JP2001075830A - Information processing device - Google Patents

Abstract

(57) [Problem] To provide an information processing apparatus capable of performing normal business even when a hardware failure or a software trouble occurs. SOLUTION: At least two computer systems 41 and 46
An information processing apparatus including at least one data input / output device 51, and input / output data buses 45, 50 connecting the computer systems 41, 46 and the data input / output device 51,
The data transmitted from the data input / output device 51 to the computer systems 41, 46 via the input / output data buses 45, 50 are stored in the computer systems 41, 46, respectively. As a result, when a failure of the hardware or a trouble of the computer system 41 or 46 occurs at the time of developing and modifying the software, the function as the computer system is not impaired.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus which does not impair the function of a computer system in the event of a hardware failure or a computer system trouble when software is developed or modified.

[0002]

2. Description of the Related Art Conventionally, an information processing apparatus is provided with a main computer for performing main business processing and a standby computer for preventing a normal business from being unable to perform normal business due to hardware failure or software trouble. When a main computer fails, a system is used that is configured with a subordinate computer that takes over and executes the task.

[0003] As a failure monitoring method adopted in the above-mentioned system, a monitoring signal is mutually transmitted between a master computer and a slave computer, and a response from a partner system is time-monitored. There is known a method of detecting that a failure has occurred.

[0004] The method of detecting the occurrence of a failure by the time monitoring as described above is performed even when the communication means for mutual monitoring fails.
Since it is determined that the computers of the partner systems have failed, the computers may become inoperable.

[0005] In order to avoid a situation in which operation is disabled due to the failure of the communication means for mutual monitoring, if it is detected that a failure has occurred separately from the communication means, the failure is detected. There is known a technology in which a failure point determination communication means for determining whether the failure is a failure of the mutual monitoring communication means or a failure of one of the computers is also provided.

For example, a monitoring communication means for mutually notifying the status of the own computer to the other computer, and after transmitting the status of the own computer, a response signal to the transmission is returned from the other computer. In a failure monitoring method in which the own computer and the other computer of a redundant computer system having a means for monitoring the time until the computer arrives come and go, a standby computer with respect to an active main computer is monitored. A method of setting a shorter monitoring time limit than the slave computer (Japanese Patent Laid-Open No. 6-175868)
Publication).

[0007] Further, upon detecting the down of the active device during operation as the active device, means for disconnecting the active device and transmitting a down prediction to the standby device, and receiving a down notification from the active device during the standby operation. Means for switching the spare machine to the active machine, means for switching the spare machine to the active machine while transmitting a disconnection request to the active machine when the down of the active machine is detected during the operation of the spare machine, and operating as the active machine An information processing apparatus comprising means for disconnecting the active device when receiving the standby device disconnection request
No. 96033).

[0008]

The method disclosed in the above-mentioned Japanese Patent Application Laid-Open No. 6-175868 discloses a main storage device 61 as shown in FIG.
A, 61B, central processing units 62A, 62B, external storage devices 63A, 63
B, line controller 64A, 64B, SCSI bus controller 65A, 65B
In the normal operation state, for example, the line controller 64A of the active working side is connected to an external data input / output device (not shown) via the input / output bus 66A. The data from the input / output bus 66A is stored in the external storage devices 63A and 63B via the SCSI bus control device 65A sharing the SCSI bus 67 which is a standard bus for connecting the external storage device 63A such as a magnetic disk. When the standby unit taking over due to the failure of the active unit takes over the duties of the active unit, the switching is performed so that the standby line controller 64B is connected to an external data input / output device (not shown) via the input / output bus 66B. Switching of the switch 68 is performed. For this reason, the backup switching time from when the active unit goes down to when the standby unit starts operating (time when the backup switching process (device) determines that the active unit has an abnormality and switches the switch 68)
Is a non-working time, during which normal business operations cannot be performed. Also, if there is a problem during the development or modification of the software, the external storage devices 63A and 63B that store the business programs are mirrored, so that both the active and standby units go down, and There is a problem that it becomes impossible.

[0009] The device disclosed in Japanese Patent Application Laid-Open No. 11-96033 is
As shown in FIG. 7, the main storage devices 71A and 71B, the central processing unit 7
2A, 72B, external storage 73, line controller 74A, 74B, SCS
In the normal operation state, the line controller 74A on the active working side is connected to the external storage device 73 via the input / output bus 76A in the normal operation state. The data from the input / output bus 76A on the device side is stored in the external storage device 73 via the SCSI bus 77 which is a standard bus. If the standby unit taking over due to the failure of the active unit takes over the duties of the active unit, the line controller 74 on the standby unit side
The changeover switch 78 is switched so that B is connected to the external storage device 73 via the input / output bus 76B. Therefore, when the external storage device 73 breaks down, both the working machine and the spare machine cannot perform normal tasks. Backup switching time from when the active unit goes down until the standby unit starts operating
(Time during which the backup switching process (apparatus) determines that there is an abnormality in the active device and switches the switch 78) is a non-operation time, during which normal business cannot be performed. Furthermore, if there is a problem during the development or modification of the software, since the external storage device 73 storing the business program is shared by the active unit and the standby unit, both the active unit and the standby unit are down, There is a problem that normal business execution becomes impossible.

[0010] An object of the present invention is to solve the above-mentioned problems of the prior art, and to provide an information processing apparatus capable of performing normal tasks even when a hardware failure or software trouble occurs.

[0011]

An information processing apparatus according to the present invention comprises at least two computer systems, at least one data input / output device, and input / output data connecting the computer system and the data input / output device. An information processing apparatus having a bus, wherein data transmitted from the data input / output device to the computer system via an input / output data bus is stored in each computer system. In this case, several computer systems are distinguished into those for normal business execution and those for standby, and the standby computer system is used as the business execution computer system when there is a hardware or software trouble in the business execution computer system. In this way, the data transmitted from the data input / output device to the computer system via the input / output data bus is stored in each computer system, so that the computer system for business execution (hereinafter referred to as an active computer) is hardened. The same data is stored in the active unit and the standby computer system (hereinafter referred to as the standby unit) even if the unit goes down due to software or software trouble. Can be used immediately.

[0012]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG.
1 shows an information processing apparatus capable of performing normal tasks when a hardware failure occurs in one computer system. The active unit 41 includes a main storage unit 42, a central processing unit 43, an external storage unit 44, and an input / output bus 45, and the standby unit 46 similarly includes a main storage unit 47, a central processing unit 48, an external storage unit 49, an input / output Each has its own bus 50. In an information processing apparatus that processes only input data from the external data input / output device 51, each data transmitted via the input / output buses 45 and 50 of the active unit 41 and the standby unit 46 is used for the active unit. Are stored in the external storage devices 44 and 49 of the machine 41 and the spare machine 46, respectively.

In this case, basically, the data transmitted from the external data input / output device 51 to the active unit 41 and the data transmitted from the external data input / output device 51 to the standby unit 46 match each other. The contents of the external storage device 44 of the device 41 and the contents of the external storage device 49 of the spare device 46 also match. If this information processing device is used, even if the active unit 41 goes down due to a hardware failure, exactly the same data is stored twice in the active unit 41 and the standby unit 46, so the data during the backup switching time There is no loss, and the spare machine 46 can be used immediately as an active machine.

In an information processing apparatus that processes both input data and output data from the external data input / output device 51, the switching process is performed only on the output data. In this case, the switching of the output data is performed by the main storage device 42 and the central processing unit 4 as disclosed in JP-A-6-175868.
3. A line controller is connected to each local bus connecting the main storage device 47 and the central processing unit 48. Each of the line control devices is connected via a manual changeover switch, and can be switched to any one by an input from a console terminal connected to the manual changeover switch. Also, a line controller for controlling a plurality of line groups is connected to each of the input / output buses 45 and 50, and either the line group from one line controller or the line group from the other line controller is externally connected. Output is switched by an automatic changeover switch. And the input / output bus 45,
A method of connecting a system control device for controlling an automatic changeover switch to each of the switches 50 and performing a changeover of the changeover switch by a switch control signal from each system control device is disclosed in JP-A-11-96033. The methods that have been applied can be applied.

FIG. 5 shows an information processing apparatus capable of performing normal tasks when a software trouble occurs due to two computer systems, an active unit and a standby unit. When the software is developed or modified, it is first performed from the spare unit 46. Spare machine
For several days to several months after the software development or modification in 46 is completed, the test (including the long run test) is performed only on the spare machine 46 without applying to the active machine 41. Therefore, even if a software problem occurs during the software development or modification and test period,
There is no hindrance to the execution of normal business. By applying the developed or modified software to the active machine 41 after completion of the test (including the long run test) on the spare machine 46 for several days to several months, the reliability of the software development or modification is improved. .

[0016]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 FIG. 1 is a schematic diagram of an information processing apparatus using two computer systems according to the present invention, wherein one computer system is used as an active computer 1 and another computer system is used as a standby computer 2. FIG. The computer systems of the active unit 1 and the spare unit 2 have the configurations shown in FIG. 4, respectively, but the internal configuration is simplified to avoid complication of the drawing. In this example, the data input / output device is DDC (Direct Digital Control).
3, DCS (Distributed Control System) 4 is used, for example, measuring instrument (sensor) or remote PI / O (Pro
cess input / output).

The data transmitted from the DDC 3 and DCS 4 to the computer system via the input / output data buses 5a and 5b is the same for both the active unit 1 and the standby unit 2. In this example, the input / output data bus 5a is used for the active device 1 and the input / output data bus 5b is used for the spare device 2. However, one input / output data bus can be shared. Data sent from the data input / output devices DDC3 and DCS4 to the active unit 1 and the standby unit 2 are stored in external storage devices (not shown) of the active unit 1 and the standby unit 2, respectively.

Therefore, the data transmitted from the DDC3 and DCS4 to the active unit 1 and the data transmitted from the DDC3 and DCS4 to the standby unit 2 match, and the contents of the external storage device of the active unit 1 and the standby unit 2
The contents of the external storage device also match. If this information processing device is used, even if the active device 1 goes down due to a hardware failure or a software problem, and it becomes impossible to perform normal tasks, the same data can be transferred to the active device 1 by switching a switch (not shown). Since the data is stored in 1 and the standby unit 2, there is no data loss during the backup switching time, and the standby unit 2 can be used immediately as the active unit.

Embodiment 2 FIG. 2 is a schematic explanatory diagram of an information processing apparatus according to another embodiment of the present invention. The same components as those in FIG. 1 are denoted by the same reference numerals. The computer systems of the active unit 1 and the standby unit 2 use DDC3 and DCS4 as data input / output devices. The data transmitted from the DDC 3 and DCS 4 to the computer system via the input / output data buses 5a and 5b is the same for both the active unit 1 and the standby unit 2. In this example, the input / output data bus 5a is used for the active unit 1, and the input / output data bus 5b is used for the standby unit 2. DDC
3. Data sent from the DCS 4 to the active unit 1 and the standby unit 2 is stored in an external storage device (not shown) of each of the active unit 1 and the standby unit 2.

The active machine 1 and the spare machine 2 are personal computers that output forms via a local bus 22 via a changeover switch 21.
RDB (Relational Data Base) 23, CRT 24 for displaying screens to operators, host computer 2 with long data storage period
Connect with 5. PCs RDB23 and CRT24 that output forms by switching the changeover switch 21, host computer 25 and active machine 1
Connection, or PC RDB23, CRT2 to output forms
4. The connection between the host computer 25 and the spare machine 2 is switched.

For example, a personal computer RDB23, CRT24, a host computer 25, and a working machine that output a form by switching the changeover switch 21
When 1 is connected, a personal computer RDB23 that outputs reports
The data of the active device 1 is transmitted to the CRT 24 and the host computer 25, the personal computer RDB23 and the CRT 24 display the data of the active device 1, and the data of the active device 1 is stored in the external storage device of the host computer 25. PC by changing the changeover switch 21
When the RDB23, CRT24, host computer 25 and the spare machine 2 are connected, the data of the spare machine 2 is transmitted to the personal computer RDB23, CRT24, and the host computer 25 that output the form, and the personal computer RDB2
3. The CRT 24 displays the data of the spare unit 2, and the external storage device of the host computer 25 stores the data of the spare unit 2.

FIG. 3 (a) shows a case in which the working machine 1 cannot perform normal tasks due to a hardware failure or software trouble.
As shown in (2), by switching the changeover switch 21 from the active unit 1 to the standby unit 2, the standby unit 2 performs normal business. The detection of a down due to a hardware failure or a software trouble of the active unit 1 or the standby unit 2 and the switching process of the changeover switch 21 are described in, for example, JP-A-6-17.
Known down detecting means disclosed in Japanese Patent Application Laid-Open No. 5868 and Japanese Patent Application Laid-Open No. H11-96033, and manual switching and automatic switching of the known changeover switch 21 can be applied.

When the active unit 1 cannot perform the normal operation, the switch 21 is switched to the standby unit 2 to execute the normal operation by the standby unit 2.
As shown in FIG. 3 (b), when the switching is completed, by re-transmitting the data in the switching period from the standby unit 2 to the standby unit 5, the continuity of the data of the host computer 25 is assured. Does not occur. Data is also lost to the PC RDB23, which outputs the report, by re-transmitting the data for the switching period from the spare unit 2 after the switchover is completed, thereby ensuring the continuity of the data in the PC RDB23, which outputs the report. Absent.

This is possible because the computer systems of the active unit 1 and the standby unit 2 always store the data from DDC3 and DCS4 in their respective external storage devices. Further, in the CRT 24, the switching period is not displayed to the operator, but if the CRT 24 is directly connected to the active unit 1 and the standby unit 2 without passing through the changeover switch 21,
It is possible to prevent the display from becoming impossible.

[0025]

According to the information processing apparatus of the present invention, since the data from the data input / output device is stored in each external storage device in each of the computer systems of the working machine and the spare machine, the hardware of the working machine is hardware. Even if the normal business cannot be performed due to a failure or software trouble, by switching the changeover switch to the standby unit, the normal business can be performed immediately without data loss during the backup switching time.

In the information processing apparatus of the present invention, the data from the data input / output device is stored in each external storage device in each of the computer systems of the working machine and the spare machine. The remodeling is performed by the computer system of the spare machine.After software development or remodeling of the spare machine is completed, it is not applied to the current machine for several days to several months. By applying the newly developed or modified software to the working machine after the completion of the test on the spare machine for several months, even if the software troubles accompanying it occur during the software development or modification and test period, There is no hindrance to the normal operation of the current machine.

[Brief description of the drawings]

FIG. 1 is a schematic explanatory diagram illustrating an example of an information processing device of the present invention.

FIG. 2 is a schematic explanatory diagram illustrating another example of the information processing apparatus of the present invention.

FIG. 3 shows an embodiment of the information processing apparatus shown in FIG. 2 of the present invention from a data point of view, wherein FIG. 3 (a) is an explanatory diagram of a state of switching from an active device to a standby device, and FIG. FIG. 9 is an explanatory diagram of data retransmission.

FIG. 4 is a schematic diagram for conceptually explaining the information processing apparatus of the present invention.

FIG. 5 is a schematic diagram for conceptually explaining another example of the information processing apparatus of the present invention.

FIG. 6 is a schematic diagram for conceptually explaining an information processing apparatus disclosed in Japanese Patent Application Laid-Open No. 6-175868.

FIG. 7 is a schematic diagram for conceptually explaining an information processing apparatus disclosed in Japanese Patent Application Laid-Open No. 11-96033.

[Explanation of symbols]

 1, 41 Working machine 2, 46 Spare machine 3 DDC 4 DCS 5a, 5b I / O data bus 21, 68, 78 Switch 22 Local bus 23 PC RDB 24 CRT 25 Host computer 42, 47, 61A, 61B, 71A, 71B Main storage unit 43, 48, 62A, 62B, 72A, 72B Central processing unit 44, 49, 63A, 63B, 73 External storage unit 45, 50, 66A, 66B, 76A, 76B I / O bus 51 Data I / O unit 64A, 64B, 74A, 74B Line controller 65A, 65B, 75A, 75B SCSI bus controller 67, 77 SCSI bus

Claims (3)

[Claims] An information processing apparatus comprising at least two computer systems, at least one data input / output device, and an input / output data bus connecting the computer system and the data input / output device, An information processing apparatus, wherein data transmitted from an output device to the computer system via an input / output data bus is stored in each computer system. 2. The system according to claim 1, wherein at least two computer systems are divided into one for normal business execution and one for standby.
The information processing device according to 1. 3. The information according to claim 2, wherein a standby computer system is used as a computer system for performing a task when a trouble occurs in hardware or software of the computer system for performing a normal task. Processing equipment.