EP0106191B1 - Multiprocessor system for a danger alarm installation - Google Patents

Abstract

1. A multiprocessor system for hazard- in particular burglar alarm systems with a central control unit (Z) of modular construction, to which a plurality of alarms are connected via message lines (ML) and a plurality of control devices are connected via control lines (STL), where the central control unit (Z) comprises, in addition to a central computer module (ZR) and a control- and display module (BA), additional modules both for different and for similar functions, characterised in that a plurality of different types of modules (BSA, EA) are provided for different functions and autonomous line connection modules (ALA) are provided for similar functions, that all the modules (BA, EA, BSA, ZR, ALA) are connected to a microprocessor-controlled data bus (DB) and in addition to a permanently wired signal bus (SB), a so-called collector bus, to which - in parallel with the data for the data bus (DB) message-specific signals of a message-triggering line connection module (ALA) are fed, that the central computer module (ZR) is connected to each module via a drive line (ASL), and that the central computer module (ZR) controls the data exchange between the individual modules, carries out a cyclic check of all the modules to establish their functioning capacity and carries out an interrogation of all the modules to establish new or modified data.

Description

The invention relates to a multiprocessor system for hazard detection systems according to the preamble of claim 1.

With security and hazard detection systems, it is essential that faulty system parts are recognized and displayed. In addition, the system should be available, i.e. be as permanent and as fully operational as possible. In conventional systems, a separate central assembly is usually required for each signaling line, which contains both evaluation and display elements, and only forwards alarm and fault messages to a higher-level group display or registration. The amount of information to be processed increases due to the constantly increasing number of detectors and detector types connected to a detection system and due to the display of the detector which emits a single alarm. As a result, more and more modules are required, which due to the increasing number of components also leads to an increased risk of failure.

In today's security alarm systems, a central data processing system is often used to process the large amount of information, but also to reduce the number of components. This is associated with the particular risk that one of the central modules could become inoperable, which would result in the failure of the entire alarm system. If, for example, the central computer or essential functions fail, the entire system is unable to function. To ensure the reliability of such systems, special monitoring modules were provided in the central computer of the data processing system. This problem was also solved in software by separate test routines of the central computer, which then initiate an emergency operation if necessary.

It has also been suggested that a certain degree of decentralization should be sought for hazard detection systems. For example, DE-OS 2817121 describes a hazard alarm system with a plurality of detectors which can be connected to a central unit via alarm lines. This system is made up of a number of individual system blocks with connection devices for one or more detectors or for one or more subordinate system blocks, which have a programmed control system for querying and evaluating the incoming detector signals as well as connections for display, operating and registration elements. The system blocks are interconnected with lines, e.g. with a two-wire line, connected in such a way that one of the system blocks can be used as a control center and the other system blocks are subordinate to this control center in one or more hierarchical levels. In this way it is possible that in the event of failure of the higher-level system block, lower-level system blocks can at least partially take over their assigned functions independently, so that they can maintain emergency operation and still display danger messages. Other measures, such as send a message to a main detector or activate control lines, e.g. to It is not intended to open smoke flaps or close fire compartment doors.

The object of the invention is to provide a multiprocessor system for hazard alarm systems with a large number of functional modules. The aim is to increase reliability and reduce the risk of system failure, particularly if the central computer fails, so that the essential functions are maintained in the case of a distributed system intelligence and no danger message can be lost. Not only is emergency operation to be taken over, but the most important tasks of a hazard alarm system can be carried out. Furthermore, such a system should be adapted to the respective application requirements in a simple manner and should have the ease of use of large systems.

This object is achieved with the features of the main claim.

The modular hazard alarm system has a large number of modules, so-called function modules. It has different types of modules for different functions, modules of the same type for similar functions and a central computer module. In addition to the central computer module, various types of modules are, for example, an operating and display module, a block lock connection module and an input and output module for serial data input and output. Similarly structured modules are autonomous Le ⁱ tungsanschaltmodule for the respective connection of signal and control lines. All modules are connected to a microprocessor-controlled data bus for the data transmission of the individual modules to each other and to the central computer module. In addition, each module is connected via a configuration matrix of a test signal bus wire, to the to the data of the data bus message-specific signals of a parallel autonomous Leitungsansc _h lußmoduls given and thus represents a common bus. Furthermore, the central computer module is connected to each module via a control line, a so-called module select.

The central computer module controls the data exchange between the individual modules, periodically checks each module for its functionality and periodically polls each module for new or changed data. The central computer module serves on the one hand as a monitoring device for the other modules and on the other hand as a data exchange. The central computer module checks itself to increase the fuse. If it should fail, the autonomous line connection modules ensure that alarm or fault messages from the modules concerned or on their signaling lines are sent directly to the local or local alarm transmitter and via the collective bus the control and display field of the control and display module. The control lines assigned to the autonomous line connection module are also activated directly. This has the advantage that even if the central computer data fails, one or more signal lines of an autonomous line interface module are evaluated and processed. Furthermore, due to the monitoring function of the central computer module, the inoperability of an autonomous line connection module is recognized at an early stage and signaled accordingly.

In order to keep the risk of failure of individual assemblies of an autonomous line connection module as low as possible, in an advantageous development each line connection module has devices for independently checking its functionality. In addition to the usual query of the signaling lines for alarm, sabotage or faults such as line interruption or line short-circuit with the provided devices, wire break short-circuit and alarm for the respective signaling line are simulated. If a fault is found in the test routine, it is sent to both the data bus and the signal bus. For this purpose, a microcomputer and monitoring devices for alarm or short circuit and faults are provided in each autonomous line connection module. Alarm, short circuit or line interruption messages are stored in a dedicated register of the microcomputer with the corresponding message line or detector address and are transferred from the central computer module via the microprocessor-controlled data bus to the central computer module with the next polling cycle and from there to the alarm transmitters and to the control and display panel of the control and display module. At the same time, however, an alarm or fault message is sent directly to the hardwired signal bus or collective bus via the marshalling matrix.

Further advantages and refinements of the multiprocessor system for hazard alarm systems are described in the further subclaims and are explained in more detail below with the aid of a drawing using an exemplary embodiment. Show

• 1 shows a basic circuit of the multiprocessor system according to the invention,
• Fig. 2 is a block diagram of an autonomous line interface module.

1 shows a basic circuit diagram of the multiprocessor system for hazard alarm systems. Each module is connected to a microprocessor-controlled data bus DB for bidirectional data exchange. The central computer module ZR controls the data exchange of the individual modules with each other and with itself. In addition, the central computer module cyclically polls all autonomously working modules for new or changed data for further processing. The query cycle is reduced because there is no constant data exchange, but only new data is transmitted. This increases the query speed for the connected lines. To control the respective modules, one control line ASL, a so-called module select, leads from the central computer module ZR to the respective module. In the exemplary embodiment, the modules for different functions are shown to the left of the central computer module ZR. The operating and display module BA has the known display and input elements of a comfortable hazard alarm system. The input and output module EA has a standardized serial interface SST (V24), for example for connecting a telephone dialing device for establishing a connection to an external reporting point. In addition, other peripheral devices, e.g. a printer DR, connected, which logs all processes of the alarm system. The entire system or certain monitoring areas are armed or disarmed via the block lock connection module BSA with the block locks BS connected to it. The externally arranged alarm transmitter AG for local or local alarm, e.g. Alarm siren, rotating beacon, main detector are connected to the BSA block lock connection module via a RM routing matrix. At least some of these devices can also be routed directly to the collective bus SB. In addition, the block lock connection module BSA can have a so-called intellectual lock, which enables arming / disarming in addition to the key for the block lock only if a secret code, e.g. Number combination, is entered with a device provided for this purpose.

For similar functions, the hazard alarm system has modules of the same structure, shown in the drawing to the right of the central computer module, as autonomous line connection modules ALA. Up to eight Metde lines ML and up to eight control lines STL are connected to each autonomous line connection module ALA, which will be explained in more detail later.

All modules are each connected to a fixed-wired signal bus SB, also referred to as a collective bus, via a routing matrix RM. connected. Message-specific data from an autonomous line interface module ALA, which has triggered a message, such as an alarm or fault, are simultaneously sent to the collective bus SB in parallel with the data output on the data bus DB. There, the collective signals from corresponding modules, for example the operating and display module BA and the block switching module BSA, can be tapped via the respective routing matrix RM in order to be processed directly in the relevant module. Since the individual autonomous line connection modules ALA work automatically, a collective alarm or fault message can be sent to the operating and display module BA and displayed there if the central computer module ZR fails. However, it is then no longer possible to display the individual detection lines that are assigned to the triggering autonomous line connection module ALA. The ML detection line on which a detector has been triggered is displayed by the relevant autonomous line connection module ALA (AL-ANZ). In addition, if the central computer module ZR fails, the alarm transmitters AG or HM, which can be routed directly to the signal bus SB (RM) in the block lock connection module BSA, can be controlled. Likewise, the autonomous line connection module ALA applies a signal to the control line STL assigned to the signal line ML in order to actuate the connected control device. Certain control lines can also be connected directly to the SB signal bus via the RM routing matrix.

2 shows the block diagram of an autonomous line connection module ALA, which among other things. has a microcomputer MR. The microcomputer MR is connected to the central computer module ZR and the other modules to the data bus DB for data exchange. The autonomous line connection module ALA is controlled via the control line ASL (module select) from the central computer module ZR. The eight signal lines ML shown here are connected via a controllable analog switch AS to the line interface device LAE, to which the line voltage LSP is applied. The eight lines are routed to a line multiplexer LM which can be controlled by the microcomputer MR via a first address line ADR1. The line multiplexer LM is connected to the microcomputer MR via an analog / digital converter A / D. The eight control lines STL, to which control elements or devices are connected, are connected to a control line connection device STL-A, which is controlled directly by the microcomputer MR and is also connected to the first address line ADR1. Certain control lines can also be connected directly to the signal bus SB via the marshalling matrix, which is not specifically shown here. For the alarm display on the autonomous line connection module of the alarm-triggering signal line, the alarm display device AL-ANZ is connected to the alarm output circuit AL-AUS, which in turn is controlled directly by the microcomputer MR. To address the display elements of the alarm display device AL-ANZ, the alarm output circuit AL-AUS is connected to the address line ADR1. The alarm output circuit AL-AUS and the control line connection device STL-A represent the so-called "C-output". If there is an alarm message, the alarm is sent as a so-called collective alarm directly to the signal bus SB via the alarm output circuit AL-OFF. At the same time, an alarm is transmitted from a certain detection line during the cyclical query from the central computer module via the central computer module to the operating and display module BA.

The alarm is displayed on the display of the control and display module with details of the triggering signal line of an autonomous interface module and, if individual identification is provided, the number of the triggering detector. The triggering signal line (ML) is also displayed on the alarm display AL-ANZ of the relevant autonomous line connection module ALA. A display of the individual detectors is not provided there because the triggering detector (s) are displayed on the control panel of the operating and display module BA.

For the routine self-test of the autonomous line connection module ALA, each module has the controllable analog switch AS and a monitoring device for alarm or short circuit AL / K-Ü, which periodically simulates an interruption, a short circuit and an alarm for the respective signal line, controlled by the microcomputer MR. To simulate line interruptions, the microcomputer MR is connected via a second address line ADR2 and a line for control command STB to a switch-off flip-flop AFF which controls the analog switch AS. At the same time, the line multiplexer LM is controlled via the first address line ABR1 and is connected to the analog switch AS via the line interface device LAE. The two independent address controls ensure increased security, because the function of the line multiplexer can be checked through the two independent address lines. The signals coming from the line multiplexer LM and converted in the analog-digital converter A / D are evaluated in the microcomputer MR. The monitoring device for an alarm or short circuit AL / K-Ü is acted upon by the microcomputer MR and connected to the analog-digital converter A / D. Furthermore, a fault monitoring device STO-Ü is provided in the autonomous line connection module ALA, which is connected to the microcomputer MR. Lead the outputs of the fault monitoring device STO-Ü both on the data bus DB and on the signal bus SB.

The line type switch is set using the LPS line programming switch (e.g. a 16 DIP-Fix switch). A distinction is made between four types of line: intrusion detection line with and without monitoring in the unset state, sabotage and robbery line.

In addition to the periodic self-checking of the autonomous line connection module ALA, the microprocessor MR controls the respective message lines ML cyclically and detects and detects an alarm, short circuit or line break on one of the message lines ML by means of the monitoring device for alarm or short circuit ALiK-O and the microcomputer MR Register of the microcomputer MR with associated address stored. When the individual autonomous line interface modules ALA are polled cyclically, the data are transmitted via the data bus DB to the central computer module ZR and from there to the operating and display module BA for display and alarm signaling. If an alarm is triggered by a detector in a detection line, it is also sent directly to the signal bus SB via the alarm output circuit AL-AUS of the line connection module ALA as a so-called collective alarm.

The fault monitoring device STÖ-Ü has the task, when a fault occurs, e.g. the failure of the module or the microcomputer to identify and forward the fault. As long as the microcomputer MR is intact, fault messages are sent from the microcomputer to the data bus DB. Faulty or failed modules and faulty signal lines with address details are displayed on the operating and display module. If the microcomputer fails, this fault is sent directly to the SB signal bus. This disturbance can also act on the control line ASL, so that the autonomous line connection module with the failed microcomputer, for example, can no longer be controlled. In normal operation, fault messages, such as a short circuit or line break in a detection line or faults in a module of the autonomous interface module, are reported to the central computer module via the microcomputer and the data bus. Otherwise, a fault is given directly to the signal bus as a so-called collective fault and is displayed directly on the display panel of the control and display module.

In order to replace an autonomous line interface module with another in a simple manner because one component is defective, the modules in the test field are adjusted. This eliminates the need for adjustment during assembly or maintenance. If a line interface module is to be replaced, i.e. removed, the data stored in the microcomputer of the module, e.g. the line setpoints are not lost. Therefore, the control panel of the operating and display module BA has a command button BT, which causes the reading of the stored data in the line connection module ALA and the reading in a memory provided for this purpose in the central computer module ZR. In addition, it must be entered on the control panel which line connection module is to be removed. An optical indicator on the module to be pulled lights up, so that no wrong module is accidentally removed. In addition, the central computer ZR sets the data traffic on the data bus DB while the optical display lights up, so that no data is falsified by the removal and insertion of a module. A newly inserted line connection module is then written on command (BT) with the data transferred into the central computer module, so that a new measurement is not necessary.

With the multiprocessor system according to the invention, a better assembly and service friendliness and a comfortable expandability is achieved. On the one hand, the modules are easily interchangeable, on the other hand, additional line interface modules can be added to the control center if required. Since each module works autonomously, the data exchange takes place via two separate data channels, the modules monitor themselves and, moreover, the central computer module routinely checks the functionality of the other modules, the highest level of security is guaranteed. The central computer module controls the individual modules via the data bus by giving an enable signal via the respective control line so that they recognize that it is their turn. The central computer module also controls the read and write signals. The synchronization during data exchange is carried out via acknowledgment signals.

Messages are generated by the individual modules and can also be passed on to other modules by the central computer module. For example, the message that the system is armed is signaled by the block lock connection module to the individual line connection modules via the central computer module.

List of reference numbers

• A / D analog / digital converter
• ADR address line
• ASE switch-on device
• AFF turn-off flip-flop
• AG alarm transmitter
• ALA autonomous line connection module
• AL-ANZ alarm display device
• AL-OFF alarm output circuit (C-output)
• AL / K-Ü alarm / short circuit monitoring device
• AS analog switch
• ASL control line (module select)
• BA operating and display module
• BS block lock
• BSA block-lock-on module
• ZR central computer module
• DB microprocessor-controlled data bus
• EA input / output module
• HM main detector
• LAE line switch-on device
• LPS line programming switch
• LSP line voltage
• ML signaling line
• SPA voltage cut-off device
• RM patch matrix
• SB hard-wired signal bus (collective bus)
• STB control command
• STL control line (C output)
• STL-A control line connection device (C output)
• STÖ-Ü Fault monitoring device

Claims (9)

1. A multiprocessor system for hazard- in particular burglar alarm systems with a central control unit (Z) of modular construction, to which a plurality of alarms are connected via message lines (ML) and a plurality of control devices are connected via control lines (STL), where the central control unit (Z) comprises, in addition to a central computer module (ZR) and a control- and display module (BA), additional modules both for different and for similar functions, characterised in that a plurality of different types of modules (BSA, EA) are provided for different functions and autonomous line connection modules (ALA) are provided for similar functons, that all the modules (BA, EA, BSA, ZR, ALA) are connected to a microprocessor-controlled data bus (DB) and in addition to a permanently wired signal bus (SB), a so-called collector bus, to which - in parallel with the data for the data bus (DB) message-specific signals of a message-triggering line connection module (ALA) are fed, that the central computer module (ZR) is connected to each module via a drive line (ASL), and that the central computer module (ZR) controls the data exchange between the individual modules, carries out a cyclic check of all the modules to establish their functioning capacity and carries out an interrogation of all the modules to establish new or modified data.

2. A multiprocessor system as claimed in claim 1, characterised in that each individual, autonomous line connection module (ALA) comprises a microcomputer (MR) which automatically carries out a cyclic interrogation of the message lines (ML) which it is assigned, analyses the message data and makes available alarm- and fault signals for the cyclic interrogation from the central computer module (ZR) in a register, provided for this purpose, in the microcomputer (MR) and simultaneously directly forwards these signals via a jumpering matrix (RM) to the signal bus (SB) and forwards control signals to the assigned control lines (STL).

3. A multiprocessor system as claimed in claim 1 or 2, characterised in that each individual autonomous line connection module (ALA) comprises monitoring devices (AL/K-0; STÖ-Ü), which are acted upon by the microcomputer (MR), and periodically carries out an automatic check on functioning capacity either as a matter of routine or on command, where a line breakage, short- circuit and alarm are simulated in respect of the message line in question and in the event of a fault the appropriate signal is both stored in the register of the microcomputer (MR) for the next additional interrogation via the microprocessor-controlled data bus (DB) and is also directly forwarded to the signal bus (SB).

4. A multiprocessor system as claimed in one of the preceding claims, characterised in that when the hazard alarm system enters operation, with the first cyclic interrogation of all the message lines (ML) to which it is connected each individual autonomous line connection module (ALA) recognises those message lines which are not connected and does not include these in further interrogation cycles.

5. A multiprocessor system as claimed in one of the preceding claims, characterised in that each individual, autonomous line connection module (ALA) comprises a voltage disconnection device (SPA) which, in the stand-by operation of the autonomous line connection module (ALA), disconnects the voltage supply of those switching devices (AL-AUS; STL-A) which are not active.

6. A multiprocessor system as claimed in claim 1, characterised in that in order to increase/reduce the focus (definition) of the entire hazard alarm system or subsidiary zones thereof, a block lock connection module (BSA) is provided to which the block locks (BS) are connected and to which alarm devices (AG, HM) for local and superordinate local alarms can be connected via a jumpering matrix (RM).

7. A multiprocessor system as claimed in claim 1, characterised in that for the preferably series data output an input/output module (EA) is provided which comprises a standardised interface (SST) and additional connection devices (ASE) for peripheral equipment (DR).

8. A multiprocessor system as claimed in claim 1, characterised in that the control- and display module (BA) includes a command key (BT) by means of which the data stored in the autonomous line connection module (ALA) can be input into a store included in the central computer module (ZR) from where it can be re-input into the autonomous line connection module (ALA) on command.

9. A multiprocessor system as claimed in one of the preceding claims, characterised in that the message lines (ML) and the control lines (STL) are directly connected to the autonomous line connection module (ALA) in question, where one or more than one control line (STL) can be jumpered to the signal bus (SB) via the jumpering matrix (RM).

Images