JPH10143393A - Diagnosis and processing device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a diagnosis and processing device to continue the system operation without affecting OS by connecting the respective OS stall monitoring timers of a host system and a slave system and monitoring the state of the OS. SOLUTION: A stall monitoring request means 12 managed by an OS 1 sets the initial count value to the main system stall monitoring timer 26 and the slave system stall monitoring timer 36. Then, if a fault has occurred in a main diagnosis and processing device 2, communication paths S1 and S2 are set between the main and the slave diagnosis and processing devices 2 and 3, and the slave diagnosis and processing device 3 is notified of the occurrence of the fault in the main diagnosis and processing device 2 in order to make the slave stall monitoring timer 36 take over the system stall monitoring. The slave diagnosis processing device 3 detecting the fault of the main diagnosis processing device 2 starts its own stall monitoring timer 36 to continue the stall monitoring of the system.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a diagnostic processing apparatus.

[0002]

2. Description of the Related Art A diagnostic control device for a large general-purpose computer mainly performs collection of system fault information and system startup processing, and also monitors a stall of an operating system (OS) in a watchdog timer provided in the device. (Hereinafter abbreviated as WDT). This WDT is composed of a down counter that counts down by a pulse signal sent at regular intervals and a device that sets an arbitrary value to the down counter by an interrupt signal from the OS. Since the OS periodically sends an interrupt signal to the WDT, the counter value does not normally become zero, but if the OS cannot send an interrupt signal due to a failure or the like, the counter value may become zero. Then, the stall of the OS is detected. Here, a stall refers to a state in which a program cannot be moved for some reason, and the OS is an operating system.

Normally, the OS issues a stall timer initialization command to the diagnostic processing device within a predetermined time in order to monitor the stall of the OS. The diagnostic processing device returns the reply to the OS. OS stall monitoring in the dual configuration uses a timer of a diagnostic processing apparatus serving as a main system. When a failure occurs in the stall monitoring timer of the primary diagnostic processing device, the secondary diagnostic processing device sets a diagnostic device failure flag in the primary storage device. O
When there is no reply from the main-system diagnostic processing device, S refers to the flag of the main-system storage device, determines that a stall monitoring timer has failed, and issues an initialization instruction to the sub-system diagnostic processing device. As described above, in the conventional device, the OS needs to monitor and manage the state of the diagnostic processing device.

Referring to FIG. 3, which is disclosed in Japanese Patent Application Laid-Open No. 7-219790, and discloses the configuration thereof, this configuration detects a stall state of each process in a multi-process program. Is a program for processing an application composed of a multi-process consisting of one parent process 100 and N child processes 200. The program operates in the parent process 100 and controls the N child processes 200. Event monitoring means 1 to monitor
02, a timer monitoring unit 101 operating in the parent process 100 and monitoring the time of the event monitoring unit 102, and an event operating in the child process 200 and returning a response event C to the monitoring event B from the parent process 100 It has a response unit 201-1.

However, such a configuration is based on the precondition that a multiprocess consisting of a parent process and a plurality of child processes is used, and the parent process monitors each child process. There is no means for mutual monitoring between the child processes. Not been.

The system stall detection method disclosed in Japanese Patent Application Laid-Open No. 5-265807 is provided for each of a plurality of groups in which a program to be executed as a task is divided into a plurality of groups. A stall monitoring request means for issuing a stall monitoring request, a stall monitoring external timer for accepting a plurality of stall monitoring requests, setting a timer value, and notifying that a timeout has occurred, and a stall monitoring external timer System interrupt notification means for receiving notification that the system stall is detected, and notifying the computer system of the own system and the computer system of the other system of the detection of the system stall by an external interrupt.

However, in such a configuration, the task of a plurality of programs to be stalled is a problem, and there is no exchange of information between programs provided for each group. Further, if the system interrupt notifying unit breaks down, there is a disadvantage that it is not possible to notify that a system stall has been detected.

[0008]

SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to connect OS stall monitoring timers of a master system and a slave system in a conventional dual configuration, and monitor the state of the OS, thereby enabling the OS to operate. It is an object of the present invention to provide a diagnostic processing device that enables continuation of the system operation without affecting the system.

It is another object of the present invention to provide a diagnostic processing apparatus capable of continuing stall monitoring of a system even when a stall monitoring external timer fails.

[0010]

In order to solve the above-mentioned problems, a diagnostic processing apparatus according to the present invention is a diagnostic processing apparatus having an operating system and two diagnostic apparatuses of a master system and a slave system. A first communication path for notifying a failure of the main system diagnostic device to the sub system diagnostic device is provided.

Here, the slave diagnostic device which has detected the failure of the master diagnostic device activates its own stall monitoring timer to continue monitoring the stall of the system. A second communication path for notifying a failure of the slave diagnostic device can be provided.

[0012]

FIG. 1 is a block diagram showing the configuration of an embodiment of a diagnostic processing apparatus according to the present invention, and FIG. 2 is a timing chart showing its operation. 1 and 2, the embodiment of the present invention includes an OS 1, a main system diagnosis device 2, a sub system diagnosis device 3, and a clock device 4.
The OS 1 includes a system interrupt detecting unit 11 and a stall monitoring requesting unit 12, and two diagnostic processing devices 2 and 3 are interposed between the clock device 4 and a main system and a sub system. The main system diagnostic processing device 2 receives a first O signal which receives an output signal from the auxiliary system diagnostic process 3 and an output signal of the system identification means 21 as inputs.
An R gate 22, a system identification flip-flop 23 to which the output signal of the first OR gate 22 is input, and an output signal of the flip-flop 23 and an output signal from the stall monitoring request unit 12 of the OS1 are input. Second AND
A gate 24 and a clock signal from the clock device 4;
A third A for inputting the output signal of the flip-flop 23
ND gate 25 and stall monitoring request unit 12 of OS1
, The output signal of the second AND gate 24,
A main stall monitoring timer 26 is provided for inputting an output signal of the third AND gate 25 and a detection signal from the main system diagnostic device failure detecting means 27.

The slave diagnosis processing device 3 has functions common to those of the above-described master system. That is, the system identification means 31, the first OR gate 32, the system identification flip-flop 33, the second AND gate 34, the third AND gate 35, the slave stall monitoring timer 36, and the slave diagnostic device failure detecting means 37 And Further, an OR gate 5 is provided which receives the output signals of the stall monitoring timers 26 and 36 of the main and sub diagnostic processing devices 2 and 3 as inputs. Here, the communication paths S1 and S2 reciprocate between the master system and the slave system.

As described above, in this embodiment, in an information processing apparatus having two systems, a main system and a sub system, the diagnostic processing devices 2 and 3 of both systems are connected by the communication paths S1 and S2.
In this embodiment, the main-system diagnostic processing device 2 and the sub-system diagnostic processing device 3 are configured by the same logic circuit.
System identification means 21 built in each installed system,
In the case of the main system diagnostic device 2, the output is "1", and in the case of the sub system diagnostic device 3, the output is "0". The system operates as the system diagnostic processing devices 2 and 3.

Stall monitoring means 12 managed by OS 1
Sets the count initial value in the master system stall monitoring timer 26 and the slave system stall monitoring timer 36. The system stall monitoring timers 26 and 36 of both systems count down by a one-second cycle pulse signal sent from the clock device 4. However, the one-second clock signal to the slave system stall monitoring timer 36 and the reset signal from the stall monitoring unit 12 of the OS 1 are input, but the system identification unit 31 sets “0” in the system identification flip-flop 33. The output is ANDed with each of the above signals, and the input to the system stall monitoring timer 36 is suppressed. For this reason, the slave system stall monitoring timer 36 does not normally operate, and conversely, “1” is set in the master system identification flip-flop 23. Is input and countdown is performed at the timing of one second clock. When the count value of one of the system stall monitoring timers 26 and 36 of both systems becomes zero, it notifies the system interrupt detecting means 11 in the OS 1 that a system stall has occurred.

Next, the operation of the circuit of FIG. 1 will be described with reference to the time chart of FIG. In FIG. 2, the stall monitoring of the system is usually performed by the main system as described above. However, at the timing of time T1,
When a failure of the diagnostic device such as a hardware failure or missing data occurs on the primary diagnostic device, the output signal of the diagnostic device failure detecting means 37 changes from “0” to “1”, and the output signal is changed to the secondary diagnostic device. Is set to "1" in the system identification flip-flop 33 of. As a result, since the logical AND with the output of the system identification flip-flop 33 has been taken so far, the input to the slave stall monitoring timer 36 has been prevented, and the reset signal from the stall monitoring request unit 12 and the clock device 4 and a 1 second clock signal sent from
The slave stall monitoring timer 36 is activated. On the other hand, at time T1, which is behind the reset signal T0, the output signal of the diagnostic device failure detecting means 37 becomes the stall monitoring timer 2 of the main system.
6, the main system stall monitoring timer 1A, which has received the notification, holds the count value, and after the time T1, even if a 1 second clock signal is input to the timer 1A, "zero". do not become.

As described above, according to the embodiment of the present invention, when a failure occurs in the main system diagnostic device in the system configured by the two diagnostic devices of the main system and the sub system, In order to allow the stall monitoring timer to take over the system stall monitoring, a signal line, that is, a communication path, is provided between the diagnostic processing devices of the master system and the slave system. Let them know. The secondary diagnostic device that has detected the failure of the primary diagnostic device starts its own stall monitoring timer and continues monitoring the stall of the system.

In the above embodiment of the present invention, the AND gate and the OR gate are used for both the master and slave systems, respectively.
The present invention is not limited to this.
An R gate may be used. In this case, the inverter may be used appropriately.

According to the present invention, in the conventional apparatus, when the diagnostic processing apparatus fails, the monitoring of the stall of the OS is interrupted for a certain period of time. Danger that automatic restart of the computer cannot be performed can be avoided.

[0020]

As described above, according to the diagnostic processing apparatus of the present invention, in a system composed of two diagnostic processing apparatuses, a main system and a sub system, the OS stall provided on these diagnostic apparatuses is provided. In order to continue the function of the monitoring timer even when the main diagnostic processing unit fails, a communication path is provided between the secondary diagnostic processing unit and when the main diagnostic processing unit fails, The notification of the failure is notified to the slave diagnostic processing apparatus, and the OS stall monitoring can be continued.

[Brief description of the drawings]

FIG. 1 is a configuration block diagram showing an embodiment of a diagnostic processing device according to the present invention.

FIG. 2 is a timing chart showing the operation of the embodiment of the present invention.

FIG. 3 is a block diagram showing a conventional multi-process control method.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 OS 2 Primary system diagnostic processing unit 3 Secondary system diagnostic processing unit 4 Clock device 5,22,32 OR gate 11 System interrupt unit 12 Stall monitoring request unit 21,31 System identification unit 23,33 System identification flip-flop 24,25, 34,35 AND gate 26,36 Stall monitoring timer 27,37 Failure detecting means

Claims (3)

[Claims] A diagnostic processing device comprising an operating system and two diagnostic devices, a main system and a sub system,
A diagnostic processing device, comprising: a first communication path for notifying a fault of the main system diagnostic device to the sub system diagnostic device. 2. The slave diagnostic device which has detected a failure of the master diagnostic device activates its own stall monitoring timer,
The diagnostic processing apparatus according to claim 1, wherein the stall monitoring of the system is continued. 3. The diagnostic processing apparatus according to claim 1, further comprising a second communication path for notifying the main diagnostic apparatus of a failure of the sub diagnostic apparatus.