JPH1196088A - Duplex constitution device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a device capable of displaying a protection function based on duplex constitution at the time of occurrence of a failure and accurately preventing also the occurrence of duplex system switching malfunction even when a trouble occurs in a diagnostic signal transmitting/receiving cable or the like mutually connecting both systems. SOLUTION: The device is provided with duplex constitution consisting of a current system 1 and a stand-by system 2. A diagnostic signal transmitting/ receiving cable A for mutually connecting the current and stand-by systems 1, 2 is used, pilot signal transmitting/receiving parts 25, 26 are connected to one end side of the cable A and a returning part for returning a transmitted pilot signal (e) is connected to the other end side of the cable A. A pilot signal monitoring means 24 for monitoring whether the transmission/reception of the pilot signal (e) by the transmitting/receiving parts 25, 26 is normally executed or not judges a diagnostic signal from the current system 1 only when the pilot signal (e) is normally transmitted/received.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a duplex configuration device having a duplex configuration including an active system and a standby system used in an automatic control device or a communication processing device requiring high reliability.

[0002]

2. Description of the Related Art In general, this type of duplexing device normally sends a control output or a communication output from an active system and a standby system monitors an abnormality of the active system. When the standby system detects a failure in the active system, the control output or communication output is switched to the standby system, and output is performed from the standby system, so that the control operation or communication operation of the entire system is continued and reliability is improved. ing.

In the above-described duplex configuration device, in order to detect a failure in another system in a duplex switching operation, a cable is connected between the own system and another system to transmit and receive a diagnostic signal. At this time, if there is a connection failure of the cable connector or the cable is disconnected, a malfunction will occur due to failure detection by another system.

Japanese Patent Application Laid-Open No. 7-63805 discloses a conventional technique of this kind. What is disclosed in this publication is a check signal transmission unit, a check signal determination unit, a disconnection check unit, and a connector return signal transmission / reception unit from the disconnection check unit for detecting disconnection of a communication cable and contact failure of the cable connector. And the like.

This disconnection detecting means sends a check signal to an empty connector pin when the power is turned on in order to clarify the cause (discriminating a poor connector contact or cable disconnection from other causes) when a communication error occurs between both terminals. Sends out and detects connector contact failure and cable disconnection by connector folding.
Thereafter, a check signal for detecting an abnormality of the device is transmitted, and the abnormality of the device is separately inspected. That is, two detection operations must be performed. Therefore, quick and accurate abnormality detection cannot be performed.

Referring to FIG. 2, a conventional abnormality detection method will be specifically described. In the configuration shown in FIG. 2, the two control devices 1 and 2 have a so-called duplex configuration, in which the former is a working system and the latter is a standby system at the initial stage.
These are switched and connected to the controlled device 3 via the relay switching unit 30. The control output signal c1 is output from the automatic control unit 13 of the control device 1 (active system). The switching diagnostic signal transmission unit 12 of the control device 1 checks the state of the automatic control unit 13 and, if normal, sends a diagnostic signal a to the control device 2 via the connector 11, the cable A, and the connector 21.

The switching diagnostic signal detecting section 22 of the control device 2 (standby system) receives the diagnostic signal a and passes it to the switching checking section 24. The switching check unit 24 determines that the control device 1 (working system) is normal based on the detection signal.

[0008] When a power failure occurs in the control device 1 or a failure occurs in the automatic control unit 13, the automatic control unit 13 outputs a control unit failure signal d indicating an abnormality.
When the switching diagnostic signal transmission unit 12 receives the control unit failure signal d, the transmission of the diagnostic signal a is stopped. Diagnostic signal a
When the switching diagnostic signal detection unit 22 of the control device 2 detects that the control device 2 has stopped, the switching check unit 24 determines that the control device 1 is abnormal, and switches the system switching signal b to switch the control device 2 from the standby system to the active system. Is output. The relay switching unit 30 is switched to the control device 2 by the system switching signal b. Therefore, the control output c2 output from the automatic control unit 23 of the control device 2 is sent to the controlled device 3, and the control operation is continued.

However, if the disconnection of the cable A or the contact failure between the connectors 11 and 21 occurs during the switching operation, the diagnostic signal a is stopped as viewed from the control device 2 as in the case of the abnormality of the control device 1. Therefore, the control device 2 determines that the control device 1 is abnormal although the control device 1 is normal, and switches the standby system to the active system. As a result, an unintended malfunction of the relay switching unit 30 occurs, and the reliability of the dual system control operation is impaired.

[0010]

The prior art described in the above publication merely investigates the cause of a communication abnormality between both terminals. Therefore, as described above, the two detection operations must be performed, and the system does not have a function of preventing a malfunction of the duplex duplex switching operation which is the main feature of the present invention. Furthermore, the above publication discloses that the detection operation at the time of turning on the power is performed, so that the detection at the normal time can be omitted.
However, in the operating state after turning on the power, it is not possible to detect failures etc. due to poor connector contact due to vibrations etc. that occur over time,
Since the device abnormality is separately checked, if a cable abnormality or the like subsequently occurs, the device abnormality cannot be correctly determined.

In the conventional duplex duplex configuration shown in FIG. 2, in the system for switching from the active system to the standby system, if there is a connector contact failure or disconnection in the cable connecting the active system and the standby system, even if the active system is disconnected. Even if the system is normal, the standby system cannot receive a diagnostic signal that should come from the active system, so the standby system determines that the active system is abnormal and switches to the active system, causing a malfunction.

An object of the present invention is to provide an automatic switching operation from the active system to the standby system in the event of a failure so that the operation of the entire system can be continued and the protection function provided by the redundant configuration can be exerted. It is an object of the present invention to provide a duplex redundant configuration device capable of accurately preventing a duplex system switching malfunction caused by a trouble such as a connector contact failure in a connected diagnostic signal transmission / reception cable over the entire period during operation.

[0013]

SUMMARY OF THE INVENTION In order to solve the above-mentioned problems, a duplex duplexer according to the present invention has the following characteristic configuration. (1) In a duplex duplex configuration device having a duplex configuration including an active system and a standby system, a diagnostic signal transmission / reception cable connecting the active system and the standby system is used, and a pilot signal is connected to one end of the cable. A pilot signal monitoring means for providing a transmission / reception unit, providing a return unit for returning the transmitted pilot signal to the other end of the cable, and constantly monitoring whether the transmission / reception of the pilot signal by the pilot signal transmission / reception unit is normally performed. Wherein the determination of the diagnostic signal from the active system is performed only when the transmission and reception of the pilot signal is normally performed.

(2) The apparatus according to the above (1),
When transmission and reception of pilot signals are not performed normally,
Prohibits the duplex switching operation and sends out an alarm output.

(3) The apparatus according to the above (1),
The diagnostic signal is for transmitting the soundness of the active system device to the standby system, and interrupts the signal in the event of an abnormality.

(4) The apparatus according to the above (1),
The pilot signal is for transmitting a return signal from the standby system to the working system and from the working system to the standby system to detect a cable state including connectors for connecting the two systems.

(5) The apparatus according to the above (1), wherein
A switching check unit provided in the standby system checks both the diagnostic signal and the pilot signal, and determines whether there is an abnormality in the working system and / or whether there is an abnormality in the cable system.

[0018]

FIG. 1 is a diagram showing a configuration of a duplex duplex configuration device according to a first embodiment of the present invention. As is apparent from a comparison between FIG. 1 and FIG.
In the apparatus of the present embodiment shown in FIG. 2, a pilot signal transmitting / receiving section including a pilot signal transmitting section 25 and a pilot signal detecting section 26 is provided in the control apparatus 2 of the conventional apparatus shown in FIG. 2, and an alarm output section 27 is added. This is characterized in that a pilot signal monitoring means is configured to monitor a connector contact failure or the like by transmitting / receiving a pilot signal to / from the control device 1. Hereinafter, the configuration of the device of the present embodiment will be described.

As shown in FIG. 1, two control devices 1 and 2
However, it has a so-called duplex duplex configuration. Initially, the former is the active system and the latter is the standby system. These are switched and connected to the controlled device 3 via the relay switching unit 30. The control output signal c1 is output from the automatic control unit 13 of the control device 1 (active system).
The switching diagnostic signal transmission unit 12 of the control device 1
Check the status of connector 3 and if it is normal, connector 1
1. Control device 2 via cable A and connector 21
(Standby system) to send a diagnostic signal a. This diagnostic signal informs the standby system of the soundness of the active system equipment.

The switching diagnostic signal detecting section 22 of the control device 2 (standby system) receives the diagnostic signal a and passes the detection signal to the switching checking section 24. The switching check unit 24 determines that the control device 1 (working system) is normal based on the detection signal.

When the power is cut off in the control device 1 or the automatic control unit 13 fails, the automatic control unit 13 outputs a control unit failure signal d indicating that there is an abnormality.
When the switching diagnostic signal transmitting unit 12 receives the control unit failure signal d, the transmission of the diagnostic signal a is stopped. Diagnostic signal a
Is detected by the switching diagnostic signal detection unit 22 of the control device 2.

When the stop of the diagnostic signal a is detected, the switching check unit 24 simultaneously checks the pilot signal e described below, and makes a determination based on the correspondence between the two.

The pilot signal e transmitted from the pilot signal transmitting unit 25 is transmitted through the connector 21 and further through the same cable A as the diagnostic signal a.
Through the cable A, the connector 11 again returns to the controller 2 through the cable A and the connector 21, and is input to the pilot signal detector 26. . The detection result of the pilot signal detector 26 is transmitted to the switching checker 24.
Is checked in. Therefore, if there is no abnormality in the connector or the like, the pilot signal transmitted from pilot signal transmitting section 25 is transmitted to connector 21, cable A, connector 1
1, the signal passes through the cable A and the connector 21, is detected by the pilot signal detection unit 26, and is input to the switching check unit 24. Therefore, in this case, it is determined that there is no connector contact failure, cable disconnection, or the like. Therefore, when the diagnostic signal a is stopped and the pilot signal e is in the detection state, it is determined that the control device 1 is abnormal, and the system switching operation is performed. That is, the system switching signal b is output to switch the control device 2 from the standby system to the working system. In response to the system switching signal b, the relay switching unit 30 switches to the control device 2 side, the control output c2 output from the automatic control unit 23 of the control device 2 is sent to the controlled device 3, and the control operation is continued.

When the diagnostic signal a is stopped and the pilot signal e is also in the non-detection state at the same time, it is determined that an abnormality has occurred due to at least a poor contact of the connector or a broken cable. For this reason, a drive command is given from the switching check unit 24 to the alarm output unit 27, an alarm output is sent from the alarm output unit 27 to the outside, and the operator is notified. In this case, the system switching operation is not performed, and the control output c1 is continuously transmitted from the normal control device 1.

As a result, the diagnostic signal "a" is stopped in spite of the fact that the working system is normal due to an abnormality caused by a poor contact of the connector or a broken cable, etc., so that the working system is erroneously determined to be abnormal and erroneously determined. The switching operation can be prevented from being performed.

[0026]

As described above, according to the present invention,
In the event of a failure, automatic switching from the active system to the standby system is performed, so that the operation of the entire system can be continued and the protection function provided by the redundant configuration can be achieved, as well as a diagnostic signal transmission / reception cable that connects between the systems. Even if a trouble such as a contact failure occurs, it is possible to provide a duplex redundant configuration device capable of properly preventing a redundant system switching malfunction due to the trouble during the entire operation.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a duplex duplex control device according to a first embodiment of the present invention.

FIG. 2 is a configuration block diagram of a duplex duplex control device according to a conventional example.

[Explanation of symbols]

 1, 2 control device 3 controlled device 13 automatic control unit 11, 21 connector 12 switching diagnostic signal transmitting unit 22 switching diagnostic signal detecting unit 24 switching checking unit 25 pilot signal transmitting unit 26 pilot signal detecting unit 27 alarm output unit 30 relay switching Part A Cable

Claims (5)

[Claims] 1. A duplex duplex device having a duplex configuration comprising an active system and a standby system, wherein a cable for transmitting and receiving a diagnostic signal connecting the active system and the standby system is used, and one end of the cable is connected to one end of the cable. A pilot signal transmitting / receiving section is provided, and a return section for returning the transmitted pilot signal is provided at the other end of the cable, and a pilot signal for monitoring whether or not the pilot signal transmitting / receiving section normally transmits and receives the pilot signal. A duplex configuration device, comprising monitoring means, wherein the determination of the diagnostic signal from the active system is performed only when the transmission and reception of the pilot signal are normally performed. 2. The duplexing configuration device according to claim 1, wherein when the transmission / reception of the pilot signal is not performed normally, the duplex switching operation is prohibited and an alarm output is transmitted. 3. The duplex duplexing apparatus according to claim 1, wherein the diagnostic signal is for notifying the soundness of the active system equipment to the standby system, and interrupting the signal in the event of an abnormality. 4. A pilot signal is transmitted from a standby system to a working system.
2. The duplex duplex device according to claim 1, wherein the duplex signal is transmitted from the active system to the standby system to detect a state of a cable including connectors for connecting the two systems. 5. A switching check unit provided in the standby system checks both the diagnostic signal and the pilot signal, and determines whether there is an abnormality in the working system and / or whether there is an abnormality in the cable system. The duplex duplex configuration device according to claim 1, wherein: