JPH0646134A - Fault restoration function test system - Google Patents

Abstract

PURPOSE:To confirm the normality of a backup file and a restarting processing program by permitting a stand-by system central control device to actually start a restarting processing. CONSTITUTION:The states of the fault restoration function test of the individual CPU of both system of ACT system (active system) and SBY system (stand-by system), which can be read by CPU are indicated in an emergency operation circuit (EMA) by an area 1b. Namely, for example, in the case of the state of not executing a test, the state of testing, and the state of functional abnormality, an integer 0, 1, and 2 are set in an area 1b respectively. A restarting processing starting processing 1a in the circuit 1 is the starting program of the restarting processing 2a of a stand-by central processing system (SBY-CP system) and the restarting processing test 2b of CP system allows the circuit 1 to actuate the restarting processing of SBY - CP and confirms/informs whether it finishes normally or not. Thus, the recomposing of the backup file and various kinds of data of restarting processing and the confirming of an initial setting function are attained without affecting exchange control.

Description

Detailed Description of the Invention

[0001]

This invention relates to a central processing system (hereinafter referred to as CP
(Referred to as a system) related to an electronic exchange system based on a complete duplex system, and particularly to a failure recovery function test system.

[0002]

2. Description of the Related Art An example of a device configuration at the time of failure recovery in a conventional failure recovery function test system will be described with reference to FIG. The fault recovery function is an emergency operation circuit (hereinafter referred to as EMA) 1
1 and the backup file 13 and the restart processing (restart processing program) 12a. And, when the system is abnormal, it must be seen that the intelligence of the CP system is lost. Therefore, in order to configure a normal CP system from the redundant system, external means for forcibly switching the CP system configuration is required. The EMA 11 realizes this function. In this FIG.
11c is EMA processing, ACT system is active system, SBY
The system is a standby system, the CPU is a central control unit, the MM is a main storage device, the IO system is an input / output device system, and the SP system is a communication path system during restart processing. The solid line between the respective parts indicates access, and the broken line between the respective parts indicates non-access.

FIG. 5 is a flow chart showing the processing procedure of the failure recovery function provided for the explanation of the operation of FIG. When a failure occurs, the EMA 11 activates the EMA processing 11c. The EMA processing 11c first stops and resets the CPUs of both the ACT system and the SBY system. Next, the EMA start counter (not shown) is updated, and C is updated by this value.
Determine the system configuration of the P system. Then, the restart processing program 12a of the determined active (hereinafter referred to as ACT) ACT-CP system is activated. If the restart processing is not completed within the predetermined time, it is considered that the failure recovery has failed, and the EMA processing 11c is activated again. Activated ACT-CP
The system restart processing program 12a reads the backup file 13 as necessary, rebuilds various data and sets initial values, rebuilds the SP system, resets each terminal device, and reports the restart processing end to the EMA 11. And restart the exchange operation.

FIG. 6 is a flow chart showing a processing procedure of a conventional failure recovery function test method used for explaining the operation of FIG. First, the EMA test program 12c (start) is provided on the main memory MM and has a failure recovery function test display area (not shown), for example, an integer value 1 when the failure recovery function test is in progress, and an adjustment value when not in the failure recovery function test. An integer value 1 is set to the numerical value 0 (step 12c1), a soft fault is forcibly generated, and the process is interrupted (step 12c2). Next, the EMA 11 detects this failure and executes the EMA processing 1
Carry out 1c. Then, the ACT-CP system restart processing 12a activated by the EMA processing 11c is as follows.
Refer to this failure recovery function test display area on the MM,
If it is an integer value 1, it returns to the interruption point of this failure recovery function test program (step 12a1), reports the restart processing normal end to the EMA 11 (step 12c3), and then notifies the failure recovery function normal (step 12c4). , The process ends. In FIG. 6, a portion surrounded by a solid double line indicates hardware, and a portion surrounded by a broken line indicates unexecuted processing.

[0005]

This conventional failure recovery function test method has a problem that the normality of the EMA can be confirmed, but the normality of the backup file and the restart processing program cannot be confirmed. Therefore, when there is an abnormality in the backup file or the restart processing program, this abnormality cannot be detected in advance, and it is difficult to prevent long-term operation interruption due to the occurrence of a failure. The present invention has been made to solve such a problem, and an object thereof is to obtain a failure recovery function test system for confirming the normality of a backup and reproduction processing program.

[0006]

According to the failure recovery function test method of the present invention, in an electronic exchange system using a complete duplex system of a central processing system, failure recovery is performed for restart processing of a standby central processing system separated from an active central processing system. Provided for each central control unit that displays the activation means that is activated for the purpose of function confirmation and the activation state of the restart processing that was activated for the purpose of confirming the above-mentioned failure recovery function that can be read by the central control unit in the emergency operation circuit. Area and the confirmation means to confirm whether the restart processing started for the purpose of checking the above failure recovery function ended normally, and the restart processing is started when the restart processing is started for the purpose of checking the above failure recovery function. For the purpose of confirming the above-mentioned failure recovery function, a means for not reconstructing the communication path system and resetting each terminal device, and not restarting the exchange operation at the end of the restart processing. The emergency operation circuit that detects a failure in the standby central processing system that is performing the restart processing includes means for stopping and resetting the central control unit of this standby central processing system without performing the emergency operation processing. .

[0007]

In the present invention, the restart processing is actually started by the standby central control unit.

[0008]

1 is a block diagram showing an embodiment of a failure recovery function test system according to the present invention, and shows a device configuration of an embodiment of the present invention. In FIG. 1, reference numeral 1 denotes an emergency operation circuit (hereinafter, referred to as EMA), and the EMA 1 cooperates with a restart processing start processing 1a to perform a restart processing for the purpose of confirming a failure recovery function. EM that has detected a failure of the central processing system (hereinafter referred to as SBY-CP system)
A constitutes means for stopping and resetting this SBY-CP system central control unit (hereinafter referred to as CPU) without executing emergency operation processing. In addition, this restart processing start processing 1a is an active central processing system
The SBY-CP system, which has been separated from the P system), restarts the SBY-CP system for the purpose of confirming the failure recovery function.

Reference numeral 1b is a failure recovery function test status display area, and this failure recovery function test status display area 1b is an EMA.
CP that displays the start status of the restart processing that was started for the purpose of confirming the failure recovery function that can be read by the CPU in 1
It is an area provided for each U. Reference numeral 2a is a restart process. The restart process 2a is for rebuilding a communication path system (hereinafter referred to as SP system) and each terminal device during the restart process when the restart process is started for the purpose of confirming the failure recovery function. Is configured to not perform the reset operation and not restart the exchange operation at the end of the restart processing. Reference numeral 2b is a restart processing test, and this restart processing test 2b constitutes a confirmation means for confirming whether the restart processing started for the purpose of confirming the failure recovery function is normally completed. 3 is a backup file. And MM
Indicates a main memory device, and IO system indicates an input / output device system. 2 and 3 are flowcharts provided for explaining the operation of FIG.

The operation of the embodiment shown in FIG. 1 will be described below with reference to FIGS. First, in the embodiment shown in FIG. 1, an A that can be read by the CPU is stored in the EMA1.
Area 1b displaying the status of the failure recovery function test for each CPU of CT system and SBY system, for example, integer value 0 if failure recovery function test is not performed, integer value 1 if failure recovery function test is in progress
Area 1b where integer value 2 is set if failure recovery function is abnormal
To provide. Next, the restart processing start processing 1a in the EMA1
Is a program for activating the restart processing 2a of the SBY-CP system. CP system restart processing test 2b
It is a program that activates the BY-CP system restart processing and confirms and reports whether the restart processing has ended normally. FIG. 2 is a flowchart showing the processing procedure of the restart processing test 2b. First, the configuration of the CP system is set to single mode (SGM) operation, and one system is disconnected (step 2b).
1). Next, a restart process activation request is issued to the EMA1 and the timer TC0 is activated (steps 2b2, 2).
b3). The value of the timer TC0 is set to be larger than the time required for failure recovery. And this timer TC
If 0 times out (step 2b4), EMA
By referring to this failure recovery function test status display area 1b of the other CPU in the system, if the integer value is 0, the failure recovery function is normal, and if it is not an integer value 0, the failure recovery function abnormality is notified (step 2).
b5, 2b6, 2b7) ends.

FIG. 3 is a flowchart showing the processing procedure of the restart processing start processing 1a. First, when this restart processing start request is received (step 1a1), the CP of the request source
Stop the reverse CPU of U (SBY-CP CPU),
It is reset (step 1a2). Next, this SBY
The integer value 1 is set in the failure recovery function test status display area 1b of the CPU of the CP system, the restart processing 2a of the SBY system CPU is activated, and the timer TE1 is activated (steps 1a3, 1a4, 1a5). Here, this timer T
The E1 value is larger than the timer TC0 value. When the restart processing end report is received during the timing of the timer TE1 (step 1a6), the timer TE1 is stopped and the failure recovery function test display area 1b of both the ACT system CPU and the SBY system CPU is reset (0 Setting) (steps 1a7, 1a8). If there is an abnormality in the restart processing 2a and the backup file 3, a failure will occur during execution of this restart processing. And
When this failure is detected during the timing of the timer TE1 (step 1a9), the timer TE1 is stopped (step 1a10).

Next, the fault recovery function test status display area 1b of the faulty CPU is referred to (step 1a).
12) If the integer value is 1, stop and reset this CPU,
The failure recovery function test status display area 1b of both the ACT system CPU and the SBY system CPU is reset, and the EMA process is not executed and the process is terminated (steps 1a12, 1a13). Also,
If the integer value is not 1, the failure recovery function test status display area 1b of both the ACT system CPU and the SBY system CPU is reset (step 1a14), and the EMA processing is started. Also,
When the timer TE1 times out (step 1a)
In 15), the display area 1b during failure recovery function test of both the ACT system CPU and the SBY system CPU is reset (step 1a16). Then, the restart processing 2 of the activated SBY system
a reads the backup file 3 as necessary, reconstructs various data and performs initial setting, and then E
Referring to this failure recovery function test status display area 1b of the own CPU in MA1, if the integer value is 1, rebuilding the SP system, resetting each terminal device, and restarting the exchange control are not performed,
The EMA1 is notified of the completion of the restart processing, and the processing ends. As described above, it is possible to test the function of reconstructing and initializing the backup file 3 and various data of the restart processing.

[0013]

As described above, according to the present invention, the restart processing is actually started by the standby central control unit, so that the backup file and various data of the restart processing can be restarted without affecting the exchange control. This has the effect of being able to check the construction and initial setting functions. Further, there is an effect that the replacement operation is not interrupted for confirming the normality and can be used together with the conventional failure recovery function test.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a failure recovery function test system according to the present invention.

FIG. 2 is a flowchart showing a processing procedure of a restart processing test program used for explaining the operation of FIG.

FIG. 3 is a flowchart showing a processing procedure of a restart processing start program used for explaining the operation of FIG.

FIG. 4 is a block diagram showing an example of a device configuration at the time of failure recovery in a conventional failure recovery function test method.

5 is a flowchart showing a processing procedure of a failure recovery function provided for explaining the operation of FIG.

FIG. 6 is a flowchart showing a processing procedure of a failure recovery function test provided for explaining the operation of FIG.

[Explanation of symbols]

 1 Emergency Operation Circuit (EMA) 1a Resuming Process Starting Process 1b Fault Recovery Function Test Status Display Area 2a Resuming Process 2b Resuming Process Test

Claims (1)

[Claims] 1. An electronic exchanging system based on a complete duplex system of a central processing system, a starting means for activating restart processing of a standby central processing system separated from an active central processing system for the purpose of confirming a failure recovery function, and an emergency operation circuit. The area provided for each central control unit that displays the activation status of the restart processing that was started for the purpose of confirming the fault recovery function that can be read by the central control unit, and activated for the purpose of confirming the fault recovery function The confirmation means for confirming whether the restart processing is normally completed, and when restart processing is started for the purpose of checking the above-mentioned failure recovery function, rebuilding the communication path system during the restart processing and resetting each terminal device are performed. Means for not performing the replacement operation at the end of the restart processing, and the failure of the standby central processing system that is performing the restart processing for the purpose of checking the failure recovery function. A failure recovery function test method, characterized in that the emergency operation circuit that detects damage is provided with means for stopping and resetting the central control unit of this standby central processing system without performing emergency operation processing.