JP6594004B2 - Supervisory control system - Google Patents

Description

  The present invention relates to a supervisory control system, and more particularly to simplification of an abnormal part specifying method in the supervisory control system.

In a power plant or the like, a monitoring control system has been put into practical use as an apparatus for controlling field equipment that transmits process values (for example, Patent Documents 1 to 5). The supervisory control system is configured by using a cable for a transmission path. In these supervisory control systems, a process value is transmitted to a control device by cable connection using a metal wire or optical fiber, or a process value is transmitted to the control device by a wireless communication function such as PHS (Personal Handy-phone System). Has been taken.

JP 2002-23832 A JP-A-4-40197 JP-A-6-260978 JP-A-9-32039 JP 2008-108111 A

  In a monitoring and control system that uses a cable for a transmission path, when an abnormality occurs in this cable, the state of the device ahead from that part becomes unclear. When recovering from an abnormality, it takes time and effort to check the device status. Further, when signal transmission is performed only by radio without using any cable in the transmission path, it is easily affected by external radio waves flying in the air as a general feature of radio transmission. In a plant of a social infrastructure system such as electricity and gas that requires high reliability, it takes time and effort to verify and deal with it in order to ensure reliability only by wireless transmission.

  The present invention has been made to solve the above-described problems. When an abnormality occurs, the system can easily identify the location where the abnormality has occurred while ensuring system reliability. The purpose is to obtain a monitoring and control system that can be realized.

A monitoring control system according to the present invention is connected to a wireless receiving device, and controls a plurality of field devices based on a CPU that calculates a control signal and a control signal transmitted from the CPU via a cable. a driver, and a relay unit for distributing distributes the data transmitted from the driver to the plurality of relay devices, have a self-diagnostic program including a plurality of processing, connected between said field device and the relay device And a wireless transmission device connected to the IO. When the self-diagnostic program starts and one process ends, the IO checks whether this process has been performed normally. If an abnormality is found in the process, the LED is turned on.If the process is normally performed, the process proceeds to the next process, and the check result is transmitted to the wireless transmission device. When receiving the check result from the line transmission equipment forwards the check result of the received CPU, the CPU may appear so that the driver is not able to communicate, the IO is from the IO by performing radio transmission When the check result can be confirmed, it is determined that the cause of the communication failure from the driver is not on the downstream side of the IO .

  According to the monitoring control system of the present invention, the process signal and the soundness check result of the device are transmitted and received through the transmission path by the cable, and at the same time, the soundness check result of the device is transmitted and received by wireless transmission. As a result, it is possible to easily identify the location of occurrence of an abnormality when an abnormality occurs while ensuring reliability.

It is a figure which shows the whole structure of the monitoring control system by Embodiment 1 of this invention. It is a figure explaining the flow which checks the reliability of the transmission / reception state in a monitoring control system. It is a figure which shows the whole structure of the monitoring control system by Embodiment 2 of this invention. It is a figure which shows the whole structure of the monitoring control system by Embodiment 3 of this invention. It is a figure which shows the whole structure of the monitoring control system by Embodiment 4 of this invention. It is a figure which shows the whole structure of the monitoring control system by Embodiment 5 of this invention. It is a figure which shows the whole structure of the monitoring control system by Embodiment 6 of this invention.

  A monitoring control system according to an embodiment of the present invention will be described below with reference to the drawings. In each figure, the same or similar components are denoted by the same reference numerals, and the sizes and scales of the corresponding components are independent. For example, when the same components that are not changed are illustrated in cross-sectional views in which a part of the configuration is changed, the sizes and scales of the same components may be different. In addition, the configuration of the monitoring control system actually includes a plurality of members, but for the sake of simplicity, only the portions necessary for the description are described, and the other portions are omitted.

Embodiment 1 FIG.
A first embodiment of the present invention will be described below with reference to FIG. The monitoring control system 100 includes a CPU (Central Processing Unit) 1, a driver 2, a relay unit 3, a relay device 4, an IO (Input Output) 5, a field device 6, and a human machine interface 10. ing. The cable 9a connects the human machine interface 10 and the CPU 1. The cable 9b connects the CPU 1 and the driver 2. The cable 9c connects the driver 2 and the relay unit 3. A cable 9 d (network cable) connects the relay unit 3 and the relay device 4. The cable 9e connects the relay device 4 and the IO 5. The cable 9f connects the IO 5 and the field device 6. IO5 is also called PIO (Process Input Output).

  The monitoring control system 100 monitors and controls the plurality of field devices 6a to 6c. An IO (Input Output) 5a is connected between the field device 6a and the relay device 4a and sucks up a process signal (process information) transmitted from the field device 6a to the CPU 1. Similarly, an IO (Input Output) 5b is connected between the field device 6b and the relay device 4b, and sucks up a process signal (process information) transmitted from the field device 6b to the CPU 1. Similarly, an IO (Input Output) 5c is connected between the field device 6c and the relay device 4c, and sucks up a process signal (process information) transmitted from the field device 6c to the CPU 1.

  The CPU 1 is provided with a wireless receiving device 7 that receives a wirelessly transmitted signal, and calculates a control signal for the field devices 6a to 6c. The driver 2 controls the field devices 6a to 6c based on a control signal transmitted from the CPU 1 via the cable 9b. The driver 2 functions as a master and controls IOs 5a to 5c corresponding to slaves. Each of the IOs 5a to 5c can check the reliability by monitoring the state of the own device by a self-diagnostic program that each of the IOs 5a to 5c has. Radio transmission devices 82a to 82c that send signals to the CPU 1 by radio transmission are attached to the IOs 5a to c. The driver 2 transmits / receives information to / from the CPU 1 and controls input (process signal) from the IO 5 and output (control signal) to the IO 5 by software.

  A plurality of relay devices 4 a to 4 c are connected to the relay unit 3. The relay unit 3 becomes a branch point and branches the relay device 4. Software is not usually installed in the relay devices 4a to 4c. There are cases where a plurality of IOs 5 are mounted on the relay device 4. In this case, the relay device 4 serves as a branch point and branches the IO 5. The relay device 4 and the relay unit 3 are connected by a network and are electrically separated because they transmit and receive with an optical signal. Software is not normally installed in the relay device 4. The IO 5 receives a process value (digital signal or analog signal) from the field device 6 or sends a control signal to the field device 6. Furthermore, the IO 5 performs signal updating and filtering by software.

  The operation of the monitoring control system 100 will be described. First, when a process signal (or process value) is input from the field device 6, the IO 5 receives the process signal from the field device 6. Further, this process signal is sent to the driver 2 via the relay device 4 and the relay unit 3. The driver 2 transmits the received process signal to the CPU 1. Conversely, when the field device 6 is controlled from the CPU 1, the driver 2 receives a control signal from the CPU 1. Further, this control signal is transmitted to the IO 5 via the relay unit 3 and the relay device 4. The IO 5 transmits the received control signal to the field device 6 as a process value. The field device 6 operates according to the received process value.

  Next, a flow for checking the reliability of the transmission / reception state in the monitoring control system will be described with reference to FIG. The flow of the software (self-diagnosis program) shown in this figure is incorporated in the IOs 5a to 5c. The self-diagnosis program includes a plurality of processes. First, the process is started by starting the power supply or the like (S1), and the IO 5 first performs the process A (S2). Next, the IO 5 checks the processing content (S3), and if the checked result is OK, that is, if the processing is normally performed, the processing B is performed (S4). In the case of NG (No Good), that is, if an abnormality is found in the processing, RAS (Reliability, Availability and Serviceability) processing is performed (S8), and the CPU 1 is notified of the abnormality of the own device. Further, an LED (Light Emitting Diode) is turned on (S9).

  Even after the process B, the check process of the own apparatus is performed (S5). If OK, the process proceeds to the process C (S6), and the check process is similarly performed (S7). The contents of each check process (S3, S5, S7) may be the same or different. When NG does not occur in the check process during one cycle, the process returns to process A and the same flow is repeated. In principle, if the check result is determined to be NG even once, the process proceeds to the RAS process (S8) and does not return to the flow starting from process A. RAS is three elements known as evaluation items for verifying whether a computer system can stably exhibit expected functions and performance. In the process of starting up when the device is abnormal and notifying the failure, the result is notified to the CPU through the same path as the input of the process signal.

  The number of man-hours for the check process increases according to the scale of the system. Process C is followed by process D, process E, and process F. Similarly, a check process is performed between the processes. In the present embodiment, if each check process is OK, a check result transmission process is performed before proceeding to the next process (S31, S51, S71). In the check result transmission process, the check result is once sent to the wireless transmission devices 82a to 82c. The wireless transmission devices 82a to 82c transmit the check results received by the wireless transmission devices 82a to 82c to the wireless reception device 7 attached to the CPU 1 by wireless transmission.

  The wireless receiving device 7 sends the received check result to the CPU 1. When the CPU 1 sends these check results to the human machine interface 10, the operator can know the check results of the IOs 5a to 5c. The communication path from the CPU 1 to the human machine interface and the operator is based on a general method. In the case of an input, a process signal for receiving a state from the field device 6 or controlling the field device 6 is processed in the order of the field device 6, IO5, the relay device 4, the relay unit 3, the driver 2, and the CPU 1. In the case of output, it is processed in the reverse order. The check results are processed in the order of IO5, relay device 4, relay unit 3, driver 2, and CPU 1 in the same manner as in the case of process value input.

  In the monitoring control system in which the transmission / reception of the check result by wireless transmission is not performed, for example, when the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate, the operator changes the status of the relay device 4, the IO 5, and the field device 6. I can't know. For this reason, even when only the relay unit 3 fails, it is necessary to check information on the presence / absence of the failure to the relay device 4, the IO 5, and the field device 6 at the time of recovery. On the other hand, in this embodiment, since the check result is received wirelessly from the IO 5, even if the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate with each other, the CPU 1 or the operator receives this check result. By checking, it can be checked whether the IO 5 is operating normally. Since the confirmation work of IO5 can be reduced, the labor required for the recovery work can be reduced.

  Further, in the monitoring control system in which the transmission / reception of the check result by wireless transmission is not performed, when the cable (transmission path) 9b between the CPU 1 and the driver 2 is disconnected, it seems that the driver 2 cannot communicate with the operator. . Even in this case, since the check result from the IO 5 can be confirmed by performing the wireless transmission as shown in the present embodiment, it can be determined that there is no reason why the driver 2 cannot communicate on the downstream side of the IO 5. As a result, it is possible to efficiently reach the result of the disconnection of the transmission path between the CPU 1 and the driver 2. When there is an abnormality in IO5, the check result is always transmitted to the CPU 1 in the order of S31 → S51 → S71 → S31 → S51 → S71 →... I can guess that.

Embodiment 2. FIG.
The second embodiment of the present invention will be described below with reference to FIG. The monitoring control system 100 includes a CPU (Central Processing Unit) 1, a driver 2, a relay unit 3, a relay device 4, an IO (Input Output) 5, and a field device 6. A wireless receiving device 7 for receiving a wirelessly transmitted signal is attached to the CPU 1. The driver 2 is provided with a wireless transmission device 81 that transmits a signal to the CPU 1 by wireless transmission. The driver 2 can check the reliability by monitoring the state of the own device by the self-diagnosis program.

Next, a flow for checking the reliability of the transmission / reception state in the monitoring control system will be described. The driver 2 incorporates a flow of software (self-diagnosis program) shown in FIG. First, the process is started by starting the power supply or the like (S1), and the process A is first performed (S2). Next, the driver 2 performs a check process of its own device (S3), and if the check result is OK, performs a process B (S4). In the case of NG (No Good), RAS (Reliability, Availability and Serviceability) processing is performed (S8), an LED (Light Emitting Diode) is turned on (S9), and the operator and the CPU 1 are notified of the abnormality of the own apparatus. Even after the process B, the check process of the own apparatus is performed (S5). If OK, the process proceeds to the process C (S6), and the check process is similarly performed (S7).

  The contents of each check process (S3, S5, S7) may be the same or different. When NG does not occur in the check process during one cycle, the process returns to process A and the same flow is repeated. In principle, if NG occurs in the check result even once, the process proceeds to the RAS process (S8) and does not return to the flow starting from process A. RAS is three elements known as evaluation items for verifying whether a computer system can stably exhibit expected functions and performance. In the process of starting up when the device is abnormal and notifying the failure, the result is notified to the CPU through the same path as the input of the process signal.

  The number of man-hours for the check process increases according to the scale of the system. Process C is followed by process D, process E, and process F. Similarly, a check process is performed between the processes. In the present embodiment, if each check process is OK, a check result transmission process is performed before proceeding to the next process (S31, S51, S71). The check result in the check result transmission process is once sent to the wireless transmission device 81. The wireless transmission device transmits the received check result to the wireless reception device 7 attached to the CPU 1 by wireless transmission.

  The wireless receiving device 7 sends the received check result to the CPU 1. When the CPU 1 sends these check results to the human machine interface 10, the operator can know the check results of the IOs 5a to 5c. The communication path from the CPU 1 to the human machine interface and the operator is based on a general method. In the case of an input, a process signal for receiving a state from the field device 6 or controlling the field device 6 is processed in the order of the field device 6, IO5, the relay device 4, the relay unit 3, the driver 2, and the CPU 1. In the case of output, it is processed in the reverse order. The check results are processed in the order of IO5, relay device 4, relay unit 3, driver 2, and CPU 1 in the same manner as in the case of process value input.

  In a monitoring and control system in which transmission / reception of check results by wireless transmission is not performed, for example, when the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate with each other, the operator changes the status of the relay device 4, the IO 5, and the field device 6. I can't know. For this reason, even when only the relay unit 3 fails, it is necessary to check information on the presence / absence of the failure to the relay device 4, the IO 5, and the field device 6 at the time of recovery. On the other hand, in this embodiment, since the check result is received wirelessly from the driver 2, even if the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate, the check result is confirmed. Thus, it can be confirmed whether or not the driver 2 is operating normally. Since the confirmation work of the driver 2 can be reduced, the labor required for the restoration work can be reduced.

  Further, in a monitoring and control system in which the transmission / reception of the check result by wireless transmission is not performed, when the transmission path between the CPU 1 and the driver 2 is disconnected, the driver 2 seems to be unable to communicate with the operator. Even in this case, since the check result from the driver 2 can be confirmed by performing wireless transmission as shown in the present embodiment, the cause of the communication failure from the driver 2 is identified and it is determined that there is no abnormality in the driver 2 it can. As a result, it is possible to efficiently reach the result of the disconnection of the transmission path between the CPU 1 and the driver 2. At this time, by constantly transmitting the check results to the CPU 1 in the order of S31 → S51 → S71 → S31 → S51 → S71 →..., It is estimated that an abnormality has occurred in the process in which the result of the check is no longer OK. be able to.

Embodiment 3 FIG.
FIG. 4 shows the overall configuration of the monitoring control system according to the third embodiment. In the present embodiment, the driver 2 and the IO 5 are provided with a check function using software (self-diagnostic program) as shown in FIG. As a result, the CPU 1 can acquire the check result from each device, so that the efficiency of detecting the disconnection point can be further increased as compared with the case where the wireless transmission device is installed only in the driver 2 or the IO 5.

  In a monitoring and control system in which transmission / reception of check results by wireless transmission is not performed, for example, when the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate with each other, the operator changes the status of the relay device 4, the IO 5, and the field device 6. I can't know. For this reason, even when only the relay unit 3 fails, it is necessary to check information on the presence / absence of the failure to the relay device 4, the IO 5, and the field device 6 at the time of recovery. On the other hand, in this embodiment, since the check result is received wirelessly from the driver 2 and the IO 5, the check result is confirmed even when the relay unit 3 fails and the driver 2 and the relay device 4 cannot communicate. By doing so, it can be confirmed whether the driver 2 and the IO 5 are operating normally. Since the operator's confirmation work can be reduced, the labor required for the restoration work can be reduced.

Embodiment 4 FIG.
In the fourth embodiment, as shown in FIG. 5, the third embodiment is provided with a function of switching the process value transmission path to wireless transmission when a transmission path abnormality occurs. By doing so, the supervisory control system behaves like a dual system. Usually, the CPU 1 and the driver 2 perform transmission and reception via a cable (communication line). When an abnormality occurs in the cable 9b, the CPU 1 and the driver 2 are switched to wireless transmission according to an instruction from the CPU 1. This makes it possible to improve the reliability of the entire system.

Embodiment 5 FIG.
In the fifth embodiment, as shown in FIG. 6, a plurality of wireless transmission devices attached to the driver 2 and the IO 5 are attached. That is, the wireless transmission device 81 and the wireless transmission device 82 are provided with spare wireless transmission devices. As a result, it is possible to assemble logic with a signal only for wireless transmission. For example, in the figure, the wireless transmission devices 81a to 81d are attached to the driver 2. Further, the wireless transmission devices 82a to 82d are attached to the IO5. By changing the frequency band of each radio and sending radio to the radio receiving device 7 and configuring the logic such as 2 out of 3 and 2 out of 4 on the receiving side, the reliability of the radio transmission signal is improved. can do.

Embodiment 6 FIG.
In the sixth embodiment, not only the driver 2 and the IO 5 but also the relay unit 3, the relay device 4, and the field device 6 are provided with a check function by software (self-diagnostic program). Further, as shown in FIG. 7, a wireless transmission device 83 having the same function as the wireless transmission device 81 and the wireless transmission device 82 is attached to the relay unit 3. In addition, a wireless transmission device 84 having the same function as the wireless transmission device 81 and the wireless transmission device 82 is attached to the relay device 4. The field device 6 is attached with a wireless transmission device 85 having the same functions as the wireless transmission device 81 and the wireless transmission device 82. As a result, the CPU 1 can acquire the check result from each device, so that the efficiency of detecting the disconnection point can be further increased as compared with the case where the wireless transmission device is installed only in the driver 2 and the IO 5.

  It should be noted that the present invention can be freely combined with each other within the scope of the invention, and each embodiment can be appropriately modified or omitted.

  1 CPU, 2 driver, 3 relay unit, 4 relay device, 5 IO, 6 field device, 7 wireless reception device, 9 cable, 10 human machine interface, 81 wireless transmission device, 82 wireless transmission device, 83 wireless transmission device, 84 Wireless transmission device, 85 Wireless transmission device, 100 Monitoring and control system

Claims (9)

A CPU that is connected to the wireless receiver and calculates a control signal;
A driver for controlling a plurality of field devices based on a control signal transmitted from the CPU via a cable;
A relay unit for distributing and distributing data transmitted from the driver to a plurality of relay devices;
Have a self-diagnostic program including a plurality of processing, and IO connected between the field device and the relay device,
A wireless transmission device connected to the IO,
The IO is
When the self-diagnosis program is started and one process is completed, it is checked whether this process has been performed normally,
If an abnormality is found in the process, turn on the LED,
If the process is normally performed, the process proceeds to the next process, and the check result is transmitted to the wireless transmission device.
When the wireless reception device receives the check result from the wireless transmission device, the wireless reception device transfers the received check result to the CPU .
The CPU
If the driver seems to be unable to communicate, but the IO can confirm the check result from the IO by performing wireless transmission,
A monitoring control system characterized in that it is determined that the cause of communication failure from the driver is not on the downstream side of the IO . A CPU that is connected to the wireless receiver and calculates a control signal;
A driver having a self-diagnosis program including a plurality of processes and controlling a plurality of field devices based on a control signal transmitted from the CPU via a cable;
A relay unit for distributing and distributing data transmitted from the driver to a plurality of relay devices;
And IO connected between the field device and the relay device,
A wireless transmission device connected to the driver,
The driver is
When the self-diagnosis program is started and one process is completed, it is checked whether this process has been performed normally,
If an abnormality is found in the process, turn on the LED,
If the process is normally performed, the process proceeds to the next process, and the check result is transmitted to the wireless transmission device.
When the wireless reception device receives the check result from the wireless transmission device, the wireless reception device transfers the received check result to the CPU .
The CPU
If the driver seems to be unable to communicate, but the driver can check the check result from the driver by performing wireless transmission,
It is determined that the cause of communication failure from the driver is not an abnormality of the driver . A wireless transmission device connected to the driver;
The monitoring control system according to claim 1, wherein the driver has a self-diagnosis program including a plurality of processes.   The monitoring control system according to claim 1, wherein the wireless transmission device includes a spare wireless transmission device.   4. The monitoring control system according to claim 2, wherein when the driver determines that there is an abnormality in the cable, the driver wirelessly transmits a process signal to the CPU.   The monitoring control system according to claim 2, wherein the driver and the IO perform wireless communication with the wireless receiving device in different frequency bands. A radio transmission device connected to the relay unit;
The monitoring control system according to claim 1, wherein the relay unit has a self-diagnosis program including a plurality of processes. The wireless transmission device further connected to the relay device,
The monitoring control system according to any one of claims 1 to 7, wherein the relay device has a self-diagnosis program including a plurality of processes. A wireless transmission device connected to the field device;
The supervisory control system according to any one of claims 1 to 8, wherein the field device has a self-diagnosis program including a plurality of processes.

Images