JPS5920056A - Setting system of unit in use in duplicated constituting device - Google Patents

Abstract

PURPOSE:To operate stably a duplicated constituting device, by discriminating the generation of a failure and the degree of it with a control command generated from a circuit of both devices if a failure takes place in a device in use, and controlling switchingly the failure of the device in use to a device of normal operation for omitting a controller used in common. CONSTITUTION:If a failure takes place to any of duplicated devices 101', 102', a failure monitor circuit of an opposite unit transmits the generation of the failure and its degree to the devices 101' or 102' of the own device via failure information lines 203, 205. Then, whether the device of the opposite side is in use or the spare state is transmitted to the device 101' or 102' of the own device via status information lines 204, 206. As a result, when both the devices 101', 102' are normal, the present state is kept and if one of them is failed, the normal device is chosen as the device in use and the failed device is chosen as a spare. If both the devices are failed, the device normal at a predetermined condition is chosen as the device in use device and the failed device is chosen the spare device.

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a method for setting a current unit in a duplex configuration device. An example of a method for setting a current unit in a conventional duplex configuration device is shown in FIG. i.e. a duplicated unit)
When a fault occurs in 101 or 102, information on the fault is transmitted to the control unit 107, which is configured as a third unit, via the fault W information fin 1o31105. In the control unit 107, the units (101, 10) are duplicated based on the transmitted information.
11:N, 102 is determined, and the information is transmitted to each of the duplicated 22) 11:N and 102 via control lines 104 and 106. In this case, if both units are normal, a control output is sent to make one of the units active and the other unit standby. In addition, if a failure occurs in either unit, a control output is sent to make the normal unit active and to make the failed unit standby. In addition, if a failure occurs in both units, a control output is sent out to make the abnormal unit with the major failure active and the normal unit as a backup, and the control output is redundant depending on each case. Units 101 and 102 are set for active use or backup use. However, the conventional method requires a control unit that is unrelated to the operation of the redundant configuration device itself, so configuring the device with a duplex configuration increases the number of units and requires additional control units. However, the disadvantage is that the number of devices required increases. Furthermore, since the duplicated units are controlled by a common control unit, there is a drawback that if a failure occurs in the control unit, the original operation of the device may be stopped.

The present invention solves the above-mentioned problem, and while monitoring mutual failures between the own unit and the other unit, each unit determines whether to set its own status to active or spare based on the obtained information. One embodiment of the present invention will be described below with reference to FIG. 2.

As shown in FIG. 2, in the present invention, the units 101' and 102' constituting the duplex configuration device have a function of switching to an operating state or a non-operating state by self-control. is equipped with a circuit for detecting a failure in its own unit and for monitoring a failure in the other unit, and a failure information line 203.205 and a status information line 204.
Wire 206.

Next, a method for setting the active unit according to the present invention will be explained. Duplexed unino l-101', 102'
When a fault occurs in either unit, the fault monitoring circuit of the other unit informs each other via the fault information lines 203 and 205 that the fault has occurred in the other unit and the extent of the fault in its own unit) 101' or td1o2. ', and also transmits to its own unit 101' or 102' via status information lines 204, 206 whether the other party's unit is currently in the active state or the standby state. The failure detection circuit detects the occurrence of a failure in its own unit, its degree and status, and the failure occurrence and degree of failure in the other unit;
The occurrence of a failure and the extent of the failure are determined based on four types of status information, and it is determined whether to place the own unit in an operating state or a non-operating state. In this case, when the decisions of both units match, the following steps are taken. In other words, if you decide to put both units into operation (
If both units are normal), the one determined first has priority. Additionally, if you decide to put both units in a non-operating state (if both units are faulty), set a priority for each unit in advance, and use that information and the above four pieces of information to make the normal unit work. The abnormal unit is configured to decide to put the unit in the inoperative state, and the unit that it decides to put in the working state becomes the working unit. The determined unit becomes a reserve unit. In other words, in the present invention, the occurrence of a fault and the extent of the fault are determined based on the control commands issued from both of the circuits mentioned above, and if both units are normal, the current state is maintained and one of the units is determined to have a fault. For example, the normal unit is set as the working unit and the abnormal unit is set as a spare, and if both units fail, the normal unit is set as the working unit and the abnormal unit is set as a spare under preset conditions. .

As described above, the present invention allows each duplicated unit to monitor its own failure and the failure of the other unit, thereby controlling the switching of the currently used abnormal unit to the normal unit between the two units. The controller common to both units can be omitted. Therefore, it is possible not only to reduce the number of devices to be installed, but also to be able to switch units without fear of stopping the original operation of the duplex configuration device.

[Brief explanation of drawings]

Figure 1 is a block diagram showing the conventional switching method;
The figure is a block diagram showing the configuration of an embodiment of the present invention. 101, 102...unit

Claims (1)

[Claims] (1) A redundant configuration device is composed of two units that have the function of switching between an operating state and a non-operating state by self-control, and each unit is equipped with a circuit for detecting faults in the own unit and monitoring faults in the other unit. In preparation, both units monitor the presence or absence of failures in their own and other units, the magnitude of the failure, and the status of use of the active or standby unit, and if a failure occurs in the active unit, a control command issued from the circuits of both units will detect the failure. and a method for setting a current unit in a duplex configuration device, the method comprising determining the extent of the failure and performing switching control between the currently used abnormal unit and the normal unit.