JPH04205102A - Dual system - Google Patents

Abstract

PURPOSE:To prevent system operation from decreasing in level owing to switching by providing equipment doubling devices, and starting up a stand-by device into an in-use state when the degree of an operation system is heavy in the case of abnormality occurring to the in-use system. CONSTITUTION:Two equipments 1A and 1B are provided successively and the equipment doubling devices 2A and 2B are provided corresponding to them. The outputs of the equipment doubling devices 2A and 2B are connected on an OR basis and the output of the equipment 1A or 1B is sent to a controlled system. The equipment doubling devices 2A and 2B are equipped with gates which pass the signals from the equipments 1A and 1B to an output side and shut off them in the stand-by state. When an abnormal state signal is inputted from an opposite side while the devices 2A and 2B are in the stand-by state, their sides are started up from the stand-by state to the in-use state on condition that the abnormality of the opposite side is serious. Further, when an operation signal is sent out of the opposite side, the operation signal on the side which receives it is turned OFF through hardware.

Description

DETAILED DESCRIPTION OF THE INVENTION (a) Field of Industrial Application This invention relates to a duplex system for equipment used in traffic signal control systems and the like.

(B) Conventional technology For example, in a traffic control system (B), when signals installed at many intersections are controlled by a central control unit (MPU), if there is only one device, some kind of failure may occur in that device. If this occurs, there is a risk that the entire system will stop, so install two control devices of the same type in parallel, operate one for the current use, and keep the other in hot standby for the current use. We have adopted a redundant system that can immediately switch the standby item to the active one when a failure occurs.As shown in Part 4, this kind of conventional redundant system relies on one control unit. Devices 41 and 42 are installed in parallel, and an equipment duplication device (@device switching device) 43 is provided which selects and outputs the output of one of these control devices. If a failure occurs in the system, the output is switched to the standby system.

(c) Problems to be Solved by the Invention In the conventional redundant system described above, when an abnormality occurs in the control equipment of the active system, the system is forcibly switched to the other standby system. Therefore, if the degree of failure in the control equipment in the standby system is greater than that in the active system, the operational health of the system will be reduced.

This invention was made by focusing on the above-mentioned problem S, and even when a failure occurs not only in the current control equipment but also in the equipment switching device, it is possible to switch without causing system down. The purpose of this invention is to provide a redundant system that can ensure normal operation and that does not reduce the operational level of the system due to switching.

(d) Means and operation for solving the problem The redundant system of the present invention has one control device installed in parallel, one of which is operated in active use and the other in standby mode, and the current control device is operated in standby mode. In a redundant system in which a standby control device is switched into active use by a device duplication device when a failure occurs, each device is provided with a device duplication device corresponding to the one control device, and each device is configured to monitor the operating status of the other device. There is a means for monitoring, and a means for comparing the degree of failure of the other party with the degree of failure of the own when a failure of the other party is detected, and a means of comparing the degree of failure of the other party and the degree of failure of the other party as a result of the comparison. In severe cases, only 22 people have a means to bring themselves from standby to active status.

In this redundant system, each of the active and standby control equipment is equipped with a corresponding equipment redundancy device, and each side compares and monitors the other's operating status and its own operating status, and the active control equipment If there is a failure in the equipment or redundancy switch, the standby side detects this and, if the degree of failure is greater than the other party's failure, brings the own side into operation. If the degree of failure is more severe on the self, the system will not switch to the self even if the other side has a failure. Therefore, the operating level of the system does not deteriorate due to switching.

(E) Examples The present invention will be explained in more detail with reference to Examples below.

FIG. 1 is a block diagram showing a schematic configuration of a duplex system showing an embodiment of the present invention. The duplex system of this embodiment has one device (control device) IA, IB installed in parallel, and also includes device duplex devices 2A, 2B corresponding to these devices IA, IB. Equipment duplication device 2
The outputs of A and 2B are connected in an OR manner, and the output from device IA or device IB is output to a controlled object not shown. The device duplication devices 2A and 2B each have a gate that passes the signals from the devices IA and IB to the output side when in the operating state and blocks the output when in the standby state, and also includes an operation signal SIA on the white side that indicates that the device is in the operating state. , SIB, and outputs operating status signals S2A and 32B indicating the degree of abnormality including the normal status of self and white side devices 1A and IB, and also receives operation signals and operating status signals from the other party. The white side of the device duplication devices 2A and 2B is in a standby state, and when an operating status signal indicating an abnormality is input from the other side, it has a function to compare it with the operating status signal of its own device, and if the comparison shows that the error on the other side is large Additionally, it has a function to bring up the white side from the standby state to the active state. Further, when the other party changes from the standby state to the active state and outputs an operational signal, the operational signal is turned off in hardware on the side receiving this signal.

In this embodiment system, it is assumed that all the devices IA side and the active device IB side are in a standby state.

In this state, the operational signal SIA is ON, and the operational signal SIB is ON.
is OFF (see Figure 3). If a failure occurs in device IA or device duplication device 2A for some reason,
Operation status signal S2A indicating abnormality from equipment duplication device 2A
is input to the equipment duplexing device 2B, and the equipment duplexing device 2B
In response, it compares the degree of failure between itself and the other party, and if the degree of failure at the other party is severe, the start-up operation signal SIB is turned ON from the standby state to the active state. This operational signal S I BON is applied to the equipment duplexing device 2A, and the operational signal SIA is turned OFF. In this way, when a failure occurs in the device IA or the device duplexing device 2A that is in the operating state, it is detected by the device duplexing device if2B, which is the standby system, and the fault on the currently operating side is determined to be worse than the fault on the standby side. If the situation is severe, the standby side switches itself to the active system, and the controlled object that was previously controlled by the device IA is now controlled by the device IB4.

FIG. 3) shows the configuration of the embodiment system of FIG. 1 in more detail. In the same figure, MPUI
IA is the upper computer, CCU, that constitutes device IA.
12A is a communication control device that controls a controlled object under the control of MPU 11A.

The equipment duplication device 2A includes an OMR (operating status output register) 21A and an OMIR (other side operating status register) 22A.
, CMR (software command information register) 23A, switching unit 24A that automatically or manually outputs operation signals, gate 25A that outputs data of CCTJ12A in its own operating state, DOR (external output register) 26A, photocoupler 27A, DIR (external input register) 28A,
It is equipped with a photocoupler 29A. Although shown in a simplified diagram, the equipment duplexing device 2B is also the same as the equipment duplexing device 2A.
They are constructed in exactly the same manner and correspond to each other.

From 0MR21A and 21B, devices IA and IB respectively
Outputs a signal indicating the degree of failure on the side. This signal is, for example, a bit-compatible signal that indicates each operating state, such as upper communication normal, line normal, traffic signal normal, terminal normal, sensor normal, etc., and can also indicate cases of reverse 22, abnormality, and standby. Outputs the failure status of both the system and the active system.

In this embodiment system, the signal indicating the operating status (failure degree) of the device IA and the device duplexing device 2A is 0MR21.
, 4 to the other party's O~41R22B22. Conversely, the other party's ON (from R21B to equipment duplexing device 2
A signal indicating the operating state of the other party is sent to A's 0MlR22A. Further, the operation signals SIA and SIB are sent to the switching units 24A and 24B of other equipment duplexing devices, and when the operation signal of the other party is turned ON, the operation signal of the other side is turned OFF by hardware.

In this embodiment system, it is assumed that the equipment duplexing device 2B side is in the active state, and the MPUI IA, CCUI 2A, and the equipment duplexing device 2A side are in the standby state. In this state, the MPT (not shown), ! Under the control of IIB and CCU 12B, that is, the data of device IB is transferred to device duplexing device 2.
It is output through the gate 25B of B. Further, the operational signal SIB is ON and the operational signal SIA is OFF. Here, if a failure occurs on the equipment redundancy device 2B side, 0MR
An operating status signal indicating an abnormality is output from 21B and the OMIR
22A to MPUIIA.

MPUIIA determines whether there is an abnormality on the other side in the standby state,
The degree of failure is compared with that of the other party, and if the degree of failure of the other party is large, the operation signal SIA is turned ON via the CMR 23A and the switching unit 24A. By turning ON the operation signal SIA, the gate 25A is opened, and data from the CCU 12A is outputted via the gate 25A. Also, the signal SI
A causes the operational signal SIB in the equipment duplexing device 2B to be immediately turned off in terms of hardware.

In the embodiment system of FIG. 3, gates 25A and 25 for selectively connecting the outputs of the devices IA and IB to the controlled objects
Although the case where the gate B is provided in the equipment duplexing devices 2A and 2B is shown, these gates may be attached to the equipment IA and IB.

In addition, the elements constituting the gate include relays, semiconductor elements,
It may be anything else.

(f) Effects of the Invention According to this invention, a device redundancy device (redundancy switch) is provided for each of the M Vi devices, so that when an abnormality occurs in the active system, the standby side The system detects this, compares the degree of failure in the current active system and the standby system, and starts up the system from the standby state to the active state only if the degree of failure in the active system is severe. It is possible to prevent the situation from getting worse.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing a schematic configuration of a duplex system according to an embodiment of the present invention, FIG. 2 is a block diagram showing a more specific example of the duplex system according to the embodiment of FIG. 1, and FIG. FIG. 1 is a time chart for explaining the operation of the duplex system according to the embodiment, and FIG. 4 is a block diagram showing a schematic configuration of the conventional duplex system. IA/IB dual control equipment 2A/2B dual equipment duplication device, SIB SIB: Operation signal, 32B/32B + operating status signal. Patent applicant: Omron Corporation (two idiots) Agent: Patent attorney Shigeru Nakamura Figure 1B

Claims (1)

[Claims] (1) One control device is installed in parallel, and one of these two devices is operated in active use and the other in standby mode.If a failure occurs in the active control device, the device redundancy device is used to control the standby device. In a redundant system that switches devices to active use, each device is equipped with a device duplication device corresponding to the two control devices, and each has means for monitoring the operating status of the other device, and means for monitoring the other device's failure when it is in a standby state. When a failure is detected, the system is equipped with a means for comparing the degree of failure of the other party with the degree of failure of the own, and a means for bringing the self into active state from the standby state only if the failure degree of the other party is more severe as a result of the comparison. A redundant system characterized by: