Linkage control system, linkage control method, and program

Abstract

To provide a linkage control system, if there is an abnormality in linked data, which allows for suitable and quick dealing.SOLUTION: A linkage control system of the present embodiment comprises a control set value generation unit, an abnormality detection unit, and an arbitration unit. Based on the present linked data outputted from a linkage destination system, the control set value generation unit generates a control set value for controlling a control target device corresponding to the linked data. The abnormality detection unit detects an abnormality in the present linked data based on comparison results between the present linked data and past linked data outputted from the linkage destination system. The arbitration unit generates a control signal for controlling the control target device based on the control set value, and when it is recognized that the abnormality in the present linked data detected by the abnormality detection unit is not an instant phenomenon, corrects the control signal based on prescribed arbitration conditions so that the control target device is not controlled based on the present linked data.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] An embodiment of the present invention relates to a cooperative control system, a cooperative control method, and a program. [Background technology]

[0002] In recent years, in all technical fields, systems of systems have been used in which multiple independent systems interact with each other and exchange data (interconnected data) between the systems. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2004-110276 [Patent Document 2] Japanese Patent Application Laid-Open No. 2007-4337 Summary of the Invention [Problem to be solved by the invention]

[0004] In the above-mentioned inter-system linkage system, the accuracy of the linked data exchanged between the systems may not be guaranteed due to the independence of each system. Therefore, when a system uses linked data acquired from a linked system for its own operation, the system may be equipped with a means for detecting anomalies in the linked data to prevent operation based on linked data that has anomalies such as reduced accuracy.

[0005] However, in conventional technologies, when an abnormality is detected in linked data, it is generally necessary to take manual measures such as shutting down or repairing the system, so there is room for improvement in the appropriateness and speed of the response.

[0006] The present invention has been made in consideration of the above, and aims to provide a collaborative control system, a collaborative control method, and a program that can respond appropriately and quickly when an abnormality is found in collaborative data. [Means for solving the problem]

[0007] According to an embodiment, the cooperative control system includes a cooperative destination system that outputs cooperative data that changes over time, and a host system that includes one or more controlled target devices that are controlled based on the cooperative data. The cooperative control system also includes a control setting value generation unit, an anomaly detection unit, and an arbitration unit. The control setting value generation unit generates control setting values ​​for controlling the controlled target devices corresponding to the current cooperative data based on the current cooperative data output from the cooperative destination system. The anomaly detection unit detects an anomaly in the current cooperative data based on a comparison between the current cooperative data and past cooperative data output from the cooperative destination system. The arbitration unit generates a control signal for controlling the controlled target devices based on the control setting values, and if the anomaly in the current cooperative data detected by the anomaly detection unit is determined to be not a momentary phenomenon, modifies the control signal based on a predetermined arbitration condition so that the controlled target devices are not controlled based on the current cooperative data. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of a cooperative control system according to the first embodiment. [Figure 2] FIG. 2 is a diagram illustrating an example of a functional configuration of the arbitration unit according to the first embodiment. [Figure 3] FIG. 3 is a flowchart illustrating an example of the cooperation abnormality determination process according to the first embodiment. [Figure 4] FIG. 4 is a diagram illustrating an example of processing by the arbitration unit of the first embodiment. [Figure 5] FIG. 5 is a diagram illustrating an example of a specific configuration of the arbitration function unit according to the first embodiment. [Figure 6] FIG. 6 is a diagram illustrating an example of control by the arbitration operation unit according to the first embodiment. [Figure 7] FIG. 7 is a flowchart illustrating an example of control by the arbitration function unit of the first embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of the configuration of a cooperative control system according to the second embodiment. [Figure 9] FIG. 9 is a flowchart illustrating an example of processing by the output control unit according to the second embodiment. [Figure 10] FIG. 10 is a diagram illustrating an example of the configuration of a modified cooperative control system. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments of a cooperative control system, a cooperative control method, and a program according to the present invention will be described with reference to the drawings.

[0010] (First embodiment) 1 is a diagram showing an example of the configuration of a cooperative control system 1 according to the first embodiment. The cooperative control system 1 is a so-called inter-system cooperative system (SOS: System of Systems), and includes a cooperative target system 2, a host system 3, and a central monitoring unit 4.

[0011] The linked system 2 is a system that outputs linked data that changes over time. The linked system 2 is configured to be able to communicate with its own system 3 and the central monitoring unit 4 via a predetermined network such as a local area network (LAN) or a wide area network (WAN). The type of linked data should be determined appropriately depending on the usage situation, etc., and may be, for example, temperature, humidity, number of people, amount of electricity, or other characteristic quantities. The hardware configuration of the linked system 2 should be determined appropriately depending on the type of linked data, etc., and may be configured using, for example, various sensors, processors, memories, user interfaces (I / Fs), communication devices, etc.

[0012] The local system 3 is a system including one or more control target devices 21 (here, n control target devices 21-1 to 21-n) that are controlled based on the coordination data output from the coordination target system 2. The local system 3 is configured to be able to communicate with the coordination target system 2 and the central monitoring unit 4 via a predetermined network. The n control target devices 21-1 to 21-n may be different types of devices, or at least one of them may be the same type of device. The type of the control target device 21 should be determined appropriately depending on the usage situation, etc., and may be, for example, a manufacturing device that manufactures, processes, etc. a predetermined item, a control device that controls a predetermined system, an analytical device that analyzes a predetermined substance or phenomenon, etc. The hardware configuration of the local system 3 should be determined appropriately depending on the type of the control target device 21, the usage situation, etc., and may be configured using, for example, a processor, memory, a user I / F, a communication device, etc.

[0013] The central monitoring unit 4 is a system that controls the collaboration between the linked system 2 and the local system 3. The central monitoring unit 4 is configured to be able to communicate with the linked system 2 and the local system 3 via a predetermined network. The hardware configuration of the central monitoring unit 4 should be determined appropriately depending on the usage situation, etc., and can be configured using, for example, a processor, memory, user I / F, communication device, etc.

[0014] The destination system 2 of this embodiment includes, as its functional units, a linked data generation unit 11 and an output control unit 12. These functional units are configured by the cooperation of hardware and software (programs, etc.) that constitute the destination system 2. Furthermore, at least one of these functional units may be configured by dedicated hardware (circuits, etc.).

[0015] The linked data generating unit 11 generates linked data that changes in time series.

[0016] The output control unit 12 controls the output of the linked data generated by the linked data generation unit 11 to an external system such as the system 3 itself.

[0017] The local system 3 of this embodiment includes, as its functional units, a receiving unit 22, a storage unit 23, an abnormality detection unit 24, a control setting value generation unit 25, and a device control I / F unit 26. These functional units are configured by the cooperation of hardware and software (programs, etc.) that configure the local system 3. Furthermore, at least one of these functional units may be configured by dedicated hardware (circuits, etc.).

[0018] The receiving unit 22 receives the link data output from the output control unit 12 of the link destination system 2 .

[0019] The storage unit 23 stores (accumulates) the link data received by the receiving unit 22.

[0020] The anomaly detection unit 24 detects an anomaly in the current linked data based on a comparison result between the current linked data received by the receiving unit 22 and the past linked data stored in the storage unit 23. The specific method for detecting an anomaly is not particularly limited and may be realized by appropriately using publicly known or new technology. For example, an anomaly in the current linked data may be detected based on the similarity between the characteristics of time-series changes in the current linked data and the characteristics of time-series changes in the past linked data. When an anomaly detection unit 24 detects an anomaly in the current linked data, it outputs an anomaly detection signal to the arbitration unit 31, which will be described later.

[0021] The control set value generation unit 25 generates a control set value for controlling the control target device 21 based on the current coordination data received by the receiving unit 22. The control set value is generated for each control target device 21. The control set value should be determined appropriately depending on the type of the control target device 21, and may be, for example, a target value for a predetermined parameter (e.g., a control current value). The control set value generated by the control set value generation unit 25 is output to the arbitration unit 31, which will be described later.

[0022] The device control I / F unit 26 outputs the control signals output from the arbitration unit 31 (described later) to the corresponding control target devices 21.

[0023] The central monitoring unit 4 of this embodiment includes, as its functional unit, an arbitration unit 31. The arbitration unit 31 may be configured by cooperation between hardware and software (programs, etc.) that configure the central monitoring unit 4, or may be configured by dedicated hardware (circuits, etc.).

[0024] The arbitration unit 31 generates a control signal for controlling the control target device 21 for each control target device 21 based on the control set value generated by the control set value generation unit 25.

[0025] Furthermore, when it is determined that the abnormality in the current linked data detected by the abnormality detection unit 24 is not a momentary phenomenon, the arbitration unit 31 of this embodiment corrects the control signal based on a predetermined arbitration condition so that the control target device 21 is not controlled based on the current linked data. This makes it possible to automatically prevent the control target device 21 from being controlled based on the abnormal linked data.

[0026] Furthermore, when the arbitration unit 31 of this embodiment determines that the abnormality in the current linked data detected by the abnormality detection unit 24 is not a momentary phenomenon, it outputs notification information to the linked destination system 2 that output the current linked data, notifying that there is an abnormality in the linked data. This makes it possible to automatically notify the linked destination system 2 that there is an abnormality in the linked data, and the linked destination system 2 can quickly take measures such as stopping the output of the linked data or repairing the system based on the notification information.

[0027] A specific example of the configuration of the arbitration unit 31 will be described below.

[0028] 2 is a diagram showing an example of the functional configuration of the arbitration unit 31 according to the first embodiment. The arbitration unit 31 according to the present embodiment includes a linkage abnormality determination unit 51, an identification information conversion unit 52, an arbitration condition setting unit 53, an arbitration condition setting operation unit 54, an arbitration function unit 55, and a notification control unit 56.

[0029] The linkage abnormality determination unit 51 determines with increased certainty whether or not the current linked data is abnormal based on the detection result of the abnormality detection unit 24. The linkage abnormality determination unit 51 of this embodiment performs linkage abnormality determination processing to determine whether or not the abnormality in the current linked data detected by the abnormality detection unit 24 is a momentary phenomenon.

[0030] 3 is a flowchart showing an example of the linkage abnormality determination process of the first embodiment. In step S101, the linkage abnormality determination unit 51 determines whether a predetermined condition A for determining that the current linkage data is abnormal has continued a predetermined number of times X or more (a predetermined period of time or more) based on the abnormality detection signal output from the abnormality detection unit 24. In step S101, if the condition A has continued X times or more (S101: Yes), the linkage abnormality determination unit 51 determines that the current linkage data is abnormal (a non-instantaneous abnormal state). Thereafter, the process of step S101 is executed again.

[0031] If condition A has not continued X times or more in step S101 (S101: No), then in step S103, the linkage abnormality determination unit 51 determines, based on the abnormality detection signal output from the abnormality detection unit 24, whether a predetermined condition B, different from condition A, for determining that the current linked data is abnormal has continued a predetermined number of times X or more. If condition B has continued X times or more in step S103 (S103: Yes), then in step S102, the linkage abnormality determination unit 51 determines that the current linked data is abnormal (a non-momentary abnormal state). Thereafter, the processing of step S101 is executed again.

[0032] If condition B has not continued for X times or more in step S103 (S103: No), then in step S104, the linkage abnormality determination unit 51 determines, based on the abnormality detection signal output from the abnormality detection unit 24, whether a predetermined condition C, which is different from conditions A and B and is used to determine that the current linked data is abnormal, has continued for a predetermined number of times, X times or more. If condition C has continued for X times or more in step S104 (S104: Yes), then in step S102, the linkage abnormality determination unit 51 determines that the current linked data is abnormal (a non-instantaneous abnormal state). Thereafter, the process of step S101 is executed again.

[0033] In step S104, if condition C has not continued for X times or more (S104: No), in step S105, the linkage abnormality determination unit 51 determines that the current linkage data is normal. Thereafter, the process of step S101 is executed again.

[0034] According to the above-described linked abnormality determination process, it is possible to suppress excessive reactions to momentary abnormalities in the linked data (for example, unnecessary shutdown of the control target device 21, etc.). Note that the linked abnormality determination process is not limited to the above, and should be determined appropriately depending on the type of linked data, the type of control target device 21, etc.

[0035] Returning to FIG. 2, the identification information conversion unit 52 converts data identification information that can identify the linked data into device identification information that can identify the control target device 21 that is controlled by the linked data.

[0036] The arbitration condition setting unit 53 sets arbitration conditions to be applied when correcting the control signal for each control target device 21 based on the determination result by the linkage abnormality determination unit 51 .

[0037] The arbitration condition setting operation unit 54 allows arbitration conditions to be arbitrarily set in response to setting operations by a user (such as an administrator or operator of the cooperative control system 1 or the system 3 itself).

[0038] The arbitration function unit 55 generates or modifies a control signal for controlling each control target device 21 based on the output from the identification information conversion unit 52 and the arbitration conditions set by the arbitration condition setting unit 53. The output from the identification information conversion unit 52 includes device identification information for identifying the control target device 21, a control setting value generated by the control setting value generation unit 25, etc. The arbitration function unit 55 generates a control signal based on a control setting value based on normal linked data. The arbitration function unit 55 also modifies a control signal generated based on a control setting value based on abnormal linked data (current linked data determined to be abnormal by the link abnormality determination unit 51) based on the arbitration conditions. The control signals generated or modified by the arbitration function unit 55 are output to the corresponding control target devices 21 via the device control I / F unit 26.

[0039] The notification control unit 56 outputs notification information to the cooperation destination system 2 that has output the current cooperation data determined to be abnormal by the cooperation abnormality determination unit 51, notifying that there is an abnormality in the cooperation data.

[0040] 4 is a diagram illustrating an example of processing by the arbitration unit 31 of the first embodiment. In FIG. 4, first control set value data 61A, second control set value data 61B, first abnormality determination data 62A, second abnormality determination data 62B, and a control signal 101 are illustrated.

[0041] The first control setting value data 61A is output from the control setting value generation unit 25 of the local system 3 and includes a control setting value and a data number. The control setting value included in the first control setting value data 61A is a value generated based on the current linked data that the local system 3 has received from the linked system 2. The data number included in the first control setting value data 61A is an example of the above-mentioned data identification information, and is information that can identify the current linked data that the local system 3 has received from the linked system 2.

[0042] The second control setting value data 61B is generated by the identification information conversion unit 52 based on the first control setting value data 61A and the data number-device number conversion table, and includes a control setting value and a device number. The control setting value included in the second control setting value data 61B is the same as the control setting value included in the first control setting value data 61A. The device number included in the second control setting value data 61B is an example of the device identification information described above, and is information obtained by converting the data number included in the first control setting value data 61A using the data number-device number conversion table. The data number-device number conversion table is information indicating the correspondence between the data number identifying the linked data and the device number identifying the control target device 21, and is stored in advance in a memory or the like installed in the central monitoring unit 4 or the local system 3. In other words, the device number included in the second control setting value data 61B is information that can identify the control target device 21 controlled by the linked data that was the source of generating the control setting value included in the second control setting value data 61B.

[0043] The first abnormality determination data 62A is output from the linked abnormality determination unit 51 and includes type, normal / abnormal, and data number. Type is information indicating the type of linked data. Normal / abnormal is information indicating the determination result by the linked abnormality determination unit 51, i.e., whether the current linked data is normal or abnormal. The data number is information that can identify the linked data.

[0044] The second abnormality determination data 62B is generated by the arbitration function unit 55 based on the first abnormality determination data 62A, the set time association table, and the data number-device number conversion table, and includes a type, normal / abnormal, stop / start, set time, and device number. The type and normal / abnormal included in the second abnormality determination data 62B are the same as the type and normal / abnormal included in the first abnormality determination data 62A. The stop / start is information indicating whether the control target device 21 is to be stopped or started. For example, if the normal / abnormal is "abnormal," the stop / start is set to "stop," and if the normal / abnormal is "normal," the stop / start is set to "start." The set time is information indicating the stop time, which is the time required for the control target device 21 to transition from an operating state to a stopped state, or the start time, which is the time required for the control target device 21 to transition from a stopped state to a started state. The device number is information obtained by converting the data number included in the first abnormality determination data 62A using the data number-device number conversion table.

[0045] The control signal 101 is generated in the arbitration function unit 55 based on the second control setting value data 61B and the second abnormality determination data 62B, and is output to the device control I / F unit 26. The control signal 101 in this embodiment changes according to the progress of the determination result by the linked abnormality determination unit 51. The control signal 101 illustrated here includes a first control signal 101A, a second control signal 101B, and a third control signal 101C.

[0046] The first control signal 101A is generated when the previous determination result by the linkage abnormality determination unit 51 was "normal" and the current determination result is also "normal." The first control signal 101A includes a control setting value and a device number, and can be generated based on the second control setting value data 61B. The first control signal 101A is a reference control signal that is generated when the linkage data remains normal.

[0047] The second control signal 101B is generated when the previous determination result by the linkage abnormality determination unit 51 is "abnormal" and the current determination result is "normal." The second control signal 101B includes a control set value, a device number, a type, normal ("normal" of "normal / abnormal"), startup ("startup" of "stop / startup"), and a set time. The "set time" in the second control signal 101B indicates the startup time required for the control target device 21 to transition from a stopped state to a started state. The second control signal 101B can be generated by adding the second abnormality determination data 62B to the second control set value data 61B (first control signal 101A). In other words, when the linkage data changes from an abnormal state to a normal state, the first control signal 101A is corrected to the second control signal 101B.

[0048] The third control signal 101C is generated when the previous determination result by the linkage abnormality determination unit 51 was "normal" and the current determination result is "abnormal," or when the previous determination result was "abnormal" and the current determination result is also "abnormal." The third control signal 101C includes a type, abnormality ("abnormal" of "normal / abnormal"), stop ("stop" of "stop / start"), a set time, and a device number. The "set time" in the third control signal 101C indicates the stop time, which is the time required for the control target device 21 to transition from an operating state to a stopped state. The third control signal 101C can be generated based on the second abnormality determination data 62B. That is, when the linkage data changes from a normal state to an abnormal state or when the abnormal state continues, the first control signal 101A is corrected to the third control signal 101C.

[0049] Then, the first control signal 101A, the second control signal 101B, or the third control signal 101C generated or modified as described above is output to the corresponding control target device 21 (identified by the device number) via the device control I / F unit 26. As a result, if an abnormality occurs in the linked data, the control signal 101 is modified according to the nature of the abnormality, and it becomes possible to automatically and quickly adjust the control of the control target device 21 appropriately.

[0050] 5 is a diagram illustrating an example of a specific configuration of the arbitration function unit 55 according to the first embodiment. The arbitration function unit 55 illustrated here includes a determination result storage unit 61, an arbitration operation unit 62, a first holding unit 63, a second holding unit 64, and a selection unit 65.

[0051] The determination result storage unit 61 receives and stores the previous and current determination results by the linkage abnormality determination unit 51 via the arbitration condition setting unit 53.

[0052] The arbitration operation unit 62 executes control based on predetermined arbitration conditions, based on the information output from the identification information conversion unit 52 and a combination of the previous and current judgment results stored in the judgment result memory unit 61.

[0053] The first holding unit 63 holds the information output from the identification information conversion unit 52.

[0054] The second holding unit 64 holds the information output from the arbitration condition setting unit 53.

[0055] The selection unit 65 switches between the information held in the first holding unit 63 and the information held in the second holding unit 64 to output to the device control I / F unit 26 under the control of the arbitration operation unit 62.

[0056] Fig. 6 is a diagram showing an example of control by the arbitration operation unit 62 of the first embodiment. As shown in Fig. 6, when both the previous judgment result and the current judgment result are normal, the arbitration operation unit 62 selects the first holding unit 63 as the output source and controls the first holding unit 63 not to perform the holding operation (to pass information from the identification information conversion unit 52).

[0057] In addition, if the previous judgment result was normal and the current judgment result is abnormal, or if both the previous judgment result and the current judgment result are abnormal, the arbitration operation unit 62 selects the second holding unit 64 as the output source and controls the second holding unit 64 not to perform the holding operation (to pass information from the arbitration condition setting unit 53 through).

[0058] Furthermore, if the previous judgment result was abnormal and the current judgment result is normal, the arbitration condition setting unit 53 selects the first holding unit 63 as the output source, and then selects the second holding unit 64 as the output source. Specifically, when a judgment result indicating that the previous result was abnormal and the current result is normal arrives at the judgment result storage unit 61 via the arbitration condition setting unit 53, the judgment result storage unit 61 sets the latest result as the previous result, stores the received judgment result as the current result, and transfers it to the arbitration operation unit 62. If the previous result was abnormal and the current result is normal, the arbitration operation unit 62 instructs the first holding unit 63 and the second holding unit 64 to hold information. Once the information from the identification information conversion unit 52 has been stored in the first holding unit 63, the first holding unit 63 outputs a storage end notification to the arbitration operation unit 62. When the arbitration operation unit 62 receives the notification that the accumulation has ended, it instructs the first holding unit 63 to output the accumulated information (information output from the identification information conversion unit 52), and instructs the selection unit 65 to select the first holding unit 63 as the output source. When the output of the information from the first holding unit 63 has ended, the first holding unit 63 notifies the arbitration operation unit 62 that the output has ended. After receiving the notification and completing the accumulation of information in the second holding unit 64, the arbitration operation unit 62 receives a notification that the accumulation has ended from the second holding unit 64, and instructs the second holding unit 64 to output, and instructs the selection unit 65 to select the second holding unit 64 as the output source.

[0059] 7 is a flowchart showing an example of control by the arbitration function unit 55 of the first embodiment. In step S201, the arbitration function unit 55 determines whether the determination result by the linkage abnormality determination unit 51 is normal last time and normal this time. In step S201, if the determination result is normal last time and normal this time (S201: Yes), in step S202, the arbitration function unit 55 outputs a first control signal 101A (see FIG. 4) based on the output from the identification information conversion unit 52 (second control setting value data 61B) to the device control I / F unit 26 via the first holding unit 63. Thereafter, the process returns to step S201.

[0060] If the determination result in step S201 is not "normal" last time and "normal" this time (S201: No), then in step S203, the arbitration function unit 55 determines whether the determination result by the linkage abnormality determination unit 51 is "normal" last time and "abnormal" this time, or "abnormal" last time and "abnormal" this time. If the determination result in step S203 is "normal" last time and "abnormal" this time, or "abnormal" last time and "abnormal" this time (S203: Yes), then in step S204, the arbitration function unit 55 outputs a third control signal 101C (see FIG. 4) based on the output from the arbitration condition setting unit 53 (second abnormality determination data 62B) to the device control I / F unit 26 via the second holding unit 64. Then, the process returns to step S201.

[0061] In step S203, if the determination result is neither "normal" last time and "abnormal" this time, nor "abnormal" last time and "abnormal" this time (S203: No), in step S205, the arbitration function unit 55 determines whether the determination result by the linked abnormality determination unit 51 is "abnormal" last time and "normal" this time. In step S205, if the determination result is "abnormal" last time and "normal" this time (S201: Yes), in step S206, the arbitration function unit 55 stores the output from the identification information conversion unit 52 (second control setting value data 61B) in the first storage unit 63, and stores the output from the arbitration condition setting unit 53 (second abnormality determination data 62B) in the second storage unit 64. Thereafter, in step S207, arbitration function unit 55 outputs second control signal 101B (see FIG. 4) based on the information (second control setting value data 61B) held in first holding unit 63 and the information (second abnormality determination data 62B) held in second holding unit 64 to device control I / F unit 26. Thereafter, the process returns to step S201. Also, in step S205, if the determination result is not previous: abnormal and current: normal (S201: No), the process returns to step S201.

[0062] As described above, according to this embodiment, it is automatically determined whether or not there is an abnormality in the linked data received from the linked system 2, and if there is an abnormality, the control signal for controlling the control target device 21 is automatically corrected so as to reduce the impact of the abnormality, and the abnormality is automatically notified to the linked system 2. This makes it possible to deal with the abnormality in the linked data appropriately and quickly.

[0063] Furthermore, in the above embodiment, the arbitration unit 31 has an identification information conversion function (identification information conversion unit 52) ​​that converts data identification information (data number) that can identify the linked data into device identification information (device number) that can identify the control target device 21 controlled by the linked data, and the control signal includes the device identification information converted by the identification information conversion function. This makes it possible to automatically identify the control target device 21 that is controlled by the abnormal linked data, and to appropriately correct only the control signal for that control target device 21.

[0064] Furthermore, in the above embodiment, the arbitration conditions include information that determines, for each control-target device 21, a stop time, which is the time required for the control-target device 21 controlled by the linked data determined to have an abnormality to transition from an operating state to a stopped state, and when the current linked data has transitioned from a normal state to an abnormal state or the abnormal state continues, the arbitration unit 31 generates a control signal including the stop time corresponding to the control-target device 21 controlled by the current linked data. This makes it possible to automatically and appropriately set the time required for the control-target device 21 controlled by the linked data having an abnormality to transition from an operating state to a stopped state.

[0065] Furthermore, in the above embodiment, the arbitration condition includes information that determines, for each control target device 21, the startup time required for transitioning the control target device 21 controlled by the linked data determined to have an abnormality from a stopped state to an activated state, and when the current linked data transitions from an abnormal state to a normal state, the arbitration unit generates a control signal that includes the startup time corresponding to the control target device 21 controlled by the current linked data. This makes it possible to automatically and appropriately set the wait time for transitioning the control target device 21 from a stopped state to an activated state when the linked data returns from an abnormal state to a normal state.

[0066] In the above embodiment, the arbitration unit has a function that allows arbitration conditions to be set arbitrarily in response to a setting operation by the user, thereby allowing the arbitration conditions to be adjusted in accordance with the usage situation.

[0067] Other embodiments will be described below, but the same or similar parts as those in the first embodiment will be given the same reference numerals and their description will be omitted as appropriate.

[0068] (Second embodiment) Fig. 8 is a diagram showing an example of the configuration of the linkage control system 1 of the second embodiment. In this embodiment, the configuration for generating linkage data in the link destination system 2 is made redundant. Fig. 8 shows an example of a redundant configuration for generating linkage data in the link destination system 2, in which the link destination system 2 includes two linkage data generators, i.e., a first linkage data generator 11A and a second linkage data generator 11B.

[0069] Based on the notification information transmitted from arbitration unit 31, output control unit 12 of this embodiment outputs linked data generated by a linked data generation unit other than the linked data generation unit that generated the abnormal linked data to its own system 3. For example, if it is determined based on the notification information that there is an abnormality in the linked data of first linked data generation unit 11A, output control unit 12 switches the output source of linked data to its own system 3 from first linked data generation unit 11A to second linked data generation unit 11B.

[0070] 9 is a flowchart showing an example of processing by the output control unit 12 of the second embodiment. In step S301, the output control unit 12 determines whether or not notification information has been received from the arbitration unit 31, and if notification information has not been received (S301: No), step S301 is executed again. That is, the output control unit 12 enters a state of waiting for reception of notification information.

[0071] If notification information is received in step S301 (S301: Yes), then in step S302, the output control unit 12 determines whether the output source of the abnormal linked data (abnormal data) is the first linked data generation unit 11A. If the output source of the abnormal data is the first linked data generation unit 11A in step S302 (S302: Yes), then in step S303, the output control unit 12 switches the output source of the linked data from the first linked data generation unit 11A to the second linked data generation unit 11B. Thereafter, in step S304, the current situation (e.g., that an abnormality has occurred in the linked data, that the output source has been switched, etc.) is notified to the administrator of the linked system 2 via a predetermined user I / F (e.g., a display, a speaker, etc.). Then, the process returns to step S301.

[0072] In step S302, if the output source of the abnormal data is not first linked data generation unit 11A (S302: No), in step S305, output control unit 12 stops output of the linked data. Thereafter, in step S304, the current situation (e.g., that an abnormality has occurred in the linked data, that output of the linked data has been stopped, etc.) is notified to the administrator of link destination system 2 via a predetermined user I / F. Then, the process returns to step S301.

[0073] As described above, according to this embodiment, multiple linked data generation units 11A, 11B are provided, the configuration for generating linked data is made redundant, and if an abnormality occurs in the linked data of one linked data generation unit, the output source of the linked data is automatically switched so that linked data generated by another linked data generation unit is output to the local system 3. This makes it possible to further improve the ability to deal with abnormalities in the linked data.

[0074] (Variation) Fig. 10 is a diagram showing an example of the configuration of a modified cooperative control system 1. In the first and second embodiments described above, a configuration has been exemplified in which the central monitoring unit 4 independent of the local system 3 includes the arbitration unit 31, but the cooperative control system 1 is not limited to this configuration. As shown in Fig. 10, the arbitration unit 31 may be included in the local system 3.

[0075] A program for causing a computer to realize the functions of the collaborative control system 1 of the above-described embodiment and modified example can be provided by being recorded in an installable or executable file format on a computer-readable recording medium such as a USB memory, a semiconductor memory device such as an SSD, or a DVD (Digital Versatile Disk).

[0076] The program may also be configured to be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network, or to be provided or distributed via a network such as the Internet, or to be provided by being pre-installed in a ROM or the like.

[0077] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0078] 1... Cooperative control system, 2... Cooperative system, 3... Home system, 4... Central monitoring unit, 11... Cooperative data generation unit, 11A... First cooperative data generation unit, 11B... Second cooperative data generation unit, 12... Output control unit, 21... Control target device, 22... Receiving unit, 23... Storage unit, 24... Abnormality detection unit, 25... Control setting value generation unit, 26... Device control I / F unit, 31... Arbitration unit, 51... Cooperative abnormality determination unit, 52... Identification information conversion unit, 53... Arbitration conditions Setting unit, 54... arbitration condition setting operation unit, 55... arbitration function unit, 56... notification control unit, 61... judgment result storage unit, 61A... first control set value data, 61B... second control set value data, 62... arbitration operation unit, 62A... first abnormality judgment data, 62B... second abnormality judgment data, 63... first holding unit, 64... second holding unit, 65... selection unit, 101... control signal, 101A... first control signal, 101B... second control signal, 101C... third control signal

Claims

1. A cooperative control system including a cooperative destination system that outputs cooperative data that changes over time, and a system including one or more control target devices that are controlled based on the cooperative data, a control setting value generation unit that generates, based on the current link data output from the link destination system, control setting values ​​for controlling the control target device corresponding to the link data; an anomaly detection unit that detects an anomaly in the current linked data based on a comparison result between the current linked data and the past linked data output from the linked system; an arbitration unit that generates a control signal for controlling the control target device based on the control set value, and when it is determined that the abnormality in the current linked data detected by the abnormality detection unit is not an instantaneous phenomenon, modifies the control signal based on a predetermined arbitration condition so that the control target device is not controlled based on the current linked data; A collaborative control system equipped with:

2. the arbitration unit has an identification information conversion function for converting data identification information capable of identifying the linked data into device identification information capable of identifying the control target device controlled by the linked data; the control signal includes the device identification information converted by the identification information conversion function; The cooperative control system according to claim 1 .

3. the arbitration condition includes information that determines, for each of the control target devices, a stop time that is a time required for the control target device controlled by the linked data determined to have an abnormality to transition from an operating state to a stopped state; When the current linked data has transitioned from a normal state to an abnormal state or the abnormal state continues, the arbitration unit generates the control signal including the stop time corresponding to the control target device controlled by the current linked data. The cooperative control system according to claim 1 or 2.

4. the arbitration condition includes information that determines, for each of the control target devices, a startup time required for transitioning the control target device controlled by the linked data determined to have an abnormality from a stopped state to a running state; when the current linked data transitions from an abnormal state to a normal state, the arbitration unit generates a control signal including the startup time corresponding to the control target device controlled by the current linked data. The cooperative control system according to claim 1 or 2.

5. the arbitration unit has a function of being able to arbitrarily set the arbitration conditions in response to a setting operation by a user; The cooperative control system according to claim 1 .

6. A cooperative control system including a cooperative destination system that outputs cooperative data that changes over time, and a system including one or more control target devices that are controlled based on the cooperative data, a control setting value generation unit that generates, based on the current link data output from the link destination system, control setting values ​​for controlling the control target device corresponding to the link data; an anomaly detection unit that detects an anomaly in the current linked data based on a comparison result between the current linked data and the past linked data output from the linked system; an arbitration unit that generates a control signal for controlling the control target device based on the control setting value, and when it is determined that the abnormality in the current linked data detected by the abnormality detection unit is not a momentary phenomenon, outputs notification information to the linked destination system that output the current linked data, notifying that there is an abnormality in the linked data; A collaborative control system equipped with:

7. The linked system is a plurality of data generating units each generating the linked data; an output control unit that outputs, to the system, the linked data generated by a data generation unit other than the data generation unit that generated the linked data having an abnormality based on the notification information; The cooperative control system according to claim 6 , comprising:

8. A cooperative control system including a cooperative destination system that outputs cooperative data that changes over time, and a system including one or more control target devices that are controlled based on the cooperative data, a control setting value generation unit that generates, based on the current link data output from the link destination system, control setting values ​​for controlling the control target device corresponding to the link data; an anomaly detection unit that detects an anomaly in the current linked data based on a comparison result between the current linked data and the past linked data output from the linked system; an arbitration unit that generates a control signal for controlling the control target device based on the control setting value, and when it is determined that the abnormality in the current linked data detected by the abnormality detection unit is not an instantaneous phenomenon, modifies the control signal based on a predetermined arbitration condition so that the control target device is not controlled based on the current linked data, and outputs notification information to the linked system that output the current linked data, notifying that there is an abnormality in the linked data; A collaborative control system equipped with:

9. A cooperative control method for controlling a cooperative control system including a cooperative destination system that outputs cooperative data that changes over time, and a local system that includes one or more control target devices that are controlled based on the cooperative data, a step of generating, by a computer, control setting values ​​for controlling the control target device corresponding to the current collaboration data based on the collaboration data output from the collaboration destination system; A step in which a computer detects an abnormality in the current linked data based on a comparison result between the current linked data and the past linked data output from the linked system; A process in which a computer generates a control signal for controlling the control target device based on the control setting value; a step of modifying the control signal based on a predetermined arbitration condition so that the control target device is not controlled based on the current linked data when the detected abnormality in the current linked data is determined not to be a momentary phenomenon by the computer; A cooperative control method including:

10. A computer controls a cooperative control system including a cooperative destination system that outputs cooperative data that changes over time, and a system including one or more control target devices that are controlled based on the cooperative data. a process of generating, based on the current link data output from the link destination system, control setting values ​​for controlling the control target device corresponding to the link data; A process of detecting an abnormality in the current linked data based on a comparison result between the current linked data and the past linked data output from the linked system; a process of generating a control signal for controlling the controlled device based on the control setting value; If it is determined that the detected abnormality in the current linked data is not a momentary phenomenon, a process of correcting the control signal based on a predetermined arbitration condition so that the control target device is not controlled based on the current linked data; A program that executes the following.

Images