JPS5939780B2 - Control device using multi-system processing device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a device that controls devices with different control reliability by operating three or more processing devices in parallel and synchronously.

When using a computer as a control processing device to control various external devices (controlled devices) with high reliability, multiple processing devices are used to form a multiplex system, and the control output output by each processing device is Generally, a method is adopted in which external equipment is controlled by a majority signal or a coincidence signal based on (output signal for control), and when three or more processing devices are used, the control output of each processing device is controlled by a majority circuit using a majority decision circuit. A method is adopted in which external equipment is controlled by the output signal, that is, the majority vote signal.

However, in the control system using the majority signal, the majority circuit is generally a single-layer system, so if the reliability of the majority circuit is to be increased, the majority circuit becomes complicated and expensive.

Furthermore, if all external devices with different required control reliability are controlled using majority voting signals, a majority voting circuit must be provided even for external devices with low required control reliability, that is, general reliability equipment. It is uneconomical. Therefore, it is important to select a control method depending on the required control reliability. In order to do this, the external devices are classified according to the level of control reliability required, and three processing units are operated in parallel and synchronously. Reliable equipment is controlled by a majority signal of each control output of the processing device, and other external equipment, that is, general reliable equipment, is controlled by a coincidence signal of the control output of any two processing devices,
Alternatively, control may be performed using the control output of any one processing device.

In other words, the reliability of control must be significantly increased for equipment such as railway switches and signals that can cause train derailment or collision due to failure or malfunction, directly impacting human life. Therefore, it is a so-called high-reliability device that requires highly reliable control, and such a device needs to be controlled only by the majority signal of the control output of each processing device. In addition, among general reliability equipment, for example, equipment that does not affect human life even if a malfunction or failure occurs, such as information broadcasting equipment and information display equipment at stations, should be controlled to a medium level of reliability. good, so-called medium-reliability equipment; therefore, such medium-reliability equipment is
Control may be performed using matching signals of the control outputs of any two processing devices. Furthermore, among general reliability equipment, such as a typewriter, which is inconvenient if it breaks down but is not directly related to control, in other words low reliability equipment, the control output of one of the processing units It can be controlled with. However, in order to control each device as described above, if one of the multiple processing devices breaks down, a staff member must select and switch so that the control output of the normal processing device is given to the external device. However, the selection and switching operations are cumbersome, and there is a time delay due to manual switching.

The present invention performs a coincidence determination of control outputs of each processing device,
Using the judgment results, it is possible to select a processing device to be used to control medium-reliability equipment or low-reliability equipment, and to switch automatically, allowing for quick switching without requiring human intervention. An object of the present invention is to provide a control device that can improve the reliability of control of a sexual device or a low-reliability device using a simple and inexpensive device. In order to achieve this objective, the present invention determines whether the control outputs for highly reliable equipment or the control outputs for general reliability equipment outputted by each processing device match each other, and A control output used for controlling a sex device is automatically selected from output signals of processing devices outputting matching control outputs.

In this way, it is possible to quickly select and switch the processing device used to control the general reliability equipment, and the general reliability equipment is controlled by the normally operating processing equipment. The reliability of control of general reliability equipment is significantly improved, and the device is simple and inexpensive.
The embodiments shown in the drawings will be described below.

In FIG. 1, reference numerals 1, 2, and 3 are processing units that are operated in parallel and synchronously, and the first control output for the highly reliable equipment 4 is connected to a conductor 7a,
7b, 7c, the second control output for medium reliability device 5 is output to conductors 8a, 8b, 8c, and the third control output for low reliability device 6 is output to conductors 9a, 9b, 9c. . 10
is a known majority circuit that takes a majority vote of each first control output among the control outputs of each processing device 1, 2, and 3, and supplies a majority vote signal to the highly reliable device 4.

Reference numeral 11 denotes a coincidence determination circuit that inspects the first control outputs output by each of the processing devices 1, 2, and 3 and outputs a signal indicating a matching state. In this example, if each first control output matches each other, A determination is made and a signal indicating a processing device outputting a first control output that matches other first control outputs is output.

Such a match determination circuit 11, as shown in FIG.
Exclusive OR circuits 20a, 20b, 20c, negative logic OR circuits 21a, 21b, 21c, inverters 22a, 2
2b, 22c, and preset type flip-flop 2
3a, 23b, and 23c. In this coincidence determination circuit, the circuit 20a detects an anticoincidence of the first control outputs from the conductors 7a and 7b, and the circuit 20a detects the anticoincidence of the first control outputs from the conductors 7b and 7b.
The circuit 20c receives the anticoincidence of the first control output from the conductor 7a.
, 7c, the OR circuit 21a detects the OR signal of the output signals of the circuits 20a, 20c, and the OR circuit 21b detects the OR signal of the output signals of the circuits 20a, 20c.
The OR circuit 21c receives the OR signal of the output signal of 0b from the circuit 2.
OR signals of the output signals 0b and 20c are output, respectively. Further, the inverters 22a, 22b, 22c are connected to OR circuits 21a, 21b, 21c and flip-flops 23a,
23b and 23c, and its output signal resets the subsequent flip-flops 23a, 23b, and 23c. This coincidence determination circuit 11 has flip-flops 23a, 23b, and 23c set in advance, so that
If the first control outputs of the processing units 1, 2, and 3 match, logic signals ``1'' are output from the conductors 12, 13, and 14 connected to the set output terminals of the flip-flops 23a, 23b, and 23c, respectively. do.

Furthermore, if the first control output from the conducting wire 7a does not match the first control output from the other conducting wires, the output signal of the OR circuit 21a becomes a logic signal "0", so the flip-flop 23a is set to memorize this fact. Similarly, if the first control output from the conductor 7b does not match the other first control outputs, the flip-flop 23b stores this fact, and the first control output from the conductor 7c does not match the other first control outputs. If so, the flip-flop 23c stores that fact. Therefore, the second
The match determination circuit shown in the figure, when the first control output of the processing device 1 matches at least one of the first control outputs of the other processing devices 2 and 3, sends a first signal indicating this to the conductor 1. Similarly, if the first control output of the processing device 2 matches another first control output, a second
A signal is output to the conductor 13, and when the first control output of the processing device 3 matches another first control output, a third signal is output to the conductor 14.
Output to. 15 selects a control output to be used for controlling the medium reliability device 5 according to the output signal of the coincidence determination circuit 11;
A first selection processing circuit for processing uses signals input from conductors 12, 13, and 14 to select any two of the second control outputs input from processing devices 1, 2, and 3 via conductors 8a, 8b, and 8c. The control unit selects one, matches the selected two second control outputs, and supplies the matched output to the medium reliability device 5.

That is, this circuit 15 outputs two predetermined second control outputs when signals are input from all of the conductors 12, 13, and 14 (when all first control outputs match). select and supply the matching output to device 5 and conductor 12.
, 13, and 14 (when the first control outputs do not match), the second control output is not selected, and therefore the second control output is not supplied to the device 5. .

Also, when the first signal and the second signal are input from any two conductors 12 and 13, the second control output from the processing devices 1 and 2 corresponding to the conductors 12 and 13 is selected and the matching output is output. is supplied to the device 5. Such a first selection processing circuit 15 includes an AND circuit 30 as shown in FIG.
a, 30b, 30c, 30d, 31a, 31b, 31c
, 31d, OR circuits 32a, 32b, inverter 33a
, 33b, 33c, 34a, 34b, and 34c, and a matching circuit using an exclusive OR circuit 35 and an inverter 36 that inverts its output.

Each AND circuit is a 4-input AND circuit, with conductors 12,
In addition to inputting the output signal of the match determination circuit 11 from 13 and 14, a second control output is inputted from any one of the conducting wires 8a, 8b, and 8c. Moreover, AND circuits 30b, 30c,
Among the input terminals 30d, 31b, 31c, and 31d,
Inverters 33a, 33b, 33c, 34a, 34b, 34 are connected to any one of the conductors 12, 13, 14.
c is provided. OR circuit 32a is AND circuit 30
The OR signal of the output signals of a, 30b, 30c, and 30d is output to one input terminal of the circuit 35, and the OR circuit 32b
The OR signal of the output signals of the AND circuits 31a, 31b, 31c, and 31d is output to the other input terminal of the circuit 35. Third
The first selection processing circuit 15 shown in the figure includes conductors 12, 13, 1
4 is the signal "1", the AND circuits 30a, 3
1a selects the second control output from conductors 8a and 8b and outputs the matching output to device 5, and conductors 12, 13, 1
If only the conductors 12 and 13 among the conductors 4 have the signal "1", the AND circuits 30b and 31b select the second control output from the conductors 8a and 8b and output the matching output to the device 5.

Similarly, if only the conductors 13, 14 among the conductors 12, 13, 14 have the signal "1", the coincidence output of the second control output from the conductors 8b, 8c is output to the device 5, and only the conductors 12, 14 If the signal is 2, a matching output of the second control outputs from the conductors 8a and 8c is output to the device 5. And the conductor 12,1
If at least two of 3 and 14 are signals 101, the second control output is not selected, and therefore the device 5
No control output is input to. 16 is a match determination circuit 11
A second selection processing circuit selects and processes one third control output to be supplied to the low reliability device 6 according to the output signal of the conductor 9a, using the signals input from the conductors 12, 13, and 14.
, 9b, 9c, one of the third control outputs input from the processing devices 1, 2, 3 is supplied to the low reliability device 6.

That is, in this circuit, among the conductors 12, 13, 14,
When a signal is input from at least two conductors,
One predetermined third control output is selected and supplied to the low reliability device 6. This circuit 16 also includes conductors 12,
When no signals are input from at least two of 13 and 14, the third control output is not selected and the third control output is not supplied to the low reliability device 6. As shown in FIG. 4, the first selection processing circuit 16 includes four AND circuits 40a, 40b, 40c, 40d, an OR circuit 41,
and three inverters 42a, 42b, and 42c.

This circuit 16 includes each AND circuit 40a, 40b, 40c.
, 40d, the AND circuits 30a, 30b, 30c, 30d, the OR circuit 32a, and the inverter 33a in the circuit of FIG. , 33b, and 33c. The output of the OR circuit 41 is supplied to the low reliability device 6. Therefore, when all of the first, second, and third signals are input from the conductors 12, 13, and 14, the second selection processing circuit 16 shown in FIG. If the output is selected and only the third signal from the conductor 14 is not input, the AND circuit 40b selects the third control output from the conductor 9a.

Similarly, if only the first signal is not input, the third control output from the conductor 9b is selected, and if only the second signal is not input, the third control output from the conductor 9c is selected. The third control output is not selected unless all or any two of the first, second, and third signals are input. Each device 4, 5, 6 is
It is controlled and driven by control outputs input from the circuits 10, 15, and 16 in the previous stage.

In this control device, a coincidence determination circuit 11 determines the coincidence state of the first control outputs outputted by each processing device 1, 2, and 3, checks which processing device is operating normally, and uses this determination result. The selection processing circuit 15 automatically selects a processing device to be used to control the medium-reliability device 5 from among normally operating processing devices, and also to use it to control the low-reliability device 6. A selection processing circuit 16 automatically selects a processing device from among normally operating processing devices.

According to this control device, the general reliability devices, that is, the medium reliability devices 5 and the low reliability devices 6 are controlled by the control output of the normally operating processing device, so that the high reliability devices 4 are controlled. General reliability equipment 5, without reducing the reliability of
It is possible to increase the reliability of the control of No. 6.

Furthermore, since the selection processing circuits 15 and 16 are simpler and cheaper than the majority circuit 10, the general reliability equipment 5,
6 can be improved at a small cost. Next, other embodiments of the match determination circuit and each selection processing circuit will be described with reference to FIG. The coincidence determination circuit 1V includes three AND circuits 5 at the subsequent stages of flip-flops 23a, 23b, and 23c in the circuit shown in FIG.
1a, 51b, and 51c are provided, and the output signal of each AND circuit is configured to be supplied to each selection processing circuit 15', 16' via conducting wires 61, 62, and 63. The AND circuit 51a is a two-input AND circuit into which the set outputs of the flip-flops 23a and 23b are input.
b is 3 to which the set outputs of the flip-flops 23b and 23c and the set output of the flip-flop 23a are input.
The input AND circuit, the AND circuit 51c, connects each set output of the flip-flops 23a and 23c and the flip-flop 2.
This is a 3-input AND circuit into which the 3b Nori set output is input. Therefore, this coincidence determination circuit 11' detects the AND circuit 51 if at least the control outputs of the processing devices 1 and 2 match.
Only the output of the AND circuit 51b becomes the logic signal "F", if only the control output of the processing device 1 does not match, then only the output of the AND circuit 51b becomes the logic signal "F", and if only the control output of the processing device 2 does not match, the AND circuit 51b becomes the logic signal "F". Only the output of the circuit 51c becomes the logic signal "1".

The first selection processing circuit 15' includes two sets of three two-input AND circuits 52a, 52b, 52c, 53a, 53b, 53.
c, a selection circuit consisting of two 3-input OR circuits 54a and 54b to which the outputs of each set of AND circuits are input, an exclusive OR circuit 55 to which the outputs of each OR circuit 54a and 54b are input, and its output. A matching circuit consisting of an inverter 56 for inverting the signal is provided. As shown in the figure, each AND circuit includes AND circuits 51a, 51b, and 51b of the match determination circuit 11'.
1 of the conductors 61, 62, 63 connected to the output terminal of 50c
One terminal is connected to the conductors 8a and 8, and the other terminal is connected to the conductors 8a and 8.
b, 8c, and the OR circuit 54a
, 54b to the circuit 55 are selected by the output signal of the coincidence determination circuit 11'. This circuit is 15! is each processing device 1
, 2 and 3 all match, or when the control outputs of the processing devices 1 and 2 match each other, the AND circuits 52a and 53b select the second control output from the conductors 8a and 8b. , if only the control outputs of the processing device 1 do not match, the AND circuits 52b and 53b cause the conductors 8b and 8c to
If only the control output of the processing device 2 is inconsistent, the AND circuits 52c and 53c select the second control output from the conducting wires 8a and 8c.

The selected control outputs are supplied to an OR circuit 55 via OR circuits 54a and 54b, and matched by a matching circuit consisting of this circuit 55 and an inverter 56 at the next stage. The coincidence output from said general circuit is supplied to equipment 5. The second selection processing circuit 16' includes three two-input AND circuits 57.
a, 57b, 57c, and a 3-input OR circuit 58 into which the output of each AND circuit is input.
The output of is supplied to the device 6.

Each input terminal of each AND circuit is connected to a conductor 9 as shown in the figure.
a, 9b, 9c and one of the conducting wires 61, 62, 63. This circuit 16' determines whether the control outputs of the processing devices 1, 2, and 3 all match, or if the control outputs of the processing devices 1 and 2 match each other.
The AND circuit 57a supplies the third control output from the conductor 9a to the device 6, and if only the control output of the processing device 1 does not match, the AND circuit 57b supplies the third control output from the conductor 9b to the device 6. , if only the control outputs of the processing device 2 do not match, the AND circuit 57c supplies the control output from the conducting wire 9c to the device 6. According to the apparatus shown in FIG. 5, in addition to the effects obtained by the embodiments shown in FIGS. , since the coincidence determination circuit 1V outputs a signal meaning that only the control output of the processing device 1 is inconsistent and a signal meaning that only the control output of the processing device 2 is inconsistent. The apparatus is much simpler than the embodiment shown in FIG.

In the above embodiment, the coincidence determination circuits 11 and 11' determine the coincidence state of the first control output, but the coincidence determination circuit 11, 11' determines the coincidence state of the first control output.
The matching state of the control output or the third control output may be determined.

Furthermore, since the selection processing circuits 15 and 15' select the control signal to be output to the device 5 from among the output signals of the processing devices that output normal control signals, the selection processing circuits 15 and 15'
In most cases, the two signals match in the matching circuit in 15', and therefore the selection processing circuits 15, 15' may be replaced with selection processing circuits 16, 16'. Furthermore, although the above-mentioned embodiment is an example of a triple system control method using three processing devices, the present invention provides a method for controlling three or more processing devices.
It can also be applied to the control system of the multiplex system used. 4
Even when the present invention is applied to an n-fold system control system using more than one processing device, the external devices are classified according to the required control reliability, and high-reliability equipment is the output of the n-fold system majority decision circuit. The control outputs of the other devices may be controlled by signals, and the other devices may be controlled by the control outputs of the processing devices outputting the matching control outputs by determining whether the control outputs output by each processing device match.

Furthermore, in the above embodiment, the first and second selection processing circuits are configured with electronic circuits, but they can be configured with either an electronic circuit or a relay circuit depending on the purpose of control, or both can be configured with an electronic circuit or a relay circuit. They can also be used together.

As described above, the present invention outputs a majority vote signal of the highly reliable device control output from the processing device to the highly reliable device, whereas it outputs the majority signal of the control output for the highly reliable device from the processing device to the general reliable device. A match state of the control outputs is determined by a match determination circuit, and using this determination result, a selection processing circuit selects and outputs a control output for general reliability equipment from a processing device outputting a matched control output. This makes it possible to quickly select and switch the processing equipment used to control general reliability equipment without requiring human intervention, without reducing the reliability of control of high reliability equipment. The reliability of control of reliable equipment can be significantly improved.

Furthermore, since the match determination circuit and the selection circuit are simpler and cheaper than the majority decision circuit, the device is simple and inexpensive.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing an example of a control device according to the present invention, FIG. 2 is a diagram showing an embodiment of a coincidence determination circuit, and FIG.
FIG. 4 is a diagram of one embodiment of the selection processing circuit, FIG. 4 is a diagram of one embodiment of the second selection processing circuit, and FIG. 5 is a diagram of another embodiment of the coincidence determination circuit and the first and second selection processing circuits. 1, 2, 3: Processing device, 4, 5, 6: External equipment to be controlled, 10: Majority decision circuit, 11, 11': Match determination circuit,
15, 15': first selection processing circuit, 16, 16': second
Selection processing circuit.

Claims (1)

[Claims] 1. A control output for high reliability equipment whose required control reliability is high and a control output for general reliability equipment whose required control reliability is low, respectively, and in parallel. At least three processing devices that operate synchronously, a majority circuit that outputs a majority signal of a control output for high reliability equipment to the high reliability equipment among the output signals of each processing device, and an output from the intervening processing device. A match determination circuit that monitors signals and outputs a signal indicating a match state, and a match determination circuit that uses the output signal of the match determination circuit to detect signals from among the processing devices that are outputting matched control outputs. A control device using a multi-system processing device, comprising: a selection processing circuit that selects a control output for a general reliability device and outputs the selected control output to the general reliability device. 2. The control device according to claim 1, wherein the selection processing circuit is means for selecting one of the control outputs from each processing device and supplying it to a general reliability device. 3. The control device according to claim 1, wherein the selection processing circuit is a circuit that selects two of the control outputs from each processing device and supplies the matched outputs to a general reliability device. 4. Three processing devices are used, and the coincidence determination circuit transmits at least a signal indicating that the control signals from the first processing device and the second processing device match, and a control signal from the first processing device. Claims 1 or 2, which is a circuit that outputs a signal indicating that only the outputs are inconsistent and a signal indicating that only the control signal from the second processing device is inconsistent; The control circuit according to item 3.