JPH037068A - Multiple controller - Google Patents

Abstract

PURPOSE:To improve the availability of system of providing fault reset signals to all control circuits, based on fault signals fed from respective control circuits, upon fault of any control circuit and releasing fault mode automatically thereby ensuring multiplex configuration at all times. CONSTITUTION:Multiple controller comprises an automatic reset circuit 9 for detecting fault in multiple control circuits A6, B7 during operation of a power controller 2 through any one of the control circuits A6, B7 and providing fault reset signals to all multiple control circuits to interrupt the operational power source of the control circuit temporarily, a circuit 8 for selecting the reset circuit through function of the automatic reset circuit 9, and a circuit 80 for switching the control circuit based on a signal selected through the selecting circuit 8. By such arrangement, fault rest is executed automatically upon detection of a fault during operation of one control circuit and a sound control circuit is selected to resume operational control immediately.

Description

Detailed Description of the Invention [Purpose of the Invention (Field of Industrial Application) The present invention has a plurality of control circuits for one controlled object, and for example, one control circuit detects a failure during operation control. The present invention relates to a highly reliable multiplex control device that automatically performs a fault reset when a failure occurs, selects a healthy control circuit, and immediately resumes operation control.

(Prior Art) Here, a description will be given using a power converter using a Cyrisk element as a controlled object and a Cyrisk phase control device as a control device. A power converter includes a forward converter that converts alternating current power into direct current, a current transformer that detects the current flowing through the forward converter, and a transformer that detects the output voltage of the forward converter.

The phase control device is a voltage control circuit or 1! A secondary control path, a phase control circuit that controls the energization phase of the thyristor (based on these outputs), a protection circuit that detects a failure based on the current and voltage detection signals of the forward converter, and be done. These basic operations are described in detail in, for example, "Operation and Maintenance of Thyristor Controlled DC Motors J (1! Published by Kishoin, edited by Naohiko Ueyama), Chapter 2, P31-P57. Let's talk about control switching.

Two control circuits are provided for one power converter, and the power converter is always controlled by only one control circuit, and if an abnormality occurs in that circuit, control is switched to another healthy control circuit. FIG. 3 shows a configuration that continues. In FIG. 3, when an abnormality occurs in the control circuit A6 during operation, a failure signal 160 of the control circuit A6 is input to the selection circuit 8, and the selection circuit 8 selects a healthy control circuit B7 and switches the control circuit A6 to the switching circuit 8.
0 switches the control circuit to the control circuit B7.

Thereby, the operation control of the power converter 2 is continued. At this time, the display circuit 81 displays the failure of the control circuit A6 based on the failure signal 60 of the control circuit A6. If an abnormality occurs in control circuit B7 during operation in this state, 2! of control circuit A6 and control circuit B7! The control device as a failure
Control of the power converter 2 is stopped. In addition, an abnormality in one control circuit affects the input current and output voltage of the power converter 2, and these abnormal operations are caused by input 1! The current is detected by a current transformer 141 and a current transformer B42,
When the output voltage is detected by the Fit pressure detector A5J and the voltage detector B54', the control circuit A6 and the control circuit B7 simultaneously go into a failure state and stop controlling the power converter 2.

(Problems to be Solved by the Invention) As described above, the prior art has the following problems.

(1) Since the power converter 2 that is the control target is common, if an abnormality occurs in one control circuit, the power converter 2
As a result, the control circuit A6 and the control circuit B7 are simultaneously in a fault state, and the control of the stain force converter 2 is stopped.

(2) When a control circuit fails, it is necessary for a human system to recover from the failure.

(3) Immediately after one control circuit becomes abnormal and switches to the other, the control circuit that was switched due to the transient change,
If the failure is detected again, the control circuit's 2! If there is a failure, the control of the stain force converter 2 will stop.

The present invention was made in view of the problems of the prior art.When an abnormality occurs in one control circuit, a fault signal from that control circuit sends a fault reset signal to all multiplexed control circuits. is automatically input, and then a normal control circuit is selected by the selection circuit to continue operation control of the power converter, and for control circuits that do not recover from the fault even with the fault reset signal, the control circuit is operated. It is an object of the present invention to provide a multiplex control device which can initialize all signals inside a control circuit and remove a fault signal by cutting off the power supply for a short time, thereby continuing to control the power converter.

(Means for solving the problem) Figure pJ1 shows the configuration of the present invention. The control circuit A6 and the control circuit B7 are multiplexed control circuits, and include a switching circuit 80 for switching these multiplexed control circuits, a power converter 2 whose operation is controlled by the control circuit, and this power converter 2. a current transformer A4J and a current transformer B42 that detect the input current of the power converter 2, a voltage detector A53 and a voltage detector B54 that detect the output voltage of the power converter 2, and the multiplexed control circuit. While the power converter 2 is being controlled by any one of the control circuits 6 and B7, the control circuit A
6 and detects that the control circuit B7 has failed, outputs a failure reset signal to all multiplexed control circuits, and
An automatic reset circuit 9 cuts off the operating power of the control circuit for a short period of time for a control circuit that is still in failure after inputting the failure reset signal, and after the operation of this automatic reset circuit 9 is completed, it 6. By the action of the display circuit 81 which determines and displays an abnormality in the control circuit and the automatic reset circuit 9, the control circuit A 6. Furthermore, when the control circuit B7 recovers from the failure, it is provided with a selection circuit 8 that selects the control circuit that has recovered from the failure, and a switching circuit 80 that switches the control circuit according to the selection signal of the selection circuit 8.

(Function) With the above configuration, one control circuit, for example, control circuit A
6 when an abnormality occurs during operation, the failure signal eoVc
In the more multiplexed control circuit A6 and control circuit B7,
A fault reset signal 9o is input from the automatic reset circuit 9. After the failure reset signal 90 is completed, the automatic reset circuit 9 determines whether the control circuit A6 and the control circuit B7 are in a failure state or in a controllable state, and whether the control circuit in the failure state is in a controllable state or not. The automatic reset circuit 9 generates a power initialization signal (power initialization signal 92 for the control circuit A6 and a power initialization signal 91 for the control circuit 87) to cut off the operating power of the jU control circuit for a short time.
outputs again. In the control circuit in which the power supply initialization has been performed, all control signals are initialized, so that all failure modes are canceled except for a hardware failure of a component, and operation control of the power converter 2 is continued.

(Example) An example of the present invention is shown in FIG. The control circuit A6 and the control circuit B7 are multiplexed control circuits, and include a switching circuit 80 for switching these multiplexed control circuits, a power converter 2 whose operation is controlled by the control circuit, and this power converter 2. a current transformer A41 and a current transformer B42 that detect the input current of the power converter 2, a voltage detector A5J and a voltage detector B54 that detect the output voltage of the power converter 2, and the multiplexed control circuit A6. And, while the power converter 2 is being controlled by any one of the control circuits B7, the control circuit A
6 and detects that the control circuit B7 has failed, outputs a failure reset signal to all multiplexed control circuits, and
An automatic reset circuit 9 that cuts off the operating power of the control circuit for a short time after the failure reset signal is inputted to the control circuit that continues to fail; , a display circuit 81 that determines and displays a control circuit abnormality, and a selection circuit US that selects the control circuit that has recovered from failure when the control circuit A6 and control circuit B7 recover from failure due to the action of the automatic reset circuit 9. , a switching circuit 80 that switches the control circuit according to the selection signal of the selection circuit 8. Further, a detailed configuration of the automatic reset circuit 9 is shown in FIG. The automatic reset circuit 9 includes a fault reset signal generator 6I that receives a fault signal 60 from the control circuit A6 and outputs a fault reset signal 90 via an OR circuit 97, and a fault signal generator 6I that outputs a fault reset signal 90 via an OR circuit 97, and a fault signal from the control circuit B7. 7Q, the fault reset signal generator 71 outputs the fault reset signal 90t via the OR circuit 97, and upon completion of the fault reset signal 90, which is the output signal of the OR circuit 97, the control circuit A6
The power supply initialization signal generator 62 checks the fault signal 6θ from the circuit and outputs the power supply initialization signal 92 if it is in a fault state, and similarly, upon completion of the fault reset signal 9o, which is the output signal of the OR circuit 97, a power supply initialization signal generator 72 that checks the failure signal 70 from the control circuit B7 and outputs a power supply initialization signal 91 if the failure state occurs; and upon completion of the power supply initialization signal 92, the control circuit A failure detector A6j that checks the failure signal 5θ from A6 and outputs a failure indication signal 93 of the control circuit A6 if it is in a failure state; Failure detection B that checks the failure signal 70 from the circuit B7 and outputs a failure indication signal 94 of the control circuit B7 if it is in a failure state.
B 7 s).

In the above configuration, one control circuit, for example, control circuit A
6 when an abnormality occurs during operation, the fault signal 60 sends a fault reset signal 9o from the fault reset signal generator 6 to the multiplexed control circuit A6 and control circuit B7.
is input. After the failure reset signal 9o is completed, the automatic reset circuit 9 determines whether the control circuit A6 and the control circuit B7 are in a failure state or a controllable state using a power supply initialization signal generator A62 and a power supply initialization signal generator B72, For control circuits in fault condition,
Operation of that control circuit'! A power initialization signal (power initialization signal 92 for control circuit A6, power initialization signal 9 for control circuit B7) that interrupts ItR for a short time is sent to power initialization signal generator 1.
62 and a power supply initialization signal generator B72. In the control circuit in which the power supply initialization has been performed, all control signals are initialized, so that all failure modes are canceled except for a hardware failure of a component, and operation control of the power converter 2 is continued.

As described above, the present invention can obtain the following effects.

(1) In the six multiplexed control circuits, even if the control circuit becomes abnormal and fc occurs, failure recovery can be automatically performed.

(2) Since failure recovery is automatic, the multiplexed configuration can be maintained to the maximum extent possible, and reliability can be significantly improved.

(3) Due to the effect of item (2) above, the operating rate of the system to which the control device of this configuration is applied is significantly improved.

(4) Even if an abnormality in one control circuit affects the input current and output voltage of the power converter, and all multiplexed control circuits detect a failure, automatic failure reset will cause the power converter to Operation control can be continued.

[Effects of the Invention] According to the present invention, 5. In a control device in which control circuits are multiplexed for one control object and the operation of the control object is always controlled by one control circuit, even if the collapse control circuit fails, In response to the failure signal output from each control circuit, a failure reset signal or power supply initialization signal is input to all control circuits and the failure mode is automatically released, so a multiplexed configuration can always be ensured and system operation can be maintained. high rate,
A highly reliable multiplex control device can be provided. In particular, when the controlled object is common to multiplexed control circuits, an abnormality in one control circuit will affect the input/output of the controlled object, and as a result, the output amount of the seven control objects will be detected. All the detectors in the control circuit may simultaneously detect an abnormal signal, and all multiplex control circuits may become abnormal at the same time. Even in such a state, the operation control of the controlled object can be continued using the failure reset signal and the power supply initialization signal.

[Brief explanation of the drawing]

@Figure 1 is a configuration diagram showing one embodiment of the present invention, and Figure 2 is the first embodiment.
A block diagram showing a detailed example of the automatic reset circuit in Figure 3.
The figure is a configuration diagram of a conventional device. ! ...AC power supply, 2...Power converter, 3...Load, 4...Reference setter, 6...Control circuit, As7...
・Control circuit B, 8... Selection circuit, 9... Automatic reset circuit, 41... Current transformer A142... Current transformer B, 4
3.44... Rectifier, 51h, 51b, 52g, 52
b=Resistor, 53... Voltage detector A, 54... Voltage detector B160... Failure signal A, 70... Failure signal B, 80... Switching circuit, 81... Display circuit ,6
1...Fault reset signal generator A, 71...Fault reset signal generator B, 62...Power initialization signal generator A172...Power initialization signal generator B163...Fault detector A, 73 ...fault detector B
097...OR circuit, 90...failure reset signal,
91...Power supply initialization signal A192...Power supply initialization signal B, 93...Failure display signal A19
4...Failure display signal B0 Figure 1 Figure 1 Figure 2 Figure

Claims (1)

[Claims] A multiplexed control device including multiplexed control circuits, a switching circuit for switching these multiplexed control systems, a controlled object whose operation is controlled by the control circuit, and a detector that detects the amount of operation of this controlled object, A first means for detecting that a control circuit has detected a failure during operation control of a controlled object by any one control circuit or all the control circuits in the multiplexed control system; a second means for outputting a fault reset signal to all multiplexed control circuits in response to the signal; a third means for selecting a control circuit that has recovered from a fault after inputting the fault reset signal; A fourth means of cutting off the operating power of the control circuit for a short period of time for a control circuit that continues to fail; after the operation of this fourth means is completed, if the control circuit is still in a failure state, it is determined that the control circuit is abnormal; A multiplex control device characterized by comprising a fifth means.