JPH0822303A - Process controller - Google Patents

Abstract

PURPOSE:To take measures to prevent a function from being lost owing to the fault of a single control process input card or control process output card without making the whole system complex even if the card is doubled. CONSTITUTION:If the control process input card gets out of order, a fault monitor and switching command part 3 outputs a switching command for switching the card to a stand-by process input card, and consequently an input switching part switches the faulty control process input card to the normal stand-by process input card. If the control process output card gets out of order, the fault monitor and switching command part 3 outputs a switching command for switching the card to a stand-by process output card, and consequently an output switching part switches the faulty control process output card to the normal stand-by process output card.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a process control device used in, for example, a nuclear power plant.

[0002]

2. Description of the Related Art FIG. 16 is a block diagram showing the structure of a conventional process control device. In FIG. 16, 101 is a control system CPU unit, 102 is a standby system CPU unit, 103 is a control system process input unit, 104 is a standby system process input unit, 1
Reference numeral 05 is a control system process output unit, and 106 is a standby system process output unit. M1, M2, M3, M4, M5 and M6 are multi-buses. 1a, 1b are process signals, 2a,
2b is a control system process input card for inputting process signals 1a and 1b, 3a is a control system process input card 2a,
The control system failure monitoring unit 3b which processes the input signal of 2b by software from the control system CPU 6a to output the failure information to the switching device 13, and 3b receives the input signals of the standby process output cards 11a and 11b from the standby system CPU 6b. The standby system failure monitoring unit 6a which processes the software into failure information and outputs the failure information to the switching device 13, 6a processes the outputs of the control system process input cards 2a and 2b by software and outputs the signal to the control system process output card 7a. , 7b and the failure information to the control system failure monitoring unit 3a, 6b is the standby process input card 11
A standby CPU, 7 which processes the outputs of a and 11b by software, outputs the signals to the standby process outputs 12a and 12b, and outputs failure information to the standby failure monitor 3b.
a and 7b are control system process output cards for inputting the software processed signals of the control system CPU 6a and outputting them to the control devices 10a and 10b. 10a and 10b are control system process output cards 7a and 7b and a standby system process output card 12a. , 12b, which is the output destination of the control device, 11a, 1
Reference numeral 1b is a standby process input card for inputting process signals, and 12a and 12b are standby system process output cards for inputting software processed signals of the standby CPU 6b and outputting them to the control devices 10a, 10b.

Reference numeral 13 is a control system failure monitoring unit 3a, a standby system failure monitoring unit 3b, control system process input cards 2a and 2b, standby system process input cards 11a and 11b, control system process output cards 7a and 7b, and standby system process output. Card 1
Switching devices for switching between the control system and the standby system based on the failure information of 2a, 12b, 16a, 16b, 16c, 16d transmit the input signals of the process input cards 2a, 2b or 11a, 11b to the CPU part or from the CPU part. Bus receivers 17a, 17b, 17c, 17d for receiving signals and transmitting them to the process output cards 7a, 7b or 12a, 12b
Is a bus driver that receives input signals from the process input units 103 and 104 and sends them to the CPUs 6a and 6b, or receives signals from the CPUs 6a and 6b and sends them to the process output units 105 and 106.

Next, the operation of this conventional apparatus will be described with reference to the flowchart of FIG. The control system failure monitoring unit 3a inputs failure information from the control system process input cards 2a and 2b, the control system CPU 6a, and the control system process output cards 7a and 7b. Similarly, the standby system failure monitoring unit 3b also has the standby system process input cards 11a and 11b and the standby system CPU.
The failure information is input from 6b and the standby system process output cards 12a and 12b. Next, each failure monitoring unit 3a,
3b outputs failure information of its own system to the switching device 13. The switching device 13 performs the following operation based on the failure information of the failure monitoring units 3a and 3b.

First, the switching device 13 determines whether or not a failure has been detected (step S51), and if it detects a failure, it determines whether or not the next control system has a failure (step S52).
If no failure can be detected, this process ends. Next, if the control system is in failure, it is determined whether or not the next standby system is in failure (step S53), and if the control system is not in failure, this process ends. Next, if the standby system is not defective, the switching device 1
Control system process input cards 2a, 2b
And control system CPU 6a and control system process output card 7
a, 7b to standby process input cards 11a, 11b
And standby CPU 6b and standby process output card 12
The system is switched to a and 12b (step S54).
If the standby system fails, system switching is not performed and this process ends.

[0006]

Since the conventional process control device is constructed as described above, in order to prevent the loss of function due to a single failure of the process input card or the process output card, the card must be duplicated. But not
In this case, there is a problem that the entire system configuration becomes complicated. In addition, there is a problem in that the function of the system is lost due to a failure of the CPU or the like and the reliability is reduced. In addition, if a single failure of the card occurs, it becomes difficult to maintain and the maintainability deteriorates. In addition, since remote control is not possible, there is a problem that operability is poor.

The present invention has been made in order to solve the above-mentioned problems, and a system configuration is provided even if a card is duplicated as a measure for preventing loss of function due to a single failure of a control process input card or a control process output card. It does not become complicated as a whole, the probability of loss of system function can be reduced even if a CPU or other failure occurs, and even if a single card failure occurs, maintenance can be easily performed. An object of the present invention is to provide a process control device that can be remotely operated.

[0008]

A first aspect of the present invention is a control process input card for inputting a process signal, a spare process input card which is a spare for the control process input card, and a control process for performing a control output to a control device. An output card, a spare process output card that is a spare for this control process output card, and an output signal of the control process input card or the spare process input card is processed by software, and the signal is processed by the control process output card or the spare process. CPU to output to output card
And fault information indicating whether or not the control process input card, the spare process input card, the control process output card, and the spare process output card are malfunctioning, and a switching command is issued according to the malfunction information. A command unit, an input switching unit that switches from the control process input card of the failure to a normal backup process input card by the switching command, and an output that switches from the control process output card of the failure to a normal backup process output card by the switching command. And a switching unit.

A second aspect of the invention is characterized in that the CPU and the failure monitoring switching command section are duplicated.

A third aspect of the invention is characterized by comprising a manual selection section capable of manually selecting a preliminary process input card and a preliminary process output card.

A fourth aspect of the present invention is characterized by comprising a remote operation section capable of remotely selecting and operating the spare process input card and the spare process output card.

A fifth aspect of the invention is characterized in that the input switching section and the output switching section are composed of semiconductors.

[0013]

According to the first aspect of the present invention, when the control process input card fails, a switching command for switching the card to the spare process input card is output from the failure monitoring switching command unit, whereby the input switching unit fails. Switch from control process input card to normal spare process input card. When the control process output card fails, the failure monitoring switching command unit outputs a switching command to switch the card to the backup process output card, which causes the output switching unit to output a normal backup process from the failed control process output card. Switch to the output card.

According to the second aspect of the invention, the CPU and the failure monitoring switching command section are duplicated. As a result, the probability that the system function will be lost due to a failure of the CPU or the failure monitoring switching command unit will be reduced.

According to the third aspect of the present invention, the spare process input card and the spare process output card can be arbitrarily manually selected by the manual selector, and universal switching is possible.

According to the fourth aspect of the present invention, the spare process input card and the spare process output card can be remotely selected and operated by the remote operation unit, and it is not necessary to go to the installation location of the system to perform the selection operation.

According to the fifth aspect of the invention, since the input switching section and the output switching section are made of semiconductor, the switching operation speed is faster than that of the relay.

[0018]

【Example】

Example 1 (corresponding to claims 1 and 5). Embodiment 1 of the present invention will be described below with reference to the drawings. 1 and 2 are block diagrams showing the configuration of a process control apparatus according to a first embodiment of the present invention. In FIGS. 1 and 2, 301 is a CPU unit, 3
Reference numeral 02 is a process input unit and reference numeral 303 is a process output unit. 1a and 1b are process signals, 2a and 2b are control process input cards for inputting process signals 1a and 1b, 3
Are control process input cards 2a, 2b, spare process input cards 4a, 4b and control process output cards 7a, 7
b is a failure monitoring switching command unit that inputs a failure signal of the spare process output cards 8a and 8b and generates a switching command for switching from the failed control process card to the spare process card. 4a and 4b are backup process input cards for the control process input cards 2a and 2b, and 5 is a backup process input card 4a and 4b from the control process input cards 2a and 2b based on a command from the fault monitoring switching command unit 3.
It is an input switching section for switching to each of the above.

Reference numeral 6 is software processing of the signals of the control process cards 2a, 2b or the spare process input cards 4a, 4b to provide failure information, and the control process output card 7
a, 7b or a CPU for outputting a signal to the spare process output cards 8a, 8b, 7a, 7b for receiving the signal from the CPU 6 and outputting the signal to the field, 8a, 8b for the control process output cards 7a, 7
The backup process output card 9 for b, 9 is a backup process output card 8a, 8b from the control process output cards 7a, 7b based on the switching command from the failure monitoring switching command unit 3.
output switching units 10a and 10b for switching to b respectively
Is a control device to which the output signal of the control process output card 7a, 7b or the spare process output card 8a, 8b is sent. 301B is a multi-bus in the CPU unit 301,
302B is a multi-bus in the process input unit 302, 30
3B is a multi-bus in the process output unit 303.

Reference numeral 16a is a control process input card 2a, 2
b or a bus receiver for receiving the input signals of the spare process input cards 4a and 4b and transmitting them to the CPU unit 301, 16b
Receives a signal from the CPU unit 301 and outputs control process output cards 7a, 7b or spare process output cards 8a, 8b.
Bus receivers 17a and 17b for transmitting signals to the CPU 6 and the failure monitoring switching instruction unit 3 receive signals from the process input unit 302, and receive signals from the CPU 6 and transmit signals to the process output unit 303 for control. Process input cards 2a, 2b and spare process input cards 4a, 4
b, a bus driver for receiving the failure information of the control process output cards 7a, 7b and the spare process output cards 8a, 8b, and 18 is a display for displaying the failure information.

The information frame used in the first embodiment will be described with reference to FIG. An information frame 201 as shown in FIG. 3 is output from each card at a fixed cycle and transmitted to the failure monitoring switching command unit 3. Information frame 2
The content of 01 is a card type name bit 207 indicating the type of the card (voltage type, current type, contact type, pulse type, RTD type, thermocouple type, etc.), and an input / output bit for determining the type of input or output. 206, a failure bit 205 as failure information for determining whether the card is normal or abnormal, is a control card (control process input card, control process output card) or a spare card (spare process input card, spare process output card) Card information bit 204 for determining whether the card is currently in the control mode or the standby mode and a card status bit 203 for determining whether the card is in the standby mode. It is made up of a card position information bit 202 for determining whether or not. The card model name bit 207 is, for example, "000",
"001", "010", "011", "100",
“101” indicates a card type name indicating a voltage type, a current type, a contact type, a pulse type, an RTD type, and a thermocouple type.

Next, the operation of the first embodiment will be described with reference to the flow charts of FIGS. C in fixed cycle
The information frame transmitted to the PU unit 301 is input to the failure monitoring switching command unit 3 (step S1). Here, first, the control process input cards 2a and 2b, the spare process input cards 4a and 4b, and the control process output cards 7a and 7
b, and whether or not the backup process output cards 8a and 8b are healthy is determined by the failure bit (step S2). If these cards are normal, process signals 1a and 1b are
The PU 6 performs software processing to determine whether a failure signal is transmitted (step S8). If there is a failure, the card information bit is used to determine whether the failed card is a control card or a spare card (step S3). If it is a spare card, the display of failure of the spare card is displayed on the display unit 18, and if it is a control card, it is judged whether there is a spare card or not by the card information bit and the card status bit (step S4). If the card information bit is the spare card, the card status bit is in the standby mode, and the input / output bits and the card type name bit match the bits of the defective card, the defective card is switched to the spare card (step S).
5). In cases other than the above, the display of the defective card and the display without the spare card are performed on the display device 18 (step S7). After the card is switched, the switching information is transmitted to the CPU 6 (step S6). Next, if the CPU 6 does not perform software processing on the process input signal to determine whether or not a failure signal is transmitted, the flow of the series of steps S9 to S13 ends, and if it is transmitted, the same processing as above is performed. The processing of steps S9 to S13 is performed, and the series of processing ends.

On the other hand, the operation of the CPU 6 will be described.
If the process signals 1a and 1b shown in FIG. 1 are the same but the values of the control process input cards 2a and 2b do not match, it is determined that the card on the input side has failed, and the values of the control process output cards 7a and 7b are If they do not match, an input / output card diagnosis process (step S21) for determining a failure of the card on the output side is first performed, and at that time, the failure information is transmitted to the failure monitoring switching command unit 3. Next, failure processing (step S2
In 2), the card switching information of the failure monitoring switching command unit 3 is received, and the operation of the next page (another flow prepared separately) is performed.

By the way, as shown in FIG. 7, the signal of each card is temporarily stored in the determined storage address A in the CPU 6 (see FIG. 1), and then stored in the software processing address SA for the next software processing. Set. Since the CPU 6 knows the address of the defective card and the address of the spare process input card from the switching information from the failure monitoring switching command unit 3 (see FIG. 1) to the CPU 6, each card is transferred from the storage address A to the software processing address SA. When the signal is set, the means for setting the data of the input signal to the software processing address SA of the faulty card is provided.

It should be noted that the failure monitor switching command unit 3 to the CPU 6
As shown in FIG. 6, for example, the switching information to the switch information is the position information bit B1 of the defective card and the position information bit B of the spare card.
It consists of two.

FIG. 8 is a block diagram showing the configuration in the vicinity of the switching unit when the input switching unit and the output switching unit are configured to include relays in the first embodiment. In FIG. 8, components corresponding to those shown in FIGS. 1 and 2 are designated by the same reference numerals, and their description will be omitted. In FIG. 8, the input switching unit 5 uses a relay matrix and is composed of a relay 5b and an operation unit 5a for switching a signal by the relay 5b. The output switching unit 9 also uses a relay matrix, and is composed of a relay 9b and an operating unit 9a for switching a signal by the relay 9b.

Next, the operation of the input switching section and the output switching section shown in FIG. 8 will be described. For example, when a failure of the control process input card 2a is detected by the hardware of the card itself or software processing by the CPU 6, the failure information is transmitted to the failure monitoring switching command unit 3 and the failure monitoring switching command is issued based on the failure information. The unit 3 controls the relay 5b so that the path of the input signal is changed from the faulty control process input card 2a to the spare process input card 4a.

FIG. 9 is a block diagram showing the input switching unit made of a semiconductor in the first embodiment. In FIG. 9, 1 is a process signal, 2a, 2b and 2c are control process input cards for inputting the process signal 1, and 3 is failure information of control process input cards 2a, 2b and 2c and spare process input card 4 and CPU failure. The failure monitoring switching command unit 5 which inputs information and transmits switching information for switching from the faulty card to the spare card switches input signals from the faulty card to the spare card based on the fault information of the fault monitoring switching command unit 3. This is a semiconductor input switching section. In the input switching section 5, 53 is a receiving means for receiving the failure information of the failure monitoring switching command section 3, 52 is an isolation control means for inputting the failure information from the receiving means 53 and controlling the isolation means 54a to 54d, 51.
Inputs the failure information of the receiving means 53 to input signal switching means 5
0 is an input signal switching means, 50 is an input signal switching means for switching the input signal according to the control signal of the input signal switching control means 51, and 54a, 54b, 54c and 54d are normally under control of the isolation control means 52. It is an isolation means that isolates the signal to the spare card and to the failed card when a failure occurs.

Next, the operation of the input switching section shown in FIG. 9 will be described. For example, when the control process input card 2a fails, the failure monitoring switching command unit 3 receives the failure information and sends the failure information to the input switching unit 5. The failure information is received by the receiving means 53 inside the input switching section 5 and transmitted to the input signal switching control means 51 and the isolation control means 52. The input signal switching control means 51 sends a control signal to the input signal switching means 50, and this signal is used to input the input signal switching means 50.
Connects the input signal of the control process input card 2a to the spare process input card 4. Further, the isolation control means 52 transmits a control signal to the isolation means 54a to 54d to send the isolation means 5
The input signal is cut off at 4a, and the input signal is connected at the isolation means 54d.

FIG. 10 is a block diagram showing an output switching unit made of a semiconductor in the first embodiment. In FIG. 10, reference numeral 3 is a failure monitoring switch for inputting failure information of the control process output cards 7a, 7b, 7c and the spare process output card 8 and CPU failure information and transmitting switching information for switching from the failed card to the spare card. The command unit, 9 is an output switching unit for switching the output signal from the fault card to the spare card based on the fault information of the fault monitoring switching command unit 3, and 10 is the output destination of the control process output cards 7a, 7b, 7c. It is a control device. In the semiconductor output switching unit 9, 53 is a receiving means for receiving the failure information of the failure monitoring switching commanding unit 5,
Reference numeral 8 is an output signal control means for inputting failure information of the receiving means 53 and controlling the output destination selecting means, and 55 is an output signal control means 5.
The output destination selecting means for selecting the output destination of the spare card based on the control signal of 8, the switching control means 56 for controlling the normal signal switching means based on the failure information of the receiving means 53, 57
Reference numerals a, 57b and 57c are the normal signal switching means for selecting the control process output cards 7a, 7b, 7c side or the standby process output card 8 side based on the control signal of the switching control means 56.

Next, the operation of the output switching section shown in FIG. 10 will be described. For example, when the control process output card 7a fails, the failure monitoring switching command unit 3 receives the failure information,
The failure information is transmitted to the output switching unit 9. The failure information is received by the receiving means 53 inside the output switching section 9 and transmitted to the output signal control means 51 and the switching control means 56. The output signal control means 51 sends a control signal to the output destination selection means 55, and the output destination selection means 55 uses this control signal to send the output signal of the spare process output card 8 to the signal path on the side of the control process output card 7a where the failure has occurred. To connect. Further, the switching control means 56 sends a control signal to the normal signal switching means 57a, and based on the control signal, the normal signal switching means 57 is sent.
a switches the signal path from the defective signal path (control process output card 7a side) to the normal signal path (spare process output card 8 side).

Embodiment 2 (corresponding to claim 2). In addition, the above-mentioned FIG.
Also, in the first embodiment shown in FIG. 2, the case where the failure monitoring switching command unit 3 and the CPU 6 are unified (single system) has been described, but in the second embodiment, as shown in FIG. 11, the control system failure monitoring switching is performed. Command unit 3a, standby system failure monitoring switching command unit 3b, control system CPU 6a, standby system CPU 6b, multi-bus 51b to
54b, control system bus receiver 16a1, input standby system bus receiver 16b1, output standby system bus receiver 16a
2, output standby bus receiver 16b2, input control bus driver 17a1, input standby bus driver 17
a2, an output control bus driver 17b1, an output standby bus driver 17b2, a control system failure indicator 18a, and a standby system failure indicator 18b, each of which is duplicated. Input switching command unit 5
Since the input switching unit 13a and the output switching unit 13b for selecting the control system command are provided in the output switching command unit 9, the CPU
It is possible to prevent loss of system function due to a failure of 6a, 6b, failure monitoring switching command sections 3a, 3b, bus drivers 17a1, 17b1, 17a2, 17b2, bus receivers 16a1, 16a2, 16b1, 16b2, and ensure high reliability.

Next, the operation of the second embodiment will be described.
The operation of the control system failure monitoring switching command unit 3a and the standby system failure monitoring switching command unit 3b in the second embodiment shown in FIG. 11 is the same as the operation of the failure monitoring switching command unit 3 in the first embodiment shown in FIGS. is there. Control system CPU 6a and standby system CPU 6
In the operation of b, as shown in FIG. 12, an input / output card diagnosis process (step S31) and a failure process (step S32) are performed (up to this point, the same as the first embodiment). Next, the CPU peripheral card diagnosis process (step S33) is performed. That is, whether or not the input control system bus driver 17a1, the output control system bus driver 17b1, which are peripheral cards of the control system CPU 6a, the display device 18a for displaying failure information, and the control system failure monitoring switching command unit 3a have no failure. To diagnose. In addition, whether or not there is a failure in the input standby bus driver 17a2, the output standby bus driver 17b2, the display 18b for displaying failure information, and the standby failure monitor switching command unit 3b, which are peripheral cards of the standby CPU 6b. To diagnose. Next, a switching process (step S34) is performed.

This switching process (step S34) and subsequent processes will be described with reference to the flowchart of FIG. In this switching process (step S34), it is first confirmed whether the own system is the control system or the standby system (step S35), and in the case of the control system, it is first judged whether or not the own system has failure information (step S3).
6) If not, the switching process ends, and if there is failure information, it is determined whether there is failure information in another system (step S3).
7). If there is failure information, system switching becomes impossible (step S41), and all controls cannot be performed. If there is no failure information, the failure information of the own system is displayed (step S38), a command for switching the control system to the other system is issued (step S39), and the input switching device 13a and the output switching device 13b are switched to the other system side. Switching (step S40), the process ends. When the own system is the standby system, it is determined whether or not there is failure information in the own system (step S42), and if there is failure information, the processing ends, and if there is failure information, the failure information of the own system is displayed and information is provided to other systems Is sent (step S43).

Embodiment 3 (corresponding to claim 3). In the first embodiment described above, only the failure monitoring switching command unit 3 has the input switching unit 5.
In the third embodiment, as shown in FIG. 14, the AUTO / MAN for switching the commands of the failure monitoring switching command unit 3 and the manual selection unit 33 is described. The switching units 30a and 30b, the operation unit 32 for switching to an arbitrary spare card, the addresses of the control card and the spare card are registered in memory in advance, the address change command is sent to the CPU 6 based on the manual operation command and the registered data, and the input switching unit 5 Since the control unit 31 for sending the switching command to the output switching unit 9 is provided, any card can be selected. As a result, switching from a card to be maintained to a spare card at the time of regular inspection of the card is facilitated, and maintainability can be improved. Further, even if the failure monitor switching command unit 3 fails, the manual operation is possible, and therefore, the failure card is detected and the multi-bus 6 is detected.
When displayed by the failure indicator 18 via 1B, the reliability is higher than that of the first embodiment because the failure card can be switched to the spare card.

Embodiment 4 (corresponding to claim 4). In the third embodiment described above, the case where the manual selection unit 33 is provided has been described. However, as shown in FIG. 15, in the fourth embodiment, the remote process input card and the spare process output card can be remotely selected and operated remotely. An operation unit 151, an information collection unit 152 and an operation unit 153 connected to the remote operation unit 151 via a communication line 40 such as a LAN are provided. The remote control unit 151 includes the AUTO / MAN switching units 30a and 30b,
The controller 31 and the manual selector 33 are provided. The operation unit 153 performs a switching operation on the remote operation unit 151, an operation unit transceiver 34 that transmits an operation command of the remote switch 35 and receives a failure signal from the remote operation unit 151, and The operation unit transceiver 34 is provided with a display 36 for displaying the failure information received.
The information collection unit 152 includes an information collection unit receiver 37 that receives failure information from the remote operation unit 151, a memory unit 38 that stores the received information, and an information collection unit display 39 that displays the information. Since the fourth embodiment has the configuration as described above, it is possible to detect and operate a failure from a remote place. In particular, since the maker side supplying the system has the information collecting unit 152, it is possible to detect a failure in the early morning and to perform reliable means of information, so that the image of the maker can be improved.

[0037]

As described above, according to the first aspect of the present invention, a control process input card for inputting a process signal, a spare process input card which is a spare for the control process input card, and a control output for a control device are provided. A control process output card, a spare process output card that is a spare for the control process output card, and an output signal of the control process input card or the spare process input card is processed by software, and the signal is processed by the control process output card or the above. C output to the backup process output card
Failure monitoring switching that inputs failure information indicating whether the PU, the control process input card, the backup process input card, the control process output card, and the backup process output card have failed, and issues a switching command according to this failure information A command unit, an input switching unit that switches from the control process input card of the failure to a normal backup process input card by the switching command, and an output that switches from the control process output card of the failure to a normal backup process output card by the switching command. Since it has a switching unit, even if the control process input card or control process output card fails, it can be replaced with a spare process input card or a spare process output card, thereby preventing loss of function due to a single failure of the card. However, it was possible to do without complicating the entire system configuration, Te, there is an advantage that it is possible to provide an inexpensive process control device with a simple structure.

According to the second aspect of the invention, since the CPU and the failure monitoring switch command section are duplicated, the probability of system loss due to the failure of the CPU and the failure monitoring switch command section is reduced, and the reliability of the system is reduced. The effect that the property is improved is obtained.

According to the third aspect of the present invention, since the spare process input card and the spare process output card are provided with the manual selection section that can be manually selected arbitrarily, it is possible to switch to any spare card, and a single failure of the card occurs. Even if
The effect that the maintenance can be easily performed and therefore the maintainability is improved is obtained.

According to the fourth aspect of the present invention, since the remote operation unit for remotely selecting and operating the spare process input card and the spare process output card is provided, the card can be manually operated remotely without going to the installation location of the system. It becomes possible to select, and the effect that the operability is improved is obtained.

According to the fifth aspect of the invention, since the input switching section and the output switching section are composed of semiconductors, the switching operation speed thereof is faster than that of the relay, and there is no mechanical contact point as compared with the relay. The effect of improving reliability can be obtained.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a process control device according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a continuation of FIG.

FIG. 3 is a configuration diagram of an information frame used in the first embodiment.

FIG. 4 is a flowchart showing the operation of the failure monitoring switching command unit in the first embodiment.

FIG. 5 is a flowchart showing the operation of the CPU in the first embodiment.

FIG. 6 is a configuration diagram of switching information according to the first embodiment.

FIG. 7 is a diagram for explaining an operation in which a signal of each card is stored in an address in the first embodiment.

FIG. 8 is a block diagram showing a configuration in the vicinity of a switching unit when the input switching unit and the output switching unit are configured to include a relay in the first embodiment.

FIG. 9 is a block diagram showing the input switching unit made of a semiconductor in the first embodiment.

FIG. 10 is a block diagram showing an output switching unit made of a semiconductor in the first embodiment.

FIG. 11 is a block diagram showing a configuration of a process control device according to a second embodiment of the present invention.

FIG. 12 is a flowchart showing the operation of the CPU in the second embodiment.

FIG. 13 is a flowchart showing a switching process in the second embodiment.

FIG. 14 is a block diagram showing a configuration near a manual selection unit in a process control device according to a third embodiment of the present invention.

FIG. 15 is a block diagram showing a configuration in the vicinity of a remote control unit in a process control device according to a fourth embodiment of the present invention.

FIG. 16 is a block diagram showing a configuration of a conventional process control device.

FIG. 17 is a flowchart showing an operation of the conventional device.

[Explanation of symbols]

1a, 1b, 1c, 1 process signal, 2a, 2b, 2
c control process input card, 3 failure monitoring switching command unit, 3a control system failure monitoring switching command unit, 3b standby system failure monitoring switching command unit, 4a, 4b, 4 spare process input card, 5 input switching unit, 5a operating unit, 5b relay, 6 CPU, 6a control system CPU, 6b standby system C
PU, 7a, 7b, 7c Control process output card, 8
a, 8b, 8 spare process output card, 9 output switching section, 9a operating section, 9b relay, 10a, 10b, 1
0c, 10 control equipment, 11a, 11b standby process input card, 12a, 12b standby process output card, 13a input selector, 13b output selector,
14 manual selector, 15 remote controller, 16a, 16b
Bus receiver, 17a, 17b, 17 Bus driver, 18a, 18b, 18, 36, 39 Display, 30
a, 30b AUTO / MAN switching unit, 31 control unit,
32 operation part, 33 manual selection part, 34 operation part transceiver, 35 remote switch, 37 receiver, 38 memory part, 50 input signal switching means, 51 input signal switching control means, 52 isolation control means, 53 receiving means, 54a ~
54d isolation means, 55 output destination selection means, 56 switching control means, 57a, 57b, 57c normal signal switching means, 58 output signal control means, 151 remote control section, 1
52 information collection unit, 153 operation unit, 201 information frame, 202 card position information bit, 203 card status bit, 204 card information bit, 205 failure bit, 206 input / output bit, 207 card model bit, 301 CPU unit, 51b, 52b, 53b, 5
4b, 301B, 302B, 303B multi-bus, 3
02 process input part, 303 process output part.

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI technical display area G21D 3/04 B

Claims (5)

[Claims] 1. A control process input card for inputting a process signal, a spare process input card which is a spare for the control process input card, a control process output card for performing a control output to a control device, and a control process output card for the control process output card. A spare process output card that is a spare, a CPU that processes the output signal of the control process input card or the spare process input card by software, and outputs the signal to the control process output card or the spare process output card, and a control process A failure monitoring switching command unit for inputting failure information indicating whether the input card, the spare process input card, the control process output card, and the spare process output card are malfunctioning, and issuing a switching command according to this failure information, The control command for the failure is issued by the above switching command. Process input card for switching from a process input card to a normal spare process input card, and an output switching unit for switching from the faulty control process output card to a normal spare process output card according to the switching command. Control device. 2. The process control apparatus according to claim 1, wherein the CPU and the failure monitoring switching command section are duplicated. 3. The process control apparatus according to claim 1, further comprising a manual selection unit capable of manually selecting the preliminary process input card and the preliminary process output card. 4. The process control device according to claim 1, further comprising a remote control section capable of remotely selecting and operating the spare process input card and the spare process output card. 5. The process control device according to claim 1, wherein the input switching unit and the output switching unit are made of a semiconductor.