WO2022085218A1 - Information processing system, and method for constructing database - Google Patents

Abstract

This method for constructing a database, in which there is used an information processing device that includes a memory and a processor that executes a first program, comprises first to third steps. In the first step, one bit of data in a designated position in the memory is inverted. In the second step, first information is collected, the first information relating to an abnormality occurring during execution of the first program by the processor after the one bit of data was inverted. In the third step, second information relating to the designated position and the first information are associated with each other and registered in a database. The relationship between a software error and the effect thereof can thereby be easily confirmed.

Description

How to build an information processing system and database

This disclosure relates to an information processing system and a method for constructing a database.

With the increasing integration and miniaturization of semiconductor devices, transient bit errors (soft errors) in memory are rapidly increasing. Soft errors are caused by, for example, collisions of alpha particles and cosmic ray neutrons. Applying memory that can cause soft errors to the system can result in anomalies caused by soft errors. Therefore, it is desirable to confirm the relationship between soft errors and their effects in advance.

Japanese Unexamined Patent Publication No. 2019-86429 (Patent Document 1) discloses a soft error test method for confirming the effect on an electronic device by irradiating the electronic device to be tested with neutrons and reproducing the soft error. ing.

Japanese Unexamined Patent Publication No. 2019-86429

However, in the technique described in Patent Document 1, it is necessary to prepare a neutron generation source, and the cost for confirming the relationship between the soft error and its influence increases.

This disclosure has been made in view of the above problems, and its purpose is to provide a method for constructing an information processing system and a database that can easily confirm the relationship between soft errors and their effects.

According to an example of the present disclosure, the information processing system includes a first information processing device and a database. The first information processing device includes a processor that executes a first program and a second program that is interrupted during execution of the first program, and a memory. The second program is an instruction to invert the 1-bit data at a specified position in the memory and an instruction to collect the first information regarding an abnormality that occurred in the execution of the first program after inverting the 1-bit data. And, including. The information processing system further includes a registration unit that registers the second information and the first information regarding the designated position in the database in association with each other.

According to this disclosure, the first information and the second information are associated and stored in the database. As a result, by referring to the database, it is possible to easily confirm the influence when a soft error occurs in the information processing apparatus that executes the first program.

In the above disclosure, the second information includes the name of the variable written at the specified position.

According to this disclosure, it becomes easy to confirm the effect when data garbled due to a soft error occurs on the value of the variable stored in the memory.

In the above disclosure, the first information includes at least one of the first identification information for identifying the content of the abnormality and the second identification information for identifying the source code executed when the abnormality occurred in the first program. include.

According to this disclosure, by referring to the first identification information, it is possible to easily confirm what kind of abnormality occurs. Alternatively, by referring to the second identification information, it is possible to easily confirm in which source code of the first program the abnormality occurs.

In the above disclosure, the registration unit further registers a memory dump indicating the contents of the memory when an abnormality occurs in the database in association with the first information and the second information.

According to this disclosure, for example, when an abnormality occurs in the information processing apparatus that executes the first program, the memory dump corresponding to the abnormality information having the same content as the abnormality is compared with the memory content of the information processing apparatus. Will be done. The comparison results help identify the cause of the anomaly. Therefore, the time required for analysis of the cause of the abnormality can be shortened.

In the above disclosure, the information processing system 1 searches the database for the first information that matches the analysis target information regarding the abnormality generated in the second information processing apparatus that executes the first program, and corresponds to the searched first information. A search unit for outputting the second information is further provided.

The information processing system 1 searches the database for the first information that matches the analysis target information regarding the abnormality generated in the second information processing apparatus that executes the first program, and the second information corresponding to the searched first information and the second information. A search unit that outputs a memory dump may be further provided.

According to these disclosures, as a candidate for the cause of the abnormality generated in the second information processing apparatus, a soft error at the position indicated by the output second information can be easily mentioned. As a result, the time required for analysis of the cause of the abnormality can be shortened.

Furthermore, when a memory dump is output, the comparison result between the memory dump and the contents of the memory of the second information processing device is useful for identifying the cause of the abnormality. Therefore, the time required for analysis of the cause of the abnormality can be further shortened.

In the above disclosure, the registration unit associates the first information and the second information with the third information indicating whether or not the cause of the abnormality corresponding to the first information is the inversion of 1-bit data in the database. Register further. The search unit excludes the first information corresponding to the third information indicating that the cause of the abnormality is not the inversion of the 1-bit data from the search target. According to this disclosure, the time required for searching is shortened.

According to an example of the present disclosure, a method of constructing a database using an information processing device including a processor for executing a program and a memory includes first to third steps. The first step is a step of inverting 1-bit data at a specified position in the memory. The second step is to collect the first information regarding the abnormality that occurred in the execution of the program by the processor after inverting the 1-bit data. The third step is a step of associating the second information and the first information regarding the designated position with each other and registering them in the database. This disclosure also makes it easy to confirm the relationship between soft errors and their effects.

According to this disclosure, the relationship between soft errors and their effects can be easily confirmed.

It is a schematic diagram which shows the structure related to the construction of the database provided in the information processing system which concerns on embodiment. It is a schematic diagram which shows the structure related to the use of the database provided in the information processing system which concerns on embodiment. It is a schematic diagram which shows the hardware configuration example of the safety IO unit shown in FIG. It is a block diagram which shows the hardware configuration example of the computer shown in FIG. 1 and FIG. It is a block diagram which shows the functional structure of a safety IO unit. It is a block diagram which shows the functional structure of a computer. It is a figure which shows an example of the table included in a database.

The embodiments of the present disclosure will be described in detail with reference to the drawings. The same or corresponding parts in the drawings are designated by the same reference numerals and the description thereof will not be repeated.

§1 Application example In various fields such as aerospace systems, automobiles, medical equipment, communication equipment, and industrial equipment, abnormalities due to garbled memory data may occur. The present disclosure may be applied to systems in such various fields. Hereinafter, an information processing system incorporated in the FA (factory automation) field will be described as an application example of the present disclosure, but the application example of the present disclosure is not limited to the FA field.

FIG. 1 is a schematic diagram showing a configuration related to the construction of a database provided in the information processing system according to the embodiment. The information processing system 1 exemplified in FIG. 1 includes a safety IO (Input / Output) unit 100, a database 200, a computer 300, a PLC (programmable logic controller) 400, a coupler 500, and a safety controller 600. ..

In the example shown in FIG. 1, information indicating the correspondence between the soft error generated in the main memory 104 of the safety IO unit 100 and its influence is stored in the database 200. The safety IO unit 100, PLC400, coupler 500 and safety controller 600 are prepared for the construction of the database 200. Alternatively, the safety IO unit, PLC, coupler and safety controller installed in the production line at the start-up stage may be used as the safety IO unit 100, PLC400, coupler 500 and safety controller 600, respectively.

The safety controller 600 and the safety IO unit 100 are connected to the coupler 500 as a local unit via the local bus 10. The "local unit" is a general term for any unit connected via the local bus 10.

The PLC400 executes standard control for any control target (not shown) according to a standard control program created in advance. "Standard control" is a general term for processes for controlling a controlled object in accordance with predetermined requirement specifications. The control target is, for example, a servo motor, a robot, or the like.

The coupler 500 mediates the exchange of data between the PLC 400 and the safety controller 600. The coupler 500 is electrically connected to the PLC 400 via a field network. The field network is a communication medium for realizing data transmission for FA. In the field network, frame transmission is possible at a predetermined cycle, and the data arrival time for each node in the network is guaranteed. As an example of such a protocol in which the data arrival time is guaranteed, EtherCAT (registered trademark) is adopted for the field network.

The coupler 500 transmits the data received from the PLC 400 to the local unit (safety controller 600 and safety IO unit 100) via the local bus 10. When the coupler 500 receives data from the local unit, the coupler 500 prepares to store the received data in the next communication frame.

The safety controller 600 executes safety control for an arbitrary control target. "Safety control" is a general term for processes to prevent human safety from being threatened by equipment or machines. The "safety control" is designed to meet the requirements for realizing the safety function specified in, for example, IEC 61508.

The safety IO unit 100 is connected to the safety controller 600 via the local bus 10. Further, an arbitrary safety device (not shown) is connected to the safety IO unit 100. Safety devices include light curtains, emergency stop buttons, safety door switches and the like.

The safety IO unit 100 executes an IO task at a predetermined cycle (hereinafter referred to as "safety task cycle"). In the IO task, the process of receiving the input signal from the safety device, the process of providing the input signal to the safety controller 600, the process of accepting the command from the safety controller 600, the process of calculating according to the command, and the process of outputting the calculation result are output. Processing to be done is included. Further, the IO task includes a process of detecting an abnormality in the safety IO unit 100 and a process of notifying the safety controller 600 of the detected abnormality.

The safety controller 600 executes safety control according to the input signal provided from the safety IO unit 100. For example, the safety controller 600 cuts off the power supply to the controlled object of the PLC 400 when an input signal indicating the intrusion of a person is provided from the safety device which is a light curtain. Alternatively, the safety controller 600 cuts off the power supply to the controlled object of the PLC 400 when the input signal indicating the button press is provided from the safety device which is the emergency stop button. When the safety controller 600 cuts off the power supply to the controlled object of the PLC 400, the safety controller 600 stops the communication between the devices constituting the information processing system 1.

In this way, the safety IO unit 100 is directly involved in safety control for preventing the safety of human beings from being threatened. Therefore, the safety controller 600 cuts off the power supply to the controlled object of the PLC 400 even when an abnormality occurs in the safety IO unit 100.

The computer 300 is, for example, a general-purpose notebook computer. The computer 300 exchanges data with the PLC 400 according to a communication standard such as Ethernet / IP (registered trademark). Further, the computer 300 can access the database 200, updates the database 200, and performs a search process using the database 200.

A soft error occurs in the safety IO unit installed in the production line that operates 24 hours x 365 days, and if an abnormality occurs in the safety IO unit due to the soft error, the production line is stopped. In such a production line, it is preferable to shorten the downtime as much as possible. Therefore, it is desired to be able to immediately analyze the cause of the abnormality. In order to meet such a demand, the information processing system 1 according to the present embodiment generates a pseudo soft error in the main memory 104 provided in the safety IO unit 100, and information on an abnormality that occurs thereafter (hereinafter, , "Abnormal information") is registered in the database 200.

Specifically, as shown in FIG. 1, in step S1, the computer 300 designates the position of one bit in the main memory 104 of the safety IO unit 100 via the PLC 400, the coupler 500, and the safety controller 600. ..

Next, in step S2, the safety IO unit 100 inverts 1-bit data at a designated position in the main memory 104. The safety IO unit 100 collects abnormality information regarding an abnormality that has occurred within a predetermined time after inverting the 1-bit data.

When an abnormality occurs in the safety IO unit 100, the safety controller 600 cuts off the power supply to the controlled object of the PLC 400. At this time, the communication between the devices of the information processing system 1 is also stopped.

After that, when the communication between the devices of the information processing system 1 is started again, the collected abnormality information in step S3 is transmitted to the PLC 400 via the safety controller 600 and the coupler 500. The computer 300 acquires the abnormality information from the PLC 400.

Next, in step S4, the computer 300 registers the position information regarding the position specified in step S1 and the abnormality information acquired in step S3 in the database 200 in association with each other.

As a result, the location information and the abnormality information are associated and stored in the database 200. As a result, by referring to the database 200, the influence when a soft error occurs in the safety IO unit 100 can be easily confirmed.

FIG. 2 is a schematic diagram showing a configuration related to the use of the database 200 provided in the information processing system 1 according to the embodiment. As shown in FIG. 2, the information processing system 1 includes a safety IO unit 100A, a PLC 400A, a coupler 500A, and a safety controller 600A in addition to the database 200 and the computer 300.

The safety IO unit 100A, PLC400A, coupler 500A and safety controller 600A are installed on the production line in operation. The safety IO unit 100, PLC400, the coupler 500 and the safety controller 600 installed in the production line at the start-up stage may be used as the safety IO unit 100A, the PLC400A, the coupler 500A and the safety controller 600A, respectively.

When an abnormality occurs, the safety IO unit 100A generates abnormality information regarding the abnormality. The generated abnormality information is transmitted to the safety controller 600A, the coupler 500A and the PLC 400A. The computer 300 acquires the transmitted abnormality information from the PLC 400A as analysis target information (step S11). The computer 300 may directly acquire the analysis target information from the safety IO unit 100A.

Next, the computer 300 searches the database 200 for abnormal information that matches the acquired analysis target information (step S12). The computer 300 outputs the position information corresponding to the searched abnormality information (step S13). For example, the computer 300 displays location information.

Thereby, the analyst can cite a soft error of the position data indicated by the position information in the main memory 104 of the safety IO unit 100A as a candidate for the cause of the abnormality generated in the safety IO unit 100A. As a result, the analyst can determine whether or not the cause of the abnormality is a soft error by confirming the position data indicated by the position information. As described above, by analyzing the cause of the abnormality of the safety IO unit 100A using the database 200 of the present embodiment, the time required for the analysis can be shortened.

§2 Specific example <Hardware configuration of safety IO unit>
FIG. 3 is a schematic diagram showing a hardware configuration example of the safety IO unit shown in FIG. The safety IO unit 100 exemplified in FIG. 3 includes a processor 102, a main memory 104, a storage 106, a local bus controller 108, a safety IO module 110, and a buffer memory 112. These components are connected to each other via the processor bus 114.

The processor 102 corresponds to an arithmetic processing unit that executes control operations related to signal input / output and management functions necessary for realizing safety control, and is configured by a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or the like. Will be done.

The main memory 104 is composed of volatile memories such as DRAM (Dynamic Random Access Memory) and SRAM (Static Random Access Memory). The SRAM uses a flip-flop as the structure of the storage unit, does not require a refresh operation, and has an advantage that it can operate at a higher speed than the DRAM. Therefore, it is preferable to use SRAM as the main memory 104.

DRAM with a stack type structure has high soft error resistance. On the other hand, in an SRAM having a flip-flop structure, the soft error tolerance is lowered due to miniaturization. Therefore, when the main memory 104 configured by the SRAM is used, a soft error is likely to occur in the main memory 104. Hereinafter, it is assumed that the main memory 104 is a SRAM.

The main memory 104 has a stack area, a data area, and a text area. The stack area is an area for temporarily saving data held in a register built in the processor 102. When a function process (subroutine) occurs during execution of the main routine, the data held in the register is temporarily saved in the stack area in order to interrupt the main routine. The data area is an area in which various variables and the like are stored. The text area is the area where the program is expanded.

The storage 106 is composed of, for example, a non-volatile storage device such as an SSD (Solid State Drive) or an HDD (Hard Disk Drive). The storage 106 stores an executable program 120 for realizing an IO task, a library 122, and an interrupt program 124.

The executable program 120 includes a group of instructions that specify control operations related to signal input / output and management functions necessary for realizing an IO task. The executable program 120 is composed of one or more program files.

The interrupt program 124 is a program for collecting information registered in the database 200. The interrupt program 124 is interrupted and executed with the highest priority during the execution of the executable program 120.

The local bus controller 108 exchanges data with a device (for example, a safety controller 600, a coupler 500) to which the safety IO unit 100 is connected via the local bus 10.

The safety IO module 110 is electrically connected to the safety device, accepts inputs such as detection results by the safety device, and outputs a signal to the safety device.

The buffer memory 112 temporarily holds a communication frame for transmitting the local bus 10. The buffer memory 112 holds an input data group and an output data group. The safety IO module 110 stores the input signal received from the safety device in the buffer memory 112 as a part of the input data group. Further, the local bus controller 108 stores the input signal received from the coupler 500 or the safety controller 600 in the buffer memory 112 as a part of the input data group. The output data group is transmitted to the safety controller 600 and the coupler 500 by the local bus controller 108 every safety task cycle. Further, the output data group is transmitted from the coupler 500 to the PLC 400.

The safety IO unit 100A shown in FIG. 2 also has the hardware configuration shown in FIG. However, the interrupt program 124 may not be stored in the storage 106 of the safety IO unit 100A.

<Computer hardware configuration example>
FIG. 4 is a block diagram showing a hardware configuration example of the computer 300 according to the present embodiment shown in FIGS. 1 and 2.

The computer 300 is typically a personal computer having a general-purpose architecture. As shown in FIG. 4, the computer 300 includes a processor 302, a memory 304, a storage 306, a display 308, an input device 310, and a USB controller 312. These components are connected to each other via an internal bus 314.

The processor 302 is composed of a CPU, an MPU, and the like, and realizes various functions as described later by reading various programs stored in the storage 306, expanding them in the memory 304, and executing the programs. The memory 304 is composed of a volatile storage device such as DRAM or SRAM.

The storage 306 is composed of, for example, a non-volatile storage device such as an HDD or SSD. The storage 306 stores an OS (Operating System) 320, a DB construction program 322 related to the construction of the database 200, and a search program 324 for searching for the cause of an abnormality in the safety IO unit 100A.

The display 308 is a device that displays the calculation result of the processor 302 or the like, and is composed of, for example, an LCD (Liquid Crystal Display) or the like.

The input device 310 is a device that receives input, and is composed of, for example, a keyboard and a memory.

The USB controller 312 exchanges data with and from the PLC400 and 400A via the USB connection. Further, the USB controller 312 accesses the database 200 via the USB connection.

<Functional configuration of safety IO unit>
FIG. 5 is a block diagram showing a functional configuration of the safety IO unit 100. As shown in FIG. 5, the safety IO unit 100 includes a task execution unit 11, a write / read processing unit 12, a data inversion unit 13, a variable name extraction unit 14, an abnormality information collection unit 15, and a dump process. Including part 16.

The task execution unit 11 is realized by the processor 102 shown in FIG. 3 executing the executable program 120. The write / read processing unit 12 is realized by the processor 102 executing the library 122. The data inversion unit 13, the variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 are realized by the processor 102 executing the interrupt program 124. The processor 102 executes the interrupt program 124 in response to an interrupt instruction received from the computer 300.

The task execution unit 11 executes an IO task every safety task cycle. Specifically, the task execution unit 11 performs a control operation using at least one of the data included in the input data group stored in the buffer memory 112 and the variables stored in the main memory 104. Further, the task execution unit 11 stores the data obtained by the control operation in the buffer memory 112 as a part of the output data group.

For example, the task execution unit 11 stores the input signal from the safety device included in the input data group in the buffer memory 112 as a part of the output data group. As a result, the input signal from the safety device is output to the safety controller 600 in the next safety task cycle. As a result, the safety controller 600 can recognize that the safety device detects the intrusion of a person.

The task execution unit 11 generates abnormality information 130 regarding the abnormality in response to the occurrence of some abnormality in the control operation, and stores the generated abnormality information 130 in the buffer memory 112 as a part of the output data group. As a result, in the next safety task cycle, the abnormality information 130 is transmitted to the safety controller 600, the coupler 500, and the PLC 400. As a result, the safety controller 600 can recognize that an abnormality has occurred in the safety IO unit 100.

The abnormality information 130 includes identification information for identifying the content of the abnormality (hereinafter referred to as “abnormal ID”) and identification information for identifying the source code executed when the abnormality occurred (“code information”). It is referred to as). The code information describes the file name of one program file including the running source code of one or more program files constituting the executable program 120, and the running sword code in the one program file. Includes the line number.

Abnormalities in the safety IO unit 100 include, for example, unacceptable operations (division by 0, operations in which the solution becomes an imaginary number in real number operations, etc.), access to unallocated storage areas, and the like.

The write / read processing unit 12 receives the write instruction and the read instruction, and executes the write / read of the designated variable to the main memory 104, respectively. As shown in FIG. 5, the write / read processing unit 12 manages the variable management table 17. The variable management table 17 associates a variable name with an address in which data indicating the value of the variable is held in the main memory 104 for each variable. The write / read processing unit 12 executes writing / reading of the designated variable by using the variable management table 17.

When the data inversion unit 13 receives the interrupt instruction, the processing of the task execution unit 11 is temporarily stopped. In the interrupt instruction, the position of 1 bit in the main memory 104 (hereinafter, referred to as “reversed position”) is specified. The inverted position is represented by the address and the bit position within the address.

The interrupt program 124 includes an instruction to invert 1-bit data at a specified position in the memory. Therefore, the data inversion unit 13 generates a write instruction to invert the 1-bit data at the inversion position designated by the interrupt instruction according to the instruction. The data inversion unit 13 outputs the generated write instruction to the write / read processing unit 12. As a result, the 1-bit data at the inverted position in the main memory 104 is inverted. When the data inversion is completed, the data inversion unit 13 restarts the processing of the task execution unit 11.

The variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 generate a data group registered in the database 200 (hereinafter, referred to as “registration data group 140”). The generated registration data group 140 is stored in the buffer memory 112 as a part of the output data group.

The variable name extraction unit 14 extracts the name of the variable (hereinafter, referred to as “variable name”) written in the inverted position specified by the interrupt instruction as a part of the registration data group 140. The variable name extraction unit 14 may extract the variable name 141 corresponding to the address representing the inversion position from the variable management table 17.

The interrupt program 124 includes an instruction for collecting abnormality information regarding an abnormality that occurred in the execution of the executable program 120 after inverting the 1-bit data. Therefore, the abnormality information collecting unit 15 collects the abnormality information 142 regarding the abnormality that occurred in the IO task after the 1-bit data is inverted as a part of the registration data group 140 according to the instruction. Specifically, the abnormality information collecting unit 15 monitors the output data group of the buffer memory 112 in a predetermined period after the 1-bit data is inverted. The abnormality information collecting unit 15 copies the abnormality information 130 in response to the addition of the abnormality information 130 to the output data group in a predetermined period, thereby displaying the abnormality information 142 that becomes a part of the registration data group 140. Generate.

The predetermined period is P times the safety task cycle. P is appropriately set according to the contents of the executable program 120, the length of the period allowed for constructing the database 200, and the like.

For example, when one bit of the area where the address is written is inverted, the address may represent a position that does not exist in the main memory 104. Therefore, if the address is read out in the next safety task cycle, an abnormality will occur. In such a case, there is no problem even if P = 1. However, when one bit in the area where the variable is written is inverted, an abnormality may occur because the control operation using the value of the variable is executed Q times. In such a case, it is preferable to set an integer greater than or equal to Q as P.

On the other hand, if the value of P is large, the time required to construct the database 200 becomes long. Therefore, P is set according to the length of the period allowed for the construction of the database 200.

The dump processing unit 16 executes dump processing of the main memory 104 in response to an abnormality occurring in the IO task after the 1-bit data is inverted. Specifically, the dump processing unit 16 monitors the output data group of the buffer memory 112 in a predetermined period after the 1-bit data is inverted. The dump processing unit 16 executes dump processing of the main memory 104 in response to the addition of the abnormality information 130 to the output data group in a predetermined period, and generates a memory dump 143 as a part of the registration data group 140. .. The memory dump 143 is a file in which a part or all of the contents of the main memory 104 is recorded.

The variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 use the registration data group 140 as a part of the output data group after a predetermined period has elapsed after the 1-bit data is inverted, and the buffer memory 112. Store in. Alternatively, the variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 buffer the registration data group 140 as a part of the output data group immediately after the collection of the abnormality information 142 and the generation of the memory dump 143 are completed. It may be stored in the memory 112.

Even if the 1-bit data in the main memory 104 is inverted, an abnormality does not always occur. For example, when 1-bit data in a frequently overwritten area is inverted, the data is overwritten with a correct value immediately after the inversion. In such a case, no abnormality occurs. Alternatively, no abnormality occurs even when the 1-bit data in the area where reading is not performed is inverted. If no abnormality occurs between the time when the 1-bit data is inverted and the predetermined period elapses, the registration data group 140 contains only the variable name 141, and includes the abnormality information 142 and the memory dump 143. not.

In the safety task cycle after the registration data group 140 is stored in the buffer memory 112, the output data group including the registration data group 140 is transmitted to the PLC 400 via the local bus 10 and the field network. As a result, the PLC 400 acquires the registration data group 140. If an abnormality occurs within a predetermined period after the 1-bit data is inverted and communication between the devices constituting the information processing system 1 is stopped, the registration data is used in the safety task cycle after the communication is resumed. The output data group including the group 140 is transmitted to the PLC 400.

The safety IO unit 100A shown in FIG. 2 also has the functional configuration shown in FIG. However, in the safety IO unit 100A, the data inversion unit 13, the variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 may be omitted. Also in the safety IO unit 100A, the task execution unit 11 generates the abnormality information 130 regarding the abnormality in response to the occurrence of some abnormality in the control operation, and the generated abnormality information 130 is used as a part of the output data group in the buffer memory. Store in 112. As a result, in the next safety task cycle, the abnormality information 130 is transmitted to the safety controller 600, the coupler 500, and the PLC 400.

<Computer function configuration>
FIG. 6 is a block diagram showing a functional configuration of the computer 300. As shown in FIG. 6, the computer 300 includes an instruction unit 31, a registration unit 32, and a search unit 33. The instruction unit 31 and the registration unit 32 are realized by the processor 302 shown in FIG. 4 executing the DB construction program 322. The search unit 33 is realized by the processor 302 executing the search program 324.

The instruction unit 31 generates an interrupt instruction with the safety IO unit 100 as the transmission destination, and sets the generated interrupt instruction in the PLC 400. As a result, the interrupt instruction is transmitted from the PLC 400 to the safe IO unit 100 via the field network and the local bus 10. The interrupt instruction specifies the inversion position of 1 bit in the main memory 104 of the safety IO unit 100. The inverted position is represented by an address and a bit position as described above.

The registration unit 32 registers a new record in the table 20 included in the database 200 in response to the acquisition of the registration data group 140 by the PLC 400 after the interrupt instruction is set in the PLC 400 by the instruction unit 31.

FIG. 7 is a diagram showing an example of the table 20 included in the database 200. As shown in FIG. 7, the table 20 includes one or more records 21 in which the position information 22, the abnormality information 23, the memory dump 24, and the flag 25 are associated with each other.

The flag 25 is information indicating whether or not the cause of the abnormality indicated by the abnormality information 23 is the inversion of the 1-bit data at the position indicated by the position information 22. If the cause of the abnormality is the inversion of 1-bit data, the flag 25 is set to "True". If the cause of the abnormality is not the inversion of 1-bit data, the flag 25 is set to "False". If it is unknown whether the cause of the abnormality is the inversion of 1-bit data, the flag 25 is set to "Unknown".

The registration unit 32 sets the position information 22 including the address and the bit position representing the inversion position designated by the interrupt instruction and the variable name 141 included in the registration data group 140 acquired in response to the interrupt instruction. .. Further, the registration unit 32 sets the abnormality information 142 and the memory dump 143 included in the registration data group 140 as the abnormality information 23 and the memory dump 24, respectively. The registration unit 32 adds a record 21 in which the set position information 22, the abnormality information 23, and the memory dump 24 are associated with the flag 25 in which "Unknown" is set as a default to the table 20.

The registration unit 32 updates the flag 25 of each record 21 in response to the input to the input device 310 (see FIG. 4). The analyst may determine whether or not the cause of the abnormality is the inversion of 1-bit data by checking the position information 22, the abnormality information 23, and the memory dump 24 of each record 21. The analyst may input the update instruction of the flag 25 to the input device 310 according to the determination result.

The instruction unit 31 generates an interrupt instruction for each of all the bits of the main memory 104, and sequentially sets the generated interrupt instruction in the PLC 400. Specifically, the instruction unit 31 sets the interrupt instruction corresponding to the kth bit in the PLC 400. After that, after the record 21 is added to the table 20 based on the registration data group 140 acquired in response to the interrupt instruction corresponding to the kth bit, the instruction unit 31 issues an interrupt instruction corresponding to the k + 1st bit. Set to PLC400. In this way, the record 21 corresponding to each of all the bits of the main memory 104 is added to the table 20.

As described above, even if the 1-bit data in the main memory 104 is inverted, an abnormality does not always occur. Therefore, if the registration data group 140 does not include the abnormality information 142 and the memory dump 143, the registration unit 32 may omit the addition of the record 21 to the table 20.

The search unit 33 acquires the abnormality information 130 transmitted from the safety IO unit 100A to the PLC 400A as analysis target information. When the search unit 33 acquires the analysis target information, the search unit 33 searches the database 200 for the abnormality information 23 that matches the analysis target information. The search unit 33 outputs the position information 22 and the memory dump 24 corresponding to the searched abnormality information 23. Specifically, the search unit 33 displays the position information 22 and the memory dump 24 on the display 308.

The search unit 33 may exclude the abnormality information 23 corresponding to the flag 25 indicating that the cause of the abnormality is not the inversion of 1-bit data from the search target. Specifically, the search unit 33 excludes the record 21 whose flag 25 is "False" from the search target in the search. Alternatively, the search unit 33 may exclude the record 21 whose flag 25 is "False" or "Unknown" from the search target in the search. This reduces the time required for the search.

<Flag update example>
An example of updating the flag 25 will be described. For example, when the abnormality ID included in the abnormality information 23 indicates an abnormality due to the exception handler call, the flag 25 is updated as follows. The exception handler is executed, for example, when an unauthorized memory access or the like occurs during the execution of an IO task.

For example, the analyst suspects that the cause of the abnormality is unauthorized memory access from the abnormality ID, and confirms the code information included in the abnormality information 23 and the memory dump 24. If the code information indicates the source code after the function processing is completed, it is suspected that the return address is garbled. The return address is temporarily saved from the register of the processor 102 to the stack area of the main memory 104 when the function is called, and is returned to the register after the function processing is completed. Therefore, the analyst confirms the position information 22 and determines whether or not the inverted 1-bit position is the stack area. When the inverted 1-bit position is the stack area, the analyst checks the memory dump 24 and the source code of the executable program 120 to determine whether the cause of the abnormality is the inversion of the 1-bit data. I can judge. The analyst may update the flag 25 according to the determination result.

<Steps S1 to S4>
In step S1 shown in FIG. 1, the processor 302 operating as the instruction unit 31 generates an interrupt instruction in which the inversion position is specified, and sets the generated interrupt instruction in the PLC 400. The PLC 400 transmits the set interrupt instruction to the coupler 500 via the field network. The coupler 500 transmits an interrupt instruction to the safety IO unit 100 via the local bus 10. As a result, the safety IO unit 100 receives an interrupt instruction specifying the inverted position.

In step S2, the processor 102 of the safety IO unit 100 temporarily suspends the IO task in response to receiving the interrupt instruction. The processor 102 operates as a data inversion unit 13 and inverts 1-bit data at the inversion position designated by the interrupt instruction in the main memory 104. Then, the processor 102 operates as the task execution unit 11 and restarts the IO task.

Further, the processor 102 that operates as the variable name extraction unit 14, the abnormality information collection unit 15, and the dump processing unit 16 generates the registration data group 140. Specifically, the processor 102 extracts the variable name 141 that identifies the variable written in the inverted position from the variable management table 17 as a part of the registration data group 140. The processor 102 of the registration data group 140 by copying the abnormality information 130 in response to the addition of the abnormality information 130 to the output data group in a predetermined period after the 1-bit data is inverted. Generates anomaly information 142 as part. Further, the processor 102 executes a dump process of the main memory 104 in response to the addition of the abnormality information 130 to the output data group in a predetermined period, and generates a memory dump 143 as a part of the registration data group 140. ..

In step S3, the local bus controller 108 transmits the output data group including the registration data group 140 to the coupler 500 via the local bus 10. The coupler 500 transmits the registration data group 140 to the PLC 400 via the field network. Then, the processor 302 operating as the registration unit 32 acquires the registration data group 140 from the PLC 400.

In step S4, the processor 302 sets the position information 22 including the address and the bit position representing the inversion position specified by the interrupt instruction and the variable name 141 included in the registration data group 140. Further, the processor 302 sets the abnormality information 142 and the memory dump 143 included in the registration data group 140 as the abnormality information 23 and the memory dump 24, respectively. Then, the processor 302 adds the record 21 associating the position information 22, the abnormality information 23, and the memory dump 24 with the flag 25 in which "Unknown" is set as a default to the table 20. Further, the processor 302 updates the flag 25 of each record 21 in response to the input to the input device 310. As a result, the table 20 of the database 200 is updated.

The above steps S1 to S4 are repeated for each bit of the main memory 104. As a result, for each of all the bits of the main memory 104, information indicating the influence when a soft error is generated in the bits in a pseudo manner is accumulated in the database 200.

By referring to the database 200 constructed in this way, the influence on the safety IO unit 100A when a soft error occurs in the main memory 104 can be easily confirmed.

As described above, each record 21 in the table 20 includes the position information 22. The position information 22 includes the name (variable name) of the variable written at the inverted 1-bit position. Therefore, it becomes easy to confirm the influence when data garbled due to a soft error occurs on the value of the variable stored in the main memory 104.

Further, the abnormality information 23 includes an abnormality ID that identifies the content of the abnormality and code information that identifies the source code that was executed when the abnormality occurred. As a result, the analyst can determine what kind of abnormality occurs when a soft error occurs in the main memory 104, or which source code of the executable program 120 causes the abnormality. It can be easily confirmed.

Further, in the table 20 of the database 200, a memory dump 24 indicating the contents of the main memory 104 when an abnormality occurs is also registered in association with the position information 22 and the abnormality information 23. As a result, for example, when an abnormality occurs in the safety IO unit 100A installed on the operating production line, the memory dump 24 corresponding to the abnormality information 23 having the same content as the abnormality and the main memory 104 of the safety IO unit 100A Can be compared with the contents of. The comparison results help identify the cause of the anomaly. Therefore, the time required for analysis of the cause of the abnormality can be shortened.

<Steps S11 to S13>
In step S11 shown in FIG. 2, the processor 102 of the safety IO unit 100A operates as the task execution unit 11, generates abnormality information 130 in response to the occurrence of an abnormality, and outputs the generated abnormality information 130 as a part of the output data group. Is stored in the buffer memory 112. As a result, the abnormality information 130 is transmitted to the coupler 500 via the local bus 10. The coupler 500 transmits the abnormality information 130 to the PLC 400 via the field network. Then, the processor 302 acquires the abnormality information 130 from the PLC 400, and sets the acquired abnormality information 130 as the analysis target information.

In step S12, the processor 302 operates as the search unit 33 and searches the table 20 of the database 200 for the abnormality information 23 that matches the analysis target information. At this time, the processor 302 may use the flag 25 to narrow down the search target.

In step S13, the processor 302 outputs the position information 22 and the memory dump 24 corresponding to the searched abnormality information 23. Specifically, the processor 302 causes the position information 22 and the memory dump 24 to be displayed on the display 308.

The analyst can easily cite a soft error at the position indicated by the output position information 22 as a candidate for the cause of the abnormality that occurred in the safety IO unit 100A. As a result, the time required for analysis of the cause of the abnormality can be shortened. Further, the comparison result between the output memory dump 24 and the contents of the main memory 104 of the safety IO unit 100A is useful for identifying the cause of the abnormality. Therefore, the time required for analysis of the cause of the abnormality can be further shortened.

<Modification example>
In the above description, a soft error is generated in a pseudo manner in the safety IO unit 100. However, the device that generates a pseudo soft error is not limited to the safety IO unit 100, and may be various information processing devices.

In the above description, the abnormality information 130 and 142 include the abnormality ID and the code information. However, the abnormality information 130 and 142 may include only one of the abnormality ID and the code information. Even if only one of the abnormality ID and the code information is registered in the database 200 as the abnormality information 23, the influence of the soft error can be confirmed.

In the above description, the computer 300 includes an instruction unit 31, a registration unit 32, and a search unit 33. However, the computer 300 may include the instruction unit 31 and the registration unit 32, and another computer may include the search unit 33.

§3 Addendum As described above, this embodiment includes the following disclosures.

(Structure 1)
Information processing system (1)
The first information processing device (100) and
With a database (200)
The first information processing apparatus (100) is
A processor that executes the first program (120) and the second program (124) that is interrupted during the execution of the first program (120).
Including memory (104)
The second program (124)
An instruction to invert 1-bit data at a specified position in the memory (104), and
Includes an instruction to collect first information (142, 23) regarding an abnormality that occurred in the execution of the first program (120) after inverting the one-bit data.
The information processing system (1) further
An information processing system (1) including a registration unit (32, 302) that associates the second information (22) with respect to the designated position with the first information (142, 23) and registers the first information (142, 23) in the database.

(Structure 2)
The information processing system (1) according to configuration 1, wherein the second information (22) includes the name of a variable written at the designated position.

(Structure 3)
The first information (142, 23) is the first identification information for identifying the content of the abnormality and the second identification information for identifying the source code executed when the abnormality occurs in the first program. The information processing system (1) according to configuration 1 or 2, comprising at least one.

(Structure 4)
The registration unit (32, 302) is associated with the first information (142, 23) and the second information (22), and a memory dump indicating the contents of the memory (104) when the abnormality occurs. The information processing system (1) according to any one of configurations 1 to 3, further registering (24) in the database (200).

(Structure 5)
The first information (142, 23) that matches the analysis target information regarding the abnormality generated in the second information processing apparatus (100A) that executes the first program (120) is searched from the database (200) and searched. The information processing system (1) according to any one of configurations 1 to 3, further comprising a search unit (33, 302) for outputting the second information (22) corresponding to the first information (142, 23). ..

(Structure 6)
The first information (142, 23) that matches the analysis target information regarding the abnormality generated in the second information processing apparatus (100A) that executes the first program (120) is searched from the database (200) and searched. The information processing system according to configuration 4, further comprising a search unit (33, 302) for outputting the second information (22) corresponding to the first information (142, 23) and the memory dump (24). 1).

(Structure 7)
In the registration unit (32, 302), the cause of the abnormality corresponding to the first information (142, 23) is the cause of the abnormality in association with the first information (142, 23) and the second information (22). Third information (25) indicating whether or not 1-bit data is inverted is further registered in the database (200).
The search unit (33, 302) excludes the first information (142, 23) corresponding to the third information (25) indicating that the cause of the abnormality is not the inversion of the 1-bit data. The information processing system (1) according to the configuration 5 or 6.

(Structure 8)
A method of constructing a database (200) using an information processing device (100) including a processor (102) for executing a program (120) and a memory (104).
A step of inverting 1-bit data at a specified position in the memory (104), and
A step of collecting first information regarding an abnormality that occurred in the execution of the program (120) by the processor (102) after inverting the 1-bit data, and a step of collecting the first information.
A method for constructing a database (200), comprising a step of associating the second information regarding the designated position with the first information and registering the second information in the database (200).

Although the embodiments of the present invention have been described, the embodiments disclosed this time should be considered to be exemplary in all respects and not restrictive. The scope of the present invention is indicated by the scope of claims and is intended to include all modifications within the meaning and scope equivalent to the scope of claims.

1 Information processing system, 10 Local bus, 11 Task execution unit, 12 Write / read processing unit, 13 Data inversion unit, 14 Variable name extraction unit, 15 Abnormal information collection unit, 16 Dump processing unit, 17 Variable management table, 20 table , 21 records, 22 location information, 23,130,142 abnormality information, 24,143 memory dump, 25 flag, 31 indicator, 32 registration unit, 33 search unit, 100,100A safety IO unit, 102,302 processor, 104 Main memory, 106, 306 storage, 108 local bus controller, 110 safety IO module, 112 buffer memory, 114 processor bus, 120 executable program, 122 library, 124 interrupt program, 140 registration data group, 141 variable name, 200 database , 300 computer, 304 memory, 308 display, 310 input device, 312 USB controller, 314 internal bus, 320 OS, 322 DB construction program, 324 search program, 400, 400A PLC, 500, 500A coupler, 600, 600A safety controller.

Claims (8)

1. It is an information processing system
   The first information processing device and
   With a database,
   The first information processing device is
   A processor that executes the first program and the second program that is interrupted during the execution of the first program,
   Including memory,
   The second program is
   An instruction to invert 1-bit data at a specified position in the memory, and
   Includes an instruction to collect first information about an abnormality that occurred in the execution of the first program after inverting the one-bit data.
   The information processing system further
   An information processing system including a registration unit that associates the second information regarding the designated position with the first information and registers the first information in the database.
2. The information processing system according to claim 1, wherein the second information includes the name of a variable written at the designated position.
3. The first information includes at least one of the first identification information for identifying the content of the abnormality and the second identification information for identifying the source code executed when the abnormality occurred in the first program. , The information processing system according to claim 1 or 2.
4. One of claims 1 to 3, wherein the registration unit further registers a memory dump indicating the contents of the memory when the abnormality occurs in the database in association with the first information and the second information. The information processing system according to item 1.
5. The first information that matches the analysis target information regarding the abnormality generated in the second information processing apparatus that executes the first program is searched from the database, and the second information corresponding to the searched first information is output. The information processing system according to any one of claims 1 to 3, further comprising a search unit.
6. The first information that matches the analysis target information regarding the abnormality generated in the second information processing apparatus that executes the first program is searched from the database, and the second information corresponding to the searched first information and the said The information processing system according to claim 4, further comprising a search unit that outputs a memory dump.
7. In association with the first information and the second information, the registration unit obtains third information indicating whether or not the cause of the abnormality corresponding to the first information is inversion of the 1-bit data. Further register in the database,
   The information processing system according to claim 5 or 6, wherein the search unit excludes the first information corresponding to the third information indicating that the cause of the abnormality is not the inversion of the 1-bit data from the search target. ..
8. It is a method of constructing a database using an information processing device including a processor that executes a program and a memory.
   A step of inverting 1-bit data at a specified position in the memory, and
   A step of collecting first information about an abnormality that occurred in the execution of the program by the processor after inverting the 1-bit data, and a step of collecting the first information.
   A method of constructing a database, comprising a step of associating the second information regarding the designated position with the first information and registering the first information in the database.

Images