JPH1185530A - Controller having self-repairing function - Google Patents

Abstract

PROBLEM TO BE SOLVED: To unnecessitate to load new control information and to eliminate artificial mistakes by each controller mutually holding control information of the other controllers and transferring the control information to a controller that is returned and mounted from the other controllers when it fails or is exchanged. SOLUTION: Plural controllers A B,... are connected to a transmission line 11 so that data which represent control information such as a program, quantity of a control object and a parameter can be mutually exchanged. When a loader 12 registers the control information on one of plural controllers A, B,..., the same control information is registered to the other controllers through the controller and the line 11. When one of plural controllers A, B,... fails and stops, and when it is uncoupled, repaired and returned to the line 11 again, the control information is registered on the controller again from the other controllers through the line 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a controller having a self-healing function for industrial instrumentation used in, for example, the field of water and sewage or steel.

[0002]

2. Description of the Related Art Conventionally, the control function of a controller of this kind
For example, in a plant operation, etc., the function to accurately control according to the operating conditions is to transfer and register the file created by a programming tool called a programming loader (hereinafter referred to as a loader) using a personal computer for each controller. Was. Therefore, when the controller encounters a failure or has to be replaced with a substitute, the control function for the controller must be re-registered each time.

[0003]

However, in that case, a loader is always required, and a large system,
For example, in a large plant system, since different functions are registered for each controller, it may take time to start up the system due to incorrect registration of functions or missing functions that should be saved. There was a problem. In addition, when control information is transmitted between controllers, if the function is stopped due to a failure or replacement of the controller, the data will not be collected, so the function of the system will be stopped, causing a serious situation. Was also often.

[0004] In addition, depending on the controller, even if it is related to the control of the entire system only by performing an operation, one controller is required.
In the event of a failure or replacement of a unit, the entire system must be stopped because the functions of the entire system need to be stopped.

Accordingly, a first object of the present invention is to provide a controller with a self-healing function having a function of not stopping the control function of the whole system even if the function of one controller stops. is there.

It is a second object of the present invention to provide a controller having a self-healing function which does not require a new load of control information even after replacing one controller.

[0007]

A controller with a self-healing function according to the present invention includes a plurality of controllers connected to a transmission line and having a function of exchanging data with each other, and a loader for registering control information to these controllers. Means for registering control information from the loader to one of the plurality of controllers, transferring and registering the same control information to another controller via the controller and the transmission line; , When one of the plurality of controllers is stopped due to a failure and is disconnected from the transmission line, and after the failure is repaired and returned to the transmission line again, the transmission line is transmitted from another controller to the transmission line. Means for re-registering the control information via the control unit.

The controller with a self-healing function according to the present invention may further comprise a controller which is associated in advance so as to receive data from the failed controller via a transmission line. And a means for automatically changing the receiving controller.

Further, the controller with a self-healing function of the present invention is provided with a means for automatically supplementing the function of the detached controller when the controller is stopped due to a failure and is detached from the transmission line. It is characterized by having.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to FIGS.

FIG. 1 is a block diagram showing the overall configuration of a system according to the present invention, in which a plurality of controllers A, B, C
Are connected to the transmission line 11, and are mutually connected so that control information such as a program and data representing an amount and a parameter of a control object can be exchanged. These controllers A,
In B, C,..., Control information including respective control programs and various data necessary for control is downloaded from the loader 12 using a personal computer. These controllers A, B, C... Are connected to, for example, large-scale plant equipment via a transmission line 12, although not shown.

FIG. 2 is a block diagram for explaining the operation of the controller with a self-healing function according to the present invention. FIG.
(A) shows a state in which a program is registered from the loader 12 in each of the controllers A, B, and C. Here, the symbols [A], [B], and [C] surrounded by rectangles displayed in the blocks of the controllers A, B, and C denote programs to be registered in the controllers A, B, and C, respectively. Represents. In the figure, although not shown in the controller A, a program [C] other than the program [A] is used.
Is registered. Although not shown, a program [A] is registered in the controller B in addition to the program [B]. Although not shown, programs [A] and [B] are registered in the controller C in addition to the program [C]. Registration of these programs is performed, for example, as follows. In FIG. 2A, the loader 12
Is connected to the controller B, loads the program [B] for itself into the controller B, transfers the program [B] to the controller C via the transmission line 12 as shown by an arrow 13, and registers it in a file. Similarly, when the program [A] is registered from the loader 12 to the controller A, the program [A] is transferred to the controller C via the transmission line 12 and registered in the file. Then, when registering the program [C] from the loader 12 to the controller C, the program [C] is transferred to the controller A via the transmission line 12 and registered in the file.

FIG. 2B is a view showing a state in which the controller B has been detached from the system for maintenance due to some abnormality, and FIG. 2C is a view showing a state in which the controller B has been detached from the system. FIG. 13 is a diagram showing a state in which B is restored or replaced and then returned to the system again. In the state shown in FIG. 2C, the program [B] does not exist in the controller B at the time of returning,
The controller B sends a transfer request to the controller C that stores the program [B] in advance, and the program [B]
Is transferred to the controller B via the transmission line 11 as shown by the arrow 14, and registered in the file. Thus, the controller B starts its original control. As a result, the controller B can quickly restore control without requiring the loader 12.
Therefore, it is not necessary to injure the operator for the registration work by the loader 12, and it is possible to prevent human error such as registration error by the loader 12. Such registration errors caused by the loader 12 increase as the size of the system increases, and the types of programs and other control information also increase, and the number of registration errors from the loader 12 increases accordingly. Since no load is required, human errors can be completely eliminated.

FIG. 3 is a block diagram showing another embodiment according to the present invention. In a system in which controllers A, B and C each receive data from another predetermined controller and perform control, a self-healing function is added. Things. That is, as shown in FIG. 3A, a process value PV indicating a control level and a set value SV indicating a parameter unique to each controller are registered in the controllers A, B, and C, respectively. In the controller A, an address B designating the controller B and its set value SV are registered as link information 15. In the controller C, an address B specifying the controller B and its process value PV are registered as link information 16.

In such a state, as shown in FIG. 3B, the controller B causes a failure and is separated from the system, and the link information 15,
If 16 is no longer sent from controller B to controller A or C, controller A or C
Link information 17 and 1 that are SVs or PVs of controller C registered in advance for backup
8 to use the control information of another controller C, thereby minimizing the effect on the entire system.

As shown in FIG. 3C, when the controller B returns to the system, a signal indicating that the controller B has returned is sent to the controllers A and C. C is rewritten to the original link information 15 and 16, and control of the system is immediately restored to the original.

Therefore, in this embodiment, even if one controller B stops functioning due to failure or replacement, a nearby controller (in this case, the controller A or C)
Control information can be rewritten and obtained as dummy control information, so that control can be continued without stopping the system itself, and when recovery, the dummy control information is automatically replaced with the original control information. By changing,
The original control can be quickly restored.

FIG. 4 is a block diagram showing still another embodiment according to the present invention. In this embodiment,
For example, as shown in FIG. 4A, the program [B] of the controller B is registered in the controller C together with the program [C]. When the controller B leaves the system due to some abnormality as shown in FIG. 4B, the program [B] of the controller C is executed together with the program [C] by, for example, time sharing. That is, even if the controller B is actually detached from the system, the controller C acting as a control operates as two controllers also serving as the controller B.

FIG. 4C shows a state in which the controller B has returned to the system. A return signal is sent from the restored controller B to the controller C, and the controller C
Is registered in the controller B via the transmission line 11 and registered in the controller B.
And C returns to the original control operation.

As described above, in the case of this embodiment, since the controllers A, B, and C mutually hold control information of other controllers, one controller causes an abnormality and the function is stopped. However, since control data can be obtained from another predetermined controller, control can be continued without stopping the entire system. Also, at the time of return, since the control data is promptly supplied from the other controller to the restored controller, a human error due to downloading the control information from the loader can be eliminated.

[0021]

According to the present invention described above, even when a certain controller fails or needs to be replaced with an alternative controller, the control information is transferred from the other controller. There is no need to load new control information for the installed controller, so human errors such as registration errors from the loader can be completely eliminated. It has a great effect on

Also, when returning the replaced controller,
Even if there is a controller that has quickly recovered to the original control and stopped functioning, another controller will take over for it.
You can continue without stopping system execution.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of a controller with a self-healing function of the present invention.

FIG. 2 is a block diagram showing an embodiment of a controller with a self-healing function of the present invention.

FIG. 3 is a block diagram showing another embodiment of the controller with a self-healing function of the present invention.

FIG. 4 is a block diagram showing still another embodiment of the controller with a self-healing function of the present invention.

[Explanation of symbols]

 AC controller 11 Transmission line 12 Programming loader 15-18 Link information

Claims (3)

[Claims] 1. A plurality of controllers connected to a transmission line and having a function of exchanging data with each other, a loader for registering control information for these controllers, and a loader for controlling one of the plurality of controllers by the loader. When registering control information, means for transferring and registering the same control information to another controller via the controller and the transmission line, and one of the plurality of controllers is stopped due to a failure. Then, after detaching from the transmission line, when the failure is restored and the transmission line is returned again, means for re-registering the control information from another controller via the transmission line is provided to the controller. A controller with a self-healing function characterized by having 2. The controller in which the function is stopped,
The controller pre-associated to receive data over a transmission line includes means for automatically changing the controller to which data is received when the controller ceases functioning. Controller with self-healing function. 3. The controller stops due to a failure,
2. The controller with a self-healing function according to claim 1, wherein, when the controller is disconnected from the transmission line, the other controller includes means for automatically supplementing the function of the controller that has been disconnected.