Control system and control method therefor

A control method for a control system in which a plurality of controllers and a redundant controller are connected to a common network, the plurality of controllers being divided into a highly available controller and other normal controllers, the method comprising, by the redundant controller:

• obtaining context data of the highly available controller to hold the context data in a memory;
• holding programs of the plurality of controllers in a non-volatile memory;
• holding the program of the highly available controller in the memory;
• substituting processing of the highly available controller by using the context data and the program of the highly available controller held in advance in the memory when a failure occurs in the controller;
• obtaining information on occurrence of a failure in the controller via the common network;
• transferring a program of the normal controller in which the failure has occurred from the non-volatile memory to the memory;
• obtaining context data of the normal controller in which the failure has occurred via the common network to hold the context data in the memory;
• and
• substituting processing of the normal controller by using the context data and the program of the normal controller held in the memory.

A control method for a control system in which a plurality of controllers and a redundant controller are connected to a common network, the plurality of controllers being divided into a highly available controller and other normal controllers, the method comprising, by the redundant controller:

• a first step of obtaining context data of the highly available controller to hold the context data in a memory, holding programs of the plurality of controllers in a non-volatile memory, and holding the program of the highly available controller in the memory;
• a second step of substitutes processing of the highly available controller by using the context data and the program of the highly available controller held in advance in the memory when a failure occurs in the highly available controller;
• a third step of obtaining information on occurrence of a failure in the normal controller via the common network, transferring a program of the normal controller in which the failure has occurred from the non-volatile memory to the memory, obtaining context data of the normal controller in which the failure has occurred via the common network to hold the context data in the memory;
• a fourth step of substituting processing of the normal controller by using the context data and the program of the normal controller held in the memory;
• a fifth step of determining whether the failure occurs in the highly available controller or the normal controller and distinguishing and transitioning between the second step and the fourth step;
• and
• a sixth step of transitioning to the first step after recovery from the failure.

A control method for a control system in which a plurality of controllers and a redundant controller are connected to a common network, the plurality of controllers being divided into a highly available controller and other normal controllers, the method comprising, by the redundant controller:

• holding programs of the plurality of controllers in a non-volatile memory;
• obtaining information on occurrence of a failure in the normal controller via the common network;
• transferring a program of the normal controller in which the failure has occurred from the non-volatile memory to a memory;
• obtaining context data of the normal controller in which the failure has occurred via the common network to hold the context data in the memory;
• substituting processing of the normal controller by using the context data and the program of the normal controller held in the memory;
• obtaining the context data of the highly available controller to hold the context data in the memory when obtaining information on occurrence of a failure in the highly available controller in a step of substituting the processing of the normal controller by the redundant controller via the common network;
• holding a program of the highly available controller in a memory;
• and
• degenerating processing of the highly available controller by using the context data and the program of the highly available controller held in advance in the memory when the failure occurs in the highly available controller.