JP5558279B2 - MONITORING / CONTROL SYSTEM, MONITORING / CONTROL DEVICE USED FOR SAME, AND MONITORING / CONTROL METHOD - Google Patents

Description

  Embodiments described herein relate generally to a monitoring control system, and a monitoring control apparatus and a monitoring control method used therefor.

  Conventionally, in a supervisory control system that manages equipment in facilities such as buildings, factories, and computer centers, a control server, which is a supervisory control device that manages various data, is configured by duplicating a master system and a slave system. High reliability is ensured.

  In such a monitoring control system, when an abnormality occurs in the primary control server, this is detected by the secondary control server, and the secondary control server is switched to the primary system and the monitoring control process is continuously executed.

  At this time, there is a period during which monitoring control processing cannot be performed from when an abnormality occurs in the primary control server until the secondary control server switches to the primary.

JP 2010-9462 A

  On the other hand, in such a supervisory control system, there is a supervisory control process executed in accordance with a preset schedule.

  Therefore, when a period during which the monitoring control process cannot be performed as described above occurs, there is a problem that the process cannot be executed if there is a monitoring control process scheduled to be executed during this period.

  The present invention has been made in view of the above circumstances, and an abnormality has occurred in a main control server in a monitoring control system in which monitoring control processing is executed according to a preset schedule by a duplicated control server. Monitoring control system that ensures that all processing is executed even when a period during which monitoring control processing cannot be performed occurs when the slave control server is switched to the primary by using An object of the present invention is to provide a monitoring control device and a monitoring control method.

  According to the embodiment for achieving the above object, the secondary control server stores the execution schedule information of the monitoring control processing in advance and is included in the heartbeat information transmitted at a constant cycle from the primary control server. The latest control event execution time information is stored. And when the system is switched to the main system, when the latest execution time information stored is earlier time information than the execution time information of the latest control event in the execution schedule information, the latest control event is displayed. Run.

It is a block diagram which shows the structure of the monitoring control system by one Embodiment. It is a flowchart which shows operation | movement when the control server as a monitoring control apparatus by one Embodiment is functioning as a main system. It is a flowchart which shows operation | movement when the control server as a monitoring control apparatus by one Embodiment switches from a subordinate to a master. It is explanatory drawing which shows operation | movement when the control server as a monitoring control apparatus by one Embodiment switches from a subordinate to a master.

<Configuration of Supervisory Control System According to One Embodiment>
A monitoring control system including redundant monitoring control apparatuses (control servers) according to an embodiment of the present invention will be described with reference to FIG.

  In the monitoring control system 1 according to this embodiment, the first control server 10 and the second control server 20 are duplicated so that the monitoring control device is made redundant.

  The first control server 10 includes a schedule information storage unit 11, a control execution unit 12, a heartbeat information generation unit 13, a heartbeat information transmission unit 14, a heartbeat information reception unit 15, and a control execution time management unit 16. And a main system abnormality detection unit 17, a switching processing unit 18, and a comparison unit 19.

  The schedule information storage unit 11 stores preset execution schedule information of control events for the control target device.

  The control execution unit 12 performs a monitoring control process by executing a control event for the target device according to the execution schedule information stored in the schedule information storage unit 11 when the server 10 functions as a main system. . When a control event execution command is acquired from the comparison unit 19, this control event is executed.

  The heartbeat information generation unit 13 generates heartbeat information including the execution time information of the latest control event executed by the control execution unit 12 as property information.

  The heartbeat information transmission unit 14 transmits the heartbeat information generated by the heartbeat information generation unit 13 to the second control server 20 at a constant cycle.

  The heartbeat information receiving unit 15 receives heartbeat information transmitted at a constant cycle from the second control server 20 functioning as the main system when the server 10 is waiting as a subordinate system. The property information of the heartbeat information includes execution time information of the latest control event executed by the second control server 20.

  The control execution time management unit 16 acquires and stores the latest control event execution time information included in the property information of the heartbeat information received by the heartbeat information reception unit 15.

  The main system abnormality detection unit 17 monitors the heartbeat information received by the heartbeat information reception unit 15 and determines that an abnormality has occurred in the second control server 20 when the heartbeat information is not received at a fixed period.

  The switching processing unit 18 switches the own server 10 to the main control server when the main system abnormality detection unit 17 determines that an abnormality has occurred in the second control server 20 functioning as the main system. Then, the control execution unit 12 starts the monitoring control process for the target device, and sends a switching notification for notifying that the switching process has been executed to the comparison unit 19.

  When the comparison unit 19 obtains the switching notification from the switching processing unit 18, the latest control event execution time information stored in the control execution time management unit 16 and the execution schedule information stored in the schedule information storage unit 11. The latest control event execution time information stored in the control execution time management unit 16 is compared with the execution time information of the most recent control event compared to the current time. Is determined to be unexecuted, the control event execution command is sent to the control execution unit 12.

  The second control server 20 includes a schedule information storage unit 11, a control execution unit 12, a heartbeat information generation unit 13, a heartbeat information transmission unit 14, a heartbeat information reception unit 15, and a control execution time management unit of the first control server 10. 16, a schedule information storage unit 21, a control execution unit 22, a heartbeat information generation unit 23, a heartbeat information transmission unit 24, having the same functions as the main system abnormality detection unit 17, the switching processing unit 18, and the comparison unit 19. A heartbeat information receiving unit 25, a control execution time managing unit 26, a main system abnormality detecting unit 27, a switching processing unit 28, and a comparing unit 29 are included.

  The schedule information storage unit 21 stores information similar to the execution schedule information stored in the schedule information storage unit 11 of the first control server 10.

  The control execution unit 22 performs a monitoring control process by executing a control event for the target device according to the execution schedule information stored in the schedule information storage unit 21 when the server 20 functions as a main system. . When a control event execution command is acquired from the comparison unit 29, the control event is executed.

  The heartbeat information generation unit 23 generates heartbeat information including the execution time information of the latest control event executed by the control execution unit 22 as property information.

  The heartbeat information transmission unit 24 transmits the heartbeat information generated by the heartbeat information generation unit 23 to the first control server 10 at a constant cycle.

  The heartbeat information receiving unit 25 receives heartbeat information transmitted from the first control server 10 functioning as the primary system when the server 20 is standing by as a secondary system.

  The control execution time management unit 26 acquires and stores the latest control event execution time information included in the property information of the heartbeat information received by the heartbeat information receiving unit 25.

  The main system abnormality detection unit 27 monitors the heartbeat information received by the heartbeat information reception unit 25, and determines that an abnormality has occurred in the first control server 10 when it is not received at a fixed period.

  The switching processing unit 28 switches the own server 20 to the main control server when the main system abnormality detecting unit 27 determines that an abnormality has occurred in the first control server 10 functioning as the main system. In addition, the control execution unit 22 starts monitoring control processing for the target device, and sends a switching notification for notifying that the switching processing has been executed to the comparison unit 29.

  When the comparison unit 29 acquires the switching notification from the switching processing unit 28, the latest control event execution time information stored in the control execution time management unit 26 and the execution schedule information stored in the schedule information storage unit 21. The latest control event execution time information stored in the control execution time management unit 26 is compared with the execution time information of the most recent control event compared to the current time. Is determined to be unexecuted, the control event execution command is sent to the control execution unit 22.

<Operation of Supervisory Control System According to One Embodiment>
Next, the operation of the monitoring control system 1 in the present embodiment will be described with reference to the flowcharts of FIGS.

  FIG. 2 is a flowchart showing the operation of the main control server.

  In the present embodiment, in the default state, the first control server 10 is set as the primary system and the second control server 20 is set as the secondary system, and the first control server 10 that functions as the primary system when the monitoring control system 1 is activated. The monitoring control process is started at (S1).

  When the monitoring control process is started, the control execution unit 12 monitors whether or not the execution time of the control event has come based on the execution schedule information stored in the schedule information storage unit 11 (S2). When it is determined that the execution time has come (“YES” in S2), the control event is executed for the target device (S3).

  When a control event is executed by the control execution unit 12, the latest control event execution time information included in the property information of the heartbeat information generated by the heartbeat information generation unit 13 is updated to the execution time of the control event. (S4).

  In the heartbeat information generation unit 13, heartbeat information including property information including the execution time information of the latest updated control event is generated, and the second control server 20 waiting as a slave from the heartbeat information transmission unit 14. Are transmitted at a constant cycle (for example, 1 second cycle) (S5).

  The processes in steps S2 to S5 are repeated while the monitoring control process is being executed in the first control server 10.

  Next, the operation of the second control server 20 waiting as a slave will be described with reference to the flowchart of FIG.

  In the second control server 20, the heartbeat information receiving unit 25 receives the heartbeat information transmitted from the primary first control server 10 in step S5 (S11).

  Then, the main system abnormality detection unit 27 monitors whether or not the heartbeat information is received at a constant period in the heartbeat information reception unit 25 (S12).

  As a result of this monitoring, when the heartbeat information receiving unit 25 determines that the heartbeat information is received at a constant period (“YES” in S12), the execution time of the latest control event included in this heartbeat information Information is acquired and stored in the control execution time management unit 26 (S13).

  Since only the latest control event execution time information is stored in the control execution time management unit 26, a new control event is executed by the first control server 10 and the control event included in the property information of the heartbeat information is stored. When the execution time information is updated, the latest control event execution time information stored in the control execution time management unit 26 is also updated.

  The processes of steps S11 to S13 are repeated while the primary first control server 10 is operating normally and heartbeat information is received at a constant period.

  In step S12, when the heartbeat information is not received by the heartbeat information receiving unit 25 at a fixed period (“NO” in S12), an abnormality has occurred in the primary control server 10 in the main system abnormality detecting unit 27. Is determined (S14), and the switching processing unit 28 performs a switching process for switching the server 20 to the main control server. Depending on the protocol used, it takes 2 to 3 minutes for the first control server to detect this abnormality until the second control server detects it and completes switching the server to the primary control server. It takes a degree.

  When the switching process is completed, a switching notification notifying that the switching process has been executed is sent from the switching processing unit 28 to the comparison unit 29.

  When the switching notification is acquired in the comparison unit 29, the latest control event execution time information stored in the control execution time management unit 26 and the execution schedule information stored in the schedule information storage unit 21 are: The execution time information of the most recent control event in the past from the current time is compared (S15).

  As a result of comparison, when these do not match and the execution time information of the latest control event stored in the control execution time management unit 26 is the past time information (“YES” in S15), the comparison is performed. It is determined that the control event in the control execution schedule information is not executed by the switching process, and an execution command for this control event is sent to the control execution unit 22.

  When the control event execution command sent from the comparison unit 29 is acquired, the control execution unit 22 executes this control event (S16).

  As a result of the comparison in step S15, the latest control event execution time information stored in the control execution time management unit 26 and the execution schedule information stored in the schedule information storage unit 21 are past from the current time. When the execution time information of the most recent control event matches (“NO” in S15), it is determined that there is no control event that has not been executed during the switching process.

  After the non-executed control event is executed in step S16, or after it is determined in step S15 that there is no non-executed control event during the switching process, the second control server 20 functions as the main system. Then, the process shown in the flowchart of FIG. 2 is executed, and the control monitoring process is started.

  After the second control server 20 is switched to function as a main system in this way, the first control server 10 waits as a subordinate system when it returns to normal. When an abnormality occurs in the second control server 20, the first control server 10 is switched to function as a main system by executing the same processing as described above.

  Switching of the main control server in the monitoring control system 1 as described above will be described with reference to FIG.

  Here, the schedule information storage units 11 and 21 execute the control event a at time 8:30, the control event b at time 12:00, and the control event c at time 17:00. Is remembered.

  First, the first control server 10 functions as a main system to start the monitoring control process, and the control event a is executed in the first control server 10 according to the execution schedule information at time 8:30.

  After execution of this control event a, the latest control event execution time information “8:30” is sent from the first control server 10 functioning as the master system to the second control server 20 waiting as the slave system. Heartbeat information included in the property information is transmitted at a cycle of 1 second.

  Thereafter, it is assumed that an abnormality has occurred in the first control server 10 at time 11:59 immediately before the scheduled execution time of the control event b, and transmission of heartbeat information has been interrupted.

  At this time, the latest control event execution time information stored in the control execution time management unit 26 of the second control server 20 is “8:30”.

  When transmission of heartbeat information from the first control server 10 is interrupted, the secondary second control server 20 detects that an abnormality has occurred in the first control server 10 and performs a switching process.

  At this time, it is assumed that it takes 3 minutes as the main / slave switching processing period t from when the abnormality occurs (time 11:59) to when the switching processing is completed in the second control server 20, and when switching processing is completed (time Since the monitoring control process cannot be executed during the main / sub switching process period t until 12:02), the control event b scheduled to be executed at time 12:00 is not executed.

  When the switching process is completed (time 12:02), the latest control event execution time information “8:30” stored in the control execution time management unit 26 and the schedule information storage unit 21 are stored. The second control server 20 compares the execution time information “12:00” of the most recent control event b before the current time “12:02” in the execution schedule information.

  As a result of the comparison, they do not match, and the latest control event execution time information “8:30” stored in the control execution time management unit 26 is the latest control event b execution time information “12”. Since the time information is past “00”, it is determined that the control event b has not been executed, and the second control server 20 executes the control event b.

  As a result of this control, when the secondary control server is switched to the primary due to an abnormality in the primary control server, a period during which the monitoring control process cannot be executed occurs due to this switching process. Even so, it is possible to ensure that all processing is executed.

  In this embodiment, the latest control event execution time information is included in the heartbeat information and transmitted from the control server functioning as the primary system to the control server waiting as the secondary system. The information is normally transmitted in a cycle of about 1 second, and this time interval is sufficient for detecting an abnormality of the server, so that it is useful for transmission of execution time information. Also, if the heartbeat information is used, the latest control event execution time information can be transmitted easily and reliably without requiring a hardware configuration or protocol such as a new port. Here, when a port for transmitting execution time information is prepared separately from the heartbeat, there is a possibility that the communication of the execution time information may fail although the heartbeat can communicate normally. When only communication of execution time information fails, there is a possibility that the control execution time at which execution has actually been completed differs from the control execution time that can be notified to the slave control server.

  Although the embodiment of the present invention has been described, this embodiment is presented as an example and is not intended to limit the scope of the invention. The novel embodiment can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the spirit of the invention. This embodiment and its modifications are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 ... Monitoring control system 10 ... 1st control server 20 ... 2nd control server 11, 21 ... Schedule information storage part 12, 22 ... Control execution part 13, 23 ... Heartbeat information generation part 14, 24 ... Heartbeat information transmission part DESCRIPTION OF SYMBOLS 15, 25 ... Heartbeat information receiving part 16, 26 ... Control execution time management part 17, 27 ... Main system abnormality detection part 18, 28 ... Switching process part 19, 29 ... Comparison part

Claims (3)

A first supervisory control device that functions as a main system and a second supervisory control that stands by as a slave system and switches to execute a control event to the controlled device when an abnormality occurs in the first supervisory control device In the supervisory control system connected to the device,
The first monitoring and control device includes:
A preset schedule information storage unit for storing execution schedule information of control events to the control target device;
A control execution unit for executing a control event to the target device according to the execution schedule information stored in the schedule information storage unit;
A heartbeat information generating unit that generates heartbeat information including property time information as the execution time information of the latest control event executed by the control execution unit;
A heartbeat information transmission unit that transmits the heartbeat information generated by the heartbeat information generation unit to the second monitoring control device at a constant period;
The second monitoring control device comprises:
A schedule information storage unit for storing execution schedule information similar to the execution schedule information stored in the schedule information storage unit of the first monitoring control device;
A heartbeat information receiving unit for receiving the heartbeat information transmitted from the first monitoring control device at a constant period;
A control execution time management unit that acquires and stores execution time information of the latest control event included in the heartbeat information received by the heartbeat information reception unit;
Monitoring the heartbeat information received by the heartbeat information receiving unit, and determining that an abnormality has occurred in the first monitoring control device when it is not received at a fixed period;
A switching processing unit for sending a switching notification for causing the own device to function as a main system when the main system abnormality detecting unit determines that an abnormality has occurred in the first monitoring control device;
When the switching notification sent from the switching processing unit is acquired, the execution time information of the latest control event stored in the control execution time management unit and the execution schedule information stored in the schedule information storage unit The control time of the most recent control event stored in the control execution time management unit is compared with the execution time information of the latest control event in the past from the current time. A comparison unit that determines that a control event in the compared control execution schedule information is not executed, and sends an execution command of the control event;
The control event is executed when a control event execution command is sent from the comparison unit, and after the switching notification is sent from the switching processing unit, the target is executed according to the execution schedule information stored in the schedule information storage unit. A control execution unit that executes a control event to the device;
A supervisory control system comprising: A secondary second monitoring control apparatus connected to the first monitoring control apparatus functioning as the main system and switching to execute a control event to the control target device when an abnormality occurs in the first monitoring control apparatus. In
A preset schedule information storage unit for storing execution schedule information of control events to the control target device;
A heartbeat information receiving unit that receives heartbeat information including execution time information of the latest control event, which is transmitted from the first monitoring control device at a constant period;
A control execution time management unit that acquires and stores execution time information of the latest control event included in the heartbeat information received by the heartbeat information reception unit;
Monitoring the heartbeat information received by the heartbeat information receiving unit, and determining that an abnormality has occurred in the first monitoring control device when it is not received at a fixed period;
A switching processing unit for sending a switching notification for causing the own device to function as a main system when the main system abnormality detecting unit determines that an abnormality has occurred in the first monitoring control device;
When the switching notification sent from the switching processing unit is acquired, the execution time information of the latest control event stored in the control execution time management unit and the execution schedule information stored in the schedule information storage unit The control time of the most recent control event stored in the control execution time management unit is compared with the execution time information of the latest control event in the past from the current time. A comparison unit that determines that a control event in the compared control execution schedule information is not executed, and sends an execution command of the control event;
The control event is executed when a control event execution command is sent from the comparison unit, and after the switching notification is sent from the switching processing unit, the target is executed according to the execution schedule information stored in the schedule information storage unit. A control execution unit that executes a control event to the device;
A monitoring control device comprising: A secondary second monitoring control apparatus connected to the first monitoring control apparatus functioning as the main system and switching to execute a control event to the control target device when an abnormality occurs in the first monitoring control apparatus. But,
A schedule information storage step for storing execution schedule information of control events to the control target device set in advance;
A heartbeat information receiving step for receiving heartbeat information including execution time information of the latest control event, which is transmitted from the first monitoring control device at a constant period;
A control execution time management step of acquiring and storing execution time information of the latest control event included in the heartbeat information received in the heartbeat information receiving step;
Monitoring the heartbeat information received in the heartbeat information receiving step, and determining that an abnormality has occurred in the first monitoring and control device when the heartbeat information is not received at a fixed period;
A switching process step of sending a switching notification for causing the own apparatus to function as a main system when it is determined that an abnormality has occurred in the first monitoring control apparatus in the main system abnormality detecting step;
When acquiring the switching notification sent by the switching processing step, among the execution time information of the latest control event stored in the control execution time management step and the execution schedule information stored in the schedule information storage step, The execution time information of the latest control event in the past from the current time is compared. If the latest control event execution time information stored in the control execution time management step is the past time information, the compared control information A comparison step of determining that the control event in the execution schedule information is not executed and sending an execution instruction of the control event;
An unprocessed control execution step for executing the control event when a control event execution command is sent in the comparison step;
A schedule control execution step for executing a control event to the target device according to the execution schedule information stored in the schedule information storage step after the switching notification is sent out by the switching processing step;
A monitoring control method characterized by comprising:

Images