JPH0371237A - Parallel double system processor and its operating method - Google Patents

Abstract

PURPOSE:To inexpensively obtain high reliability by preparing a mode switching part and a data comparing part, mutually changing the modes of two processing parts with equivalent relation, and even when abnormality is generated, continuing operation without instantaneously interrupting the operation while recovering the abnormality. CONSTITUTION:A mode switching part 28 switches the processing parts 20 at least to three modes; a single mode for driving each processing part 20 only by the self-data, a parallel mode for driving one processing part 20 in co-operation with the other processing part and a slave system mode to be used for restoring a processing system, and a standby mode when necessary based upon information obtained from a self-diagnostic part 21 and a mode comparing part 27. A data comparing part 29 collates the data included in itself with the data of the other processing part 20 replaced by a data link part 25 and outputs the data to be stored in accordance with the current mode of the self- part to a memory 24. Consequently, the continuity of the processing can be maintained even at the time of generating a failure and high reliability can be inexpensively obtained.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a parallel dual system processing device and an operating method having two processing units that receive information data, perform logical processing, and output processing results. .

"Conventional technology" Since the mission of railway transport control systems is to ensure safety, it is common to ensure reliability as a multiple system, and conventional systems have triple or double systems. be.

For example, in a triple system, control is carried out by constant majority voting, so that even if one system fails, operation can continue.

In addition, in a dual system, if a mismatch occurs, it is impossible to determine which is correct.
It has a system switching circuit based on external input, and operates by determining the active system and standby system.

"Problem to be Solved by the Invention" However, in such conventional technology, in a triple system or more systems, a majority vote is always required both when executing control logic and when outputting. Therefore, there was a problem that the circuit configuration for determining the majority vote was complicated and the system became expensive.

In addition, in a dual-system system, it is either cheaper in terms of cost or when switching from the active system to the standby system in the event of a failure, unavoidable instantaneous power outages and the inability to achieve processing continuity prevent operation. There was a problem in that it could cause problems.

The present invention was made by focusing on these conventional problems, and although it is a dual system, it is a parallel dual system processing that can maintain processing continuity even in the event of a failure. (for the purpose of providing equipment and operating methods).

``Means for Solving the Problems'' The gist of the present invention, which is a distant relative of the above object, is as follows: 1. A parallel 2 processor having two processing units that receives information data, performs logical processing, and outputs the processing results. It is a heavy system processing device, and each processing section has a self-diagnosis section, and each processing section has a receiving section that receives information data, and a receiving section that processes the information data and outputs the result as processed data. A logic control unit, a memory that stores at least processing data, and a data link unit that exchanges data with the other processing unit.

a mode output section that outputs its own mode information to the other processing section; a mode comparison section that receives the mode information of the other processing section and compares it with its own mode; and a mode comparison section that receives the mode information of the other processing section and compares it with its own mode; A standalone mode that operates only on its own data.

A mode switching unit that switches the processing unit to at least three modes: a parallel mode in which it operates in cooperation with the other party, and a slave mode in which it returns to the processing system; 1. A parallel dual system processing device, comprising: a data comparison unit that collates data and outputs data to be stored to the memory according to its current mode.

2 Parallel Z is composed of two parallel and equal processing units into which the same information data is input, and each processing unit is capable of self-diagnosis and detecting its own abnormalities.
In the fI system operation method, each processing section can be switched to at least three modes: an independent mode in which each processing section operates independently, a parallel mode in which it operates equally and in parallel, and a slave mode in which it is dependent on the other, and each processing section In addition to exchanging and comparing the information data received by each processing unit, the mode information of each processing unit is mutually output and exchanged, and each processing unit mutually checks the mode status of the other processing unit and the degree of coincidence of information data. The method of operating a parallel dual system is characterized by changing the mode according to the self-diagnosis and self-diagnosis.

"Operation" In normal operation, the two equal processing units of a parallel dual-system processing device receive information data, perform logical processing, output the same processing result, and work together to perform continuous processing. During operation, each reprocessing section constantly performs self-diagnosis by its own self-diagnosis section, and is configured to be able to withdraw from the processing system if the self-diagnosis results are abnormal.

During normal and continuous operation, the reprocessing section is given the same information data to both processing sections operating in parallel mode, and each processing section receives information data at the receiving section. , the logic control unit processes the information data and outputs the result, and if it is normal, the output of the reprocessing unit is the same, and the output is treated as a normal control output.

In each processing section, the processing data output from the logic control section is stored in the memory while being updated.

Furthermore, the mode of each processing section is mutually communicated to the other by a mode output section, and information data and processing data are also mutually communicated via a data link section, and a data comparison section confirms that the data match.

When the self-diagnosis section detects an abnormality in one processing section, the one processing section withdraws from the processing system, and the mode output section transmits the information to the other processing section.

The mode comparing section of the other processing section receives the transmission and notifies the mode switching section that the mode has changed, and the mode switching section switches the processing section to the independent mode. Processing unit a, which has entered the standalone mode, operates regardless of the situation of the other party. Processing continues without stopping.

While the other processing section is operating in the independent mode, one of the processing sections is repaired and returns to the processing system, so it immediately enters the slave mode. The processing unit in slave mode does not actually participate in processing, but prepares to return to parallel mode. This preparation involves copying and matching the data of the processing units operating in standalone mode.

The data comparison section of the processing section in the slave mode passes the processing data of the partner processing section operating in the independent mode and copies it into its own memory.

Furthermore, the data comparison section compares the information data received by the reception section with the information data of the other processing section exchanged by the data link section, and if they do not match, further collates the next information data until they match. Repeat the verification and if there is a match,
This is communicated to the mode switching section, and the mode switching section switches its own processing section to the parallel mode. At the same time, the other processing unit also enters parallel mode.

In this way, the processing section in which the abnormality has occurred is temporarily withdrawn from the processing system, and then returned after being repaired. Since at least one of the reprocessing units in the parallel dual system is always in operation, instantaneous interruptions due to switching do not occur.

"Example" Hereinafter, one embodiment of the present invention will be described based on the drawings.

Each country represents an embodiment of the invention.

As shown in FIG. 1, the parallel-duplex processing device 10 includes two processing sections 20 and 20 that receive information data, perform logical processing on it, and output processing results.

The processing units 20, 20 have the same configuration and are arranged so that they operate completely equally when viewed as a whole, and both have the configuration shown in FIG.

Each processing section 20.20 is equipped with a self-diagnosis section 21, which constantly checks itself, so that any abnormality can be detected immediately.

Since the configuration of each processing section 20.20 is the same.

Only one will be explained below.

In addition to the self-diagnosis section 21, the processing section 20 includes a receiving section 22, a logic control section 23, a memory 24, and a data link section 2.
5, a mode output section 26, a mode comparison section 27, a mode switching section 28, and a data comparison section 29.

The receiving section 22 receives information data from a command section (not shown) and sends the information to a logical control section 23 . The logic control unit 23 processes the information data and outputs the result as processed data to a controlled unit (not shown) and necessary departments within the processing unit 20. and the memory 24
stores at least the processing data output from the logic control unit 23.

The data link section 25 is connected to the data link section 25 of the other processing section 20 and mainly exchanges processed data with the other party, and to ensure completeness, it is desirable to provide two parallel systems.

The mode output unit 26 outputs its own mode information to the other processing unit 20, and the mode information includes normal information WDT, slave mode information SCM, and independent mode information S.
RM, parallel mode information PRM, and standby mode information BUM.

The mode comparing section 27 receives the mode information from the other processing section 20, compares it with its own mode, and transfers the result to the mode switching section 28. This information is transmitted to necessary departments such as the data comparison section 29.

The mode switching unit 28 is a self-diagnosis! lr section 21. Based on the information from the mode comparison unit 27, at least three modes are required: a standalone mode that operates only with its own data, a parallel mode that operates in collaboration with the other party, and a slave mode when returning to the processing system. This switches the processing section 20 to standby mode.

The data comparison section 29 compares its own data with the data of the other party exchanged with the data link section 25, and outputs data to be stored to the memory 24 according to its current mode.

The parallel dual-system processing device IO is composed of two parallel and equal processing units 20 to which the same information data is input, and each processing unit 20 can self-diagnose and detect abnormalities in itself. It operates using a parallel dual system operation method.

Each processing unit 20 can be switched to at least three modes: an independent mode in which it operates independently, a parallel mode in which it operates equally and in parallel, and a slave mode in which it is dependent on the other.
It is also possible to switch to standby mode if necessary.

The information data received by each processing section 20 is exchanged and compared with each other, and the mode information of each processing section 20 is mutually outputted and exchanged, so that each processing section 20 becomes the other processing section 2.
The mode is changed depending on the mode state of 0, the degree of matching of information data, and self-diagnosis.

Next, the action will be explained.

In normal operation, the two equal processing units 20 of the parallel dual-system processing device IO receive information data, perform logical processing, output the same processing result, and work together to continuously process the data. During operation, each of the two processing units 20 constantly performs self-diagnosis by the self-diagnosis unit 21, and is configured to be able to withdraw from the processing system if there is an abnormality in the result of the self-diagnosis.

The state of mode switching will be explained below with reference to the state transition diagram shown in FIG. In Figure 3, both parallel systems are shown as l system for convenience.
It is expressed in type 2 as type 2, and the mode output is positive if there is no bar above the sign, and negative if there is a bar above the sign.

During normal and continuous operation, the 1-car processing section 20.2
0 is operating in parallel mode, and the mode output section 26
WDTIWD72g and PRMl, PR respectively.
M2 is outputting.

Both processing units 20.20 are given the same information data,
In each processing section 20.20, the receiving section 22 receives information data, and the logic control section 23 processes the information data and outputs the result.If normal, the outputs of both processing sections 20.20 are the same. Yes, the output is treated as a normal control output.

In each processing section 20.20, the processing data output from the logic control section 23 is stored in the memory 24 while being updated. Furthermore, the mode of each processing section 20.20 is determined by the mode output section 2.
6 to WDTI, WDT2 and PRM as described above.
I, PRM2 are mutually transmitted to the other party, information data and processing data are further transmitted to each other via the data link section 25, and the data comparison section 29 confirms that the data match.

For example, in the processing unit 20 of one system, the self-diagnosis unit 2
1 detects an abnormality, the processing unit 20 of the I system withdraws from the processing system, and the mode output unit 26 outputs WDT to the other processing unit 20.
1 to notify that an abnormality has occurred.

The mode comparison unit 27 of the other processing unit 20, which is the 2-system, receives the information and informs the mode switching unit 2 that the mode of the 1-system has changed.
8, and the mode switching unit 28 switches the processing unit 20 of the two systems.
Switch to standalone mode.

In the standalone mode, SRM2 is output from the mode output unit 26 of the processing unit 20 of the 2nd system, and the processing unit 20 of the 2nd system in the standalone mode operates regardless of the situation of the other party, and the processing continues without stopping.

This is because while the z-system processing section 20 is operating in the independent mode, the 1-system processing section 20 is in the normal position 1 in FIG. 3, is repaired, and returns to the processing system.

Once the power is turned on, it will go into slave mode 1. At this time, the mode output unit 26 outputs SCMI and also outputs WDTI.
Output.

The l-system processing unit 20 in the slave mode does not actually participate in the processing, but prepares to return to the parallel mode. This preparation refers to the processing unit 20 of the two systems operating in independent mode.
This means copying and matching the data.

Data comparison unit 29 of the l-system processing unit 20 in slave mode
Since they do not match even when compared with the own data, the processing data of the other party's two-thread processing unit 20 operating in the independent mode is passed through and copied to the own memory 24.

Further, the data comparing section 29 compares the information data received by the receiving section 22 with the information data of the partner 2 thread processing section 20 exchanged by the data link section 25, and if they do not match, the next information data is compared. The matching is repeated until further matching is achieved.

If the data match, the memory copy is completed, the data comparison unit 29 notifies the mode switching unit 28, and the mode switching unit 28 switches its own processing unit 20 to the parallel mode. At the same time, the other party's two-thread processing section 20 also enters parallel mode.

The mode comparing sections 27 of both processing sections 20 and 20 each determine the mode to be selected based on the information received from the mode output section 26 of the other party, and inform the mode switching section 28 of the determined mode. In addition, the change in the own mode switched by the mode switching unit 28 is notified to the other party, and finally in the parallel mode, each WDTI
, WDT2 and PRMI, PRM2 are mode output section 2
It is output from 6.

In this way, any of the processing units 20, 20 in which an abnormality has occurred is temporarily withdrawn from the processing system, and then returned after being repaired. Since at least one of the two processing units 20.degree. 20 in the parallel dual system continues to operate at all times, instantaneous interruptions due to switching do not occur.

When both processing units 20 and 20 start up when the system is started, each monitors the other's SRM, and when one goes into independent mode, the other goes into slave mode, and after matching the data, goes into parallel mode. Become.

Further, in this embodiment, if there is an abnormality in the data link unit 25, each system can output BUM and enter standby mode after taking its own WDT into consideration. When two systems of the data link section 25 are installed in parallel, the probability that an abnormality will occur in the two systems at the same time is low, so the result of data matching should be that one system is consistent, and the system in which the abnormality has occurred should be integrated. The processing unit 20 that is present enters standby mode.

"Effects of the Invention" Parallel dual system processing according to the present invention 1! According to the TM and operating method, the two processing sections are made to change modes on an equal basis so that even if an abnormality occurs, the processing section continues to operate without momentary interruption while recovering. The processing apparatus and operation method can be made to operate reliably with only two simple systems, and high reliability can be obtained at low cost.

[Brief explanation of drawings]

Each figure shows one embodiment of the present invention, and FIG. 1 shows two parallel
A schematic block diagram of the heavy system processing ytN, FIG. 2 is a block diagram of the processing section, and FIG. 3 is a state transition diagram. 10--Parallel dual system processing device

Claims (1)

[Claims] 1. A parallel dual-system processing device having two processing units that receive information data, perform logical processing, and output processing results, each processing unit having a self-diagnosis unit. Each processing unit includes a receiving unit that receives information data, a logic control unit that processes the information data and outputs the result as processed data, a memory that stores at least the processed data, and a memory that stores at least the processed data, and a receiving unit that receives information data. a mode output section that outputs its own mode information to the other processing section; a mode comparison section that receives the mode information of the other processing section and compares it with its own mode; and the self-diagnosis section. , based on the information from the mode comparison unit, the processing unit is put into at least three modes: an independent mode that operates only with its own data, a parallel mode that operates in cooperation with the other party, and a slave mode when returning to the processing system. a mode switching unit for switching; a data comparison unit for collating its own data with data of the other party exchanged by the data link unit and outputting data to be stored to the memory according to its current mode; A parallel dual system processing device characterized by the following. 2. A method of operating a parallel dual system, which is composed of two parallel and equal processing units into which the same information data is input, and each processing unit is capable of self-diagnosis and detecting its own abnormalities. , each processing unit operates in an independent mode in which it operates independently, in a parallel mode in which it operates equally and in parallel,
It is possible to switch between at least three modes, including a slave mode that is subordinate to the other, and the information data received by each processing unit is exchanged and compared with each other, and the mode information of each processing unit is mutually output and exchanged. A method of operating a parallel dual system, characterized in that each processing section changes its mode depending on the mode state of the other processing section, the matching of information data, and self-diagnosis.