JPH0944280A - Module exchange method and self-diagnosis method in data processing system - Google Patents

Abstract

(57) [Summary] [Purpose] When replacing a module while the system is online, eliminate the adverse effects of noise on other modules that are online and increase the reliability of the system to ensure reliable and secure work. It can be so. In a module exchanging method for a data processing system having a plurality of modules connected by a bus, when a certain module needs to be electrically connected to and disconnected from the bus, the module is connected to the bus. Other modules that have been
The timing at which malfunction does not occur even if noise generated when disconnecting is received is detected, and at this timing, the switch electrically connects / disconnects at the connection part of a certain module.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a module replacement method and a module self-diagnosis method for a data processing system, wherein one module replacement can be performed without affecting other parts. For example, a module replacement method that does not stop the online business of the system, particularly reliability is required, and data processing that requires repair or replacement of the module while the system is operating. The present invention relates to a module replacement method and a module self-diagnosis method for a data processing system suitable for use in the system.

[0002]

2. Description of the Related Art In recent years, as data processing systems have spread to financial systems and traffic control systems,
The data processing system has become an essential part of social life.

In such an information-oriented society, stopping the data processing system has a great influence on the society. Therefore, at the time of repair or repair of the module, there is a demand for a method of replacing the module so that the module can be replaced even in the online operating state.

Conventionally, as means for realizing such module replacement, as in "Data processing device and package replacement method" disclosed in Japanese Patent Laid-Open No. 5-333961, a module within the bus transceiver IC of the module to be replaced is installed. It is known to reduce the capacitance on the system bus that occurs during package replacement by reducing the capacitance.

Further, as in "Electronic circuit package for hot-plugging and unplugging" described in Japanese Patent Laid-Open No. 63-153899, the output of the three-state buffer circuit is set to a high impedance state by utilizing the insertion lever of the module. Then, there is a method of avoiding an adverse effect due to a surge voltage and preventing a malfunction due to noise.

[0006]

SUMMARY OF THE INVENTION In the above-mentioned prior art, in order to replace the module while the device is in operation, a special circuit is added to the module side to be replaced, so that the module is replaced at the time of replacement. The idea was to reduce the generated noise.

However, even if such a device is devised,
It is physically impossible to completely eliminate the occurrence of noise, and in the above-mentioned conventional method, the timing of occurrence of the noise also depends on the human insertion / removal timing of the operator who replaces the module, There is a problem that the adverse effect of noise cannot be avoided depending on the timing. Further, the magnitude and influence of noise change due to variations in the characteristics of circuit elements, etc., and it has been difficult to quantitatively capture it.

However, conventionally, when such noise is generated, there is no protection on the side receiving the noise, so that the module operating online connected to the same bus may receive the noise and malfunction. However, there is a possibility that the system malfunctions, and there is a problem in that the system is unreliable.

Further, the above-mentioned conventional technique has a problem in that a special circuit has to be added to the module side, it cannot be said to be a general-purpose method, and the manufacturing cost is high.

The present invention has been made to solve the above-mentioned problems of the prior art, and an object thereof is to insert / insert the module as in the prior art when replacing the module while the system is online. It is not from the viewpoint of reducing the noise generated during removal, but the side receiving the noise detects the timing at which the other modules that are operating online do not malfunction even when receiving noise, and the module to be replaced is selected at that timing. By electrically disconnecting, the system does not suffer the adverse effects of noise,
Another object of the present invention is to provide a method of replacing a module of a data processing system, which further enhances system reliability and enables reliable and reliable work.

Another object of the present invention is to provide a highly versatile module replacement method for a data processing system which does not require the module side to have a special function for replacement.

Another object of the present invention is to provide a module self-diagnosis method for clarifying a failure part in advance and efficiently proceeding with work in order to replace the module.

[0013]

The first configuration of the invention relating to the module exchanging method of the data processing system of the present invention for achieving the above object is a data having a plurality of modules connected by a bus and exchanging data. In a module replacement method for a processing system, a connecting portion for connecting the bus and each module, a switch means for electrically connecting / disconnecting the module and the bus with the connecting portion, and the switch means are controlled. A switch control means and a connection / disconnection timing detection means are provided, and the connection / disconnection timing detection means, when electrical connection to and disconnection from the bus is required to replace a module, When another module connected to the bus electrically connects / disconnects a module The switch control means controls the switch means to electrically connect / disconnect the connection part of a module by detecting the timing at which the malfunction does not occur even if the generated noise is received. It was done.

More specifically, in the module exchanging method for the data processing system, in addition to the above-described means, a module exchanging request signal is further generated and transmitted to the connection / disconnection timing detecting means, and the module. A means for generating an exchange permission signal and transmitting it to the outside is provided, and when a certain module is removed for the purpose of module exchange, (1) the module exchange request signal is generated and the connection / disconnection timing is detected. A step of turning on the module replacement request signal by the means for notifying the connection / disconnection timing detection means, and (2) the connection / disconnection timing detection means by another module connected to the bus. , Even if the noise generated when electrically disconnecting a module is received, (3) a procedure for detecting a timing when the module is not produced, (3) a procedure in which the switch control means controls the switch means at the timing described in (2) to electrically disconnect the connection part of a module. 4) There is a procedure for generating a module exchange permission signal and transmitting it to the outside by means of transmitting the module exchange permission signal to the outside. The steps (1) to (4) are performed in this order. After that, when a certain module is removed and a certain module is inserted to replace the module, (1) by a means for generating a request signal for the module exchange and transmitting it to the connection / disconnection timing detection means, Procedure for turning off the module replacement request signal and transmitting to the connection / disconnection timing detection means, (2) ° module To generate a permission signal exchange, by means of communicating to the outside, by turning off the enabling signal module replacement, convey to the outside procedure,
(3) A procedure in which the connection / disconnection timing detection means detects a timing at which another module connected to the bus does not malfunction even if it receives noise generated when electrically connecting a module. (4) ° At the timing described in the above (3) °, the switch control means has a procedure for controlling the switch means to electrically connect the connection part of a module, and the module is inserted. After that, the procedure from (1) ° to (4) ° is performed in this order.

Next, in more detail regarding the above timing, in the module replacing method of the above data processing system, even if the other module receives noise generated when electrically connecting a certain module, it does not malfunction. The timing is such that the generated noise disappears when the other module receives the data.

Further, regarding the above timing separately, in the module replacing method of the data processing system, even if the other module receives noise generated when electrically connecting a certain module, it does not malfunction. The timing is such that the other module is not busy.

Further, in more detail regarding the above timing, in the module replacement method of the above data processing system, even if the other module receives noise generated when electrically connecting a certain module, a malfunction may occur. The timing not to be set is such that it is in a phase opposite to that of the clock regulation for the other module to receive data.

Next, a second configuration of the invention relating to the module exchanging method of the data processing system of the present invention for achieving the above object is a multiplexed redundant data system, in which one system is connected to another system. In a module exchange method for a data processing system in which systems are connected by a bus and one system can substitute for the other system, a bus connecting the one system and the other system, and an electric power of the bus. Electrical connection of the bus for exchanging a module of one system, which comprises a switch means for selectively connecting / disconnecting, a switch control means for controlling this switch means, and a connecting / disconnecting timing detecting means. When disconnection is required, the connection / disconnection timing detection means causes the module connected to the other system to be electrically connected to the bus. / Detecting a timing at which malfunction does not occur even if noise generated during disconnection is received, and at this timing, the switch control means controls the switch means to electrically connect / disconnect the bus. It was designed to be done.

More specifically, in the module exchanging method for the data processing system, in addition to the above-mentioned means, a means for generating a module exchanging request signal for one system and transmitting it to the other system, Means for generating a module replacement permission signal of the system and transmitting it to the outside, and when removing the module for the module replacement of one system, (10) request for the module replacement of the one system A procedure for generating a signal and transmitting the signal to the other system by turning on the module replacement request signal of the one system and transmitting the signal to the other system, A procedure for detecting the timing at which the module connected to the system does not malfunction even if it receives noise generated when the bus is electrically disconnected. (30) A procedure in which the switch control unit controls the switch unit to electrically disconnect the bus at the timing described in (20), and (40) permits module replacement of the one system. There is a procedure for generating a signal and transmitting the signal to the outside by turning on the module exchange permission signal by means for transmitting the signal to the outside, and after performing the steps (10) to (40) in this order, By removing the module of the system and inserting the module to replace the module of one system, (10) ° generate a request signal for module replacement of the one system and transmit it to the other system. , A procedure for turning off the module replacement request signal and transmitting it to the other system, (20) ° Generating a module replacement permission signal for the one system, and A procedure of turning off the module exchange permission signal of the one system by the transmitting means and transmitting the signal to the outside, (30) ° The connecting / disconnecting timing detecting means controls the module connected to the other system to the bus. The switch control means controls the switch means at the timing described in (40) ° and (30) ° above, which detects a timing at which malfunction does not occur even when noise generated when electrically connecting Then, there is a procedure for making electrical connection in the bus, and after inserting the module of the one system, the procedure from (10) ° to (40) ° is performed in this order. It is a thing.

Next, regarding the above timing, in detail, in the module replacing method of the above data processing system, even if the module of the other system receives noise generated when electrically connecting the bus, it malfunctions. The timing at which the noise is not generated is the timing at which the generated noise disappears when the module of the other system receives the data.

Further, regarding the above timing separately, in the module replacing method of the above data processing system, even if the module of the other system receives noise generated when electrically connecting the bus, it malfunctions. The timing at which the module of the other system is not in the busy state is the timing at which the operation is not performed.

Further, in more detail regarding the above timing, in the module exchanging method of the above data processing system, even if the module of the other system receives noise generated when electrically connecting the bus. The timing at which the malfunction does not occur is the timing opposite to the clock regulation for the module of the other system to receive data.

Next, the second configuration of the invention relating to the module self-diagnosis method of the data processing system of the present invention for achieving the above object is the method of replacing the module of the data processing system according to the above-mentioned second configuration. A self-diagnosis method for a data processing system used in, wherein both systems are respectively provided with self-fault diagnosis means, the self-fault means being connected to the bus on both sides of the switch means, and as described above. After electrically connecting / disconnecting from the bus, the self-failure means performs a self-fault diagnosis in each system to identify the failed part.

More specifically, in the module self-diagnosis method for the data processing system, each of the self-fault diagnosis means performs a self-loop test.

[0025]

According to the present invention, the following actions are achieved by the means for solving the above problems.

(1) By operating the connection / disconnection timing of the module on the side of the online system which receives noise, the online system side is adversely affected even if it receives the noise generated at the time of electrically connecting / disconnecting the module. It is possible to protect the legitimacy of the processing without receiving the risk.

(2) When the module is replaced, the module is already in an electrically disconnected state, so no matter what timing or speed the module is inserted / removed, the online system has no problem. Since it does not affect, it is possible to realize a highly reliable module replacement method in online mode as compared with the conventional replacement method that depends on the insertion / removal timing of a person.

(3) Since the module does not need to have a special circuit, the versatility is enhanced, and a commercially available module can be easily incorporated in the online system.

(4) By disconnecting the system buses extending over a plurality of systems of a multi-system system, self-fault diagnosis can be performed in each system in a closed form. The module of the part can be replaced.

[0030]

Embodiments of the present invention will be described below with reference to FIGS. 1 to 11. [Embodiment 1] Hereinafter, a first embodiment according to the present invention will be described with reference to FIG.
This will be described with reference to FIG. First, a basic system configuration for realizing the module replacement method of the data processing system according to the present invention will be described with reference to FIG. FIG. 1 is a system configuration diagram showing a basic system configuration for realizing a module replacement method of a data processing system according to the present invention.

In the system of the first embodiment, the module 30 is connected to the system bus 10 by the connector 11 and the connector 31. Although not shown in the figure, it is assumed that another module 30 'is also connected to the system bus 10.

A bus switch 20 realized as a MOS switch is provided between the connector 11 and the system bus 10, and there is a bus switch control section 21 for switching the bus switch 20 on and off.

Connection / disconnection timing detection section 22 (hereinafter sometimes simply referred to as "timing detection section 22")
Are connected to the system bus 10 and the bus switch control unit 21. By the way, in general, when a bus switch is operated to perform electrical connection and disconnection, noise is generated on a wiring or a module that is electrically connected.

At this time, the timing detection unit 22 generates when the other module connected to the system bus 10 electrically connects / disconnects the bus switch 20 in response to the removal request signal 23 of the module 30. Has a function of detecting a timing at which a malfunction does not occur even if the noise is received and transmitting it to the bus switch control unit 21, and a function of outputting the removal permission signal 24 of the module 30 after the bus switch is turned off.

A specific example of what timing is "timing at which another module does not malfunction even if it receives noise generated when the bus switch 20 is electrically connected / disconnected" is given as an example. The details will be described later.

Next, the processing procedure of the module replacement method of the data processing system according to the present invention will be described with reference to FIGS. FIG. 2 is a flowchart showing a procedure for removing a module in the procedure of the module replacement method for the data processing system according to the present invention. FIG.
FIG. 4 is a flowchart showing a procedure at the time of inserting a module in the processing procedure of the module replacement method of the data processing system according to the present invention.

First, the procedure for removing the module will be described in the order shown in FIG.

When removing the module 30, first, the maintenance person turns on the removal request signal 23 (S100). Here, although not shown in FIG. 1, it is assumed that the system is provided with means for controlling ON / OFF of the removal request signal 23. This removal signal is sent to the timing detector 22 as shown in FIG.

Next, the timing detector 22 which receives the removal request signal 23 monitors the system bus 10 and occurs when another module connected to the system bus 10 electrically disconnects the module 30. Timing at which malfunction does not occur even when noise is received is detected and transmitted to the bus switch control unit 21 (S110).

In response to this, the bus switch control unit 21 turns off the bus switch 20 (S120).

Next, the timing detector 22 turns off the bus switch 20 and then turns on the removal permission signal 24 (S130).

Finally, the maintenance worker who confirms that the removal permission signal 24 is turned on removes the corresponding module 30 (S140).

Next, the procedure for inserting the module will be described in the order shown in FIG.

When the module 30 is inserted, the maintenance person first inserts the module 30 with the removal permission signal 24 turned on (S200).

Thereafter, the maintenance worker turns off the removal request signal 23 by the means for controlling the removal request signal (S210).

The timing detection unit 22 which has received the removal request signal 23 being turned off first removes the removal permission signal 2.
4 is turned off (S220).

Even if the system bus 10 is monitored and the bus switch 20 is electrically connected in the same manner as when the system bus 10 is disconnected, another module 30 'connected to the system bus 10 is electrically connected to the module 30. The timing at which malfunction does not occur even if noise generated at that time is received is detected and transmitted to the bus switch control unit 21 (S230).

The bus switch control section 21 receiving it receives
The bus switch 20 is turned on (S240).

According to this method, when the module 30 is electrically disconnected from or connected to the system, the other module 30 'does not malfunction even if it receives noise, so that the other module 30' does not malfunction. Thirty
´ does not malfunction and does not adversely affect the system. In addition, since the module is removed and inserted in an electrically disconnected state, no matter how much time or speed the maintenance staff removes or inserts the module, the noise generated by it will cause the noise to occur during operation of the data processing system in operation. Will not be adversely affected.

The means for controlling the on / off of the removal request signal 23 can be realized by hardware by providing a switch or the like, or can be controlled by a software command from the console display. It is possible.
Further, transmitting the on / off of the removal permission signal 24 is
It is possible to notify the maintenance personnel by visually displaying it with a lamp or the like, or it is possible to transmit it by voice or the like.

[Second Embodiment] A second embodiment according to the present invention will be described below with reference to FIGS. 4 to 9. In this embodiment, the module replacement method according to the present invention has a fault tolerant function in which hardware is duplicated so that the system does not stop even if a single system fails as an A system and a B system. It is applied to the dual data processing system.

First, the system configuration of the duplicated data processing system having the fault tolerant function according to this embodiment will be described with reference to FIG. FIG. 4 is a system configuration diagram showing a system configuration of a duplicated data processing system having a fault tolerant function according to the second embodiment of the present invention.

This system is divided into A system and B system.
Each other CPU (Centra
l Processing Unit) and I / O system are connected. A bus switch is provided on this duplicated system bus to disconnect the system bus even when the partner system is online, enabling module replacement while the partner system is online. Is.
In the following, in order to distinguish between the A system and the B system, A and B are described at the end of the reference numerals. Also, when both are generically referred to, the symbols A and B are not attached.

In FIG. 4, A system CPU 40A and B system C
The PU 40B includes not only a processor (processing device in a narrow sense) but also other units such as a memory.
The A-system CPU 40A and the B-system CPU 40B operate in a mirror image, and perform the same processing in clock synchronization with each other via the inter-CPU interface signal 52. That is, both CPUs share the functions of the main system and the sub system between the A system and the B system when the system is operating normally, and when one of them is operating as the main system. The other system that is a slave is in hot standby.

The A-system I / O system and the B-system I / O system are mirror images, and both the A-system and the B-system are operating.

Now, each CPU 40 performs some kind of processing or calculation, and outputs the processing result to the duplex bus adapter 4
1 (Dual System Bus Adapter: hereinafter abbreviated as "DSBA"). Here, assuming that the A system is performing processing as the main system, the DSBAs 41-1A and 41A of the A system are
-Only 2A will work.

Then, these A-system DSBA41-1
A, 41-2A receives data from the A system CPU 40A,
The information is transmitted to the A-system input / output adapter (hereinafter referred to as “IOBA”) 45A and the B-system IOBA 45B via the system buses 50-1A and 50-2A, respectively.

At this time, B system DSBA 41-1B, 41
-2B is A system CPU 40A or DSBA 41-1A,
When the 41-2A fails, the online standby process is not interrupted and the hot standby state is taken over so as to immediately take over the process.

The IOBAs 45A and 45B are input / output adapters (Input Ou) connected to the respective input / output buses.
tput Adapter: hereinafter, "IOA") 46A and 46B
Access the I / O device via.

In order to improve reliability, a power source (Powe
r Supply: hereinafter, “PS”) 47 is provided separately for the A system and the B system, and power is supplied only to each system.

In such a duplicated data processing system, in order to realize module replacement during online operation, the CPU 40A, 40B of each system is given a module removal request signal 51 from another system and removal permission for the other system. A means for transmitting the signal 54 is added.

Further, among the duplicated system buses 50 between the DSBA 41 and the IOBA 45, especially the mutual system 5 is connected.
Bus switch 4 to 0-1B and 50-2A respectively
4A and 44B, bus switch control units 43A and 43B, and timing detection units 42A and 42B are provided.

In this embodiment, these are interlocked with each other, and the A system data processing system and the B system are operated at a desired timing.
The system data processing system is completely separated, and the system in which the module to be replaced is present can be stopped to replace the module.

Now, assume the following situation.

As described above, it is assumed that the A system is operating as the main system. In this case, DSBA41-1A, I
OBA45A, IOA46A series, DSBA41-
2A, IOBA 45B, and IOA 46B are duplicated and operating. Here, it is assumed that the IOA 46A has some trouble. At that time, the CPU 40A, the DSBA 41-2A, and the IOBA 4 are operating.
5B, a series of IOA46B.

When a failure occurs, first, in order to replace the module, the CPU 40A of the A system controls
The system is controlled by the B-system CPU 40B that is on standby. Then C is working.
PU40B and DSBA41-2B, IOBA45B, I
It is a series of OA46B.

In this situation, the A-type module IOA46A is to be replaced.

At this time, first, the removal request signal 51 of the A system.
The turning on of A is transmitted to the CPU 40B of the B system. CPU
In response to this, 40B gives a command to the timing detection unit 42B and the bus switch control unit 43B, and the system bus 5
The bus switch 44B on 0-2A is electrically disconnected at a certain timing.

This timing is based on the system bus 50-2.
Modules DSBA41-2B and I connected to B
The OBA 45B connects the bus switch 44B electrically.
This is the timing at which malfunction does not occur even if the noise generated during disconnection is received.

The timing detection unit 42B detects this timing, and at that timing, the bus switch control unit 4
3B disconnects the bus switch 44B.

By doing so, it is possible for the system B to stop only the system A and replace the module 46A with the online operating state without being adversely affected by noise. Become.

The detailed procedure of this module replacement method will be described below with reference to FIGS. 5 and 6. FIG. 5 is a flowchart showing a procedure for removing a module in the procedure of the module replacement method of the duplicated data processing system. FIG. 6 is a flowchart showing a procedure at the time of inserting a module in the processing procedure of the module exchanging method of the duplicated data data processing system.

First, the module 46A is followed in the order shown in FIG.
The procedure for removal will be described.

When removing the module, first, the maintenance person turns on the removal request signal 51A to turn on the B
The system CPU 40B is requested to disconnect the duplex system bus 50-2A (S300).

The CPU 40B is a dual system bus 50.
-Determining whether 2A can be separated (S310),
If possible, the bus disconnection signal, which is one of the bus switch control interface signals 53B, is turned on to the timing detection unit 42B (S320).

Further, the timing detecting section 42B monitors the duplex system bus 50-2B, and the DSBA 41-2B
The bus switch control unit 43 detects the timing at which the IOBA 45-B does not malfunction even if it receives noise generated when the bus switch 44B is electrically disconnected.
Tell B (S330). Bus switch control unit 43B
In response to this, turns off the bus switch 44B (S340).

Thereafter, the timing detector 42B turns on the bus disconnection completion signal of the bus switch control interface signal 53B to notify the CPU 40B that the disconnection of the system bus 50-2A is completed (S350). Then, the CPU 40B receiving this,
Turn on the removal permission signal 54A of the A system module (S
360).

Finally, the maintenance worker who confirms that the removal permission signal 54A is turned on turns off the switch of the A system PS 47A (S370) and removes the target module (S).
380).

Next, the module 46A will be described in the order shown in FIG.
The procedure at the time of insertion will be described. When the module 46A is inserted, first, the maintenance personnel inserts a normal module with the system A stopped (S400), and turns on the switch of the system PS47A (S410).

After that, by turning off the removal request signal 51A, the B system CPU 40B is made to duplicate the system bus 50.
-Request 2A connection (S420). Receiving this, C
The PU 40B determines whether the connection of the duplex system bus 50-2A is possible (S430), and if it is possible, first, the removal permission signal 54A of the A system module is turned off (S440). Next, for the timing detection unit 42B,
The bus disconnection signal, which is one of the bus switch control interface signals 53B, is turned off (S450).

Then, in response to this signal, the timing detecting section 42B causes the duplex system bus 5 which is operating online.
Monitors 0-2B, DSBA 41-2B and IOB
Even if the A45-B receives noise generated when the bus switch 44B is electrically connected, it detects a timing at which the A45-B does not malfunction, and notifies the bus switch control unit 43B of the timing (S46).
0). The bus switch control unit 43B turns on the bus switch 44B at that timing (S470).

Finally, the timing detector 42B turns off the bus disconnection completion signal, which is one of the bus switch control interface signals 53B, so that the CPU 40
B is notified that the connection of the system bus 50-2A is completed (S480).

Next, with respect to the connection and disconnection timing of the bus switch, the control mechanism and the timing of each signal in the second embodiment of the present invention will be described with reference to FIGS. FIG. 7 is an enlarged configuration diagram of the second embodiment of the portion related to the connection and disconnection timing of the bus switch. FIG. 8 is a flowchart showing the operation of the system of the second embodiment. FIG. 9 is a timing chart for explaining the operation of the system when the timing for connecting and disconnecting the bus switch is taken at the falling edge of the clock.

In this example, the timing of the system bus 50 is defined such that the transmission data is output to the system bus 50-1A at the rising timing of the bus clock 55A, and the receiving side outputs the data at the rising timing of the next bus clock 55A. Shall be taken in. Also, assume that the cycle of the bus clock 55A at this time is 60 ns.

The timing detector 42A receives the bus disconnection signal 53A-1, and receives the duplex system bus 50-1.
This is a flip-flop that outputs a bus switch control signal 57A at the rising timing of the A bus clock. Further, the bus switch control unit 43A receives the bus switch control signal 57A and receives the bus switch disconnection signal 5A.
It is composed of a driver that outputs 6A.

The online data transmitted from the DSBA 41-1A is output to the system bus 50-1A after the delay of the driver element (d2 in FIG. 8) at the rising timing of the bus clock 55A of the system bus 50-1A. It

On the other hand, the timing detecting section 42A which has received the ON input of the bus disconnection signal 53A-1 also turns on the bus switch control signal 57A at the next rising timing of the bus clock 55A to turn on the bus switch control section 43A. After the driver delay (d3 in FIG. 8), the bus switch disconnection signal 56A is turned on. When the bus switch 44A is turned off, the system bus 50-
Noise is generated on 1A.

However, the timing detection section 42A,
By using an element with a small propagation delay for the bus switch control unit 43A and the bus switch 44A, it is possible to reduce the time taken for the noise generated on the system bus 50-1A to disappear. For example, when the cycle of the basic clock is 60 ns, it can be eliminated within 40 ns.

Now, in FIG. 8, the transmission data is <A>.
<B>.

After the data <A> is sent to the bus 50-1A, the bus disconnection signal 53A-1 is turned on, and one cycle later, the bus switch disconnection signal is turned on. Then, after a slight delay, noise is generated, so that the data <B
When there is>, noise will be generated.

However, if the time for which the noise converges is shortened as above, at the timing when the IOBA 45A receives the data <B> (note that the data is received at the rising edge of the clock), the noise has already converged. Will be. Therefore, IOBA45A
It becomes possible to always receive correct data.

In FIG. 7, the timing detection section 42
A, bus switch control unit 43A and bus switch 44
Although A is expressed as another module, it can be mounted in the A-system DSBA 41-1A, considering its connection form.

In the above description, the system A has been described as an example.
The device configuration and operation of the B system can be considered in exactly the same way.

As the timing at which the module does not malfunction, besides this explanation, a method of using the control signal of the system bus or a method of synchronizing with the opposite phase of the system bus clock can be considered.

The method of using the control signal of the system bus means that a module which may be affected by noise detects a non-busy timing by using the control signal.
By connecting and disconnecting the bus switch at that timing, when this module is operating, adverse effects due to noise are avoided and malfunctions are prevented.

The method of synchronizing with the opposite phase of the system bus clock means that when the module takes in data at the rising edge of the clock, the bus switch is connected and disconnected at the falling edge of the opposite phase clock. hand,
It is possible to prevent malfunctions such as data acquisition errors due to noise.

For example, even if noise is generated at the timing as shown in FIG. 9, no malfunction occurs at the timing of fetching the data <A>.

[Embodiment 3] A third embodiment of the present invention will be described below with reference to FIGS. 10 and 11. Example 2
Is a duplicated data processing system, and it was possible to completely separate the A system and the B system.

This embodiment applies the separability of this system to self-diagnosis.

First, the system configuration and operation of this embodiment will be described with reference to FIG. FIG. 10 is a system configuration diagram of the self-diagnosis system according to the third embodiment of the present invention.

This system is based on the DS described in the second embodiment.
The BA 41 is provided with a receiver for self-diagnosis and a circuit for comparing transmitted data and received data.

Now, for example, it is assumed that there is an abnormality in the reception data of the A-system IOBA 45A.

The failure site which is a candidate for the cause is as follows.
IOBA45A transceiver and DSBA41-1A
The transceiver part of B can be considered, but not only that, but B
There is a suspicion that there is an abnormality in the transceiver section of the DSBA41-1B system.

Therefore, the IOB that has simply detected the abnormality
Even if the A45A or DSBA41-1A is replaced, it may not be the essential measure. Therefore, first, the duplicated system bus 50 connected to the IOBA 45A that has detected the abnormality
The bus switches 44A of -1A and 50-1B are disconnected. And the DSBA 41-1A, 41- of each system
The self-diagnosis unit 1B outputs self-diagnosis data to the bus line of its own system, and performs a self-loop test for comparing the received data of the self-diagnosis receiver with the output data.

In this way, if the faulty part can be identified, the system of the system in which the faulty module exists can be separated.

Next, the procedure of the self-diagnosis will be described in detail in the order of FIG. FIG. 11 is a flow chart showing the procedure of the self-diagnosis system according to the third embodiment of the present invention.

IOBA45A or DSBA41 of A system
-1A detects an error in the received data (S50
0), the CPU 40A receiving it has an abnormality in the system bus of its own system (S510).
4A is separated (S520).

Thereafter, DSBA4 is sent to the CPU 40B.
A self-loop test request is issued from 1-1B to the duplex system bus 50-1B (S530).
A self-loop test is performed on the duplex system bus 50-1A from A41-1A (S560). And
If the comparison result of the DSBA 41-1A is not equal, it is determined that the own system (A system) is abnormal and an error is reported to the CPU 40A (S570).

When the B-system DSBA 41-1B detects an abnormality in the received data (S500), the CPU 40B which received it has an abnormality in the system bus of the other system (S500).
510) and requests the CPU 40A to disconnect the bus switch 44A (S540).

Then, from the CPU 40A to the bus switch 4
After receiving the signal of completion of disconnection of 4A (S55
0), a self-loop test is performed from the B-system DSBA 41-1B to the duplex system bus 50-1B (S
560). If the comparison result of DSBA41-1B is not equal, it is judged that the own system (B system) is abnormal and C
An error is reported to the PU 40B (S570).

By performing the above self-diagnosis, it is possible to prevent the normal system from being erroneously stopped, the modules can be replaced more efficiently, and the reliability of the online system can be improved.

[0112]

According to the present invention, when a module is replaced while the system is online, the noise generated at the time of inserting / removing the module is not reduced as in the prior art, but noise is reduced. The receiving side detects the timing when another module that is operating online does not malfunction even if it receives noise, and electrically disconnects the replacement target module at that timing to prevent the system from being adversely affected by noise. It is possible to provide a method for replacing a module of a data processing system, which can eliminate the above, further improve the reliability of the system, and can perform a reliable and reliable work.

Further, according to the present invention, it is possible to provide a highly versatile method for exchanging modules of a data processing system which does not require the module side to have a special function for exchanging.

Further, according to the present invention, it is possible to provide a module self-diagnosis method for clarifying a failure part in advance and efficiently proceeding with work in order to replace a module.

[Brief description of drawings]

FIG. 1 is a system configuration diagram showing a basic system configuration for realizing a module replacement method of a data processing system according to the present invention.

FIG. 2 is a flowchart showing a procedure for removing a module in the processing procedure of the module replacement method for the data processing system according to the present invention.

FIG. 3 is a flowchart showing a procedure when a module is inserted in the processing procedure of the module replacement method of the data processing system according to the present invention.

FIG. 4 is a system configuration diagram showing a system configuration of a dual data processing system having a fault tolerant function according to a second embodiment of the present invention.

FIG. 5 is a flowchart showing a procedure at the time of removing a module in the processing procedure of the module replacement method of the duplicated data processing system.

FIG. 6 is a flowchart showing a procedure at the time of inserting a module in the processing procedure of the module replacement method of the duplicated data data processing system.

FIG. 7 is an enlarged configuration diagram of a second embodiment of a portion related to connection and disconnection timing of a bus switch.

FIG. 8 is a flowchart showing the operation of the system of the second embodiment.

FIG. 9 is a timing chart for explaining the operation of the system when the timing for connecting and disconnecting the bus switch is taken at the falling edge of the clock.

FIG. 10 is a system configuration diagram of a self-diagnosis system according to a third embodiment of the present invention.

FIG. 11 is a flowchart showing the procedure of the self-diagnosis system according to the third embodiment of the present invention.

[Explanation of symbols]

10 ... System bus, 20 ... Bus switch, 21 ... Bus switch control unit, 22 ... Connection / disconnection timing detection unit, 23 ... Removal request signal, 24 ... Removal permission signal, 30 ...
module.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Shinichiro Yamaguchi 7-1-1 Omika-cho, Hitachi City, Ibaraki Hitachi Ltd. Hitachi Research Laboratory (72) Inventor Naoto Miyazaki 7-chome, Omika-cho, Hitachi City, Ibaraki Prefecture No. 1 Incorporated company Hitachi Ltd. Hitachi Research Laboratory (72) Inventor Yoshihiro Miyazaki 5-2-1 Omika-cho, Hitachi City, Ibaraki Prefecture Incorporated Hitachi Ltd. Omika Plant (72) Inventor Soichi Takatani Omika, Hitachi City, Ibaraki Prefecture 5-2-1, Machi, Ltd. Hitachi Ltd. Omika Plant (72) Inventor Sataka Ishikawa 7-1-1 Higashi Narashino, Narashino City, Chiba Prefecture Hitachi Office Systems Division

Claims (12)

[Claims] 1. A module exchanging method for a data processing system having a plurality of modules connected by a bus for exchanging data, comprising: a connecting section for connecting the bus and each module; and the connecting section for connecting the module and the bus. A switch means for electrically connecting / disconnecting the switch, a switch control means for controlling the switch means, and a connection / disconnect timing detecting means, and an electrical connection with the bus for exchanging a certain module. When disconnection is needed, the connection / disconnection timing detection means receives noise generated when another module electrically connected / disconnected from the bus is connected to the bus. Also detects a timing at which no malfunction occurs, and at this timing, the switch control means By controlling the switch means, electrical connection / module replacement method of a data processing system and performing disconnection of the connection of a module. 2. In addition to the respective means according to claim 1, further, a module replacement request signal is generated and is transmitted to the connection / disconnection timing detection means, and a module replacement permission signal is generated to externally When a certain module is removed for module replacement, (1) a signal for requesting the module replacement is generated, and the means for notifying the connection / disconnection timing detection means notifies the module replacement (2) The connection / disconnection timing detection means electrically disconnects a module from another module connected to the bus by turning on a request signal and transmitting it to the connection / disconnection timing detection means. A procedure for detecting a timing at which malfunction does not occur even when receiving noise that sometimes occurs, (3) described in (2) above At the timing, the switch control means controls the switch means to electrically disconnect the connection part of a module, and (4) a module replacement permission signal is generated and transmitted to the outside by the module. There is a procedure for turning on the exchange permission signal and transmitting it to the outside, and after performing the steps (1) to (4) in this order, remove a module,
When a certain module is inserted for the module replacement, (1) the module replacement request signal is generated, and the module replacement request signal is turned off by the means for notifying the connection / disconnection timing detection means. Then, the procedure of notifying the connection / disconnection timing detection means, (2) generating a module replacement permission signal,
Procedure for turning off the module replacement permission signal by means of transmitting to the outside and transmitting to the outside, (3) ° Connection /
The disconnection timing detecting means detects a timing at which another module connected to the bus does not malfunction even if it receives noise generated when electrically connecting a certain module, (4) ° (3) ) °, the switch control means has a procedure for controlling the switch means to make an electrical connection at a connection part of a module, and after inserting the module, this ( 2. The module replacement method for a data processing system according to claim 1, wherein the steps 1) to (4) are performed in this order. 3. The noise generated when the other module receives data when the other module does not malfunction even when receiving noise generated when electrically connecting a certain module. 3. The module replacement method for the data processing system according to claim 1, wherein the timing is the time when the data has disappeared. 4. The timing at which the other module does not malfunction even when receiving noise generated when electrically connecting a certain module is a timing at which the other module is not in a busy state. 3. A method of exchanging a module for a data processing system according to claim 1 or 2. 5. The timing at which the other module does not malfunction even when receiving noise generated when electrically connecting a certain module is opposite in phase to the clock regulation for receiving data from the other module. 3. The method of replacing a module of a data processing system according to claim 1, wherein the timing is as follows. 6. A module of a data processing system, which is a multiplexed redundant data system, wherein one system to the other system is connected by a bus, and one system can substitute the other system. In the exchange method, a bus connecting the one system and the other system, a switch means for electrically connecting / disconnecting the bus, a switch control means for controlling the switch means, and a connection / disconnection timing detecting means. A module to be connected to the other system when electrical connection and disconnection of the bus is required to replace the module of the other system. But the electrical connection of the bus /
The timing at which malfunction does not occur even if noise generated when disconnecting is received is detected, and at this timing, the switch control means controls the switch means to make electrical connection / connection on the bus.
A method for replacing a module of a data processing system, which is characterized by performing disconnection. 7. In addition to each of the means according to claim 6, a means for generating a request signal for module exchange of one system and transmitting it to the other system, and a permission signal for module exchange of one system. And a means for transmitting the information to the outside. When the module is removed for the module replacement of one system, (10) a signal for requesting the module replacement of the one system is generated and transmitted to the other system. Means for turning on the request signal for module exchange of the one system and transmitting it to the other system by means of: (20) the connecting / disconnecting timing detecting means, the module connected to the other system is the bus (30) The switch control at the timing described in (30) above, which detects a timing at which malfunction does not occur even when noise generated when electrically disconnecting Means for controlling the switch means to electrically disconnect the bus, (40) a module exchange permission signal for generating a module exchange permission signal for the one system, and transmitting the signal to the outside. Is turned on and the procedure is transmitted to the outside. After performing steps (10) to (40) in this order, the module of the one system is removed and the module of the one system is replaced. When a module is inserted, (10) ° a signal for requesting module exchange of the one system is generated, and the signal for requesting module exchange is turned off by means of transmitting to the other system,
Procedure for notifying the other system, (20) ° Procedure for generating a module exchange permission signal for the one system and turning off the module exchange permission signal for the one system by means of external means, and transmitting it to the outside , (30) ° The procedure for the connection / disconnection timing detection means to detect a timing at which the module connected to the other system does not malfunction even if it receives noise generated when electrically connecting the bus. , (40) ° At the timing described in (30) °, the switch control means has a procedure of controlling the switch means to electrically connect the bus, and the module of the one system. After inserting
7. The module replacement method for a data processing system according to claim 6, wherein the steps (10) to (40) are performed in this order. 8. The timing at which the module of the other system does not malfunction even if it receives noise generated when the bus is electrically connected, when the module of the other system receives data, 7. The timing when the generated noise disappears.
And a module replacement method for a data processing system according to claim 7. 9. The timing at which the module of the other system does not malfunction even if it receives noise generated when the bus is electrically connected is the timing at which the module of the other system is not in the busy state. 8. A module replacement method for a data processing system according to claim 6, wherein: 10. The timing at which the module of the other system does not malfunction even if it receives noise generated when the bus is electrically connected is defined as a clock regulation at which the module of the other system receives data. 8. The module replacement method for a data processing system according to claim 6, wherein the timing is a reverse phase. 11. A self-diagnosis method for a data processing system used in a module replacement method for a data processing system according to claim 6, wherein both systems are provided with self-diagnosis means, and the self-failure means is the 7. Connected to the bus on both sides of the switch means, electrical connection / on the bus as claimed in claim 6.
A module self-diagnosis method for a data processing system, characterized in that, after disconnecting, the self-failure means performs a self-failure diagnosis in each system to identify a failure part. 12. The self-diagnosis means carries out a self-loop test, respectively.
Module self-diagnosis method of the described data processing system.