JPH11196155A - Repeater - Google Patents

Abstract

PROBLEM TO BE SOLVED: To switch a system to a standby side without adversely affecting a job which normally operates or to switch it to an active side from the preliminary side when a fault occurs in a duplexed repeater in a data processor constituted of a host, the repeater and terminal equipments. SOLUTION: The repeater 2 of a data processing system provided with a host processor 1, the plural terminal equipments (a) and (b) connected to the host processor 1 and the repeater 2 which repeats/connects the host processor 1 and the terminal equipments (a) and (b) and has communication equipments A and B duplexed on the terminal equipments is provided with an operation information association means 6 managing an operation information schedule on the communication equipments, a switch schedule means 8 defining the line name of a switch destination when the fault on the communication equipment occurs and a switch schedule means 9 holding switch information on the other communication equipment contained in the same exchange part as the communication equipment where the fault occurs and controls switching.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a line switching control device, and more particularly to a data processing device to which a host, a relay device, a terminal device and the like are connected, that is, a host-relay device (server) -terminal device (client). When a fault occurs in a duplicated relay device (server) in a data processing device configured from the above, the device is automatically switched to a spare device without adversely affecting a normally operating device, The present invention relates to an apparatus for replacing a failure generating device.

[0002]

2. Description of the Related Art In a banking financial system such as an ATM,
The line relay part and the like are duplicated. For example, as shown in FIG. 11, when communication is performed between the terminal devices A to G and the host 100, the host 100 communicates with the terminal devices A, B, and C via the relay device 101, and the host 100 and the terminal device D communicates via the relay device 102 and
00 and the terminal devices E, F, and G are communicated via the relay device 103.

The relay device 101 includes a communication device 101-A,
101-B and 101-C are provided, and communicate with terminal devices A to C, respectively. A communication device (not shown) is provided in the relay device 102 and communicates with the terminal device D. The relay device 103 is provided with three communication devices (not shown), and communicates with the terminal devices E, F, and G, respectively.

By the way, in such a data processing system, if a failure occurs in the relay device during its operation, a backup relay device 104 is prepared to back up the failure and reduce the influence of the failure. The communication devices 104-1, 104-2, and 104-3 are provided in this case. The relay device 101 uses the changeover switch 106 and the changeover switch 110 to operate the host 100 and the terminal device A,
B and C, and the relay device 102
The relay device 103 is connected to the host 100 and the terminal device E by the changeover switch 108 and the changeover switch 112.
F and G are connected. The backup relay device 104 is connected to the host 100 by a changeover switch 109, and is selectively connectable to the terminal devices A to G by a changeover switch 113.

The status of each of the relay devices 101 to 104 is monitored during the operation time by the remote monitoring device 105.
For example, when the remote monitoring device 105 receives a notification and recognizes that a failure has occurred in the communication device 101-A of the relay device 101, the remote monitoring device 105
A control signal is output to 6, 109, 110, and 113 to perform control for switching and connecting the relay device 101 and the relay device 104.

That is, the changeover switch 106 is turned off and the changeover switch 109 is turned on. The changeover switch 110 is turned off, and the terminal devices A, B, and C are connected via the changeover switch 113 to the communication devices 104-1, 104-2, 104-2, respectively.
4-3. As a result, the terminal devices A, B, and C can communicate with the host via the backup relay device 104 instead of the relay device 101 including the communication device 101-A in which the failure has occurred. In this way, when an abnormality occurs in a device on the network, the switching can be automatically performed by the changeover switch.

In the case of FIG. 11, since the centralized monitoring is performed by the remote monitoring device 105, the remote monitoring device 105 is required. A conventional example that does not require such a remote monitoring device 105 will be described with reference to FIG.

In FIG. 12, relay devices 121 and 12 are connected between a host 120 and terminal devices A, B, C, D, E and F.
2 and 123 are connected, but in each relay device, the communication device is duplicated in the relay device as typically shown by the relay device 121. That is, the relay device 121
Are provided with working channels 131-1 and 132-1 and spare channels 131-2 and 132-2.

The communication device 1 is connected to the channel 131-1.
33-1 is provided, and communication devices 134-1, 134-2, and 134-3 are provided on the channel 132-1 and are connected to the terminal devices A, B, and C via the changeover switch 127, respectively. .

The communication device 13 is connected to the channel 131-2.
3-2 is provided, and the communication device 1 is provided on the channel 132-2.
35-1, 135-2, and 135-3 are provided, and are connected to the terminal devices A, B, and C via the changeover switch 128, respectively.

Channel 131-1 and channel 13
Since 2-1 operates as a working channel and channels 131-2 and 132-2 are arranged as spares,
Normally, the terminal devices A, B, and C are the communication devices 134-1 and 134-1.
It communicates with the host 120 via 34-2 and 134-3 and the communication device 133-1.

Now, while the device is in operation, the channel 132
-1 has a failure, for example, the communication device 134-1
When a failure occurs in the relay device 121, the relay device 121 itself recognizes this and turns off the changeover switch 127,
Turn on 28. As a result, the relay device 121
Then, the terminal devices A, B, and C are the communication devices 135-1, 135.
-2, 135-3, and the host 120 via the communication device 133-2. The channel 132 including the communication device 134-1 in which a failure has occurred in this way.
Terminal devices A, B, and C using the spare routes of channels 132-2 and 133-2 instead of the routes of -1.
Can communicate with the host 120.

The relay devices 122 and 123 also
Similarly to the relay device 121, a working channel and a spare channel each having a communication device are provided, and the spare channel operates when a failure occurs in the working channel. Of course, in addition to the changeover switches 129 and 130 on the terminal device side, two
Are provided.

In this way, if the communication device in the relay device is 2
When an abnormality occurs in a device on the network in the duplicated device, the switching can be automatically performed by the changeover switch.

FIG. 13 shows a conventional example in which a repeater is a multi-cluster connection, that is, a repeater is provided with an active and a standby one. In FIG. 13, the switches 140, 148, and 149 are connected to the host 140. The switching devices 147 and 142 are connected to the changeover switch 147, the relay devices 143 and 144 are connected to the changeover switch 148, and the relay devices 145 and 146 are connected to the changeover switch 149. Then, the changeover switch 150 is connected to the relay devices 141 and 142, the changeover switch 151 is connected to the relay devices 143 and 144, and the changeover switch 152 is connected to the relay devices 145 and 146. Terminal devices A, B, and C are connected to the changeover switch 150, terminal devices D and E are connected to the changeover switch 151, and terminal devices F and G are connected to the changeover switch 152.

The relay device 141 is provided with a communication device 141-0 on the side of the changeover switch 147,
Communication devices 141-1, 141-2, 141-3 are provided on the side. The relay device 142 has a changeover switch 147
The communication device 142-0 is provided on the
Communication devices 142-1, 142-2, and 142-3 are provided on the 0 side. When the relay device 141 is used as an active device and the relay device 142 is used as a standby device, the communication device 141-0 is connected to the host 140 by the changeover switch 147, and the communication devices 141-1 and 141 are changed by the changeover switch 150. -2 and 141-3 are connected to terminal devices A, B and C, respectively.

The relay devices 143, 144, 145, and 146 are also the relay devices 141, 14
2, the changeover switch 1 connected to the host 140
One communication device (not shown) is provided on the 48, 149 side, and the changeover switches 151, 15 connected to the terminal device are provided.
On the two sides, two communication devices (not shown) are provided in the same number as the number of terminals connected to the changeover switches 151 and 152. One of the relay devices 143 and 144, for example, the relay device 143 is used as an active device, and the other relay device 144 is used as a spare. Repeaters 145 and 1
One of the relay devices 46 is, for example, the relay device 145 is used as an active device, and the other relay device 146 is a standby device.

During the operation of this device, the communication device 141
When a failure occurs at −0, the relay device 141 itself recognizes this and controls the changeover switch 150, and the terminal device A,
B and C are communication devices 141-1, 141-2, 1
What was connected to 41-3 is now replaced by the communication device 142-
1, 142-2, and 142-3 are switched and controlled. The changeover switch 147 is also connected to the host 140 and the communication device 141-.
0 and the host 140 and the communication device 1
Switching control is performed so that the terminal 42-0 is connected.

[0019]

By the way, in the apparatus shown in FIG. 11, a failure of a relay device or the like is detected by a remote monitoring device, a backup route to a backup relay device is calculated, and switching is performed. As a problem in this case, a switching pattern is registered in advance and communication devices 101-A and 101-A are registered.
B, if any one of 101-C fails,
Since these are switched together to the backup relay device, the terminal devices B and C that can normally communicate even if the communication device 101-A fails, for example, are also affected by this switching.

When the switching pattern is localized only to the terminal device A connected to the communication device in which the failure has occurred,
When the terminal devices B and C are in business, the failed relay device cannot be replaced. Banking and other financial businesses tend to extend business hours, making maintenance work outside business hours difficult. For this reason, even if only the terminal device A is switched to the backup relay device at that time, unless the failed device is replaced, the operation will be started again on the relay device including the failed communication device the next day. Immediately after the failed communication device is activated, switching to the backup relay device is performed, and backup for other relay devices is not sufficient.

As shown in FIG. 12, when the communication device in the relay device is duplicated, a failure of the relay device or the like is detected by the relay device itself, and a backup path to the backup communication device is calculated. To switch. The problem in this case is that the switching patterns are registered in advance and the communication devices 134-1 and 134-1
In the event that a failure occurs in any one of -2 and 134-3, they are switched together to a spare communication device, so that normal communication can be performed even if the communication device 134-1 fails. The terminal devices B and C are also affected by this switching.

When the switching pattern is localized only to the terminal device A connected to the communication device in which the failure has occurred,
When the terminal devices B and C are in business, the failed relay device cannot be replaced. Banking and other financial businesses tend to extend business hours, making maintenance work outside business hours difficult. Therefore, in the same manner as described above, even if only the terminal device A is switched to the spare communication device at that time, if the failed device is not replaced, the operation is started again on the channel including the failed communication device the next day. As a result, the failed communication device is started again, and the switching to the spare communication device is performed immediately, so that the backup system continues to be in an insufficient state.

As shown in FIG. 13, in the case where the repeaters are connected in a multi-cluster manner and duplexed, the failure of the active repeater or the like is detected by the repeater itself, and the backup route to the spare repeater is detected. Is calculated and switching is performed. The problem in this case is that the switching pattern is registered in advance,
When a failure occurs in any one of the communication devices 141-1, 141-2, and 141-3, the failure is taken together with each of the communication devices 142-1, 142-2, and 142 of the backup relay device.
-3, so that, for example, the communication device 1
Terminal devices B and C that can normally communicate even if 41-1 fails
Are also affected by this switching.

When the switching pattern is localized only to the terminal device A connected to the communication device in which the failure has occurred,
When the terminal devices B and C are in business, the failed relay device cannot be replaced. Banking and other financial businesses tend to extend business hours, making maintenance work outside business hours difficult. For this reason, in the same manner as described above, even if only the terminal device A is switched to the spare communication device at that time, if the failed device is not replaced, the relay device including the failed communication device is again used on the next day if the replacement of the failed device is not performed. The operation is started, the failed communication device is started again, the switching to the spare communication device is performed immediately, and the state where the backup system is inadequate continues.

Accordingly, an object of the present invention is to solve the above-mentioned problems by performing switching to a spare device in which the range affected by the switching is localized when a failure is detected, and
Switching to another device in the exchange unit is performed at a time that does not affect the business, and the device is changed to a replaceable state. After that, the device is replaced. It is intended to provide a line switching control device for performing switching back.

[0026]

FIG. 1 is a block diagram showing the principle of the present invention. In FIG. 1, 1 is a host processing device, 2 is a relay device, 3 is a changeover switch, 4 is a relay line control means,
Is a failure state management means, 6 is operation information coordination means, 7 is a task influence detection means, 8 is a switching schedule means, 9 is a switching schedule means after exchange, and 10 is a working channel, and the communication devices A and B are used. The reference numeral 11 denotes a standby channel that includes communication devices C and D, and a and b denote terminal devices.

The above object is achieved by the invention described in the following claims. (1) The present invention described in claim 1, wherein a host processing device, a plurality of terminal devices connected to the host processing device, and a relay connection between the host processing device and the terminal device, In a data processing type relay device or a remote monitoring device provided with a relay device having a duplexed communication device, an operation information linking unit for managing an operation information schedule related to the communication device, and a failure related to the communication device has occurred. A switching scheduler for defining a line name of a switching destination, and switching scheduler for holding switching information relating to another communication device included in the same switching unit as the communication device in which the failure has occurred, and performing switching control of the switching information. It is characterized by having.

(2) In the present invention according to claim 2, in the invention according to claim 1, after the working channel including the communication device in which the fault has occurred is exchanged, the working channel is changed from the protection channel to the working channel. And a switching schedule means after switching which holds switching control time information for switching.

(3) According to the third aspect of the present invention, in the first aspect of the invention, after a channel including a failed communication device is replaced with a normal channel, a power failure occurs. Upon recovery, the channel is switched from the protection side to the working side channel irrespective of the switching control time information held by the switching schedule means after the replacement.

(4) The present invention according to claim 4 is the invention according to claim 1, wherein a power failure occurs before replacement in the event of a failure and the switching schedule means holds the switching power when the power failure is recovered. The present invention is characterized in that the channel is switched from the working channel to the spare channel regardless of the control time information.

(5) According to a fifth aspect of the present invention, in the first aspect of the present invention, the switching information relating to the communication device having a failure and another communication device included in the same channel as the communication device is stored in a nonvolatile manner. It is characterized in that it is stored in a storage means and is switched to the spare side by referring to this when the next power supply is started.

As a result, the present invention has the following effects. (1) When a failure occurs in the active communication device, the failed communication device is switched to the standby side to continue the operation, and the other communication devices included in the same switching unit as the failed communication device remain unchanged. Since the operation is continued, the operation can be performed without adversely affecting the communication device where no failure occurs. In addition, the switching of the spare side of the communication device which does not cause a failure can be performed by the switching schedule means at a time when the business is not affected, for example, at midnight. In this way, switching control can be performed on a normally operating communication device without adversely affecting operations.

(2) The switching control means for switching from the spare channel to the working channel by the switching schedule means after the replacement is set to a time, such as midnight, which does not adversely affect the business due to this switching operation. The working channel replaced with the normal one can be switched from the protection side channel to the normal state without adversely affecting the operation.

(3) When the channel including the failed communication device is replaced with a normal one, but the power is turned off while the standby channel is operating and the power is restored, the replaced channel is used. Can be operated as the current one, so that the normal state can be quickly restored.

(4) When a power failure occurs before the replacement of the failed power supply and the power failure is recovered, the working channel is switched to the spare channel irrespective of the switching control time information held by the switching schedule means. Therefore, when the power is restored, the operation can be performed in a normal state.

(5) When a fault occurs in a communication device, the switching information of the faulty communication device and the switching information of another communication device on the same channel as the fault, ie, the channel switching information of the faulty communication device, are transmitted. Since the information is stored in the non-volatile storage means, when the power is turned on next time as in the next day, it is possible to operate the apparatus which has been switched to the spare side by referring to this when the power is turned on. Can be operated without adversely affecting the operation.

[0037]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described with reference to FIG. In FIG. 2, the same symbols as those in the other figures denote the same parts, 1 is a host processing device, 2 is a relay device, 3 is a changeover switch, 4 is a relay line control unit, 5 is a failure state management unit, and 6 is operation information cooperation. Means, 7 means for detecting business impact, 8 is switching schedule means, 9 is switching schedule means after replacement, 20 is communication board control means, 21 is maintenance control means, 22 is end processing control means, and 23 is business control means. , 24 are switch control means, 25 is a spare device definition table, C1 to C4 are channels, and a to c are terminal devices.

The host processing device 1 has terminal devices a, b, c
.. Manage the data processed by the terminal devices a, b, c,. And it has the communication board 1-1 for connecting with the relay apparatus 2.

The relay device 2 relays the host processing device 1 and the terminal devices a, b, c,... And normally communicates with the terminal devices a, b, c via the changeover switch 3. They are connected by boards A, B and C. The communication board 1-1 communicates with the host processor 1 via a communication board J.
Is connected to The communication board corresponds to the communication device in FIG. And communication boards A, B,
C is provided in the channel C1, and is replaced in units of the channel C1 when at least one of the communication boards A, B, and C fails. Communication board A is communication board D of channel C2.
And the communication boards B and C are backed up by the communication boards E and F, respectively. When a failure occurs in one of the communication boards D, E, and F, the communication board is replaced for each channel C2.

The relay device 2 is provided with a relay line control means 4 for controlling the changeover switch 3 and a business control means 23. The changeover switch 3 switches the communication board to the spare communication board immediately when a failure occurs in the working communication board, or replaces the other working communication board with the spare communication board in order to replace the channel without adversely affecting the operation. After switching the communication board or exchanging the channel related to the occurrence of the failure, all of those operating on the spare side without adversely affecting the business are switched to the exchanged working example. A changeover switch control means 24 for performing control is provided.

The relay line control means 4 includes a failure state management means 5, operation information coordination means 6, work influence detection means 7, switching schedule means 8, switching schedule means 9 after exchange, communication board control means 20, which will be described later. Maintenance control means 2
1. A termination processing control means 22 and the like are provided to perform control when a failure occurs in the communication boards A, B, C, D, E, F and the like.

The failure state management means 5 receives the abnormal information detected by each device such as a communication board in the relay device 2 and records the information on a device-by-device basis. It notifies the means 7 and creates and records the failure state management table 5-1 based on the received abnormality information. FIG. 3 shows details of the failure state management table 5-1. When a failure occurs in the device device, the unit for replacing the device device is a unit of the parent device such as a bus and a channel. Therefore, the influence range may be the same channel and the same bus.

As shown in FIG. 4, the operation information linking means 6
Operation information schedule file 6 in which operation information is described
-1 and a network operation status file 6-2 in which the operation status of the network is described. The operation information schedule file 6-1 is created based on business schedule information defined by the user in advance. The network operation status is managed in real time based on information from the communication board control unit 20, the business control unit 23, and the like.

When the fault information is transmitted, the business effect detecting means 7 uses the line notified of the abnormality as input information,
The failure state management table 5-1 shown in FIG. 3 held by the failure state management means 5 is read, and the operation information schedule file 6-1 and the network shown in FIG. Operation status file 6
2 is detected, and as shown in FIG. 5, an abnormality of a line that does not already exist in the switching schedule table is detected. When the unit of exchange of the device is a channel, as shown in FIG. An entry is added to the switching schedule table 8-1 for all the lines.
The start time is read from the network operation status file 6-2, and if the state of the corresponding line is normal, the operation end time is set from the operation information schedule file 6-1. If abnormal, set the current time.

The changeover schedule means 8 includes the changeover switch 3
To output a switching command for switching control of
The switching schedule table 8-1 is read in accordance with the notification from the business impact detecting means 7. At this time, if there is a line that has reached the start time, that is, if there is a line that can be notified of the switching command, the switching command in which the switching source line and the switching destination line are written is switched as shown in FIG. The control signal is sent to the switch control means 24 to control the switching of the changeover switch 3. Thereafter, when the operation is continued and the operation of the day is ended, all the lines which are to be affected at the end of the operation are switched. Further, in the case of 24-hour operation, switching control of all the lines that are affected is performed from the operation information schedule file 6-1 shown in FIG.

After the exchange, the switching schedule means 9 exchanges the channel relating to the failed communication board, and then changes the operation using the spare communication boards D, E and F to a time which does not affect the business. In the above, the switching to the communication boards A, B, and C on the working side whose failure has been recovered by the exchange is controlled. Therefore, the time schedule means 9
-1 and switching command means 9-2, and maintenance control means 2
The switching schedule table 8-1 is read by the notification from the first and the time schedule means 9-1 obtains a line that can be notified of the switching command by using the current time as input information. By controlling the means 9-2, the changeover command is transmitted to the changeover switch control means 24 at the corresponding time. As a result, the switched line can be restored. Therefore, the switching command is notified using the switching destination line of the switching schedule table 8-1 as the switching source and the corresponding line as the switching destination line.

The communication board control means 20 includes communication boards A to
This is for detecting a hardware abnormality relating to the communication board F, and notifying the failure state management means 5 when an abnormality is detected.

The maintenance control means 21 manages the process of replacing the device. When the failed communication board is replaced for each channel, the maintenance control means 21 notifies the failure state management means 5 of the recovery. .

The termination processing control means 22 performs processing when the system is terminated, for example, when power is cut off during normal business. In this case, it is not possible to determine whether or not the channel relating to the failed communication board has been replaced, so that the switching schedule means 8 and the switched schedule means 9 after replacement are called, and the switching schedule table 8-
When the system exists, when the system is terminated, the switching is normally performed at 23:59, which is the start time entered in the switching schedule table 8-1 when the number 1 exists.

The service control means 23 detects from the program whether the data relating to the channel 1 or the channel 2 is normal or abnormal, for example, whether or not the line control procedure is accurate, and performs a software abnormality detection. Things.
When an abnormality is detected, the abnormality is notified to the operation information linking means 6.

The changeover switch control means 24 controls the changeover switch 3 and selectively controls switching of lines or performs switching control in units of channels. For example, in FIG. 2, when a failure relating to the active communication board A occurs, it is controlled by an instruction from the switching schedule means 8, the switching schedule means 9 after replacement, etc. Control of switching to the board D, and then control of switching the current communication boards B and C to the spare communication boards E and F,
After replacing 1 with a normal one, a spare communication board D,
The switches E and F are collectively switched to the current communication boards A, B and C.

The spare device definition table 25, as shown in FIG. 6, shows a spare line to which a switching is made when a failure occurs in a working line that is operating normally.
In the spare device definition table 25, the normal line names are the active line names, and the active LINE1, LINE
2. It is defined that LINE4, LINE5, and LINE6 are used as these spare lines when a failure occurs in LINE3.

The operation of the present invention will be described. As shown in FIG. 7, when a hard error such as a bus error, a channel error, or a communication board error occurs in the relay device 2, a bus control unit (not shown), a channel control unit (not shown), and a communication board control unit 20 and the like detect an abnormality of the communication driver or the like and notify the failure state management means 5. For example, the communication board A is notified that an abnormality has been detected. As a result, the failure state management means 5 reads the failure state management table 5-1 by inputting the notified device name, in this example, the communication board A, and makes the state of the entry in which the corresponding device exists an abnormal state. As a result, the range of influence due to this abnormal state can be recognized. Then, the abnormality information is notified to the operation information cooperation means 6.

The operation information linking means 6 receives the notification from the failure state management means 5 or the abnormality detection information from the business control means 23. The job control unit 23 includes a control unit for each job. In this example, the job control unit 23 includes a job A control unit (not shown), a job B control unit (not shown), and a job C control unit (not shown). . Then, transaction processing from the terminal devices a, b, and c is controlled for each line and each logical LU.

The operation information linking means 6 includes
, Read the created operation information schedule file 6-1 and read the time,
Create the operating status information of the notified network. Then, the network operation status created last time is read from the network operation status file 6-2, the status of the previous line is copied to the network operation status created this time, and the line of the entry of the relevant business notified from the business control unit 23 is read. The state is made abnormal as shown in FIG.

When the operation information linking unit 6 receives the abnormality notification from the failure state management unit 5, it similarly reads the operation information schedule file 6-1, reads the time, and creates the notified network operation status information. I do.
Then, the network operation status created last time is read from the network operation status file 6-2, the status of the previous line is copied to the network operation status created this time, and the status of the line notified from the failure status management means 5 is abnormal. Then, the latest network operation status file 6-2 is created.

The business effect detecting means 7 reads the failure state management table 5-1 by using the line notified of the abnormality as input information in response to the failure occurrence notification from the failure state management means 5, and reads the operation information schedule file 6-1. And reads the network operation status file 6-2,
Then, it reads the spare device definition table 25, records the switching information in the switching schedule table 8-1, and notifies the switching schedule means 8.

That is, the failure state management table 5-1 is read in response to the failure notification from the failure state management means 5, the switching schedule table 8-1 is read, and the abnormality of the line not existing in the switching schedule table 8-1 is detected. I do. When the exchange unit of the device is a channel unit such as a communication board, all the lines of the channel to which the abnormal line belongs, that is, if the abnormal line is the line 1, the channel C1 to which the line 1 belongs
Are added to the switching schedule table 8-1.

For the start time, the network operation status file 6-2 is read, and if the line status of the corresponding line is normal, the operation information schedule file 6-1 is read and the operation end time is set to the start time of the switching schedule table 8-1. Set to. However, when the network operation status file 6-2 is abnormal as in the line 1, the current time is set to the start time of the switching schedule table 8-1. The switching destination line is set by reading the spare device definition table 25 defined in advance and starting with the corresponding spare line.

The switching schedule means 8 reads the switching schedule table 8-1 shown in FIG. 8 in response to the notification from the business effect detecting means 7, and detects a line to which a switching command can be notified. As a result, since the start time of the line 1 is described as “current”, it is recognized that the line 1 can be notified of the switching command, and as shown in FIG. Then, the switching command which sets the line 4 as the switching destination line is notified to the changeover switch control means 24 of the changeover switch 3.

As a result, the terminal device a connected to the line 1 is switched to the line 4 as shown by a dotted line in the changeover switch 3 in FIG. However, the switching control for the normal lines 2 and 3 is not performed, and the business is continued with the terminal devices b and c connected to the lines 2 and 3 as they are. FIG.
(A) shows a state in which only this terminal device a is switched and connected to the line 4.

When the operation state is continued and the end time of the business on the day is reached, for example, 23:59, this becomes the start time of switching to the corresponding lines 2 and 3 in the switching schedule table 8-1, and this time the corresponding line The switching command control unit 24 is notified of a switching command in which 2 is the switching source line and the line 5 is the switching destination line, and a switching command in which the corresponding line 3 is the switching source line and the line 6 is the switching destination line.

As a result, the terminal devices b and c are switched and connected to the lines 5 and 6 as shown in FIG.
At this time, since the work has been completed, the switching does not adversely affect the work.

When the system is operating for 24 hours, this time is a time period that is not normally used by the user, so that there is no adverse effect on the business. In the case of 24-hour operation, even if this switching time is regarded as the end of the work, there is no adverse effect on the work for the same reason. In this way, switching control is performed on all communication boards of the failed channel C1, and the channel C1 is in a replaceable state.

After the replacement becomes possible in this way, for example, during the business hours of the next day, the maintenance staff replaces the channel C1 with a normal one. FIG. 9D shows the switching schedule table for the switching schedule means 8.
As shown in (1), the start date and the start time for the corresponding line 1 are changed. Then, the maintenance staff notifies the maintenance control means 21 of the replacement of the channel C1.

Thus, the maintenance control means 21 notifies the switching schedule means 9 after replacement that switching control is to be performed. The switching schedule means 9 after the replacement reads the switching schedule table 8-1 shown in FIG. If there is a line to which a switching command can be notified based on the current time, a switching command based on the line is immediately sent to the switching command unit 9- like a format described later.
2 to the changeover switch control means 24.

In the state shown in FIG. 9D, there is a line which can be switched at 23:59, so this is notified to the time schedule means 9-1 and a request is made to switch at the corresponding time. Then, when the time comes, the switching command means 9
-2 is the switching schedule table 8 shown in FIG.
A switching command of “−1”, in which the switching destination line is set as the switching source line and the corresponding line is set as the switching destination line, is issued to the switching switch control unit 24. Thereby, in the changeover switch 3,
As shown in FIG. 9E, the terminal devices a, b, and c can be connected again to the communication boards A, B, and C of the working channel C1, and can be restored to the original state.

When the operation is terminated for any reason after the channel exchange shown in FIG. 9 (C), for example, when the power supply is cut off, the termination processing control means 22 sends the switching schedule means 9 after the exchange. This is notified, the switching schedule table 8-1 is read, and even when the start time has not arrived, the switching of the corresponding line is switched and controlled at the end of the business as described above. As a result, when the business starts again, the terminal devices a, b, and c are connected to the working communication boards A, B, and C as shown in FIG. it can.

A second embodiment of the present invention will be described with reference to FIG. In the second embodiment, for example, a failure state management table as shown in FIG. 3 is stored in an external nonvolatile storage device such as a magnetic disk device. Then, even if the power is cut off while the system is in a failure state and the system is restarted the next day, the failed device will not be used but will start up with its spare device switched over and normal operations will be performed. It is to be.
For example, in the relay device 2, a bus error, a channel error,
When an error such as a communication board error occurs, the failure state management means 5 creates a failure state management table 5-1 as shown in FIG. 7 and saves it in a magnetic disk device not shown. And based on this,
When a fault occurs, for example, when a fault occurs with the active communication board A, the terminal device a
If the power is cut off before switching to the side and the system is terminated, the failed communication board A will be activated when the system is restarted the next day. Therefore, it is necessary to prevent such a situation. FIG. 10 relates to a system start-up process corresponding to such a case.

S1. Before the system starts up and the service is started, the failure state management means 5 reads the failure state management table 5-1 from a magnetic disk device (not shown). S2. From this, the failure state management means 5 recognizes that there is an abnormality with respect to the failed device, in this example, the communication board A. Then, the device information of the failure is notified to the operation information linking means 6.

S3. As a result, the operation information linkage unit 6 reads the operation information schedule file 6-1 and creates the network operation status file 6-2. S4. Based on the notification from the failure status management unit 5, the business impact detection unit 7 uses the failure notification line as input information, and uses the failure status management table 5-1; the operation information schedule file 6-1; the network operation status file 6-2; The switching information is recorded in the switching schedule table 8-1 by the device definition file 25 or the like, and the switchable communication boards can be calculated.

S5. The changeover schedule means 8 notifies the changeover switch 3 of the state notification command and confirms the state. S6. The changeover schedule means 8 includes the changeover switch 3
According to the status report from, if a line in which a failure has occurred, for example, line 1 has not been switched, the changeover switch 3
Sends a switching command to As a result, the terminal device a is switched from the failed line 1 to the spare line 4. The bus control unit, the communication board control unit, and the channel control unit, not shown, can use a normal device at startup by referring to the failure state management table.

The terminal device is, of course, the AT of the financial institution.
For example, a personal computer can be used without being limited to M, and the relay device is not limited to a server, and other devices can be used.

The remote monitoring device includes the fault state management means 5, the operation information linking means 6, the operation influence detecting means 7, the switching schedule means 8, the switching schedule means 9 after replacement, and the spare device definition means 25 of FIG. Thus, a similar process can be performed.

[0075]

According to the present invention, the following effects can be obtained. (1) When a failure occurs in the active communication device, the failed communication device is switched to the standby side to continue the operation, and the other communication devices included in the same switching unit as the failed communication device remain unchanged. Since the operation is continued, the operation can be performed without adversely affecting the communication device where no failure occurs. In addition, the switching of the spare side of the communication device which does not cause a failure can be performed by the switching schedule means at a time when the business is not affected, for example, at midnight. In this way, switching control can be performed on a normally operating communication device without adversely affecting operations.

(2) The switching control means for switching from the spare channel to the working channel by the switching schedule means after switching is set to a time, such as midnight, which does not adversely affect the business due to this switching operation. The working channel replaced with a normal one can be switched from the protection channel to the normal channel without adversely affecting the operation, and can be returned to a normal state.

(3) When the channel including the failed communication device is replaced with a normal one, but the power is cut off while the standby channel is operating and the recovery is restored, the replaced channel is used. Can be operated as the current one, so that the normal state can be quickly restored.

(4) When a power failure occurs before the replacement of the failed power supply and the power failure is recovered, the working channel is switched to the spare channel irrespective of the switching control time information held by the switching schedule means. Therefore, when the power is restored, the operation can be performed in a normal state.

(5) When a failure occurs in a communication device, the switching information of the failed communication device and the switching information of another communication device on the same channel as the failed communication device, that is, the channel switching information of the failed communication device, are transmitted. Since the data is stored in the non-volatile storage means, when the power is turned on next time, such as the next day, any data that has been switched to the standby side can be operated in the switched state. Can be operated without adversely affecting the operation.

[Brief description of the drawings]

FIG. 1 is a principle diagram of the present invention.

FIG. 2 is an embodiment of the present invention.

FIG. 3 is an explanatory diagram of a failure state management table according to the present invention.

FIG. 4 is a detailed diagram of an operation information linking unit according to the present invention.

FIG. 5 is a detailed diagram of a switching schedule unit according to the present invention.

FIG. 6 is an explanatory diagram of the operation of a means for detecting a business effect according to the present invention.

FIG. 7 is a diagram (part 1) illustrating the operation of the present invention.

FIG. 8 is a diagram (part 2) illustrating the operation of the present invention.

FIG. 9 is a diagram (part 3) illustrating the operation of the present invention.

FIG. 10 is an operation explanatory diagram of the second embodiment of the present invention.

FIG. 11 is a conventional example (part 1).

FIG. 12 is a conventional example (part 2).

FIG. 13 is a conventional example (part 3).

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Host processing device 2 Relay device 3 Changeover switch 4 Relay line control means 5 Failure status management means 6 Operation information cooperation means 7 Business effect detection means 8 Switching schedule means 9 Schedule means after exchange

Claims (5)

[Claims] 1. A host processing device, a plurality of terminal devices connected to the host processing device, and a communication device duplexed with respect to the terminal device by relay-connecting the host processing device and the terminal device. In a relay device of a data processing method having a relay device having, an operation information linking unit that manages an operation information schedule related to the communication device, a switching schedule unit that defines a line name of a switching destination when a failure occurs in the communication device, A relay device, comprising: switching information for switching information relating to another communication device included in the same switching unit as the communication device in which the failure has occurred, and switching control of the switching information. 2. A switched switching schedule means for retaining switching control time information for switching from a protection channel to a working channel after replacing a working channel including a failed communication device. The relay device according to claim 1, wherein: 3. A power failure occurs after a channel including a failed communication device is replaced with a normal one, and when the power is restored, it is related to the switching control time information held by the switching schedule means after the replacement. 2. The relay apparatus according to claim 1, wherein the channel is switched from the protection side to the working side channel. 4. A power failure occurs prior to replacement in the event of a failure, and when the power failure is restored, switching from the working channel to the spare channel is performed irrespective of the switching control time information held by the switching schedule means. The relay device according to claim 1, wherein 5. Switching information relating to a communication device in which a failure has occurred and another communication device included in the same channel as the communication device is stored in a non-volatile storage means, and is referred to at the next power-on. 2. The relay device according to claim 1, wherein the switching is performed to a standby side.