JPH1091468A - Fault detach control system/method for synchronous operation processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve fault resistance and to improve reliability even if a fatal fault whose continuation of a processing is impossible occurs. SOLUTION: When the fatal fault whose continuation of the processing is impossible occurs, the valid display (ACT) state of a fault occurrence system processor is set to be an invalid display (SBY) state, the occurrence of the fatal fault is simultaneously informed to duplexed processors 20 and 21. The processor 20 or the SBY system processor 21 which is set to the SBY state from the ACT state judges whether the fatal fault whose continuation of the processing occurs in the self processor or not. The processor 21 where the fatal fault does not occur is set in the ACT state, the processor 20 of the fault occurrence system is set to the SBY state, and the processor 20 where the fatal fault occurs is set to the fault state from the SBY state. The processor 20 as a fault processing means can continue the processing without abolishing an online processing midway, fault resistance improves and the reliability of the system improves.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a fault isolation control system and a fault isolation control method for a synchronous operation processor.

[0002]

2. Description of the Related Art A conventional multiprocessor is composed of a multiplexed processor and a unified memory. Therefore, when the multiprocessor is used in a highly reliable system such as an exchange, the processor and the memory are duplicated. ing. The multiprocessor adopting this duplex system detects a hardware failure including a memory. The control for disconnecting the faulty device is generally performed by a valid display (hereinafter, referred to as ACT) system processor. However, when a fatal failure that cannot continue processing occurs on the ACT processor side, software processing in the ACT system is performed. Since it cannot be executed, it is necessary to start from the reset processing, which may abandon the online processing or the like in the middle.

[0003]

In this type of conventional multiprocessor, when a failure occurs in the ACT processor and the memory, the ACT processor must perform the disconnection processing of the failure system. For this reason, this type of multiprocessor, when detecting a power failure or the like as a catastrophic failure that cannot be continued in the ACT system,
Failure isolation processing in the T system cannot be executed, and online processing is abandoned.

[0004] Therefore, in such a multiprocessor, reset processing must be performed, and there is a problem that the reliability of the system is reduced.

[0005] It is an object of the present invention to provide a synchronous operation processor fault isolation control system and a fault isolation control method which are highly reliable even in the event of a catastrophic failure in which processing cannot be continued.

[0006]

SUMMARY OF THE INVENTION According to the present invention, when a catastrophic failure in which processing cannot be continued occurs, the validity display (ACT) state of the faulty processor is changed to the invalid display state (SBY) to duplicate the processing. Means for notifying a failed processor of the occurrence of a fatal failure at the same time, and whether a processor that has been set from the ACT state to the SBY state or an SBY-related processor has a fatal failure that cannot continue processing on its own processor. The determination means for determining whether or not the failure has occurred and the processor in which a fatal failure has not occurred set the ACT state, the failure generating system is set in the SBY state, and the processor in which the fatal failure has occurred is changed from the SBY state to the failure state. And a failure processing means for setting a state.

According to the present invention, when a catastrophic failure in which processing cannot be continued occurs, it is independently determined whether or not a catastrophic failure in which processing cannot be continued has occurred in its own processor. The processor that has not occurred is set to the ACT state, and the failure system is set to the failure state. On the other hand, the processor in which a fatal failure has occurred is changed from the SBY state to the failure state. With these failure processing means, it is possible to continue the processing without abandoning the online processing, thereby improving fault tolerance and improving the reliability of the system.

Thus, in the fault isolation control system and the fault isolation control method for the synchronous operation processor according to the present invention, the online processing can be continued without being reset even if a fatal failure in which software processing cannot be continued is performed. Therefore, even if a catastrophic failure in which processing cannot be continued in the ACT processor occurs, the online processing is only interrupted and the processing is not abandoned. This improves fault tolerance and improves system reliability. Can be improved.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, an embodiment of a fault isolation control system and a fault isolation control method for a synchronous operation processor according to the present invention will be described with reference to FIG. FIG. 1 is a block diagram showing a configuration of a synchronous operation processor system according to an embodiment of the present invention.

This synchronous operation process system is composed of a duplex system including two memories 10 and 11 and two processors 20 and 21. Here, the memory 10
Is a dedicated memory in an effective display (ACT) state, and the processor 20 is a dedicated processor in an ACT state. The memory 11 is a dedicated memory in an invalid display (SBY) state, and the processor 21 is a dedicated processor in an SBY state.

The memory 10 is bidirectionally connected to a processor by a bus line. The memory 11 is also the memory 1
As in the case of 0, it is bidirectionally connected to the processor 21 by a bus line. The processor 20 and the processor 21 are connected by a cable. Further, the processors 20 and 21 are connected to the input / output control device 30 by cables. In this system, when the cable between the input / output control device 30 and the processors 20 and 21 is disconnected, a failure interrupt signal is sent to the processors 20 and 21 through the cable between the processors 20 and 21.

FIG. 2 is a processing flow chart for explaining the operation of the synchronous operation processor system according to the embodiment of the present invention. In FIG. 2, in the processor 20, a step 200 is executed.
In (hereinafter abbreviated as S200), when a fatal failure that cannot continue the processing is detected, the process proceeds to S201, and the ACT state of the detected processor is invalidated (canceled).

Next, the process proceeds to S202, in which a fatal fault is caused to occur at the same time by causing the processor 20 and the processor 21 to generate the fault notification interrupt 40. The processors 20 and 21 in which the failure notification interrupt has occurred proceed to S203, and determine whether a fatal failure has occurred in their own processors. When the failure is the own system (YES in S203), the processor 20 that has been the ACT-side processor executes the SBY-side processing because a fatal failure has occurred in the own processor. Note that this SBY-side processing is processing in which online processing is not performed.

On the other hand, the processor 21 which has been the SBY-side processor sets the ACT state when no fatal failure has occurred in its own processor (NO in S203), proceeds to S206, and proceeds to S206. The SBY side disconnection process is performed, and in S207, the process is returned to interruption interruption when a fatal failure occurs. By this return, the processor 20 in which a fatal failure has not occurred can continue the online processing without abandoning the online processing.

In the above-described embodiment, when a catastrophic failure in which processing cannot be continued occurs, the valid display (ACT) state of the faulty processor is invalidated (SB).
At the same time, a fatal fault is notified to the duplicated processors 20 and 21 in the Y) state, and the processor 20 or the SBY-based processor 21 set to the SBY state from the ACT state independently cannot continue processing to its own processor. It is determined whether a possible catastrophic failure has occurred. The processor 21 in which a catastrophic failure has not occurred is set to the ACT state, the processor 20 of the failure occurrence system is set to the SBY state, and the processor 20 in which the catastrophic failure has occurred is changed from the SBY state to the failure state. The processor 20 as the fault processing means enables the processing to be continued without abandoning the online processing, thereby improving fault tolerance and improving the reliability of the system.

For this reason, when a fatal failure that cannot continue processing occurs, it is independently determined whether or not a fatal failure that cannot continue processing has occurred in its own processor. The processor that has not occurred is set to the ACT state, and the failure system is set to the failure state. The processor in which a fatal failure has occurred is changed from the SBY state to the failure state. With these failure processing means, it is possible to continue the processing without abandoning the online processing, thereby improving fault tolerance and improving the reliability of the system.

[0017]

As described above, in the fault isolation control system and the error isolation control method for the synchronous operation processor according to the present invention, as described in the above-described embodiments and the like, a fatal fault in which software processing cannot be continued. However, since online processing can be continued without being reset, even if a catastrophic failure that cannot be continued in the ACT processor occurs, it is not abandoned and improved fault tolerance At the same time, effects such as improvement of the reliability of the system can be obtained.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a synchronous operation process system showing an embodiment of a fault isolation control system and a fault isolation control method of a synchronous operation processor of the present invention.

FIG. 2 is a flowchart showing an operation in the fault isolation control system of the synchronous operation processor according to the embodiment of the present invention.

[Explanation of symbols]

 10, 11 ACT / SBY memory 20, 21 ACT / SBY processor 30 human output controller 40 failure interrupt

Claims (6)

[Claims] 1. A control system comprising a processor system in which a duplicated processor and a memory perform perfect synchronous operation by executing the same execution means, and a human output control device controlled by the processor system. Detecting means for judging a normal fault and a non-continuable fault, and in the case of the non-continuable fault, invalid display of a valid display of a control instruction from the duplexed processor to the input / output control device A stopping unit for stopping access from the input / output control device; and a notifying unit for notifying the execution unit that the uncontinuable failure has been detected. Fault isolation control system for synchronous operation processor. 2. The execution means, having received the failure notification, determines whether or not processing can be continued. If the failure cannot be continued, the execution means determines whether a failure has occurred in its own processor. 2. The fault isolation control system for a synchronous operation processor according to claim 1, further comprising: setting means for setting the valid display; and fault isolation processing means for performing fault isolation processing by a partner system. 3. A failure occurrence notification that, when a fatal failure that cannot be processed continues occurs, displays the state of the failure occurrence system processor as invalid and notifies the valid display or invalid display system of the failure at the same time. 3. The processor according to claim 1, further comprising: a processor configured to change the valid display state from the valid display state to the invalid display state, and a failure processing unit configured to individually perform a failure process. A fault isolation control system for the synchronous operation processor according to the above. 4. A control system comprising a processor system in which a duplicated processor and a memory perform a completely synchronous operation by executing the same execution means, and a human output control device controlled by the processor system. Judging a serious fault and a non-continuable fault, and in the case of a non-continuous fault, change the valid display of the control instruction from the duplexed processor to the input / output control device to the invalid display. Stopping the access from the input / output control device, and notifying the execution means that a failure as to whether or not the input / output control device can be continued has been detected. Detachment control method. 5. The execution means, having received the failure notification, determines whether or not processing can be continued, and in the case of a failure that cannot be continued, the execution means determines whether or not the own processor has a failure. 5. The method according to claim 4, further comprising: setting a display; and performing a fault isolation process by a partner system. 6. A step of, when the catastrophic failure in which processing cannot be continued occurs, displaying the state of the faulty processor as invalid and notifying the valid or invalid display processor of the failure simultaneously. The fault of the synchronous operation processor according to claim 4 or 5, further comprising: a step in which the processor set to the invalid display state from the valid display state and the processor of the invalid display system independently perform fault processing. Detachment control method.