JPH10312301A - Information processing device - Google Patents

Abstract

(57) [Summary] The present invention relates to an information processing apparatus, and realizes active maintenance for each adapter block on which a plurality of adapters are mounted without stopping an adapter function. A processor unit (3) stores in a memory (5) an initial value table for defining which of the duplicated control adapters is to be a primary system / sub system, and a current state of each control adapter to a primary system / sub system / A state table for setting any of the states of failure is provided. The CPU 4 detects the failure of the control adapter during operation, switches the failed adapter, and rewrites the state table to the current state, and checks the state table at the offline timing. If so, control is performed such that all control adapters other than the failed adapter in the adapter block are switched to the secondary system, and all control adapters in the other adapter block are switched to the primary system.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention is connected to financial institutions such as banks and online systems in various distribution industries.
The present invention relates to an information processing apparatus having a duplicated control adapter as a main / sub system, and in particular, controls a large number of terminal devices and the like via the control adapter and performs fault maintenance control for occurrence of a fault in the control adapter. The present invention relates to an information processing device.

[0002]

2. Description of the Related Art A conventional example will be described below with reference to the drawings. §1: Description of a conventional system ... see FIG. 19 FIG. 19 is an explanatory diagram of a conventional system, in which is an example of a system, and is an explanatory diagram of a sales office. Conventionally, for example, in a financial institution such as a bank, FIG.
A system as shown in FIG. 9 was used. In this system, a host computer 1 installed at a center side and a terminal control device 2 installed at each sales office are connected via a communication line.

[0003] Further, in each branch office, devices such as an ATM (automated transaction device) and UBT connected to the terminal control device 2 by a line are installed, and these devices are connected via the terminal control device 2. It is configured to perform business transactions and the like by communicating with the host computer 1 on the center side. The UBT is a counter terminal device (hereinafter, also referred to as a “business office terminal”) that is operated by a business clerk to perform business transactions.

As shown in FIG. 19, the terminal control device 2 includes a processor unit 3 including a CPU 4 and a memory 5 and having a duplicated system bus, and a system bus A and a system bus B, respectively.
And a control adapter (hereinafter, referred to as an “adapter”) that is duplexed as a main system / sub system. in this case,
An (A-system adapter) is connected to the processor unit 3 via a system bus A, and adapters B1, B2, B3,...・ Bn (B type adapter)
Is connected.

The A-system and B-system adapters include:
For example, an ATM (automatic transaction device) 8 and a UBT (sales terminal) 9 are connected via a modem 6 and a communication line, and a disk device (magnetic disk device, optical disk device, etc.) 7 is connected via a SCSI cable. Or
Further, the adapter is connected to an ATM 8 or U via a LAN.
BT9 etc. are connected.

§2: Description of Active Maintenance of Adapter—See FIG. 20 FIG. 20 is a conventional active maintenance explanatory diagram, FIG. 20 is a side view of a rack, and FIG. In the terminal control device 2, a large number of adapters are connected to the system bus. These adapters are inserted into the rack 11 for each adapter. In this case, since each adapter performs active maintenance, a terminal to be inserted into the rack 11 is a terminal for active maintenance.

The active maintenance terminal is configured, for example, as shown in FIG. That is, a terminal block is provided at the end of each adapter, and this terminal block has a GND terminal 13, a power supply terminal 14, and a signal terminal 15.
Etc. are provided. Of the terminals, the GND terminal 13 is the longest, the power supply terminal 14 is the longest, and the signal terminal 1 is the longest.
5 is the shortest.

The active maintenance terminal having such a configuration is inserted into a connector of the rack 11 to perform electrical connection and mechanical connection. In this case, the electrical connection relationship is as follows. . First, when the adapter is inserted into the rack 11, the adapter is connected to the connector on the rack 11 side in the order of GND terminal 13, power supply terminal 14, and signal terminal 15. When the adapter is removed from the rack 11, the signal terminal 15 is first disconnected from the connector on the rack 11 side, the power terminal 14 is disconnected next, and finally the G terminal is disconnected.
The ND terminal 13 is disconnected. By using an adapter having such a terminal for active maintenance, active maintenance of the adapter is enabled.

§3: Description of Adapter Block—See FIG. 21 FIG. 21 is an explanatory diagram of the adapter block. By the way, in recent technology, since adapters are becoming smaller and more general-purpose, it is considered to use an adapter block equipped with a plurality of adapters, and active maintenance for each adapter block is required. One example of such an adapter block is shown in FIG.

The adapter block has a plurality of A-system or B-system adapters mounted on a single printed circuit board.
A terminal block is provided at an end of the printed board, and a plurality of terminals are provided on the terminal block. That is,
The terminal block provided at the end of each adapter block
The GND terminal 13, the power supply terminal 14, and the signal terminals 15 are provided. In this case, the GND terminal 13 is the longest, the power supply terminal 14 is the longest, and the signal terminal 15 is the shortest. It has a structure.

The active maintenance terminal having such a structure is inserted into the connector of the rack 11 to perform electrical connection and mechanical connection. In this case, the electrical connection relationship is as follows. . First, the adapter lock 16 is connected to the rack 11
When connecting to the rack side connector, connect it to GND
The terminals 13 are connected in order of the power supply terminal 14 and the signal terminal 15. When the adapter block 16 is removed from the rack 11, the signal terminal 15 is disconnected first, the power supply terminal 14 is disconnected next, and finally the GND terminal is disconnected from the connector on the rack 11 side. 13 is cut off. By using the adapter block 16 having such active maintenance terminals, active maintenance can be performed for each adapter block.

A plurality of adapters are mounted on the adapter block 16. Each of these adapters has a normal connector connection, and the external terminals of each adapter have the same length. There is no terminal for active maintenance. Therefore, active maintenance cannot be performed for each adapter.

For example, it is assumed that A-system adapters A1 to An are mounted on the adapter block 16, and all A-system adapters are primary systems. It is assumed that the apparatus is operated in such a state, and for example, a failure occurs in the adapter A1. In such a case, active maintenance cannot be performed because each adapter does not have a terminal for active maintenance.

Therefore, even if only the adapter A1 fails, the active maintenance is performed by disabling all the A-system adapters A1 to An because the adapter block 16 on which the adapter A1 is mounted is used as a unit for active maintenance. There is a need. In other words, if active maintenance is performed on an adapter block basis, other non-failed adapter functions are affected, so that active maintenance on an adapter block basis is practically impossible.

[0015]

The above-mentioned prior art has the following problems. Conventionally, each adapter part has been a unit of active maintenance. For this reason,
When a failure has occurred in an arbitrary adapter, active maintenance has been enabled by switching on a failure adapter basis without affecting other adapter functions at all.

However, with recent technology, adapters are becoming smaller and more general-purpose, so that active maintenance is required for each adapter block equipped with a plurality of adapters, and adapter functions other than the failed adapter are also activated. There was a problem that it stopped during maintenance.

An object of the present invention is to solve such a conventional problem and to realize active maintenance for each adapter block in which a plurality of adapters are mounted without stopping an adapter function.

[0018]

FIG. 1 is a diagram for explaining the principle of the present invention, wherein FIG. The present invention is configured as follows to achieve the above object.

(1): A processor unit 3 including a CPU 4 and a memory 5 and having a duplicated system bus, adapter blocks A and B connected to each system bus A and B, and mounted on each adapter block A and B And duplicated control adapters (A1 to An, B1 to Bn)
In the information processing apparatus having:
Is an initial value table that defines which of the duplicated control adapters is the primary / sub system, and a state that sets the current state of each control adapter to one of the primary / sub system / failure A failure detection control means (a part of the function of the CPU 4) for detecting a failure of the control adapter during operation of the apparatus, switching the corresponding control adapter and rewriting the state table to the current state, Check the status table at the timing, and if only one adapter block is faulty, switch all control adapters other than the failed adapter in that adapter block to the sub system and correct all control adapters in the other adapter block. An adapter switching unit (a part of the function of the CPU 4) for switching to the system is provided.

(2): In the information processing apparatus of (1),
Offline timing, the period from when the device is turned on until the start of operation, or the period from the end of operation of the device to the time when the device is turned off, or the period during which operation is stopped by an instruction from a higher-level software Was included.

(3): In the information processing apparatus of (1),
The processor unit 3 checks the status table at the offline timing, and if no failure has occurred in the control adapter, resets all control adapters to the primary / sub system status defined in the initial value table. A switchback means (a part of the function of the CPU 4) is provided.

(4): In the information processing apparatus of (1),
In the initial value table, information defining which of the duplicated control adapters is to be the primary system or the secondary system can be set as a parameter for each control adapter.

(5): In the information processing apparatus of (4),
As a parameter to be set in the initial value table, the control adapter is alternately set as a main system for each system. (6): In the information processing apparatus of the above (1), the processor unit 3 checks the status table at an offline timing, and if both adapters have a failure, the processor switching function of the adapter switching means is performed. An adapter switching disabling means (a part of the function of the CPU 4) for disabling is provided.

(7): Failure detection control means for detecting a failure of the control adapter during operation of the apparatus, switching the corresponding control adapter and rewriting the state table to the current state, and checking the state table at offline timing If only one of the adapter blocks of the system block has failed, adapter switching means for switching all control adapters other than the failed adapter of the adapter block to the secondary system and switching all control adapters of the other adapter block to the primary system. A storage medium storing a program for implementing the functions of the present invention.

(Operation) The operation of the present invention based on the above configuration will be described with reference to FIG. (a): Operation of the above (1) When the failure detection control means detects a failure of the control adapter during the operation of the device, it switches the corresponding control adapter and rewrites the state table to the current state. Also, the adapter switching means checks the status table at the offline timing, and if only one of the adapter blocks has failed, switches all control adapters other than the failed adapter of the adapter block to the secondary system, and switches the other adapter block. Switch all control adapters to the primary system.

In this way, at the first off-line timing after the occurrence of the failure, all the control adapters of the adapter block in which no failure has occurred are set to the primary system, which affects the operation during the next operation. Without this, active maintenance of the adapter block including the failed adapter can be performed.

(B): Operation of the above (2) In the information processing apparatus of the above (1), a period from when the power is turned on to when the operation is started, or when the operation of the apparatus is terminated and the power of the apparatus is turned off. The process of (a) is performed by setting a period until disconnection or a period during which operation is stopped according to an instruction from the upper software as offline timing.

According to this configuration, at the first off-line timing after the occurrence of the failure of the control adapter, all the control adapters of the adapter block in which the failure has not occurred are set to the primary system. Active maintenance can be performed for each adapter block including a failed control adapter without affecting the control adapter.

(C): Operation of the above (3) In the information processing apparatus of the above (1), the initial state switching means checks the state table at the offline timing after the active maintenance is performed, and a failure occurs in the control adapter. If not (if the failed control adapter has been repaired by active maintenance), the primary system defined in the initial value table
Automatically switch back all control adapters to the state of the sub system.
As described above, at the off-line timing after the active maintenance, if the failure has been repaired, it is possible to automatically switch back to the primary / sub system setting according to the initial value table.

(D): Operation of the above (4) In the information processing apparatus of the above (1), the initial value table stores information defining which of the duplicated control adapters is to be the primary / sub system. It can be set as a parameter for each control adapter. Therefore, by devising the setting of the parameters, the control adapter can be operated efficiently.

(E): Operation of the above (5) In the information processing apparatus of the above (4), the control adapter is alternately set as the main system for each system as a parameter to be set in the initial value table. In this way, even if the adapter block fails, the operation can be resumed by switching only the control adapter functioning as the main system of the adapter block to the control adapter of the other control adapter block. In this case, since the operation of the primary adapter function of the other adapter block can be continued without being affected at all, the influence of the failure can be localized.

(F): Operation of the above (6) In the information processing apparatus of the above (1), the adapter switching invalidating means checks the status table at offline timing, and a failure has occurred in the control adapters of both systems. In this case, the adapter switching function of the adapter switching means is invalidated. As described above, when a failure has occurred in the control adapters of both systems, the switching of the control adapter is not performed, so that it is possible to prevent the failed control adapter from operating as the primary system in the next operation.

(G): Operation of the above (7) The CPU 4 detects the failure of the control adapter during the operation of the apparatus by executing the program stored in the storage medium, and switches the failed control adapter. To rewrite the state table to the current state. Also, the status table is checked at the offline timing, and if only one of the adapter blocks has failed, all the control adapters other than the failed control adapter of the adapter block are switched to the sub system, and all of the other adapter blocks are switched. Switch the control adapter to the main system.

In this way, at the first off-line timing after the occurrence of a failure, all control adapters of the adapter block in which no failure has occurred are set to the primary system, so that operation is affected during the next operation. Thus, active maintenance of the adapter block including the failed control adapter can be performed.

[0035]

Embodiments of the present invention will be described below in detail with reference to the drawings. The present embodiment described below is an example applied to a terminal control device of the system described in the conventional example.

§1: Description of Apparatus—See FIG. 2 FIG. 2 is a configuration diagram of the apparatus, and FIG.
Is an example of a table in memory. As shown in FIG. 2, the terminal control device 2 includes a processor unit 3 including a CPU 4 and a memory 5 and having a duplicated system, adapter blocks A and B connected to each system bus, and each adapter block A , B, and a control adapter duplicated as a primary / sub system (hereinafter simply referred to as “adapter”)
An information processing apparatus having:

Then, as shown in FIG.
An initial value table that defines which of the duplicated adapters is the primary system or the secondary system, and a state table that indicates the current status of each adapter as a primary system, a secondary system, or a failure state. Have. The initial value table allows information defining which of the duplicated control adapters to be the primary system / sub system to be set as a parameter for each control adapter. In this case, the parameters to be set in the initial value table may be set by the operation of the operator of the terminal control device 2 or another staff member, or may be set automatically by a program. Further, the details are as follows.

The terminal control device 2 is provided with a processor unit 3 having a CPU 4 and a memory 5. The processor unit 3 is connected to an A-system adapter block A via a system bus A, and is connected to another processor unit A. Another adapter block B is connected via a system bus B. in this case,
The adapter block A has A-system adapters A1 to An.
Are mounted, and the adapter block B is mounted with B-system adapters B1 to Bn.

The adapter blocks A and B are used as active maintenance units. That is, as shown in FIG. 21, active maintenance cannot be performed in units of adapters A1 to An and adapters B1 to Bn, and active maintenance can be performed in units of adapter blocks A and B. The memory 5 stores an initial value table and a state table, and the CPU 4 accesses these tables to perform data management. For example, when a failure occurs in the adapter, the CPU 4 accesses the status table and rewrites the corresponding data.

In this way, since the CPU 4 can check the status of the adapter by referring to the table, active maintenance of the adapter block can be efficiently performed. In this case, it is assumed that an initial setting value (a setting value as to which of the A-system and B-system adapters is to be the main system and the sub-system) is set as a parameter in the initial value table for each adapter.

A plurality of adapters are mounted on the adapter block, and circuits such as bus drivers / receivers for the system buses A and B are mounted.
Therefore, if a circuit such as the bus driver / receiver fails, the entire adapter block becomes unusable, resulting in a failure state. In such a case, the adapter block is provided with a failure detection function. When a failure of the adapter block is detected by the failure detection function, a failure occurrence (error signal) is notified to the CPU 4 by an interrupt. Have been.

FIG. 1 shows a conventional example of the adapter.
9, a line control adapter for controlling a line connecting the host computer 1 and the terminal control device 2 and a line connecting the ATM 8, UBT 9 and the like to the terminal control device 2;
It includes a LAN adapter for controlling a LAN line between the TM8, the UBT 9 and the like and the terminal control device 2, a SCSI control adapter for controlling connection of the disk device 7, and the like. The terminal control device 2 includes a server in a client / server system.

§2: Description of Processing of Processor Unit—See FIG. 3 FIG. 3 is a processing flowchart of the processor unit. Hereinafter, processing performed by the CPU 4 of the processor unit 3 will be described with reference to FIG. Note that S
1 to S13 indicate each processing step.

(1): Description of processing 1 (processing when an adapter failure occurs) Processing 1 is processing when an adapter failure occurs during operation of the apparatus. When the terminal control device 2 enters an operation start state and executes a certain process, the CPU of the processor unit 3
4 performs processing as follows. When the operation of the apparatus is started and the CPU 4 executes a certain process, first, the main system adapter is checked by referring to the status table of the memory 5 (S1). Thereafter, the CPU 4 issues a command to the primary adapter (S2). Then, it waits for a response from the partner adapter that issued the command (S3).

Next, when receiving the response from the partner adapter, the CPU 4 determines whether or not the response is normal (S4). As a result, if normal, the processing is continued using the main system adapter (S6). However, if it is determined that the response is not normal, it is determined that a failure has occurred in the partner adapter, the primary / secondary adapter is switched, and the parameters (primary / secondary) in the status table are rewritten (S5). ).

Then, the CPU 4 continues the processing by using the main system adapter after the switching of the adapter (S6). When another process is newly performed after one process is completed in this way, the process is performed again from the process of S1. In the process of S5, under the control of the CPU 4, the failure information of the failed adapter is displayed on an operator panel, a screen of another display device, or the like. Further, the failure information is stored in the memory 5 and operated by an operator or the like.
Be ready to output. This is useful for active maintenance of the adapter block.

(2): Description of Process 2 (Processing When Adapter Block Failure Occurs) Process 2 is a process when an adapter block fails during operation. As described above, a plurality of adapters are mounted on the adapter block, and the bus driver /
A circuit such as a receiver is mounted. Therefore, if a circuit such as the bus driver / receiver fails, the entire adapter block becomes unusable, resulting in a failure state.

In such a case, the adapter block includes:
A failure detection function is provided. When a failure of the adapter block is detected by the failure detection function, the occurrence of a failure (error signal) is notified to the CPU 4 by an interrupt. Then, when receiving an error signal due to an interrupt from the adapter block, the CPU 4 recognizes that a failure has occurred in the adapter block, and performs the following processing.

When the CPU 4 receives the error signal from the adapter block due to the interruption as described above, the CPU 4 puts all the adapters mounted on the corresponding adapter block into a failure state (S11). Further, all the adapters of the other adapter blocks are switched to the main system (S12). Then, the CPU 4 rewrites the parameters (primary system / secondary system) of the state table stored in the memory 5. Thereafter, the process is continued using the main system adapter (S13). Hereinafter, a specific example will be described.

§3: Description of Example 1—See FIGS. 4 to 9 FIG. 4 is an explanatory diagram (part 1) of Example 1, in which device state 1 and table state 1. FIG. 5 is an explanatory diagram (part 2) of Example 1, in which device state 2 and table state 2. FIG. 6 is an explanatory diagram (part 3) of Example 1, in which is a device state 3 and a table state 3. FIG. 7 is an explanatory diagram (part 4) of Example 1, in which device state 4 and table state 4. FIG. 8 is an explanatory view (part 5) of Example 1, in which device state 5 and table state 5. FIG.
Is an explanatory view (No. 6) of Example 1;
Is table state 6.

Hereinafter, the processing of Example 1 will be specifically described with reference to FIGS. Note that the processes described below are all performed by the CPU 4 executing a given program. However, active maintenance of the adapter block is performed by maintenance personnel.

(1): Explanation of State 1—See FIG. 4 FIG. 4 shows a state during normal operation. In this case, an adapter block A is connected under the control of the system bus A, and the adapters A1 to An are mounted on the adapter block A. An adapter block B is connected under the system bus B, and adapters B1 to Bn are mounted on the adapter block B.

In the initial value table, the adapter A1 is the primary system, the adapter B1 is the secondary system, the adapter A2 is the secondary system, and the adapter B2 is the primary system so that the adapters of the A and B systems alternately become the primary system. It is assumed that the adapter A3 is set as the primary system, the adapter B3 is set as the secondary system, the adapter An is set as the secondary system, and the adapter Bn is set as the primary system.

Here, according to the initial value table, the adapter A1 is the primary system, the adapter B1 is the secondary system, the adapter A2 is the secondary system, and the adapters of the A system and the B system are alternately the primary system according to the initial value table. The adapter B2 is set as the primary system, the adapter A3 is set as the primary system, the adapter B3 is set as the secondary system ... the adapter An is set as the secondary system, and the adapter Bn is set as the primary system. Therefore, in the initial state table, each parameter is set to the same state as the initial value table.

(2): Description of State 2—See FIG. 5 FIG. 5 shows a case where the adapter A1 operating as the primary system fails during operation in the state of FIG. in this case,
When detecting the failure of the adapter A1, the CPU 4 changes the status table of the adapter A1 from the main system to the failure, and makes the adapter A1 a failure. Thereafter, the CPU 4 sets the adapter B1
Is switched from the sub system to the main system to restart the operation, and the state table of the adapter B1 is changed from the sub system to the main system. That is, information indicating that the adapter B1 has transitioned to the primary system is written in the state table.

(3): Description of State 3—See FIG. 6 FIG. 6 shows a case where all the adapters of the system without a failure are switched to the main system at the offline timing after the state 2. When the off-line timing comes from the state 2 shown in FIG. 5, the CPU 4 performs the following processing. First, the CPU 4 checks the status table at the offline timing and detects that the adapter A1 is out of order.

Then, the adapter A3 operating as the primary system on the adapter block A side is switched to the auxiliary system, and the adapter B3 operating as the auxiliary system on the adapter block B side is switched.
Is switched to the normal system. Similarly, in the state table, the adapter A3 operating as the primary system on the adapter block A side is switched to the secondary system, and the adapter B3 operating as the secondary system on the adapter block B side is switched to the primary system. By this processing, all the adapters on the adapter block B side become the primary system.

(4): Explanation of State 4—See FIG. 7 FIG. 7 shows a case in which active maintenance is performed when the next operation is being performed from the state of FIG. 6, and an adapter block including a failed adapter is actively replaced. Is shown. In the state 3 shown in FIG. 6, since all the adapters A1 to An of the adapter block A including the failed adapter have been switched to the sub system, the active exchange of the adapter block A becomes possible.

Therefore, during the next operation, the maintenance staff removes the adapter block A from the rack and performs active replacement. In this case, the failed adapter A1 mounted on the extracted adapter block A is replaced with a new adapter, and the adapter block A is inserted into the rack of the apparatus again. At this time, since the adapter of the adapter block A is set to a failure or a sub system, the above-described hot swap can be performed without affecting the operation. Thereafter, the CPU 4 changes the status table of the adapter A1 from the failure to the sub system.

(5): Explanation of State 5—See FIG. 8 FIG. 8 shows the operation state after active maintenance shown in FIG. In this state 5, the adapters A1 to An mounted on the adapter block A are all sub-systems and the adapter block B
All the adapters B1 to Bn mounted on the main system operate as the main system.

(6): Explanation of State 6--See FIG. 9 FIG. 9 shows a state in which the main system / sub system is switched back according to the initial value table at the offline timing after the state 5. The apparatus is operated in the state shown in FIG. 9, and at the subsequent offline timing, the primary system / sub system of the adapter is switched back according to the initial value table. in this case,
The CPU 4 performs the following processing.

First, at the off-line timing, the CPU 4 checks the status table and, when detecting that no failure has occurred, switches the main / sub system of the adapter according to the initial value table, and also changes the status table to the initial value table. The main system / sub system of the adapter is changed according to the following. By such a process, switchback is automatically performed, and it is possible to return to the initial normal state.

§4: Description of Example 2—See FIGS. 10 and 11 FIG. 10 is an explanatory diagram (part 1) of Example 2, in which device state 1 and table state 1. FIG. 11 is an explanatory diagram (part 2) of Example 2, in which device status 2 and table status 2. Hereinafter, the process of Example 2 will be described with reference to FIGS.

(1): Explanation of State 1—See FIG. 10 FIG. 10 shows a case where a failure has occurred in both adapters during operation of the apparatus. When detecting the failure of the adapter A1 operating as the primary system, the CPU 4 changes the status table of the adapter A1 from the primary system to the failure. After that, the adapter B1 is switched from the sub system to the main system to resume the operation,
The state table of the adapter B1 is shifted from the sub system to the main system.

Further, in this state, when the CPU 4 detects a failure of the adapter B2 operating in the main system, the CPU 4
The state table 2 is shifted from the main system to the failure. Thereafter, the operation is restarted by switching the adapter A2 from the sub system to the main system, and the state table of the adapter A2 is changed from the sub system to the main system.

(2): Description of State 2—See FIG. 11 FIG. 11 shows a case where the off-line timing has come from the state of FIG. When the offline timing comes from the state shown in FIG. 10, the CPU 4 checks the state table and, when detecting that the adapter A1 and the adapter B2 have failed at the same time, does not execute the switching of the adapter.
As a result, the failed adapter is not registered in the status table as the primary system or the secondary system, so that the failed adapter does not operate as the primary system in the next operation.

§5: Description of Example 3—See FIG. 12 FIG. 12 is an explanatory diagram of Example 3, where is a device state and is a table state. FIG. 12 shows a case where the main adapters of the adapter blocks A and B are alternately arranged. In this example, with respect to the adapter block A, the adapter A1 is set as the primary system, A2 is set as the secondary system, A3 is set as the primary system, and An is set as the secondary system. As for the adapter block B, the adapter B1 is set to the sub system, B2 is set to the main system, B3 is set to the sub system ... Bn is set to the main system.

As described above, by setting the adapters so that they alternately become the primary system, it is possible to localize the influence when a failure occurs in the adapter block. For example, if the adapter block A fails, the adapter block A
Notifies the CPU 4 of an error state by interruption (see the processing of FIG. 3). With this notification, the CPU 4 recognizes the failure of the adapter block A.

At this time, the CPU 4 puts all the adapters A1 to An mounted on the adapter block A into a failure state, and sets all the adapters B1 to B of the other adapter block B to failure.
Switch n to the normal system. Then, the CPU 4 rewrites the parameters (primary system / sub system) in the state table to the current state. After that, the CPU 4 continues the process using the main system adapter.

That is, in the example of FIG. 12, the CPU 4 switches the adapters B1 and B3 from the sub system to the main system to resume the operation, and changes the status tables of the adapters B1 and B3 from the sub system to the main system. The adapters B2 and Bn, which originally operated as the primary system on the adapter block B side, continue to operate without any influence. Therefore, it is possible to localize the range affected by the failure.

§6: Description of Example 4—See FIG. 13 FIG. 13 is an explanatory diagram of Example 4, where is a device state and is a table state. FIG. 13 shows a case where the main system of the adapter is set to be concentrated on one adapter. In this example, the adapter A1 mounted on the adapter block A
To An were all set to the primary system, and all the adapters B1 to Bn mounted on the adapter block B were set to the secondary system.

As described above, the apparatus is operated in a state where the main system of the adapter is set to be concentrated on one adapter, and the adapter block A operating in the main system during the operation is operated.
It is assumed that a failure has occurred. At this time, the primary adapters A1 to A1 mounted on the failed adapter block A
Since all An are considered to be faulty, all adapter functions are affected. Therefore, it is not preferable to set each adapter in such a state.

§7: Explanation of failure maintenance control example 1 ... FIG.
4 and FIG. 15 FIG. 14 is a flowchart (part 1) of the failure maintenance control example 1, and FIG. 15 is a flowchart (part 2) of the failure maintenance control example 1. Hereinafter, failure maintenance control example 1 will be described with reference to FIGS. 14 and 15. In addition, S21 to S40 indicate each processing step.

This example is an example of the fault maintenance control when the shutdown processing period from the end of the operation to the power-off is set as the off-line timing. First, when the apparatus power is turned on (S21), the CPU 4 performs a system start-up process (S22), and thereafter, the operation of the apparatus is started (S2).
3).

In the operation state of the apparatus, for example, when a failure occurs in the adapter A1 operating in the main system as shown in FIG. 5 (S24), the CPU 4 detects the failure of the adapter A1 and until then, the sub system Adapter B1 set to
Is switched to the main system and the operation is continued (S25). Then, when the operation of the apparatus is terminated (S26), the CPU 4 performs a shutdown process performed at an off-line timing from the termination of the operation to the power-off, as shown in FIG. The system is switched to the normal system (S27). Thereafter, the power is turned off (S28).

After the apparatus is turned off as described above, for example, when the apparatus is turned on the next day (S2
9), the CPU 4 performs a system startup process (S3).
0), and then the operation of the device starts (S31). During operation, the adapter block B switched to the main system
Operation is performed using the adapters B1 to Bn on the side. At this time, the adapters A1 to An on the adapter block A side have failed or are in a sub system state (S32).

During the above-mentioned operation, active replacement of the failed adapter A1 is performed as shown in FIG. In this case, the adapter A is replaced by disconnecting the adapter block A from the system bus A, but there is no effect on the operation.
In this active exchange, first, the adapter block A is removed from the apparatus. Then, adapter A of adapter block A
Replace 1 with another adapter that has not failed. Thereafter, the adapter block A is mounted on the device by inserting it into the rack (S33).

Next, when the operation of the apparatus is completed (S3
4), in the shutdown processing performed at the offline timing, the CPU 4 switches the primary system / sub system back to the initial state according to the initial value table as shown in FIG. 9 (S3).
5). Thereafter, the power of the apparatus is turned off (S36). Next, for example, when the apparatus is turned on the next two days (S3
7) The CPU 4 performs a system startup process (S3).
8) The operation starts (S39). During this operation, the device is operated in a normal state (S40).

§8: Description of failure maintenance control example 2 ... FIG.
6, FIG. 17 FIG. 16 is a flowchart (part 1) of the failure maintenance control example 2, and FIG. 17 is a flowchart (part 2) of the failure maintenance control example 2. Hereinafter, failure maintenance control example 2 will be described with reference to FIGS. 16 and 17. In addition, S51 to S72 indicate each processing step.

This example is a failure maintenance control example in which the startup processing time from power-on to start of operation is taken as offline timing. First, when the apparatus power is turned on (S51), the CPU 4 performs a system start-up process (S52), and thereafter, the operation of the apparatus is started (S5).
3).

In the operation state of this apparatus, for example, as shown in FIG. 5, when a failure occurs in the adapter A1 operating in the main system (S54), the CPU 4 detects the failure of the adapter A1, and The adapter B1 set as the secondary system is switched to the primary system to continue the operation (S5).
5). When the operation of the apparatus ends (S56), C
The PU 4 performs a shutdown process (S57), and is turned off (S58).

After the power of the apparatus is turned off as described above, for example, when the power of the apparatus is turned on the next day (S5).
9), the CPU 4 performs a system start-up process (S6).
0), as shown in FIG. 6, all adapters B1 to Bn of the adapter block B having no failure are switched to the main system (S61). Then, the operation of the apparatus starts (S6).
2).

During operation at this time, processing is performed using the adapters B1 to Bn on the adapter block B side switched to the main system. At this time, the adapters A1 to An on the adapter block A side have failed or are in a sub system state (S6).
3). In addition, during the above operation, active replacement of the failed adapter A1 is performed as shown in FIG.

In this case, although the adapter block A is separated from the system bus A and the adapter A1 is replaced, there is no effect on the operation. In this active exchange, first, the adapter block A is removed from the apparatus. After that, the adapter A1 of the adapter block A is replaced. Thereafter, the adapter block A is mounted on the device by inserting it into the rack (S
64).

Thereafter, when the operation of the apparatus is completed (S6
5) The CPU 4 performs a shutdown process (S6).
6) The power is turned off (S67). Thereafter, for example, when the apparatus is turned on the next two days (S68), the CPU 4
Performs a system startup process (S69). At this time,
The CPU 4 switches the main system / sub system back to the initial state according to the initial value table as shown in FIG. 9 (S70). Thereafter, when the operation of the apparatus is started (S71), the CPU 4 operates the apparatus in a normal state (S72).

§9: Description of Failure Maintenance Control Example 3—See FIG. 18 FIG. 18 is a flowchart of failure maintenance control example 3. Hereinafter, failure maintenance control example 3 will be described with reference to FIG. S81 to S89 indicate each processing step. This example is a failure maintenance control example in which a period during which the operation is stopped according to an instruction of a higher-level software is set as an off-line timing. This example is an off-line timing, which is different from Examples 1 and 2 above, in that a 24-hour continuous operation without powering on / off the device can be adopted.

First, when the apparatus power is turned on, the CPU 4
Performs system startup processing, and then starts operation of the apparatus. During this operation (S81), for example, as shown in FIG. 5, when a failure occurs in the adapter A1 operating in the main system (S82), the CPU 4 detects the failure of the adapter A1, and the The adapter B1 set in the system is switched to the main system to continue the operation (S8
3).

Thereafter, during the period when the operation stop instruction is received from the upper software (for example, after midnight), the CP
U4 switches all adapters B1 to Bn of the adapter block B having no failure to the primary system as shown in FIG.
At this time, the CPU 4 also performs a date change process (S8).
4). Thereafter, the CPU 4 resumes operation (S85).
During operation at this time, operation is performed using the adapters B1 to Bn on the adapter block B side switched to the main system. At this time, adapters A1 to A on the adapter block A side
n is a failure or a sub system state (S86).

Thereafter, during the operation, the active replacement of the failed adapter A1 is performed as shown in FIG. In this case, the adapter A is replaced by disconnecting the adapter block A from the system bus A, but there is no effect on the operation. In this active exchange, first, the adapter block A is removed from the apparatus. Next, the adapter A1 of the adapter block A is replaced. Thereafter, the adapter block A is mounted on the device by inserting it into the rack (S87).

Thereafter, a period during which the operation stop instruction is received from the upper software (for example, after midnight of the next day)
Then, the CPU 4 switches the main system / sub system back to the initial state according to the initial value table as shown in FIG. 9 (S88).
At this time, the CPU 4 also performs date change processing and the like. And
The operation of the device is restarted (S89).

§10: Description of Program on Storage Medium As described above, the CPU 4 of the processor unit 3 detects a failure of each adapter during operation of the apparatus, switches the failed adapter, and sets the status table to the current state. Rewrite. Further, the CPU 4 checks the status table at the offline timing, and when only one of the adapter blocks has failed, all the control adapters other than the failed adapter of the adapter block are switched to the sub-system, and the other adapter block is switched. Performs various failure maintenance control processes such as switching all control adapters to the main system.

Each processing performed by the CPU 4 is realized by executing a program as follows.
For example, a program for realizing the processing of the CPU 4 is stored in a storage medium of a hard disk device connected to or built in the processor unit 3. Then, under the control of the CPU 4 at the start of the process, the program stored in the storage medium of the hard disk device is taken into the processor unit 3 and temporarily stored in the internal memory 5.

Thereafter, the CPU 4 performs the processing of the processor unit 3 by sequentially reading and executing the necessary programs from among the programs stored in the memory 5. The program stored in the storage medium of the hard disk device is stored (stored) as follows.

A program (program data created by another device) stored in a flexible disk (floppy disk) is read by a drive device provided in a computer main body and stored in a storage medium of a hard disk device.

: Magneto-optical disk or CD-ROM
And the like are read by a drive device provided in the computer main body and stored in a storage medium of a hard disk device.

Data received from another device via a communication line such as a LAN is received by the computer main body, and the data is stored in a storage medium of a hard disk device. §11: Other explanations (1): The processor unit 3 described in the above-described embodiment, the power supply unit, the magnetic disk, etc. of the terminal control device 2 not shown in the drawings may have the above-described dual configuration as necessary. By doing so, a more reliable system can be realized.

(2): The failure of the main system adapter
Although the CPU 4 detects as described above, it cannot be detected by the above processing that the sub system adapter has failed. However, the CPU 4 detects that a failure has occurred in the sub-system adapter by transmitting a check command to the sub-system adapter at a predetermined timing.

Therefore, when a failure occurs in the sub system adapter as described above, the CPU 4 can detect the failure by responding to the check command from the adapter. Therefore, even when a failure occurs in the adapter set in the sub system, it is possible to perform active replacement in adapter block units under the same control as described above.

[0099]

As described above, the present invention has the following effects. (1): If a failure occurs in a certain adapter during the operation of the device, the next operation is performed to set all control adapters of the adapter block in which no failure has occurred to the primary system at the first offline timing after the occurrence of the failure. Active maintenance can be performed for each adapter block including the failed adapter without affecting the adapter.

(2): After active maintenance of the adapter block, the state of each adapter can be automatically switched back to the initial state, so that maintenance work is reduced. (3): By setting the control adapter as the primary system alternately for each system as a parameter to be set in the initial value table, even if the adapter block fails, the control adapter that functioned as the primary system for that adapter block The operation can be resumed by switching only the control adapter of the other control adapter block to the control adapter. In this case, since the operation of the primary adapter function of the other adapter block can be continued without being affected at all, the influence of the failure can be localized.

In addition to the above effects, the following effects are provided according to each claim. (4): In claim 1, when the failure detection control means detects a failure of the control adapter during operation of the apparatus, the failure detection control means switches the corresponding control adapter and rewrites the state table to the current state. Also, the adapter switching means checks the status table at the offline timing, and if only one of the adapter blocks has failed, switches all control adapters other than the failed adapter of the adapter block to the secondary system, and switches the other adapter block. Switch all control adapters to the primary system.

In this way, at the first off-line timing after the occurrence of a failure, all the control adapters of the adapter block in which no failure has occurred are set to the primary system, which affects the operation during the next operation. Thus, active maintenance can be performed for each adapter block including a failed adapter.

(5): In the second aspect, a period from when the power of the device is turned on until the start of the operation, or a period between when the operation of the device is terminated and the power of the device is turned off, or when the power from the host software is changed. The processing is performed as in claim 1, wherein a period in which the operation is stopped by the instruction is set as the offline timing.

In this way, at the first off-line timing after the occurrence of the failure of the control adapter, all the control adapters of the adapter block in which no failure has occurred are set to the main system, so that the operation is performed during the next operation. The active maintenance can be performed for each adapter block including the failed control adapter without any influence.

(6): In claim 3, the initial state switching means checks the state table at the offline timing after active maintenance is performed, and if no failure has occurred in the control adapter, the initial state is defined in the initial value table. Automatically switches all control adapters back to the normal / sub system state. In this way, at the off-line timing after the active maintenance, the failure has been repaired, so that it is possible to automatically switch back to the primary / sub system settings according to the initial value table.

(7): In claim 4, in the initial value table, information defining which of the duplicated control adapters is to be the primary system or the secondary system can be set as a parameter for each control adapter. Therefore, by devising the setting of the parameters, the control adapter can be operated efficiently.

(8): In claim 5, as the parameter to be set in the initial value table, the control adapter is alternately set as the main system for each system. In this way, even if the adapter block fails, the operation can be resumed by switching only the control adapter functioning as the main system of the adapter block to the control adapter of the other control adapter block. In this case, since the operation of the primary adapter function of the other adapter block can be continued without being affected at all, the influence of the failure can be localized.

(9): In claim 6, the adapter switching invalidating means checks the status table at an off-line timing, and if a failure has occurred in the control adapters of both systems, the adapter switching function of the adapter switching means. Disable. As described above, when a failure has occurred in the control adapters of both systems, the switching of the control adapter is not performed, so that it is possible to prevent the failed control adapter from operating as the primary system in the next operation.

(10) In the present invention, the CPU executes the program stored in the storage medium to detect the failure of the control adapter during operation of the apparatus and to switch the failed control adapter. Rewrite the table to its current state. Also, the status table is checked at the offline timing, and if only one of the adapter blocks has failed, all the control adapters other than the failed control adapter of the adapter block are switched to the sub system, and all of the other adapter blocks are switched. Switch the control adapter to the main system.

In this way, at the first off-line timing after the occurrence of a failure, all control adapters of the adapter block in which no failure has occurred are set to the primary system, so that operation is affected during the next operation. Thus, active maintenance of the adapter block including the failed control adapter can be performed.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating the principle of the present invention.

FIG. 2 is a device configuration diagram in the embodiment.

FIG. 3 is a processing flowchart of a processor unit in the embodiment.

FIG. 4 is an explanatory diagram (part 1) of Example 1 in the embodiment;

FIG. 5 is an explanatory diagram (part 2) of Example 1 in the embodiment.

FIG. 6 is an explanatory diagram (part 3) of Example 1 in the embodiment;

FIG. 7 is an explanatory view (No. 4) of Example 1 in the embodiment.

FIG. 8 is an explanatory view (No. 5) of Example 1 in the embodiment.

FIG. 9 is an explanatory view (No. 6) of Example 1 in the embodiment.

FIG. 10 is an explanatory diagram of Example 2 in the embodiment (part 1);
It is.

FIG. 11 is an explanatory view of an example 2 in the embodiment (part 2)
It is.

FIG. 12 is an explanatory diagram of Example 3 in the embodiment.

FIG. 13 is an explanatory diagram of Example 4 in the embodiment.

FIG. 14 is a flowchart (part 1) of a failure maintenance control example 1 in the embodiment.

FIG. 15 is a flowchart (part 2) of the failure maintenance control example 1 in the embodiment.

FIG. 16 is a flowchart (part 1) of a failure maintenance control example 2 in the embodiment.

FIG. 17 is a flowchart (part 2) of a failure maintenance control example 2 in the embodiment.

FIG. 18 is a flowchart of a failure maintenance control example 3 in the embodiment.

FIG. 19 is an explanatory diagram of a conventional system.

FIG. 20 is an explanatory diagram of conventional active maintenance.

FIG. 21 is an explanatory diagram of an adapter block.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Host computer 2 Terminal control device 3 Processor part 4 CPU 5 Memory

Claims (7)

[Claims] 1. A processor section including a CPU and a memory, wherein a system bus is duplicated, an adapter block connected to each system bus, and a control adapter mounted on each adapter block and duplicated as a main system / sub system. The information processing apparatus having: an initial value table that defines which of the duplicated control adapters is to be the primary / sub system; and the current state of each control adapter to be the primary / sub system. And a failure detection control means for detecting a failure of the control adapter during operation of the device, switching the control adapter, and rewriting the status table to the current state, and Check the status table at offline timing, and if only one of the adapter blocks is faulty, Switching the lock all the control adapter other than the failed control adapter of the secondary system, the information processing apparatus characterized by comprising an adapter switching means for switching all the control adapter of another adapter block main system. 2. The off-line timing may be a period from turning on the power of the device to starting operation, a period from ending the operation of the device to turning off the power of the device, or an instruction from a host software. 2. The information processing apparatus according to claim 1, including a period during which operation is suspended. 3. The processor unit checks the status table at an off-line timing, and if no failure has occurred in the control adapter, all the statuses of the main system and the sub system defined in the initial value table are changed. 2. The information processing apparatus according to claim 1, further comprising an initial state switching unit that switches back the control adapter. 4. The system according to claim 1, wherein the initial value table is capable of setting information defining which of the duplicated control adapters is to be the primary system or the secondary system as a parameter for each control adapter. Item 10. The information processing apparatus according to Item 1. 5. The information processing apparatus according to claim 4, wherein the control adapter is set as a main system alternately for each system as a parameter to be set in the initial value table. 6. The processor unit checks the status table at an off-line timing and, if a failure occurs in both control adapters, disables an adapter switching function of the adapter switching unit. 2. The information processing apparatus according to claim 1, further comprising invalidating means. 7. A failure detection control means for detecting a failure of a control adapter during operation of the apparatus, switching the failed control adapter and rewriting a state table to a current state, and checking the state table at offline timing. ,
Adapter switching means for switching all the control adapters other than the failed control adapter of the one adapter block to the sub system, and switching all the control adapters of the other adapter block to the main system when only one of the adapter blocks has failed. A storage medium storing a program for implementing the functions of the present invention.