JPH07281705A - Monitor controller - Google Patents

Abstract

PURPOSE:To improve reliability by preventing the malfunction of a facility instrument by detecting the abnormality of a reserve operating system at a host station and cutting off the input of control information from the reserve operating system to the slave station to output only the proper control information to a slave station. CONSTITUTION:A host station 1 is provided with a normal operating system 1a and a reserve operating system 1b and when any abnormality is generated at the normal operating system 1a and an abnormal signal is outputted from a watchdog timer (WDT) circuit 25 to a power source relay 26, an operating system switching circuit 6 switches an operating system to be operated from the normal operating system 1a to the reserve operating system 1b. In this case, when any abnormality is further generated at the reserve operating system 1b as well and an abnormal signal is outputted from a WDT circuit 25' to a power source relay 26', the power source relay 26' is turned on, and an information cutoff signal is outputted to a relay 9 of a signal cutoff circuit 8 at a switching part 5. Thus, a contact 9a of the relay 9 is switched from the ON state to the OFF state, and no control information is inputted from the reserve operating system 1b to a slave station 2.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a supervisory control device which is provided in various plants such as buildings, factories and water treatment plants and controls and monitors various equipment.

[0002]

2. Description of the Related Art In recent years, in various plants such as buildings, factories, and water treatment plants, various equipment such as power receiving and distribution equipment, lighting, disaster prevention equipment, etc. have been centralized in order to efficiently operate, maintain and manage the plant. It is designed to be monitored and controlled.

Such monitoring control is carried out by a monitoring control device as shown in FIG. This supervisory control device controls and monitors the equipment 57.
2 through master station 51 and connected equipment 57
While inputting the monitoring information from ... and transmitting it to the master station 51,
A plurality of slave stations 52, which control the equipment 57 based on various control information received from the master station 51, are provided, and the master station 51 and each slave station 52 ...
Information can be transmitted via the ating equipments 53 ... 54. In addition, the master station 51 and each DC
An RS-232-C interface is generally used for connection with E53 ....

In such a monitor and control system, the master station 51 has two operating systems, a normal operating system 51a and a standby operating system 51b, as shown in FIG. This is in case of a failure or the like, and normally the control information from the normal operation system 51a is transmitted to the slave station 52. If an abnormality occurs in the normal operation system 51a, the operation system that operates from the normal operation system 51a to the standby operation system 51b is switched, and the control information from the standby operation system 51b is transmitted to the slave station 52. Become so. As a result, the utilization rate of factory facilities is improved.

The switching of the driving system in the master station 51 is performed by a driving system switching circuit 58 having a relay 59 composed of a mercury relay or a miniature relay, which is arranged between the master station 51 and the DCE 53. . The b-contact terminal of the contact 59a of the relay 59 is connected to the normal operation system 51a of the master station 51 via a connection line 56a, and the a-contact terminal is connected to the standby operation system 51b via a connection line 56b and a common terminal. Are connected to the DCE 53 via a connecting line 56c.

The contact 59a of the relay 59 is adapted to switch from the b contact side to the a contact side when an operation system switching signal is input, and this operation system switching signal is used for the normal operation of the master station 51. When the abnormality detecting means (not shown) provided in the system 51a detects an abnormality in the normal operation system 51a,
A power relay (not shown) is turned on and output.

In FIG. 8, the master station 51 and DCE
The connection lines 56a, 56b, and 56c that connect between 53 and 53 are represented by one line for convenience, but as described above, R
It corresponds to S-232-C, and is actually a connecting wire bundle composed of a plurality of connecting wires. Therefore, the relay 59 is actually a relay group including a plurality of relays,
A plurality of these relays are mounted on a printed wiring board (not shown) so that they all operate simultaneously.

[0008]

However, in the above-mentioned conventional monitoring and control apparatus, when an abnormality occurs in the normal operation system 51a, it can be dealt with by switching the operation system operated in the master station to the standby operation system 51b. However, no consideration is given to the measures to be taken when an abnormality occurs in the standby operation system 51b. Therefore, the normal operation system 51a
If an abnormality occurs in the standby operation system 51b after switching the operation system from the standby operation system 51b to the standby operation system 51b, the control information from the standby operation system 51b continues to be output to the slave stations 52. Therefore, the abnormal control information output from the standby operation system 51b is input to the slave stations 52 as if it were normal control information, and the slave stations 52 ... are based on this abnormal control information. Connected equipment 57
... will be controlled. As a result, a malfunction occurs in the equipment 57, and such a malfunction may cause a serious accident.

The present invention has been made in view of the above problems, and an object thereof is to always output only correct control information to a slave station provided in a subsequent stage to prevent malfunction of equipment. , To provide a more reliable monitoring control device.

[0010]

In order to solve the above-mentioned problems, a supervisory control device of the present invention comprises two operating systems, a normal operating system and a standby operating system, and a system for operating equipment via a slave station. A master station that performs supervisory control, a slave station that is connected for information communication with the master station, and that controls equipment based on control information sent from the master station, and an abnormality in the normal operation system in the master station The normal system abnormality detecting means for detecting and the operational system switching means for switching the operating system operating in the master station to the normal standby operating system when the normal system abnormality detecting means detects an abnormality in the normal operating system. In the supervisory control device provided, standby system abnormality detection means for detecting an abnormality in the standby operation system in the master station, and when an abnormality in the standby operation system is detected by the standby system abnormality detection means, from the standby operation system Block input of control information to slave stations It is characterized in that the information input shutoff means is provided.

[0011]

According to the above construction, the normal operation system out of the two operation systems provided in the master station normally outputs the control information to the slave station, and the supervisory control of the equipment is performed via the slave station. It is carried out. If an abnormality occurs in this normal operation system, the operation system switching means switches the operation system operated by the master station to the normal standby operation system, and the standby operation system monitors the equipment through the slave station. It comes to control. Abnormality detection of the normal operation system in this case is performed by the normal operation system abnormality detection means, and the operation system switching means performs the operation system switching operation based on the abnormality detection.

When an abnormality occurs in the standby operation system, the information input interrupting means interrupts the control information output from the standby operation system to the slave station. Abnormality detection of the standby operation system in this case is performed by the standby system abnormality detection means, and the information input interruption means performs the interruption operation based on the abnormality detection.

Therefore, the abnormal control information is no longer input to the slave station as if it were normal control information, and the control information input to the slave station is always correct. The equipment will always be controlled only by correct control information. As a result, the supervisory control device can improve the operating rate of the equipment to be monitored and controlled, and can prevent malfunction of the equipment and occurrence of serious accidents due to malfunction, and its reliability is significantly improved. It is possible to improve.

[0014]

【Example】

[Embodiment 1] FIG. 1 to FIG.
The explanation is based on the following.

As shown in FIG. 2, the supervisory control apparatus according to the present embodiment basically has a master station 1 and various equipment devices 30 ...
And a plurality of slave stations 2 ... The master station 1 and each of the slave stations 2 are connected by a DCE (data-circuit terminating eq).
..... 4 ..., it is possible to transmit information, and an RS-232-C interface is generally used for connection between the master station 1 and each DCE 3.

The slave station 2 is a CPU (Centra) not shown.
l Processing Unit), so that the monitoring information is input from the connected equipment 30 and transmitted to the master station 1, and the equipment 30 is controlled based on the control information from the master station 1. Has become.

On the other hand, the master station 1, as shown in FIG.
The switching unit 5 is provided with two operating systems, a normal operating system 1a and a standby operating system 1b, and an operating system switching circuit (operating system switching means) 6 and a signal interruption circuit (information input interruption means) 8. It is connected to DCE3 via. Note that, in FIG. 1, for convenience of explanation, only the connection with one slave station 2 is shown.

The normal and standby operation systems 1a and 1b are CPs that perform control information transmission processing and monitoring information reception processing.
U20 / 20 ', memory 2 storing processing programs, etc.
1.21 ', an input / output unit 22/22' for controlling input / output of information by connecting to a display unit, a console, a printer or the like (not shown), and converting signals serially input from the CPU 20 into parallel signals , A communication unit 23.23 'for converting a signal input in parallel from the DCE3 into a serial signal, and a driver / receiver 24.2.
4 ', respectively, and controls and monitors the equipment 30 connected to each slave station 2 ... via each slave station 2.

The reason why the operation system in the master station 1 is duplicated in this way is just in case of a failure or the like.
Normally, the DCE 3 and the normal operation system 1a are connected via the switching unit 5, and if an abnormality occurs in the normal operation system 1a, the standby operation system 1b and the DCE 3 are connected. ing.

Further, the above-mentioned regular and standby operation systems 1a and 1b
Includes a watchdog timer circuit (normal system abnormality detection means, standby system abnormality detection means) 25.25 '(hereinafter simply referred to as a WD timer circuit) for monitoring the operation of the CPU 20, 20', and a power relay 26. 26 'and 26', respectively.

As shown in FIG. 3, the WD timer circuit 25 (25 ') has a register 25a (25a'), a counter 25b (25b '), a clock 25c (25c'),
CPU including flip-flop 25d (25d ')
20 (20 ') is monitored to detect an abnormality. That is, for example, the counter 25b (25
When the cycle setting of b ') is 1/8, the clock 25c (2
By inputting 8 pulses from 5c '), the count UP is ended and an abnormal output is output. As shown in the timing chart of FIG. 4, before the count UP by the counter 25b (25b ′) is completed, the register 25a
When the clear signal of the CPU 20 (20 ') is input from (25a'), the counter 25b (25b ') is cleared and no abnormal output is output. However, CPU2
0 (20 ') has an abnormality, register 25a (25
When the clear signal is not input from a '), the count UP by the counter 25b (25b') ends, and an abnormal output is output. This abnormal output is latched by the flip-flop 25d (25d '), and the CPU
20 (20 ') when the power is turned on, or CPU 20 (2
Power relay 26 (26 ') as an abnormal signal until cleared by the clear signal output at the time of 0') reset
Is output to.

In this way, each power relay 26, 26 '
When the abnormal signal is input to the power supply relays 26 and 26 ', the power supply relays 26 and 26' are turned on, and the current from the power supply (not shown) is output to the switching unit 5. Of these, the normal operation system 1a
The signal from the power supply relay 26 that is output when the CPU 20 is abnormal is input to the relay 7 of the operation system switching circuit 6 in the switching unit 5 as an operation system switching signal, and is output when the CPU 20 'of the standby operation system 1b is abnormal. Power relay 2
The signal from 6'is input to the relay 9 of the signal cutoff circuit 8 in the switching unit 5 as an information cutoff signal.

As shown in FIG. 1, the operation system switching circuit 6 of the switching unit 5 is composed of a mercury relay or a miniature relay, and has a relay 7 having a contact 7a. In the master station 1, the normal operation system 1a is connected via the connection line 10a, the a-contact terminal is connected to the standby operation system 1b via the connection line 10b, and the common terminal is connected to the relay 9 of the signal interruption circuit 8 via the connection line 10c. It is connected.

On the other hand, the signal cutoff circuit 8 is composed of a mercury relay or a reed relay, and has a relay 9 having a contact 9a in a b-contact state. This relay 9 is connected between the relay 7 of the operation system switching circuit 6 and the DCE 3 by a connecting line 1
It is connected through 0c and 10d.

In the switching section 5, the contact 7a of the relay 7 in the operation system switching circuit 6 receives the above-mentioned operation system switching signal output from the normal operation system 1a when the normal operation system 1a in the master station 1 is abnormal. By inputting, the b contact side is switched to the a contact side. On the other hand, the contact 9a of the relay 9 in the signal cutoff circuit 8 is changed from the ON state to the OF state when the information cutoff signal output from the standby operation system 1b is input when the standby operation system 1b in the master station 1 is abnormal.
It is designed to switch to the F state.

1 and 2, the master station 1 and the DCE
Connection line 10a, 10b, 10c, 10d that connects between 3 and
Is represented by one line for convenience, the output from the master station 1 corresponds to RS-232-C in parallel, and actually, a plurality of connecting lines 10 as shown in FIG.
It is a connecting wire bundle consisting of a '... 10b' ... 10c '... 10d'. Also, each of the relays 7 and 9 is actually a relay group composed of a plurality of relays 7 '... 9' ..., and these relays 7 '... 9' ... are mounted on a printed wiring board (not shown), "..., relay 9" ... all perform the same operation all at once.

The operation of the supervisory control device having the above configuration will be described.

Normally, the contact 7a of the relay 7 of the operation system switching circuit 6 of the switching unit 5 is biased to the b contact side, and the contact 9a of the relay 9 of the signal interruption circuit 8 is also in the ON state. (See Figure 1). As a result, the control information from the normal operation system 1a of the master station 1 is input to the slave station 2, and the equipment 30 is controlled based on this control information.

If an abnormality occurs in the normal operation system 1a, the WD timer circuit 25 provided in the normal operation system 1a.
When the abnormal signal is output from the power supply relay 26 to the power supply relay 26, the power supply relay 26 is turned on, and the operation system switching signal is output to the relay 7 of the operation system switching circuit 6 in the switching unit 5. As a result, the contact 7a of the relay 7 is
Switching to the contact side, the control information from the standby operation system 1b of the master station 1 is input to the slave station 2, and the equipment devices 30 ... Are controlled based on this control information.

Further, an abnormality also occurs in the standby operation system 1b, and the WD timer circuit 2 provided in the standby operation system 1b.
When the abnormal signal is output from 5'to the power supply relay 26 ', the power supply relay 26' is turned on, and the information cutoff signal is output to the relay 9 of the signal cutoff circuit 8 in the switching unit 5. As a result, the contact 9a of the relay 9 is switched from the ON state to the OFF state, and the slave station 2 has the standby operation system 1
The control information from b is not input. That is, the control information from any operation system in the master station 1 is not input to the slave station 2.

As described above, in the supervisory control apparatus of this embodiment, when the normal operation system 1a is abnormal, the operation system switching circuit 6 switches the operation system to be operated from the normal operation system 1a to the standby operation system 1b. Further, when an abnormality also occurs in the switched standby operation system 1b, the signal interruption circuit 8 interrupts the input of the control information from the standby operation system 1b to the slave station 2.

Therefore, from the master station 1 of the supervisory control device,
The abnormal control information is transmitted to the slave station 2 as if it were normal control information, and the equipment 30 is not controlled by this, and the control information input to the slave station 2 ... It will always be correct. As a result, the supervisory control device can improve the operating rate of the equipment devices 30 ... Which are monitored and controlled, and can prevent a serious accident due to a malfunction of the equipment devices 30 ... Remarkably improve the property.

[Embodiment 2] Another embodiment of the present invention will be described with reference to FIG.
The following is a description using. For convenience of explanation, members having the same functions as those in the above-described embodiment are designated by the same reference numerals, and the description thereof will be omitted.

As shown in FIG. 6, the monitoring control apparatus according to this embodiment is provided with a switching unit 5'in place of the switching unit 5 in the above embodiment. The switching unit 5'includes a relay 31 formed of a photo MOS relay.

The photo MOS relay used in this embodiment is such that, when the basic current is constantly applied, either the normal operation system 1a or the standby operation system 1b and the DCE 3 are brought into conduction, and It is a semiconductor relay that is in a non-connection state in which it is not connected to any when the current is cut off. In FIG. 6, the above photo MOS relay is equivalently represented as a contact relay. Further, similar to the above embodiment, the connection line 10e connecting the master station 1 and the DCE 3 is connected.
Reference numerals 10f and 10g correspond to RS-232-C, and are actually connecting wire bundles composed of a plurality of connecting wires, and the relay 31 is also a relay group composed of a plurality of relays that operate in unison. .

Therefore, by using the relay 31 composed of such a photo MOS relay in the switching unit 5 ', the operation system switching circuit 6 and the signal cutoff circuit 8 in the above-described embodiment are provided.
It becomes possible to integrate and.

That is, the relay 31 in the switching unit 5'is provided with the normal operation system 1 in the master station 1 as in the above embodiment.
The operation system switching signal output from the power supply relay 26 provided in a is input, and the connection is switched by the operation system switching signal being input, and the operating system to be operated is the normal operation system 1a. From the standby operation system 1b.

On the other hand, the information cutoff signal output from the power supply relay 26 'provided in the standby operation system 1b of the master station 1 is between the power supply means (not shown) supplying the basic current to the relay 31 and the relay 31. Power cutoff relay 3
The power cutoff relay 32 is turned off by inputting the information cutoff signal, and the supply of the basic current to the relay 31 is stopped. As a result, the relay 31 becomes unconnected, and the control information from the master station 1 is not input to the slave station 2.

As described above, in the monitoring control apparatus of this embodiment, when the normal operation system 1a is abnormal, the normal operation system 1a is switched to the standby operation system 1b, and when the standby operation system 1b is abnormal, the standby control system 1a is activated. The switching unit 5 having a function of interrupting the input of the control information from the operation system 1b to the slave station 2 is constituted by the two types of relays 7 and 9 in the above-described embodiment, and the switching unit 5 is formed of a semiconductor photoMOS. By using the relay, it is possible to realize with the switching unit 5 ′ using one type of the relay 31, and it is possible to more easily configure a device having the same effect as the above-described embodiment with a small number of parts. Become.

[0040]

As described above, the supervisory control apparatus of the present invention detects the abnormality of the standby operation system by the standby system abnormality detection means for detecting the abnormality of the standby operation system in the master station and the standby system abnormality detection means. Is detected, information input cutoff means for cutting off the input of control information from the standby operation system to the slave station is provided.

As a result, abnormal control information is not input to the slave station as if it were normal control information from the supervisory control device, and the control information input to the slave station is always correct. The equipment will always be controlled only by the correct control information. As a result, the supervisory control device can improve the operating rate of the equipment to be monitored and controlled, and can prevent the malfunction of the equipment and the occurrence of a serious accident due to the malfunction, thereby significantly improving the reliability. The effect that it becomes possible to improve is produced.

[Brief description of drawings]

FIG. 1 shows an embodiment of the present invention and is a schematic block diagram showing a main part of a supervisory control device.

FIG. 2 is a block diagram showing an overall schematic configuration of the monitoring control device.

FIG. 3 is a block diagram showing a watchdog timer circuit provided in a master station of the monitoring control device.

FIG. 4 is a timing chart of each signal in the watchdog timer circuit.

FIG. 5 is an explanatory diagram showing a main part of a switching unit included in the monitoring control device.

FIG. 6 shows another embodiment of the present invention and is a schematic block diagram showing a main part of a supervisory control device.

FIG. 7 is a block diagram showing an overall schematic configuration of a conventional monitoring control device.

FIG. 8 is a schematic block diagram showing a main part of a conventional monitoring control device.

[Explanation of symbols]

1 Master station 1a Normal operation system 1b Standby operation system 2 Slave station 5 Switching section 5'Switching section (operating system switching means, information input blocking means) 6 Operating system switching circuit (operating system switching means) 8 Signal blocking circuit (information input) Shut-off means) 25 Watchdog timer circuit (normal system abnormality detection means) 25 'Watchdog timer circuit (standby system abnormality detection means) 30 Equipment

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical display location G06F 11/20 310 E 15/16 470 MH04Q 9/00 311 M

Claims (1)

[Claims] 1. A master station comprising a two-operation system including a normal operation system and a standby operation system, which monitors and controls facility equipment via a slave station, and is connected to the master station so as to be able to communicate information, and a master station. A slave station that controls equipment based on the control information sent from the station, a normal system abnormality detecting means for detecting an abnormality of the normal operating system in the master station, and a normal operating system by the normal system abnormality detecting means. When an abnormality is detected in the standby control system, the monitoring control device includes an operation system switching unit that switches the operation system to be operated in the master station to a normal standby operation system, and detects an abnormality in the standby operation system in the master station. Standby system abnormality detecting means and information input shutoff means for shutting off the input of control information from the standby operating system to the slave station when the standby system abnormality detecting means detects an abnormality in the standby operating system are provided. Monitor and control device characterized by .