JPH0934854A - Multiple computer system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize high reliability by preventing data of a common share memory device from being destroyed by mistake from a computer in the standby operation mode. SOLUTION: The multiplex computer system is a system in which an operating mode of multiplexed computers 11, 12 is managed by a system monitor panel 13 and each of the computers 11, 12 is accessible to a common share memory 14 via common share memory interface devices 15, 16, and write from the computer in the standby mode to the common share memory device 14 is blocked, based on the operating mode information managed by the system monitor panel 13.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a multiplexed multi-system computer system including a shared memory device, and more particularly to a multi-system computer system capable of selecting a plurality of types of operation modes.

[0002]

2. Description of the Related Art Electronic computers carry out multiplexing in order to improve reliability and availability. The multiplexed computer has operation modes of a main system (abbreviated as a regular system) and a backup system (standby as abbreviated) when the regular system stops. Further, a shared memory device is widely used for exchanging information between multiplexed electronic computers.

FIG. 9 is a diagram showing an example of the configuration of a conventional multiple computer system. In this multi-system computer system, multiplexed electronic computers 1 and 2 for processing various kinds of information, a shared memory device 3 for storing common information of these electronic computers 1 and 2, and reading and writing in the shared memory device 3. It comprises shared memory interface devices 4 and 5 for performing the operation, and a system monitor board device 6 for setting the operation modes of the computers 1 and 2.

The computers 1 and 2 can read and write common information from the shared memory device 3 via the shared memory interface devices 4 and 5. The common information of the multiplexed computers stored in the shared memory device 3 is read and written by the computer in the normal operation mode, and is read by the computer in the standby operation mode as a backup of the regular computer. I'm only doing

Further, one of the duplicated electronic computers can be used for software development and modification, and the developed and modified software can be tested. For this purpose, an operation mode called a simulation mode or a test mode is prepared. Conventionally, one shared memory device 3 is divided into two areas and used for a normal / standby mode computer and a test / simulation mode computer, respectively.

[0006]

In the multiplexed computer system, the information common to the electronic computers is stored in the shared memory device, and the common information stored in the shared memory device 3 is the multiplexed computer. Reading and writing are possible from either 1 or 2. Therefore, in the inspection and the confirmation test after the inspection, if the human system mistakenly writes the data to the shared memory device from the computer in the standby operation mode, the common information between the computers will be destroyed. Therefore, the high reliability and availability given to the multi-computer system may be impaired. Also,
There is a possibility that the computer in the normal operation mode may not be able to continue the operation even when the data in the shared memory device is destroyed due to a software failure during the test in the test / simulation mode.

The common information stored in the shared memory device is mainly written by the computer in the normal operation mode. In the computer in the standby operation mode, if the common information in the computer is mistakenly destroyed, it takes a lot of labor to analyze which computer has the factor, and it is difficult to analyze the factor. .

The present invention has been made in view of the above situation, and reliably prevents data in the shared memory device from being mistakenly destroyed by the computer in the standby operation mode.
It is an object of the present invention to provide a multi-system computer system that can realize high reliability and availability.

[0009]

In order to achieve the above object, the present invention takes the following measures. The present invention corresponding to claim 1 is a multi-system computer capable of managing an operation mode of a computer that has been multiplexed by a system monitoring board and accessing the shared memory device from each computer through a shared memory interface device. In the system, writing from the computer in the standby operation mode to the shared memory device is blocked based on the operation mode information managed by the system monitor board.

According to the present invention, when data is mistakenly written to the information common to the computers stored in the shared memory device from the computers in the standby operation mode, the writing is blocked, so that the data is written by mistake. Can be prevented from happening.

According to a second aspect of the present invention, the operating mode of the multiplexed computers is managed by a system monitoring board, and the shared memory device can be accessed from each computer via the shared memory interface device. In the multi-system computer system, write blocking means for blocking writing from the computer in the standby operation mode to the shared memory device based on the operation mode information managed by the system monitoring board, and the sharing by the write blocking means. And a non-writable information storage means for storing the information that is prevented from being written to the memory device.

According to the present invention, when the computer in the standby operation mode attempts to write erroneous data to the information common to the computers stored in the shared memory device, the information to be written can be stored. it can. Therefore, it becomes easy to analyze the factors of the computer that is going to be destroyed by writing data later.

According to a third aspect of the present invention, in the multi-system computer system in which the operating mode of the multiplexed computers is managed by a system monitor board and the shared memory device can be accessed from each computer, A plurality of shared memory devices accessible from the computer are provided, and the shared memory device to be used by the computer is switched based on the operation mode information managed by the system monitoring board.

In the present invention, the shared memory device connected to the computer operated in the normal mode and the shared memory device connected to the computer operated in another operation mode (for example, simulation / test mode) can be separated. Therefore, it is possible to prevent the data in the shared memory connected to the computer operated in the normal mode from being destroyed due to the software failure during the test in the computer operated in the simulation / test mode.

According to a fourth aspect of the present invention, in the multiple computer system according to the third aspect, when a failure occurs in the shared memory device connected to the computer, the computer is switched to another normal shared memory device. I tried to drive.

According to the present invention, even if a device failure occurs in the shared memory device of the computer operating in the normal / standby mode, it is immediately switched to another normal shared memory device.
It is possible to immediately take over the monitoring and control data that was being performed by the computer that was operating in the normal / standby mode, and thus prevent the multi-system computer system from being completely stopped.

[0017]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below. (First Embodiment) FIG. 1 is a block diagram showing the arrangement of a multiple computer system according to this embodiment.

In the multi-system computer system of this embodiment, electronic computers 11 and 12 for processing various information are multiplexed, and whether the computer 11 or 12 operates in a normal operation mode or a standby operation mode is determined. It is set by the system monitor board device 13. The multi-computer system can be composed of three or more electronic computers. Information common to the two computers 11 and 12 is stored in the shared memory device 13. The electronic computer 11 reads from and writes to the shared memory device 13 via the shared memory interface device 15, and the other electronic computer 12 reads from and writes to the shared memory device 13 via the shared memory interface device 16. Between the shared memory interface devices 15 and 16 and the shared memory device 14, the shared memory write disable detection device 1 is provided.
7 are provided. Shared memory write disable detection device 1
7 has a function of preventing writing to the shared memory device 14 from the electronic computer in the standby operation mode.

FIG. 2 shows a shared memory write disable detection device 1.
7 shows a specific configuration of No. 7. The shared memory write disable detection device 17 has a shared memory device write circuit 18 corresponding to each of the computers 11 and 12. Electronic calculator 11
The shared memory device write circuit 18 corresponding to the write signal 19 for the shared memory device 14 of the computer 11
And the operation mode signal 20 sent from the system monitoring board device 13 to the electronic computer 11 is input. When the write signal 19 is input from the shared memory interface device 15 and the operation mode signal 20 is the normal operation mode signal, the write permission signal 21 to the shared memory device 14 is output. The shared memory device write circuit corresponding to the other computer 12 is the shared memory device 1 of the computer 12.
4 write signal 19 and system monitoring board device 13
Mode signal 20 sent from computer to computer 12
And are input and are set to operate in the same manner as above.

Next, the operation of this embodiment configured as described above will be described. In the multi-system computer system, one computer 11 is in the normal operation mode and the other computer 12 is in the standby operation mode, and when the computer 12 in the standby operation mode is inspected, the human system mistakenly uses the shared memory. The operation when writing data to the device 14 will be described.

If the shared memory device 14 is erroneously written in the inspection of the computer 12 in the standby operation mode, the write signal 19 is input to the shared memory write disable detection device 17 via the shared memory interface device 16. At this time, the shared memory write disable detection device 17
The operation mode signal 20 of the standby operation mode, which is the operation mode of the electronic computer 12 set from the system monitoring board device 13, is input to the.

In the shared memory write disable detection device 17, the shared memory device write circuit 18 receives the write signal 19 and the standby operation mode signal 20, but the shared memory device write circuit 18 does not receive the normal operation mode signal 20. Therefore, the shared memory device write permission signal 21 is not created, and writing to the shared memory device 14 is not performed.

On the other hand, in the shared memory device writing circuit 18 corresponding to the computer 11 operating in the normal operation mode,
The system monitor board device 13 creates the shared memory device write permission signal 21 by inputting the normal operation mode signal 20 and the shared memory device write signal 19 given to the electronic computer 11, and writes the shared memory device write permission signal 21 into the shared memory device 14.

As described above, according to this embodiment, even if the computer 12 in the standby operation mode erroneously writes to the shared memory device 14 in the inspection of the computer in the standby operation mode, it is detected that the shared memory device cannot be written. Device 17
Since the writing is blocked at the shared memory device 14
It is possible to surely prevent the data of (1) from being accidentally destroyed, to ensure the high reliability given to the multi-computer system, and to achieve a high operating rate.

(Second Embodiment) FIG. 3 is a diagram showing the configuration of a multiple computer system according to the second embodiment.
The parts having the same functions as those in the first embodiment described above are designated by the same reference numerals.

In the multi-computer system of this embodiment, the electronic computer in the standby operation mode has the shared memory device 14
The shared memory device is provided with a non-writable information storage device 22 for storing information that is prevented from being written to. Other configurations are the same as those in the first embodiment. That is, the shared memory interface device 1 for reading the electronic computers 11 and 12 that processes various information and the shared memory device 14
5, 16 and shared memory device 1 for storing common information
4. The system monitor panel device 13 for setting the operation mode and the shared memory device write disable detection device 17 are provided.

FIG. 4 is a diagram showing a configuration example of information stored in the shared memory unwritable information storage device 22. As shown in the figure, the year / month / day / time when writing was attempted in the shared memory device 14, the number of the computer that was prevented from writing in the shared memory device 14, and the writing in the shared memory device 14 were performed. The blocked data is used as shared memory device write blocking information.

Next, the operation of this embodiment configured as described above will be described. An example in which one computer 11 is in the normal operation mode and the other computer 12 is in the standby operation mode, and when the computer 12 in the standby operation mode is inspected by mistake, an attempt is made to write to the shared memory device 14 by a human system. Will be explained.

In the inspection of the computer 12 in the standby operation mode, if the computer 12 erroneously writes to the shared memory device 14, a write signal 19 is sent to the shared memory write disable detection device 17 via the shared memory interface device 16. Is entered. Further, a standby operation mode signal 20 which is an operation mode of the electronic computer 12 set by the system monitor board device 13 is input to the shared memory write disable detection device 17. The shared memory write disable detection device 17 blocks writing to the shared memory device 14 by the same processing as in the first embodiment. Then, the year, month, day, time, electronic computer number, and write data blocked by the shared memory device write circuit 18 are input to the shared memory unwritable information storage device 22 as shared memory write inhibition information and saved.

As described above, according to the present embodiment, since the information which is prevented from being written in the shared memory device 14 by mistake is stored in the shared memory unwritable information storage device 22, the shared memory device 14 is stored. It is possible to easily analyze the factor that tried to destroy the data.

(Third Embodiment) FIG. 5 is a diagram showing the configuration of a multiple computer system according to the present embodiment. The multi-system computer system of this embodiment is composed of a plurality of computers 31, 3
2 (two examples are shown in the same drawing) are provided side by side, and a system monitoring board device 33 for managing the operating state of each system corresponding to each computer 31, 32 is provided. The system monitoring board device 33 uses the shared memory device failure information,
It manages operating status information that indicates the operating mode of the computer for each system. It is provided with two shared memory devices 34 and 35 for storing information shared by a plurality of computers 31 and 32. Each of the computers 31 and 32 has a shared memory interface device (SMI) 36 and 37 provided corresponding to each computer.
The shared memory devices 34 and 35 are connected via. The shared memory interface devices 36 and 37 are configured so that the operating mode information of the computer can be taken out from the system monitoring board device 33 and the shared memory device used by the computer can be switched based on the operating mode.

In the figure, 41 and 42 are signal transmission lines for notifying the system monitoring panel device 33 of the operation mode from the computers 31 and 32, and 43 and 44 are system monitoring panel device 33 and the shared memory interface device 36. ，
A signal transmission line for notifying 37 of the operation modes of the computers 31 and 32, and 45 to 50 are signal transmission lines for reading and writing data between the computers 31 and 32 and the shared memory devices 34 and 35. Shows.

Next, the operation of this embodiment will be described with reference to FIGS. 6 and 7. FIG. 6 shows the operation of switching the signal transmission path for reading or writing data in the shared memory device 34 or 35 depending on the operation mode of the computers 31 and 32.

First, the individual computers 31 and 32 notify their respective operating modes to the system monitoring board device 33, and the system monitoring board device 33 stores the operating modes notified from the computers 31 and 32 separately for each system. To do. Then, the system monitoring board device 33 notifies the operating mode information of the computers 31, 32 to the shared memory interface devices 36, 37 of the computers 31, 32 via the signal transmission paths 43, 44.

The shared memory interface device 36 for controlling the access from the computer 31 switches the signal transmission path to 46 when the operation mode of the computer 31 is the normal mode or the standby mode, and switches the signal transmission path when the operation mode is other than that. Switch to 49. Similarly, a shared memory interface device 37 for controlling access from the computer 32
Switches the signal transmission path to 48 when the operation mode of the computer 32 is the normal mode / standby mode, and switches the signal transmission path to 50 when the operation mode is other than that. Therefore, if the operation mode of the computers 31 and 32 is the normal mode / standby mode, each of the computers 31 and 32 is set to the shared memory device 3 of one side.
4, the signal transmission path is switched so that the shared memory device 35 different from the shared memory device accessed by the computer in the normal mode / standby mode is connected in the other modes such as the test operation mode.

For example, when the computer 31 is operating in the normal mode and the computer 32 is operating in the standby mode,
Both the computers 31 and 32 are connected to the shared memory device 34 so that the computer 32 can take over the processing of the computer 31 at any time. On the other hand, when the computer 31 is operated in the normal mode and the computer 32 is operated in the test mode to execute the test of the modified or added software, the computer 32 in the test mode is operated by the other shared memory device 3.
The data of the shared memory device 35 will be rewritten by being connected to the memory device 5.

Therefore, even if the data in the shared memory device is destroyed due to a defect during the testing of the developed and modified software, the computer 31 in the normal mode can continue its operation without being affected by the damage.

FIG. 7 shows an operation of switching to another shared memory device when a failure occurs in the shared memory device connected to the computer. Each computer 31 (32) has a function of recognizing a failure of the shared memory device based on the operation content of the shared memory device 34 (35). Each computer 31 (32)
Monitors the health of the shared memory device connected by the shared memory interface device according to the above-mentioned algorithm by activating the above function constantly or periodically. As a result, when a failure of the shared memory device is found, the fact is notified to the system monitoring board device 33 via the signal transmission path 41 or 42.

The system monitor board device 33, which has received the failure information of the shared memory device from the computer 31 (32), stores the failure information and also has the shared memory interface device 36 connecting the computer to the failed shared memory device. Notify (37).

Shared memory interface device 36 (3
In 7), if the failed shared memory device is connected to the computer in the normal / standby mode, it is judged whether the other shared memory device is normal, and if normal, the signal transmission path is switched to the normal shared memory device side, Connect the normal / standby mode computer to a normal shared memory device.

If the failed shared memory device is connected to a computer other than the normal / standby mode, it is determined whether the other shared memory is normal, and if normal, the signal transmission path is switched to connect the normal shared memory device. To do.

Therefore, by matching the data between the shared memory devices at any time, when a device failure of one connected shared memory device occurs, it is immediately switched to another normal shared memory device for operation. It is possible to continue, it is possible to prevent all outages of the multi-system computer system, and it is possible to improve reliability. In addition, even when the data is not matched between the shared memory devices, it is possible to immediately switch to another normal shared memory device and continue the operation.

(Fourth Embodiment) FIG. 8 shows the structure of the essential parts of a multi-computer system according to this embodiment.
The overall system configuration of this embodiment is similar to that of the above-described third embodiment.

In the multi-system computer system of this embodiment, the areas in the shared memory devices 34 and 35 are used by being divided according to the operation mode. Specifically, it is divided into a normal / standby mode area 34A (35A) and a test / simulation area 34B (35B). Also,
It is assumed that the shared memory devices 34 and 35 are consistent in data.

In this embodiment, the computers 31, 32 are
When operating in the normal / standby mode, the shared memory interface device 36 (37) causes the system monitoring board device 33 to operate.
Recognizing the operation mode notified from the computer 31, 32
The common / standby mode area 34 in the shared memory device 34
A, 35A.

Further, when the computer 32 operates in the test / simulation mode, the shared memory interface device 37 recognizes the operation mode notified from the system monitor board device 33 and causes the computer 32 to perform the test / test in the shared memory device 34. Connect to the simulation mode area 34B.

When a failure of the connected shared memory device 34 occurs while the computers 31 and 32 are operating in the normal / standby mode, the shared memory devices 34 and 35 are always available.
Since the data is matched between the normal / standby mode areas of No. 3, it is possible to immediately switch to the normal shared memory device 35, whereby the multi-system computer system can continue operation.

Further, the computer 31 is in the normal mode, the computer 3
2 is operating in the test / simulation mode, for example, even when the device failure of the shared memory device 34 connected to the computer 31 in the normal mode occurs, the normal / standby mode area 35A of the shared memory device 35 is used. By doing so, the multi-system computer system can continue to operate. The present invention is not limited to the above embodiment, and various modifications can be made without departing from the spirit of the present invention.

[0049]

As described above in detail, according to the present invention, it becomes possible to prevent writing even if data is erroneously written in the shared memory device during inspection of the computer in the standby operation mode. It is possible to secure the high reliability and availability given to the.

Further, according to the present invention, it is possible to easily carry out the factor analysis because the information which is prevented from being erroneously written in the shared memory device can be stored. Further, according to the present invention, by providing a plurality of shared memory devices, even if data destruction by the computer testing the software occurs, it does not affect the computer operating in the normal mode. be able to.

Further, according to the present invention, by providing a plurality of shared memory devices, even if a device failure of the shared memory device connected during operation in the normal / standby mode occurs, another normal shared memory device can be used. By switching to the device, the multi-system computer system does not stop completely and the operation can be continued.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a multi-system computer system according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a shared memory device write circuit provided in the multiple computer system of the first embodiment.

FIG. 3 is a configuration diagram of a multi-system computer system according to a second embodiment of the present invention.

FIG. 4 is a diagram showing a specific example of writable information of a shared memory writable information storage device provided in a multi-system computer system of the second embodiment.

FIG. 5 is a configuration diagram of a multi-system computer system according to a third embodiment of the present invention.

FIG. 6 is a flowchart showing a switching operation of the shared memory device according to the third embodiment.

FIG. 7 is a flow chart showing an operation of switching a signal transmission line when a failure occurs in a shared memory device according to a third embodiment.

FIG. 8 is a configuration diagram of a main part of a multiple computer system according to a fourth embodiment of the present invention.

FIG. 9 is a block diagram of a conventional multi-computer system.

[Explanation of symbols]

11, 12, 31, 32 ... Electronic computer, 13, 33 ... System monitoring board device, 14, 34, 35 ... Shared memory device, 15, 16, 36, 37 ... Shared memory interface device, 17 ... Shared memory write disable detection Equipment, 18
... shared memory device write circuit.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Shinji Kirita No. 1 in Toshiba Fuchu factory, Fuchu-shi, Tokyo (72) Inventor Tatsuya Kuroki No. 1 Toshiba-machi in Fuchu, Tokyo Tokyo Fuchu factory, Ltd.

Claims (4)

[Claims] 1. A multi-system computer system in which an operation mode of a multiplexed computer is managed by a system monitor board and the shared memory device can be accessed from each computer through a shared memory interface device. A multi-system computer system which prevents writing from the computer in the standby operation mode to the shared memory device based on the operation mode information managed by the monitoring board. 2. A multi-system computer system in which an operating mode of a multiplexed computer is managed by a system monitoring board, and the shared memory device can be accessed from each computer through a shared memory interface device. Write blocking means for blocking writing to the shared memory device from a computer in the standby operation mode based on operating mode information managed by the monitoring board, and writing to the shared memory device by the write blocking means. A multi-system computer system comprising a non-writable information storage means for storing information. 3. A multi-system computer system in which an operating mode of a multiplexed computer is managed by a system monitoring board and the shared memory device can be accessed from each computer, and the shared memory device accessible from the computer. A multi-system computer system, wherein a plurality of shared memory devices are provided and the shared memory device to be used by the computer is switched based on the operation mode information managed by the system monitor board. 4. The multi-system computer system according to claim 3, wherein when a failure occurs in a shared memory device to which the computer is connected, the computer is switched to another normal shared memory device to operate.