JPS61216046A - System for deciding expulsion and entry processing in composite system - Google Patents

Abstract

PURPOSE:To allow the entire system for forming an SRCF network to obtain the same recognition with respect to a composition alternation object system by executing the composition alternation processing of the intersystem data sharing control (SRCF) network. CONSTITUTION:When a system B breaks down in the SRCF network composed of systems A,B and C, the systems A and C monitor the system B by a timer and know the breaking down of the system B when they detect time-out. When the systems A and C exchanges an inquiry messages each other and recognize the breaking down of the system B, they decide the expulsion processing of the system B. When the system C in the SRCF network requires its entry, the systems A and B process the entry procedure of the system C. Namely, after they check whether or not there are some troubles in the entry of the system C, the inquiry messages are exchanged between the systems A and B, and they admit the entry of the system C only when they obtain the responses showing the entry procedure has been completed from the overall system forming the SRCF network.

Description

[Detailed Description of the Invention] [Summary] In a complex system in which a plurality of systems form a group, the complex system is equipped with at least a function of entering into the complex system and expelling from the complex system, When a system is expelled from the composite system or a system enters the composite system, all systems except the expelled system among the multiple systems forming the composite system (all other systems are mutually At the point when the recognition of the expulsion system or the entry system becomes the same by exchanging inquiry messages with the expulsion system, the expulsion process for the expulsion system is decided, or the direction of successful entry for the entry system is decided. This is what I did.

[Industrial application field]

The present invention is applicable to a complex system in which a plurality of systems form a group, that is, inter-system data sharing control (SRC).
F) At the time of expulsion processing for a certain system in the network,
Alternatively, the present invention relates to a method for determining the entry processing point.

With the recent improvement in the reliability of data processing systems, it has become possible to easily and economically construct large-scale complex systems in which a plurality of data processing systems are loosely coupled through a shared file memory.

On the other hand, in various industries such as the financial industry, manufacturing industry, and distribution industry, as the business expands, the amount of data and types of data to be processed have increased, resulting in problems with processing capacity or system reliability. , an increasing number of users are using complex systems that are loosely coupled through shared file memory as described above.

In this way, when multiple systems share file memory to form one or more groups, the complex systems forming each group control the so-called inter-system data sharing control (SRCF). ) M, which means that joining the 5RCF network is defined as a "join" operation, voluntarily leaving the 5RCF network, as a "withdrawal" action, or being kicked out of the 5RCF network due to a failure, etc. , for example, is called a 'banishing' action.

Among the above system operations, “enter” and “withdraw” operations are as follows:
This is performed by the 5RCF opening/closing command, but the "exile operation" detects the failure of each system by sending and receiving a certain message at a certain time interval, and only when a timeout is recognized, the system is removed from the system. It is assumed that the SRCFm is down and is controlled to be "exiled" (separated) from the SRCFm.

If each of the plurality of systems forming the 5RCF'fi4 has a different understanding of the system status of the other systems, there is a risk that double access to the shared file (source data) will occur.

For example, in the complex systems (A to E) shown in FIG. 4, it is assumed that system E is in a system down state.

Assume that system A recognizes that system E is down, but system C does not yet recognize that system E is down. That is, system A recognizes four SRCFm, while system C recognizes five 5RCF networks.

Here, for some reason, the complex system becomes A-B,
C-D-f! t word -) f, :, 2 ts+17)S
RCF! 1fii! ,: divided into two 5RCFs
Consider the case where communication between ropes is not possible.

-i, access to the source data in the complex system is as follows: ■ For example, by sequentially sending a circulating message to all systems, access to the source data from more than half of the number of systems forming the SRCFm is controlled. A system that has received permission (referred to as permission means based on majority logic); Alternatively, the 5RCF network is a system that is
If the system is divided into SRCFm, the system belongs to the so-called majority group, which is formed by more systems than the other systems forming the SRCFm.

(2) Alternatively, when the 5RCF network is divided into a plurality of 5RCFyIs and the number of systems forming the plurality of 5RCFy4s is the same, the system belongs to a high priority group.

is configured so that it is allowed.

Therefore, 5RCF consisting of the five systems A-E above.
As mentioned above, each system has a different understanding of system E, which is down, and the 5R
The CF network consists of two 5RCFs called A-B and C-D-E.
For example, in a 5RCF network of A-B, system A knows that system E is down, so
The RCF network recognizes that it is divided into two groups (^-B) and (C-D) with the same number of systems, and among the two 5RCF networks, the group with the higher priority tries to access the router of its own group. do.

On the other hand, in the C-D-H SRCF network, for example, system C recognizes that it has been divided into two systems and a three-system SRCF network, and knows that its own group is the majority group with three systems. , still tries to access the source data.

In this way, SI? The systems forming the CF network have different recognitions of other system states, and if communication between the divided sRcFy4s is not possible, there is a risk of double access to the source data.

Therefore, all systems forming the 3gspcrrm are synchronized so that the recognition of other systems is the same, and configuration change processing (for example, "expulsion", "entry" processing) in the SRCF network is performed. A method is needed to do this.

[Conventional technology]

(1) In the conventional access method for source data (common resources) in the SRCF network, the unit of occupation for the source data is a large unit, for example, a file memory unit, as shown in FIG.

(2) In addition, in the conventional improved access method for source data, as shown in Figure 6, the unit of occupancy is hidden, and as a result, in order to perform exclusive control between systems, for example, The message nosage, the corresponding SRCPI
The source data is sequentially sent to all the systems that make up the source data, and access is only made when consent for access to the source data is obtained from all systems.

(3) Other methods of performing exclusive control between the systems are the majority voting method and the majority method as described above.

I used a priority system.

(41) Regarding the process of changing the configuration of the SRCF network, for example, the above-mentioned circular message was sent and consent was obtained from all the systems forming the SRCFtM.

Problems to be solved by invention C] Therefore, in the fll method, even if there is a change in the number of systems forming the sRcFX, the configuration can be easily changed, but if one system Since the unit that occupies the source data is large, there is a problem in that the source data is not used efficiently.

In method (2), in order to improve the utilization efficiency of the source data, the units in which one system occupies the source data are made smaller, but in order to perform exclusive control between systems, the SRCF If we take the method of obtaining consent from all the systems forming the network, the Sl? If one of the systems forming the CF4M goes down, the source data becomes inaccessible until the down system is ``evicted'', for example by operator intervention, significantly reducing the throughput of the SRCF network. There was a problem.

(3) As mentioned above, if each system forming the SRCF network does not have the same knowledge of the state of the configuration of the SRCF%, double access to source data may occur. was there.

+4) Looking at the "entry" process shown in Figure 7, which is one of the network configuration change processes, when system C goes down, system B performs the "entry procedure" before system A. has been completed, but if system A has not received the [notification of entry procedure completion] from system C, in the conventional method, system A
There was a problem in that the entry process did not proceed because the user had to keep waiting for the "notification of entry procedure completion" from the company.

Generally, configuration change processing in an SRCF network needs to be performed in order for each system targeted for configuration change.
In the conventional method, no subsequent configuration change processing is performed (
There was a problem.

The present invention overcomes the above-mentioned conventional drawbacks and is designed to prevent duplicate access to source data from occurring in an SRCF network in which a plurality of systems form a group, and to prevent configuration change processing from not being performed. The purpose of this system is to provide a system synchronization method so that all systems except the expelling system have a common understanding during configuration change processing such as system expulsion or entry. be.

[Means for solving problems]

FIG. 1 is a diagram illustrating the principle of the determination method for "entry" and "expulsion" processing of the present invention, (a) shows the case of "exile" processing, and (b) shows the case of "entry" processing. It shows.

(a) ``Expulsion'' processing decision means In SRCFM4 consisting of systems A, B, and C, if system B goes down, systems A and C each send a certain message to system B at a certain time interval. So-called timer monitoring (2) is performed during transmission and reception, and when a timeout is detected, it is recognized that system B is down.

Systems A and C then query each other (
At the point when the system B is confirmed to be down by sending the message (2), a decision is made to ``exile'' the system B.

(b) °Entry' Processing Determination Means When there is a request for entry into the 5RCF network from system C to the 5RCF% consisting of systems A and B,
Systems A and B each have "entry procedures"
After performing process ■ and checking whether there are any problems with system C's entry (for example, lack of storage space, whether a correct response has been returned to the entry procedure, etc.), each system can communicate with other systems. , for example, sends an inquiry message ■, and only when all systems forming the 5RCF network receive a response indicating that the above-mentioned "entry procedure" has been completed, an "acceptance" message is sent to the above-mentioned participating system C. ', and in other cases, 'not permitted'.

By performing such a configuration change process of the 5RCF network, all the systems forming the 5RCF network can obtain the same recognition for the system subject to the configuration change.

[Effect]

That is, according to the present invention, when a certain system goes down in a 5RCF network in which a group is formed by a plurality of systems, or when a system requests entry into the 5RCF network, the 5RCFy4 is In each system to be formed, "expulsion procedure" processing or "
After executing the "Entry Procedure" process, for example, send an inquiry message to all other systems except the expulsion system, and execute the "Expulsion Procedure" from all the systems.
Only when we receive a response that the process is completed or the “entry procedure” has been completed,
Since it is designed to determine the "expulsion process" and the "entry" process, the same recognition of the expulsion system or the entry system can be obtained within the sRcFm, and the "entry process" and the "exile process" are determined. Even when processing occurs simultaneously, when synchronization is established in all healthy systems and the "suspicious system" is expelled (synchronization point), there is a final "acceptance" of the participating system.

It is possible to determine "not permitted" and there is an effect that double access to source data will not occur even if communication is not possible between the 5RCF networks divided into a plurality of parts.

〔Example〕

Embodiments of the present invention will be described in detail below with reference to the drawings.

FIG. 2 is a diagram schematically showing an embodiment of the present invention,
FIG. 3 is a time chart showing the recognition operation in the embodiment of FIG. 2, and the same reference numerals indicate the same objects throughout the figures.

In this example, the second section describes the operation when system C goes down during the entry process of system D to the 5RCF network consisting of systems ^, B, and C.
This will be explained using the time chart of FIG. 3 with reference to the drawings.

In FIG. 3, (a) shows the recognition operation in system A, (b) shows the recognition operation in system B, and (c) shows an example of "entry" failure.

In (a) to (c), it is shown that government system D requested entry into the 5RCF network at time 10.

◎-・-System A or System B is 5R in Figure 2.
In the CF network, each system recognizes that it has completed the "entry procedure" at the time marked with ◎.

☆...Indicates that system C went down at time t1.

o - System A or System B connects System D to the S
This indicates that it is regarded as an RCFm constituent system.

◆ - Indicates that system A or system B has finished diagnosis regarding the down system (system C was confirmed to be down in the suspicion message).

★ indicates that system A could not complete the "entry procedure" for system D.

indicates the point in time when System D's “entry” failure was recognized.

In this example (a), before system C goes down, system D joins from system C.

Since system A had received the [notification of entry procedure completion] in response to the request, it could decide on the "entry process" at the time it received the response to the entry from system D (indicated by a circle). This is the case.

In the above "Entry Procedure", each system has a flag corresponding to each system forming the 5RCFSA as shown in Figure 2, and when the "Entry Procedure" is completed, the corresponding flag is The bit is set to 1', and the "notification of entry procedure completion" is sequentially sent to each system forming the 5RCF network, for example, by a circular message.

In this example, system C → system B → system A
In this order, the flag information is sent in the above circular message, so system A receives the information, completes the "entry procedure" for system D, and sets the flag bit to 1. Furthermore, at the time when a response to the "entry procedure" is received from system 0, the above flag (indicated by a solid line) becomes 1°, indicating that all systems forming the 5RCF network It indicates that the “entry procedure” has been completed, and “
This point (synchronization point) at which entry can be determined as a 5RCF network is indicated by the Q symbol.

The 5Rc as a method of recognizing the completion of the "entry procedure"
It goes without saying that all the systems forming the P-network can exchange inquiry messages and recognize each other.

Next, the expulsion process for system C is, for example,
For example, all the systems except the down system C exchange suspicion messages with each other, and each system recognizes that system C is down, that is, the point marked ◆. It can be determined at t3.

Figure 3(b) shows that in the 5RCF network of Figure 2, system B receives "entry procedure completion notifications" from all systems except down system C in the same way as described above, and This shows a case in which it is recognized that the "entry procedures" have been completed.

At this point, the flag bit corresponding to system C (
) is “0”, so HK 3 RC
This means that network F has not received the "entry procedure" completion signal from all the systems, and cannot decide on the "entry process" for system C.

Therefore, all systems except the down system C exchange suspicion messages with each other, and at the time when it is confirmed that each system recognizes that system C is down, that is, at the time marked ◆. At t3, the °exile° process for system C is determined, and the system C is converted to 5RCF.
When the 5RCF network is "expelled" (disconnected) from the network, the 5RCF network will consist of systems A, B, and D, so at this point, the 5RCF! It can be recognized that all the systems forming 1M have completed the "entry procedure", and the "entry process" for system D can be determined.

(c) shows a case in which the above-mentioned "entry" has failed; system A received the "entry procedure" completion notification from system B, but was unable to complete its own "entry procedure"; The flag bit corresponding to system 8 is 0°
As a result, at time t3, it is decided to “exile” system C and remove system C from the 5RCF network.
Even if the 5RcFy4 is recognized to be composed of systems A, B, and D after expulsion (disconnection), the flag bit corresponding to system 8 is still "0", so it is not "entered" after all. This resulted in a failure, and System D also lost the corresponding 5RC.
By being expelled (separated) from the F network, system B will eventually constitute spcFm.

〔Effect of the invention〕

As explained above in detail, the expulsion and entry process determination method in the complex system of the present invention is applicable when a certain system goes down in a 5PCPL where a group is formed by a plurality of systems, or when the 5RCF network is When there is a system requesting entry, each system forming the 5RCF network will process the "expulsion procedure",
Alternatively, after executing the "entry procedure" process, for example, an inquiry message is sent to all other systems except the expulsion system, and all the systems complete the "expulsion procedure" or request that the "entry procedure" be completed. Only when a response of "completion" is received, the "expulsion" processing and "entry" processing are decided, so within the 5RCF network, the same recognition of the expulsion system and the entry system can be obtained. , Even when the entry process and the expulsion process occur at the same time, when synchronization is established in all healthy systems and the suspect system is expelled (synchronization point), the final This has the effect that double access to source data will not occur even if communication is not possible between the divided 5RCF networks.

[Brief explanation of drawings]

Figure 1 is a diagram illustrating the principle of determining the process of expulsion and entry. Figure 2 is a diagram schematically illustrating an embodiment of the present invention. 1 °Entry. A diagram showing the operation as a time chart. FIG. 4 is a diagram illustrating double access to source data. FIG. 5 is a diagram illustrating an example of the prior art. FIG. 6 is a diagram illustrating another example of the prior art. Figure 7 is a diagram explaining the conventional "entry" process. In the drawing, A-E are systems forming a 5RCF network. ■~■ are inter-system message communications. ◎, ○, ☆, ◆, ★ 1 Official, 8 shows the status or recognition result of each system in 5RCF'f7M. 12,1 叡-tO-f □ t2-t 3-temporal time A at iQ month's first actual time 1ri・10moa (6ji1zo, did Ref difference 2 Figure (a) 12,1 叡-tO-f □t2-t 3-temporal time A at nste 4A Mi f9R's ゛ series: ゛ Tree
vs 2 Akira 42 Cutting and planting hat n-join 11 Himing mouth map % 5 Fig. 1 Cutting and cutting 4 shoulders A4 column Slaughter and livestock test 13 drawings 6 Fig. 7 Figure

Claims (2)

[Claims] (1) In a complex system in which a group is formed by a plurality of systems, and which has at least the function of entering the complex system and expelling it from the complex system, the system that forms the complex system When a system that should be expelled from multiple systems exists, and all other systems except the system that should be expelled recognize the validity of the expulsion process for the expelled system, the system is expelled. A method for determining expulsion and entry processing in a complex system characterized by control to determine processing. (2) In a complex system in which a group is formed by a plurality of systems, and which has at least the function of entering and expelling from the complex system, the entry system to the complex system is When this occurs, control is performed so that a decision is made in the direction of successful entry only when all systems, excluding the expulsion system, have completed the "entry procedure" among the multiple systems forming the complex system. An expulsion and entry processing method in a complex system characterized by the following.