JP3465220B2 - Failure detection method between devices - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an inter-device failure detection method for detecting the presence / absence of a failure in each device among a large number of devices connected via a network.

[0002]

2. Description of the Related Art For example, in order to provide a comfortable environment for occupants in a building such as a building, centralized control of electric power, lighting, air conditioner, sanitary equipment, disaster prevention equipment, etc. in the building at a disaster prevention center, etc. There is a system that is designed to do it. In this type of system, a monitoring device is installed in the machine room on each floor in the building to monitor and control each facility on that floor.This monitoring device is connected to each facility by individual wiring, as well as a disaster prevention center, etc. It is connected to the central monitoring equipment installed in the.

In such a monitoring system, if the monitoring device arranged on each floor fails, the monitoring control of each facility connected to the monitoring device cannot be performed, and the comfortable environment is impaired. For this reason, it is necessary to constantly monitor whether or not each monitoring device is operating normally, and promptly notify the operator or the like when a failure occurs so that the failure can be dealt with.

Therefore, in a system in which a plurality of devices are connected via the network as described above, normal operation confirmation, that is, failure detection is performed between the devices. If one main unit performs the fault detection on another unit, if the main unit fails, the fault detection of the system will not be performed at all. For this reason, it is conceivable that all devices mutually perform failure detection, but if the number of devices increases, the amount of communication information for failure detection increases, which may impair the system function. .

Further, as this type of failure detection method, for example, there is a method adopted in the digital information processing apparatus described in Japanese Utility Model Laid-Open No. 4340/1992. This digital information processing device performs the same information processing by synchronizing data by exchanging data among three or more information processing devices using a bidirectional data bus, and the processing result is used by both data buses. Are exchanged and compared, the failure system is detected by the majority theory, and the entire system is controlled so that data is output only from the normal system.Only the main system information processing unit handles input / output processing. Each information processing device is provided with its own system normal operation confirmation circuit to confirm the normal operation of the own system information processing device. Then, in the main system information processing device, when the own system normal operation confirmation circuit detects a failure, the information processing in the own system information processing device is stopped, and the highest rank is given according to a predetermined priority order among the redundant system information processing devices. The redundant information processing device is used as a main information processing device to continue information processing.

[0006]

However, in the failure detection method adopted in the digital information processing apparatus described above, the failure of the own system information processing apparatus is detected only by the own system normal operation confirmation circuit. If the self-system normal operation check circuit fails, the failure is not detected and the system may continue to operate in a malfunction state.

Therefore, an object of the present invention is to reliably detect the failure of all the devices without increasing the amount of communication information for the failure detection, and to cause the failure of any one of the devices. Even in the case, it is an object of the present invention to provide a device-to-device failure detection method capable of continuing the failure detection of all other devices.

[0008]

As a technical means for achieving the above object, a failure detection method between devices according to the present invention detects presence or absence of a failure in a plurality of devices connected via a network. In the failure detection method between the devices, all of the devices are ranked, a plurality of devices are selected in ascending or descending order of the rank, and the selected plurality of devices are set as the fault detection device, and the fault detection is performed. It is characterized in that the device in charge detects a failure of a device other than itself.

For all devices connected to the network,
For example, if the devices in charge of failure detection are selected in ascending order and the number of selected devices is two, the first and second devices are selected and the selected two devices are assigned, for example, 1 to n. The device in charge of failure detection of all devices other than itself, that is, (n-
1) Detect failure of one device. Even if one of these two failure detection devices fails, the other failure detection devices can continue to detect the failure of all devices. In addition, since the faulty device in charge of failure detection detects a fault by another device in charge of failure detection, it is possible to quickly deal with this failure.

Further, the inter-device failure detection method according to the second aspect of the present invention is adopted as a monitoring device for environmental facilities in a building such as a building, and the monitoring devices arranged on each floor in the building are Equipment of the monitoring device of the system in which the monitoring device and the monitoring device in the central control room are connected to each other by individually connecting to power, lighting, air conditioning equipment, sanitary equipment, disaster prevention equipment, etc. In the inter-fault detection method, the monitoring devices arranged on each floor and the monitoring devices in the central control room are ranked, and a plurality of monitoring devices are selected in ascending or descending order of the order, and the selected devices are The device in charge of failure detection is characterized in that the device in charge of failure detection detects a failure in a monitoring device other than itself.

Further, in the inter-device failure detection system according to the third aspect of the present invention, when one of the failure detection charge devices fails, a device next to the order is newly added to the failure detection charge device. Is characterized in that failure detection is performed.

In the above-mentioned example, when one of the two failure detection devices fails, the third device, which is the next order, becomes the failure detection device, and all other devices. The failure detection of. Therefore, two failure detection devices are always set, and the failure detection can be reliably continued.

Further, the inter-apparatus failure detection system according to the fourth aspect of the present invention is characterized in that the failure detection charge device is two devices.

If at least two devices are in charge of failure detection, failure detection can be continued by another device in charge of failure even if one device fails.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, a fault detection method between devices according to the present invention will be specifically described based on the illustrated preferred embodiments.

FIG. 1 is a diagram showing a schematic configuration of a system which adopts this failure detection method. Central monitoring devices 1, 2, 3 and monitoring devices 11 to mn are connected by a network 5. Addresses are assigned in advance to these monitoring devices 1, 2, 3, 11 to mn as priorities. That is, the first central monitoring device 1 has the address 1, the second central monitoring device 2 has the address 2, and the third central monitoring device 3 has the address 3.
Address 11 is assigned to the first monitoring device 11, address 12 is assigned to the second monitoring device 12, and address mn is assigned to the nth monitoring device mn.

Each monitoring device 1, 2, 3, 11, 12,
..., mn is equipped with a normal operation confirmation means, and at the time of startup, it sends a status request to all monitoring devices 1, 2, 3, 11, 12, ..., mn other than itself connected to the network 5. Devices 1, 2, 3, 11, 12, ...
When receiving a response from mn, the monitoring device 1, 2, 3, 11,
12, ..., Mn can be recognized as normal.

The operation of the embodiment of the fault detection system between devices according to the present invention configured as described above will be described below.

When the system is started up, the device in charge of failure detection is selected by selecting, for example, the device having the lowest order, that is, the address. In this embodiment, a case will be described in which two devices are designated as fault detection devices. Therefore, when the system is activated, the first central monitoring device 1 and the second central monitoring device 2 corresponding to the addresses 1 and 2 serve as fault detection devices. That is, the first central monitoring device 1 and the second central monitoring device 2 confirm the normal operation of the monitoring devices other than itself by the normal operation confirming means.

As shown by the solid line in FIG. 2, the first central monitoring device 1 responds to the monitoring devices 2, 3, 11, 12, ..., Mn other than itself by a constant cycle, for example, at 1-minute intervals. Send a request message. Further, the second central monitoring device 2 has monitoring devices 1, 3, 11, 12, ...
A response request message is sent to mn at regular intervals. The monitoring devices 1, 2, 3, 11, 12, which have received the response request message,
…, Mn is the first message that sent the reply message indicating that it was received.
It transmits to the central monitoring device 1 or the second central monitoring device 2.
When the first central monitoring device 1 and the second central monitoring device 2 receive this response message, the monitoring devices 1, 2, 3, 11, 12, ..., Mn that transmitted the response message perform normal operation. Determine that

If any of the monitoring devices 1, 2, 3, 11, 12, ..., Mn fails, the monitoring device 1, 2, 3, 11, 12 ,. Any of the monitoring devices 1, 2, 3, 11, 1 since the above response message is not returned
2, ..., It becomes clear that mn has failed. For example, when the monitoring device 12 is out of order, the response message from the monitoring device 12 is not transmitted, so the central monitoring devices 1 and 2 are
Do not receive the answer message from 12. Then, the central monitoring devices 1 and 2 determine that the monitoring device 12 has failed, and notify the monitoring devices 1, 2, 3, 11, ..., Mn to that effect. As a result, the monitoring devices 1, 2, 3, 11, ..., Mn recognize that the monitoring device 12 has failed. It should be noted that the response request message may be sent once, but if the reply message is not obtained even if transmission is performed a plurality of times, it is possible to judge that a failure has occurred more reliably. You can make a decision.

The central monitoring devices 1 and 2 are to be mutually detected for failure. For example, if a failure occurs in the first central monitoring device 1, the second central monitoring device 2 will be replaced by the first central monitoring device 1. The first central monitoring device 1 recognizes that it has failed because it has not received a response message from the device. Second central monitoring device 2
Indicates that the first central monitoring device 1 has failed,
12, ..., Mn is notified, and each monitoring device 3, 1
Let 1, 12, ..., mn recognize that fact. In the third central monitoring device 3 that has received the notification of the failure of the first central monitoring device 1, the address of the device currently in charge of the failure detection is the second central monitoring device 2 and the address of the next order to itself. Acknowledging that the number 3 is attached, the device in charge of failure detection is newly replaced in place of the failed first central monitoring device 1. Therefore, as shown in FIG.
And the third central monitoring device 3 become the fault detection device,
The response request message is sent at a fixed cycle. In addition,
Whether or not the device itself is the fault detection device is determined when the system is activated and when the other monitoring devices 1, 2, 3, 11, 12, ...
When the failure notification of mn is received, the failed monitoring device 1,
Do this when 2, 3, 11, 12, ..., Mn are restored.

In the above-described embodiment, it has been explained that the two monitoring devices serve as the fault detection device.
More than one unit may be used as the failure detection device. In addition, when adopting this failure detection method between devices as a monitoring device for environmental equipment in a building, the monitoring devices placed on each floor and the monitoring devices in the central control room are ranked to detect failures. The device in charge may be set.

[0023]

As described above, according to the inter-device failure detection method according to the present invention, a plurality of devices out of all the devices are used as failure detection charge devices to confirm the normal operation of other devices. Therefore, even if one of the failure detection devices fails, the normal operation confirmation work can be continued. In addition, since the failure detection devices perform mutual normal operation confirmation, it is detected that one of the failure detection devices has failed, and the failure can be quickly dealt with. Moreover,
Setting the required number of failure detection devices does not increase the amount of communication information.

According to the inter-device failure detection method of the second aspect of the present invention, by adopting it as the environmental equipment in the building, it is possible to always provide a comfortable environment to the occupants in the building.

According to the inter-device failure detection system of the third aspect of the present invention, when a failure occurs in the failure detection responsible device, a new failure detection responsible device is set, so that the required number of failures is always maintained. Since the apparatus in charge of detection is provided, even if a failure occurs in the apparatus in charge of failure detection, it is possible to reliably and continuously check the normal operation of all the apparatuses. Therefore, the system can be operated stably.

According to the inter-apparatus failure detection system of the fourth aspect of the present invention, the minimum number of failure detection devices required to detect failures of all the devices connected to the network are secured. can do. Moreover, in combination with the configuration described in claim 3, the required number of failure detection devices are always secured, and the failure detection can be reliably performed continuously.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing an outline of a system adopting a failure detection system according to the present invention.

FIG. 2 is a diagram for explaining a state in which normal operation of devices constituting a system is confirmed by the failure detection method according to the present invention, and shows a case where all devices are operating normally.

FIG. 3 is a diagram for explaining a state of confirming a normal operation of a device constituting a system by a fault detection method according to the present invention, showing a state in which one device has a fault.

[Explanation of symbols]

1st central monitoring device 2 Second central monitoring device 3rd central monitoring device 5 network 11 First monitoring device 12 Second monitoring device mn nth monitoring device

Front page continuation (51) Int.Cl. ⁷ identification code FI G08B 25/01 H04L 11/00 321 H04Q 9/02 G05B 19/05 D (58) Fields investigated (Int.Cl. ⁷ , DB name) H04L 12/28-12/44 G05B 23/02 G08B 25/01 G05B 19/048

Claims (4)

(57) [Claims] 1. A failure detection method between devices for detecting the presence / absence of a failure of a plurality of devices connected via a network, wherein all the devices are ranked, and the plurality of devices are ordered in ascending or descending order. And selecting the selected plurality of devices as fault detection devices, and the fault detection devices detect faults of devices other than the self device. 2. A monitoring device arranged on each floor in a building is individually connected to power, lighting, air conditioning equipment, sanitary equipment, disaster prevention equipment, etc. on the floor to monitor each of these equipments and concentrate with the monitoring equipment. In the failure detection method between the monitoring devices of the system in which the monitoring device of the management room is connected to the network, the monitoring devices arranged on the floors and the monitoring devices of the central control room are ranked, and the ascending order of the order or A plurality of monitoring devices are selected in descending order, the selected plurality of devices are set as fault detection devices, and the fault detection devices detect faults of monitoring devices other than self-devices. method. 3. The apparatus according to claim 1, wherein when one of the fault detection devices is faulty, the device next to the first fault is newly detected as a fault detection device. Item 3. A failure detection method between devices according to any one of Items 2. 4. The fault detection method between devices according to claim 1, wherein the fault detection device is two devices.