CONTROL SYSTEM AND CONTROL PROCEDURES

Abstract

A control system for controlling each of several control objects by means of a physical machine comprising several virtual machines comprises: a first virtual machine, which is at least one of several virtual machines, wherein the first virtual machine comprises a first communication unit that communicates with each of the several control objects, receives data used in controlling the control objects, and transmits a control instruction to the control objects, and comprises a distribution unit that distributes the data received from the control objects to another virtual machine; and a second virtual machine, which is distinct from the first virtual machine among the several virtual machines, wherein the second virtual machine comprises a computational processing unit that issues a control instruction to the control objects based on an analysis result obtained by analyzing the data.

Description

Technical field The present disclosure relates to a tax system and a tax procedure. Priority is claimed by Japanese patent application No. 2023-138039, filed on August 28, 2023, the contents of which are incorporated herein by reference. State of the art For example, a plant system 9 shown in Fig. 6 is used as a system for controlling and monitoring a plant, such as a power generation plant. The plant system 9 includes a control device 92, a control system 93, and a higher-level device 94. The control device 92 outputs a control signal to a control target 90 based on data acquired by the control target 90 and a predetermined control logic. Furthermore, the control device 92 outputs a control signal to the control target 90 based on an instruction received from the control system 93. The control system 93 is configured with several physical machines 931. Various control applications (APLs) are implemented in each physical machine 931. The control APL is an application that performs a control process unique to each control target 90, analyzing, for example, data acquired by the control device 92 and issuing a control instruction to the control device 92 based on an analysis result (calculation result).Furthermore, each physical machine 931 is also implemented with a plant-side communication control function for receiving data from the control target 90 via the control device 92 and transmitting a control instruction to the control device 92, a higher-level communication control function for uploading a calculation result of the control APL to the higher-level device 94, a monitoring function for checking whether the control system 93 is working normally or not, or the like. The higher-level device 94 is communicatively connected to the control system 93 via a network NW. The higher-level device 94 is, for example, an analysis system that collects a calculation result from the control system 93 and performs analyses or the like. In the prior art control system 93, as shown in Fig. 6, it is necessary to provide a physical machine 931 for one function (control APL). Therefore, as the number of functions increases, the costs required to construct the control system 93 increase, and it is necessary to expand the installation space. In recent years, consideration has been given to reducing the number of physical machines by constructing multiple virtual machines within one physical machine (see, for example, PTLs 1 and 2). List of citations Patent literature [PTL 1] Japanese unexamined patent application publication no. 2017-58734 [PTL 2] Japanese unexamined patent application publication no. 2010-237742 Summary of invention Technical problem Meanwhile, the system that uses the virtual machine in the prior art is constructed by directly transferring a function implemented in each physical machine to each virtual machine. That is, for example, in a case where the physical machine 931 of the control system 93 described above is replaced by the virtual machine, in addition to the control APL, which is unique for each physical machine 931, similar functions, such as the plant-side communication control function, the higher-level communication control function, and the monitoring function, must also be implemented in each virtual machine.In this case, since resources for each similar function must be allocated among the multiple virtual machines, it is necessary to make the resources of the physical machine sufficiently large or to limit the number of virtual machines to be allocated to the resources of the physical machine. One objective of the present disclosure is to provide a control system and a control procedure that are capable of reducing costs and installation space by integrating functions into a physical machine and by reducing the resources used by the entire system. Solution to the problem According to one aspect of the present disclosure, a control system is provided which controls each of several control targets by means of a physical machine which has several virtual machines, wherein the control system includes: a first virtual machine which is at least one of the several virtual machines and which includes a first communication unit which communicates with each of the several control targets, receives data which is used to control the control target and transmits a control instruction to the control target, and a distribution unit which distributes the data received from the control target to the other virtual machines;and a second virtual machine, which is a virtual machine that differs from the first virtual machine among the multiple virtual machines, and which contains a computational processing unit that outputs the control instruction to the control target based on an analysis result obtained by analyzing the data. According to another aspect of the present disclosure, a control method is provided which uses a control system that controls each of several control targets by means of a physical machine having several virtual machines, wherein the control method includes: a step of causing a first virtual machine, which is at least one of the several virtual machines, to communicate with each of the several control targets, to receive data used to control the control target, and to transmit a control instruction to the control target; a step of causing the first virtual machine to distribute the data received from the control target to the other virtual machines;and a step of instructing a second virtual machine, which differs from the first virtual machine among the multiple virtual machines, to issue the control instruction to the control target based on an analysis result obtained by analyzing the data. Advantageous effects of the invention According to the above aspect, it is possible to reduce costs and installation space by integrating functions into a physical machine and reducing resources used by the entire system. Brief description of the drawings Fig. 1 is a diagram showing an overall configuration of a plant system according to a first embodiment. Fig. 2 is a block diagram showing a functional configuration of a control system according to the first embodiment. Fig. 3 is a first sequence diagram showing an example of a process of the control system according to the first embodiment. Fig. 4 is a second sequence diagram showing an example of the process of the control system according to the first embodiment. Fig. 5 is a diagram showing an example of a hardware configuration. Fig. 6 is a diagram showing a configuration of a plant system in the prior art. Description of embodiments <Erste Ausführungsform> A first embodiment is described in detail below with reference to the drawings. (Overall configuration) Fig. 1 is a diagram showing an overall configuration of a plant system according to the first embodiment. As shown in Fig. 1, a plant system 1 includes a control device 2, a control system 3 and a higher-level device 4. The control device 2 acquires data used to control each of several control targets 10 provided in a system and outputs a control signal to the control target 10 based on the acquired data and a predetermined control logic. The control target 10 can be, for example, a machine such as a turbine or a compressor, or it can be a component such as an actuator of a fuel valve or a withdrawal valve. The data used to control the control target 10 is data used to calculate a specific control content of the control target 10 and is, for example, a measured value of the control target 10 or a sensor (a temperature sensor, a pressure sensor, an electricity meter, or the like) provided around the control target 10.Furthermore, in the event of receiving a control instruction from the control system 3, the control device 2 outputs a control signal corresponding to the control instruction to the control target 10. The control system 3 contains at least one physical machine 31. The physical machine 31 is communicatively connected via the network NW to the control device 2 and the superior device 4. The physical machine 31 has several virtual machines. The multiple virtual machines include a first virtual machine 32, which executes a process common to each control target 10, and a second virtual machine 33, which executes a control process unique to each control target. Furthermore, a third virtual machine 34, which executes a process common to each control target 10, may also be included. The first virtual machine 32 has a communication function with an external device (the control device 2 and the higher-level device 4) that is connected to the network NW. The second virtual machine 33 mediates communication between the external device and the other virtual machines 33 and 34. Therefore, the second virtual machine 33 and the third virtual machine do not need to have a communication function with the external device. The second virtual machine 33 is provided for each control target 10 individually. The second virtual machine 33 implements a control application (APL), analyzes data acquired by the control target 10, and issues a control instruction to the control target 10 based on an analysis result (calculation result). The control instruction is transmitted to the control device 2 via the first virtual machine 32. The third virtual machine 34 collects the diagnostic data from each of the virtual machines 32 and 33 in the physical machine 31 and diagnoses the integrity of each of the virtual machines 32 and 33. The higher-level device 4 is communicatively connected to the control system 93 via the network NW. The higher-level device 4 can, for example, be an analysis system that analyzes an operating state, operating efficiency, or the like of the plant based on the calculation result collected by the control system 3, or a management system for remotely controlling each control target 10 by an operator with reference to the calculation result. The plant system 1 can contain multiple control devices 2, and each control device 2 can control one or more control targets 10. At this point, the control system 3 issues a control instruction to any of the control devices 2 according to the control target 10 to be controlled. The control system 3 can contain multiple physical machines 31, and each physical machine 31 can issue a control instruction to a different control device 2. (Functional configuration of control system) Fig. 2 is a block diagram showing a functional configuration of the control system according to the first embodiment. As shown in Fig. 2, the physical machine 31 is connected to the network NW via a physical network interface controller 35 (hereinafter also referred to as a "physical NIC"). The physical NIC 35 is a device for communicating with an external device (the control device 2 and the higher-level device 4) that is connected to the network NW. In addition, a first virtual switch 36, to which the physical NIC 35 is connected, and a second virtual switch 37, to which each of the virtual machines 32, 33 and 34 is connected, are created on a processor of the physical machine 31. A virtual network interface controller 32A (hereinafter also referred to as a "virtual NIC") of the first virtual machine 32 is connected to the first virtual switch 36. The first virtual machine 32 can communicate via the first virtual switch 36 with the control device 2 and the higher-level device 4, which are external devices. Furthermore, a virtual NIC 32B of the first virtual machine 32 is connected to the second virtual switch 37. The first virtual machine 32 can communicate via the second virtual switch 37 with the second virtual machine 33 and the third virtual machine 34, which are other virtual machines in the physical machine 31. A virtual NIC 33A of the second virtual machine 33 is connected to the second virtual switch 37. The second virtual machine 33 can communicate via the second virtual switch 37 with the first virtual machine 32 and the third virtual machine 34, which are other virtual machines in the physical machine 31. A virtual NIC 34A of the third virtual machine 34 is connected to the second virtual switch 37. The third virtual machine 34 can communicate via the second virtual switch 37 with the first virtual machine 32 and the second virtual machine 33, which are other virtual machines in the physical machine 31. (Functional configuration of the first virtual machine) The first virtual machine 32 has a first communication unit 321, a second communication unit 322, a common data management unit 323 and a distribution unit 324 as functional units (containers, applications) for executing different processes. The first communication unit 321 is contained in a first network room NS1, which is configured with the first virtual switch 36. The shared data management unit 323 and the distribution unit 324 are contained in a second network space NS2, which is configured with the second virtual switch 37. The functional units contained in the second network space NS2 can be connected to the virtual NIC 32B or the first communication unit 321 via a virtual interface 32C, which assigns a virtual MAC address to each functional unit and distributes a data packet. The virtual interface 32C could, for example, be a function provided by a virtual environment builder platform, such as macvlan. The second communication unit 322 is located in a third network room NS3, which is distinct from the first network room NS1 and the second network room NS2. The third network room NS3 is connected to the first network room NS1 and the second network room NS2 via virtual routers 32D and 32E. The first communication unit 321 transmits and receives data to and from the control device 2 and the higher-level device 4. The first communication unit 321 communicates with each of the multiple control targets 10 via the control device 2 and receives data that is used to control each control target 10, and transmits a control instruction to each control target 10. The second communication unit 322 transmits data collected from each control target 10, a calculation result from each second virtual machine 33, a control instruction and the like to the superior device 4. The shared data management unit 323 manages data that is shared among virtual machines 32, 33, and 34. For example, the shared data management unit 323 accumulates or deletes data received by each control target 10 through the first communication unit 321, calculation results received by other virtual machines 33 and 34, control instructions, and the like. The distribution unit 324 distributes the data accumulated in the common data management unit 323 to a distribution target corresponding to each data set. For example, the distribution unit 324 distributes the data captured by the control target 10 to the second virtual machine 33, which corresponds to the control target 10, using a technique such as an Advanced Message Queuing Protocol (AMQP). Furthermore, the distribution unit 324 distributes (transmits) the control instruction or the computation result of the second virtual machine 33 to the control device 2 and the higher-level device 4 through the first communication unit 321 and the second communication unit 322. (Functional configuration of second virtual machine) The second virtual machine 33 has a compute unit 331 as a functional unit (container, application) for executing various processes. The functional unit contained in the second network space NS2 can be connected to the virtual NIC 33A via a virtual interface 33B, which assigns a virtual MAC address to each functional unit and distributes a data packet. The virtual interface 33B could, for example, be a function provided by a virtual environment builder platform, such as macvlan. The computational processing unit 331 issues a control instruction to the control target 10 based on an analysis result (calculation result) obtained by analyzing data acquired by the control target 10 using a control APL. The control instruction is transmitted to the first virtual machine 32 via the second virtual switch 37. (Functional configuration of third virtual machine) The third virtual machine 34 has a diagnostic data collection unit 341, a diagnostic unit 342, a diagnostic result DB 343 and a protocol collection unit 344 as functional units (containers, applications) for executing various processes. The diagnostic data collection unit 341, the diagnostic unit 342, and the diagnostic result database 343 are located in the second network space NS2, which is configured with the second virtual switch 37. The functional units located in the second network space NS2 can be connected to the virtual NIC 34A via a virtual interface 34B, which assigns a virtual MAC address to each functional unit and distributes a data packet. The virtual interface 34B could, for example, be a function provided by a virtual environment builder platform, such as macvlan. The protocol collection unit 344 is contained in a fourth network room NS4, which is distinct from the second network room NS2. The fourth network room NS4 is communicatively connected to the second network room NS2 via a virtual router 34C. The diagnostic data collection unit 341 collects diagnostic data used to diagnose integrity from the first virtual machine 32 and the second virtual machine 33. The diagnostic data includes, for example, the utilization rate of a memory area or similar information assigned to each virtual machine, historical information about various processes, and the like. The diagnostic unit 342 diagnoses the integrity of the first virtual machine 32 and the second virtual machine 33 based on the diagnostic data. For example, the diagnostic unit 342 performs diagnoses such as whether the utilization rate of the memory area of ​​each virtual machine exceeds a specified value or whether each virtual machine is in a functional stop state or not. The diagnostic result database 343 accumulates the diagnostic result through the diagnostic unit 342. The log collection unit 344 collects logs of data, calculation results, or the like, captured by each virtual machine. (Process example 1 of a tax system) Fig. 3 is a first sequence diagram that represents an example of a process of the control system according to the first embodiment. The following describes a flow of the process in which the control system 3 controls the control target 10, with reference to Fig. 3. First, the control target 10 transmits data, such as a sensor reading, to the control device 2 in a predetermined cycle (step S100). Furthermore, the control device 2 transmits the data received from the control target 10 to the control system 3 (step S101). When the first communication unit 321 of the first virtual machine 32 receives the data from the control target 10, the common data management unit 323 records the received data in a predetermined memory area (step S102). Next, the distribution unit 324 distributes the data from control target 10 to the second virtual machine 33 corresponding to control target 10 (step S103). In some cases, the same data (measurement from the same sensor, or the like) can be used to control each of the multiple control targets 10. In this case, multiple second virtual machines 33, corresponding to each control target 10, can be pre-configured as a data distribution target. The distribution unit 324 then distributes the data to each of these multiple second virtual machines 33. Furthermore, at this point, the distribution unit 324 can distribute the data to the third virtual machine 34 for log recording. The log collection unit 344 of the third virtual machine 34 then records the distributed data in a predetermined memory area (step S104). The computational processing unit 331 of the second virtual machine 33 analyzes the distributed data of the control target 10 (step S105) and outputs a control instruction for the control target 10 based on an analysis result (step S106). This control instruction is first transmitted to the first virtual machine 32. The shared data management unit 323 of the first virtual machine 32 records the control instruction received from the second virtual machine 33 in a predetermined memory area (step S107). The distribution unit 324 distributes (transmits) the control instruction received from the second virtual machine 33 to the corresponding control target 10 via the first communication unit 321 (step S108). Furthermore, at this point, the distribution unit 324 can distribute the data to the third virtual machine 34 for log recording. Then, the log collection unit 344 of the third virtual machine 34 records the distributed data in a predetermined memory area (step S109). Furthermore, the control device 2 generates a control signal based on the control instruction received from the control system 3 and transmits the control signal to the control target 10 (step S110). The control target 10 operates in accordance with the control signal received from the control device 2. (Process example 2 of a tax system) Fig. 4 is a second sequence diagram that illustrates the example of the control system process according to the first embodiment. The following describes the flow of a self-diagnostic process of the control system 3 with reference to Fig. 4. First, each of the first virtual machine 32 and the second virtual machine 33 transmits diagnostic data for integrity diagnostics to the third virtual machine 34 (step S200). The diagnostic data collection unit 341 of the third virtual machine 34 collects the diagnostic data from each of the virtual machines 32 and 33. In addition, the diagnostic unit 342 of the third virtual machine 34 diagnoses the integrity of each of the virtual machines 32 and 33 based on the diagnostic data collected from each of the virtual machines 32 and 33 (step S201) and records a diagnostic result in the diagnostic result DB 343 (step S202). The diagnostic unit 342 can transmit the diagnostic result to the superior device 4 (for example, a monitoring device that monitors the plant) in a predetermined cycle or upon request. At this point, the diagnostic unit 342 transmits the diagnostic result to the first virtual machine 32 (step S203). Then, the second communication unit 322 of the first virtual machine 32 transmits the diagnostic result received from the third virtual machine 34 to the superior device 4 (step S204). (Processes and effects) As described above, the control system 3 according to the present embodiment is a system that controls the multiple control targets 10 by means of the physical machine 31, which comprises multiple virtual machines, and includes the first virtual machine 32, which is at least one of the multiple virtual machines, and the second virtual machine 33, which is a virtual machine different from the first virtual machine 32. The first virtual machine 32 comprises the first communication unit 321, which receives data used to control the control target 10 and transmits a control instruction to the control target 10, and the distribution unit 324, which distributes the data received from the control target 10 to another virtual machine.The second virtual machine 33 contains the computational processing unit 331, which issues the control instruction to the control target 10 based on an analysis result obtained by analyzing the data received from the control target 10. In the prior art control system, it is necessary to provide a physical machine for each control target 10. However, since the control system 3 according to the present embodiment is configured as described above, it is possible to control the multiple control targets 10 with a single physical machine 31, which comprises the multiple virtual machines. Therefore, since the number of physical machines can be reduced, it is possible to reduce the costs required to construct the control system 3 and to reduce the installation space required for the control system 3. Furthermore, as described above, the prior art system using virtual machines is constructed by directly transferring the functions implemented in each physical machine to each virtual machine. Therefore, each virtual machine needs to individually receive data and transmit a control instruction to a control target (control device). In contrast, in the control system 3 according to the present embodiment, the communication function with the control device 2 is extracted as a shared function between the virtual machines, and only the first virtual machine 32 is integrated. In this way, the second virtual machine 33 does not need to use the shared function (i.e., the communication function) that overlaps with the first virtual machine 32, and resources for the shared function can be reduced.In this case, the control system 3 can increase the number of second virtual machines 33 operating in parallel, that is, the number of control APLs, while suppressing an increase in the total amount of resources required for the system. That is, since the number of second virtual machines 33 (control APLs) that can be operated on a physical machine 31 can be increased, the number of physical machines 31 can be minimized. Furthermore, since the second virtual machine 33 can ensure sufficient resources for the computing unit 331 (control APL) by eliminating the communication function with the control device 2, the processing speed of the control APL can be improved with respect to starting up, stopping down, performing calculations, or the like. Furthermore, each of the multiple second virtual machines 33 is assigned to each of the multiple control targets 10, and the distribution unit 324 of the first virtual machine 32 distributes the data of the control target 10 to the corresponding second virtual machine 33. In a case where each of the control targets 10 is controlled, the second virtual machine 33 can use the same data to execute different processes. In the present embodiment, as described above, the first virtual machine 32 can collectively receive the data from the control device 2 and distribute the received data to the several corresponding second virtual machines 33. Therefore, the number of communication cycles between the control system 3 and the control device 2 can be reduced. Consequently, it is possible to improve the communication speed of the entire plant system 1. Furthermore, the control system 3 also includes the third virtual machine 34, which is at least one of the several virtual machines, and includes the diagnostic unit 342, which diagnoses the operations of the first virtual machine 32 and the second virtual machine 33 on the basis of the diagnostic data collected by each of the first virtual machine 32 and the second virtual machine 33. In the prior art, for example, if an abnormality occurs in the control APL of a specific physical machine, there is a possibility that the operation of the entire physical machine will be stopped due to the influence of the abnormality. Furthermore, as described above, the system that uses the virtual machine in the prior art is constructed by directly transferring the functions implemented in each physical machine to each virtual machine. Therefore, if an abnormality occurs in the control APL of a specific virtual machine, there is a possibility that the operation of the entire virtual machine will be stopped. In this case, the prior art presents a possibility that an operator or similar person might not quickly detect the occurrence of the abnormality.In contrast, in the control system 3 of the present embodiment, the independent third virtual machine 34 diagnoses the integrity of the other virtual machines 32 and 33. In this way, for example, even in a case where the control APL in a particular second virtual machine 33 becomes abnormal and the operation of the second virtual machine is stopped, the diagnostic unit 342 of the third virtual machine 34 can detect the abnormality (operational stoppage) of the second virtual machine 33. Furthermore, the first virtual machine 32 also contains the second communication unit 322, which detects the status signal of the control target 10 and a control instruction that has been calculated in the second virtual machine and transmits the detected status signal and the control instruction to the superior device 4. In this way, the control system 3 can transmit the calculation result of each control APL and the like to the higher-level device 4, such as an analysis system or a terminal for remote control of the plant. Furthermore, the second communication unit 322 of the first virtual machine 32 can transmit the diagnostic result of the diagnostic unit 342 of the third virtual machine 34 to the higher-level device 4. In this way, the operator or similar can quickly recognize that an abnormality has occurred in the control system 3. <Andere Ausführungsformen> The embodiments have been described in detail above with reference to the drawings. However, the specific configuration is not limited to the above description, and various design modifications and the like are possible. That is to say, the procedures of the processes described above may be modified in other embodiments. Furthermore, some of the processes can be carried out in parallel. For example, in the embodiment described above, one aspect has been described in which the third virtual machine 34 has the integrity diagnostic function (diagnostic data collection unit 341, diagnostic unit 342, and diagnostic result database 343) of the control system 3. However, the present disclosure is not limited to this. In another embodiment, the first virtual machine 32 can have the diagnostic function instead of, or in addition to, the third virtual machine 34. If both the first virtual machine 32 and the third virtual machine 34 have the diagnostic function, a cross-check of the integrity is performed by the virtual machines 32 and 34. Furthermore, even if an abnormality occurs in the third virtual machine 34, the first virtual machine 32 can detect the abnormality.In this way, the reliability of the diagnostic result regarding integrity in control system 3 can be improved. <hardwarekonfiguration> Fig. 5 is a diagram that shows an example of a hardware configuration. A 900 computer contains a 901 processor, a 902 main memory device, a 903 auxiliary memory device and a 904 interface. The physical machine 31 of the control system 3 described above is implemented in the computer 900. The operation of each of the processing units described above is stored in the auxiliary memory device 903 in the form of a program. The processor 901 reads the program from the auxiliary memory device 903, loads the program into the main memory device 902, and executes the process according to the program. Furthermore, the processor 901 stores a memory area in the main memory device 902 corresponding to each storage unit described above, according to the program. The program can be used to implement some of the functions shown by the Computer 900. For example, the program can show a function in combination with another program already stored in the Auxiliary Memory Device 903, or in combination with another program installed in a different device. In another embodiment, the Computer 900 can include, in addition to or instead of the configuration described above, a custom large-scale integrated circuit (LSI), such as a programmable logic device (PLD). Examples of PLDs include Programmable Array Logic (PAL), Generic Array Logic (GAL), Complex Programmable Logic Device (CPLD), and Field-Programmable Gate Array (FPGA).In this case, some or all of the functions implemented by the 901 processor can be implemented by the integrated circuit. Examples of the auxiliary storage device 903 include a hard disk drive (HDD), a solid-state drive (SSD), a magnetic disk, a magneto-optical disk, a compact disc read-only memory (CD-ROM), a digital versatile disc read-only memory (DVD-ROM), and a semiconductor memory. The auxiliary storage device 903 can be an internal medium directly connected to a bus of the computer 900, or it can be an external storage device 910 connected to the computer 900 via the interface 904 or a communication line. In a case where this program is distributed to the computer 900 via the communication line, the computer 900, having received the delivery, can load the program into the main memory device 902 and perform the processing described above. In at least one embodiment, the auxiliary storage device 903 is a physical storage medium that is not temporary. Furthermore, the program can be used to partially implement the functions described above. Additionally, the program can be a so-called difference file (difference program) that implements the functions described above in combination with another program already stored in the auxiliary memory device 903. <Zusätzliche Hinweise> A control system and a control procedure described in the embodiment described above are understood, for example, as follows. (1) According to a first aspect, a control system 3 is provided which controls each of several control targets 10 by means of a physical machine 31 which has several virtual machines, the control system 3 comprising: a first virtual machine 32 which is at least one of the several virtual machines and which includes a first communication unit 321 which communicates with each of the several control targets 10, receives data used to control the control target 10 and transmits a control instruction to the control target 10, and a distribution unit 324 which distributes the data received from the control target 10 to the other virtual machines;and a second virtual machine 33, which is a virtual machine that differs from the first virtual machine 32 among the multiple virtual machines, and which contains a computational processing unit 331 that outputs the control instruction to the control target 10 on the basis of an analysis result obtained by analyzing the data. In the prior art control system, it is necessary to provide a physical machine for each control target 10. However, since the control system 3 according to the present embodiment is configured as described above, it is possible to control the multiple control targets 10 with a single physical machine 31, which comprises the multiple virtual machines. Therefore, since the number of physical machines can be reduced, it is possible to reduce the costs required to construct the control system 3 and to reduce the installation space required for the control system 3. Furthermore, as described above, the prior art system using virtual machines is constructed by directly transferring the functions implemented in each physical machine to each virtual machine. Therefore, each virtual machine needs to individually receive data and transmit a control instruction to a control target (control device). In contrast, in the control system 3 according to the present embodiment, the communication function with the control device 2 is extracted as a shared function between the virtual machines, and only the first virtual machine 32 is integrated. In this way, the second virtual machine 33 does not need to use the shared function (i.e., the communication function) that overlaps with the first virtual machine 32, and resources for the shared function can be reduced.In this case, the control system 3 can increase the number of second virtual machines 33 operating in parallel, that is, the number of control APLs, while suppressing an increase in the total amount of resources required for the system. That is, since the number of second virtual machines 33 (control APLs) that can be operated on a physical machine 31 can be increased, the number of physical machines 31 can be minimized. Furthermore, since the second virtual machine 33 can ensure sufficient resources for the computing unit 331 (control APL) by eliminating the communication function with the control device 2, the processing speed of the control APL can be improved with respect to starting up, stopping down, performing calculations, or the like. (2) According to a second aspect, in the control system 3 according to the first aspect, each of the several second virtual machines 33 is assigned to each of the several control targets 10, and the distribution unit 324 of the first virtual machine 32 distributes the data of the control target 10 to the corresponding second virtual machine 33. In a case where each of the control targets 10 is controlled, the second virtual machine 33 can use the same data to execute different processes. In the present embodiment, as described above, the first virtual machine 32 can collectively receive the data from the control device 2 and distribute the received data to the several corresponding second virtual machines 33. Therefore, the number of communication cycles between the control system 3 and the control device 2 can be reduced. Consequently, it is possible to improve the communication speed of the entire plant system 1. (3) According to a third aspect, the control system 3 according to the first or second aspect further includes a third virtual machine 34, which is at least one of the several virtual machines, and which includes a diagnostic unit 342, which diagnoses an operation of the first virtual machine 32 and the second virtual machine 33 on the basis of diagnostic data collected from each of the first virtual machine 32 and the second virtual machine 33. In the prior art, for example, if an abnormality occurs in the control APL of a specific physical machine, there is a possibility that the operation of the entire physical machine will be stopped due to the influence of the abnormality. Furthermore, as described above, the system that uses the virtual machine in the prior art is constructed by directly transferring the functions implemented in each physical machine to each virtual machine. Therefore, if an abnormality occurs in the control APL of a specific virtual machine, there is a possibility that the operation of the entire virtual machine will be stopped. In this case, the prior art presents a possibility that an operator or similar person might not quickly detect the occurrence of the abnormality.In contrast, in the control system 3 of the present embodiment, the independent third virtual machine 34 diagnoses the integrity of the other virtual machines 32 and 33. In this way, for example, even in a case where the control APL in a particular second virtual machine 33 becomes abnormal and the operation of the second virtual machine is stopped, the diagnostic unit 342 of the third virtual machine 34 can detect the abnormality (operational stoppage) of the second virtual machine 33. (4) According to a fourth aspect, in the control system 3 according to one of the first to third aspects, the first virtual machine 32 further includes a second communication unit 322, which receives the data of the control target 10 and the control instruction calculated in the second virtual machine 33 and transmits the received data and control instruction to a superior device 4. In this way, the control system 3 can transmit the calculation result of each control APL and the like to the higher-level device 4, such as an analysis system or a terminal for remote control of the plant. Furthermore, the second communication unit 322 of the first virtual machine 32 can transmit the diagnostic result of the diagnostic unit 342 of the third virtual machine 34 to the higher-level device 4. In this way, the operator or similar can quickly recognize that an abnormality has occurred in the control system 3. (5) According to a fifth aspect, a control procedure is provided which uses a control system that controls each of several control targets by means of a physical machine having several virtual machines, the control procedure comprising: a step of causing a first virtual machine, which is at least one of the several virtual machines, to communicate with each of the several control targets, to receive data used to control the control target and to transmit a control instruction to the control target; a step of causing the first virtual machine to distribute the data received from the control target to the other virtual machines;and a step of instructing a second virtual machine, which differs from the first virtual machine among the multiple virtual machines, to issue the control instruction to the control target based on an analysis result obtained by analyzing the data. Industrial applicability According to the above aspect, it is possible to reduce costs and installation space by integrating functions into a physical machine and reducing resources used by the entire system. Reference symbol list 1 Plant system 10 Control target 2 Control device 3 Control system 31 Physical machine 32 First virtual machine 321 First communication unit 322 Second communication unit 323 Common data management unit 324 Distribution unit 33 Second virtual machine 331 Computing processing unit 34 Third virtual machine 341 Diagnostic data collection unit 342 Diagnostic unit 344 Protocol collection unit 4 Superior device QUOTES INCLUDED IN THE DESCRIPTION This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature JP 2023-138039

[0001] JP 2017-58734

[0007] JP 2010-237742

[0007] < / hardwarekonfiguration>

Claims

A control system that controls each of several control targets by means of a physical machine comprising several virtual machines, wherein the control system comprises: a first virtual machine, which is at least one of the several virtual machines and which includes a first communication unit that communicates with each of the several control targets, receives data used to control the control target, and transmits a control instruction to the control target, and a distribution unit that distributes the data received from the control target to the other virtual machines; and a second virtual machine, which is a virtual machine that is different from the first virtual machine among the several virtual machines, and which includes a computational processing unit that outputs the control instruction to the control target based on an analysis result obtained by analyzing the data. Control system according to claim 1, wherein each of several of the second virtual machines is assigned to each of the several control targets, and the distribution unit of the first virtual machine distributes the data of the control target to the corresponding second virtual machine. Control system according to claim 1, further comprising: a third virtual machine, which is at least one of the several virtual machines and which includes a diagnostic unit that diagnoses the operation of the first virtual machine and the second virtual machine on the basis of diagnostic data collected from each of the first virtual machine and the second virtual machine. Control system according to one of claims 1 to 3, wherein the first virtual machine further comprises a second communication unit which captures the data of the control target and the control instruction calculated in the second virtual machine and transmits the captured data and control instruction to a superior device. A control method that uses a control system which controls each of several control targets by means of a physical machine which has several virtual machines, wherein the control method comprises: a step of causing a first virtual machine, which is at least one of the several virtual machines, to communicate with each of the several control targets, to receive data used to control the control target and to transmit a control instruction to the control target; a step of causing the first virtual machine to distribute the data received from the control target to the other virtual machines; and a step of causing a second virtual machine, which is different from the first virtual machine among the several virtual machines, to issue the control instruction to the control target based on an analysis result obtained by analyzing the data.

Images