JPH04205103A - Dual system - Google Patents

Abstract

PURPOSE:To monitor the generation of a fault at doubling devices themselves and to realize the complete dual system by providing the equipment doubling devices and starting up a stand-by side from a stand-by state to an in-use state if abnormality occurs to an in-use system. CONSTITUTION:Two equipments 1A and 1B are provided successively and the equipment doubling devices 2A and 2B are provided corresponding to them. The outputs of the equipment doubling devices 2A and 2B are connected on an OR basis and the output of the equipment 1A or 1B is sent to a controlled system. The equipment doubling devices 2A and 2B are equipped with gates which pass the signals from the equipments 1A and 1B to an output side in the in-use state and shut off them in the stand-by state. When an abnormal state signal is inputted from an opposite side while the devices 2A and 2B are in the stand-by state, their sides are started up from the stand-by state to the in-use state on condition that the abnormality of the opposite side is serious. Further, when an operation signal is sent out of the opposite side, the operation signal on the side which receives it is turned OFF through hardware.

Description

DETAILED DESCRIPTION OF THE INVENTION (a) Field of Industrial Application This invention relates to a duplex system for equipment used in traffic signal control systems and the like.

(B) Conventional technology For example, in a traffic control system, when signals installed at many intersections are controlled by a central control unit (MPU), if there is only one device, if some kind of failure occurs in that device, Since there is a risk that the entire system will stop, two control devices of the same type are installed in parallel, one is operated as the active use, and the other is used as a standby function. Duplex systems are known that can immediately switch from standby to active when a failure occurs. As shown in FIG. 5, this type of conventional duplex system has two control devices 51 and 52 installed in parallel, and an equipment duplex device ( equipment switch) 53.

The equipment duplication device 53 is configured to switch the output to the standby system when a failure occurs in the currently used control equipment.

(c) Problems to be solved by the invention In the conventional duplex system described above, there is only one device duplex device for two control devices, so if a failure occurs in the device duplex device itself, Another problem is that there is a risk that the system will go down if switching becomes impossible or if there is a problem with the signal passing through the equipment duplication device.

This invention was made with attention to the above problem, and even if a failure occurs not only in the current control equipment but also in the equipment redundancy device, normal operation by switching is possible without causing a system down. The purpose is to provide a duplex system that can be secured.

(d) Means and operation for solving the problem The redundant system of the present invention has two control devices installed in parallel, one of these two devices is operated in active use and the other in standby mode, and the current control device is operated in standby mode. In a system that uses a device redundancy device to switch a standby control device into active use when a failure occurs, each device is equipped with a device duplication device corresponding to the two control devices, and each monitors the operating status of the other device. and means for starting the device from the standby state to the active state when a failure of the other party is detected while the device is in the standby state.

This redundant system is equipped with device duplication devices for each of the active and standby control devices.
Each side monitors the operating status of the other side, and if there is a failure in the active control equipment or equipment redundancy device, the standby side detects this and activates the own side as the active side. Therefore, even if a failure occurs in either the control equipment or equipment duplication device on the active side, the control equipment and equipment duplication device can be smoothly switched from one to the other, and the system It can reduce the degree of down.

(E) Examples The present invention will be explained in more detail with reference to Examples below.

FIG. 1 is a block diagram showing a schematic configuration of a duplex system showing an embodiment of the present invention. The duplex system of this embodiment has two devices (control devices) IA and IB installed in parallel, and also includes device duplex devices 2A and 2B corresponding to these devices IA and IB. Equipment duplication device 2
The outputs of A and 2B are connected in an OR manner, and the output from device IA or device IB is output to a controlled object not shown. The device duplication devices 2A and 2B each include a gate that passes signals from devices IA and IB to the output side when in the active state and blocks the output when in the standby state, and also includes an operational signal SIA indicating that the white side is in the active state. , SIB, and outputs operation status signals S2A and 32B indicating normality/abnormality of self and white side devices IA and IB, and also receives operation signals and operation status signals from the other party. The device redundancy devices 2A and 2B have a function in which the white side is in a standby state, and when an operating state signal indicating an abnormality is input from the other party, the white side is activated from the standby state to the active state. Also,
When the other party changes from the standby state to the active state and outputs an operational signal, the operational signal is turned off in hardware on the side receiving this signal.

In this embodiment system, it is assumed that the device IA side is currently in the active state and the device itself is in the standby state. In this state, the operation signal SIA is ON and the operation signal SIB is OFF.
F (see Figure 4).

If a failure occurs in the device IA or the two device duplexers for some reason, the device duplexer 2A sends an operating status signal S2A indicating an abnormality to the device duplexer 2B,
In response to this, the equipment duplexing device 2B is activated from the standby state to the operating state, and the operation signal SIB is turned ON. This ON state of the operational signal SIB is applied to the equipment duplexing device 2A, and the operational signal SIA is turned OFF. In this way, when a failure occurs in the device IA or device duplexing device 2A that is in operation, the device duplexing device 2B, which is the standby system, detects this and switches to the active system by itself, and until then the device IA The controlled object that was controlled by the device IB is now controlled by the device IB.

FIG. 3 shows the configuration of the embodiment system of FIG. 1 in more detail. In the same figure, MPUIIA
is the upper computer that constitutes the device IA, CCU 12
A is a communication control device that controls a controlled object under the control of the MPUI IA. The equipment duplication device 2A is an OMR
(Operating status output register) 21A, OMIR (Other side operating status register) 22A, CMR (Software command information register) 23A, switching unit 24A that automatically or manually outputs operation signals, outputs data of CCU 12A when itself is in active status. 25A, a DOR (external output register) 26A, a photocoupler 27A, a DIR (external input register) 28A, and a photocoupler 29A. Further, although shown in a simplified diagram, the equipment duplication device 2B is also configured in exactly the same manner as the two equipment duplication devices.

In this embodiment system, a signal indicating the normality/abnormality of the device LA and the device duplication device 2A is sent from the 0MR 21A to the other party 0MlR 22B.

Conversely, a signal indicating whether the other party is normal/abnormal is sent from the other party's 0MR 21B to the 0MTR 22A of the equipment duplexing device 2A. Further, the operation signals SIA and SIB are sent to the switching units 24A and 24B of other equipment duplexing devices, and when the operation signal of the other party is turned ON, the operation signal of the other side is turned OFF by hardware.

In this embodiment system, it is assumed that the equipment duplexing device 2B side is in an operating state, and the MPUI IA, CCU 12A, and equipment duplexing device 2A side are in a standby state. In this state, under the control of the MPUIIB and CCU 12B (not shown), that is, the data of the device IB is outputted via the gate 25B of the device duplication device 2B. In addition, the operational signal S
IB is ON and operational signal SIA is OFF. here,
When a failure occurs on the equipment redundancy device 2B side, 0MR21
An operating status signal indicating an abnormality is output from B and 0MTR22
It is taken into MPUI IA via A.

MPUIIA determines whether there is an abnormality on the other side in the standby state,
The operation signal SIA is transmitted via the CMR 23A and the switching unit 24A.
Turn on. By turning on the operation signal SIA, the gate 25A is opened, and data from the CCU 12A is outputted via the gate 25A. Further, the signal SIA immediately turns off the operational signal SIB in the equipment duplexing device 2B in terms of hardware.

In the embodiment system of FIG. 3, gates 25A and 25 for selectively connecting the outputs of the devices IA and IB to the controlled objects
B is provided in the equipment duplexing devices 2A and 2B, but these gates are installed in the equipment IA and IB as shown in FIG.
It may be attached to.

In addition, the elements constituting the gate include relays, semiconductor elements,
It may be anything else.

(f) Effect of the invention According to this invention, equipment duplication devices (redundancy switchers) are provided for each of the two control devices, and when an abnormality occurs in the active system, this is detected on the standby side. However, since it is started up from standby to operation on the standby side, it is possible to monitor failures in the equipment redundancy equipment itself, so that duplication of the equipment redundancy equipment itself can be completely realized, and a complete redundancy system can be realized.

Furthermore, the equipment duplication device itself can be the same, improving maintainability and device manageability.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing a schematic configuration of a duplex system according to one embodiment of the present invention, FIG. 2 is a block diagram showing a schematic configuration of a duplex system according to another embodiment, and FIG. 3 is an implementation of the system shown in FIG. A block diagram showing a more specific example of the example duplex system, 4M is a time chart for explaining the operation of the example duplex system of FIG. 1, and FIG. 5 is a block diagram showing the schematic configuration of the conventional duplex system. It is a diagram. IA/IB two control devices, 2A/2B = equipment duplication device, 5IB-3IB: Operation signal, 32B-32B: Operating status signal. Patent applicant OMRON Corporation (and 2 others) Agent Patent attorney Shigeru Nakamura Figure 1 IA 2A! Figure 2 Figure 4 Figure 5

Claims (1)

[Claims] (1) Two control devices are installed in parallel, and one of these two devices is operated in active use and the other in standby mode.If a failure occurs in the active control device, the device redundancy device is used to control the standby control device. In a redundant system that switches devices to active use, each device is equipped with a device duplication device corresponding to the two control devices, and each has means for monitoring the operating status of the other device, and means for monitoring the other device's failure when it is in standby mode. A redundant system characterized by comprising means for starting the system from a standby state to an active state when the system is detected.