JPS63299438A - Deciding system for faulty device - Google Patents

Abstract

PURPOSE:To prevent a device on a side where no power source disconnection occurs from being set at a shutdown state, by setting the shutdown state only the device whose power source is disconnected when the power source on one side including a controller that is a host device is disconnected. CONSTITUTION:The titled system is constituted of a low-order device group 1 having a cross-call function and host controller(IOC) 2 and 3 with duplicated constitution, and an operation form is the ACT/SBY operation of the IOCs 2 and 3. When the power source disconnection on an ACT side is generated during the ACT operation of an IOC9, a low-order device 10 goes to a faulty state. Afterwards, by performing the re-start up by switching the ACT/SBY of the host controller, the normal operations of an IOC11 on a no power disconnection side and the low-order device 10 are performed. Thus, since no shutdown state of the device is set immediately even when the fault is generated in the device having the cross-call function and whether or not it is a true fault is decided by restarting up a system by switching the ACT/SBY of the host controller once, it is possible to prevent the device of a normal system from being set at the shutdown state due to the power source disconnection of the device on one side.

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to a failure device determination method, and in particular, when one side including a device having a cross-call function and a control device that is a higher-level device thereof is powered off, The present invention relates to a faulty device determination method for determining only devices that have failed as faulty devices.

[Conventional technology]

Conventionally, in this type of system, when a failure is detected in a device, the device is immediately put into a shutdown state, and the upper control device switches between ACT and SBY. [Problems to be solved by the invention] The above-mentioned conventional failures The device determination method unconditionally puts the device out of operation when a fault is detected, and the ACT of the upper control device is activated.
/SBY is switched, so if all equipment on one side, including the host controller, is powered off, all equipment will be judged to be at fault and will be in a suspended state, even if the power is on the non-power-off side or everything is normal. There is a drawback.

[Means for solving problems]

The faulty device determination method of the present invention is such that in a system that includes devices with a cross-call function, when power is cut off on one side including a control device that is a higher-level device, only the device whose power has been cut off is controlled by the driver. '' state to prevent the equipment on the non-power-off side from going out of operation.

〔Example〕

Next, the present invention will be explained with reference to the drawings.

FIG. 1 is a block diagram showing an example of the configuration of a system when implementing the present invention. Lower device group 1 with cross-call function
and its upper control device (hereinafter referred to as 10C), which has a redundant configuration.
2.3, the operating mode is 10C2,3 ACT/
It is SBY operation.

FIG. 2 is a processing flow diagram of the system in FIG. 1. A failure of the device shown in Figure 1 has been detected (Step 4)
When the IOC is checked to indicate that it has been switched, step 5)
If the switching is still not completed, switch ACT/SBY of 10C2, 3 (shown in FIG. 1) (step 6) and start up the device again. If no failure is detected in step 4, normal operation continues; if a failure is detected, check again in step 5 to see if the IOC has been switched to ACT/SBY; if the change has been made, the device is placed out of operation (step 8). ).

FIG. 3 is an explanatory diagram of the operation of the first embodiment of the present invention, showing the rescue of the non-power-off side device.

If the power on the ACT side is cut off while the l0C9 is in ACT operation, the lower device 10 becomes a failure. Thereafter, by switching ACT/SBY of the higher-level control device and restarting it, the l0C11 and the lower-level device 10' on the non-power-off side can operate normally.

FIG. 4 is an explanatory diagram of the operation of the second embodiment of the present invention, and shows that the power-off side device is placed in a non-operating state.

If the ACT side power is cut off while the l0C12 is in ACT operation, the lower device 13 becomes a failure. At this time, IOC's ACT
I switched /SBY and restarted from l0C14, but
The lower-level device 13' becomes a failure due to power cut-off, and at this point, the lower-level device 13' is determined to be at fault and is put into a suspended state.

Incidentally, FIG. 5 is an explanatory diagram of the operation of an example of the conventional system, and shows the process in which all lower-level devices shift to a non-operating state when one side is powered off. When the ACT side power is cut off while the l0C15 is in ACT operation, the lower-order device 16 becomes inactive due to a failure, and the ACT/SBY of the IOC is switched. And I
Startup is started from QC17, but lower-level device 1 on the power-off side
8 becomes an obstacle, the operation is stopped and l0C1 is restarted.
Switch ACT/SBY of 7. The above steps are repeated, and eventually all the lower-level devices become out of operation.

〔Effect of the invention〕

As explained above, in the present invention, even if a failure occurs in a device having a cross-call function, the device does not immediately go into operation, but the ACT/SBY of the higher-level control device is
Since it is determined whether there is a real failure by switching and restarting the system, it is possible to prevent the normal system from going out of operation due to a power outage of one of the systems.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing an example of the configuration of a system when the present invention is implemented, FIG. 2 is a processing flow diagram of the system in FIG. 1, and FIGS. An explanatory diagram of the operation of the second embodiment, and FIG. 5 is an explanatory diagram of the operation of a conventional example. 1...Lower device group, 2, 3, 9, 11. '12゜1
4.15.17... Upper control device (IOC), 4...
・Failure detection determination processing, 5... Upper control device switching determination processing, 6... Upper control device switching processing, 7... Lower device restart processing, 8... Operation suspension state transition processing of the failed device , 10.10', 13.13', 16°16'
, 18...lower device. -Broom 1 Enyo number 3r5! J $ 2 Garden $ 4 Act 5F3Y δIIY A(-T ACT ;513YL --
-m--=J SBY ACT L---+ ---1

Claims (1)

[Claims] In a system that has equipment with a cross-call function, when the power is cut off on one side, including the control equipment that is the higher-level equipment, only the equipment whose power was cut off is placed in a non-operating state, and the equipment on the non-power-off side is A faulty device determination method characterized by preventing the device from going out of operation.