Control apparatus and recovery processing method for control apparatus
AssigneeMitsubishi Electric Corporation
InventorMasuo ITO
Life of this patent
Estimating the term…
Abstract
A control apparatus includes a synchronization state transmission/reception unit configured to transmit and receive a synchronization state to and from another control apparatus via a network, and a state data transmission/reception unit configured to transmit and receive state data to and from the another control apparatus via the network. Thus, the control apparatus can grasp the synchronization state of the another control apparatus. Further, even when the control apparatus is restarted due to a failure, the control apparatus receives state data from another control apparatus that has been synchronized with the control apparatus and is in operation so that the control apparatus can recover without stopping the entire system.
Claims10
1:
- A control apparatus mounted in a vehicle and used in a multiplex system, the control apparatus to operate in synchronization with another control apparatus via a network, the control apparatus comprising a processor:
- to store in a memory state data indicating a control state of the control apparatus;
- to transmit the state data stored in the memory to the another control apparatus via the network, and to receive state data on the another control apparatus from the another control apparatus via the network;
- to transmit information on a synchronization state, which indicates whether a state of synchronization of the control apparatus with the another control apparatus is a synchronization preparation state or a synchronization completion state, to the another control apparatus via the network, and to receive information on a synchronization state of the another control apparatus from the another control apparatus via the network;
- to monitor whether or not the control apparatus is operating normally and restart the control apparatus when an abnormality occurs;
- and
- to, when the control apparatus is to be restarted,
- temporarily set the information on the synchronization state of the control apparatus to the synchronization preparation state;
- determine whether the information on the synchronization state of the another control apparatus, which has been received from the another control apparatus, is set to the synchronization completion state;
- overwrite, when it is determined that the information is set to the synchronization completion state, the state data on the another control apparatus, which has been received from the another control apparatus, into the memory as the state data on the control apparatus;
- and
- update the information on the synchronization state of the control apparatus from the synchronization preparation state to the synchronization completion state.
2:
- The control apparatus according to claim 1, wherein the processor,
- when the control apparatus is to be restarted, temporarily sets the information on the synchronization state of the control apparatus to the synchronization preparation state,
- determines whether the information on the synchronization states of the another control apparatus, which has been received from the another control apparatus, is set to the synchronization completion state or the synchronization preparation state,
- when it is determined, in the determination, that the information is set to the synchronization preparation state,
- when the state data on the another control apparatus, which has been received from the another control apparatus, matches the state data stored in the memory, updates the information on the synchronization state of the control apparatus from the synchronization preparation state to the synchronization completion state without overwriting the state data,
- when the state data on the another control apparatus does not match the state data stored in the memory, repeats the determination while keeping the information on the synchronization state of the control apparatus setting to the synchronization preparation state.
3:
- The control apparatus according to claim 1,
- wherein the control apparatus is configured to perform a normal operation at a fixed cycle, which is set in advance, and
- wherein the fixed cycle includes:
- a synchronization state transmission/reception period for the processor to transmit and receive the information on the synchronization state;
- and
- a data transmission/reception period for the processor to transmit and receive the state data.
4:
- The control apparatus according to claim 3, wherein the data transmission/reception period is set to have a length that is variable depending on the state data on the control apparatus and the state data on the another control apparatus, or on the information on the synchronization state of the control apparatus and the information on the synchronization state of the another control apparatus.
5:
- The control apparatus according to claim 3, wherein, in the fixed cycle, the synchronization state transmission/reception period is provided after the data transmission/reception period.
(canceled)
7:
- The control apparatus according to claim 1, wherein, the control performed by the control apparatus is different from that performed by the another control apparatus.
8:
- A control system comprising:
- a control apparatus mounted in a vehicle and used in a multiplex system, the control apparatus to operate in synchronization with another control apparatus via a network;
- and operation monitoring apparatus to monitor whether or not the control apparatus is operating normally and restart the control apparatus when an abnormality occurs,
- wherein the control apparatus comprises a processor:
- to store in a memory state data indicating a control state of the control apparatus;
- to transmit the state data stored in the memory to the another control apparatus via the network, and to receive state data on the another control apparatus from the another control apparatus via the network;
- to transmit information on a synchronization state, which indicates whether a state of synchronization of the control apparatus with the another control apparatus is a synchronization preparation state or a synchronization completion state, to the another control apparatus via the network, and to receive information on a synchronization state of the another control apparatus from the another control apparatus via the network;
- and
- to, when the control apparatus is to be restarted:
- temporarily set the information on the synchronization state of the control apparatus to the synchronization preparation state;
- determine whether the information on the synchronization state of the another control apparatus, which is received from the another control apparatus, is set to the synchronization completion state;
- overwrite, when it is determined that the information is set to the synchronization completion state, the state data on the another control apparatus, which has been received from the another control apparatus, into the memory as the state data on the control apparatus;
- and
- update the information on the synchronization state of the control apparatus from the synchronization preparation state to the synchronization completion state.
9:
- The control system according to claim 8, wherein the processor:
- when the control apparatus is to be restarted, temporarily sets the information on the synchronization state of the control apparatus to the synchronization preparation state;
- and
- determines whether the information on the synchronization states of the another control apparatus, which has been received from the another control apparatus, is set to the synchronization completion state or the synchronization preparation state,
- when it is determined, in the determination, that the information on the synchronization state of the another control apparatus is set to the synchronization preparation state,
- updates, when the state data on the another control apparatus, which has been received from the another control apparatus, matches the state data stored in the memory, the information on the synchronization state of the control apparatus from the synchronization preparation state to the synchronization completion state without overwriting the state data,
- repeats the determination, when the state data on the another control apparatus does not match the state data stored in the memory, while keeping the information on the synchronization state of the control apparatus setting to the synchronization preparation state.
10:
- A recovery processing method for a control apparatus mounted in a vehicle and used in a multiplex system, the control apparatus to operate in synchronization with another control apparatus, the recovery processing method in a case where the control apparatus is restarted comprising:
- setting information on a synchronization state, which indicates whether a state of synchronization of the control apparatus with the another control apparatus is a synchronization preparation state or a synchronization completion state, to the synchronization preparation state;
- transmitting state data indicating a control state of the control apparatus, which is stored in a storage apparatus, to the another control apparatus, and receiving state data on the another control apparatus from the another control apparatus;
- transmitting the information on the synchronization state, which has been set to the synchronization preparation state, to the another control apparatus, and receiving information on a synchronization state of the another control apparatus from the another control apparatus;
- determining whether the information on the synchronization state of the another control apparatus, which has been received from the another control apparatus, is set to the synchronization completion state;
- overwriting, when the information on the synchronization state of the another control apparatus is determined to be set to the synchronization completion state, the state data on the another control apparatus, which has been received from the another control apparatus, into the storage apparatus as the state data on the control apparatus;
- and
- updating the information on the synchronization state from the synchronization preparation state to the synchronization completion state.
Dependencies are inferred from the claim text.