JPS607827B2 - Multiple computer system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a plurality of electronic computer systems that perform process control of power generation plants and the like.

An electronic computer (hereinafter referred to as online) that monitors and controls processes such as the operation of a power generation plant in real time (hereinafter referred to as online).
Various backup methods have been proposed in case a part or all of a computer (hereinafter referred to as a computer) fails.

One is the so-called Tuplex method, in which a spare computer of the same type is prepared in advance and used as a backup in the event of a failure. There is also a dual system, in which two computers are always running the same process, and when one computer fails, the remaining normal computer continues the process.

Furthermore, a cross-call method is being considered in which a plurality of plants of the same scale are each provided with a dedicated control computer, and any two of the respective computer systems are connected to provide mutual backup in the event of a failure. The above two methods are effective for systems where multiple computers must be prepared, the computers have almost the same specifications, and the planning periods are somewhat close to each other, but there are generally restrictions and implementation is accompanied by difficulties.

That is, in the duplex and dual systems, a computer, which is usually hardly required, must be installed, making the system expensive and requiring large equipment. In addition, in the cross-call method, the computer normally performs dedicated process processing, so there is little waste.
There is an operational problem in that, in preparation for mutual backup, at least two computer systems must be manufactured with exactly the same specifications and operated at approximately the same time. However, automation and labor saving through process control using dedicated computers,
The range of applications is expanding in all industrial fields, and more advanced control technology is being required and adopted.

Under these circumstances, the reliability required of process control computer systems has become extremely important. While mutual backup between multiple computers is absolutely necessary as a means of achieving high reliability,
It is difficult to put it into practical use because it is often subject to restrictions such as large or medium-sized capital investment, system planning, and operational timing. Figure 1 shows the configuration of the process control computer system. Basically, it is composed of a central processing control unit 1, an external storage device 2, a process input/output control device 3, and peripheral devices 4. Failures in these component devices will disrupt the functionality of the computer system, but in particular, if the central processing control unit 1 and external storage device 2 fail, the functionality of the entire system will be lost and the target process 5
has the greatest impact on Therefore, the central processing control unit 1 (hereinafter referred to as CPU) and the external storage device 2 (hereinafter referred to as B
A means of backing up the failure of the ULK is required. Therefore, the process input/output control device 3 and peripheral device 4, which input and output process information processed by computers, can be shared by multiple computers, or information can be exchanged between these devices 3 and 4 and multiple CPUIs. By making such a connection, even if a failed CPU or BULK is removed from the system, it becomes possible to take over the process processing using another CPU or BULK. Next, FIG. 2 shows the configuration of a process control computer system that takes backup into consideration.

The computer systems A and B are similar to those shown in Figure 1, and include central processing control units (CPUs) IA and IB, and an external storage device (B).
ULK) 2A, 2B, process input/output control device 3A, 3
B, peripheral devices 4A, 48, and normally controls the respective target processes 5A, 5B. When CPUIA or BULK2A of computer system A fails, CPUIB of computer system B uses the normally unused core and BULK2B allocated for computer system A in advance to connect to the target process 5A of computer system A. The CPU of computer system B
IB and BULK2B back up.

Therefore, CPU18 and BULK of computer system B
2B allows the same control as in normal times to be performed on each of the target processes 5A and 5B. Conversely, if CPUIB or BULK2B of computer system B fails, computer system A will similarly provide backup. In this way, when backing up a failure of the central processing control unit (CPU) or external storage device (BULK), multiple computing systems each performing dedicated processing are used to back up the failure of the central processing unit (CPU) or external storage device (BULK) without having to keep a special CPU or BULK in advance. A system configuration that enables information exchange by interconnecting CPUs and BULKs is both feasible and economically superior.

However, it is difficult to implement a configuration in which computer systems are mutually backed up unless the target processes of each computer system are of the same scale and installed at the same time.

Furthermore, because of mutual backup, a large amount of core and drum capacity is naturally required, and control over the target process is restricted. The present invention provides a plurality of computer systems for each function, and connects these computers so that they can mutually exchange information with component devices and processes. The purpose of the present invention is to provide a multiple computer system capable of continuous processing without all being lost.

The present invention will be explained below with reference to illustrative embodiments. Example 1 FIG. 3 shows the configuration of a computer system according to an embodiment of the present invention.

C and D are computer systems that perform two different process controls, each with a central processing control unit (CPU).
IC, 10, external storage device (BULK) 2C, 2D, process input/output control device 3C, 3D, peripheral device 4C
, 4D, switching devices 6C, 6D, and this switching device 6C,
Switching IJ Ray 7C, 7D that moves with 6D, and process 5
It is composed of external interrupt reception circuits 8C and 80 from C and 5D. E is a computer system for information management, and data linkage circuit 9, 10711 is connected between computer systems A and B.
, 12.
IE and external storage devices 2E and 2E' with different purposes
and a peripheral device 48.

CPUIC, ID, IE of each computer system C, D, E
are coupled to BULK2C, 2D, 28, and 28 so that data can be exchanged with each other. CPUIC is selection switch 13
It is possible to transmit a signal to the computer system C or D and switch the output signal to the peripheral device to the switching relays 7C and 7D of the computer system C or D. In the above configuration, the two computer systems C and D each perform dedicated process control,
The computer system E receives both process data via the data linkage circuits 9, 10, 11, and 12, and data regarding the factory equipment in operation and management work from the peripheral device 48 and the BULK 2E', and performs central information management.

And BUL of control computer systems C and D, respectively.
In case of failure of K2C, 2D, B of computer system E
If the programs and data required for control computer systems C and D are stored in ULK28, system C
, D's CPUIC and ID can send and receive data to and from system E's BULK 28 and continue their dedicated functions. Furthermore, if the failed BULK is repaired and restored, the CPUIC and ID of systems C and D will be changed to the respective BULK2C and 2
Resuming data transmission and reception with D and returning to the original system. When a failure of the CPU IC and ID of the control system C, ○ is detected by an external interrupt signal, the C of the system E
The PUIE sends a switching signal to the failed system to switch between the switching device 6C (or 6D) and the switching relay 7C (7D).

At this time, the selection switch 13 is selected in advance to the failure side.
As for BULK, BULK2C (or 20) on the failed side can be used as is. The above functions enable the central information computing system E to completely back up the control computing system C or D in which the CPU has failed. When the faulty CPU is restored, a request for normal recovery is sent to the system E CPU through the data linkage circuits 11 and 12.
Transmit to IE, switch device 6C (6D) and switch relay 7C
You can switch back to (7D) and return to the main computer system.

It is through the receiving circuit 8 that input information from the process is received as an external interrupt signal.

Therefore, the interrupt reception circuit 18 is connected in parallel from the reception circuit 8.
If you input a signal to the system E CPU as needed,
External interrupt input can also be backed up with IE. Note that the computer systems C and D do not need to have the same configuration as long as they are suitable for the respective target processes 5C and 5D. That is, there is no problem even if the configuration contents of the process input/output devices 3C, 3D or the peripheral devices 4C, 4D are different, and the process input/output devices of the control computers C, D, You can switch peripheral devices for backup. On the other hand, if CPUIE and BULK2E, which perform central information management, fail, the CPUIC and ID of control systems C and D will detect the failure as an external interrupt signal, and from that point on, the process data sent to system C will be sent to each system. The data is stored in BULK2C and BULK2D to prevent the data from being lost until system E is restored. When the failure of CPTIE and BULK2E in system E recovers and a data transmission request is made via data linkage circuits 11 and 12, the process data stored in each BULK2C and 2D is sent to CPUIE to continue the central information management function. data loss to a maximum of 4. With the configuration shown in FIG. 3 as described above, it is possible to back up not only the control computer system but also the information management computer system.

As described above, a computer system that controls multiple processes and a computer system that centrally manages information for factories or power plants where those processes are located are connected between each CPU and between BULKs, and By connecting input/output devices and peripheral devices with switching devices, switching relays, and selection switches, the management computer can handle failures of the control computer system's CPU and BULK without losing the main functions of the system. Can be backed up.

By adopting such a system configuration, it is possible to introduce a dripping machine system, which was conventionally designed to mutually compensate for loss of function in the event of a failure between multiple process control computers, or to use process control computers of the same size. The present invention has the effect of solving the difficulty in realizing a system configuration in which multiple computers are set at the same time for backup, and a highly reliable computer system can be easily configured without using large-scale equipment.

The connection between a plurality of computers in the present invention can be connected to the information management computer system at any time by providing the control computer with a switching device and a switching IJ relay, and there are no particular restrictions on the installation time.

Furthermore, even in the event of a failure of the information management computer system, data from the process can be saved in the control computer system, and important plant data will not be lost.

In the above embodiment [Example 1], in order to facilitate understanding, two control computer systems C and D were explained as examples. It goes without saying that if the devices and peripheral devices can be selected, a configuration can be similarly constructed to back up any failure of any one of two or more n control computers.

The system configuration in this case is shown in FIG. 4 as an example. Example 2 The present invention is also applicable to a multi-computer system that connects the control computer systems C and D and the information management computer system E with a transmission path and processes data intensively over a wide area. It is possible.

An example thereof is shown in FIG. In this case, the system is
A master station 14 is added to the multiple computer system shown in FIG. 3, and is connected by a transmission circuit 16 to a remote station 15 installed at another location. For example, each of the computer systems C, D, and E collects data at regular intervals through the transmission circuit 16 from the PI/C connected to the remote station 15, performs various processing, and connects the data processing results to the remote station 15. The output is displayed on the peripheral device 17 that has been set. Here, the backup method when the CPUIC or BULK 20 of the computer system C fails is the same as in the first embodiment described above.

On the other hand, the master station 14C of the computer system C is backed up by the master station 14E of the computer system E, and the master station 14E of the system E performs the transmission and reception of information that has been performed by the master station 14C of the system C. , system E can be backed up including all the IJ mote stations 15 that exchanged information with the master station 14C of system C.

This also applies to the computer system when E fails. As described above, according to the present invention, even if one computer out of a plurality of computer systems breaks down, its functions can continue to be processed, and this backup can be easily and economically performed. .

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing the configuration of a general process control computer system. 2 is a block diagram showing the configuration of a general process control computer system that takes backup into consideration. FIG. 3 is a block diagram showing the configuration of the computer system in the first embodiment of the present invention, and FIG. 5 is a block diagram showing a case where the present invention is applied to a large number of computer systems, and FIG. 5 is a block diagram showing a second embodiment of the present invention. A, B, C, D・
...Process control computer system, E...
...Computer system for information management, 1, IA-IE,
ln...Central processing unit (CPU), 2,2A to 2E
, 2E', 2n...External storage device (BULK), 3
, 3A to 3E, 3n... Process input/output control device, 4, 4A to 4E, 4n... Peripheral device, 5,
5A to 5D, 5n...Target process, 6C, 6D,
6n...Switching device, 7C, 7D, 7n...
...Switching IJ relay, 8C, 8D...External interrupt acceptance circuit, 9, 10, 11, 12...Data linkage circuit, 13...Selection switch, 14... …
Master station, 15...Remote station,
16...Transmission circuit, 17...Peripheral equipment, 1
8...Interrupt reception circuit. Figure 2 Figure 3 Figure 5 Figure 4

Claims (1)

[Claims] 1 A dedicated control computer system is provided for each of a plurality of plants, and an information management computer is provided for backup of the control computer system, and the plurality of control computer systems and information management computer system are provided. Transmission circuits, input/output control devices,
A peripheral equipment selection circuit and a switching device are added, and the occurrence of a failure in the control computer system is detected by the information management computer system, and the input/output control device and the control computer system that has failed are detected via the switching device. By switching the peripheral equipment to the information management computer, the information management computer can back up the functions of the control computer system without damaging its own functions, and in the event of a failure of the information management computer, the control computer can 1. A multiple computer system characterized in that the computer is configured to back up information to be sent to an information management computer during a failure by storing it in its own storage device.