JPH0433105A - Program supervisory device for programmable controller - Google Patents

Abstract

PURPOSE:To continuously execute a program without the down or stop of a controller by starting an error processing program part execute din the highest priority level and giving the notice of error information to an application-side when the error occurs. CONSTITUTION:When he error occurs while a program execution processing part 1 executes the program, the error processing program part 2 is started and the execution of the program where the error occurs is interrupted. when the program cannot continuously be executed, execution is shifted to an error stop processing part 3. When the program can continuously be executed, subsequent execution is prohibited. An error degeneration processing part 4 fives the instruction of continuous execution from the subsequent program in accordance with the designation of the program part 2 and outputs degeneration information to an error degeneration information display part 5. A start request is given to an error restoration program part 7 by a signal from an error restoration timing circuit 6 and an error degeneration restoration processing part 8 outputs it to the display part 5. The program execution processing part 1 resumes execution from subsequent timing.

Description

[Detailed Description of the Invention] [Objective of the Invention] (Industrial Application Field) The present invention is a programmable program that divides a plurality of application programs into several program execution priority levels and executes them according to the priority of each level. The present invention relates to a program monitoring device for a conflict controller.

(Prior Art) A conventional programmable controller is capable of executing a plurality of application programs. In this case, the application program is divided into several program execution priority levels,
Execution processing is performed according to each level of priority.

This application program executes various calculations, sequence processing, etc., and controls the programmable controller 10 via transmission devices 11 and 12 and input/output (110) device 13, as shown in FIG. It can control the equipment 14, perform input/output processing with the CR7 display device 15, and monitor process status. In general, input/output processing with external devices is performed in a batch manner, in which input is performed before the application program is executed, and output is performed after execution, in order to synchronize with the execution of the application program. . Furthermore, for signals that require responsiveness, direct input/output processing is performed within the application program.

However, when an application program is executed in such a conventional programmable controller, input/output processing is performed collectively or directly with external devices as described above, and in this case, parity errors, non-response errors, etc. occur. Then the controller was down or stopped with an error. Furthermore, when accessing memory, if the memory boundary is exceeded due to index modification, or if an error such as an invalid operation occurs during arithmetic processing, the controller fails or stops due to an error.

On the other hand, some controllers have a function that allows them to ignore errors such as parity errors or non-response errors and continue program execution when performing input/output processing with external devices. However, this is a setting for the entire controller (for example, a hardware prohibition that prohibits functions such as parity check for CPU operations).

(Problem to be Solved by the Invention) As described above, in the past, when an error occurs due to input/output with an external device, or when an error occurs in the execution process of an application program, the controller goes down or stops. There was a problem with this.

An object of the present invention is to enable continuous execution without the controller going down or stopping even if an error occurs due to input/output with an external device or an error occurs in the execution process of an application program. An object of the present invention is to provide a program monitoring device for a programmable controller.

[Configuration of the Invention (Means for Solving the Problem) In order to achieve the above object, a program monitoring device for a programmable controller according to the present invention includes a program execution processing means for decoding and executing an application program; An error processing program means that is started with the highest priority when an error occurs when an application program is executed by the program execution processing means, and an error stop that stops the operation of the entire application program when the error is a fatal error. and an error regression processing means that prohibits access to external input/output devices or disconnects execution of an application program in which an error has occurred and prohibits execution of the application program from the next startup, depending on the cause of the error. , an error degeneracy information display means for displaying error degeneracy information in the error degeneracy processing means; an error restoration timing means for providing an error restoration timing signal for returning the error degeneracy state displayed by the error degeneration information display means to the original execution state; The error recovery program means is activated by the error recovery timing signal from the error recovery timing means, and the activation of the error recovery program means allows the program execution processing means to access the prohibited external input/output device. , and an error regression recovery processing means for permitting execution of the prohibited application program and restarting execution of the application program from the next startup.

(Function) Therefore, in the program monitoring device for a programmable controller according to the present invention, when an error occurs in input/output processing with an external device or an error occurs in execution processing of an application program, the highest priority level is The error processing program means executed in is activated and error information is notified. As a result, the application side can analyze the cause of the error and specify that the access to the input/output memory in which the error occurred or the execution of the application program in which the error occurred is prohibited from now on, and the application program can be continued to be executed.

Additionally, this information is displayed on the error regression information display means,
The operator is prompted to check and take countermeasures. After the operator takes countermeasures, the error recovery program means is activated by providing an error recovery timing signal. As a result, access to the attendance memory that had been prohibited on the application side or execution of the prohibited application program can be permitted again, and the controller can be continuously executed without going down or stopping.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 2 is a diagram showing an example of a configuration of priority levels of application programs executed by a programmable controller. Note that FIG. 2 shows an example in which application programs are divided into six priority levels, and one level is further composed of N application programs to be executed.

In FIG. 2, the execution priority of the application program is set to the highest priority level: error processing 1081, special processing 10b1, interrupt processing 10C1, high-speed scan processing 1
0d1 low-speed scan processing 10e and batch processing 10f.

FIG. 1 is a block diagram showing an example of the configuration of a program monitoring device for a programmable controller according to the present invention.

As shown in FIG. 1, the program monitoring device of this embodiment includes a program execution processing section 1, an error processing program section 2, an error stop processing section 3, an error regression processing section 4,
It consists of an error regression information display section 5, an error recovery timing circuit 6, an error recovery program section 7, and an error degradation recovery processing section 8.

The program execution processing unit 1 decodes the instruction words of each application program and executes them. Further, the error processing program section 2 is activated with the highest priority when an error occurs when the program execution processing section 1 executes an application program. Furthermore, the error stop processing unit 3
If the above error is a fatal error, the operation of the entire application program is stopped.

On the other hand, the error regression processing unit 4 prohibits access to external input/output devices, or disconnects the execution of the application program in which the error occurred and prohibits the execution of the application program from the next startup, depending on the cause of the error. It is something to do. In addition, the error degradation information display section 5
Displays error degradation information in the error degradation processing section 4. Furthermore, the error recovery timing circuit 6
provides an error recovery timing signal for returning the error degradation state displayed by the error degradation information display unit 5 to the original execution state.

On the other hand, the error recovery program section 7 is activated by an error recovery timing signal from the error recovery timing circuit 6. Further, the error degeneracy recovery processing unit 8
By starting the error recovery program section 7, the program execution processing section 1 is allowed to access the prohibited external input/output device, and the execution of the prohibited application program is permitted, so that the application program is restarted from the next startup. It restarts program execution.

Next, the operation of the program monitoring device of the programmable controller configured as above will be explained.

First, the error processing program section 2 and the error recovery program section 7 are incorporated into the error processing level 10a in the execution processing of the application program. Furthermore, the execution of application programs in the program execution processing unit 1 is executed based on the program execution prohibition/permission flag and the number of program start requests for each program at each level. Furthermore, for input/output with external devices, there is an input/output prohibition/permission table that corresponds to external person output memory.
Accordingly, the external input/output memory is accessed.

For example, if an error occurs while an application program, which is the program execution processing unit 1, is being executed, error information is generated, and a startup request is issued to the error processing program unit 2. Since the error processing program section 2 has the highest priority level, it interrupts the execution of the application program where the error occurred,
Based on the error information, it is first determined whether to continue executing the application program in which the error occurred. As a result, if it is determined that continued execution is not possible, execution is transferred to the error stop processing unit 3, and the controller goes down due to an error. On the other hand, if it is determined that it is possible to continue execution, the error information specifies that access to the input/output memory where the error occurred is prohibited, or the execution of the application program where the error occurred is stopped, and subsequent execution is It is forbidden.

As a result, the error degradation processing section 4 sets the actual human output access prohibition/permission table and the program execution management table according to the specifications in the error processing program section 2, and sets the information for the program execution processing section 1 where the error occurred. If the next instruction word or the program with the error is prohibited from execution, start from the next application program.
Instructions are given to continue execution. Further, error degradation information is output to the error degradation information display section 5,
The operator is prompted to check and take countermeasures. The error degradation information display section 5 allows the error degradation state in the controller to be seen at a glance.

Next, after the operator investigates the cause of the error and takes countermeasures through the error regression process described above, a start request is issued to the error recovery program section 7 by the error recovery timing signal from the error recovery timing circuit 6. .

Here, the error recovery timing signal is an external signal (for example, a push button, etc.) or an internally generated signal.

Since the error recovery program that has been requested to start has the highest priority level, execution of the application program that is being executed at that time is temporarily suspended, and the error recovery program is executed (note that the error recovery program is not necessarily does not need to be at the highest priority level). This error recovery program section 7 can specify permission to access the attendance memory and execute a program that has been prohibited due to an error.

As a result, the error degeneracy recovery processing unit 8 resets the actual input/output access prohibition/permission table and program execution management table according to the specifications in the error recovery program unit 7, and also releases the degeneracy state caused by the error. This information is output to the error degeneracy information display section 5. As a result, the program execution processing unit 1 resumes accessing the input/output memory that was prohibited from the next timing.
In addition, execution will be resumed from the moment a request to start the prohibited program is made. However, if an error occurs again as a result of restarting execution, the error processing program section 2 will perform the error degradation process again.

As described above, when an error occurs in an application program, the error processing program 2 can stop input/output access at - or stop the program execution and disconnect it, and the error recovery program section 7 can handle the input/output access The output access can be resumed and the program can be recombined and executed, and as a result, the controller can recover from the error with a functional pause.

As described above, in the program monitoring device for the programmable controller of this embodiment, even when an error occurs, the error processing program section 2, which is executed at the highest priority level, is started and the error information is sent to the application side. Since the notification is made, it is possible to specify that access to the input/output memory where the error occurred or execution of the application program where the error occurred is prohibited from now on.
This allows continuous execution. After the operator confirms the error and takes countermeasures, the error recovery program section 7 is activated by giving an error recovery timing signal to access the prohibited input/output memory or execute the prohibited application program. Because it is enabled again, the controller will not go down even if an error occurs during input/output processing with an external device, or an error occurs during application program execution. Alternatively, it is possible to continue execution without stopping.

In the above embodiment, the program execution processing unit 1 includes:
By adding a function to monitor error information, it becomes possible to automatically provide the timing for error recovery.

[Effects of the Invention] As explained above, according to the present invention, even if an error occurs due to input/output with an external device or an error occurs in the execution process of an application program, the controller will not go down or A program monitoring device for a programmable controller that can be continuously executed without stopping can be provided.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing one embodiment of a program monitoring device for a programmable controller according to the present invention, and FIG.
This figure is a diagram showing an example of the configuration of the priority level of the application program in the same embodiment, and FIG. 3 is a block diagram showing an example of the system configuration of the programmable controller. DESCRIPTION OF SYMBOLS 1...Program execution processing unit, 2...Error processing program unit, 3...Error stop processing unit, 4...Error degradation processing unit, 5...Error degradation information display unit, 6...
- Error recovery timing circuit, 7... - error recovery program section, 8... error degeneracy recovery processing section. Execution priority Figure 1 Applicant's agent Patent attorney Takehiko Suzue Figure 2

Claims (1)

[Scope of Claims] A device for monitoring programs of a programmable controller that divides a plurality of application programs into a plurality of program execution priority levels and executes them according to the priority levels of each level, the device decoding and executing the application programs. program execution processing means for performing processing; error processing program means that is activated with top priority when an error occurs when the application program is executed by the program execution processing means; and when the error is a fatal error. , an error stop processing means for stopping the operation of the entire application program, and depending on the cause of the error, prohibiting access to an external input/output device or disconnecting the execution of the application program in which the error has occurred and restarting the application program the next time. an error degradation processing means for prohibiting execution of an application program from the start; an error degradation information display means for displaying error degradation information in the error degradation processing means; error recovery timing means for supplying an error recovery timing signal to restore the state; error recovery program means activated by the error recovery timing signal from the error recovery timing means; and activation of the error recovery program means causing the program execution processing means to Error degradation recovery processing means that permits access to the prohibited external input/output device or permits execution of the prohibited application program and resumes execution of the application program from the next startup; A program monitoring device for a programmable controller, comprising: