Control system

Abstract

To safely update a control program, even in a case of remotely updating it.SOLUTION: A program memory 106 of a communication unit board 102 has a plurality of storing regions and can store a control program for the plurality of communication unit boards 102. Then, the communication unit board 102 stores an update program P1 for updating the control program for the communication unit board 102 received by a communication unit 103, for example, in a region 106b other than a region 106a, in which the control program for the communication unit board 102 currently used for control operation is stored, and switches the storing region read for performing the control operation, to the region 106b in which the update program P1 is stored, when the communication unit 103 receives a command indicating switching to the update program P1.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a control system for controlling cooling devices such as showcases connected via a network. [Background technology]

[0002] Conventionally, in cooling devices such as showcases and refrigerators installed in stores and the like that display or store products in a cooled state, a control board is provided to control the cooling device, and the control board is controlled by a control program.

[0003] This type of control program is updated to add functions, fix defects, etc. Previously, this involved going to the site, removing each control device from the cooling device one by one, connecting a writing tool, and rewriting the control program.

[0004] A store may have anywhere from a dozen to a hundred cooling devices installed, and updating them one by one would take a very long time. Also, since updating work cannot be done while the store is open, it must be done outside of business hours, and if there are multiple stores, the burden on the service staff and other people who perform the updating work is large.

[0005] Therefore, it is conceivable to update the program remotely via a network. For example, Patent Document 1 discloses a method for updating the program remotely. Patent Document 1 describes that a main memory in a control microcomputer that controls a refrigerator has a first area and a second area, the first area stores operating software that operates the refrigerator, and the second area stores update software including update information, and at a specific timing, the control microcomputer switches from the first area to the second area and operates with the update software. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Patent Publication No. 2022-14928 Summary of the Invention [Problem to be solved by the invention]

[0007] In the invention described in Patent Document 1, an update is automatically executed by a control microcomputer. However, a malfunction in the update is not taken into consideration, and a serviceman or the like needs to go to the site to deal with the malfunction. Therefore, there is a possibility that the refrigerator cannot be operated until the serviceman or the like deals with the malfunction on site.

[0008] SUMMARY OF THE PRESENT DISCLOSURE In view of the above, an object of the present invention is to enable a control program to be updated safely even when the control program is updated remotely. [Means for solving the problem]

[0009] The invention made to solve the above problem is a control system including a first control device capable of communicating with an external network, the first control device including a first control unit that performs a control operation based on a first control program, a first storage unit in which the first control program is stored, a first communication unit that receives a first update program that updates the first control program, and an input unit to which a predetermined command is input, the first storage unit having a plurality of storage areas capable of storing a plurality of the first control programs, the first control unit stores the first update program received by the first communication unit in another storage area other than the one storage area in which the first control program currently used for the control operation is stored, and when a command indicating switching to the first update program is input from the input unit, the first control unit switches the storage area to be read out to perform the control operation to the other storage area in which the first update program is stored. Effect of the Invention

[0010] According to the present invention, since there are a plurality of areas for storing the control program of the first control device, the first update program can be stored in another storage area in which the control program in operation is not stored. Then, since it is possible to switch to the first update program when a command for switching to the first update program is received, it becomes possible to check the update remotely, etc., and it is possible to update the control program safely. [Brief description of the drawings]

[0011] [Figure 1] 1 is a schematic configuration diagram of a control system according to an embodiment of the present invention. [Diagram 2] 2 is an explanatory diagram of updating of a control program of the communication unit board shown in FIG. 1. [Diagram 3] FIG. 3 is a sequence diagram of the operations shown in FIG. 2. [Figure 4] 2 is an explanatory diagram of updating (broadcasting) the control program of the control board shown in FIG. 1; FIG. [Diagram 5] FIG. 5 is a sequence diagram of the operations shown in FIG. 4. [Figure 6] 2 is an explanatory diagram of updating (retransmission) of a control program of the control board shown in FIG. 1. FIG. [Figure 7] FIG. 7 is a sequence diagram of the operations shown in FIG. 6. [Figure 8] 2 is an explanatory diagram of updating (unicast) the control program of the control board shown in FIG. 1; FIG. [Figure 9] FIG. 9 is a sequence diagram of the operations shown in FIG. 8. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] A control system according to an embodiment of the present invention will be described below. Fig. 1 is a schematic diagram of the control system according to the present embodiment.

[0013] 1 includes a host control device 10, a remote PC 100, a control board 11, a control board 12, a control board 1n, a cooling device 21, a cooling device 22, and a cooling device 2n. Here, of the control system 1, the host control device 10, the control board 11, the control board 12, the control board 1n, the cooling device 21, the cooling device 22, and the cooling device 2n are installed in, for example, a specific store. The remote PC 100 is installed in an office or the like in a location different from the specific store.

[0014] The remote PC 100 and the higher-level control device 10 are connected to each other via an external network N1 such as the Internet. The external network N1 may be wired or wireless. It may also be a public line such as a mobile phone line, not limited to the Internet. The higher-level control device 10 and the control board 11, the control board 12, and the control board 1n are connected to each other via an internal network N2. The internal network N2 is connected in a so-called daisy chain manner in FIG. 1, but it may also be connected in a star shape or may be connected wirelessly. The internal network N2 refers to a network that is installed within the same building or a specified site and has a more stable communication quality than the external network N1.

[0015] The higher-level control device 10 receives and accumulates measurement data such as temperature and abnormality notifications collected by the control boards 11, 12, and 1n (described later) via the internal network N2. The higher-level control device 10 also receives update programs for the communication unit board and the control board (described later) received from the remote PC 100 and performs update operations.

[0016] The remote PC 100 is a PC (personal computer) that is remotely connected to the upper control device 10 via an external network N1. The remote PC 100 transmits update programs for the communication unit board, control board 11, and the like described above to the upper control device 10, and is also capable of remotely operating the upper control device 10 via the external network N1 as necessary.

[0017] The control board 11 is connected to the cooling device 21. The control board 11 collects measurement data such as temperature measured by the cooling device 21, abnormality notifications, and the like, and transmits them to the higher-level control device 10 via the network N2. The control boards 12 and 1n have the same configuration as the control board 11, and only the cooling devices to which they are connected are different.

[0018] The cooling device 21 is a device having a refrigeration cycle system, such as a refrigerating device or freezing device, such as a showcase. The cooling device 21 has a measuring means for measuring the temperature inside a container such as a showcase, and outputs measurement data measured by the measuring means to the control board 11. The cooling device 21 is controlled based on this output result so as to achieve a desired temperature. The cooling devices 22 and 2n have the same configuration as the cooling device 21, and only the control board to which they are connected is different.

[0019] That is, in this embodiment, the higher-level control device 10 functions as a first control device, and the control boards 11 to 1n function as second control devices.

[0020] FIG. 2 shows a diagram including the functional configuration of the control system 1 described above. In FIG. 2, the upper control device 10 is composed of a panel computer (hereinafter referred to as a panel computer) 101 and a communication unit board 102. The panel computer 101 is a well-known computer that is integrated with a monitor and can be panel-mounted on a wall, equipment, etc. and is mainly used for industrial applications. In this embodiment, the panel computer 101 is installed in, for example, an office of a store. The panel computer 101 also collects trend data of the cooling devices 21-2n, detects and displays abnormalities of the cooling devices 21-2n, issues alarms, and controls schedules via the communication unit board 102 and the control boards 11-1n. A computer keyboard, tablet, PDA, etc. can also be connected to the panel computer 101, and the communication unit board 102 and the control boards 11-1n can be operated together with an external network N1 or independently as necessary.

[0021] The communication unit board 102 is connected to the panel computer 101 via a predetermined communication line or the like. The communication unit board 102 is also connected to the control boards 11-1n via wired communication or the like. The communication unit board 102 controls the transmission of various data and the like from the panel computer 101 to the control boards 11-1n and the transmission of various data and the like from the control boards 11-1n to the panel computer 101. The various data referred to here refers to trend data, control commands, status inquiries, responses thereto, and update programs, setting files, and the like for the communication unit board 102 and control boards 11-1n described below.

[0022] The communication unit board 102 includes communication units 103 and 104, and a microcomputer (hereinafter referred to as a microcomputer) 105. The communication unit 103 is a circuit that communicates with the panel computer 101. That is, the communication unit 103 can receive data from the external network N1 via the panel computer 101.

[0023] The communication unit 104 is a circuit that communicates with the control boards 11 to 1 n. In this embodiment, the communication unit 104 and the control boards 11 to 1 n use the network N2 (wired) inside the network N2, but may communicate with each other via wireless communication.

[0024] As is well known, the microcomputer 105 includes a CPU (Central Processing Unit), a data memory, a program memory 106, and the like. The microcomputer 105 operates according to a control program stored in the program memory 106. In this embodiment, the program memory 106 is divided into three areas: an area 106a, an area 106b, and an area 106c. In this embodiment, the communication unit 103 functions as a first communication unit, the microcomputer 105 functions as a first control unit, and the program memory 106 functions as a first storage unit. The control program stored in the program memory 106 and operated by the microcomputer 105 becomes the first control program.

[0025] Areas 106a and 106b are areas capable of storing a control program for controlling communication unit board 102. That is, program memory 106 (first storage section) has a plurality of storage areas and is capable of storing a plurality of first control programs. Area 106c is an area capable of storing control programs for control boards 11-1n (second update program storage area). That is, area 106c functions as a storage section that stores update program P2 (described later) received by communication section 103. The use of areas 106a-106c will be described later. Program memory 106 in this embodiment has two storage areas (areas 106a, 106b), but this is not limited to two and may be three or more.

[0026] As described above, the control board 11 is connected to the higher level control device 10 (communication unit board 102) via wired communication or the like. The control board 11 includes a communication unit 111 and a microcomputer 112. The control boards 12 and 1n have the same configuration as the control board 11, and therefore their explanation will be omitted.

[0027] The communication unit 111 is a circuit that communicates with the communication unit board 102. As is well known, the microcomputer 112 includes a CPU (Central Processing Unit), a data memory, a program memory 113, and the like. The microcomputer 112 operates according to a control program stored in the program memory 113. In this embodiment, the program memory 113 is divided into two areas, an area 113a and an area 113b. In this embodiment, the communication unit 111 functions as a second communication unit, the microcomputer 112 functions as a second control unit, and the program memory 113 functions as a second storage unit. The control program stored in the program memory 113 and operated by the microcomputer 112 becomes the second control program.

[0028] In this embodiment, the program memory 113 is divided into two areas, an area 113a and an area 113b. That is, the program memory 113 (second storage unit) has a plurality of storage areas and can store a plurality of second control programs. The areas 113a and 113b are areas that can store control programs for controlling the control board 11. The use of the areas 113a and 113b will be described later. Also, the program memory 113 in this embodiment has two areas (areas 113a and 113b), but this is not limited to two and may be three or more.

[0029] (Update of communication unit board 102) Next, the update operation of the control program in the control system 1 configured as above will be described with reference to Fig. 2 to Fig. 9. First, the update operation of the control program of the communication unit board 102 will be described with reference to Fig. 2 and Fig. 3. Fig. 2 is an explanatory diagram of the update of the control program of the communication unit board 102, and Fig. 3 is a sequence diagram showing the operation of Fig. 2.

[0030] First, an overview will be described with reference to Fig. 2. In Fig. 2, an update program P1 (first update program) for the communication unit board 102 and a setting file F are stored in the remote PC 100. The update program P1 is a new control program that updates the control program of the communication unit board 102 by upgrading the version or the like. The setting file F is a file in which the type of the update program P1 and other settings are set. The type indicates whether it is the communication unit board 102 or the control boards 11 to 1n. In Fig. 2, it is assumed that the type of the setting file F is set to be the communication unit board 102.

[0031] For example, an operator or the like operates the remote PC 100 to transfer the update program P1 and the setting file F to the panel computer 101. The update program P1 and the setting file F transferred to the panel computer 101 are then transmitted to the communication unit board 102. In the communication unit board 102, the microcomputer 105 refers to the setting file F and recognizes that the update program P1 is a control program for the communication unit board 102.

[0032] By recognizing that the update program P1 is a control program for the communication unit board 102, the area of ​​the program memory 106 in which the update program P1 is stored becomes either area 106a or area 106b. Here, if the area in which the currently executed control program is stored is area 106a, the update program P1 is stored in area 106b, which is different from the area in which the currently executed control program is stored.

[0033] After the storage of the update program P1 is completed, the area in which the currently executed control program is stored is switched from the area 106a to the area 106b by a switching command, etc. Thereafter, the communication unit board 102 is controlled by the update program P1.

[0034] Next, the update operation of the control program of the communication unit board 102 described above will be described with reference to the sequence diagram of Fig. 3. First, the remote PC 100 transfers (uploads) the update program P1 and the setting file F to the panel computer 101 (step S101). When the upload is completed, the remote PC 100 requests the panel computer 101 to start a program update (step S102). This program update start request is made by remotely operating the panel computer 101 from the remote PC 100. In other words, when a program update start request is operated in the panel computer 101, the operation described below is started. The program update start request may be sent from the remote PC 100 to the panel computer 101 as a command or the like to be executed. This also applies to each request from the remote PC 100 that will be described later.

[0035] Next, the panel computer 101 transmits the setting file F to the communication unit board 102 (step S103). The communication unit board 102 returns a response to the panel computer 101 as to whether the received setting file F was received normally or not (step S104). Whether the file was received normally or not can be determined in the microcomputer 105 by, for example, an error detection code such as a checksum. When executing this step S104, the microcomputer 105 refers to the setting file F and recognizes that the update program P1 to be received next is the control program for the communication unit board 102. Furthermore, based on the area in which the currently executed control program is stored, it is also recognized that the area in which the update program P1 is to be stored is the area 106b.

[0036] Here, step S103 may include a request to read data indicating that a change has occurred in the alarm information of the cooling devices 21 to 2n (Change Of Status data: hereinafter referred to as COS data). That is, the COS data is the change information. During normal monitoring and control, the communication unit board 102 monitors and grasps the operating data of the control board (= the object of control and monitoring) in real time. During writing of the update program, a load is placed on the processing capacity, making it difficult to perform the same monitoring as during normal monitoring and control. Therefore, only the COS data, which is important information, is requested.

[0037] If a read request for this COS data is included, the communication unit board 102 transmits the read request for the COS data to the control boards 11-1n and receives the COS data from the control boards 11-1n. Then, the COS data is included in the reply in step S104 and transmitted to the panel computer 101. The microcomputers 112, 122, and 1n2 of the control boards 11-1n collect the COS data as appropriate and transmit it via the communication units 111, 121, and 1n1 in response to the request.

[0038] Specific examples of COS data include temperature data inside the refrigerator when an abnormality occurs, details of the abnormality (abnormal temperature inside the refrigerator, etc.), operation data when the abnormality occurs, etc. Operation data includes whether or not defrosting is in progress, thermo ON / OFF status (whether normal cooling operation is in progress or has stopped after reaching the target temperature), ON / OFF status of interior lighting and fans, operation status of solenoid valves, etc.

[0039] Next, the update program P1 is written to the area 106b (step S105). Then, the communication unit board 102 returns a response to the panel computer 101 as to whether or not the received update program P1 has been written normally (step S106). In step S106, it can be determined whether or not the update program P1 has been written normally by a checksum or the like, similarly to step S104.

[0040] In this embodiment, the update program P1 is divided into a number of blocks and written. Therefore, writing is performed for each block, and a reply is made as to whether or not the block has been normally received (steps S107 to S110). A COS data read request may be included in the writing in steps S105, S107, S109, etc. described above. Then, the reply in steps S106, S108, S110, etc. may include the COS data and be sent to the panel computer 101. Depending on the contents of the update program P1, it may be possible to write the program all at once, rather than dividing it as in this embodiment. This should be selected appropriately according to the size of the program.

[0041] When writing of all blocks is completed, the remote PC 100 sends a program confirmation request to the panel computer 101 (step S111). This program confirmation request is sent by the remote PC 100 remotely controlling the panel computer 101.

[0042] When a program verification request is made, the panel computer 101 transmits a program verification request command to the communication unit board 102 (step S112). This program verification request command is for verifying whether the update program P1 written in steps S105 to S110 has been written correctly as the update program P1. The communication unit board 102 then returns a response to the panel computer 101 indicating whether the update program P1 has been written correctly (step S113). Steps S106 and the like are for determining whether a block is normal or abnormal, but steps S112 and S113 are for verifying the validity of the update program P1 as a whole, which is a combination of multiple blocks. This verification of validity may also be performed using a checksum or the like.

[0043] That is, whether the update program P1 has been written normally or not becomes information indicating whether the first update program has been successfully stored in another storage area, and the communication unit 103, which transmits to the panel computer 101 whether the update program P1 has been written normally or not, functions as an output unit. Note that the various pieces of information output by the communication unit 103 as an output unit may be output from the panel computer 101 to the external network N1, or may be output to a tablet or display device connected to the panel computer 101 (including the case where the panel computer 101 is remotely operated). In short, it is sufficient if the information is output to the outside of the higher-level control device 10.

[0044] The above-mentioned step S112 may also include a COS data read request. Then, in step S113, the COS data may also be included in the transmission to the panel computer 101.

[0045] Next, a program switching request is made from the remote PC 100 to the panel computer 101 (step S114). This program switching request is made by remotely operating the panel computer 101 from the remote PC 100.

[0046] When a program switching request is made, the panel computer 101 transmits a program switching request command to the communication unit board 102 (step S115). This program switching request command is a request command to switch the control program executed by the microcomputer 105 to the update program P1. In other words, the area of ​​the program memory 106 from which the microcomputer 105 reads the control program is switched from area 106a to area 106b. The communication unit board 102 then replies to the panel computer 101 as to whether or not the program area has been switched normally (step S116).

[0047] The replies in steps S113 and S116 can be confirmed by a worker in a remote location by operating the panel computer 101 with the remote PC 100.

[0048] Also, a COS data read request may be included in step S115, and the COS data may be included in the transmission to the panel computer 101 in step S116.

[0049] As described above, microcomputer 105 (first control unit) stores update program P1 received by communication unit 103 (first communication unit) in area 106b other than area 106a in which the first control program currently used for the control operation is stored. Then, when a command to switch to update program P1 is input from communication unit 103 (input unit), microcomputer 105 switches the storage area to be read out for the control operation to area 106b in which update program P1 is stored.

[0050] Furthermore, in this embodiment, the higher-level control device 10 is composed of the panel computer 101 and the communication unit board 102, and the communication unit board 102 communicates with the remote PC 100 via the panel computer 101 and also accepts commands (instructions) from the panel computer 101, so that the communication section 103 functions as both a first communication section and an input section. In other words, the communication section 103 accepts commands inputted by directly or indirectly (including remotely operating) the panel computer 101 as an input section. In short, any command may be inputted from outside the higher-level control device 10.

[0051] (Updated by broadcasting the control board) Next, the update operation of the control programs of the control boards 11 to 1n will be described with reference to Fig. 4 to Fig. 9. First, the update operation using broadcast transmission will be described with reference to Fig. 4 and Fig. 5. Fig. 4 is an explanatory diagram of the update of the control programs of the control boards 11 to 1n, and Fig. 5 is a sequence diagram showing the operation of Fig. 4.

[0052] First, an overview will be described with reference to FIG. 4. In FIG. 4, the remote PC 100 stores an update program P2 (second update program) for the control boards 11-1n and a setting file F. The update program P2 is a new control program that updates the control programs of the control boards 11-1n by upgrading the version or the like. The setting file F is a file in which the type of the update program P2 and the like are set. However, when updating the control boards 11-1n, in addition to the type, the model name and the software (program) version and the like are also set. In FIG. 4, it is assumed that the type is set to control board, the model name is set to Type A, and the software version is set to 2.0 in the setting file F. That is, the setting file F functions as designation information that designates the control boards 11-1n to be updated by the update program P2.

[0053] The method of transferring the update program P2 and the setting file F to the panel computer 101 is the same as that shown in Fig. 2. The update program P2 and the setting file F transferred to the panel computer 101 are then sent to the communication unit board 102. In the communication unit board 102, the microcomputer 105 refers to the setting file F and recognizes that the update program P2 is a control program for the control boards 11 to 1 n.

[0054] By recognizing that the update program P2 is a control program for the control boards 11 to 1n, the area of ​​the program memory 106 in which the update program P2 is stored becomes the area 106c, which is a storage area for the control boards. Therefore, the update program P2 transmitted to the communication unit board 102 is stored and accumulated in the area 106c.

[0055] Then, the microcomputer 105 broadcasts the update program P2 and the setting file F stored in the area 106c to the control boards 11-1n. That is, the microcomputer 105 functions as a transmission control unit that broadcasts the update program P2 stored in the area 106c (storage unit) to the control boards 11-1n (second control device). Each control board 11-1n receives the update program P2 and stores it in its own program memory 113 or the like only if the setting contents of the setting file F match with its own identification information.

[0056] In the case of FIG. 4, the identification information of control board 11 has a model name of Type B and a software version of 1.0, which does not match the setting file. Therefore, control board 11 does not store the transmitted update program P2 in program memory 113. The identification information of control board 12 has a model name of Type A and a software version of 2.0, which matches the setting file. Therefore, control board 12 stores the transmitted update program P2 in program memory 123. The identification information of control board 1n has a model name of Type A and a software version of 2.0, which matches the setting file. Therefore, control board 1n stores the transmitted update program P2 in program memory 1n3.

[0057] As described above, the program memory 123 of the control board 12 has two storage areas for the control program, 123a and 123b. In this case, if the area in which the currently executing control program is stored is the area 123a, the storage area for the update program P2 is the area 123b, which is different from the area in which the currently executing control program is stored. Similarly, for the control board 1n, if the area in which the currently executing control program is stored is the area 1n3a, the storage area for the update program P2 is the area 1n3b, which is different from the area in which the currently executing control program is stored.

[0058] After the storage of the update program P2 is completed, the area in which the currently executed control program is stored is switched by a switch command, etc. Thereafter, the control boards 12 and 1n are controlled by the update program P2.

[0059] Next, the update operation of the control program for broadcast transmission described above will be described with reference to the sequence diagram in Fig. 5. First, the remote PC 100 transfers (uploads) the update program P2 and the setting file F to the panel computer 101 (step S201). When the upload is complete, the remote PC 100 requests the panel computer 101 to start a program update (step S202). This program update start request is made by remotely operating the panel computer 101 from the remote PC 100.

[0060] Next, the panel computer 101 transmits the setting file F to the communication unit board 102 (step S203). The communication unit board 102 returns to the panel computer 101 whether the received setting file F was received normally or not (step S204). Whether the file was received normally or not can be determined by an error detection code such as a checksum, as in the case of the update program P1 of the communication unit board 102. When this step S204 is executed, the microcomputer 105 refers to the setting file F and recognizes that the update program P2 to be received next is the control program for the control boards 11 to 1 n. Furthermore, it is also recognized that the area for storing the update program P2 is area 106c.

[0061] The above-mentioned step S203 may also include a COS data read request, and in step S204, the COS data may also be included in the transmission to the panel computer 101.

[0062] Next, the update program P2 is written to the area 106c (step S205). Then, the communication unit board 102 returns a response to the panel computer 101 as to whether or not the received update program P2 has been written normally (step S206). In step S206, it is possible to determine whether or not the update program P2 has been written normally by using a checksum or the like, similarly to step S204.

[0063] The update program P2 of the control boards 11 to 1n is also divided into a plurality of blocks and written, similarly to the update program P1. Therefore, writing is performed for each block, and a reply as to whether or not the program has been normally received is performed (steps S207 to S210). That is, the microcomputer 105, which performs processing such as checksum, functions as a judging unit that judges whether or not the update program P2 stored in the area 106c has been normally stored. In addition, a COS data read request may be included in the writing of the divided update program P2 in the above-mentioned steps S205, S207, S209, etc. Then, the communication unit board 102 may include the COS data in the reply in steps S206, S208, S210, etc. and transmit it to the panel computer 101. Depending on the contents of the update program P2, it may be written in a lump, instead of being divided as in this embodiment. It is to be appropriately selected according to the size of the program.

[0064] The replies in steps S204, S206, S208, and S210 can be confirmed by an operator in a remote location by remotely operating the panel computer 101 using the remote PC 100.

[0065] Next, the communication unit board 102 broadcasts the setting file F to the control boards 11 to 1n (step S211). In step S211, since the destination is determined to be the control board, the type set in the setting file F may be omitted. This step S211 is executed when it is determined that the update program P2 stored in the area 106c has been successfully stored by executing steps up to S210.

[0066] Furthermore, when step S211 is executed, the microcomputer 112 on the control board 11-1n side refers to the setting file F and checks its own identification information to determine whether it is an update target. Also, the area for storing the update program P2 is recognized based on the storage area of ​​the currently executing control program.

[0067] Next, the update program P2 is broadcast to the control boards 11 to 1n and written into the program memory (step S212). Here, as described above, the update program P2 is written only into the target control board.

[0068] Even in the case of broadcast transmission, the update program P2 is divided into a plurality of blocks and transmitted. Therefore, writing is also divided into a plurality of times (steps S213, S214). When writing of all blocks is completed, a program confirmation request command is transmitted from the communication unit board 102 to the control board 11 (step S215). Then, the control board 11 returns a message to the communication unit board 102 informing whether the update program P2 has been written normally or not (step S216). This program confirmation request is intended to verify the validity of the update program P2 as a whole, which is a combination of a plurality of blocks, as in steps S112 and S113 in FIG. 3.

[0069] Next, a program check request command is transmitted from the communication unit board 102 to the control board 12 (step S217). Then, the control board 12 replies to the communication unit board 102 as to whether or not the update program P2 has been written normally (step S218). Next, a program check request command is transmitted from the communication unit board 102 to the control board 1n (step S219). Then, the control board 1n replies to the communication unit board 102 as to whether or not the update program P2 has been written normally (step S220). That is, after the broadcast transmission is completed, the microcomputer 105 (transmission control unit) checks whether the transmission was successful.

[0070] In other words, whether or not the update program P2 was written successfully becomes information indicating whether or not the second update program was successfully stored in another storage area, and the microcontroller 112 transmits whether or not the update program P2 was written successfully to the communication unit board 102 via the communication unit 111.

[0071] In the above-mentioned steps S215, S217, and S219, a COS data read request may be included. In this case, the COS data read request is transmitted from the communication unit board 102 to the control board 11, etc. Then, the control board 11, etc. transmits the COS data including the request to the communication unit board 102 when replying in steps S216, S218, and S220.

[0072] Although the update program P2 can be written by broadcast transmission, if a program confirmation request is sent to each of the control boards 11 to 1n by broadcast transmission, the responses arrive one after another, which places a burden on communication and may prevent normal reception. Therefore, in this embodiment, the requests are sent sequentially (by unicast).

[0073] As described above, microcomputer 112 (second control unit) stores update program P2 received by communication unit 111 (second communication unit) in area 113b of program memory 113 (second storage unit) other than area 113a in which the second control program currently used for the control operation is stored. Then, when communication unit 111 (second communication unit) receives information indicating switching to update program P2, microcomputer 112 (second control unit) can switch the storage area from which it reads out to perform the control operation to area 113b of program memory 113 (second storage unit) in which update program P2 is stored.

[0074] Next, the remote PC 100 makes a program check request to the panel computer 101 (step S221). This program check request is made by remotely operating the panel computer 101 from the remote PC 100. Then, a program check request command is sent from the panel computer 101 to the communication unit board 102 (step S222). Then, the communication unit board 102 replies to the panel computer 101 as to whether the update program P2 has been written normally or not (step S223). This step S223 is for sending to the panel computer 101 all the normal or abnormal contents received by the communication unit board 102 in steps S215 to S220. Specifically, it is possible to send to the panel computer 101 a data file or the like indicating normal or abnormal as a bitmap in the order of the addresses of the control boards 11 to 1n.

[0075] That is, when a response command regarding the success or failure of the update of the update program P is input from the communication unit 103 via the panel computer 101, the microcomputer 105 outputs information indicating the success or failure received from the communication unit 111 from the communication unit 103.

[0076] The data transmitted to the panel computer in step S223 can be confirmed by a worker in a remote location by operating the panel computer 101 with the remote PC 100.

[0077] Also, in step S222, a COS data read request may be included, and in step S223, the COS data may be included and transmitted to the panel computer 101.

[0078] Next, a program switching request is made from the remote PC 100 to the panel computer 101 (step S224). This program switching request is made by remotely operating the panel computer 101 from the remote PC 100.

[0079] When a program switching request is made, a program switching request command is transmitted from the panel computer 101 to the communication unit board 102 (step S225), and a program switching request command is transmitted from the communication unit board 102 to the control boards 11 to 1n (step S226). This program switching request command is a request to switch the control program executed by the microcomputers 112, 122, and 1n2 to the update program P2. In other words, for example, the area of ​​the program memory 113 from which the control program is read is switched from area 113a to area 113b.

[0080] (Retransmission by unicast from the control board) Next, an update operation using unicast transmission will be described with reference to Fig. 6 and Fig. 7. Fig. 6 is an explanatory diagram of the update of the control programs of the control boards 11 to 1n, and Fig. 7 is a sequence diagram showing the operation of Fig. 6. Figs. 6 and 7 show the operation when retransmitting to a control board where the broadcast transmission described in Figs. 4 and 5 has failed (caused an error).

[0081] First, an overview will be given with reference to Fig. 6. In Fig. 6, only a setting file F is stored in the remote PC 100. In this example, the setting file F has one address set for the control board for which updating by broadcast transmission has failed. In the example of Fig. 6, the address "1" is set.

[0082] The method of transferring the setting file F to the panel computer 101 is the same as that shown in Fig. 2. The setting file F transferred to the panel computer 101 is then sent to the communication unit board 102. The communication unit board 102 already stores the update program P2 for the control board used in the broadcast transmission.

[0083] Then, the microcomputer 105 transmits the update program P2 and the setting file F stored in the area 106c to the control board 11 having the address "1" set in the setting file F. The control board 11 compares the address "1" indicated by the setting file F with its own address "1" and finds that they match, so stores the update program P2 in its own program memory 113. That is, the microcomputer 105 (transmission control unit) transmits the update program P2 by unicast to the control boards 11-1n (second control devices) to which the broadcast transmission failed.

[0084] As described above, the program memory 113 of the control board 11 has two storage areas for the control program, the areas 113a and 113b. In this case, if the area in which the currently executed control program is stored is the area 113a, the storage area for the update program P2 is the area 113b, which is different from the area in which the currently executed control program is stored.

[0085] After the storage of the update program P2 is completed, the area in which the currently executed control program is stored is switched by a switching command, etc. Thereafter, the control board 11 is controlled by the update program P2.

[0086] Next, the update operation of the control program for unicast transmission described above will be described with reference to the sequence diagram in Fig. 7. First, the remote PC 100 transfers (uploads) the setting file F to the panel computer 101 (step S301). When the upload is complete, the remote PC 100 requests the panel computer 101 to start a program update again (step S302). This program update start request is made by remotely operating the panel computer 101 from the remote PC 100.

[0087] Next, the panel computer 101 transmits the setting file F to the communication unit board 102 (step S303). The communication unit board 102 returns to the panel computer 101 whether the received setting file F was received normally or not (step S304). Whether the file was received normally or not can be determined by an error detection code such as a checksum, as in the case of the communication unit board 102, etc. Here, as described above, in this example, the update program P2 is resent to the control board that failed in the broadcast transmission, so the update program P2 has already been stored in the communication unit board 102. Therefore, the update program P2 is not uploaded from the remote PC 100 to the panel computer 101, and the update program P2 is not written from the panel computer 101 to the communication unit board 102.

[0088] The above-mentioned step S303 may also include a COS data read request, and in step S304, the COS data may also be included in the transmission to the panel computer 101.

[0089] Next, the communication unit board 102 transmits the setting file F to the corresponding control board by unicast (step S305). The corresponding control board is specified as the address of the control board in the setting file F. For example, the control board 11 transmits a reply to the communication unit board 102 indicating whether the transmitted setting file F was received normally or not (step S306).

[0090] Next, the update program P2 is transmitted by unicast to the corresponding control board (for example, the control board 11) and written into the program memory 113 (step S307). For example, the control board 11 returns a response to the communication unit board 102 as to whether the written update program P2 was successfully written or not (step S308).

[0091] In this embodiment, the update program P2 is divided into a number of blocks and written. Therefore, writing is performed for each block, and a reply is sent as to whether or not the data was normally received (steps S309 to S312).

[0092] The above steps S305, S307, S309, and S311 may include a COS data read request. Then, the control board 11 and the like include the COS data in the replies sent to the communication unit board 102 in steps S306, S308, S310, and S312.

[0093] When writing of all blocks is completed, the remote PC 100 sends a program confirmation request to the panel computer 101 (step S313). This program confirmation request is sent by the remote PC 100 remotely controlling the panel computer 101.

[0094] When the program confirmation request is made, the panel computer 101 transmits a program confirmation request command to the communication unit board 102 (step S314). Then, the communication unit board 102 transmits a program confirmation request command to the control board 11 (step S315). Then, the control board 11 replies to the communication unit board 102 as to whether or not the update program P2 has been written normally (step S316). Then, the communication unit board 102 transmits the reply received in step S314 to the panel computer 101 (step S317). This program confirmation request, like steps S112, S113, etc. in FIG. 3, is intended to verify the validity of the update program P2 as a whole, which is a combination of multiple blocks.

[0095] The above steps S314 and S315 may also include a COS data read request. Then, in step S316, the COS data may be included in the transmission to the communication unit board 102, and in step S317, the COS data may be included in the transmission to the panel computer 101.

[0096] Next, a program switching request is made from the remote PC 100 to the panel computer 101 (step S318). This program switching request is made by remotely operating the panel computer 101 from the remote PC 100.

[0097] When a program switching request is made, a program switching request command is transmitted from the panel computer 101 to the communication unit board 102 (step S319), and a program switching request command is transmitted from the communication unit board 102 to, for example, the control board 11 (step S320). This program switching request command is, for example, a request to switch the control program executed by the microcomputer 112 to the update program P2. In other words, for example, the area of ​​the program memory 113 from which the control program is read out is switched from area 113a to area 113b.

[0098] Then, the control board 11 replies to the communication unit board 102 as to whether or not the switching has been normal (step S321). Then, the communication unit board 102 transmits the reply received in step S321 to the panel computer 101 (step S322).

[0099] The person performing the update or the like can operate the panel computer 101 from the remote PC 100 to confirm that the switch has been made normally.

[0100] The above steps S319 and S320 may also include a COS data read request. Then, in step S321, the COS data may be included in the transmission to the communication unit board 102, and in step S322, the COS data may be included in the transmission to the panel computer 101. Depending on the contents of the update program P2, it may be possible to write the update program P2 all at once, rather than dividing it as in this embodiment. This should be selected appropriately according to the size of the program.

[0101] (Control board unicast update) Next, an update operation using unicast transmission will be described with reference to Fig. 8 and Fig. 9. Fig. 8 is an explanatory diagram of the update of the control programs of the control boards 11 to 1n, and Fig. 9 is a sequence diagram showing the operation of Fig. 6. Unlike Fig. 6 and Fig. 7, Fig. 8 and Fig. 9 show the operation when updating only a specific control board, not limited to those for which broadcast transmission has failed.

[0102] First, an overview will be given with reference to Fig. 8. In Fig. 8, an update program P2 for a control board and a setting file F are stored in the remote PC 100. In this example, the setting file F is set with the type and one address of the control board to be updated. In the example of Fig. 8, the type is set to control board and the address is set to "1".

[0103] The method of transferring the update program P2 and the setting file F to the panel computer 101 is the same as that shown in FIG.

[0104] Then, the microcomputer 105 transmits the update program P2 and the setting file F stored in the area 106c to the control board 11 having the address "1" set in the setting file F. The control board 11 compares the address "1" indicated by the setting file F with the address "1" which is its own identification information, and since they match, the microcomputer 105 stores the update program P2 in its own program memory 113.

[0105] As described above, the program memory 113 of the control board 11 has two storage areas for the control program, the areas 113a and 113b. In this case, if the area in which the currently executed control program is stored is the area 113a, the storage area for the update program P2 is the area 113b, which is different from the area in which the currently executed control program is stored.

[0106] After the storage of the update program P2 is completed, the area in which the currently executed control program is stored is switched by a switching command, etc. Thereafter, the control board 11 is controlled by the update program P2.

[0107] Next, the update operation of the control program of the above-mentioned unicast transmission will be described with reference to the sequence diagram of Fig. 9. First, the remote PC 100 transfers (uploads) the update program and the setting file F to the panel computer 101 (step S401). When the upload is completed, the remote PC 100 requests the panel computer 101 to start a program update (step S402). This program update start request is made by remotely operating the panel computer 101 from the remote PC 100.

[0108] Next, the panel computer 101 transmits the setting file F to the communication unit board 102 (step S403). The communication unit board 102 returns to the panel computer 101 whether the received setting file F was received normally or not (step S404). Whether the file was received normally or not can be determined by an error detection code such as a checksum, as in the case of the communication unit board 102, etc. When this step S404 is executed, the microcomputer 105 refers to the setting file F and recognizes that the update program P2 to be received next is the control program of the control board 11. Furthermore, it is also recognized that the area for storing the update program P2 is the area 106c. The above-mentioned step S403 may also include a COS data read request. Then, in step S404, the COS data may be included and transmitted to the panel computer 101.

[0109] Next, the update program P2 is written in the area 106c (step S405). Then, the communication unit board 102 replies to the panel computer 101 as to whether the received update program P2 has been written normally (step S406). In step S406, it can be determined whether the update program P2 has been written normally by a checksum or the like, as in step S404. That is, the microcomputer 105 that processes the checksum or the like functions as a determination unit that determines whether the update program P2 stored in the area 106c has been stored normally. In addition, when writing the divided update programs P2 in the above-mentioned steps S405, S407, S409, etc., a COS data read request may be included. Then, when replying to steps S406, S408, S410, etc., the communication unit board 102 may include the COS data and transmit it to the panel computer 101.

[0110] The update program P2 for the control boards 11 to 1n is also divided into a plurality of blocks and written in the same manner as the update program P1. Therefore, writing is performed for each block and a reply is given as to whether or not the writing was successful (steps S407 to S410).

[0111] The subsequent operations are the same as steps S305 to S322 in Fig. 7, which are the unicast operations already described (steps S411 to S428). Depending on the contents of the update program P2, it may be possible to write the update program all at once, rather than dividing it as in this embodiment. This should be selected appropriately depending on the size of the program.

[0112] According to this embodiment, the control system 1 includes a host control device 10 capable of communicating with a network N1, and control boards 11-1n connected to a plurality of cooling devices 21-2n connected to the host control device 10 via a network N2. A communication unit board 102 constituting the host control device 10 includes a communication section 103 that receives an update program P2 for the control program of the control boards 11-1n from the network N1, an area 106c that stores the update program P2 received by the communication section 103, and a microcomputer 105 that broadcasts the update program P2 stored in the area 106c to the control boards 11-1n.

[0113] By configuring the control system 1 as described above, the update program P2 is broadcast, so that the control programs of the multiple control boards 11 to 1n can be updated simultaneously. Therefore, the time required for updating can be shortened. In addition, since the update program P2 is temporarily stored in the area 106c of the communication unit board 102, the update is performed via the internal network N2, which has a more stable communication environment than the external network N1, so that the number of retries can be reduced, which contributes to shortening the update time.

[0114] Furthermore, because the panel computer 101 can be operated from a remote location and updates can be performed without going to the site, the travel time and costs required to go to the site are unnecessary, and it is easy to start work. Nighttime work is no longer necessary, and the burden on workers is reduced. In addition, by storing and updating the data once, the number of communications with remote locations can be reduced, and redoing work, etc. can be done only with on-site communications, thereby reducing remote communication time.

[0115] Furthermore, the microcomputer 105 transmits the update program P2 by unicast to the control boards 11 to 1n for which the broadcast transmission has failed, so that even if the update fails, it is possible to deal with the failure individually. Also, since the unicast is sent only to the failed control board, the update time can be shortened compared to updating all by unicast.

[0116] After the broadcast transmission is completed, the microcomputer 105 checks whether the transmission was successful or not. In this way, it can be confirmed whether the update program P2 has been reliably written to the control boards 11 to 1n.

[0117] Furthermore, the communication unit 103 receives a setting file F that specifies the control board to which the update program P2 is to be sent from the external network N1 via the panel computer 101, and the control boards 11-1n have identification information including their own model name, software version, etc., and receive the update program P2 sent from the communication unit board 102 when the identification information matches the setting file. In this manner, the control boards 11-1n can determine whether or not they are to be updated without the communication unit board 102 knowing the type of the control boards 11-1n with which it is communicatively connected. Therefore, only the control boards targeted by the update program can be updated, and it is possible to prevent other control boards from being erroneously updated.

[0118] Furthermore, the microcomputer 105 judges whether the update program P2 stored in the area 106c has been stored normally, and when it is judged that the update program P2 has been stored normally, it transmits the update program by broadcast. In this way, it is possible to evaluate the validity of the update program P2 once stored before updating the control boards 11 to 1n. Therefore, if an error occurs during reception from the external network N1, it is possible to take measures such as retransmission before updating the control boards 11 to 1n.

[0119] The communication unit board 102 includes a microcomputer 105 that performs a control operation according to a control program for the communication unit board 102, a program memory 106 in which the control program for the communication unit board 102 is stored, and a communication unit 103 to which an update program P1 for updating the control program for the communication unit board 102 is received and to which a command is input via the panel computer 101. The program memory 106 has a plurality of storage areas and can store a plurality of control programs for the communication unit board 102. The communication unit board 102 stores the update program P1 received by the communication unit 103 in, for example, an area 106b other than the area 106a in which the control program for the communication unit board 102 currently used for the control operation is stored, and when the communication unit 103 receives a command to switch to the update program P1, the storage area to be read out for the control operation is switched to the area 106b in which the update program P1 is stored.

[0120] By configuring the communication unit board 102 as described above, there are multiple areas for storing the control program of the communication unit board 102, so that the update program P1 can be stored in an area different from the area in which the control program in operation is stored. In addition, normal operation is possible while updating the program. And, since it is possible to switch to the update program P1 when a command to switch to the update program P1 is received, it is possible to check the update remotely, and it is possible to update the control program safely.

[0121] Also, a communication unit 103 is provided which acquires information indicating whether the update program P1 has been successfully stored in the area 106b and outputs the information indicating the success or failure to the outside. In this manner, it becomes possible to confirm via the panel computer 101 whether the writing of the update program P1 has been successful, and after confirming success, it is possible to switch to the update program P1. Therefore, it is possible to avoid switching to the update program P1 when an abnormality exists.

[0122] For example, the control board 11 includes a microcomputer 112 that performs a control operation for the cooling device 21 by a control program for the control board, a program memory 113 in which the control program for the control board is stored, and a communication unit 111 that receives the update program P2 transmitted from the communication unit board 102, which is an update program P2 that updates the control program for the control board. The program memory 106 has an area 106c that stores the update program P2. The program memory 113 has multiple storage areas and can store control programs for multiple control boards. The microcomputer 112 stores the update program P2 received by the communication unit 111 in an area 113b in the program memory 113 other than the area 113a in which the control program for the control board currently used for the control operation is stored, and when the communication unit 111 receives information indicating switching to the update program P2, the storage area from which the microcomputer 112 reads out the control operation is switched to the area 113b in which the update program P2 is stored.

[0123] For example, by configuring the control board 11 as described above, there are multiple areas for storing the control program of the control board 11, so that the update program P2 can be stored in an area different from the area in which the control program in operation is stored. In addition, operation while rewriting the program becomes possible. And, since it is possible to switch to the update program P2 when a command to switch to the update program P2 is received, it becomes possible to check the update, and it is possible to safely update the control program.

[0124] In addition, when a command to switch to the update program P2 is received, the program is switched to the update program P2, so the program can be switched at the intended timing by the program update worker or the upper system. For example, after transmitting the update program P2 to all control boards, it is possible to switch all at once, or to switch for each specific cooling device.

[0125] Also, for example, the microcomputer 112 obtains information indicating whether the update program P2 has been successfully stored in the area 113b, and causes the information indicating the success or failure to be transmitted to the communication unit board 102 via the communication section 111. In this manner, it is possible to notify the higher level control device 10 (communication unit board 102) whether the writing of the update program P2 was successful or not. Since there are multiple control boards connected to the communication unit board 102, the communication unit board 102 can grasp the status of these without receiving individual instructions from the panel computer 101, and can quickly respond to inquiries from the panel computer 101.

[0126] Furthermore, when a response command regarding the success or failure of the update of the update program P2 is input from the communication unit 103, the microcomputer 105 outputs information indicating the success or failure received from, for example, the communication unit 111 from the communication unit 103. In this manner, it becomes possible to confirm whether or not the writing of the update program P2 has been successful via the panel computer 101, and after confirming the success, it is possible to switch to the update program P2.

[0127] The communication unit board 102 also includes a program memory 106 that stores the update program P1 received from the external network N1, a communication section 103 that outputs information indicating whether the update program P1 has been successfully stored in the program memory 106, and a communication section 104 that communicates with, for example, the control board 11. The control board 11 also includes a communication section 111 that communicates with the communication unit board 102, and a microcomputer 112 that controls the cooling device 21 in accordance with the control program of the control board 11. The microcomputer 112 also collects COS data in the cooling device 21, the communication section 111 transmits the COS data to the communication section 104, and the communication section 103 also outputs the COS data together with information indicating whether the update program P1 has been successfully stored in the program memory 106, for example.

[0128] By configuring the communication unit board 102 as described above, it becomes possible to obtain the results of the update operation of the communication unit board 102 as well as the change in the abnormal state of the cooling device 21. Therefore, even during a program update, it becomes possible to continue monitoring at least the abnormal state of the cooling device.

[0129] Furthermore, for example, the control board 11 includes a program memory 113 in which a control program for the control board 11 is stored. The communication unit 104 transmits the update program P2 to the control board 11, and the program memory 113 stores the update program P2, and the communication unit 111 transmits, for example, information indicating whether the update program P2 has been successfully stored in the program memory 113, as well as COS data to the communication unit 104. In this manner, it is possible to obtain the result of the update operation of the control board 11 as well as a change in the abnormal state of the cooling device 21. Therefore, it is possible to continue monitoring the state of the cooling device even during a program update.

[0130] Also, for example, a request to confirm whether the update program P1 has been successfully stored in the program memory 106 is sent from the communication unit 103 via the panel computer 101, along with a request to send the COS data. In this manner, for example, it is possible to request the COS data together with the success or failure of the update program P1. This allows for more efficient communication than sending requests and the like individually.

[0131] Also, for example, a request to confirm whether the update program P2 has been successfully stored in the program memory 113 or the like is input from the communication unit 103 via the panel computer 101, along with a request to transmit COS data. In this manner, for example, it is possible to request COS data together with the success or failure of the update program P2. This allows for more efficient communication than if requests and the like were transmitted individually.

[0132] Furthermore, the communication unit 103 outputs the COS data together with the information indicating the success or failure of storage in the program memory 113, etc. In this way, the panel computer 101 can obtain the COS data together with the output of the information indicating the success or failure of storage in the program memory 113, etc.

[0133] In the above-described embodiment, the COS data is mainly output together with information indicating whether the update programs P1, P2, etc. have been stored, but the COS data may be output together with the response indicating whether the setting file F has been received or not, or in response to a confirmation request, a switching request, etc. These are pieces of information transmitted and received in relation to the storage of the update programs P1, P2, and are information relating to storage in the first storage unit or information relating to storage in the second storage unit.

[0134] Furthermore, after switching to area 106b in which update program P1 is stored, when a command to switch to the control program before the update is input via panel computer 101, microcomputer 105 may switch the storage area read for control operation to area 106a in which the control program before the update is stored. In this way, even if there is a problem with update program P1, it is possible to return to the state before the update. Therefore, the cooling device can continue to operate while minimizing the period of stoppage, etc.

[0135] The above-described switching of the control program before the update is also similar to that of the update program P2. That is, for example, after switching to the area 113b in which the update program P2 is stored, when a command indicating switching to the control program before the update is input via the communication unit board 102, the microcomputer 112 may switch the storage area read out for performing the control operation to the area 113a in which the control program before the update is stored.

[0136] In addition, when transmitting an update program by unicast, if the transmission of the update program fails, the program may be retransmitted. The number of retransmissions may be set arbitrarily.

[0137] Also, a check of communication stability may be performed when remote PC 100 is connected to host control device 10. Furthermore, if it is possible to change the communication speed between remote PC 100 and host control device 10, the communication speed may be increased only during transmission of setting file F and update programs P1 and P2, or if transmission fails, the communication speed may be reduced and a retry may be performed.

[0138] Furthermore, the present invention is not limited to the above-described embodiment. In other words, a person skilled in the art can implement the present invention by modifying it in various ways in accordance with conventional knowledge without departing from the gist of the present invention. As long as the configuration of the control system of the present invention is still included in the scope of the present invention even after such modification, it is of course included in the scope of the present invention. [Explanation of symbols]

[0139] 1. Control System 10 Upper control device (first control device) 101 Panel control (first control device, input unit, output unit) 102 Communication unit board (first control device) 103 Communication unit (first communication unit, input unit, output unit) 104 Communications Department 105 Microcomputer (transmission control unit, judgment unit, first control unit) 106 Program memory (storage section, first storage section) 106a area (one storage area) 106b area (other storage area) 106c area (Second update program storage area) 11 Control board (second control device) 111 Communication Department (Second Communication Department) 112 Microcomputer (second control unit, control unit) 113 Program memory (second storage section, storage section) 113a area (one storage area) 113b area (other storage area) 12 Control board (second control device) 121 Communications Department (Second Communications Department) 122 Microcomputer (Second control section) 123 Program memory (second storage section) 123a area (one storage area) 123b area (other storage area) 1n Control board (second control device) 1n1 Communication section (second communication section) 1n2 Microcomputer (Second control section) 1n3 Program memory (second storage section) 113a area (one storage area) 113b area (other storage area) 21 Cooling device 22 Cooling device 2n cooling device 100 Remote PC N1 External network (external network) N2 Internal network (internal network) F Configuration file (specification information) P1 Update Program (First Update Program) P2 Update Program (Second Update Program)

Claims

1. A control system including a first control device capable of communicating with an external network, The first control device is a first control unit that performs a control operation according to a first control program; a first storage unit in which the first control program is stored; a first communication unit for receiving a first update program that updates the first control program; an input unit for inputting a predetermined command; Equipped with the first storage unit has a plurality of storage areas and is capable of storing a plurality of the first control programs; the first control unit stores the first update program received by the first communication unit in another storage area other than the one storage area in which the first control program currently used for the control operation is stored, and when a command indicating switching to the first update program is input from the input unit, switches a storage area to be read out for performing the control operation to the other storage area in which the first update program is stored. A control system comprising:

2. 2. The control system according to claim 1, wherein the first control unit includes an output unit that obtains information indicating whether the first update program has been successfully stored in the other storage area, and outputs the information indicating the success or failure.

3. 2. The control system according to claim 1, wherein when a command indicating switching to the first control program is input from the input unit after switching to the other storage area in which the first updating program is stored, the first control unit switches the storage area to be read out for performing the control operation to the one storage area in which the first control program is stored.

4. a second control device connected to the first control device via an internal network and connected to a plurality of cooling devices, The second control device is a second control unit that performs a control operation on the cooling device according to a second control program; a second storage unit in which the second control program is stored; a second communication unit that receives a second update program that updates the second control program and that is transmitted from the first control device; Equipped with the first storage unit has a second update program storage area for storing the second update program, the second storage unit has a plurality of storage areas and is capable of storing a plurality of the second control programs; the second control unit stores the second update program received by the second communication unit in another storage area in the second storage unit other than the one storage area in which the second control program currently used for the control operation is stored, and when the second communication unit receives information indicating switching to the second update program, switches a storage area from which the second control unit reads out to perform the control operation to the other storage area in the second storage unit in which the second update program is stored. A control system according to any one of claims 1 to 3.

5. The second communication unit receives designation information including information regarding an update target together with the second update program, the second control unit has its own identification information, and when the identification information and the designation information match each other, stores the second update program in the another storage area; 5. The control system of claim 4.

6. The control system described in claim 5, characterized in that the specification information includes at least one of the type of the second control device, the version of the second control program running on the second control device, and an address in the internal network.

7. The control system according to claim 4, characterized in that the second control unit obtains information indicating whether the second update program has been successfully stored in the other storage area of ​​the second storage unit, and transmits the information indicating the success or failure to the first control device via the second communication unit.

8. The control system according to claim 7, characterized in that when a response command regarding success or failure of the update of the second update program is input from the input unit, the first control unit outputs from the output unit information indicating the success or failure received from the second communication unit.

9. 5. The control system according to claim 4, characterized in that, after switching to the other storage area in which the second update program is stored, when a command indicating switching to the second control program is input from the second communication unit, the second control unit switches the storage area to be read out to perform the control operation to the one storage area in which the second control program is stored.

Images