JPS6342282B2 - - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a switching judgment device installed in a dual system computer system in which one side is a control system and the other is a standby system, and in particular, it is capable of performing inspections without changing the status of both computers. This invention relates to a switching judgment device with a CPU switching simulation input device that enables maintenance and modification.

In a dual computer system where two process computers are connected in parallel, one is a control system that monitors and controls the plant, and the other is a standby system.
A switching judgment device used for mode switching between two computers generally employs a single system system. It is also possible to use a dual system for this switching judgment device itself, but in this case, not only would the computer software for the input signal become complicated, but also the validity of the input signal would be lost, so it is usually adopted. It has not been.

Although this switching judgment device has a simple structure and is difficult to break down, it is subject to aging and will eventually break down. Therefore, it is necessary to perform inspection or maintenance in a timely manner, and in some cases, it may also be necessary to carry out modification.

Switching between the control system and standby system of a dual process computer system can be done without relying on software.
In order to ensure this, the computer mode switching judgment device for both systems is determined and instructed by a built-in relay sequence by a switching judgment device placed in a third party's position. However, if inspection, maintenance, or modification of this switching judgment device becomes necessary and the power is turned off, the power needed to maintain the operating state of the relay will be lost and it will no longer be possible to maintain it, which will be input into the computer as a change in the state of the relay contact. This causes the computer that receives this information to start operating and memorize information that is neither the control system nor the standby system, making it impossible for the software that is running to rely on this information to make judgments and stop the computer. I have no choice but to do it.

The present invention was made in view of the above circumstances, and
The purpose of this is to add a CPU switching simulation input device that enables inspection, maintenance, or modification of the switching judgment device for instructing mode switching of the computers mentioned above without causing any interruption or disturbance to the two computers. The point is to obtain a switching judgment device.

The present invention will be explained below with reference to embodiments shown in FIGS. 1 and 2.

FIG. 1 is a block diagram of a switching judgment device with a CPU switching simulation input device. In FIG. 1, a process dual computer system 1 takes in input signals 4A and 4B from a monitoring switching panel 2 and a switching judgment device 3 (inspected in the figure), and sends output signals to each of them. The CPU switching simulation input device 5 is located between the process dual system computer system 1 and the relay sequence 6 with built-in switching judgment device, and turns on the relay contact of the switching judgment device internal relay sequence 6 to turn on the process dual system computer system 1. The input signals 4A and 4B input to the toggle switch 7A,
7B, it is bypassed midway. The process dual computer system 1 includes A
There are computer systems of system B and system B, each of which has the same program, and the same program is executed in response to the same input from the outside.

Next, FIG. 2 shows the A-system relay sequence 6 built into the switching judgment device 3 and the CPU switching simulation input device 5.
(within the one-dot chain line). The B system is also a similar circuit. Contact 300-1 of this A-system circuit
300-7 are interlock contacts with the B system circuit, and interlock is performed between both the A system and the B system. In the figure, 200 represents an automatic/manual key switch of the monitoring switching panel 3, with the solid line side being automatic and the dotted line side being manual. online
PB201 and offline PB202 have contact point 2 with each other.
01-1 and 202-1, and when the online PB 201 is pressed, the online relay ONL is turned on, the contact 306 is turned on, and the online signal 501 is input to the computer. Here, the switch 206 is designed to fall to the side where the PB is pressed.

On the other hand, if online PB202 is pressed,
Since the offline relay OFL is turned on and the contact 307 is turned on, the offline signal 502 is input to the computer.

Next, when the online PB 201 is pressed and the online relay ONL is activated, the contact 301 is turned on. Here, contact 3 of 30C1 indicates that the computer is normal.
02 is on and momentary relay 203 is turned on by a command from the computer, online status relay ONLS is turned on and at the same time contact 303 is turned on and this circuit is held.
Then, contact 308 is turned on and online status signal 503 is input to the computer.

When the online status relay ONLS operates, its contact 313 turns on. When system B is offline, or when system B is in online status but not in control system mode, system A control system request relay A-MR operates, contact 309 turns on, and system A control system A request signal 504 is sent to the computer.

When the control system request relay A-MR is turned on, the contact 314 is turned on, and when the momentary relay 204 is turned on by a command from the computer while the B system is not in the control mode, the A system control mode relay A-MM is turned on. At the same time, the contact 304 is turned on and this circuit is held. In addition, contact point 31
0 is turned on, the A-system control mode signal 505
enters the calculator.

Here, if the B system is already in the control mode, relays A-MR and A-MM will not operate due to the interlock of the B system. In this case, in the determination device 3, the relay A-SR regarding the standby mode,
When A-SM and momentary relay 205 operate, contacts 311, 312, and 305 close, and signals 506 and 507 regarding standby mode are input to the computer, thereby determining the standby system.

Next, to start the system, set the automatic/manual key switch 200 on the monitoring switching panel 2 to the manual side, and press the system startup PB for system A or system B to start the system initialization for the computer in that system. The rise program runs and the system starts up. The reason for installing the automatic/manual key switch 200 is to block the initialization program from running if the key switch 200 is set to automatic even if the system startup PB is accidentally pressed during online operation. be. Furthermore, even if the computer goes down due to a major failure, the PB operation will restart the computer, eliminating the need for computer console operations.

With the operations up to this point, the system cannot be moved to either the control system or the standby system, and pressing the online PB201 on the monitoring switching panel 2 will cause an interrupt to the computer, so the online migration processing program will 3's own momentary relay 2
Insert 03 and online status relay
Enable ONLS to turn on. As a result, the relay sequence 6 of the determining device 3 operates to determine whether the system is a control system or a standby system, and instructs the central processing unit via the process input/output device. The computer of the corresponding system that receives this detects whether the instruction is to the control system or the standby system, and each transition processing program turns on the momentary relay 204 or the momentary relay 205 of the judgment device 3.

For online PB201, offline
PB202 is on the monitoring switching panel 2, but this PB
is pressed when you want to set the computer to neither the control system nor the standby system, such as during maintenance of the computer. If pressed during online operation, it will cause a problem with the system, so please press Online PB201 and Online PB202.
Similarly to the system startup PB, the key switch 200 of the monitoring switching panel 2 is interlocked so that it can only be accepted when the key switch 200 is in manual mode (dotted line side in the figure).

When request relay A-MR is turned on, judgment device 3
In this case, the control system mode relay A-MM and the standby system mode relay B-MM operate to instruct the mode to the computers of this system. A computer that receives a control mode instruction starts controlling the plant, and a computer that receives a standby mode instruction can move to standby processing.

On the other hand, as control system request relay A-MR turns off, contact 300-5 of control system request relay B-MR of system B, which has been in standby mode, turns on, causing control system transition to system B. Instruct the calculator. At this time, of course, the judgment device 3 takes an interlock such that the contact 300-6 of the standby system request relay B-SR of the B system is turned off, and the contact 300-4 of the standby system mode relay B-MM is also turned off. ing. After that,
Set up information and back up the system so that it can continue to be controlled. Further, the control system in which a serious failure has occurred is started up by the automatic restart function, and transferred to a standby system according to an instruction from the determination device 3.

Here, the toggle switch 101 in the CPU switching simulation input device 5 of the present invention is for simulating the A-ONLS signal 503 when the contact 308 is turned on, and the toggle switch 102 is for simulating the A-ONLS signal 503 when the contact 309 is turned on. A-MR instructing the transition to
The toggle switch 103 is for simulating the A-MM signal 505 which means that the A-system computer is determined to be the control system by turning on the contact 310. A-SR signal 506 that instructs the A system computer to transition to the standby system by turning on.
The toggle switch 105 is for simulating the A-SM signal 507 which means that the A-system computer has been determined to be the standby system by turning on the contact 312. The toggle switch 106 is for simulating the
It is the same as 03, and is turned off when the toggle switch 103 is turned on, and when the A-MM relay is turned on, the A-MM signal 508, which means that it is not in the A-system master mode, is cut off. On the contrary, A-
In case of MM relay off, A-MM signal 508
is sent to the computer. Also, toggle switch 10
7 is B-ONLS relay contact 315 ON
This simulates the ONLS signal 509. These signals 503 to 509 are the most important signals in a dual-system computer system and affect all processing programs, so unless they are highly reliable, the operating rate of the dual-system computer system must be ensured. I can't.

As described above, the switching judgment device 3 plays an important role in switching the computer mode of the dual-system computer system, but when the power is cut off for inspection, maintenance, or modification of the switching judgment device 3, the relay sequence 6 relay will no longer be able to maintain its operating state. In particular, if the operating status of relay contacts 308 to 315 is changed due to power cutoff, mode signals 503 to 509 of the computer will no longer be transmitted.
In the processing programs of the computers of both systems, it becomes impossible to determine the mode of the computers, resulting in functional congestion. In order to avoid such a situation, if it is known in advance that the relay sequence 2 of the switching judgment device 3 will be turned off, the toggle switches 101 to 10 of the switching judgment device with the CPU switching simulation input device can be turned off.
7 in its current mode and then turn off the power, it is considered that there is no change in the state of the dual computer system. After the inspection, maintenance, or modification of the switching judgment device 3 is completed, the power is turned on again and the relay sequence in the switching judgment device 3 is set to a predetermined operating state, and then each toggle switch 101 to 107 is reset. , control of the dual computer system can continue normally.

Depending on the system, each computer mode relay contact 308 of the judgment device 7 may be used as the control master circuit.
315 may be incorporated, but if a simulation circuit similar to the present invention is prepared, control over the process can be continued.

As described above, according to the present invention, the switching judgment device for instructing the computer mode of a dual system computer system is provided with a toggle switch corresponding to each command signal, and is configured to give a simulated input. The switching determination device can be inspected, maintained, and modified without causing any trouble to the functions of the operating computer.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing an embodiment of a switching judgment device with a CPU switching simulation input device of the present invention, and FIG. 2 is an internal sequence circuit diagram of the switching judgment device. 1... Dual computer system, 2... Monitoring switching panel device, 3... Switching judgment device, 4A, 4B...
...Computer input signal, 5...CPU switching simulation input device, 6...Relay sequence in switching judgment device, 7
A, 7B, 101-107...Toggle switch,
200...Auto/manual key switch, 201...
...Online PB, 202...Online PB, 2
03-205...Momentary relay, 206...
...Switch, 300-1 to 300-7...B system interlock contact, 201-1, 202-1, 3
01-305... Relay contacts, 501-509
...Computer mode signal.

Claims (1)

[Claims] 1 A monitoring switch installed in a dual computer system in which two process computers are connected in parallel, one as a control system for monitoring and controlling the plant, and the other as a standby system, and placed between the computers in both systems. In the switching judgment device that instructs the computers of both systems to select the corresponding computer mode when receiving a computer mode switching command from the panel, a toggle switch is provided to simulate the relay contact output of the switching judgment device, and a toggle switch is provided to simulate the relay contact output of the switching judgment device. If it is necessary to inspect, maintain, or modify the switching judgment device while the computer is operating online,
When turning off the power of the switching judgment device, the relay contact output is simulated by operating a toggle switch in advance, and inspection, maintenance, and modification can be performed without any hindrance to the functions of both computers. A switching judgment device with a CPU switching simulation input device featuring the following.