JP6861533B2 - Processing equipment, duplication system, processing method, and processing program - Google Patents

Description

The present invention relates to a processing device, a duplex system, a processing method, and a processing program.

Conventionally, there is known a duplex system in which one of a plurality of processing devices is used as an active system and the other is used as a standby system. In such a redundant system, when a serious failure occurs in the processing device of the working system, the processing device of the working system is switched to the standby system, and the processing device of the standby system is switched to the working system (see Patent Document 1).

Japanese Unexamined Patent Publication No. 2007-20721

In the above-mentioned conventional duplex system, the active system and the standby system are switched according to the cause of the failure in the processing device, but it is desirable to make further improvements from the viewpoint of ensuring the stability of the duplex system.

The present invention has been made in view of the above, and an object of the present invention is to obtain a processing apparatus capable of improving the stability of a duplex system.

In order to solve the above-mentioned problems and achieve the object, the processing apparatus of the present invention is characterized by including a processing unit, a monitoring unit, a system switching unit, and a restarting unit. The processing unit can switch the setting between the active system and the standby system. The monitoring unit monitors the state of the processing unit. The system switching unit switches the setting of the processing unit between the active system and the standby system based on the monitoring result of the monitoring unit. The restart unit is when the processing unit is switched to the standby system by the system switching unit, and when the processing unit is set to the standby system and the monitoring result of the monitoring unit satisfies the restart condition. In at least one of them, the processing unit is restarted.

According to the present invention, there is an effect that the stability of the duplex system can be improved.

The figure which shows an example of the structure of the duplex system which concerns on Embodiment 1 of this invention. The figure which shows an example of the structure of the processing apparatus which concerns on Embodiment 1. The figure which shows an example of the 1st score determination table which concerns on Embodiment 1. The figure which shows an example of the 2nd score determination table which concerns on Embodiment 1. The figure which shows the relationship between the system switching condition by the system switching part of the working system which concerns on Embodiment 1 and the first evaluation value. A flowchart showing an example of processing of the monitoring unit and the management unit according to the first embodiment. A flowchart showing an example of the process of step S14 shown in FIG. A flowchart showing an example of the process of step S26 shown in FIG. A flowchart showing an example of the process of step S15 shown in FIG. The figure which shows an example of the hardware configuration of the processing apparatus which concerns on Embodiment 1. A flowchart showing an example of processing of the monitoring unit and the management unit according to the second embodiment of the present invention. The figure which shows an example of the structure of the processing apparatus of the duplex system which concerns on Embodiment 3 of this invention. A flowchart showing an example of the active system management process of the management unit of the processing device according to the third embodiment. A flowchart showing an example of standby system management processing of the management unit of the processing apparatus according to the third embodiment.

Hereinafter, the processing apparatus, the duplication system, the processing method, and the processing program according to the embodiment of the present invention will be described in detail with reference to the drawings. The present invention is not limited to this embodiment.

Embodiment 1.
FIG. 1 is a diagram showing an example of a configuration of a duplex system according to a first embodiment of the present invention. As shown in FIG. 1, the duplex system 1 according to the first embodiment includes a processing device 2 ₁ and a processing device 2 ₂ . In the duplex system 1, one of the processing device 2 ₁ and the processing device 2 ₂ operates as an active system, and the other is set as a standby system, so that the active system and the standby system can be switched.

The duplex system 1 is installed in a station, and is a communication terminal system that transmits and receives information between a plurality of station devices 3 connected to a network 4 in the station and a central management device 5 connected to a network 6. Is. The station device 3 is a device installed in the station such as a passport issuing terminal, an automatic ticket gate, and a departure information board. Further, the duplex system 1 is not limited to the communication terminal system, and can be applied to various systems, and the installation location is not limited to the inside of the station.

The processing device 2 ₁ and the processing device 2 ₂ have the same configuration as each other, and in the following, the processing device 2 ₁ and the processing device 2 ₂ may be collectively referred to as the processing device 2. The processing device 2 includes a processing unit 20, a monitoring unit 21, a system switching unit 41, and a restart unit 42. The processing unit 20 of the processing device 2 ₁ is an example of the first processing unit, and the processing unit 20 of the _{processing device 2 2 is an example of the second processing unit.} The processing apparatus 2 _first monitoring portion 21 is an example of a first monitoring section, the processing unit 2 ₂ of the monitoring unit 21 is an example of a second monitoring unit.

The processing unit 20 executes the processing of the working system when it is set to the working system. As described above, the processing of the working system is the transmission / reception processing of information between the plurality of station devices 3 and the central management device 5, but the information processing may be other than the transmission / reception processing and is not limited to the transmission / reception processing. ..

The monitoring unit 21 monitors the state of the processing unit 20. The monitoring unit 21 can monitor at least one of the devices constituting the processing unit 20, the power supply voltage of the processing unit 20, the temperature of the processing unit 20, and the fan (not shown) as the state of the processing unit 20. The devices constituting the processing unit 20 are devices such as a CPU, an HDD, and a memory, and the temperature of the processing unit 20 is the internal temperature of the processing unit 20 or the ambient temperature of the processing unit 20.

Further, the monitoring unit 21 can also monitor the period during which the processing unit 20 is set in the working system and operates as the state of the processing unit 20. Hereinafter, the integrated operation period in which the processing unit 20 is set to the active system and operates may be described as an integrated operation period.

The monitoring unit 21 evaluates the processing unit 20 based on at least one of the devices constituting the processing unit 20, the power supply voltage of the processing unit 20, the temperature of the processing unit 20, the fan, and the integrated operating period. Can be calculated. The evaluation value Ss is set so as to become smaller as the state of the processing unit 20 approaches a state in which the processing of the working system cannot be executed.

Based on the monitoring result of the monitoring unit 21, the system switching unit 41 uses the setting of the processing unit 20 when the state of the processing unit 20 executing the processing of the active system satisfies the preset system switching condition. Switch between the system and the standby system. When the monitoring unit 21 calculates the evaluation value Ss described above, the system switching condition described above can be set to the condition that the evaluation value Ss calculated by the monitoring unit 21 is less than the threshold value Sth.

The threshold Sth is set so that the evaluation value Ss falls below before a serious abnormality occurs. The severe abnormality means that the state of the processing unit 20 cannot execute the processing of the active system. In the following, a state in which the processing unit 20 is not in a normal state but the state of the processing unit 20 can execute the processing of the active system may be referred to as a slight abnormality, and the performance of the processing unit 20 is lower than the normal state. The state of being in the state may be called performance deterioration.

By setting the condition that the evaluation value Ss is less than the threshold value Sth as the system switching condition, the system switching unit 41 switches the system, that is, the active system and the standby system before a serious abnormality occurs in the processing unit 20. Can be switched between. Therefore, the system switching can be performed during the operation of the processing unit 20 of the working system, and the time required for the system switching can be suppressed as compared with the case where the system switching is performed after a serious abnormality occurs, and the processing of the working system can be performed. The effect on can be reduced. It is sufficient that the setting of the processing unit 20 can be switched between the active system and the standby system before a serious abnormality occurs, and the system switching is not limited to the evaluation value Ss.

Further, when the processing unit 20 is set to the standby system, the restart unit 42 restarts the processing unit 20 based on the monitoring result of the monitoring unit 21. When a problem occurs in the OS (Operating System) that executes the processing of the processing unit 20 or the program running on the OS, the state of the processing unit 20 can be returned to the normal state by restarting. Therefore, the processing unit 20 set in the standby system can be made switchable to the active system, and the stability of the duplex system 1 can be improved.

Here, it is assumed that _{the processing unit 20 of the processing device 2 1} is set to the active system and the processing unit 20 of the processing device 2 ₂ is set to the standby system. Then, the setting of the system switching unit 41 of the processing apparatus 2 ₁ processing device 2 _first processing unit 20 switches from the active system to the standby system, the system switching unit 41 of the processing unit 2 ₂ of the processing device 2 _second processing unit 20 Suppose that the setting is switched from the standby system to the active system.

Restart portion 42 of the processing apparatus 2 ₁ can set the processing device 2 _first processor 20 after being switched from the active system to the standby system, to restart the processing device 2 _first processing unit 20. Thus, after system switching, returns the state of the processing apparatus 2 _first processing unit 20 in the normal state, it is possible to allow the next failover, it is possible to improve the stability of the duplex system 1. Hereinafter, the configuration and processing of the processing device 2 will be specifically described.

FIG. 2 is a diagram showing an example of the configuration of the processing device 2 according to the first embodiment. As shown in FIG. 2, the processing device 2 according to the first embodiment includes a communication unit 10, a power supply unit 11, a fan 12, and a control unit 13.

The communication unit 10 includes a first communication unit 16 and a second communication unit 17. The first communication unit 16 transmits / receives information to / from another processing device 2 and a plurality of station devices 3 via the network 4. The second communication unit 17 transmits / receives information to / from the central management device 5 via the network 6. The network 4 and the network 6 are intranets, but may be networks other than the intranet.

The power supply unit 11 generates a voltage to be supplied to the communication unit 10 and the control unit 13, and outputs the voltage to the communication unit 10 and the control unit 13. The fan 12 cools the inside of the control unit 13 based on the drive voltage output from the control unit 13.

The control unit 13 includes a processing unit 20, a monitoring unit 21, and a management unit 22. When the processing unit 20 is set to the working system, the processing unit 20 executes the transmission / reception processing which is the processing of the working system. As described above, the processing of the working system is not limited to the transmission / reception processing, and other processing may be executed.

The monitoring unit 21 includes a device monitoring unit 31, a RAS (Reliability Availability Serviceability) monitoring unit 32, and an evaluation value calculation unit 33. The device monitoring unit 31 monitors the status of the devices constituting the processing unit 20. The devices constituting the processing unit 20 include a CPU (Central Processing Unit), an HDD (Hard Disk Drive), and a memory. The CPU, memory, and HDD are the processor 101, the memory 102, and the HDD 103 of FIG. 10, which will be described later. The memory is a work area of the CPU that temporarily stores data when the CPU executes a program.

The device monitoring unit 31 includes a CPU state detection unit 34, an HDD state detection unit 35, and a memory state detection unit 36, and can monitor the degree of deterioration in the performance of the devices constituting the processing unit 20. The CPU state detection unit 34 detects which of the three states, the normal state, the caution state, and the warning state, is the state of the CPU. The warning state is worse than the caution state, but is better than the failure state in which the CPU is not operating.

The CPU state detection unit 34 can detect the state of the CPU based on the usage rate of the CPU. The CPU usage rate means the ratio of the time during which the CPU is performing some processing per unit time, and is also called the CPU load rate. The higher the CPU usage rate, the heavier the load on the CPU, the slower the processing speed of the CPU, and the higher the possibility that the processing of the CPU will be delayed. The CPU state detection unit 34 determines that the higher the CPU usage rate, the worse the CPU state.

Specifically, when the CPU usage rate is less than the first threshold value Rth1, the CPU state detection unit 34 determines that the CPU is in a normal state, and the CPU usage rate is equal to or higher than the first threshold value Rth1 and the second threshold value. If it is less than Rth2, the CPU determines that it is in a caution state. Further, the CPU state detection unit 34 determines that the CPU is in the warning state when the CPU usage rate is equal to or higher than the second threshold value Rth2.

Further, the CPU state detection unit 34 indicates that the CPU is in a failure state when the CPU does not operate or when the CPU usage rate continues to be the third threshold value Rth3 or higher, which is higher than the second threshold value Rth2. Can also be detected.

The HDD state detection unit 35 acquires SMART (Self-Monitoring Analysis and Reporting Technology) information from the HDD, and detects the state of the HDD based on the acquired SMART information. SMART information includes information such as an error rate when the CPU reads data from the HDD, a throughput capacity value, a total energization time, an overall processing capacity value of the HDD, and a temperature of the HDD.

The HDD state detection unit 35 detects which of the three states, the normal state, the caution state, and the warning state, is based on the SMART information. The HDD state detection unit 35 weights each piece of information constituting the SMART information and adds up the weighted values to quantify the deterioration state of the HDD performance.

The HDD state detection unit 35 determines which of the three states the HDD state is, based on the calculated numerical value, as in the case of the CPU. The performance of the HDD deteriorates as the error rate increases, deteriorates as the total energization time increases, and deteriorates as the throughput capacity value decreases. Further, the HDD state detection unit 35 can detect that the HDD is in a failed state when the HDD fails and does not operate.

The memory state detection unit 36 detects the state of the memory. The memory state detection unit 36 can detect the state of the memory based on the usage rate of the memory and the ratio of the failed sector. The memory usage rate means the ratio of the memory used by the CPU to the total storage capacity of the memory.

The memory state detection unit 36 weights the memory usage rate and the percentage of failed sectors, and adds up the weighted values to quantify the memory state. The memory state detection unit 36 can determine which of the three states the memory state is, based on the calculated numerical value, as in the case of the CPU. Further, the memory state detection unit 36 can detect that the memory is in a failure state when the memory stops operating.

The RAS monitoring unit 32 monitors the temperature of the processing unit 20, the power supply voltage of the processing unit 20, and the state of the fan 12. The RAS monitoring unit 32 includes a temperature state detection unit 37, a voltage state detection unit 38, and a fan state detection unit 39.

The temperature state detection unit 37 detects the temperature state of the processing unit 20. The temperature state detection unit 37 determines that the higher the temperature Tc of the processing unit 20, the worse the temperature state of the processing unit 20. Specifically, when the temperature Tc of the processing unit 20 is less than the first threshold value Tct1, the temperature state detection unit 37 determines that the temperature state of the processing unit 20 is in a normal state, and the temperature Tc of the processing unit 20 is changed. When the first threshold value is Tct1 or more and the second threshold value is less than Tct2, it is determined that the temperature state of the processing unit 20 is a caution state.

Further, when the temperature Tc of the processing unit 20 is equal to or higher than the second threshold value Tcts2 and less than the third threshold value Tct3, the temperature state detection unit 37 determines that the temperature state of the processing unit 20 is a warning state, and the processing unit 20 determines that the temperature state is a warning state. When the temperature Tc is equal to or higher than the third threshold value Tct3, it is determined that the temperature state of the processing unit 20 is a failure state. The third threshold value Tct3 is set to be equal to or higher than the rated temperature To of the processing device 2.

The voltage state detection unit 38 detects the state of the power supply voltage Vc supplied to the processing unit 20. The voltage state detection unit 38 determines that the lower the power supply voltage Vc supplied to the processing unit 20, the worse the state of the power supply voltage Vc. Specifically, when the power supply voltage Vc is equal to or higher than the first threshold value Vct1, the voltage state detection unit 38 determines that the state of the power supply voltage Vc is a normal state, and the power supply voltage Vc is less than the first threshold value Vcts1 and is the first. When the threshold value Vct is 2 or more, it is determined that the state of the power supply voltage Vc is a caution state.

Further, when the power supply voltage Vc is less than the second threshold value Vct2 and equal to or higher than the third threshold value Vcts3, the voltage state detection unit 38 determines that the state of the power supply voltage Vc is a warning state, and the power supply voltage Vc is the third threshold value Vcts3. If it is less than, it is determined that the state of the power supply voltage Vc is a failure state.

The fan state detection unit 39 detects the state of the fan 12. The fan state detection unit 39 can determine that the longer the stop time Ts of the fan 12 is, the worse the state of the fan 12. The stop time Ts of the fan 12 is the time during which the fan 12 to be operated is stopped for some reason, and is the continuous stop time of the fan 12 or the stop time of the fan 12 per unit time.

The fan state detection unit 39 determines that the state of the fan 12 is in a normal state when the stop time Ts of the fan 12 is less than the first threshold value Tsth1, and the stop time Ts of the fan 12 is equal to or more than the first threshold value Tsth1. When the threshold value is less than Tsth2, it is determined that the state of the fan 12 is a caution state. Further, the fan state detection unit 39 determines that the state of the fan 12 is a warning state when the stop time Ts of the fan 12 is equal to or more than the second threshold value Tsth2 and less than the third threshold value Tsth3.

The fan state detection unit 39 determines that the state of the fan 12 is a failure state when the stop time Ts of the fan 12 is equal to or greater than the third threshold value Tsth3. The fan state detection unit 39 can also determine that the longer the cumulative operating time of the fan 12, the worse the state of the fan 12 is, in addition to the stop time Ts or instead of the stop time Ts.

The evaluation value calculation unit 33 calculates the evaluation value Ss based on the monitoring result by the monitoring unit 21. As described above, the evaluation value Ss is set so as to become smaller as the state of the processing unit 20 approaches the state in which the processing of the working system cannot be executed.

The evaluation value calculation unit 33 has a first score determination table 50 and a second score determination table 51, and evaluates based on the first score determination table 50 and the second score determination table 51. The value Ss can be calculated.

FIG. 3 is a diagram showing an example of the first score determination table 50. As shown in FIG. 3, the first score determination table 50 is a table that defines the relationship between the CPU state, the HDD state, and the memory state and the three scores Sa, Sb, and Sc.

In the example shown in FIG. 3, when the CPU state is a normal state, a value of "100" is assigned, and when the CPU state is a caution state, a value of "60" is assigned and the CPU state is warned. If it is in a state, a value of "30" is assigned. Further, "1.0" is set as the weighting of the CPU.

The CPU score Sa is calculated based on the state of the CPU and the weighting of the CPU. When the CPU state is a normal state, Sa = 100 × 1.0 = 100, and when the CPU state is a caution state, Sa = 60 × 1.0 = 60, and the CPU state is a warning state. If, Sa = 30 × 1.0 = 30.

Similarly, the HDD score Sb is calculated based on the HDD state and weighting. When the state of the HDD is a normal state, Sb = 100 × 0.5 = 50, and when the state of the HDD is a caution state, Sb = 55 × 0.5 = 27.5, and the state of the HDD is In the warning state, Sb = 20 × 0.5 = 10.

Similarly, the memory score Sc is calculated based on the memory state and weighting. When the memory state is the normal state, Sc = 100 × 0.5 = 50, and when the memory state is the caution state, Sc = 50 × 0.5 = 25, and the memory state is the warning state. If, Sc = 10 × 0.5 = 5.

FIG. 4 is a diagram showing an example of the second score determination table 51. As shown in FIG. 4, the second score determination table 51 is a table that defines the relationship between the temperature state of the processing unit 20, the state of the power supply voltage Vc, and the state of the fan 12 and the three scores Sd, Se, and Sf. Is.

The temperature score Sd is calculated based on the temperature state and the weighting, as in the case of the scores Sa to Sc described above. When the temperature state is the normal state, Sd = 100 × 0.75 = 75, and when the temperature state is the caution state, Sd = 60 × 0.75 = 45, and the temperature state is the warning state. If, then Sd = 30 × 0.75 = 22.5.

Similarly, the score Se of the power supply voltage Vc is calculated based on the state and weighting of the power supply voltage Vc. When the state of the power supply voltage Vc is the normal state, Se = 100 × 1.0 = 100, and when the state of the power supply voltage Vc is the caution state, Se = 70 × 1.0 = 70, and the power supply voltage. When the state of Vc is a warning state, Se = 40 × 1.0 = 40.

Similarly, the fan 12 score Sf is calculated based on the fan 12 state and weighting. When the state of the fan 12 is a normal state, Sf = 100 × 0.5 = 50, and when the state of the fan 12 is a caution state, Sf = 50 × 0.5 = 25, and the state of the fan 12 Is a warning state, Sf = 10 × 0.5 = 5.

As shown in the following equation (1), the evaluation value calculation unit 33 calculates the total score value St, which is the total value of the above-mentioned six scores Sa to Sf.
St = Sa + Sb + Sc + Sd + Se + Sf ... (1)

Then, as shown in the following equation (2), the evaluation value calculation unit 33 evaluates by dividing the total score value St by the normal total Stn, which is the total value of the scores Sa to Sf in the normal state. Find the value Ss. When the first score determination table 50 and the second score determination table 51 are in the states shown in FIGS. 3 and 4, Stn = 100 + 50 + 50 + 75 + 100 + 50 = 425.
Ss = St / Stn ... (2)

In each of the score determination tables 50 and 51, when there is an external setting request, the value included in the setting request is set by the monitoring unit 21. As a result, the score determination tables 50 and 51 can be easily updated.

Further, a plurality of each score determination table 50, 51 may be provided in the evaluation value calculation unit 33, and the evaluation value calculation unit 33 may be provided with each score determination table 50, depending on at least one of time zone, season, and humidity. By switching 51, the determination accuracy of the evaluation value Ss can be further improved.

The calculation of the evaluation value Ss is not limited to the above-mentioned calculation method. The detection units 34 to 39 can calculate the scores Sa to Sf. In this case, the evaluation value calculation unit 33 can also calculate the evaluation value Ss based on the scores Sa to Sf notified from the detection units 34 to 39.

In addition, the monitoring unit 21 can also perform a part of the above-mentioned processing. The monitoring unit 21 can also calculate the evaluation value Ss using 5 or less scores out of the 6 scores Sa to Sf. Further, in each of the score determination tables 50 and 51, different values may not be assigned to the three states of the normal state, the attention state, and the warning state as described above, and different values may be assigned to each of the four or more states. Can also be assigned.

The evaluation value calculation unit 33 periodically calculates the evaluation value Ss, and each time the evaluation value Ss is calculated, the calculated evaluation value Ss can be notified to the management unit 22. Further, the evaluation value calculation unit 33 can notify the calculated evaluation value Ss to the other processing device 2. Specifically, the evaluation value computing unit 33 of the processing unit 2 ₁ is able to notify the calculated evaluation value Ss to via the communication unit 10 and the network 4 to the processing unit 2 _2. The evaluation value calculation unit 33 of the processing unit 2 ₂ can be notified to the processing device 2 ₁ via the communication unit 10 and the network 4 the calculated evaluation value Ss.

Further, when the state of the CPU, the state of the HDD, the state of the memory, the temperature state of the processing unit 20, the state of the power supply voltage Vc, and the state of the fan 12 become the above-mentioned failure states, the monitoring unit 21 sets the failure state. The indicated information can be notified to the system switching unit 41.

The management unit 22 of the control unit 13 shown in FIG. 2 includes a system switching unit 41 and a restart unit 42. The system switching unit 41 is based on the information indicating the failure state notified from the monitoring unit 21, the evaluation value Ss notified from the monitoring unit 21, and the evaluation value Ss notified from the other processing device 2. The setting of the processing unit 20 executing the processing is changed to the standby system. Further, the system switching unit 41 changes the setting of the processing unit 20 from the standby system to the active system when there is a system switching request from the other processing device 2.

Here, for convenience of explanation, the processing device 2 in which the processing unit 20 is set in the working system is set as the processing device 2 in the working system, and the processing device 2 in which the processing unit 20 is set in the standby system is used as the processing device in the standby system. Let it be 2. The monitoring unit 21, system switching unit 41, and restarting unit 42 of the processing device 2 of the working system are designated as the monitoring unit 21, system switching unit 41, and restarting unit 42 of the working system. The monitoring unit 21, system switching unit 41, and restarting unit 42 of the standby system processing device 2 are designated as the standby system monitoring unit 21, system switching unit 41, and restarting unit 42.

The system switching unit 41 of the working system switches the system to change the setting of the processing unit 20 set in the working system to the standby system when the monitoring unit 21 of the working system notifies the information indicating the failure status. Can be done. As a result, when the processing unit 20 set in the working system cannot continue the processing of the working system, the system can be switched.

When performing system switching, the system switching unit 41 of the working system transmits a system switching request to the system switching unit 41 of the standby system via the communication unit 10 and the network 4. The system switching unit 41 of the standby system executes a process of switching the processing unit 20 set in the standby system to the active system, and when the switching process is completed, transmits a switching response to the system switching unit 41 of the active system. .. After receiving the switching response, the system switching unit 41 of the working system completes the system switching by switching the processing unit 20 set in the working system to the standby system.

Further, the system switching unit 41 of the active system may switch the system based on the evaluation value Ss notified from the monitoring unit 21 of the active system and the evaluation value Ss notified from the monitoring unit 21 of the standby system. it can. In the following, the evaluation value Ss notified from the monitoring unit 21 of the active system is referred to as the first evaluation value Ss1, and the evaluation value Ss notified from the monitoring unit 21 of the standby system is referred to as the second evaluation value Ss2.

The system switching unit 41 stores the information of the first threshold value Sth1 and the information of the second threshold value Sth2, and stores the first evaluation value Ss1, the second evaluation value Ss2, the first threshold value Sth1, and the second. The system switching described above can be performed based on the threshold value Sth2 of. The relationship between the first threshold value Sth1 and the second threshold value Sth2 is Sth1> Sth2.

FIG. 5 is a diagram showing the relationship between the system switching condition by the system switching unit 41 of the working system and the first evaluation value Ss1. As shown in FIG. 5, when the first evaluation value Ss1 is equal to or higher than the first threshold value Sth1, the system switching unit 41 of the working system does not switch the system and executes the processing of the working system. Keep the 20 setting.

Further, the system switching unit 41 of the working system switches the system when the first evaluation value Ss1 is less than the first threshold value Sth1. As a result, the system can be switched before the state of the processing unit 20 becomes a state in which the processing of the active system cannot be executed, and the system can be switched after the processing unit 20 is in a failure state, as compared with the case where the system is switched. The influence on the processing of the system can be reduced.

When the first evaluation value Ss1 is less than the first threshold value Sth1 and equal to or greater than the second threshold value Sth2, the system switching unit 41 of the working system switches the system at a designated time. The designated time is a preset time, and is specified from a time zone in which the processing of the active system is not executed or a time zone in which the processing of the active system is small. As a result, when the state of the processing unit 20 is not high in the possibility that the processing of the working system cannot be executed, the system can be switched in a time zone where the influence on the processing of the working system is small, and the processing of the working system can be performed. The influence of can be reduced. Therefore, the stability of the duplex system 1 can be improved.

Further, when the first evaluation value Ss1 is less than the second threshold value Sth2, the system switching unit 41 of the working system immediately switches the system regardless of whether or not it is the designated time. As a result, when there is a high possibility that the processing of the processing unit 20 cannot execute the processing of the working system, the system can be switched immediately, and the influence on the processing of the working system can be reduced. Therefore, the stability of the duplex system 1 can be improved.

Even when Ss1 <Sth1, the system switching unit 41 can not perform system switching if the second evaluation value Ss2 is not equal to or higher than the first threshold value Sth1. Further, even when Ss1 <Sth1, the system switching unit 41 has the first evaluation value Ss1 smaller than the second evaluation value Ss2 and the first evaluation value Ss1 and the second evaluation value Ss2. When the difference ΔSs of is less than the third threshold value Sth3, the system switching can not be performed. As a result, when the state of the processing unit 20 of the standby system is in a bad state, it is possible to suppress system switching and improve the stability of the duplex system 1.

The restart unit 42 shown in FIG. 2 restarts the processing unit 20 set in the standby system. The restart of the processing unit 20 is the restart of the OS running in the processing unit 20 or the restart of the program running on the OS. The restart of the processing unit 20 may include an initialization process of at least one of the OS and the program running on the OS.

The restart unit 42 restarts the processing unit 20 that has been switched to the standby system after the setting of the processing unit 20 has been switched from the active system to the standby system by the system switching unit 41. By restarting, the state of the processing unit 20 can be returned to the normal state so that the processing unit 20 changed to the standby system can be switched to the active system, and the stability of the duplex system 1 can be improved. ..

Further, when Sth1> Ss ≧ Sth2, the system is switched at the designated time. Therefore, the restart unit 42 restarts after the system is switched, so that the processing of the active system is not executed or the active system is not executed. It is possible to restart during a time when there is little processing. Therefore, even if the system is switched again immediately after the system is switched at the specified time, the influence on the processing of the active system can be suppressed and the stability of the duplex system 1 can be improved. Can be done.

Subsequently, the operations of the monitoring unit 21 and the management unit 22 in the processing device 2 will be described with reference to the flowchart. FIG. 6 is a flowchart showing an example of the processing of the monitoring unit 21 and the management unit 22 according to the first embodiment, and the series of processing described in the flowchart of FIG. 6 is repeatedly executed.

As shown in FIG. 6, the monitoring unit 21 generates device monitoring information (step S10) and generates RAS monitoring information (step S11). The device monitoring information is information indicating the CPU status, HDD status, and memory status described above, and the RAS monitoring information is the temperature status of the processing unit 20, the power supply voltage Vc status, and the fan 12 status described above. This is information indicating. The monitoring unit 21 calculates the above-mentioned evaluation value Ss based on the generated device monitoring information and RAS monitoring information (step S12).

Next, the management unit 22 determines whether or not the processing unit 20 is set in the active system (step S13). When the management unit 22 determines that the processing unit 20 is set to the active system (step S13: Yes), the management unit 22 executes the active system management process (step S14), and ends the process shown in FIG. The process of step S14 is the process of steps S20 to S30 shown in FIG. 7, which will be described in detail later.

If the management unit 22 determines that the processing unit 20 is not set in the active system (step S13: No), the management unit 22 executes the standby system management process (step S15), and ends the process shown in FIG. The process of step S15 is the process of steps S40 to S50 shown in FIG. 9, which will be described in detail later.

FIG. 7 is a flowchart showing an example of the process of step S14 shown in FIG. As shown in FIG. 7, the management unit 22 determines whether or not the evaluation value request has been received from the standby system processing device 2 (step S20). When the management unit 22 determines that the evaluation value request has been received (step S20: Yes), the management unit 22 transmits the first evaluation value Ss1 to the standby system processing device 2 via the communication unit 10 and the network 4 (step S21). ).

After the processing in step S21, the management unit 22 determines whether or not a system switching request has been received from the standby system processing device 2 (step S22). When the management unit 22 determines that the system switching request has been received (step S22: Yes), the management unit 22 switches the setting of the processing unit 20 from the active system to the standby system (step S23), and sends a switching response to the transmission source of the system switching request. It is transmitted to the processing device 2 (step S24). In the system switching, the system switching process is performed by the working system processing unit 20 and the standby system processing unit 20 so that the processing of the working system is not interrupted or the processing of the working system is interrupted for a short time. Be told.

When the management unit 22 determines that the evaluation value request has not been received (step S20: No), the management unit 22 acquires the second evaluation value Ss2 from the standby system processing device 2 (step S25). Next, the management unit 22 determines whether or not the system switching condition is satisfied (step S26). The process of step S26 is the process of steps S31 to S39 shown in FIG. 8, which will be described in detail later.

When the management unit 22 determines that the system switching condition is satisfied (step S26: Yes), the management unit 22 transmits a system switching request to another processing device 2 which is a standby system via the communication unit 10 and the network 4 (step S27). .. Subsequently, the management unit 22 determines whether or not a switching response has been received from the other processing device 2 (step S28).

If the management unit 22 has not received the switching response (step S28: No), the management unit 22 repeats the process of step S28. When the management unit 22 receives the switching response (step S28: Yes), the management unit 22 switches the setting of the processing unit 20 from the active system to the standby system (step S29), and restarts the processing unit 20 (step S30). In the following, the restart in step S30 may be described as restart after system switching.

FIG. 8 is a flowchart showing an example of the process of step S26 shown in FIG. As shown in FIG. 8, the management unit 22 determines whether or not the first evaluation value Ss1 is equal to or greater than the first threshold value Sth1 (step S31). When the management unit 22 determines that the first evaluation value Ss1 is not equal to or higher than the first threshold value Sth1 (step S31: No), the management unit 22 determines whether or not the second evaluation value Ss2 is equal to or higher than the first threshold value Sth1. Determine (step S32).

When the management unit 22 determines that the second evaluation value Ss2 is not equal to or higher than the first threshold value Sth1 (step S32: No), the management unit 22 determines whether or not the second evaluation value Ss2 is equal to or higher than the second threshold value Sth2. Determine (step S33). When the management unit 22 determines that the second evaluation value Ss2 is equal to or higher than the second threshold value Sth2 (step S33: Yes), the evaluation value difference ΔSs between the first evaluation value Ss1 and the second evaluation value Ss2. Is determined to be equal to or higher than the third threshold value Sth3 (step S34). It should be noted that ΔSs = Ss2-Ss1.

When the management unit 22 determines that Ss2 ≧ Sth1 (step S32: Yes) or ΔSs ≧ Sth3 (step S34: Yes), the first evaluation value Ss1 is the second threshold value. It is determined whether or not it is Sth2 or more (step S37).

When the management unit 22 determines that Ss1 ≧ Sth2 (step S37: Yes), the management unit 22 determines whether or not the preset designated time has arrived (step S38). The management unit 22 satisfies the system switching condition when it is determined that Ss1 ≧ Sth2 is not satisfied (step S37: No) or when it is determined that the preset designated time has arrived (step S38: Yes). (Step S39).

When the management unit 22 determines that Ss1 ≧ Sth1 (step S31: Yes), determines that Ss2 ≧ Sth2 is not (step S33: No), and determines that ΔSs ≧ Sth3 is not (step S34: No), when it is determined that the designated time has not arrived (step S38: No), it is determined that the system switching condition is not satisfied (step S35).

FIG. 9 is a flowchart showing an example of the process of step S15 shown in FIG. As shown in FIG. 9, the management unit 22 determines whether or not the system has just been restarted after the system has been switched (step S40). When the management unit 22 determines that it is not immediately after restarting after switching the system (step S40: No), the management unit 22 transmits the second evaluation value Ss2 to the processing device 2 of the active system via the communication unit 10 and the network 4. (Step S41).

Subsequently, the management unit 22 determines whether or not a system switching request has been received from the processing device 2 of the active system (step S42). When it is determined that the system switching request has been received (step S42: Yes), the processing unit 20 is switched from the standby system to the active system (step S43), and the switching response is transmitted to the processing device 2 that is the source of the system switching request. (Step S44).

When the management unit 22 determines in step S40 that the system has just been restarted after switching (step S40: Yes), the management unit 22 requests an evaluation value from the working system processing device 2 and causes the working system processing device 2 to go to the second stage. The evaluation value Ss1 of 1 is acquired (step S45). Then, the management unit 22 determines whether or not the system switching condition is satisfied, as in the process of step S26 (step S46).

When the management unit 22 determines that the system switching condition is satisfied (step S46: Yes), the management unit 22 prepares to switch to the working system of the processing unit 20 (step S47), and the management unit 22 prepares to switch to the working system via the communication unit 10 and the network 4. A system switching request is transmitted to the processing device 2 (step S48). Subsequently, the management unit 22 determines whether or not a switching response has been received from the processing device 2 at the transmission destination of the system switching request (step S49). When the management unit 22 determines that the switching response has not been received (step S49: No), the management unit 22 repeats the process of step S49.

When the management unit 22 determines that the switching response has been received (step S49: Yes), the management unit 22 switches the setting of the processing unit 20 to the working system, and causes the processing unit 20 to start executing the processing of the working system (step S50). .. When the processing of step S44 is completed, the processing of step S50 is completed, or it is determined that the system switching request has not been received (step S42: No), the management unit 22 determines that the system switching condition is not satisfied. If this is the case (step S46: No), the process shown in FIG. 9 is terminated.

FIG. 10 is a diagram showing an example of the hardware configuration of the processing device 2 according to the first embodiment. As shown in FIG. 10, the processing device 2 is a computer including a processor 101, a memory 102, an HDD 103, and an interface circuit 104. The processor 101, the memory 102, the HDD 103, and the interface circuit 104 can send and receive data to and from each other by the bus 105. The communication unit 10 is realized by the interface circuit 104.

The processor 101 executes the functions of the processing unit 20, the monitoring unit 21, and the management unit 22 by reading and executing the OS and the processing program stored in the HDD 103. The processor 101 transmits an OS and a processing program from one or more storage media of a magnetic disk, a USB (Universal Serial Bus) memory, an optical disk, a compact disk, and a DVD (Digital Versatile Disc) via an interface (not shown). It can also be stored in the read-out HDD 103 and executed.

The processor 101 is an example of a processing circuit, and includes one or more of a CPU, a DSP (Digital Signal Processer), and a system LSI (Large Scale Integration). The memory 102 is a storage area used as a work area of the processor 101, and is a non-volatile or volatile semiconductor memory represented by a RAM (Random Access Memory).

As described above, the processing device 2 according to the first embodiment includes a processing unit 20, a monitoring unit 21, a system switching unit 41, and a restart unit 42. The processing unit 20 executes the processing of the working system. The monitoring unit 21 monitors the state of the processing unit 20. The system switching unit 41 switches the setting of the processing unit 20 between the active system and the standby system based on the monitoring result of the monitoring unit 21. The restart unit 42 restarts the processing unit 20 when the processing unit 20 is switched to the standby system by the system switching unit 41, or when the monitoring result of the monitoring unit 21 satisfies the restart condition. By restarting the processing unit 20, the possibility that the state of the processing unit 20 that has deteriorated will return to the normal state can be increased, and the stability of the duplex system 1 can be improved.

Further, the monitoring unit 21 calculates the first evaluation value Ss1 based on the state of the processing unit 20, and also sets the second evaluation value Ss2 based on the state of the processing unit 20 in the other processing device 2 to the other processing device 2. Get from. The system switching unit 41 switches the setting of the processing unit 20 between the active system and the standby system based on the first evaluation value Ss1 and the second evaluation value Ss2. By using the evaluation value of the working system and the evaluation value of the standby system, it is possible to easily and appropriately compare the state of the processing unit 20 of the working system and the state of the processing unit 20 of the standby system, and the stability of the duplex system 1 is stable. The sex can be improved.

Further, the system switching unit 41 waits for the setting of the processing unit 20 from the working system when the processing unit 20 is set as the working system and the first evaluation value Ss1 is less than the first threshold value Sth1. Switch to the system. The restart unit 42 restarts the processing unit 20 after the setting of the processing unit 20 is switched from the active system to the standby system by the system switching unit 41. When the first evaluation value Ss1 is less than the first threshold value Sth1, the setting of the processing unit 20 is switched from the active system to the standby system. Therefore, by appropriately setting the first threshold value Sth1, the working system can be set. System switching can be performed while suppressing the effect on processing.

Further, when the system switching unit 41 determines that the first evaluation value Ss1 is less than the first threshold value Sth1 and is equal to or more than the second threshold value Sth2 in a state where the processing unit 20 is set as the active system. When the preset time is reached, the setting of the processing unit 20 is switched from the active system to the standby system. Since the system is switched at a preset time, the system is in a time zone where the influence on the processing of the active system is small when the state of the processing unit 20 is not so high that the processing of the active system cannot be executed. Switching can be performed, and the influence on the processing of the working system can be reduced.

Further, when the system switching unit 41 determines that the first evaluation value Ss1 is less than the second threshold value Sth2 in the state where the processing unit 20 is set as the active system, the system switching unit 41 has reached a preset time. Regardless of whether or not, the setting of the processing unit 20 is switched from the active system to the standby system. As a result, in a state where there is a high possibility that the processing of the working system cannot be executed in the state of the processing unit 20, the system can be switched immediately, and the influence on the processing of the working system can be reduced.

Further, in the system switching unit 41, when the processing unit 20 is set to the working system, the first evaluation value Ss1 is lower than the second evaluation value Ss2, and the first evaluation value Ss1 and the second evaluation value Ss2 When the difference ΔSs with and is equal to or greater than the third threshold value Sth3, the setting of the processing unit 20 is switched from the active system to the standby system. As a result, it is possible to prevent the system from being switched to the standby system processing device 2 in which the evaluation value Ss is not so different from that of the working system processing device 2, and it is possible to prevent the system switching from being frequently performed. The stability of the duplex system 1 can be improved.

Further, the monitoring unit 21 monitors at least one state of the device constituting the processing unit 20, the power supply voltage of the processing unit 20, and the temperature of the processing unit 20 as the state of the processing unit 20.

Embodiment 2.
The duplex system of the second embodiment is implemented in that the restart unit 42 of the processing device 2 adds a process of executing a restart based on the first evaluation value Ss1 and the second evaluation value Ss2. It is different from the duplex system 1 of the first embodiment. The processing apparatus of the duplex system according to the second embodiment has the same configuration and the same processing as the processing apparatus 2 according to the first embodiment, except that the processing of the restart unit is partially different. It will be used, and the processing different from the first embodiment will be mainly described.

In the duplex system 1 according to the second embodiment, the restart unit 42 of the processing device 2 set in the standby system restarts the processing unit 20 of the standby system based on the second evaluation value Ss2.

Specifically, the standby system restart unit 42 can restart the standby system processing unit 20 when the second evaluation value Ss2 is less than the fourth threshold value Sth4. As a result, if there is a possibility that the processing of the active system cannot be executed if the processing unit 20 of the standby system is switched to the active system, the state of the processing unit 20 becomes normal by restarting the standby system. The possibility of recovery can be increased, and the stability of the duplex system 1 can be improved.

Further, in the standby system restart unit 42, even when the second evaluation value Ss2 is less than the fourth threshold value Sth4, the first evaluation value Ss1 is larger than the second evaluation value Ss2 and the second evaluation value Ss2 is second. Unless the difference ΔSs between the evaluation value Ss1 of 1 and the second evaluation value Ss2 is equal to or greater than the fifth threshold value Sth5, the processing unit 20 of the standby system may not be restarted. As a result, when the state of the processing unit 20 of the active system is good, the processing unit 20 of the standby system can be restarted. Therefore, it is possible to prevent the processing unit 20 of the active system and the processing unit 20 of the standby system from restarting at the same time, and the stability of the duplex system 1 can be improved.

In the standby system restart unit 42, the first evaluation value Ss1 is less than the first threshold value Sth1 and equal to or greater than the second threshold value Sth2, and the period up to the designated time is shorter than the preset period T1. In this case, even if the second evaluation value Ss2 is less than the fourth threshold value Sth4, the processing unit 20 of the standby system may not be restarted. As a result, it is possible to prevent the processing unit 20 of the active system and the processing unit 20 of the standby system from restarting at the same time, and the stability of the duplex system 1 can be improved.

FIG. 11 is a flowchart showing an example of processing of the monitoring unit 21 and the management unit 22 according to the second embodiment. Since steps S40 to S50 shown in FIG. 11 are the processes of steps S40 to S50 of FIG. 9, the description thereof will be omitted.

As shown in FIG. 11, when it is determined that the system switching request has not been received (step S42: No), the management unit 22 acquires the first evaluation value Ss1 from the processing device 2 of the active system (step S51). ). Then, the management unit 22 determines whether or not the restart condition is satisfied based on the second evaluation value Ss2, or the first evaluation value Ss1 and the second evaluation value Ss2 (step S52).

When the management unit 22 determines that the restart condition is satisfied (step S52: Yes), the management unit 22 restarts the processing unit 20 (step S53). When the management unit 22 determines that the restart condition is not satisfied (step S52: No), the management unit 22 ends the process shown in FIG.

As described above, in the restart unit 42 of the processing device 2 according to the second embodiment, when the processing unit 20 is set as a standby system, the second evaluation value Ss2 is less than the fourth threshold value Sth4. In that case, the processing unit 20 is restarted. As a result, if there is a possibility that the processing of the active system cannot be executed if the processing unit 20 of the standby system is switched to the active system, the state of the processing unit 20 becomes normal by restarting the standby system. The possibility of recovery can be increased, and the stability of the duplex system 1 can be improved.

Embodiment 3.
The duplication system 1 according to the first and second embodiments performed the system switching process and the restart process using the first threshold value Sth1 and the second threshold value Sth2. It differs from the duplex system 1 of the first and second embodiments in that the first threshold value Sth1 and the second threshold value Sth2 are not used. In the following, the same configuration as the processing apparatus 2 in the first and second embodiments will be omitted by using the same reference numerals, and the processing different from the first and second embodiments will be mainly described.

FIG. 12 is a diagram showing an example of the configuration of the processing device 2A of the duplex system 1A according to the third embodiment. As shown in FIG. 12, the processing device 2A includes a communication unit 10, a power supply unit 11, a fan 12, and a control unit 13A. The control unit 13A includes a processing unit 20, a monitoring unit 21, and a management unit 22A. The management unit 22A includes a system switching unit 41A and a restart unit 42. The processing device 2A has the same hardware configuration as the processing device 2, and has the same configuration as the hardware configuration shown in FIG.

The system switching unit 41A of the working system compares the first evaluation value Ss1 and the second evaluation value Ss2, and executes the system switching process based on the comparison result. Specifically, the system switching unit 41A of the working system satisfies the system switching condition when the evaluation value difference ΔSs between the first evaluation value Ss1 and the second evaluation value Ss2 is equal to or greater than the sixth threshold value Sth6. Is determined, and the system switching process is executed. As a result, the processing unit 20 having an evaluation value Ss higher than the sixth threshold value Sth6 is used as the working system, so that the stability of the duplex system 1A can be improved. It should be noted that ΔSs = Ss2-Ss1.

In addition, the restart unit 42 restarts the processing unit 20 that has been switched from the active system to the standby system. By such a restart, the state of the processing unit 20 can be returned to the normal state and the state of the processing unit 20 can be improved by the time of the next system switching, and the stability of the duplex system 1A can be improved.

Further, in the duplex system 1A according to the third embodiment, the system switching is executed every time the second evaluation value Ss2 becomes equal to or higher than the sixth threshold value Sth6 than the first evaluation value Ss1. Therefore, by setting the sixth threshold value Sth6 to a small value, the state of the processing unit 20 can be brought closer, and the stability of the duplex system 1A can be improved.

The processing device 2A according to the third embodiment performs the processing of FIG. 6 in the same manner as the processing device 2, but the processing of steps S14 and S15 is partially different from that of the processing device 2. FIG. 13 is a flowchart showing an example of the active system management process of the management unit 22A of the processing device 2A according to the third embodiment, and is a flowchart corresponding to FIG. 7. Steps S25, S27 to S30 shown in FIG. 13 are the same as steps S25, S27 to S30 shown in FIG. In the process shown in FIG. 13, the processes of steps S20 to S24 shown in FIG. 7 are not performed, and the process of step S26A shown in FIG. 13 is different from the process of step S26 shown in FIG.

As shown in FIG. 13, in step S26A, the management unit 22A determines whether or not the evaluation value difference ΔSs between the first evaluation value Ss1 and the second evaluation value Ss2 is equal to or greater than the sixth threshold value Sth6. .. When the management unit 22A determines that the evaluation value difference ΔSs is the sixth threshold value Sth6 or more (step S26A: Yes), the process shifts to step S27, and when the evaluation value difference ΔSs is the sixth threshold value Sth6 or more. When it is determined that there is no such case (step S26A: No), the process shown in FIG. 13 is terminated.

FIG. 14 is a flowchart showing an example of the standby system management process of the management unit 22A of the processing device 2A according to the third embodiment, and is a flowchart corresponding to FIG. Steps S40 to S45 and S47 to S50 shown in FIG. 14 are the same as steps S40 to S45 and S47 to S50 shown in FIG. 9, but the process of step S46A shown in FIG. 14 is the same as the process of step S46 shown in FIG. different.

As shown in FIG. 14, the management unit 22A determines whether or not the system switching condition is satisfied in step S46A, but the system switching condition is the same as the process in step S24A. That is, the management unit 22A determines that the system switching condition is satisfied when the evaluation value difference ΔSs is the sixth threshold value Sth6 or more (step S46A: Yes), and the evaluation value difference ΔSs is not the sixth threshold value Sth6 or more. In this case, it is determined that the system switching condition is not satisfied (step S46A: No).

The first evaluation value Ss1 and the second evaluation value Ss2 can be the values of the integrated operation period. As a result, the system switching process is performed when there is a difference of a certain time or more in the integrated operation period between the processing units 20 of the two processing devices 2. Therefore, the two processing units 20 can be alternately switched between the active system and the standby system, the integrated operating period can be smoothed, and the processing unit 20 does not continuously operate as the standby system. It is possible to avoid a state in which it does not operate. Further, by preferentially using the processing device 2 having a high evaluation value Ss among the plurality of processing devices 2, the processing device 2 having high stability can execute the processing of the working system. Therefore, the stability of the duplex system 1A can be improved.

As described above, in the system switching unit 41A of the processing device 2A according to the third embodiment, the first evaluation value Ss1 is lower than the second evaluation value Ss2, and the first evaluation value Ss1 and the second evaluation value Ss2 When the difference ΔSs with and is equal to or greater than the sixth threshold value Sth6, the setting of the processing unit 20 is switched from the active system to the standby system. Therefore, since the processing unit 20 having the evaluation value Ss higher than the sixth threshold value Sth6 is used as the working system, the stability of the duplex system 1A can be improved.

The configuration shown in the above-described embodiment shows an example of the content of the present invention, can be combined with another known technique, and is one of the configurations without departing from the gist of the present invention. It is also possible to omit or change the part.

1,1A duplex system, 2,2A processing device, 3 station device, 4,6 network, 5 central management device, 10 communication unit, 11 power supply unit, 12 fan, 13,13A control unit, 16 first communication unit, 17 Second communication unit, 20 Processing unit, 21 Monitoring unit, 22, 22A management unit, 31 Device monitoring unit, 32 RAS monitoring unit, 33 Evaluation value calculation unit, 34 CPU status detection unit, 35 HDD status detection unit, 36 Memory state detection unit, 37 temperature state detection unit, 38 voltage state detection unit, 39 fan state detection unit, 41, 41A system switching unit, 42 restart unit, 50 first score judgment table, 51 second score judgment table ..

Claims (10)

A processing unit that can switch settings between the active system and the standby system,
A monitoring unit that monitors the status of the processing unit and
A system switching unit that switches the setting of the processing unit between the active system and the standby system based on the monitoring result of the monitoring unit.
At least one of the cases where the processing unit is switched to the standby system by the system switching unit and the setting of the processing unit is the standby system and the monitoring result of the monitoring unit satisfies the restart condition. A processing device including a restart unit for restarting the processing unit. The monitoring unit
The first evaluation value based on the state of the processing unit is calculated, and the second evaluation value based on the state of the other processing device that executes the processing of the working system is acquired from the other processing device.
The system switching unit
The processing apparatus according to claim 1, wherein the setting of the processing unit is switched between the working system and the standby system based on the first evaluation value and the second evaluation value. The system switching unit
When the processing unit is set as the working system and the first evaluation value is less than the first threshold value, the setting of the processing unit is switched from the working system to the standby system.
The restart unit
The processing apparatus according to claim 2, wherein the processing unit is restarted after the setting of the processing unit is switched from the active system to the standby system by the system switching unit. The restart unit
The processing apparatus according to claim 2, wherein the processing unit is restarted when the processing unit is set as the standby system and the first evaluation value is less than the fourth threshold value. .. The system switching unit
The second aspect of claim 2 is characterized in that the first evaluation value and the second evaluation value are compared, and the processing unit is switched between the working system and the standby system based on the result of the comparison. The processing device described. The system switching unit
When the processing unit is set in the working system, the first evaluation value is less than the second evaluation value, and the difference between the first evaluation value and the second evaluation value is the third threshold value. The processing apparatus according to claim 5, wherein the setting of the processing unit is switched from the active system to the standby system in the above case. The restart unit
The processing apparatus according to claim 6, wherein the processing unit is restarted when the first evaluation value is less than the fourth threshold value. In a duplex system that operates by setting one of the first processing unit and the second processing unit as the active system and the other as the standby system.
A first monitoring unit that monitors the status of the first processing unit,
A second monitoring unit that monitors the status of the second processing unit,
A system switching unit that switches the setting of the first processing unit between the active system and the standby system based on the monitoring results of at least one of the first monitoring unit and the second monitoring unit.
At least when the first processing unit is switched to the standby system by the system switching unit, and when the setting of the first processing unit is the standby system and the monitoring result satisfies the restart condition. A duplex system comprising, in one case, a restart unit that restarts the first processing unit. A monitoring step that monitors the status of the processing unit whose settings can be switched between the active system and the standby system,
A switching step for switching the setting of the processing unit between the active system and the standby system based on the monitoring result in the monitoring step, and
When the processing unit is switched to the standby system by the switching step, and when the setting of the processing unit is the standby system and the monitoring result of the monitoring step satisfies the restart condition, at least one of the cases. , A processing method comprising a restart step of restarting the processing unit. A monitoring step that monitors the status of the processing unit whose settings can be switched between the active system and the standby system,
A switching step for switching the setting of the processing unit between the active system and the standby system based on the monitoring result in the monitoring step, and
When the processing unit is switched to the standby system by the switching step, and when the setting of the processing unit is the standby system and the monitoring result of the monitoring step satisfies the restart condition, at least one of the cases. , A restart step to restart the processing unit,
A processing program characterized by having a computer execute.

Images