therefore, the above-mentioned method (a) is applied to the inter-system communication control device 15
If a failure occurs in −0,15-1, a program having a large amount of data cannot be transferred, and therefore there is a drawback in that the backup system # 1 cannot be diagnosed.

Further, in the above method (b), all programs are transferred in the standby system # 1, so that even if a failure occurs in the inter-system communication control devices 15-0, 15-1, the diagnosis of the standby system # 1 etc. However, the program to be activated is fixed as in the case of the method (a).

Therefore, in order to execute only the process of sweeping out the data and the like in the main memory 13-1 of the spare system # 1 to a floppy disk or the like (not shown), a program for that purpose is stored in the file memory 12-1 prior to execution. It is necessary to store it in advance, and if another program is to be executed, it is necessary to change to that program. Therefore, the backup system #
It was not easy to let 1 run an arbitrary program.

An object of the present invention is to arbitrarily select and execute a backup system program.

[Means for solving problems]

The standby system initial activation control system of the present invention stores a plurality of programs in a file memory so that the programs can be easily designated, and will be described with reference to FIG.

Central processing unit (CC) 1-0,1-1, file memory (FM) 2-0,2-1, main memory (MM) 3-0,3-1
And an initial program starting circuit (SIPL) 4-0,4-1,
An inter-system communication control unit (ISC) 5-0, 5-1 is provided, and a central processing unit 1-0, 1- is provided by a common bus 6-0, 6-1.
1, main memory 3-0, 3-1 and inter-system communication controller 5-
In the duplex system including the # 0 system and the # 1 system to which 0 and 5-1 are connected, a plurality of types of programs P1 to Pn are stored in the file memories 2-0 and 2-1.

Then, an initial activation signal is applied from the active system # 0 to the standby system # 1 via the initial program activation circuits 4-0 and 4-1, and by this initial activation signal or the intersystem communication control device 5
The type of the program stored in the file memory 2-1 of the spare system # 1 is designated by the information transferred via −0, 5-1 and the program according to the type designation is transferred from the file memory 2-1. It is transferred to the main memory 3-1 and executed.

[Action]

Since multiple types of programs are stored in the file memory 2-0,2-1, a diagnostic program and a program for sweeping out the data in the main memory 3-0,3-1 are set as separate programs. Can be stored. Then, the active system # 0 is initially activated from the standby system # 1, and the type of the program stored in the file memory is designated.

The type designation of the program can be performed by transferring the type designation information from the active system # 0 to the standby system # 1 in advance or by a start signal corresponding to the type. Therefore, by designating the program type of the standby system # 1 by a command or the like, the program designated by the initial start signal is executed in the standby system # 1, and an arbitrary program can be selected and executed. it can.

〔Example〕

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 2 is an explanatory diagram of an embodiment of the present invention. The same reference numerals as those in FIG. 1 denote the same parts, and 7-0 and 7-1 are FN areas for storing program type designation information, which are the main memory 3 −
The case where it is formed at 0, 3-1 is shown. Reference numeral 8 is an area for storing the program Pi. Further, a plurality of types of programs Pi (i = 1, 2, ... N) are stored in the file memory (FM) 2-0,2-1 composed of a magnetic disk device or the like.

When initializing the standby system program, first, the central processing unit 1-0 of the active system # 0 to the inter-system communication control unit 5-0,
The program type designation information, for example, the program name is written in the FN area 7-1 formed in the main memory 3-1 of the standby system # 1 via 5-1. Then, the central processing unit 1-0 of the active system # 0 uses the initial program starting circuits 4-0,4.
Transfer the initial activation signal via -1. This initial activation signal becomes an interrupt signal to the central processing unit 1-1 of the standby system # 1. In this case, the transfer of the program type designation information can be performed during the normal operation of the inter-system communication control device 5-0, 5-1 before the failure occurs, and even when the failure occurs. As described above, since it is often possible to transfer data of 1 to 3 bytes per communication unit, 1
It is possible to transfer program type designation information of about bytes.

Due to this interrupt, the central processing unit 1-1 reads the contents of the FN area 7-1 of the main memory 3-1, reads the program Pi from the file memory 2-1 according to the program name of the contents, and stores it in the main memory 3-1. Transfer and write to area 8 of main memory 3-1. Then, the central processing unit 1-1 reads out and executes the program Pi written in the area 8.

FIG. 3 is an explanatory diagram of the file memory, and programs 1 to n (P1 to Pn) are associated with program names 1 to n.
Includes a transfer destination address, the number of words, a start address, a program content, etc., and the program having the number of words according to the word number information is transferred to the address of the main memory (MM) according to the transfer destination address. When the transfer of the program is completed, the program is started according to the start address. Further, each program P1 to Pn is, for example, a redundant operation start program,
A program or a diagnostic program for sweeping the stored contents by designating the memory or its area can be used.

FIG. 4 is a schematic flowchart of an embodiment of the present invention, in which the program name for designating the program type is designated by the control of the central processing unit 1-0 of the active system # 0 and the standby system # 1.
In the FN area 7-1, and initial activation is performed for the spare system # 1 (SIPL activation).

The initial start signal becomes an interrupt signal to the central processing unit 1-1 of the standby system # 1, and the central processing unit 1-1 reads the program name from the FN area 7-1 and stores the corresponding program in the file memory (FM ) Read from 2-1 and transfer to main memory (MM) 3-1. Then, the program transferred to the main memory (MM) 3-1 is executed.

Therefore, name the program in advance in the FN area 7 of the standby system # 1.
By writing in -1 and performing initial startup, a desired spare system program can be executed.

FIG. 5 is an explanatory view of another embodiment of the present invention, in which the same reference numerals as those in FIG. 2 indicate the same parts, and 9-0 and 9-1 are intersystem communication control devices (ISC) 5-0 and 5 -1 buffer memory, and an FN area is formed in this buffer memory.

From the central processing unit 1-0 of the active system # 0 to the intersystem communication control unit 5-1 of the standby system # 1 via the intersystem communication control unit 5-0.
The program name of the program type designation information is transferred to. This program name is written in the FN area of the buffer memory 9-1. Then, the central processing unit 1-0 of the active system # 0 sends an initial activation signal to the standby system # 1 via the initial program activation circuit 4-0.

This initial start signal is applied as an interrupt signal to the central processing unit 1-1 via the initial program starting circuit 4-1 of the standby system # 1, and the central processing unit 1-1 is connected to the intersystem communication control unit 5-1. Program name is read from the FN area of the buffer memory 9-1, and the program Pi is read from the file memory 2-1 according to this program name, and the main memory 3
Transfer and write to area 8 of -1. Then, the program Pi written in this area 8 is executed.

FIG. 6 is an explanatory view of still another embodiment of the present invention, in which the same reference numerals as those in FIGS. 2 and 5 indicate the same parts, and 10-0,10
-1 is a buffer memory of an initial program starting circuit (SIPL) 4-0, 4-1 in which an FN area is formed. Further, the initial program start-up circuit 4-0, 4-1 initial start-up signal S1-S
n corresponds to the type of the programs P1 to Pn stored in the file memories (FM) 2-0 and 2-1.

In this embodiment, the standby system program can be initially activated without using the inter-system communication control units 5-0 and 5-1. The program is transmitted from the central processing unit 1-0 of the active system # 0. An initial starting signal Si for designating the type of is transmitted via the initial program starting circuit 4-0. Backup system #
In step 1, the initial program starting circuit 4-1 receives and identifies this initial starting signal Si and writes it in the FN area of the buffer memory 10-1. In this case, the program can be converted into the program name i corresponding to the initial start signal Si and written.

Next, the central processing unit 1-0 of the working system # 0 causes the initial program starting circuit 4-0 to send out a specific initial starting signal, and the initial program starting circuit 4-1 of the standby system # 1 sends the initial starting signal. In addition to the central processing unit 1-1 as an interrupt signal, the central processing unit 1-1 uses the initial program starting circuit 4
-1 buffer memory 10-1 reads the program type designation information such as the initial start signal Si or the program name i from the FN area, and the file memory 2 according to the type designation information.
The program Pi is read from -1 and transferred to the main memory 3-1, the program Pi is written in the area 8, and the program Pi is executed when the transfer is completed.

In this embodiment, the file memory 2 is immediately sent based on the initial start signal Si as the program type designation information.
-1 can be accessed to transfer the designated program Pi to the main memory 3-1. Further, since the program type can be specified through the initial program starting circuit 4-0, 4-1 and the preliminary system program can be initially started, even when the inter-system communication control device 5-0, 5-1 fails. There will be no problems.

〔The invention's effect〕

As described above, according to the present invention, the file memory 2-
A plurality of types of programs P1 to Pn are stored in 0,2-1, a spare system # 1 is started by specifying the program type from the active system # 0, and a program of a specified type such as a diagnostic program in the standby system # 1. The desired standby system program can be initially started only by specifying the type of the standby system program by a command or the like. Therefore, it is not necessary to transfer the diagnostic program or the like from the active system # 0 to the standby system # 1, so that the inter-system communication control device 5-
Even if 0,5-1 fails, the standby system program can be initialized, and it is economical because there is no need to prepare a dedicated circuit for diagnosing the standby system # 1 in the active system # 0. It can be configured. It is also possible to design the program to be executed by the standby system # 1 completely separately from the active system # 0, and the backup system # 1 can be operated during the operation of the active system # 0.
It is possible to add, modify, replace, etc., the program, and there is an advantage that the operation flexibility of the redundant system is increased.

[Brief description of drawings]

1 is an explanatory view of the principle of the present invention, FIG. 2 is an explanatory view of an embodiment of the present invention, FIG. 3 is an explanatory view of a file memory, FIG. 4 is a schematic flowchart of an embodiment of the present invention, and FIG. FIG. 6 is an explanatory view of another embodiment of the present invention, FIG. 6 is an explanatory view of yet another embodiment of the present invention, and FIG. 7 is an explanatory view of a conventional example. 1-0,1-1 is a central processing unit (CC), 2-0,2-1 is a file memory (FM), 3-0,3-1 is a main memory (M
M), 4-0, 4-1 are initial program starting circuits (SIPL),
5-0, 5-1 is an intersystem communication control device (ISC), 6-0, 6-1
Is a common bus, 7-0 and 7-1 are FN areas, 8 is program P
Areas for writing i, 9-0, 9-1, 10-0, 10-1 are buffer memories.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Hideo Tateeda 1015 Kamiodanaka, Nakahara-ku, Kawasaki City, Fujitsu Limited (56) References JP-A-62-104255 (JP, A) JP-A-53-88548 ( JP, A) JP 61-233845 (JP, A)

Claims (3)

(57) [Claims] 1. A central processing unit (1-0,1-1), a file memory (2-0,2-1) storing a program, and transfer from the file memory (2-0,2-1). A main memory (3-0, 3-1) for storing the executed program and an initial program starting circuit (4-0, 4-1), one of which is a current system (# 0) and the other of which is a spare. In the redundant system which becomes the system (# 1), a plurality of types of programs (P1 to Pn) are stored in the file memory (2-0,2-1), and the active system (# 0) to the standby system (# 1) are stored. An initial start signal is added to 1) via the initial program start circuit (4-0, 4-1), and the file memory (2-) of the standby system (# 1) is supplied by the initial start signal or another signal. The type of the program stored in 1) is designated, and the central processing unit (1-1) of the standby system (# 1) is specified. Is
A standby system program initial start-up control method characterized in that a type-specified program is transferred from the file memory (2-1) to the main memory (3-1) and executed. 2. The initial activation signal is added after the program type designation information is transferred from the active system (# 0) to the storage area of the standby system (# 1). Preliminary system program initial activation control method described in the first item of the range. 3. The standby system program initial activation control method according to claim 1, wherein the program type is designated according to the type of the initial activation signal.