JPS58129548A - Computer system - Google Patents

Abstract

PURPOSE:To prevent system down, by reading out and deciding a system operation mode which is set by switching a mode, and controlling the operation of a program, in a computer system having plural system operation modes. CONSTITUTION:A mode switching program 1 receives an operator's instruction and switches a system operation mode 2 to an on-line mode or an adjusting mode. An on-line utility program 3 decides whether an output of the system operation mode 2 is the on-line mode or not, and if it is the on-line mode, an off-line utility program is not executed. An on-line program 4 is capable of its single execution, irrespective of an output of the system operation mode 2. Accordingly, execution of the utility program due to a malfunction, and various faults given to a computer system as its result are prevented.

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a computer S/system, and particularly to a computer system suitable for avoiding system down due to operational errors.

As a conventional technology for ensuring safety and reliability in computer systems, ring protection (FLing pr
(password), password (password)
) Area method, Ki-one method, etc. Of these, glue/guro protection and password methods will be explained in detail.

(1) The software that makes up the computer system can be broadly divided into an operating system and application software, but the multiple program groups that make up each of them are further divided into multiple hierarchies depending on their functional levels. Configure.

Ring protection is a mechanism established for the purpose of improving system reliability, and in order to preserve programs and data, it is necessary to have the next number as an attribute of programs and data in accordance with the hierarchy mentioned above. It is possible for a certain program to access programs and data that are at the same level or lower than your own program, but it is possible to access programs and data that are at a higher level than your own program! It was designed to prohibit This prevents application programs from accessing higher-level operating system programs and data, preventing them from accidentally destroying the operating system, or causing the system to go down. be.

iii) PasswordPassword is a function provided mainly from the viewpoint of data confidentiality in computer systems.Specific grograms or data IO accesses are only possible when a code called a password is entered correctly. It is.

This prevents p1 superimposed data from being discovered and destroyed by a malicious third party.

It is also possible to provide a plurality of user types and make a specific program executable only in response to input from the corresponding user type, but this is also a type of password.

These techniques for ensuring safety and reliability have the following problems.

In other words, the ringgrotechnique is a computer system that stipulates access rights t [statically (or fixedly) in the relative relationship between the constituent programs and data.'' Although it cannot fully follow the environment, it lacks flexibility.

On the other hand, the purpose of passwords is security, and
It is not possible to secure enough funding to meet the operating conditions of the computer system.

In a system that controls a plant online, such as a control computer, system failure due to operator error is highly unlikely to have a fatal impact that could affect the operation of public institutions operating the plant or even human lives. I have one of the computer systems! In order to improve reliability and safety, there was a strong desire for a method that would be very conclusive and decisive.

For example, in process control computers, program development →
Operation is achieved through steps such as system startup → debugging → online/line operation, but when entering the on-line operation, carelessly entering other operation modes is not allowed. Regardless of the time, mode conversion is easily possible by operating a switch provided on the operation panel, and no countermeasures against such erroneous operations have been taken in the past.

However, conventional measures to improve safety and reliability are focused on countermeasures after an accident occurs, and the ninth measure to prevent system failure is not covered in any way. Intermediate memory tags give meaning to the data and determine whether or not it can be written to based on the relationship with the program, but this cannot protect against erroneous operations, etc., and the above-mentioned There is no way to avoid such an inconvenience.

The purpose of the present invention is to program the program 2 according to the driving mode.
The object of the present invention is to provide a computer system that can be controlled in this manner.

The first ml is T
o, 6° mode switching 10gtsuml received the instructions from Operation V-1 and changed the system to ``online mode 1t*!r1''
1ml+-)'J K@Replacement JL Le@#75 Iy
Z-Tailitape ■Dara A1 determines whether the output of D2 is in "online mode" every time the system is operated, and
“Online mode”! IK must run an offline courtesy program.

The online program 4 can be executed independently regardless of the output of the system operation mode 20.

The mode switching program 1 executes the process' shown in the flowchart shown in FIG. First, in step 21, it is determined whether the mode switching request is "online mode" or "adjustment mode". If the mode is "adjustment mode", the process moves to step 22, and the system operation mode t "adjustment" (
111) of the digital signal, and the processing ends. It was.

If the mode is "online mode", proceed to step 28.

System operation mode "tr online" (digital signal 101) and process mt ends.

Maku, offline utility program 3 is the third
As shown! ! Executes the process of the flowchart contents. Contents of system operation mode 2 t Bladder removal in step 31, ζ
In step 32, the contents of the operating amount are determined.

That is, if the mode is "adjustment mode", a predetermined process corresponding to the mode is executed in step 33 and the process ends, but if the mode is "online mode", the utility program is not executed. Flow treatment ll'f
t: Finish.

FIG. 4 is a program configuration diagram showing another embodiment of the present invention. In this embodiment, when the program is installed (To or After promotion), the program type 5 specified is set proportionally. Accordingly, at the beginning of each of the utility program S> and the online pro gamer A4, a common subroutine for determining whether or not the operation is possible is called as shown in FIG.

Operation possible in step 50 - all 10
The evaluation Is is provided at the beginning of the program, and its evaluation Is is shown in a flowchart such as No. 6 @. That is, in step 51, the type content t-bladder is extracted from the program type 5, and in step s2, the read content is determined.If the 0 determination content is the aitility program 3, in step s3, the system operation mode 2t-read, and step 54, “Online Mo,
mode” or “adjustment mode”. If you are in "online mode", all processing ends, but if you are in "adjustment mode", you return to the main program and step 5
The predetermined process of step 5 is executed. Note that in the program type determination at step 52, if it is determined that the program is an online program, the processing after % returns to the main program.

With the above configuration, it is no longer necessary to create the system operation mode judgment process mt individually in each program, and the type of the program (online program, utility program) can be changed freely as necessary. Become.

FIG. 7 is a word configuration diagram showing still another embodiment of the present invention. This embodiment is an example in which the execution of a program can be controlled in units of command words according to the operation mode. The process in this case is shown in FIG. 8 as a flowchart. In other words, an instruction execution control unit 51 for determining the system operation mode is provided in a part of the operand part of all machine instructions, and the level is higher (the numerical value is smaller) than in system operation mode 2. If the value is low, the command is executed, and if the value is low, the command is invalidated.According to this embodiment, the movement of the program can be controlled for each command word in accordance with the system operation mode. It is possible to ensure detailed safety.

FIGS. 9(II) and 9(b) are explanatory diagrams showing an example in which the present invention is applied to a t-2 computer (load sharing system) system.

In case of load share de eplex system.

Normally, all programs should be able to run on both systems A and B, and when one system is running, computer load distribution is at risk.
For example, when the B system of 9th E (k4 is down), some functions are degenerated and both programs of the B system are run. The present invention is designed to prevent the system from operating on the t-A system as shown in Figure 9. In other words, it can be used as a system operating mode and as a system operating mode.
.

Two "single-system operation modes" are provided, and the A-system program stored in the A-system is as shown in Figure 9 (for Xun's dual-system operation, and for the single-system operation in Figure 9(b)). The B system program stored in the A system can be enabled only when one system is down.If you set K like this, you can use the dual system computer with the purpose of ensuring high reliability. It becomes possible to further improve the reliability of the system.

According to the implementation of the present invention, it is possible to avoid execution of a utility program due to an erroneous operation and various failures caused to the computer system as a result. Also.

System dynamics can be controlled with a wide range of precision from the program level to the command level, corresponding to the operating mode, with the aim of increasing reliability. Furthermore, high reliability f' is required 1
A useful guideline that can be applied to heavy systems to improve reliability and safety! 1 is wide.

In this manner, the present invention is a very simple device, and can contribute to techniques for improving reliability and safety of computer systems, which have become increasingly important in recent years, from the viewpoint of the overall system.

[Brief explanation of the drawing]

15th! il is a program configuration diagram showing an embodiment of the present invention, and FIG. 2 is a mode switching program 70- of the present invention.
The chart and ms diagram are the 70-chart of the offline NEETIG quadrature according to the present @, and FIG. 4 is a program configuration diagram showing another embodiment of the present invention. FIG. 5 is a flowchart of the embodiment shown in FIG. 4, and FIG. 6 is a detailed diagram of a subroutine for determining whether or not the operation can be performed in accordance with the process shown in FIG.
70-chart, FIG. 7 is a word structure 1 showing still another embodiment of the present invention, FIG. 8 is a 7a-chart of the embodiment of FIG. 7, and FIGS. FIG. 2 is an explanatory diagram showing an example in which @ is also used in a dual computer system. l...Mode switching program 4 grams, 2 mountain system operation mode, 3...Utility program, 4...On condolence Plan 2 Figure 7 Kasumi Berasoto Koshirae 80 Funeral Q A system A ice B destination

Claims (1)

[Claims] 1. In a computer system having a plurality of system operation modes including an online mode meeting, a mode switching means is provided for setting a mode state in response to a request for mode switching, and the following mode is set by the mode switching means: A computer system characterized by a means for reading and determining a system operation mode and controlling the operation of the program. 2. At the time of program registration, the program type is designated after registration, and the determination of the program type specified prior to the determination of the operation mode 'f: % mold' Claim 1
Computer system described in section.