JP3162240B2 - System switching synchronizer - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system switching synchronizer for synchronizing the operating and non-operating states of a dual system such as a digital transmission device and a digital exchange and switching the system state with high reliability.

[0002]

2. Description of the Related Art For example, a conventional system switching synchronizer disclosed in Japanese Patent Application Laid-Open No. 63-262936 has a system 100a and another system 100b which operate as a working system and a standby system, respectively, as shown in FIG. Synchronize and switch non-operating system states. The external system switching command unit 200 issues a command 110 for switching between the own system 100a and the other system 100b without duplication. The state determination units 70a and 70b
The exclusive-OR operation is performed on the system switching command 110 from the system and the mounting position information that specifies the system at the voltage level (0 V and 5 V), and the system state of operation and non-operation is determined. The synchronization control units 80a and 80b receive state determination signals 1 from the state determination units 70a and 70b of their own system and the state determination units 70b and 70a of the partner system.
In accordance with 60a and 160b and 160b and 160a, one of the two systems determines an "operating" state and the other determines a "non-operating" system state. During the operation system state, the synchronization signals 170a and 170b are generated and output from the own system to the partner system. In the non-operating state, it is synchronized with the synchronization signals 170b and 170a from the partner system,
Output as timing signals 180a and 180b (clock signal, frame signal, etc.).

The conventional system switching synchronization device employs a system switching synchronization system (single system switching synchronization system) configured to synchronize with a synchronization signal from a partner system without duplicating system switching commands.

[0004]

In the conventional system switching synchronization device as described above, when the system switching command unit which is not duplicated fails or when the system switching command is disconnected, the system switching malfunction is not properly performed. Cannot be processed. When the input system fails, there is a possibility that the system status of operation and non-operation may be erroneously recognized. In the event of a failure in the own system or the partner system, system switching cannot be performed autonomously and quickly. Furthermore, there were many problems in reliability, such as the failure location could not be specified.

The problem to be solved by the present invention is to duplicate the system switching system in order to enable the system switching synchronizer to autonomously and quickly switch the system without error even when a failure occurs and to repair the failure. It is an object of the present invention to provide a system switching synchronization system (combination system switching synchronization system) configured to determine each system state of operation and non-operation by a combination of a system and a partner system.

[0006]

The system switching synchronizer according to the present invention synchronizes and switches between operating and non-operating system states in each of the dual systems, and is provided with the following means to solve the above problems. Also, in order to enable the system to be switched autonomously and quickly without error even when a failure occurs and to recover from the failure, a combination system switching synchronization method is adopted.

[0007] The system monitoring and control unit is duplicated. Monitoring and control of the system is performed based on the monitoring / control information with the status switching unit, and a control command is issued.

[0008] The state switching unit duplicates. The control information is output from the system monitoring control unit in accordance with the state determination signal from the state determination unit, and only when the respective control commands from the system monitoring control unit of the own system and the partner system are mutually collated and matched, the system monitoring control unit Output monitoring information to

The self-system failure processing unit is duplicated. Detects, outputs, and notifies its own system failure information. Alternatively, the own system fault information is detected by the own system and output to the other system, and the own system fault information detected and output by the other system is output to the matching status instructing unit, and the own system fault notification is sent to the status switching unit as monitoring information. I do.

[0010] The partner failure processing unit is duplicated. Detects, outputs, and notifies partner system failure information. Alternatively, the other party's fault information is detected by the own system and output to the other system, and the other party's fault information detected and output by the other system is output to the matching status instructing unit, and the other system fault notification is sent to the status switching unit as monitoring information. I do.

[0011] The status indicating unit is duplicated. The operation and non-operation of each system state instruction are transited by a combination of the state instruction control signal from the state switching unit and the own system and partner system failure signals from the own system and partner system failure processing units.

[0012] The state determination unit duplicates. The combination of the state determination control signal from the state switching unit and each state instruction signal from the redundant state instruction unit makes a transition between operation and non-operation state determination.

[0013] The synchronization control unit performs duplication. In accordance with the state determination signal from the state determination unit, even when the system is in the non-operation state, it is output as a timing signal in synchronization with the timing of the operation state.

The inter-system signal input / output section is duplicated. The input / output of the inter-system signal is buffered, and the output is reset by the output reset signal from the state switching unit. Alternatively, in addition to the above, an input / output buffer fault is detected and an input / output buffer fault notification is sent to the state switching unit as monitoring information.

[0015]

The system switching synchronizer according to the present invention uses the above-mentioned means to first check each control command of the dual system with each other to prevent system switching due to malfunction of the system monitoring and control unit. Next, the operation and non-operation of each system state instruction are transited by the combination of the state instruction control signal and the respective failure signals of the own system and the partner system. When the status indicator fails, the status indicator signal is reset and the system is forcibly switched. When an error occurs in the system switching, the failure signals of the own system and the partner system are ignored, the state instruction signal is determined, and the state is returned to the normal state. In addition, transition of each system state determination between operation and non-operation is made by a combination of a state determination control signal and each state instruction signal of the duplex system for each duplex system. System switching is not performed only by a single failure in the system switching system. One of the duplex systems is active, the other is inactive, and neither is active or inactive. Further, the input is pulled up by the inter-system signal input / output unit, and when a power supply failure, device disconnection, or inter-system disconnection is detected, a failure is detected instantaneously and the system is switched to recover. Or, if I / O buffer failure is detected,
Output as monitoring information. Further, each fault processing unit of the own system and the partner system detects each fault of the dual system and outputs it as monitoring information. When the status of the duplex system is different, specify the fault location.

[0016]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS As shown in FIG. 1, in a system switching synchronizer according to an embodiment of the present invention, an own system 1a and another system 1b are operated and inactive, for example, as a working system and a standby system, respectively. Synchronize and switch. The system monitoring controllers 2a and 2b monitor and control the own system 1a and the other system 1b with the monitoring / control information 10a and 10b between the state switching units 3a and 3b, and issue control commands 11a and 11b. The state switching units 3a and 3b are provided with control commands 12a, 12b and 12 from the system monitoring control units 2a and 2b of the own system and the system monitoring control units 2b and 2a of the partner system.
b and 12a are compared with each other and only when they match, in accordance with the status determination signals 16a and 16b from the status determination units 7a and 7b, the status monitor control units 2a and 2b send the status instruction control signal 01
2a and 012b, state determination control signals 12a and 12b, and output reset signals 19a and 19b are output as control information. Also, the system monitoring control units 2a and 2b notify their own system failure notifications 015a and 015 from their own system failure processing units 4a and 4b.
b, partner failure notification 016a and 016b from partner failure processing units 5a and 5b, state determination signals 16a and 16b from state determination units 7a and 7b, and input / output buffer failure from intersystem signal input / output units 9a and 9b The notifications 20a and 20b are output as monitoring information. Own failure processing units 4a and 4b
Detects the own system fault information by the own systems 1a and 1b and outputs the own system fault signals 13a and 13b for the own system detection, and detects and outputs the own system fault information by the other systems 1b and 1a. Together with the partner failure signals 14b and 14a of the partner detection from the processing units 5a and 5b, they are output as the own-system failure signals 013a and 013b of the own system and the partner detection. Also, it issues its own system failure notifications 015a and 015b. The other party fault processing units 5a and 5b detect the other party fault information in their own systems 1a and 1b, output them as the other party fault signals 14a and 14b of their own detection, and also send the other party fault information to the other systems 1b and 1a. Own system fault signal 13 from the own system fault processing units 4b and 4a for detection and output by
Together with b and 13a, they are output as partner system failure information 014a and 014b for detection of the local system and the partner system. In addition, the other system failure notifications 016a and 016b are sent. Status indication units 6a and 6
b is a state instruction control signal 0 from the state switching units 3a and 3b.
12a and 012b, own-system fault signals 013a and 013b from own-system fault processing units 4a and 4b, and mating-system fault signals 014a and 014 from mating-system fault processing units 5a and 5b.
By the combination of b, the operation and non-operation of each system state instruction is transited,
It is output as state instruction signals 15a and 15b. The state determination units 7a and 7b are provided with state determination control signals 12a and 12b from the state switching units 3a and 3b, and state instruction units 6a and 6 of the own system.
b and the state instruction signals 15b and 15a from the state instruction units 6b and 6a of the partner system.
In the combination of the above, transition of each system state determination between operation and non-operation is performed and output as state determination signals 16a and 16b. In accordance with the state determination signals 16a and 16b from the state determination units 7a and 7b, the synchronization control units 8a and 8b synchronize with the timing of the operating state even when the system is inactive, and the timing signals 18a and 18b
(Clock signal, frame signal, etc.).
The inter-system signal input / output units 9a and 9b are connected to the own system fault processing unit 4a.
Buffering the input / output signals of the partner failure processing units 5a and 5b and the synchronization control units 8a and 8b, and the output signals of the status indicator units 6a and 6b of the own system and the status indicator units 6b and 6a of the partner system, respectively. Ring. State switching unit 3a
And 3b, the output signals are reset by output reset signals 19a and 19b. An input / output buffer fault is detected, and input / output buffer fault notifications 20a and 20b are issued.

The system switching synchronizer according to the above-described embodiment has a dual system switching system for autonomously and quickly switching systems without errors even when a failure occurs and recovering from a failure. Adopts a system switching synchronization system (combination system switching synchronization system) configured to determine each system state of operation and non-operation.

The system monitoring control units 2a and 2b and the state switching units 3a and 3b operate in their own systems 1a and 1b, respectively, not only when the own system 1a and the other system 1b are operating but also when they are not operating. The system is controlled only when the control commands 11a and 11b and 11b and 11a from the system monitoring control units 2a and 2b of the other system and the system monitoring control units 2b and 2a of the partner system match, and an error signal is output when they do not match. I do. It is possible to avoid a malfunction due to a runaway at the time of a failure, and to easily repair by a procedure of replacing a non-operating system and an operating system first.

In the H / W (hardware) uncontrollable mode, as shown in FIG. 2, the status instructing units 6a and 6b forcibly switch the system based on the control information from the status switching units 3a and 3b when a partner system fault is erroneously recognized. The state instruction transits according to the state instruction control signals 012a and 012b from the state switching units 3a and 3b, and is output as the state instruction signals 15a and 15b. In other normal H / W control enabled modes, own-system fault signals 013a and 013b from own-system fault processing units 4a and 4b, respectively.
If the signal logics of the partner failure signals 014a and 014b from the partner failure processing units 5a and 5b are "H" and "L" (when the own system and the partner system are "normal"), the state instruction control signal 012a If the signal logic of only the own system fault signals 013a and 013b is "L" (when only the own system is "fault"), the signal logic is fixed at "H"("non-operating" state) and the other system. If the signal logic of only the fault signals 014a and 014b is "H" (when only the partner system is "fault"), the state instruction is transited to fix the signal logic to "L"("operation" state), and the state instruction signal Output as 15a and 15b.

In the H / W control disabled mode in which the system is forcibly switched at the time of the operation test based on the control information from the state switching units 3a and 3b, as shown in FIG. Determination control signals 12a and 12b from
And the state determination signals 16a and 1
6b. In other normal H / W control enabled modes, the status instruction signals 15a and 1a from the status indicators 6a and 6b of the own system and the status indicators 6b and 6a of the partner system are provided.
5b and the signal logic of 15b and 15a is "L" and "H"
And "H" and "L", the signal logic is "L" and "H"("operating" state and "non-operating" state), and the signal logic of state designating signals 15a and 15b and 15b and 15a is "L". ”And“ L ”and“ H ”and“ H ”, the state determination is transited to“ maintain previous state ”and the state determination signal 1
Output as 6a and 16b. State determination signals 16a and 1
6b does not switch between the active and inactive system states when one of the state instruction signals 16a and 16b of the own system and the state instruction signals 16b and 16a of the partner system malfunction. Switch when both make a state transition. Neither the own system 1a nor the other system 1b becomes an active or inactive system state.

The inter-system signal input / output units 9a and 9b are shown in FIG.
First, the own failure signals 13a and 13b from the own failure processing units 4a and 4b, and the other failure processing units 5a and 5b
b, the other party's failure signals 14a and 14b, and the state indicator 6
a and 6b and the synchronization signals 17a and 17b from the synchronization control units 8a and 8b, the signal input units 91a and 91b and the signal output unit 92a
And 92b buffer the input and output signals, respectively. Next, each signal input / output unit 91 and 92 is shown in FIG.
As shown in (b) and (c), the input / output buffers 911 and 92
1 and I / O buffer failure detection buffers 912 and 92
2 for each input / output buffer failure detection gate 91
Exclusive OR is performed between 3 and 923 to generate input / output buffer fault signals B and C. The resistance 914 of the signal input unit 91
To pull up the input signal, and reset the output signal of the signal output unit 92 by the output reset signal 19 from the state switching unit 3. Further, as shown in FIG. 4A, the input / output buffer fault output gates 93a and 93b are connected to the signal input / output sections 91 and 9 respectively.
Exclusive OR is performed on the input / output buffer fault signals B and C from the input / output buffer fault notifications 20a and 20b.
do.

For example, when the own system 1a is in the "operating" state and the other system 1b is in the "non-operating" system state, if the own system fault processing unit 4a detects the own system fault information generated by the own system 1a, the own system 1a The failure signal 013a becomes [L] and the own failure signal 13a is input to the other failure processing unit 5b, so that the other failure signal 014b becomes [H]. When the own system fault information generated by the own system 1a is detected by the partner system fault processing unit 5b,
The other-system fault signal 014b becomes "H" and the other-system fault signal 14b is input to the own-system fault processing unit 4a, so that the own-system fault signal 013b becomes "L". Therefore, in any case, the state indicating signals 15a and 15
b becomes "H" and "L", and the state determination signals 16a and 16b become "H" and "L" in the combination of FIG.
“a” is “non-operating”, and the other system 1b is switched to “operating”. In addition, the failure of the other party, not the other party,
When the detection is made in b, the own system 1a is switched to the "non-operation" state and the other system 1b is switched to the "operation" state in the same manner as described above. First, for example, the own system 1a is replaced in this state. Actually, failure detection is continued because the cause is the partner system failure processing unit 5b itself. Next, in this state, it is determined that the inter-system wiring and the other system 1b are faulty, and the inter-system wiring is replaced, for example. At this time, FIG.
As shown in (b), the input signal logic of the signal input unit 91 becomes "H" by pull-up, so that the own-system fault signals 013a from the own-system fault processing units 4a and 4b and the other-system fault processing units 5a and 5b are output. 013b and partner failure signal 014
a and 014b are each considered "H". Therefore, in the combination of FIG. 2 and FIG. 3, both the state instruction signals 15a and 15b become “L” and the state determination signal 16b becomes “maintain previous state”.
, You can continue operation without any problems. Furthermore, if the failure detection is continued in the partner failure processing unit 5b, it is determined that the failure is in the other system 1b. At this time, in the H / W control enabled mode as shown in FIG. 2, the own-system fault signals 013a and 013b and the partner-system fault signals 014a and 014b are each "H".
System switching cannot be performed because it is regarded as. Therefore, the state instruction control signals 12a and 12b in the H / W control disable mode are set to [L].
When the power failure occurs in the own system 1a, the input signal logic of the signal input unit 91b from the own system 1a to the other system 1b instantaneously changes to "H". ”, The own system fault signal 013b and the partner system fault signal 0
14b are both considered "H". Therefore, the state determination unit 7
b, the status indication signal 15b of the own system becomes [L] as described above, and the status indication signal 15a of the other system becomes "H" because it is pulled up, and the status determination signal 16b becomes "L". Therefore, the system status of the other system 1b is switched from "non-operation" to "operation". It is very fast because it is determined only by the gate delay time from the time of failure. The same effect can be obtained when a device of the operation system is accidentally disconnected or when the system is disconnected. When the own system failure signal 13a disconnects the system, the own system 1a
Is not detected as a fault in the own system and the other system 1b is detected as a fault in the other system.
Both 5a and 15b are set to "L", and the state determination signals 16a and 16b are both set to "maintain previous state". Therefore, the system state is not switched. Since both systems are about to be in operation, discrepancies between the statuses of the two systems can be detected. The statuses of the two systems are monitored by the system monitoring control units 2a and 2b, and a buffer failure is detected by the inter-system signal input / output units 9a and 9b. Since a function is provided, if a buffer failure has occurred, it can be determined that there is an intersystem disconnection.

In the above-described embodiment, the state determination units 7a and 7b
Only when both the status signals 15a and 15b and the status signals 15b and 15a from the status indicators 6a and 6b of the own system and the status indicators 6b and 6a of the partner system change the status indication,
If the definition is made so that the state determination of the state determination signals 16a and 16b transitions, it goes without saying that the same effect is obtained even if the signal logic is inverted.

In the above embodiment, it is needless to say that the same effect can be obtained even if the signal input unit 91 pulls down the input signal instead of pulling it up and inverts the signal logic.

[0025]

In the system switching synchronization apparatus of the present invention as described above, a combined system switching system in which the system switching system is duplicated and each of the active and inactive system states is determined by a combination of the own system and the other system. Since the synchronization method is adopted, compared to the single system switching synchronization method that synchronizes with the synchronization signal from the partner system without duplicating the system switching command as in the past, autonomous and quick even in the event of a failure, The system can be switched without error and the failure can be repaired.

[Brief description of the drawings]

FIG. 1 is a functional block diagram of a system switching synchronization apparatus according to an embodiment of the present invention.

FIG. 2 is a view for explaining a state transition of a state instruction unit shown in FIG. 1;

FIG. 3 is a view for explaining a state transition of a state determination unit shown in FIG. 1;

FIG. 4 is a functional block diagram of an inter-system signal input / output unit shown in FIG. 1;

FIG. 5 is a functional block diagram of a conventional system switching synchronizer.

[Explanation of symbols]

 1 system 2 system monitoring and control unit 3 state switching unit 4 own system fault processing unit 5 partner system fault processing unit 6 state instructing unit 7 state determining unit 8 synchronization control unit 9 inter-system signal input / output unit 10 monitoring / control information 11 control command 12 State instruction control signal 012 State determination control signal 13 Own system failure signal of own system detection 013 Own system failure signal of own system and partner system detection 14 Partner system failure signal of own system detection 014 Local system and partner system detection of partner system Failure signal 015 Self-system failure notification 016 Other system failure notification 15 State indication signal 16 State determination signal 17 Synchronization signal 18 Timing signal 19 Output reset signal 20 I / O buffer failure notification In the figure, the same reference numerals indicate the same or corresponding parts.

Continuation of the front page (58) Field surveyed (Int.Cl. ⁷ , DB name) H04B 1/74 H04L 1/22 H04L 29/14

Claims (3)

(57) [Claims] A system switching synchronizer for synchronizing and switching between operating and non-operating system states in each of a duplex system. In a system switching synchronizer, system monitoring and control is performed by monitoring / control information with a state switching unit, and a control command is issued. Duplicate system monitoring and control unit, and only when each control command from the system monitoring and control unit of the own system and the partner system match and match each other, according to the state determination signal from the state determination unit, from the system monitoring and control unit A redundant state switching unit that outputs control information and outputs monitoring information to the system monitoring control unit, a redundant own system failure processing unit that detects, outputs, and notifies the own system failure information,
A redundant counterpart fault processing unit for detecting, outputting and notifying the counterpart fault information; a state instruction control signal from the state switching unit; and a self-partner and counterpart fault signal from the self-system and the counterpart fault processing unit. In combination with, a duplicated state instruction unit that transitions between the active and inactive system state instructions, and a combination of a state determination control signal from the state switching unit and each state instruction signal from the duplicated state instruction unit, A duplication state determination unit that transitions between system status determinations of operation and non-operation; and a duplex synchronization according to a state determination signal from the state determination unit, which synchronizes with a timing of an operation state even when the system is in an inactive state and outputs a timing signal. Buffers the input and output of inter-system signals with the control unit,
A system switching synchronizer comprising: a redundant inter-system signal input / output unit for resetting an output by an output reset signal from the state switching unit. 2. The self-system fault information is detected by the self-system and output to the other system, and the self-system fault information detected and output by the other system is output to the matching status instructing unit. A redundant self-system failure processing unit for notifying system failure, and detecting and outputting the partner system failure information to the partner system, and outputting the partner system failure information to be detected and output by the partner system to the combined state instruction unit, 2. The system switching synchronizer according to claim 1, wherein the state switching unit is provided with a duplicated partner system failure processing unit that notifies a partner system failure as monitoring information. 3. The apparatus according to claim 1, further comprising means for detecting an input / output buffer failure in the redundant system signal input / output unit, and notifying the input / output buffer failure as monitoring information to the state switching unit. System switching synchronizer.