JP5840410B2 - Supervisory control system - Google Patents

Description

  Embodiments described herein relate generally to a monitoring control system.

  2. Description of the Related Art Conventionally, a monitoring control system for monitoring and controlling various types of monitoring control target equipment installed in an airport, such as lighting equipment, power receiving / transforming equipment, power generation equipment, uninterruptible power supply equipment, air conditioning equipment, and the like has been introduced. For such a monitoring control system, it is desirable that two systems having the same configuration are prepared in advance and made redundant as a countermeasure against a failure.

  A hot standby system and a cold standby system are known as redundancy systems for the monitoring control system. In the hot standby system, one system (active system) is activated, and the other system (standby system) is put into a standby state while performing the same operation as the active system. When a failure occurs in the active system, it is immediately processed as a standby system. It is a method that takes over. In the cold standby method, one system (active system) is activated, the other system (standby system) is powered off, and after a failure occurs in the active system, the standby system is activated to take over processing. It is a method.

  In the case of the hot standby method, in order to constantly consume standby system power in addition to the active system, the power consumption increases as these active systems and standby systems each consist of multiple server groups. However, there is a problem that operation costs increase. In the case of the cold standby method, if a failure occurs in the active system, the data accumulated in the active system cannot be immediately transferred to the standby system, and a long startup time is required to start up the standby system. There is a problem that the downtime is long and the reliability is lowered.

JP 2008-60808 A

  An object of the present embodiment is to provide a monitoring control system capable of reducing the operation cost without causing a decrease in reliability.

According to this embodiment,
A first monitoring control station including a first server group; a second monitoring control station including a second server group having a configuration equivalent to that of the first server group and connected to the first monitoring control station via a network; , The first monitoring control station is an operation start time by a schedule management unit that manages an operation time schedule that defines an operation start time and an operation end time of an airport, and the schedule management unit. A start / stop processing unit that starts the second monitoring control station when it is determined, and stops the second monitoring control station when the schedule management unit determines that the operation end time is reached. A monitoring control system characterized by the above is provided.

According to this embodiment,
A first monitoring control station including a first server group; a second monitoring control station including a second server group having a configuration equivalent to that of the first server group and connected to the first monitoring control station via a network; The first monitoring control station includes a system state monitoring unit that collects monitoring signals necessary for monitoring the state of the monitoring control system, and the monitoring collected by the system state monitoring unit. A down sign determining unit for determining whether or not there is a sign of down of the first monitoring control station based on a signal; and starting the second monitoring control station within an operation time, and activating the second monitoring control station outside an operation time And a start / stop processing unit that starts the second monitoring control station that is stopped based on the fact that the down sign determination unit determines that there is a down sign outside the operation time. about Monitoring control system according to claim is provided.

FIG. 1 is a diagram schematically showing a configuration of a monitoring control system in the present embodiment. FIG. 2 is a diagram schematically showing a configuration of a processing unit of the representative processing server shown in FIG. FIG. 3 is a flowchart for explaining the operation of the monitoring control system in the present embodiment. FIG. 4 is a diagram schematically showing the configuration of the processing unit of the representative processing server that constitutes the first monitoring control station in the second configuration example of the monitoring control system. FIG. 5 is a flowchart for explaining the operation in the second configuration example of the monitoring control system.

  Hereinafter, the present embodiment will be described in detail with reference to the drawings. In each figure, the same reference numerals are given to components that exhibit the same or similar functions, and duplicate descriptions are omitted.

  FIG. 1 is a diagram schematically illustrating a first configuration example of a monitoring control system according to the present embodiment.

  In other words, the present monitoring control system monitors and controls various types of monitoring control target equipment X such as lighting equipment, power receiving / transforming equipment, power generation equipment, uninterruptible power supply equipment, and air conditioning equipment installed in the airport. Such a supervisory control system includes a first supervisory control station 10 and a second supervisory control station 20. The first monitoring control station 10 and the second monitoring control station 20 are connected via a network. The first monitoring control station 10 and the second monitoring control station 20 are connected to a monitoring control slave station 30..., A terminal device 40.

  The supervisory control slave station 30 exchanges supervisory control signals with the supervisory control target equipment X. One or more such monitoring control slave stations 30 are installed according to the number of monitoring control target equipment X. For sending and receiving monitoring control signals between the monitoring control slave station 30 and the monitoring control target equipment X, for example, the monitoring control slave station 30 receives various measurement data such as current, voltage and temperature in the monitoring control target equipment X. And the monitoring control slave station 30 detecting a state change such as a failure in the monitoring control target equipment X.

  For example, the state change of the monitoring control target equipment X is detected as follows. The monitoring control target equipment X has the number of contacts according to the monitoring control items. Each of these contacts is electrically connected to the input board of the supervisory control slave station 30. When a state change such as a failure occurs in the monitoring control target equipment X, the corresponding contact is closed, and an electrical closed circuit is formed. In this example, electricity flowing through the closed circuit corresponds to the monitoring control signal. In the supervisory control slave station 30, when electricity flows through the closed circuit, the supervisory control item in which the state change has occurred in the supervisory control target equipment X is determined.

  The monitoring control slave station 30 exchanges monitoring control signals with the first monitoring control station 10. For the transfer of the monitoring control signal between the first monitoring control station 10 and the monitoring control slave station 30, for example, the first monitoring control station 10 receives various measurement data of the monitoring control target equipment X from the monitoring control slave station 30, It includes receiving a history of state changes of the monitoring control target equipment X. Note that the supervisory control slave station 30 may exchange a supervisory control signal between both the first supervisory control station 10 and the second supervisory control station 20. When a failure occurs in the first supervisory control station 10, the supervisory control slave station 30 exchanges supervisory control signals with the second supervisory control station 20.

  The terminal device 40 provides information to a monitor or accepts an operation input by the monitor. The terminal device 40 exchanges various information with the first monitoring control station 10. For the exchange of information between the first monitoring control station 10 and the terminal device 40, for example, the terminal device 40 receives various measurement data of the monitoring control target facility X from the first monitoring control station 10 and the monitoring control target facility X. This includes receiving a history of state changes, receiving information input from the terminal device 40 by the first monitoring control station 10, and the like. Note that the terminal device 40 may transmit and receive a monitoring control signal between both the first monitoring control station 10 and the second monitoring control station 20. When a failure occurs in the first monitoring control station 10, the terminal device 40 exchanges various information with the second monitoring control station 20.

  One or more such terminal devices 40 are installed. The terminal device 40 includes a processing unit 41, a recording unit 42, an input unit 43, a display unit 44, a communication unit 45, and the like. The processing unit 41 performs various arithmetic processes. The recording unit 42 accumulates various data. The input unit 43 is an operation input by an observer, specifically, an input of an operation time schedule (including a basic operation time schedule and an operation time extension schedule) that defines an operation start time and an operation end time of an airport, which will be described later, Operation for setting and canceling emergency flight response mode to cope with takeoff and landing of flights, input of an equalization schedule for performing equalization processing of data from the first monitoring control station 10 to the second monitoring control station 20, described later In the second configuration example, setting of a threshold necessary for determining the presence or absence of a down sign is accepted. The display unit 44 includes information input via the input unit 43 and information received from the first monitoring control station 10 and the second monitoring control station 20 (including measurement data of the monitoring control target equipment X and a history of state changes). ) Etc. are displayed. The communication unit 45 exchanges information with the first monitoring control station 10 and the second monitoring control station 20 via the network.

  The first supervisory control station 10 and the second supervisory control station 20 process and store supervisory control signals exchanged with the supervisory control slave station 30 and perform various arithmetic processes. Further, the first monitoring control station 10 and the second monitoring control station 20 process and store various information exchanged with the terminal device 40 and perform various arithmetic processes.

The first monitoring control station 10 includes a first server group. The first server group includes a plurality of server groups for performing various processes, that is, a first processing server 10-1,..., An nth processing server 10-n, and a representative processing server 100 that controls them. (Where n is a positive integer). These first processing server 10-1 to n-th processing server 10-n are, for example, an application server, a database server, a WEB server, or the like.
The second monitoring control station 20 includes a second server group (first processing server 20-1,... Nth processing server 20-n, and representative processing server 200) having the same configuration as the first server group.

  The first monitoring control station 10 and the second monitoring control station 20 having such a configuration may be referred to as “parent station” with respect to the monitoring control slave station 30. The supervisory control system in this embodiment is made redundant by these two master stations. Note that the present invention is not limited to the example shown here, and three or more master stations may be installed.

  The representative processing server 100 of the first monitoring control station 10 and the representative processing server 200 of the second monitoring control station 20 have the same configuration and the same function. Here, the configuration of the representative processing server 100 will be described, and the description of the representative processing server 200 will be omitted. The representative processing server 100 includes a processing unit 1, a recording unit 2, a communication unit 3, and the like. The processing unit 1 performs various arithmetic processes, and details thereof will be described later. The recording unit 2 accumulates various data. The communication unit 3 exchanges information with the monitoring control slave station 30 and the terminal device 40 via the network. The representative processing server 100 also exchanges information with the first processing server 10-1 to the n-th processing server 10-n.

  The first processing server 10-1 to n-th processing server 10-n of the first monitoring control station 10 and the first processing server 20-1 to n-th processing server 20-n of the second monitoring control station 20 are the same. It is a configuration. Here, the configuration of the first processing server 10-1 will be described, and description of other processing servers will be omitted. The first processing server 10-1 includes a processing unit 11, a recording unit 12, a communication unit 13, and the like. The processing unit 11 performs various arithmetic processes. The recording unit 12 accumulates various data. The communication unit 13 exchanges information with the monitoring control slave station 30 and the terminal device 40 via the network.

  FIG. 2 is a diagram schematically showing a configuration of a processing unit of the representative processing server shown in FIG. In addition, although the structure of the process part 1 of the representative process server 100 is demonstrated here, it is the same structure also about the process part 1 of the representative process server 200, The description is abbreviate | omitted.

  The processing unit 1 includes a schedule management unit 1A, an emergency flight response management unit 1B, a start / stop processing unit 1C, and an equalization processing unit 1D. Various information is exchanged among these schedule management unit 1A, emergency flight response management unit 1B, start / stop processing unit 1C, and equalization processing unit 1D.

  The schedule management unit 1A manages an operation time schedule that defines an operation start time and an operation end time of an airport. More specifically, the schedule management unit 1A manages the operation time schedule based on the basic operation time schedule and the operation time extension schedule transmitted from the terminal device 40. Such a schedule management unit 1A includes an internal clock, for example, and determines whether or not the current time has become the operation start time, or whether or not the current time has become the operation end time.

  The basic operation time schedule defines an operation time during which an airport is in an operating state at normal times, that is, an operation start time and an operation end time. Such a basic operation time schedule is input by a monitor through the input unit 43 of the terminal device 40 and stored in the recording unit 2, for example.

  The operation time extension schedule defines the extended operation end time when the operation end time of the basic operation time schedule is extended from the schedule due to the occurrence of delayed flights or the like. Such an operation time extension schedule is input by a monitor through the input unit 43 of the terminal device 40 and stored in the recording unit 2, for example (in some cases, the operation start time may be advanced. In that case, the operation time extension schedule defines the operation start time after the advance).

  The emergency flight response management unit 1B manages the setting and release of the emergency flight response mode for responding to takeoff and landing of emergency flights outside the airport operating hours. More specifically, the emergency flight response management unit 1B receives an emergency flight response mode setting instruction transmitted from the terminal device 40 when the airport is in a non-operating state, and is set to the emergency flight response mode. Further, in the state where the emergency flight response mode is set, the emergency flight response management unit 1B receives the emergency flight response mode cancel instruction transmitted from the terminal device 40, and is canceled from the emergency flight response mode.

  In the start / stop processing unit 1C, the schedule management unit 1A determines that the current time is the operation start time (the time specified in the basic operation time schedule or the time after the advance specified in the operation time extension schedule). The second monitoring control station 20 is started, and the schedule management unit 1A sets the current time to the operation end time (the time specified in the basic operation time schedule or the extended time specified in the operation time extension schedule). The second supervisory control station 20 is stopped when it is determined that it is (time).

  The activation / deactivation processing unit 1C activates the second monitoring control station 20 when the emergency flight response management unit 1B sets the emergency flight response mode, and the emergency flight response management unit 1B responds to the emergency flight. When the mode is canceled, the second monitoring control station 20 is stopped.

  The equalization processing unit 1D performs the data equalization processing from the first monitoring control station 10 to the second monitoring control station 20 at least once within the operation time. More specifically, the equalization processing unit 1D includes, for example, an internal clock, and when the current time becomes the equalization time based on the equalization schedule transmitted from the terminal device 40. The equalization process is performed. This equalization processing is performed by filing data accumulated in the first monitoring control station 10 (for example, operation history such as failure date / time and operation date / time of the monitoring control target equipment X, various measurement data of the monitoring control target equipment X, etc.) In addition, it is a process of copying (equalizing) various set value data (for example, various parameters for monitoring and controlling the facility X to be monitored such as the set temperature of the air conditioning facility) to the second monitoring control station 20.

  In the present embodiment, the first supervisory control station 10 corresponds to an “active system” that operates almost always after the system is started up, and the second supervisory control station 20 is required for system reliability required by the operating status of the airport. Corresponds to the "standby system" that starts and stops according to the level. That is, when the airport is in operation (that is, when the required system reliability is high), in addition to the first monitoring control station 10, the second monitoring control station 20 is also activated to stand by. When a failure or the like occurs in the first monitoring control station 10, the second monitoring control station 20 automatically takes over the processing immediately. That is, it is in a hot standby state during operation. On the other hand, when the airport is in a non-operating state (that is, when the required system reliability is low), the first monitoring control station 10 is operating, while the second monitoring control station 10 is operating. 20 is stopped. That is, when not operating, it is in a cold standby state.

  Below, operation | movement of the monitoring control system in this embodiment is demonstrated more concretely.

  FIG. 3 is a flowchart for explaining the operation of the monitoring control system in the present embodiment.

  First, in the first monitoring control station 10, the schedule management unit 1A determines whether or not the current time is within the basic operating time schedule (for example, 7:30 to 20:30) (step ST1). . That is, the schedule management unit 1A refers to the basic operation time schedule of the airport stored in the recording unit 2 and compares it with the current time of the internal clock. Here, a case will be described in which the operation start time is, for example, 7:30 and the operation end time is, for example, 20:30.

  When the schedule management unit 1A determines that the current time is outside the basic operation time schedule (No in step ST1), it is determined whether or not the current time is within the operation time extension schedule. (Step ST2). That is, the schedule management unit 1A determines whether or not the operation time extension schedule is stored in the recording unit 2, and refers to the operation time extension schedule when the operation time extension schedule is stored. Contrast with the current time of the clock.

  When the schedule management unit 1A determines that the current time is outside the operating time extension schedule (including the case where the operating time extension schedule is not stored) (step ST2, No), emergency flight response management The part 1B determines whether or not the emergency flight response mode is set (step ST3). That is, when the current time is outside the basic operation time schedule and outside the operation time extension schedule, the airport is in a non-operation state. In such a state, the emergency flight response management unit 1B determines whether or not the emergency flight response mode is set.

  When the schedule management unit 1A determines that the current time is a time within the basic operation time schedule (step ST1, Yes), or when the current time is determined to be a time within the operation time extension schedule ( Step ST2, Yes), or when the emergency flight response management unit 1B determines that the emergency flight response mode is set (Yes in Step ST3), this corresponds to a case where the airport is in an operating state. The start / stop processing unit 1C determines whether or not the second monitoring control station (standby system) 20 is being started (step ST4).

  When the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is not activated (No in step ST4), the second monitoring control station 20 is activated (step ST5). . As a result, when the airport is in the operating state, the second monitoring control station 20 is activated in addition to the first monitoring control station 10 to enter the hot standby state.

  Then, after starting the second monitoring control station 20 (step ST5), or when the start / stop processing unit 1C determines that the second monitoring control station (standby system) 20 is starting ( In step ST4, Yes), the equalization processing unit 1D determines whether or not the current time is the equalization setting time (step ST6). That is, the equalization processing unit 1D refers to the equalization schedule and compares it with the current time of the internal clock.

  When the equalization processing unit 1D determines that the current time is the set time for equalization (step ST6, Yes), equalization processing is performed (step ST7), and the process returns to step ST1 again. Also, when the equalization processing unit 1D determines that the current time is not the equalization setting time (No in step ST6), the process returns to step ST1 again.

  On the other hand, when the emergency flight response management unit 1B determines that the emergency flight response mode is not set or the emergency flight response mode is canceled (No in step ST3), the start / stop processing unit 1C 2. It is determined whether or not the monitoring control station (standby system) 20 is being activated (step ST8).

  If the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is not activated (No in step ST8), the process returns to step ST1 again. If the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is activated (Yes in step ST8), the second monitoring control station 20 is deactivated (ST9). ). As a result, when the airport is in a non-operating state, only the first monitoring control station 10 operates and enters a cold standby state.

  According to the present embodiment, it is determined whether the airport is in an operating state or a non-operating state based on the presence / absence of a basic operating time schedule, an operating time extension schedule, and an emergency flight response mode. Sometimes, by activating not only the first monitoring control station (active system) 10 but also the second monitoring control station (standby system) 20, it is possible to quickly take over processing when the operating system fails. Thereby, the fall of the reliability of a system can be prevented. Further, when in a non-operating state, power consumption can be reduced by stopping the second monitoring control station 20. Thereby, the operating cost of the system can be reduced.

  In addition, according to the present embodiment, the second monitoring control station 10 performs the data equalization processing periodically from the first monitoring control station 10 to the second monitoring control station 20 when in the operating state, so that the second system that is the standby system. When the process is taken over by the monitoring control station 20, an operation equivalent to that of the first monitoring control station 10 which is an active system is possible.

  Next, a second configuration example of the monitoring control system in the present embodiment will be described. The second configuration example of the monitoring control system described below has the same basic configuration as the first configuration example shown in FIG.

  FIG. 4 is a diagram schematically illustrating the configuration of the processing unit 1 of the representative processing server 100 configuring the first monitoring control station 10 in the second configuration example of the monitoring control system.

  The processing unit 1 includes a system state monitoring unit 1E and a down sign determination unit 1F in addition to the start / stop processing unit 1C and the equalization processing unit 1D described in the first configuration example. Although not shown here, the processing unit 1 may further include the schedule management unit 1A and the emergency flight response management unit 1B described in the first configuration example. In this case, the first configuration It is possible to combine the operations described in the examples.

  The system state monitoring unit 1E includes the state of the monitoring control system, that is, the first server group included in the first monitoring control station 10, the second server group included in the second monitoring control station 20, the monitoring control station 30, the terminal device 40, and the like. Collect monitoring signals necessary to monitor the status of The monitoring signal collected by the system state monitoring unit 1E is, for example, the temperature of the CPU provided in the processing unit of the processing server (if the processing unit includes a plurality of CPUs, the temperature of each CPU), Calculation speed (when the CPU has a plurality of cores, the calculation speed of each core), whether to write to the volatile memory provided in the recording unit of the processing server (the recording unit includes a plurality of volatile memories) If it is possible to write to each volatile memory), volatile memory usage (if the recording unit has multiple volatile memories, each volatile memory usage), Whether to write to the non-volatile memory provided in the processing server (if the recording unit has multiple non-volatile memories, whether to write to each non-volatile memory), free space of the non-volatile memory ( If the recording unit is equipped with multiple non-volatile memories, the capacity of each non-volatile memory), whether there is a communication failure at the port of the communication unit of the processing server (the communication unit has multiple ports) In the case of communication failure at each port). The system state monitoring unit 1E collects monitoring signals almost always.

  The down sign determination unit 1F determines whether or not there is a sign of a down (failure occurrence) of the first monitoring control station 10 based on the monitoring signal collected by the system state monitoring unit 1E. Further, the down sign determination unit 1F compares the monitoring signal collected by the system state monitoring unit 1E with the threshold set by the input unit 43 of the terminal device 40, and determines whether there is a down sign. In some cases. Here, the sign of down is not an abnormality in which the first monitoring control station 10 goes down immediately, but corresponds to a state where the possibility of going down is extremely high.

  In this second configuration example, each processing server constituting the first server group of the first monitoring control station 10 is made redundant. For example, in the first processing server 10-1, the processing unit 11 includes a plurality of CPUs, the recording unit 12 includes a plurality of volatile memories and a plurality of nonvolatile memories, and the communication unit 13 includes a plurality of ports. The same applies to other processing servers. For this reason, even if an abnormality occurs in one device (for example, one of the two CPUs) in each processing server, another device (for example, one of the two CPUs) having an equivalent function. Since the other CPU) backs up, it does not go down immediately. However, the state in which such a device abnormality has occurred is a state in which there is an extremely high possibility that the first monitoring control station 10 will eventually go down.

  In such a second configuration example, when the CPU temperature exceeds a set threshold value, the down sign determination unit 1F has a plurality of cases where the calculation speed of one core of the CPU is lower than the set threshold value. When writing to one of the volatile memories becomes impossible, when the usage rate of one of the volatile memories exceeds a set threshold value, If writing to one of the non-volatile memories becomes impossible, if the free capacity of one of the non-volatile memories falls below a set threshold, multiple When a communication failure occurs in one of the ports, it is determined that there is a sign that the first monitoring control station 10 is down.

  Similarly to the first configuration example, the start / stop processing unit 1C starts the second monitoring control station 20 within the operation time and stops the second monitoring control station 20 outside the operation time. In addition, the start / stop processing unit 1C starts the second monitoring control station 20 that is stopped based on the fact that the down sign determination unit 1F determines that there is a down sign outside the operation time. The start / stop processing unit 1C activates the second monitoring control station 20 within the operation time, and if it is determined by the down sign determining unit 1F that there is a down sign, the second monitoring control station 1C The state where the station 20 is activated is maintained.

  The equalization processing unit 1D performs data equalization processing from the first monitoring control station 10 to the second monitoring control station 20. More specifically, the equalization processing unit 1D includes, for example, an internal clock, and when the current time becomes the equalization time based on the equalization schedule transmitted from the terminal device 40. The equalization process is performed. Since the specific equalization process is the same as that in the first configuration example, the description thereof is omitted.

  Also in the second configuration example of the present embodiment, the first supervisory control station 10 corresponds to an “active system” that operates almost continuously after the system is started up, and the second supervisory control station 20 The system is activated in the standby state, and corresponds to the “standby system” that is stopped outside the operation hours.

  Below, operation | movement of the monitoring control system in this embodiment is demonstrated more concretely.

  FIG. 5 is a flowchart for explaining the operation of the monitoring control system in the present embodiment.

  First, in the first monitoring control station (active system) 10, the equalization processing unit 1D determines whether or not the current time is a set time for equalization (step ST11). That is, the equalization processing unit 1D refers to the equalization schedule and compares it with the current time of the internal clock. When the equalization processing unit 1D determines that the current time is the set time for equalization (step ST11, Yes), the start / stop processing unit 1C includes the second monitoring control station (standby system) 20 Is determined to be stopped (step ST12).

  If the start / stop processing unit 1C determines that the second monitoring control station (standby system) 20 is stopped (step ST12, Yes), the start / stop processing unit 1C (Standby system) 20 is activated (step ST13). When it is determined by the activation / deactivation processing unit 1C that the second monitoring control station (standby system) 20 is not deactivated (that is, activated) (No in step ST12), or activated / deactivated in step ST13. After the second monitoring control station (standby system) 20 is activated by the processing unit 1C, the equalization processing unit 1D performs equalization processing (step ST14).

  When the equalization processing unit 1D determines that the current time is not the equalization setting time (step ST11, No), or the equalization processing unit 1D performs equalization processing in step ST14. Thereafter, the down sign determination unit 1F determines whether there is an abnormality in the monitoring control system based on the monitoring signals collected by the system state monitoring unit 1E (step ST15).

  If the down sign determining unit 1F determines that an abnormality has occurred in the monitoring control system (Yes in step ST15), the down sign determining unit 1F indicates that the abnormality is in the first monitoring control station (active system) 10. It is determined whether or not it is a sign of down (step ST16). If the down sign determining unit 1F determines that the down sign is present (Yes in step ST16), the start / stop processing unit 1C determines whether the second monitoring control station (standby system) 20 is stopped. It is determined whether or not (step ST17).

  When the start / stop processing unit 1C determines that the second monitoring control station (standby system) 20 is stopped (step ST17, Yes), the start / stop processing unit 1C (Standby system) 20 is activated (step ST18). When the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is not stopped (that is, activated) (step ST17, No), the process returns to step ST11 again. Thereby, in addition to the 1st monitoring control station 10, the 2nd monitoring control station 20 starts, and it will be in a hot standby state.

  On the other hand, when the down sign determining unit 1F determines that an abnormality has occurred in the monitoring control system, but it is determined not to be a down sign of the first monitoring control station (active system) 10 (for example, a fan of the processing server) When an abnormality such as a failure of the monitoring control slave station or the like occurs (No in step ST16), the start / stop processing unit 1C determines whether the second monitoring control station (standby system) 20 is starting up. It is determined whether or not (step ST19).

  When the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is activated (step ST19, Yes), the activation / deactivation processing unit 1C (Standby system) 20 is stopped (step ST20). When the activation / deactivation processing unit 1C determines that the second monitoring control station (standby system) 20 is not activated (that is, deactivated) (No in step ST19), the process returns to step ST11 again. As a result, only the first supervisory control station 10 operates and enters a cold standby state.

  According to such a second configuration example, the first monitoring control station (active system) 10 as well as the second monitoring control station (standby system) 20 is activated during the operation time, so that the first When a failure occurs in the monitoring control station 10, it is possible to immediately take over the processing from the first monitoring control station 10 to the second monitoring control station 20. In addition, outside the operation hours, the first monitoring control station 10 is activated, while the second monitoring control station 20 is stopped, but it is determined that the first monitoring control station 10 has a sign of down. In this case, by activating the second monitoring control station 20, even if a failure occurs in the first monitoring control station 10, the first monitoring control station 10 promptly processes it to the second monitoring control station 20. Can be taken over. Therefore, the power consumption of the standby system can be reduced, and the reliability of the system can be improved.

  In addition, by performing the data equalization processing periodically from the first monitoring control station 10 to the second monitoring control station 20, when the processing is handed over to the second monitoring control station 20, the first monitoring control station 20 Operation equivalent to 10 is possible.

  As described above, according to the present embodiment, it is possible to provide a monitoring control system capable of reducing the operation cost without causing a decrease in reliability.

  In addition, this invention is not limited to the said embodiment itself, In the stage of implementation, it can change and implement a component within the range which does not deviate from the summary. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  In the present embodiment described above, the first monitoring control station 10 and the second monitoring control station 20 may be installed in the same area or in a remote place.

  Further, the timing and frequency at which the equalization processing is performed within the operation time between the first monitoring control station 10 and the second monitoring control station 20 are not particularly limited. The higher the frequency of equalization processing, the larger the amount of data taken over by the second monitoring control station 20 when a failure occurs in the first monitoring control station 10 (that is, the lesser amount of data is lost). In the second monitoring control station 20, processing equivalent to that of the first monitoring control station 10 can be performed.

  However, when the first monitoring control station 10 and the second monitoring control station 20 are installed in a remote place, there is a possibility that a great load is applied to the network during the equalization process. For this reason, it is desirable to appropriately set the timing and frequency of performing the equalization processing in consideration of the network load.

DESCRIPTION OF SYMBOLS 10 ... 1st monitoring control station 100 ... Representative processing server 1 ... Processing part 1A ... Schedule management part 1B ... Emergency flight response management part 1C ... Start / stop processing part 1D ... Equalization processing part 1E ... System state monitoring part 1F ... Down sign determination unit 2 ... recording unit 3 ... communication unit 10-1 to 10-n ... processing server 20 ... second monitoring control station 30 ... monitoring control slave station 40 ... terminal device

Claims (4)

A first monitoring control station including a first server group; a second monitoring control station including a second server group having a configuration equivalent to that of the first server group and connected to the first monitoring control station via a network; In a supervisory control system comprising
The first supervisory control station
A schedule management unit that manages an operation time schedule that defines an operation start time and an operation end time;
The second monitoring control station is activated when the schedule management unit determines that the operation start time is reached, and the second monitoring control station is stopped when the schedule management unit determines that the operation end time is determined. A start / stop processing unit to
An emergency flight response management unit that manages the setting and release of an emergency flight response mode for responding to takeoff and landing of emergency flights outside the operating hours ;
With
The activation / deactivation processing unit activates the second monitoring control station when the emergency flight response management unit sets the emergency flight response mode, and the emergency flight response management unit releases the emergency flight response mode. supervisory control systems that characterized by stopping the second monitoring control station when. A first monitoring control station including a first server group; a second monitoring control station including a second server group having a configuration equivalent to that of the first server group and connected to the first monitoring control station via a network; In a supervisory control system comprising
The first supervisory control station
A schedule management unit that manages an operation time schedule that defines an operation start time and an operation end time;
The second monitoring control station is activated when the schedule management unit determines that the operation start time is reached, and the second monitoring control station is stopped when the schedule management unit determines that the operation end time is determined. A start / stop processing unit to
And system state monitoring unit for collecting monitoring signals required to monitor the state of the monitoring control system, the presence or absence of a sign of the down of the first monitoring and control station based on the monitoring signals collected by the system state monitoring unit A down sign determination unit for determining
The starting and ending processor, the down sign determination section based on the it is determined that there is a sign down by supervisory control systems that characterized in that activates the second monitoring control station stopped. A first monitoring control station including a first server group; a second monitoring control station including a second server group having a configuration equivalent to that of the first server group and connected to the first monitoring control station via a network; In a supervisory control system comprising
The first supervisory control station
A system status monitoring unit for collecting monitoring signals necessary for monitoring the status of the monitoring control system;
A down sign determining unit that determines whether or not there is a down sign of the first monitoring control station based on a monitoring signal collected by the system state monitoring unit;
The second monitoring control station is activated within the operation time, the second monitoring control station is stopped outside the operation time, and the down sign determination unit determines that there is a down sign outside the operation time. A start / stop processing unit that starts the second monitoring control station that is stopped based on
A supervisory control system characterized by comprising: Furthermore, an input unit for receiving a setting of a threshold necessary for determining whether or not there is a down sign by the down sign determination unit,
The down sign determination unit compares the monitoring signal collected by the system state monitor with the set threshold value by the input unit, according to claim, characterized in that to determine whether the sign of down 2 or 4. The supervisory control system according to 3 .

Images