JPS59112347A - Managing device of program - Google Patents

Abstract

PURPOSE:To improve the reliability of a system by dividing a program in each function unit and at the occurrence of a fault, separating an abnormal function unit program and a function unit program related to the former program to continue the operation of the system. CONSTITUTION:An individual function controlling part A supervises each function unit program. At the generation of a fault, each of monitoring and controlling circuits A1-An locks the execution of a function unit program to be assigned by a command from a separation controlling part C. At the detection of the fault, a detection signal is sent to a working matrix part B. Therefore, the function unit program runs by an indication from the control part A. The working matrix part B is prepared in consideration of the necessity of separation of other unit programs following the separation of one unit program and the correlation is obtained by the matrix.

Description

[Detailed description of the invention] Baking soda degree vc4: Will the system stop or not? Usually, the program management device that makes the determination is σ].
C P U (Cent,raI!Processi
ngUnit. ) In the system, when an abnormality occurs in the peripheral area, measures are taken to separate the abnormal area so that the abnormality does not spread to the main body side, thereby improving reliability.

10,000, The abnormality that occurred in the CPU itself and the program was due to the component being CPT■, so the CPU stopped.

+Jl] The system has been shut down. This may cause the system to stop due to some errors in the [theta] program, resulting in a decrease in system reliability.

The present invention has been made with the above points in mind.The program is divided into functional units, and when an abnormality occurs, the abnormal functional unit program and the functional unit program related to FIT/C are separated to operate the system. It is an object of the present invention to provide a program management system that can maintain the same level of communication of the system by maintaining the continuity of the system.

Hereinafter, the present invention will be explained in detail based on illustrated embodiments.

The drawing shows one embodiment of the present invention σ), and shows an individual function control unit A that monitors programs divided into each functional unit and locks execution of a required functional unit program when an abnormality occurs, and each functional unit block. A function that associates a program based on the relationship in program execution) IJ section B
When an abnormality occurs, the detachment correction control section C1 determines the rotation position program based on the information from the action matrix section B and issues a helock command to the correction function control section A.
7) The system informs the system that there will be a disconnection due to an abnormality.
It consists of an information notification section that is sent to the control section f or display section, etc.

The individual function control section A monitors each functional unit program, and when an abnormality occurs, receives instructions from the disconnection unit 1@section C and locks the execution of the functional unit program θ) in charge. A1 to AI), and when an abnormality is detected, a configuration signal is sent to the action matrix section B11C. Therefore, the functional unit program runs according to instructions from the control section A.

The action matrix part B is the martyrdom of the five-function control program or is related to each other.

This was created in consideration of the need to separate other previous programs due to the separation of the Aro unit program, and it is related! M) It is realized by +3 Kusu. The results of this σ] matrix are classified into three abnormal levels.

(1) Isolation of an abnormally trusted program: An abnormally occurring functional unit program affects other functional unit programsvII'
Y When it does not affect you.

(11) Separation of the abnormal unit program and related unit programs: At the same time, the functional unit program that occurred and the functional unit program related to the connection are separated.

+1111 Main function of the two system system stop If
Ashi said that there was an error in program Llc for B.

The information notification section has a function of notifying that a locking command (disconnection command) is issued from the disconnection control section C and the unit program for the machine to be locked.

With a configuration like this, the program is divided into functional units, each of which is handled by a device σ], and if an abnormality is discovered during monitoring by the individual function control unit k. With VC, it becomes easy to disconnect unit programs with abnormalities or related rank programs, and the impact is limited to local areas1.As a result.

Since an abnormality in a program of low importance does not affect the main unit nμ of the system, the usability of the system is improved.

In addition, the system can be stopped or not stopped depending on the importance of the program in the system (σ), and the system <7”) MTBF (Mean Time Between Failures) increases significantly.
In addition, when an abnormality occurs (per screen?), the abnormality location can be clearly identified by monitoring by the control unit A and notification by the notification unit, and the function can also correct the problem. Since the system σ〕M
As the TTR (Mean Time to Repair IW) heals, the site where the abnormality occurs is isolated from the system, making it easy to make online corrections.

Furthermore, since the abnormality judgment section has a matrix configuration, 1
Can easily deal with functional expansion and operational changes.

As described above, according to the present invention, the program is divided into each of the four function units and managed so that they can be individually monitored and separated, and the phase pressure is correlated using a matrix.
Since the abnormal unit program and other unit programs that have a specific θ quantity relationship are disconnected at the same time, even if there is an abnormality in the program, the system does not stop immediately, but system operation continues depending on the degree of importance. If it is determined whether or not n1 is low, the operation is continued by disconnection, and the reliability of the system σ) is the same as above.

[Brief explanation of the drawing]

The drawing is a block diagram showing an embodiment of a program management device according to the present invention. A...Individual function control unit, B...IJ control unit, C...Disconnection control unit, D...Earning notification unit.

Claims (1)

[Claims] Il+ Each functional unit + c divided program! an individual function control section that monitors and locks the required functional unit program management device when an abnormality occurs; A disconnection control section that determines which functional unit programs to be locked based on information from the action matrix section when an abnormality occurs and issues a locking command to the individual function control section; ]A program management device comprising an information intelligence section that notifies a control section or a display section, etc.