JPH0831051B2 - Redundant information processing device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Outline] The present invention relates to an information processing device in which a main body device is duplicated, and an object of the present invention is to realize a switching device economically. One works as the current one,
The other has two main body system devices that are predetermined to operate as spares, and the main unit system device that is previously connected to operate and that book In a redundant information processing device configured by a switching device that switches a connection to a predetermined main body system device so as to operate as the spare when a signal indicating that the system device is normally operating is not sent, Between the main system devices of the two systems, there is an inter-main body coupling path for transmitting a diagnostic message indicating that the main body device predetermined to operate as the current one is operating normally, In the main body system device that is predetermined to operate as the current use, the main body system device that is predetermined to operate as the spare via the interbody connection path is A diagnostic message transmitting means for transmitting a diagnostic message indicating that the switching device is connected when the diagnostic message is not received within a predetermined time in the main body device that is predetermined to operate as the spare. Switching main body device to check which one of the main body system devices is switched to, and when the switching investigation device recognizes that the switching device is connected to its own main body system device, When recognizing that the operation starting means for starting the operation as a backup of the working machine and the switching examining means are connected to the main body system side which is predetermined to operate as the working machine Stop output means for outputting a signal indicating that the system device is in a stopped state to the main body system device side that is predetermined to operate as the working system. Therefore, you want to configure.

[Field of Industrial Application] The present invention has two main system units, and is automatically operated when a reset signal within a predetermined time is not sent from the main unit system currently used and being connected. The main body device provided as a spare of the main system devices of the upper two systems is selected by the switching device having the function of switching the connection to the main body device provided as a spare for Information processing device.

[Prior Art] FIG. 2 is a diagram showing an example of the configuration of a duplicated information processing apparatus, in which 51 and 52 are main system apparatuses and 53 is a switching apparatus.

In the figure, it is shown that the main body system device 51 is currently used and the contacts of the switching device 53 are connected to the main body system device 51 side.

The switching device 53 receives a reset signal issued from the connected main body system device at a predetermined fixed period, resets the timer each time the reset signal arrives, and maintains the connection. However, if the reset signal does not arrive even after the elapse of the predetermined time, the connection is automatically switched to the side of the main system device 52 which was the standby system.

This is because when the main system device 51 goes down due to a failure, or when for some reason it becomes a loop state and cannot function normally, it is detected as soon as possible and the main system device of the standby system is detected. It is a means for switching the connection to and connecting the functions of the system.

Therefore, the main body device in use must always send a reset signal to the switching device within a fixed time.

In addition, between the main body system devices 51 and 52, a connection path between main bodies
By transmitting and receiving diagnostic information through 54, the state diagnosis of the other party main system device is performed.

Then, when the diagnostic information is transmitted, if there is no response to this within a certain time, it is considered that the other party has failed, and a command for instructing the switching device to connect the circuit to the device itself (hereinafter also referred to as switching command To say). Upon receiving the command, the switching device switches the circuit to the side instructed by the command.

When a failure occurs in the main system-to-main system connection path 54 in FIG. 2, since each main body apparatus does not respond to the transmission of the diagnostic information, the other main body system apparatus fails. Switching device 53
Issue a switch command to.

At this time, the switching device follows the instruction of the one who received the switching command first, but immediately after that, the switching command is received from the other main body system device, and the switching operation is repeated.

In order to prevent such an inconvenience, the main body system device normally issues a switching command and then issues a lock command to prevent the switching device from repeatedly performing the circuit switching operation.

[Problems to be Solved by the Invention] As described above, in the conventional duplex information processing apparatus, the switching apparatus needs to read various commands from the main system apparatus and perform an operation according to the commands, which makes the apparatus expensive. There was a problem that it became a thing.

The present invention has been made in view of such conventional problems, and an object of the present invention is to provide a duplex information processing apparatus capable of performing a smooth and reliable operation by a switching apparatus which can be economically realized by a simple configuration.

[Means for Solving the Problems] According to the present invention, the above-mentioned object is achieved by the means described in the claims.

That is, the present invention has two main body system devices which are predetermined so that one of the main system devices of the two systems operates as an active system and the other operates as a standby system, and operates as the active system that is being connected. If a signal indicating that the main body system device is operating normally is not sent from the predetermined main body system device within a predetermined period of time, it is predetermined to operate as the spare. In the redundant information processing device configured by the switching device for switching the connection to the main body system device, the main body system device that is predetermined to operate as the active side normally operates between the main system devices of the two systems. That has a coupling path between the main bodies for transmitting a diagnostic message indicating that the The main body device predetermined to operate as a spare is provided with a diagnostic electronic message transmitting unit for transmitting a diagnostic electronic message indicating that the main body device is operating normally, and the main body device predetermined to operate as the spare. When the diagnostic message is not received within a fixed time, a switching investigation means for investigating to which side of the main system device the connection of the switching equipment is switched, and the switching investigation means When it recognizes that it is connected to its own main system device side, the operation starting means for starting the operation of the own main body system device as a backup of the active machine, and the switching examining means so that the switching device operates as the active machine When it recognizes that it is connected to a predetermined main body system side device, it operates as a signal indicating that its own main body system device is in a stopped state. And a stop output means for outputting to a main body system device side which is predetermined in the above.

[Operation] In the redundant information processing device according to the present invention, when the main body device in use fails, the reset signal to the switching device cannot start, so that the circuit of the switching device is automatically spared as in the conventional case. Switch to the main system device side.

At the same time, since the diagnostic message via the connection path between the main system devices is interrupted, the spare main system device detects the occurrence of a failure in the active main system device and investigates the switching state of the switching device.

Then, if the switching device is switched to the own device side, the active main body device recognizes that there is no doubt that it is a failure, and the active device itself starts operation.

On the other hand, when the diagnostic message is lost through the inter-body coupling path, the spare main unit device does not switch the connection of the switching device to its own device side, and if the circuit is connected to the working side, It is determined that this is not a fault in the main system device but a fault in the connection route between main system devices. Then, because the input / output information from the active system is lost due to the failure of the connection path between the main system devices, the synchronous relationship of the information with the active system is broken, and if a switching occurs thereafter, it causes inconvenience, so this is prevented. Therefore, the status of the main body system device is displayed as stopped (down).

[Embodiment] FIG. 1 is a block diagram showing a configuration of an embodiment of the present invention, in which 1 is a main body system apparatus for current use, 2 is a main body system apparatus for a spare system, 3 is a switching device, and 4 is between main bodies. A connection route, 5 is a diagnostic message transmission unit, 6 is a diagnostic message monitoring unit, and 7 is a switching device status display unit.

In the figure, the diagnostic message sending unit 5 of the main system device 1 in use sends a diagnostic message to the spare main system device 2 through the inter-body connection path 4 at the same time, and at the same time, a refresh signal ( Reset signal). The switching device 3 monitors the presence or absence of reception of the refresh signal at regular time intervals, and automatically switches the input / output circuit to the main system device 2 side when the refresh signal is interrupted.

On the other hand, the spare main body system device 2 monitors the diagnostic message from the active main body system device 1 by the diagnostic message monitor unit 6,
If the diagnostic message is interrupted for a certain period of time or longer, the switching device status display section 7 of the switching device 3 is monitored, and if the input / output circuit of the switching device 3 is switched to the main device side, a failure occurs in the main system device 1. It is judged that it has occurred, and backup operation is started immediately. Further, at this time, if the switching device does not switch to its own system even if the switching device 3 is monitored for a certain period of time, it is determined that there is a failure in the inter-body coupling path 4, and the main system device 2 self-stops.
At this time, the main body system device 1 cannot receive the response to the diagnostic message sent to the main body system device 2, so the main body system device 2 determines that there is a failure and sets the self single operation state.

In both cases, if both main system devices are normal, input / output data processing is performed by the active main system device 1 and the result is transmitted to the spare main system device 2, or data is sent each time. It may be transmitted to the spare main body system device 2 and the same processing as the active main body system device may be performed. And always keep the files of both systems the same. However, if one of the main system devices fails, the files of both systems are inconsistent, so even if the failed system recovers, it is not possible to re-install it in the current information processing system. Since it is not done, recognition of self-stop is necessary. Therefore, if both systems are restarted at the same time due to some cause (power failure, etc.) after one-system operation stop, the system configuration before the both-system stop state in the initial state, for example, "CPUX: down, CPUY: single" information Must be exchanged with each other to completely restore the system state of both systems and then reprocessed.

[Effects of the Invention] As described above, according to the present invention, a main system device having two main systems and being used as a currently used main system device sends a reset signal within a predetermined time period. If not, the switching device that has the function of automatically switching the connection to the main system device that is provided as a spare selects the main system device that is provided as a spare for the above-mentioned two main system devices. There is an advantage that the switching device in the information processing device configured to be used as an active machine can be economically realized with a simple structure.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention, and FIG. 2 is a diagram showing an example of the configuration of a redundant information processing device. 1, 2 ... Main body system device, 3 ... Switching device, 4 ... Connection path between main bodies, 5 ... Diagnostic message sending unit, 6 ... Diagnostic message monitoring unit, 7 ... Switching device status display unit

Claims (1)

[Claims] 1. A main body system device of two systems, one of which is preset to operate as an active machine and the other of which operates as a standby machine, and which operates as the active machine that is being connected. As described above, when a signal indicating that the main body system device is operating normally is not sent from the predetermined main body system device within a predetermined fixed time, it is predetermined to operate as the spare. In the redundant information processing device configured by the switching device that switches the connection to the main system device, between the main system devices of the two systems, the main system device that is predetermined to operate as the working one operates normally. Having a coupling path between the main bodies for transmitting a diagnostic message indicating that the main body system device is preset to operate as the working, and as the spare via the coupling path between the main bodies. In the main body system device that is predetermined to operate, the main body system device that is predetermined to operate is provided with a diagnostic electronic message transmitting unit that transmits a diagnostic telegram indicating that the self device is normally operating. When the diagnostic message is not received within a certain time,
When switching recognition means for investigating which side of the main system device the connection of the switching device is switched to, and when it is recognized by the switching investigation means that the switching device is connected to its own main system device side The operation starting means for starting the operation of the main body system device as a backup of the active machine, and that the switching device is connected to the main body system device side predetermined by the switching examining means to operate as the active machine When the information is recognized, a stop output means for outputting a signal indicating that the main body system device is in a stopped state to the main body system device side which is predetermined to operate as the active system is provided. Processing equipment.