JP6608875B2 - Diagnostic control device, diagnostic control method and program - Google Patents

Description

  The present invention relates to a diagnosis control device, a diagnosis control method, and a program for diagnosing output data of a multiplexed information processing device and controlling the information processing device based on a diagnosis result.

  In systems such as reservation systems and sales management systems, it is effective to provide redundancy by multiplexing information processing devices in order to continue to provide highly reliable information processing in real time. In a system in which information processing devices are multiplexed, processing results obtained by executing the same processing on the same data by different information processing devices are compared, and the presence or absence of a failure is verified by judging whether the processing results match or not it can. In a general system, even if a mismatch is detected in the processing results, it is impossible to determine which device has a failure, so it is necessary to diagnose whether there is a failure for each device.

  Patent Document 1 discloses a diagnostic method for a duplexed information processing apparatus. In the method of Patent Document 1, the diagnosis operation in the two execution units is executed at the same time, and the diagnosis for each device is executed after a mismatch is detected in the diagnosis results.

  Patent Document 2 discloses a computer system having a failure detection and isolation function. In the system of Patent Document 2, at least three CPU (Central Processing Unit) modules are connected to an external output line and connected to each other in a linear array. Each CPU module determines its own abnormality by comparing the output on the external output line with its own output, and disconnects itself from the system when there is an abnormality.

  Patent Document 3 discloses a failure detection / separation method for detecting and disconnecting a failed device in an information processing system including three or more information processing devices. In the method of Patent Document 3, it is divided into the number of combinations for selecting two results from the processing results of each device, and the processing results are paired, and the processing results are compared with each other for each processing result pair. judge. If the processing results match each other, the processing result is output to the output bus via the output line for each processing result pair. On the other hand, if the processing results do not match, an error signal is sent for each processing result pair, and the output line is set to a high impedance state, and a faulty device is specified based on the error signal.

Japanese Examined Patent Publication No. 62-38740 JP-A-6-149605 JP-A-5-204692

  According to the method of Patent Document 1, since the diagnosis results of the two execution units are compared and each device is diagnosed after a mismatch is detected, the processing of the system is interrupted rather than the diagnosis of each device from the beginning. Time can be shortened. However, the method of Patent Document 1 has a problem that the system needs to be interrupted after a mismatch is detected in the diagnosis results of the two execution units.

  According to the method of Patent Document 2, redundancy can be improved by comparing the results of processing the same data by a plurality of CPU modules and separating the CPU module in which an abnormality is detected from the system. However, the method of Patent Document 2 has a problem that when an abnormality occurs in the master CPU module, the process is interrupted until the adjacent CPU module is transferred to the master.

  According to the method of Patent Document 3, a failed device can be detected and separated without increasing the amount of hardware. However, the method disclosed in Patent Document 3 has a problem in that a failed device cannot be detected when the processing results of all devices do not match, and the processing is interrupted.

  An object of the present invention is to solve the above-described problems and to provide a diagnosis control device capable of accurately diagnosing output data of an information processing device while continuing processing by multiplexed information processing devices.

  The diagnosis control device according to one aspect of the present invention inputs the same input data, and diagnoses the output data of the first information processing device and the second information processing device that execute the same data processing on the input same input data. A diagnostic control apparatus, an input unit that inputs the same input data as the first information processing apparatus and the second information processing apparatus, and acquires the input data from the input unit, and the first information processing apparatus and the acquired input data First processing means for executing the same data processing as that of the second information processing apparatus and outputting the first processing result, and acquiring the same input data as the first processing means from the input means. A second processing unit that executes the same data processing as the apparatus and the second information processing device and outputs a second processing result; obtains the first processing result from the first processing unit; A first comparison unit that obtains a result and compares the first processing result with the second processing result to determine whether or not the own device is normal, and the first information processing device inputs The first data generated by executing data processing on the data and the second data generated by executing data processing on the input data by the second information processing apparatus are acquired, and the first processing result and the first data The determination is made by comparing one of the two processing results with the first data and the second data to determine whether or not they match, and transmitting a control signal to the first information processing apparatus and the second information processing apparatus according to the determination result Means.

  The diagnosis control method according to one aspect of the present invention diagnoses output data of a first information processing apparatus and a second information processing apparatus that input the same input data and execute the same data processing on the input same input data. A diagnosis control method, wherein the same input data as that of the first information processing device and the second information processing device is input, and the same data processing as that of the first information processing device and the second information processing device is performed on the input data. A first processing result is generated, the same data processing as the first information processing apparatus and the second information processing apparatus is performed on the input data that has been input to generate a second processing result, and the first processing result and the second processing result The first data generated by the first information processing apparatus performing data processing on the input data, and the second information The processing unit Second data generated by executing data processing on the data, and comparing either the first processing result or the second processing result with the first data and the second data to determine whether or not they match The control signal is transmitted to the first information processing apparatus and the second information processing apparatus according to the determination result.

  The program of one embodiment of the present invention is a program for diagnosing output data of the first information processing apparatus and the second information processing apparatus that inputs the same input data and executes the same data processing on the input same input data. In the first processing, the same input data as the first information processing apparatus and the second information processing apparatus is input, and the same data processing as the first information processing apparatus and the second information processing apparatus is performed on the input data. Processing for generating a processing result, processing for generating the second processing result by executing the same data processing as the first information processing device and the second information processing device on the input data, and the first processing result and the second processing A process of comparing the result and determining whether or not the own apparatus is normal based on whether or not they match, and first data generated by the first information processing apparatus performing data processing on the input data The second information processing device acquires the second data generated by executing the data processing on the input data, the first processing result and the second processing result, the first data and the second data, Are compared with each other and a process for transmitting a control signal to the first information processing apparatus and the second information processing apparatus according to the determination result is executed by the computer.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to provide the diagnostic control apparatus which can diagnose correctly the output data of information processing apparatus, continuing the process by the multiplexed information processing apparatus.

It is a block diagram which shows the structure of the information processing system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the structure of the diagnostic control apparatus of the information processing system which concerns on the 1st Embodiment of this invention. It is the determination table put together about the determination of the diagnostic control apparatus of the information processing system which concerns on the 1st Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the diagnostic control apparatus of the information processing system which concerns on the 1st Embodiment of this invention. It is a conceptual diagram which shows an example which connects an information processing system to the system using the output data of the information processing system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the structure of the information processing system which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the diagnostic control apparatus of the information processing system which concerns on the 2nd Embodiment of this invention. It is the determination table put together about the determination of the diagnostic control apparatus of the information processing system which concerns on the 2nd Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the diagnostic control apparatus of the information processing system which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the information processing system which concerns on the 3rd Embodiment of this invention. It is a block diagram which shows the structure of the diagnostic control apparatus of the information processing system which concerns on the 3rd Embodiment of this invention. It is the determination table put together about the determination of the diagnostic control apparatus of the information processing system which concerns on the 3rd Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the diagnostic control apparatus of the information processing system which concerns on the 3rd Embodiment of this invention. It is a block diagram which shows an example of the hardware constitutions for implement | achieving the information processing system which concerns on each embodiment of this invention.

  EMBODIMENT OF THE INVENTION Below, the form for implementing this invention is demonstrated using drawing. However, the preferred embodiments described below are technically preferable for carrying out the present invention, but the scope of the invention is not limited to the following. In addition, in all the drawings used for description of the following embodiments, the same reference numerals are given to the same parts unless there is a particular reason. In the following embodiments, repeated description of similar configurations and operations may be omitted. In addition, the direction of the arrow in the drawing shows an example of the signal flow, and does not limit the direction of the signal.

(First embodiment)
First, an information processing system according to a first embodiment of the present invention will be described with reference to the drawings. The information processing system of this embodiment includes a duplex information processing apparatus that executes the same data processing on the same input data and outputs the same output data. In the following, an example in which the information processing device is duplexed is shown, but the information processing device may be multiplexed more than triple.

(Constitution)
FIG. 1 is a block diagram illustrating a configuration of an information processing system 1 according to the present embodiment. As illustrated in FIG. 1, the information processing system 1 includes a first information processing device 11, a second information processing device 12, and a diagnosis control device 13.

  The first information processing apparatus 11 and the second information processing apparatus 12 have the same configuration. The first information processing apparatus 11 and the second information processing apparatus 12 are configured to receive the same input data, execute the same data processing on the same input data, and output the same data (also referred to as output data). . When a failure occurs in at least one of the first information processing apparatus 11 and the second information processing apparatus 12, different output data is output even if the same data is input. The first information processing device 11 and the second information processing device 12 output the output data output from the own device to a system that uses the output data, and also output it to the diagnosis control device 13. Hereinafter, the output data of the first information processing apparatus 11 is referred to as output A (also referred to as first data), and the output data of the second information processing apparatus 12 is referred to as output B (also referred to as second data).

  The diagnosis control device 13 is connected to the first information processing device 11 and the second information processing device 12. The diagnosis control device 13 has at least two processing functions for executing the same data processing as the first information processing device 11 and the second information processing device 12. In the following description, the diagnosis control device 13 is described as having two processing functions, but the diagnosis control device 13 may have three or more processing functions. The diagnostic control device 13 has a function of comparing the processing results processed by the two processing functions. In addition, the diagnosis control device 13 compares the processing result processed by the processing function of the own device with the output data of the first information processing device 11 and the second information processing device 12, and the first information processing device 11 and the second information. It has a function of diagnosing the processing device 12. Further, the diagnosis control device 13 has a function of controlling the first information processing device 11 and the second information processing device 12 based on the diagnosis result.

  The diagnosis control device 13 processes the same input data by at least two processing functions. For example, the diagnosis control device 13 processes the same input data in order by two processing functions. In this case, the diagnosis control device 13 may start processing by the other processing function when the processing by one processing function ends. The diagnosis control device 13 may process the same input data in parallel by using two processing functions.

  The timing at which the diagnosis control device 13 starts processing input data is preferably matched with the timing at which the first information processing device 11 and the second information processing device 12 start processing input data. For example, the diagnosis control device 13 receives the same input data at the same timing as the first information processing device 11 and the second information processing device 12 and starts the same data processing at the same timing.

  The diagnosis control device 13 compares the processing results processed by the two processing functions. The diagnosis control device 13 determines that the device itself is normal when the processing results of the two processing functions are the same. On the other hand, when the processing results of the two processing functions are different, the diagnosis control device 13 determines that the own device has a failure. If the diagnosis control apparatus 13 determines that the own apparatus has a failure, the diagnosis control apparatus 13 stops or restarts the own apparatus. When the diagnosis control device 13 determines that the device itself has a failure, the diagnosis control device 13 accurately sets the reliability of the output data to the system that uses the output data of the first information processing device 11 and the second information processing device 12. You may notify that it was not able to diagnose.

  The diagnosis control device 13 receives the output data of the first information processing device 11 and the second information processing device 12 as input. When the diagnosis control device 13 determines that the device itself is normal, the diagnosis control device 13 processes the output data (output A) of the first information processing device 11 and the output data (output B) of the second information processing device 12 by the processing of the device itself. Compare with results.

  The processing function of the diagnosis control device 13 is preferably higher in processing capability than the first information processing device 11 and the second information processing device 12. For example, the processing function of the diagnosis control device 13 executes the same data processing as the first information processing device 11 and the second information processing device 12 at twice the speed. In particular, when the diagnosis control device 13 sequentially processes the same input data by using two processing functions, the data processing can be executed twice as fast as the first information processing device 11 and the second information processing device 12. preferable. Then, when the output data of the first information processing device 11 and the second information processing device 12 is acquired, the output data of the first information processing device 11 and the second information processing device 12 and the processing result of the own device are obtained. You can start to compare.

  If the output data (output A and output B) of the first information processing device 11 and the second information processing device 12 is different from the processing result of the own device, the diagnosis control device 13 determines which device has a fault. judge. When the diagnosis control device 13 compares the output data (output A and output B) of the first information processing device 11 and the second information processing device 12 with the processing result of the own device, the processing result of the own device is correct. It is judged as a thing. Therefore, the diagnosis control device 13 determines that there is a failure in the information processing device that has output the output data different from the processing result of the own device.

  The diagnosis control device 13 transmits a control signal instructing stop or restart to the information processing device determined to have a failure among the first information processing device 11 and the second information processing device 12. The information processing apparatus that has received the control signal of the diagnostic control apparatus 13 is stopped or restarted according to the control signal. At this time, the information processing apparatus that outputs the output data that matches the processing result of the diagnosis control apparatus 13 is determined to be normal by the diagnosis control apparatus 13, and the process is continued.

  The above is an outline of the configuration of the information processing system 1. Next, the configuration of the diagnostic control device 13 of the information processing system 1 will be described with reference to the drawings.

[Diagnostic control device]
FIG. 2 is a block diagram showing the configuration of the diagnostic control device 13. As illustrated in FIG. 2, the diagnosis control apparatus 13 includes an input unit 131, a first processing unit 132, a second processing unit 133, a comparison unit 134, and a determination unit 135. In FIG. 2, a configuration surrounded by a broken line frame (first processing unit 132, second processing unit 133, comparison unit 134, and determination unit 135) is a characteristic configuration of the present embodiment.

  The input unit 131 inputs the same input data at the same timing as the first information processing apparatus 11 and the second information processing apparatus 12. Note that the timing at which the input unit 131 acquires input data may not completely coincide with the timing at which the first information processing apparatus 11 and the second information processing apparatus 12 acquire input data. Further, when the input data is directly input to the first processing unit 132 and the second processing unit 133, the input unit 131 may be omitted.

  The input unit 131 outputs the acquired input data to the first processing unit 132 and the second processing unit 133.

  For example, when the first processing unit 132 and the second processing unit 133 sequentially process input data, the input unit 131 outputs the input data to either the first processing unit 132 or the second processing unit 133. Then, the input unit 131 outputs the input data to the other processing unit at the timing when the processing by one of the processing units ends. When the first processing unit 132 and the second processing unit 133 process input data in parallel, the input unit 131 outputs the input data to the first processing unit 132 and the second processing unit 133 at the same timing. That's fine.

  The first processing unit 132 and the second processing unit 133 are connected to the input unit 131. The first processing unit 132 and the second processing unit 133 acquire the same input data from the input unit 131. Note that the timing at which the first processing unit 132 and the second processing unit 133 acquire input data may be the same or different. In the following description, it is assumed that the processing of the second processing unit 133 is started after the processing of the first processing unit 132 is completed.

  The timing at which at least one of the first processing unit 132 and the second processing unit 133 starts processing input data is preferably matched with the timing at which the first information processing device 11 and the second information processing device 12 start processing.

  The first processing unit 132 and the second processing unit 133 preferably have a higher processing capability than the first information processing device 11 and the second information processing device 12. For example, the first processing unit 132 and the second processing unit 133 execute the same processing as the first information processing device 11 and the second information processing device 12 at twice the speed. In particular, when the first processing unit 132 and the second processing unit 133 sequentially process the same input data, the processing can be executed at twice the speed of the first information processing device 11 and the second information processing device 12. preferable. Then, when the output data of the first information processing device 11 and the second information processing device 12 is acquired, the output data of the first information processing device 11 and the second information processing device 12 and the processing result of the own device are obtained. You can compare in real time.

  The comparison unit 134 compares the processing result of the first processing unit 132 (hereinafter referred to as processing result A) and the processing result of the second processing unit 133 (hereinafter referred to as processing result B). When the processing result A (also referred to as a first processing result) and the processing result B (also referred to as a second processing result) are the same, the comparison unit 134 determines that the own device is normal. In this case, the determination process by the determination unit 135 is executed.

  On the other hand, when the processing result A and the processing result B are different, the comparison unit 134 determines that the own apparatus has a failure. When the comparison unit 134 determines that the own device has a failure, the comparison unit 134 stops or restarts the own device.

  The determination unit 135 receives output data (output A and output B) of the first information processing apparatus 11 and the second information processing apparatus 12 as inputs. The determination unit 135 compares the output data (output A) of the first information processing device 11 and the output data (output B) of the second information processing device 12 with the processing result of the own device.

  When one of the output A and the output B is different from the processing result of the own device, the determination unit 135 determines which information processing device has a failure. When the determination process by the determination unit 135 is started, it is determined that the processing result of the own apparatus is correct. Therefore, the determination unit 135 determines that there is a failure in the information processing apparatus that has output the output data different from the processing result of the own apparatus.

  The determination unit 135 transmits a control signal instructing stop or restart to the information processing apparatus determined to have a failure. The information processing apparatus that has received the control signal of the determination unit 135 stops or restarts based on the control signal. At this time, the information processing apparatus that has output the output data that matches the processing result of the diagnosis control apparatus 13 is determined to be normal by the determination unit 135, and the process is continued.

  In FIG. 2, signal lines for inputting / outputting output data and signal lines for inputting / outputting control signals are divided between the first information processing apparatus 11 and the second information processing apparatus 12 and the determination unit 135. However, the same signal line may be shared.

  The above is the description regarding the configuration of the diagnostic control device 13. Next, determination by the diagnosis control device 13 will be described with reference to the drawings.

[Judgment]
FIG. 3 is a determination table 130 that summarizes the determinations made by the diagnostic control device 13. The determination table 130 includes five determinations. In the determination table 130, a circle mark “◯” indicates a match, and a cross mark “X” indicates a mismatch.

  Conditions 11 to 14 are cases in which the comparison unit 134 determines that the processing results of the first processing unit 132 and the second processing unit 133 match. Thereafter, when the processing results of the first processing unit 132 and the second processing unit 133 match, the processing result is referred to as the processing result of the own device (also referred to as the processing result of the diagnostic control device).

  The condition 11 is a case where it is determined that the output data (output A and output B) of the first information processing device 11 and the second information processing device 12 and the processing result of the diagnosis control device 13 match. In this case, the determination unit 135 determines that all the devices are normal, and the processing of each device is continued.

  The condition 12 matches the output data (output A) of the first information processing apparatus 11 and the processing result of the diagnosis control apparatus 13, but the output data (output B) of the second information processing apparatus 12 and the diagnosis control apparatus 13 This is a case where it is determined that the processing result is different. In this case, the determination unit 135 determines that the first information processing apparatus 11 is normal and the second information processing apparatus 12 has a failure. Then, the determination unit 135 transmits a control signal to the second information processing apparatus 12. In addition, the process of the 1st information processing apparatus 11 and the diagnostic control apparatus 13 is continued.

  The condition 13 matches the output data (output B) of the second information processing device 12 and the processing result of the diagnosis control device 13, but the output data (output A) of the first information processing device 11 and the diagnosis control device 13 This is a case where it is determined that the processing result is different. In this case, the determination unit 135 determines that the second information processing apparatus 12 is normal and the first information processing apparatus 11 has a failure. Then, the determination unit 135 transmits a control signal to the first information processing apparatus 11. Note that the processes of the second information processing apparatus 12 and the diagnosis control apparatus 13 are continued.

  Condition 14 is a case where it is determined that the output data (output A and output B) of the first information processing device 11 and the second information processing device 12 and the processing result of the diagnosis control device 13 are different. In this case, the determination unit 135 determines that the first information processing apparatus 11 and the second information processing apparatus 12 have a failure, and transmits a control signal to the first information processing apparatus 11 and the second information processing apparatus 12. In addition, the process of the diagnostic control apparatus 13 is continued.

  Condition 15 is when the processing results of the first processing unit 132 and the second processing unit 133 are different. In this case, since the diagnostic control device 13 cannot determine whether the output data (output A and output B) of the first information processing device 11 and the second information processing device 12 is correct or not, the reliability of the output data of the information processing system 1 is high. I can't get it. Therefore, the determination unit 135 transmits a control signal to the first information processing device 11 and the second information processing device 12 when the own device is stopped or restarted. When the processing results of the first processing unit 132 and the second processing unit 133 are different, the reliability of the output A and the output B is not verified by the diagnosis control device 13, but the first information processing device 11 and the second information processing device 12 may be continued.

  The above is the description of the determination by the diagnostic control device 13. Next, the operation of the diagnostic control device 13 will be described with reference to the drawings.

(Operation)
FIG. 4 is a flowchart for explaining the operation of the diagnosis control apparatus 13. In the following description, the components of the diagnostic control device 13 will be described as an operation subject, but the diagnosis control device 13 itself may be regarded as an operation subject.

  In FIG. 4, first, the input unit 131 receives input data (step S11).

  Next, the first processing unit 132 and the second processing unit 133 process the input data (step S12).

  Here, the comparison unit 134 compares the processing results of the first processing unit 132 and the second processing unit 133 (step S13).

  When the processing results of the first processing unit 132 and the second processing unit 133 are different (No in Step S13), the diagnosis control device 13 stops or restarts the own device (Step S14). At this time, the diagnosis control device 13 may transmit a control signal to the first information processing device 11 and the second information processing device 12.

  On the other hand, when the processing results of the first processing unit 132 and the second processing unit 133 match (Yes in step S13), the determination unit 135 outputs the output data (output) of the first information processing device 11 and the second information processing device 12 A and output B) are input (step S15).

  Here, the determination unit 135 determines whether the output data (output A and output B) of the first information processing apparatus 11 and the second information processing apparatus 12 and the processing result of the diagnosis control apparatus 13 match. (Step S16).

  When at least one of the output A and the output B is different from the processing result of the diagnostic control device 13 (No in step S16), the determination unit 135 outputs information on which output data different from the processing result of the diagnostic control device 13 is output. A control signal is transmitted to the processing device (step S17).

  On the other hand, when the output A and the output B coincide with the processing result of the diagnosis control device 13 (Yes in step S16), the processing according to the flowchart of FIG.

  The above is the description of the operation of the diagnostic control device 13. Note that the processing according to the flowchart of FIG. 4 is an example, and does not limit the content or order of the operation of the diagnosis control device 13.

  Here, an example in which the information processing system 1 of the present embodiment and the data utilization system 100 that uses output data of the information processing system 1 are connected will be described with reference to FIG. For example, the data use system 100 is applied to a reservation system that handles reservations for services and products.

  For example, when the data utilization system 100 acquires output data from the first information processing apparatus 11 and the second information processing apparatus 12, the data utilization system 100 transmits a control signal indicating an instruction for diagnosing whether the acquired output data is correct to the diagnosis control apparatus 13. To do. The diagnosis control device 13 starts diagnosis of output data of the first information processing device 11 and the second information processing device 12 according to the control signal. The data utilization system 100 may be configured to control the first information processing apparatus 11 and the second information processing apparatus 12 via the diagnosis control apparatus 13. The data utilization system 100 can use highly reliable output data while the first information processing apparatus 11 and the second information processing apparatus 12 are operating in a duplex manner.

  As described above, according to the present embodiment, when the output data of the duplexed information processing apparatus is diagnosed and a failure is detected in any of the information processing apparatuses, it is determined which of the information processing apparatuses has failed. Can be judged. Therefore, according to the present embodiment, it is possible to realize a stable diagnosis while continuing the processing by the duplex information processing apparatus. In particular, according to the present embodiment, the determination process can be started based on the correct processing result at the timing of acquiring the output data processed by the information processing apparatus, so that the accurate determination result is displayed at an earlier timing than the general method. Can be obtained at

  For example, in a reservation system that handles reservations for services and products, in situations where the output data processed by the redundant information processing device is used, it is necessary to compare the output data and check the consistency of the output data that has been compared. Become. In such a situation, when an unexpected failure occurs in the information processing apparatus, the following case may occur. One is a case where the same reservation is made for a service or product for which the reservation is confirmed. One is an example of dealing with an incorrect price for a service or product for which a reservation has been confirmed. If such a case occurs, a loss may occur in the transaction, which may lead to a big problem.

  In order to avoid such problems, it is necessary to make sure that the output data from the information processing device does not contain errors, but if the reservation application is entered continuously, the output data processing will continue. May not be able to lead to new problems. According to the present embodiment, even if an unexpected failure occurs in the information processing apparatus, it is possible to comprehensively execute information processing as the apparatus and system, so that reservation applications are entered one after another. Even if there is, processing can be continued.

(Second Embodiment)
Next, an information processing system according to a second embodiment of the present invention will be described with reference to the drawings. The information processing system of the present embodiment is different from the information processing system of the first embodiment in that the output data of the multiplexed information processing apparatus is compared before comparing with the processing result of the diagnosis control apparatus.

(Constitution)
FIG. 6 is a block diagram showing the configuration of the information processing system 2 of the present embodiment. As illustrated in FIG. 2, the information processing system 2 includes a first information processing device 21, a second information processing device 22, and a diagnosis control device 23. Note that the configurations and functions of the first information processing device 21 and the second information processing device 22 are the same as those of the first information processing device 11 and the second information processing device 12 of the first embodiment. Omitted. Further, since the diagnosis control device 23 is the same as the diagnosis control device 13 of the first embodiment except for some functions, the following description focuses on characteristic points.

[Diagnostic control device]
FIG. 7 is a block diagram showing the configuration of the diagnostic control device 23. As illustrated in FIG. 7, the diagnosis control device 23 includes an input unit 231, a first processing unit 232, a second processing unit 233, a first comparison unit 234, a determination unit 235, and a second comparison unit 236. Since the input unit 231, the first processing unit 232, and the second processing unit 233 are the same as the corresponding configurations of the diagnosis control device 13 of the first embodiment, detailed description thereof is omitted. Moreover, since the 1st comparison part 234 is the same as the comparison part 134 of the diagnosis control apparatus 13 of 1st Embodiment, detailed description is abbreviate | omitted.

  The second comparison unit 236 receives the output data (output A and output B) of the first information processing device 21 and the second information processing device 22 as inputs. The second comparison unit 236 compares the output A and the output B. When the output A and the output B are the same, the second comparison unit 236 determines that the first information processing device 21 and the second information processing device 22 are normal. In this case, the determination process by the determination unit 235 can be omitted. On the other hand, when the output A and the output B are different, the second comparison unit 236 determines that at least one of the first information processing device 21 and the second information processing device 22 has a failure. When the output A and the output B are different, the process proceeds to the determination process by the determination unit 235.

  When the output A and the output B are different, the determination unit 235 performs a determination process. At this time, the determination unit 235 performs processing results (processing result A and processing result B) of the first processing unit 232 and the second processing unit 233 and output data (first processing unit 21 and second processing unit 22). Output A and output B) are input.

  The determination unit 235 compares the output data (output A) of the first information processing device 21 with the processing result (processing result A) of the first processing unit 232, and outputs data (output B) of the second information processing device 22. ) And the processing result (processing result B) of the second processing unit 233. The determination unit 235 determines that there is a failure in the information processing apparatus that has output the output data different from the processing results of the first processing unit 232 and the second processing unit 233 (processing result A and processing result B).

  The determination unit 235 transmits a control signal to the information processing apparatus determined to have a failure. The information processing apparatus that has received the control signal of the determination unit 235 stops or restarts based on the control signal. At this time, the information processing apparatus that outputs the output data that matches the processing result of the diagnosis control apparatus 23 is determined to be normal by the determination unit 235, and the process is continued.

  The above is the description regarding the configuration of the diagnostic control device 23. Next, determination by the diagnosis control device 23 will be described with reference to the drawings.

[Judgment]
FIG. 8 is a determination table 230 that summarizes the determinations made by the diagnostic control device 23. The determination table 230 includes five determinations. In the determination table 230, a circle mark “◯” indicates a match, and a cross mark “X” indicates a mismatch.

  Condition 21 is a case where it is determined that the output data (output A and output B) of the first information processing device 21 and the second information processing device 22 match. In this case, the second comparison unit 236 outputs a result that the output A and the output B match to the determination unit 235. The determination unit 235 receives the result of the second comparison unit 236 and determines that the first information processing device 21 and the second information processing device 22 are normal. In this case, the processes of the first information processing device 21, the second information processing device 22, and the diagnosis control device 23 are continued. In the case of condition 21, the determination process by the determination unit 235 may be omitted.

  Conditions 22 to 25 are cases where it is determined that the output A and the output B are different. In this case, the second comparison unit 236 outputs a result that the output A and the output B are different to the determination unit 235. Conditions 22 to 24 are cases where the first comparison unit 234 determines that the processing results of the first processing unit 232 and the second processing unit 233 match.

  The condition 22 matches the output data (output A) of the first information processing device 21 and the processing result (processing result A) of the first processing unit 232, but the output data (output B) of the second information processing device 22. And the processing result (processing result B) of the second processing unit 233 are determined to be different. In this case, the determination unit 235 determines that the first information processing apparatus 21 is normal and the second information processing apparatus 22 has a failure. Then, the determination unit 235 transmits a control signal to the second information processing device 22. Note that the processes of the first information processing apparatus 21 and the diagnosis control apparatus 23 are continued.

  The condition 23 matches the output data (output B) of the second information processing device 22 and the processing result (processing result B) of the second processing unit 233, but the output data (output A) of the first information processing device 21. And the processing result (processing result A) of the first processing unit 232 are determined to be different. In this case, the determination unit 235 determines that the second information processing apparatus 22 is normal and the first information processing apparatus 21 has a failure. Then, the determination unit 235 transmits a control signal to the first information processing device 21. Note that the processes of the second information processing device 22 and the diagnosis control device 23 are continued.

  The condition 24 differs between the output data (output A) of the first information processing device 21 and the processing result (processing result A) of the first processing unit 232, and the output data (output B) of the second information processing device 12 and the first This is a case where it is determined that the processing result (processing result B) of the two processing units 233 is different. In this case, the determination unit 235 determines that the first information processing device 21 and the second information processing device 22 are faulty, and transmits a control signal to the first information processing device 21 and the second information processing device 22. In addition, the process of the diagnostic control apparatus 23 is continued.

  Condition 25 is when the processing results of the first processing unit 232 and the second processing unit 233 are different. In this case, since the diagnostic control device 23 cannot determine whether the output data (output A and output B) of the first information processing device 21 and the second information processing device 22 is correct or not, the output of the information processing system 2 is reliable. I can't. Therefore, the determination unit 235 transmits a control signal to the first information processing device 21 and the second information processing device 22 when the own device is stopped or restarted. When the processing results of the first processing unit 232 and the second processing unit 233 are different, the reliability of the output A and the output B is not verified by the diagnosis control device 23, but the first information processing device 21 and the second information processing device The process according to 22 may be continued.

  The above is the description about the determination by the diagnostic control device 23. Next, the operation of the diagnostic control device 23 will be described with reference to the drawings.

(Operation)
FIG. 9 is a flowchart for explaining the operation of the diagnosis control device 23. In the following description, the components of the diagnostic control device 23 will be described as an operation subject, but the diagnosis control device 23 itself may be regarded as an operation subject.

  In FIG. 9, first, the input unit 231 receives input data (step S21).

  Next, the first processing unit 232 and the second processing unit 233 process the input data (step S22).

  Here, the second comparison unit 236 receives the output data (output A and output B) of the first information processing device 21 and the second information processing device 22 (step S23).

  The second comparison unit 236 compares the output data (output A) of the first information processing device 21 and the output data (output B) of the second information processing device 22 (step S24). When the output A and the output B match (Yes in step S24), the process according to the flowchart of FIG.

  On the other hand, when the output A and the output B are different (No in step S24), the first comparison unit 234 outputs the processing result (processing result A) of the first processing unit 232 and the processing result (processing of the second processing unit 233). The result B) is compared (step S25). Note that step S24 and step S25 may be processed in the reverse order or may be processed in parallel.

  When the processing result A and the processing result B are different (No in step S25), the diagnosis control device 23 stops or restarts the own device (step S26). At this time, the diagnosis control device 23 may transmit a control signal to the first information processing device 21 and the second information processing device 22.

  On the other hand, when the processing result A and the processing result B match (Yes in step S25), the determination unit 235 compares the processing result A with the output A and also compares the processing result B with the output B (step S25). S27).

  When at least one of the output A and the output B is different from the processing result of the diagnostic control device 23 (No in step S27), the determination unit 235 outputs information on which output data different from the processing result of the diagnostic control device 23 is output. A control signal is transmitted to the processing device (step S28).

  On the other hand, when the output A and the output B coincide with the processing result of the diagnostic control device 23 (Yes in step S27), the processing according to the flowchart of FIG.

  The above is the description of the operation of the diagnostic control device 23. Note that the processing according to the flowchart of FIG. 9 is an example, and does not limit the content or order of the operation of the diagnosis control device 23.

  As described above, according to the present embodiment, as in the first embodiment, it is possible to diagnose the output data of the duplex information processing apparatus and determine which information processing apparatus has a failure. In particular, according to the present embodiment, when the output data of the information processing apparatus is different from each other, the determination process is performed, so that the period during which the information processing apparatus outputs normal output data is greater than that of the first embodiment. Processing can be simplified.

(Third embodiment)
Next, an information processing system according to a third embodiment of the present invention will be described with reference to the drawings. The information processing system according to the present embodiment is different from the information processing system according to the first embodiment in that, when the output data of the information processing apparatus is normal, the normal output data is output with reliability.

(Constitution)
FIG. 10 is a block diagram illustrating a configuration of the information processing system 3 according to the present embodiment. As illustrated in FIG. 10, the information processing system 3 includes a first information processing device 31, a second information processing device 32, and a diagnosis control device 33. Note that the configurations and functions of the first information processing apparatus 31 and the second information processing apparatus 32 are the same as those of the first information processing apparatus 11 and the second information processing apparatus 12 of the first embodiment, and thus detailed description thereof will be given. Omitted. The diagnosis control device 33 is the same as the diagnosis control device 13 of the first embodiment except for some functions, and therefore will be described by paying attention to characteristic points. However, in the present embodiment, the first information processing device 31 and the second information processing device 32 output the output data to the diagnosis control device 33, and the output data is directly input to a system that uses the output data of the information processing system 3. Is not output.

[Diagnostic control device]
FIG. 11 is a block diagram illustrating a configuration of the diagnosis control device 33. As illustrated in FIG. 11, the diagnosis control device 33 includes an input unit 331, a first processing unit 332, a second processing unit 333, a comparison unit 334, a determination unit 335, and a reliability provision unit 336. Since the input unit 331, the first processing unit 332, the second processing unit 333, and the comparison unit 334 are the same as the corresponding configurations of the diagnosis control device 13 of the first embodiment, detailed description thereof is omitted.

  The determination unit 335 has the same function as the diagnosis control device 13 of the first embodiment, and is normal among the output data (output A and output B) of the first information processing device 31 and the second information processing device 32. The output data is output to the reliability assigning unit 336. At this time, the determination unit 335 outputs a determination result indicating which one of the first information processing device 31 and the second information processing device 32 is normal to the reliability providing unit 336.

  In FIG. 11, the signal lines for inputting / outputting output data and the signal lines for inputting / outputting control signals are divided between the first information processing device 31 and the second information processing device 32 and the determination unit 335. However, the same signal line may be shared.

  The reliability assigning unit 336 obtains normal output data and a determination result from the determination unit 335, and assigns the determination result to the normal output data, thereby providing the output data with the reliability (hereinafter, with reliability). Data). The reliability assigning unit 336 outputs data with reliability.

  The above is the description regarding the configuration of the diagnostic control device 33. Next, determination by the diagnosis control device 33 will be described with reference to the drawings.

[Judgment]
FIG. 12 is a determination table 330 that summarizes the determinations made by the diagnostic control device 33. The determination table 330 includes five determinations. In the determination table 330, a circle mark “◯” indicates a match, and a cross mark “X” indicates a mismatch.

  Conditions 31 to 34 are cases in which the comparison unit 334 determines that the processing results of the first processing unit 332 and the second processing unit 333 match. Thereafter, when the processing results of the first processing unit 332 and the second processing unit 333 match, the processing result is referred to as the processing result of the own device.

  The condition 31 is a case where it is determined that the output data (output A and output B) of the first information processing device 31 and the second information processing device 32 matches the processing result of the diagnosis control device 33. In this case, the determination unit 335 determines that all devices are normal, the output data determined to be normal, and the determination result that the first information processing device 31 and the second information processing device 32 are normal. Is output to the reliability assigning unit 336. The reliability assigning unit 336 generates the data with reliability by adding the determination result to the normal output data as the reliability, and outputs the data with reliability to which the reliability is added. In the determination table 330, the determination result (AB) indicating that the first information processing device 31 and the second information processing device 32 are normal to the normal output data (output A) output from the first information processing device 31. An example of assigning as a reliability is shown. The reliability assigning unit 336 may generate data with reliability in which the reliability “AB” is assigned to the output B.

  The condition 32 matches the output (output A) of the first information processing device 31 and the processing result of the diagnosis control device 33, but the output (output B) of the second information processing device 32 and the processing result of the diagnosis control device 33. Is determined to be different. In this case, the determination unit 335 determines that the first information processing device 31 is normal, and assigns reliability to the output A determined to be normal and the determination result that the first information processing device 31 is normal. To the unit 336. The reliability assigning unit 336 generates the data with reliability by adding the determination result to the normal output data as the reliability, and outputs the data with reliability to which the reliability is added. In the determination table 330, an example in which a determination result (A) indicating that the first information processing device 31 is normal is assigned as reliability to the normal output data (output A) output by the first information processing device 31. Indicates. In this case, the determination unit 335 transmits a control signal to the second information processing device 32.

  The condition 33 matches the output (output B) of the second information processing device 32 and the processing result of the diagnosis control device 33, but the output (output A) of the first information processing device 31 and the processing result of the diagnosis control device 33. Is determined to be different. In this case, the determination unit 335 determines that the second information processing device 32 is normal, and assigns reliability to the output B determined to be normal and the determination result that the second information processing device 32 is normal. To the unit 336. The reliability providing unit 336 generates the data with reliability by adding the determination result to the normal output data (output B) as the reliability, and outputs the data with reliability. In the determination table 330, an example in which a determination result (B) indicating that the second information processing device 32 is normal is assigned to the normal output data (output B) output from the second information processing device 32 as reliability. Indicates. In this case, the determination unit 335 transmits a control signal to the first information processing device 31.

  The condition 34 is a case where it is determined that the output data (output A and output B) of the first information processing device 31 and the second information processing device 32 and the processing result of the diagnosis control device 33 are different. In this case, the determination unit 335 does not output any output data to the reliability providing unit 336. In this case, the determination unit 335 transmits a control signal to the first information processing device 31 and the second information processing device 32. In addition, the process of the diagnostic control apparatus 33 is continued.

  Condition 35 is when the processing results of the first processing unit 332 and the second processing unit 333 are different. In this case, the diagnosis control device 33 cannot determine whether the output data (output A and output B) of the first information processing device 31 and the second information processing device 32 is correct. Cannot be granted. Therefore, the determination unit 335 stops or restarts its own device, and transmits a control signal to the first information processing device 31 and the second information processing device 32. If the processing results of the first processing unit 332 and the second processing unit 333 are different, the processing by the first information processing device 31 and the second information processing device 32 may be continued.

  The above is the description of the determination by the diagnosis control device 33. Next, the operation of the diagnostic control device 33 will be described with reference to the drawings.

(Operation)
FIG. 13 is a flowchart for explaining the operation of the diagnosis control device 33. In the following description, the constituent elements of the diagnosis control device 33 are described as the operation subject, but the diagnosis control device 33 itself may be regarded as the operation subject.

  In FIG. 13, first, the input unit 331 inputs input data (step S31).

  Next, the first processing unit 332 and the second processing unit 333 process input data (step S32).

  Here, the comparison unit 334 compares the processing results of the first processing unit 332 and the second processing unit 333 (step S33).

  When the processing results of the first processing unit 332 and the second processing unit 333 are different (No in Step S13), the diagnosis control device 33 stops or restarts the own device (Step S34). At this time, the diagnosis control device 33 may transmit a control signal to the first information processing device 31 and the second information processing device 32.

  On the other hand, when the processing results of the first processing unit 332 and the second processing unit 333 match (Yes in step S33), the determination unit 335 outputs the output data (output) of the first information processing device 31 and the second information processing device 32. A and output B) are input (step S35).

  Here, the determination unit 335 determines whether the output data (output A and output B) of the first information processing device 31 and the second information processing device 32 matches the processing result of the diagnosis control device 33 (step). S36).

  When the output A and the output B match the processing result of the diagnostic control device 33 (Yes in step S36), the reliability level assigning unit 336 gives the reliability level to normal output data (step S37).

  And the reliability provision part 336 outputs the output data which provided the reliability (step S38).

  On the other hand, when the output A and the output B are different from the processing result of the diagnosis control device 33 (No in step S36), the determination unit 335 performs information processing on which output data different from the processing result of the diagnosis control device 33 is output. A control signal is transmitted to the apparatus (step S39).

  The above is the description of the operation of the diagnostic control device 33. Note that the processing according to the flowchart of FIG. 13 is an example, and does not limit the content or order of the operation of the diagnosis control device 33.

  As described above, in the present embodiment, the output data determined to be normal is given a reliability and is output. Therefore, according to this embodiment, it is possible to provide highly reliable output data.

  Further, in the present embodiment, information indicating which information processing apparatus has processed among the multiplexed information processing apparatuses is assigned to the output data as reliability. Therefore, according to the present embodiment, on the system side that uses the output data of the information processing system of the present embodiment, the reliability of the output data can be determined according to the number of information processing devices that operate normally.

(hardware)
Here, a computer 90 in FIG. 14 is taken as an example of a hardware configuration that realizes an information processing apparatus and a diagnosis control apparatus (hereinafter collectively referred to as an apparatus) that constitute an information processing system according to each embodiment of the present invention. I will explain. Note that the computer 90 in FIG. 14 is a configuration example for realizing the apparatus of each embodiment, and does not limit the scope of the present invention.

  As shown in FIG. 14, the computer 90 includes a processor 91, a main storage device 92, an auxiliary storage device 93, an input / output interface 95, and a communication interface 96. In FIG. 14, the interface is abbreviated as I / F (Interface). The processor 91, the main storage device 92, the auxiliary storage device 93, the input / output interface 95, and the communication interface 96 are connected to each other via a bus 99 so that data communication is possible. The processor 91, the main storage device 92, the auxiliary storage device 93, and the input / output interface 95 are connected to a network such as the Internet or an intranet via a communication interface 96.

  The processor 91 expands the program stored in the auxiliary storage device 93 or the like in the main storage device 92, and executes the expanded program. In the present embodiment, a software program installed in the computer 90 may be used.

  The main storage device 92 has an area where the program is expanded. The main storage device 92 may be a volatile memory such as a DRAM (Dynamic Random Access Memory). In addition, a nonvolatile memory such as an MRAM (Magnetoresistive Random Access Memory) may be configured and added as the main storage device 92.

  The auxiliary storage device 93 stores various data including programs. The auxiliary storage device 93 is realized by a local disk such as a hard disk or a flash memory. Note that various data may be stored in the main storage device 92, and the auxiliary storage device 93 may be omitted.

  The input / output interface 95 is an interface for connecting the computer 90 and peripheral devices. The communication interface 96 is an interface for connecting to an external system or device through a network such as the Internet or an intranet based on standards or specifications. The input / output interface 95 and the communication interface 96 may be shared as an interface connected to an external device.

  You may comprise the computer 90 so that input devices, such as a keyboard, a mouse | mouth, and a touchscreen, may be connected as needed. These input devices are used for inputting various information, settings, and conditions. Note that when a touch panel is used as an input device, the display screen of the display device may be configured to also serve as an interface of the input device. Data communication between the processor 91 and the input device may be mediated by the input / output interface 95.

  Further, the computer 90 may be provided with a display device for displaying information. When the display device is provided, the computer 90 is preferably provided with a display control device (not shown) for controlling the display of the display device. The display device may be connected to the computer 90 via the input / output interface 95.

  Further, the computer 90 may be provided with a disk drive as necessary. The disk drive is connected to the bus 99. The disk drive mediates between the processor 91 and a recording medium (program recording medium) (not shown), and reads a data program from the recording medium and writes a processing result of the computer 90 to the recording medium. The recording medium can be realized by an optical recording medium such as a CD (Compact Disc) or a DVD (Digital Versatile Disc). The recording medium may be realized by a semiconductor recording medium such as a USB (Universal Serial Bus) memory and an SD (Secure Digital) card, a magnetic recording medium such as a flexible disk, and other recording media.

  The above is an example of the hardware configuration for enabling the apparatus according to each embodiment of the present invention. However, the hardware configuration in FIG. 14 is an example of a hardware configuration for executing the arithmetic processing of the apparatus according to each embodiment, and does not limit the scope of the present invention. The components of the device of each embodiment can be arbitrarily combined. The components of the device of each embodiment may be realized by software or a circuit.

  The diagnostic control method based on the method of each embodiment described so far is also included in the scope of the present invention. In addition, a program for causing a computer to execute processing related to the apparatus according to each embodiment is also included in the scope of the present invention. Moreover, the program recording medium which recorded the program which concerns on each embodiment is also contained in the scope of the present invention.

  Although the present invention has been described with reference to the embodiments, the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

1, 2, 3 Information processing system 11, 21, 31 First information processing device 12, 22, 32 Second information processing device 13, 23, 33 Diagnostic control device 131, 231, 331 Input unit 132, 232, 332 First Processing unit 133, 233, 333 Second processing unit 134, 334 Comparison unit 135, 235, 335 Determination unit 234 First comparison unit 236 Second comparison unit

Claims (10)

Using the output data of the first information processing device and the second information processing device that input the same input data and execute the same data processing on the input same input data, the first information processing device and the first information processing device 2 a diagnostic control device for diagnosing an information processing device ,
Input means for inputting the same input data as the first information processing apparatus and the second information processing apparatus;
First processing means for acquiring the input data from the input means, executing the same data processing as the first information processing apparatus and the second information processing apparatus on the acquired input data, and outputting a first processing result When,
The same input data as the first processing means is acquired from the input means, and the same data processing as the first information processing apparatus and the second information processing apparatus is executed on the acquired input data to obtain a second processing result Second processing means for outputting
Whether the first processing result is acquired from the first processing means and the second processing result is acquired from the second processing means, and the first processing result and the second processing result are compared and matched. First comparison means for determining whether the device itself is normal or not,
First output data generated by the first information processing device executing the data processing on the input data, and generated by the second information processing device executing the data processing on the input data Second output data is acquired, and the first information processing apparatus and the second information are compared by comparing either the first processing result or the second processing result with the first output data and the second output data. diagnose processing apparatus, diagnosis control unit and a determination unit configured to send a control signal corresponding to the diagnostic result to the first information processing apparatus and said second information processing apparatus. The determination means includes
Of the first information processing apparatus and the second information processing apparatus, the one that outputs the output data that matches the first processing result and the second processing result is determined to be normal,
It is determined that there is a failure in one of the first information processing device and the second information processing device that outputs the output data different from the first processing result and the second processing result,
2. The diagnosis according to claim 1, wherein the control signal for executing control of either stop or restart is transmitted to one of the first information processing apparatus and the second information processing apparatus that is determined to have a failure. Control device. The first output data is acquired from the first information processing device, the second output data is acquired from the second information processing device, and the acquired first output data is compared with the second output data. Second comparing means for determining whether or not they match,
The determination means includes
If the second by comparing means and said first output data and second output data is determined to be different, each of said first output data and said second output data, wherein the first processing result and the second The diagnosis control apparatus according to claim 1, wherein the diagnosis control apparatus determines whether or not they match with any of the processing results. The determination means includes
The first output data and the first processing result are compared to determine whether they match, and the second output data and the second processing result are compared to determine whether they match. The diagnosis control apparatus according to claim 3, wherein it is determined whether or not the first information processing apparatus and the second information processing apparatus are normal. Generating data with reliability in which reliability is given to the output data determined to be normal by the determination unit among the first output data and the second output data, and outputting the generated data with reliability The diagnostic control device according to any one of claims 1 to 4, further comprising a reliability providing unit that performs the operation. The determination means includes
The output data determined to be normal among the first output data and the second output data is associated with information related to the device that generated the output data determined to be normal, and is output to the reliability providing unit,
The reliability providing means is:
6. The diagnosis control device according to claim 5, wherein the data with reliability is generated by adding information related to the device determined to be normal to the output data as the reliability based on information acquired from the determination unit. The diagnostic control device according to any one of claims 1 to 6,
A system that uses the output data, and the first information processing device that outputs the first output data to the diagnostic control device;
An information processing system comprising: a system that uses the output data; and the second information processing device that outputs the second output data to the diagnosis control device. The diagnostic control device according to claim 5 or 6,
The first information processing device that outputs the first output data to the diagnostic control device;
An information processing system comprising: the second information processing device that outputs the second output data to the diagnosis control device. Using the output data of the first information processing device and the second information processing device that input the same input data and execute the same data processing on the input same input data, the first information processing device and the first information processing device 2. A diagnostic control method for diagnosing an information processing apparatus ,
Computer
Input the same input data as the first information processing apparatus and the second information processing apparatus,
Performing the same data processing as the first information processing apparatus and the second information processing apparatus on the input data that has been input to generate a first processing result;
Performing the same data processing as the first information processing device and the second information processing device on the input data, and generating a second processing result;
Comparing the first processing result and the second processing result to determine whether or not the device itself is normal;
First output data generated by the first information processing device executing the data processing on the input data, and generated by the second information processing device executing the data processing on the input data The second output data,
Comparing the first output data and the second output data with either the first processing result or the second processing result to diagnose the first information processing apparatus and the second information processing apparatus ;
Diagnostic control method for sending a control signal corresponding to the diagnostic result to the first information processing apparatus and said second information processing apparatus. Using the output data of the first information processing device and the second information processing device that input the same input data and execute the same data processing on the input same input data, the first information processing device and the first information processing device 2 A program for diagnosing an information processing device ,
A process of inputting the same input data as the first information processing apparatus and the second information processing apparatus;
Processing for generating the first processing result by executing the same data processing as the first information processing device and the second information processing device on the inputted input data;
A process of generating the second processing result by executing the same data processing as the first information processing apparatus and the second information processing apparatus on the input data that has been input;
A process of comparing the first processing result and the second processing result to determine whether or not the device is normal based on whether or not they match.
First output data generated by the first information processing device executing the data processing on the input data, and generated by the second information processing device executing the data processing on the input data Processing to obtain second output data;
A process of diagnosing the first information processing apparatus and the second information processing apparatus by comparing either the first processing result or the second processing result with the first output data and the second output data;
Program for executing a process of sending a control signal corresponding to the diagnostic result to the first information processing apparatus and said second information processing apparatus to the computer.

Images