Boiler equipment

Abstract

To improve detection precision upon occurrence of operation program abnormality and to improve the reliability of a boiler apparatus.SOLUTION: In a boiler apparatus 1, an operation program 111P is independently stored in a first storage unit 121 and a second storage unit 122, respectively, either is defined as an operation storage unit and the other is defined as an un-operation storage unit, whether the operation program 111P during an operation stored in the operation storage unit and the operation program 111P stored in the un-operation storage unit are coincident or not is determined, when it is determined that they are not coincident, the respective cyclic redundancy checks of the operation program 111P stored in the operation storage unit and the operation program 111P stored in the un-operation storage unit are executed to detect a fact that abnormality is generated in any of the operation program 111P stored in the operation storage unit and the operation program 111P stored in the un-operation storage unit, and when the abnormality is detected, changeover to a normal operation program is executed.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a boiler system. [Background technology]

[0002] In a boiler system, multiple boiler devices are connected to, for example, a unit control device, and the control unit of each boiler device (also called a "local control unit") controls the combustion of the boiler device while communicating with the unit control device. Conventionally, a technique for inspecting program anomalies by CRC check is known (see, for example, Patent Document 1). The control unit of the boiler system checks that there are no abnormalities in the boiler control program (hereinafter also referred to as the "operation program" unless otherwise specified) of the boiler system by performing an error check using a CRC (Cyclic Redundancy Check) code, for example, when updating the program. That is, the presence or absence of an abnormality in the operation program is checked by determining whether or not a CRC check error has occurred. In boiler equipment, if a CRC check error is detected, it is determined to be a major malfunction because it has a significant impact on the number of units in the boiler system, and the boiler equipment is put into a state of complete shutdown (for example, all output is shut off and an infinite loop is established with no control whatsoever). Therefore, in such a case, an alarm of an abnormality cannot be notified to the maintenance department, and data cannot be collected by inspection equipment, data cannot be transferred by inspection equipment, and data cannot be collected from the circuit board. Furthermore, CRC checks are said to have higher error detection accuracy than parity or checksums that use simple addition, but improvements in detection accuracy are also required to further increase the reliability of boiler equipment. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-48445 Summary of the Invention [Problem to be solved by the invention]

[0004] Therefore, in order to further increase the reliability of the boiler equipment in a boiler system, it is necessary to improve the detection accuracy when an abnormality occurs in the operating program in the boiler equipment's control unit, and when an abnormality is detected in the operating program in the boiler equipment's control unit, it is necessary to notify the maintenance department of the abnormality with an alarm, and to make it possible to collect data using inspection equipment, transfer data using the inspection equipment, and collect data from the circuit board.

[0005] The present invention aims to provide a boiler system that further increases the reliability of the boiler equipment, improves the detection accuracy when an abnormality occurs in the operating program in the boiler equipment's control unit, and, when an abnormality is detected in the operating program in the boiler equipment's control unit, notifies the maintenance department with an alarm of the abnormality, and enables data collection by inspection equipment, data transfer by the inspection equipment, and data collection from the circuit board. [Means for solving the problem]

[0006] The present invention provides a boiler apparatus including a local control unit and a storage unit including at least a first storage unit and a second storage unit, wherein the storage unit stores an operation program for the boiler apparatus, an abnormality inspection program for inspecting abnormalities in the operation program, a switching program for switching the operation program, and an abnormality response processing program, and at least the operation program is stored independently in the first storage unit and the second storage unit, and the local control unit functions as an operation execution unit that executes operation of the boiler apparatus by executing the operation program stored in the operation storage unit, with one of the first storage unit and the second storage unit as an operation storage unit and the other as an inoperation storage unit, and The boiler apparatus functions as a program abnormality inspection unit that inspects the operating program for abnormalities and, if the results indicate that the operating program in operation is abnormal, executes a switching program stored in the memory unit; functions as a program switching unit that, if the results of executing the switching program indicate that the operating program in operation is abnormal, switches an unoperated memory unit to the operating memory unit in which the operating program in operation is stored, and executes the operating program stored in the unoperated memory unit; and functions as an abnormality response processing unit that performs abnormality response processing after program switching by the program switching unit by executing the abnormality response processing program stored in the memory unit.

[0007] In addition, in the boiler apparatus, the abnormality inspection program further includes a program version determination program, a comparison inspection program, and a cyclic redundancy check program, and the local control unit executes the program version determination program to function as a program version determination unit that determines whether the versions of the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit are the same or not; By executing the comparison inspection program, the system functions as a comparison inspection unit that performs a comparison inspection to determine whether the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit match, By executing the cyclic redundancy check program, the device functions as a cyclic redundancy check unit that performs a cyclic redundancy check on the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit; The program abnormality inspection unit The program version determination unit determines that the versions of the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit are the same, The comparison inspection unit determines that the operating program stored in the operation storage unit does not match the operating program stored in the non-operation storage unit, It is preferable that the switching program be executed when the cyclic redundancy check unit determines that the operating program stored in the operation memory unit is abnormal and that the operating program stored in the non-operating memory unit is normal.

[0008] In addition, the abnormality response processing unit As an abnormality response process, an alarm is issued to notify the occurrence of an abnormality, It is preferable to be able to take over the data stored in the boiler apparatus.

[0009] The boiler device further includes an operating state information storage unit that stores operating state information; a communication unit, The abnormality response processing unit The operating state information stored in the operating state information storage unit may be transmitted to a vehicle count control device or an externally installed device via the communication unit.

[0010] Further, in the boiler apparatus, it is determined by the comparison inspection unit that the operating program stored in the operation storage unit does not match the operating program stored in the non-operation storage unit, If the cyclic redundancy check unit determines that both the operation programs stored in the operation memory unit and the non-operation memory unit are normal or abnormal, The local control unit preferably stops the operation of the operating program that is currently running.

[0011] Further, the storage unit a third storage unit; The abnormality inspection program, the switching program, and the abnormality response processing program may be stored in the third storage unit.

[0012] In addition, in the boiler device, the abnormality inspection program, the switching program, and the abnormality response processing program are independently stored in the first storage unit and the second storage unit, respectively; The local control unit The operation storage unit may be configured to execute the abnormality inspection program, the switching program, and the abnormality response processing program stored in either the first storage unit or the second storage unit. [Effects of the Invention]

[0013] According to the present invention, in a boiler system, the reliability of the boiler device is further increased, and the detection accuracy when an abnormality occurs in the operating program in the control unit of the boiler device is improved.Furthermore, when an abnormality is detected in the operating program in the control unit of the boiler device, an alarm of the abnormality is notified to the maintenance department, and a boiler device can be provided that allows data to be collected by inspection equipment, data to be transferred by the inspection equipment, and data to be collected from the circuit board. [Brief explanation of the drawings]

[0014] [Figure 1]1 is an overall schematic diagram of a boiler system according to an embodiment of the present invention. [Figure 2] 1 is a functional block diagram showing a functional configuration of a boiler apparatus according to an embodiment of the present invention. [Figure 3] FIG. 2 is a diagram showing the configuration of a program stored in a storage unit in the boiler apparatus according to one embodiment of the present invention. [Figure 4] 2 is a diagram showing a schematic configuration of a first storage unit and a second storage unit in the boiler apparatus of one embodiment of the present invention. FIG. [Figure 5A] FIG. 1 is a diagram showing an outline of a process when upgrading an operating program in a boiler apparatus according to an embodiment of the present invention. [Figure 5B] 1 is a diagram showing an outline of a process for making the operating programs stored in the operation memory unit and the non-operation memory unit of the boiler apparatus of one embodiment of the present invention the same version. FIG. [Figure 6A] 3 is a flowchart showing a process of a boiler apparatus according to an embodiment of the present invention. [Figure 6B] 3 is a flowchart showing a process of a boiler apparatus according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0015] The present invention relates to a boiler system that, when an abnormality is detected in the operating program in the control unit of the boiler system, notifies the maintenance department of the abnormality with an alarm, and also enables data collection using inspection equipment, data transfer by the inspection equipment, and data collection from the circuit board. A first preferred embodiment of a boiler apparatus according to the present invention will be described in detail below with reference to the drawings. FIG. 1 is a diagram showing an outline of a boiler system 100 including a boiler apparatus 1. As shown in FIG. 1, the boiler apparatus 1 is communicably connected to a unit count control device 2 and an edge device 5 via a network 7 (for example, a communication network including wired and wireless networks). Although not shown, the boiler apparatus 1 may be provided with a display unit or an input unit. The boiler system 100 may also be provided with a plurality of boiler apparatuses 1. Here, the number control device 2 is a control device that controls the combustion amount of the boiler device 1 by sending, for example, a number control signal to the boiler device 1 via the network 7, and receives the actual boiler load rate or output steam amount of the boiler device 1 and other data from the boiler device 1 to manage the combustion state of the boiler device 1, and is a device well known to those skilled in the art, so detailed explanation will be omitted. The edge device 5 is a device that distributes the latest version of control software (such as an operating program) for each model of boiler device 1 to the boiler device 1 via the network 7, and is a device well known to those skilled in the art, so a detailed description thereof will be omitted. As shown in Fig. 1, the edge device 5 may download the latest version of the control software from a cloud server, for example, or may obtain the latest version of the control software via an input unit (not shown).

[0016] Fig. 2 is a functional block diagram showing the functional configuration of the boiler apparatus 1. As shown in Fig. 2, the boiler apparatus 1 includes a control unit 11 as a local control unit, a storage unit 12, and a communication unit 15, and may also include a display unit or an input unit (not shown).

[0017] The control unit 11 is composed of a central processing unit (CPU) and the like that controls the entire boiler apparatus 1, and controls each part that configures the boiler apparatus 1. Details of the control unit 11 will be described later.

[0018] The memory unit 12 is a storage area such as a hard disk or semiconductor memory element for storing programs, data, etc. required for the control unit 11 to execute various processes. The memory unit 12 stores an operating system (OS), various control software, etc., as well as operating status information of the boiler 1. As shown in FIG. 2, the storage unit 12 has two storage units (a first storage unit 121 and a second storage unit 122), a third storage unit 123, and an operating state information storage unit . FIG. 3 is a diagram showing the configuration of a program stored in the storage unit 12. As shown in FIG.

[0019] 3, the first storage unit 121 and the second storage unit 122 store an operation program 111P for controlling the boiler apparatus 1. By executing the operation program 111P by the control unit 11, the function of the boiler apparatus 1 (the "operation execution unit 111" described later) can be realized. At the time of shipping of the boiler apparatus 1, the same version of the operation program 111P is stored in the first storage unit 121 and the second storage unit 122. Furthermore, as will be described later, when the operation program 111P is to be upgraded, the edge device 5 distributes the latest version so that the same version of the operation program 111P can be stored in the first storage unit 121 and the second storage unit 122.

[0020] FIG. 4 is a diagram showing a schematic configuration of the first storage unit 121 and the second storage unit 122. As shown in FIG. The first storage unit 121 and the second storage unit 122 can have a so-called dual bank configuration, in which they have the same size storage area. In this case, the same address may be assigned to the first storage unit 121 and the second storage unit 122, or different addresses may be assigned to the first storage unit 121 and the second storage unit 122. If the same address is assigned, the CPU cannot access the first storage unit 121 and the second storage unit 122 simultaneously, so a switching circuit is required to select either the first storage unit 121 or the second storage unit 122. When the CPU accesses either the first storage unit 121 or the second storage unit 122, the CPU sets a bank switching flag to "0" or "1", for example, before accessing either the first storage unit 121 or the second storage unit 122. On the other hand, when different addresses are assigned to the first storage unit 121 and the second storage unit 122, the CPU can access the first storage unit 121 and the second storage unit 122 simultaneously. In this embodiment, as will be described later, the comparison inspection unit 1122 performs a comparison inspection to determine whether the operating programs 111P stored independently in the first storage unit 121 and the second storage unit 122 match, and therefore a dual bank configuration is exemplified in which different addresses are assigned to the first storage unit 121 and the second storage unit 122. Note that even in this case, as will be described later, in order to specify which of the first storage unit 121 and the second storage unit 122 is to be used as the operating storage unit, it is necessary to set, for example, a bank switching flag to 0 or 1 and then perform a reset / restart.

[0021] 4, for example, an example is shown in which an address range of FFE0_0000h to FFEF_FFFEh is assigned to the first storage unit 121, and an address range of FFF0_0000h to FFFF_FFFFh (h indicates a hexadecimal number) is assigned to the second storage unit 122, for every 256 bytes, but this is not limiting. The user can arbitrarily set the configuration of the first storage unit 121 and the second storage unit 122.

[0022] As will be described later, a CRC (Cyclic Redundancy Check) code is used to check whether there are any abnormalities in the operation program 111P stored in the first storage unit 121 and the second storage unit 122. Specifically, the operation program 111P is stored in the first storage unit 121 and the second storage unit 122 with a CRC code added.

[0023] The control unit 11 sets one of the first storage unit 121 and the second storage unit 122 as an operating storage unit and executes the operation program 111P stored in the operating storage unit. The other storage unit sets the other as an inoperating storage unit and does not execute the operation program 111P stored in the inoperating storage unit. By executing the operation program 111P, the control unit 11 can realize the function of the operation execution unit 111 of the boiler apparatus 1, which will be described later.

[0024] 3, an abnormality inspection program 112P, a switching program 113P, and an abnormality response processing program 114P are stored in the third storage unit 123. By executing the abnormality inspection program 112P, the switching program 113P, and the abnormality response processing program 114P by the control unit 11, respectively, it is possible to realize the functions of a program abnormality inspection unit 112, a program switching unit 113, and an abnormality response processing unit 114 of the boiler apparatus 1, which will be described later. The abnormality check program 112P includes a program version determination program 1121P, a comparison check program 1122P, and a cyclic redundancy check program 1123P. Therefore, by having the control unit 11 execute the program version determination program 1121P, the comparison check program 1122P, and the cyclic redundancy check program 1123P, respectively, it is possible to realize the functions of a program version determination unit 1121, a comparison check unit 1122, and a cyclic redundancy check unit 1123 of the boiler apparatus 1, which will be described later.

[0025] The operating state information storage unit 124 stores operating state information such as various setting data, heat management data, and state information indicating the combustion state of the boiler 1. The operating state information may also include information as to whether the boiler apparatus 1 is a boiler subject to number control or a boiler outside the number control.

[0026] The communication unit 15 is a communication interface for communicating with, for example, the unit count control device 2 and the edge device 5.

[0027] Next, details of the control unit 11 will be described. The control unit 11 is a central processing unit (CPU) that controls the entire boiler apparatus 1. The control unit 11 appropriately reads and executes an operating system (OS), control software, etc. stored in the storage unit 12, whereby the hardware and software (programs) work together to realize the processing in this embodiment.

[0028] Specifically, as described above, the control unit 11 realizes the function of the operation execution unit 111 by executing the operation program 111P, the function of the program abnormality inspection unit 112 by executing the abnormality inspection program 112P, the function of the program switching unit 113 by executing the switching program 113P, and the function of the abnormality response processing unit 114 by executing the abnormality response processing program 114P. Furthermore, the control unit 11 executes a program version determination program 1121P, a comparison check program 1122P, and a cyclic redundancy check program 1123P, which are included in the abnormality check program 112P, respectively, thereby realizing the functions of a program version determination unit 1121, a comparison check unit 1122, and a cyclic redundancy check unit 1123. The functions of the control unit 11 of the boiler apparatus 1 according to the present invention will be described with reference to FIG.

[0029] When the boiler apparatus 1 is a boiler subject to number control, the operation execution unit 111 controls the combustion amount of the boiler apparatus 1 based on the number control signal transmitted from the number control device 2. Specifically, when the boiler apparatus 1 is a step value control boiler, the operation execution unit 111 controls the combustion position, and when the boiler apparatus 1 is a continuous control boiler, the boiler apparatus 1 controls the steam amount in unit steam amount units, which are units of steam amount that can vary in the range from the minimum combustion state to the maximum combustion state. Conversely, the operation execution unit 111 transmits signals used by the number control device 2 (for example, the actual combustion state of the boiler 1, etc.) to the number control device 2. If the boiler device 1 is a boiler that is not subject to number control, for example, if the boiler device 1 is a continuously controlled boiler, the operation execution unit 111 controls the boiler so that the internal pressure value PVA becomes the pressure value PLV by performing feedback control based on a predetermined PI algorithm or PID algorithm for each control period on the deviation between the boiler internal pressure value PVA and the boiler pressure value PLV that is set in advance in the memory unit 12.

[0030] The program abnormality inspection unit 112 inspects the running operation program 111P for abnormalities at a preset timing, and if the result indicates that the running operation program 111P is abnormal, it starts the program switching unit 113 by executing the switching program 113P stored in the memory unit 13. For this purpose, the program anomaly check unit 112 includes a program version determination unit 1121 , a comparison check unit 1122 , and a cyclic redundancy check unit 1123 .

[0031] First, the program version determination unit 1121 determines whether the versions of the operating program 111P stored in the operation memory unit and the operating program 111P stored in the non-operating memory unit are the same. If the program version determination unit 1121 determines that the versions of the operating program 111P stored in the operation memory unit and the operating program 111P stored in the non-operating memory unit are the same, the program abnormality inspection unit 112 starts the comparison inspection unit 1122 by executing the comparison inspection program 1122P stored in the memory unit 13. Note that if the program version determination unit 1121 determines that the versions of the operating program 111P stored in the operation memory unit and the operating program 111P stored in the non-operating memory unit are different, a cyclic redundancy check is performed on the operating program 111P stored in the operation memory unit. As will be described later, when the latest version of the operating program 111P is distributed from the edge device 5 and the versions become identical, and the program abnormality inspection unit 112 is started, the program version determination unit 1121 determines that the versions of the operating program 111P stored in the operating memory unit and the operating program 111P stored in the non-operating memory unit are the same, and the comparison inspection unit 1122 can be started by executing the comparison inspection program 1122P stored in the memory unit 12.

[0032] The comparison inspection unit 1122 determines whether the contents of the operating program stored in the operation memory unit match the contents of the operating program stored in the non-operating memory unit, for example, for each corresponding address block in the first memory unit 121 and the second memory unit 122. If the comparison inspection unit 1122 determines that the contents match in all address blocks, the program anomaly inspection unit 112 determines that there is no anomaly in the operating program, and performs a cyclic redundancy check on the operating program 111P stored in the operation memory unit. If the comparison inspection unit 1122 determines that the contents do not match in any address block, the program anomaly inspection unit 112 starts the cyclic redundancy check unit 1123 by executing the cyclic redundancy check program 1123P stored in the memory unit 13.

[0033] The cyclic redundancy check unit 1123 performs a cyclic redundancy check (CRC check) on each of the operating programs stored in the operating memory unit and the operating programs stored in the non-operating memory unit. If the cyclic redundancy check unit 1123 determines that the operating program stored in the operation memory unit is normal and that the operating program 111P stored in the non-operating memory unit is abnormal, For example, the program abnormality inspection unit 112 may assign a version number indicating an abnormality to the operation program 111P stored in the non-operating storage unit, and then terminate the processing of the program abnormality inspection unit 112. In this way, as will be described later, when the latest version of the operation program 111P is distributed from the edge device 5, the abnormal operation program 111P stored in the non-operating storage unit can be rewritten to the normal operation program 111P. When the cyclic redundancy check unit 1123 determines that the operating program stored in the operation memory unit is abnormal and the operating program 111P stored in the non-operating memory unit is normal, For example, the program abnormality inspection unit 112 may assign a version number indicating an abnormality to the operation program 111P stored in the operation storage unit, and then execute the switching program 113P to start the program switching unit 113. In this way, as will be described later, the non-operating storage unit in which the normal operation program 111P is stored is switched to the operation storage unit, and the operation storage unit in which the abnormal operation program 111P is stored is switched to the non-operating storage unit. As a result, when the latest version of the operation program 111P is distributed from the edge device 5, the abnormal operation program 111P stored in the non-operating storage unit can be rewritten with the normal operation program 111P. Furthermore, if the cyclic redundancy check unit 1123 determines that both the operating program stored in the operating memory unit and the operating program 111P stored in the non-operating memory unit are normal, there is a high probability that one is normal and the other is abnormal, but since it is not possible to determine this, the program abnormality check unit 112 stops the operation of the operating program 111P. Similarly, if the cyclic redundancy check unit 1123 determines that both the operating program stored in the operation memory unit and the operating program 111P stored in the non-operating memory unit are abnormal, both are determined to be abnormal, and the program abnormality check unit 112 stops the operation of the operating program 111P. Specifically, in either case, the boiler apparatus 1 is brought to a complete stop state. Furthermore, the probability that the contents of the operating program in operation are different from the contents of the operating program of the same version stored in the non-operating memory unit, and that the cyclic redundancy check unit 1123 determines that both the operating program stored in the operating memory unit and the operating program 111P stored in the non-operating memory unit are normal or abnormal is essentially negligible, and it is considered that such a case will hardly occur in practice.

[0034] The program switching unit 113 switches the non-operating memory unit in which the normal operation program 111P is stored to the operating memory unit. The program switching unit 113 resets and restarts the control unit 11 to switch the non-operating memory unit to the operating memory unit. Specifically, as described above, the non-operating memory unit may be switched to the operating memory unit by, for example, setting the bank switching flag to "0" or "1" and then resetting and restarting. In this way, the control unit 11 can switch the operation execution unit 111 to a normal operating state by executing the normal operation program 111P.

[0035] When the program switching unit 113 switches the operation execution unit 111 to a normal operating state, the control unit 11 may start the abnormality handling processing unit 114 by executing the abnormality handling processing program 114P. The abnormality response processing unit 114 can notify the occurrence of an abnormality by issuing an alarm, for example, on a display (not shown) and / or to the administrator's email address. This enables a centralized response to an abnormality in the boiler device 1. Furthermore, the abnormality response processing unit 114 transfers the setting data, heat management data, and other handover information of the boiler apparatus 1, as well as operational status information, such as status information indicating the combustion status of the boiler 1, to the operation execution unit 111 after switching. This makes it possible to continue the operation of the boiler apparatus 1 up to now, for example, through backup operation. Furthermore, for example, the number control device 2 may be able to grasp the status of the boiler apparatus 1 and switch to issuing a combustion instruction to another boiler apparatus. The abnormality response processing unit 114 may also output the above information (handover information, operating status information, etc.) to, for example, the unit count control device 2, an external server (edge ​​device 5, cloud, etc.), and inspection equipment. This allows the information to be reflected in an investigation of the cause of the abnormality and in future maintenance plans, etc.

[0036] As described above, according to the present invention, in the boiler system 100, the reliability of the boiler equipment 1 is further increased, and the accuracy of detecting abnormalities in the operating program in the control unit 11 of the boiler equipment 1 is improved.Furthermore, when an abnormality is detected in the operating program 111P in the control unit 11 of the boiler equipment 1, an alarm of the abnormality is notified to the maintenance department or manager, and data collection by inspection equipment, data transfer by the inspection equipment, and data collection from the circuit board are made possible. The above has been a description of the boiler apparatus 1. Next, a description will be given of a process for making the operating programs 111P stored in the first storage unit 121 and the second storage unit 122 have the same version.

[0037] In the present invention, in order to detect an abnormality in the operation program 111P, it is necessary that the operation programs 111P stored in the first storage unit 121 and the second storage unit 122 are of the same version. Therefore, it is necessary to perform processing to make the operation programs 111P stored in the first storage unit 121 and the second storage unit 122 the same version. As described above, first, when the boiler apparatus 1 is shipped, the first storage unit 121 and the second storage unit 122 each store the same version of the operation program 111P. Next, a case where the operation program 111P is upgraded will be described. Fig. 5A is a diagram showing an outline of the process when the operation program 111P is upgraded. Fig. 5B is a diagram showing an outline of the process for making the operation programs 111P stored in the operation storage unit and the non-operation storage unit the same version.

[0038] Referring to FIG. 5A, the edge device 5 first distributes the latest version of the operation program 111P to the boiler device 1, for example, in units of blocks. Next, the boiler apparatus 1 (controller 11) determines whether the version of the running operation program 111P stored in the operation memory unit is the latest version that has been delivered, and if it is determined that it is not the latest version, writes the latest version of the operation program 111P to the non-operation memory unit. Specifically, the boiler apparatus 1 (controller 11) rewrites the operation program 111P delivered to the non-operation memory unit in block units, and determines whether all blocks have been rewritten. When it is determined that rewriting of all blocks has been completed, the boiler apparatus 1 (control unit 11) displays, for example, a message on a display (not shown) urging switching to the latest version, and when the user performs a confirmation operation, as described above, for example, the bank switching flag is set to "0" or "1", and the inactive memory unit is reset and restarted as the active memory unit, whereby the control unit 11 executes the latest version of the operating program 111P, takes over operating state information such as setting data and heat management data, and can control the combustion amount, etc. of the boiler apparatus 1. At this point, the old version of the operating program 111P remains stored in the inactive memory unit.

[0039] 5B, the edge device 5 again distributes the latest version of the operation program 111P to the boiler apparatus 1 in units of blocks. When the boiler apparatus 1 (controller 11) determines that the version of the running operation program 111P stored in the operation memory unit is the distributed latest version and that the operation program 111P stored in the non-operation memory unit is not the latest version, the boiler apparatus 1 (controller 11) rewrites the operation program 111P distributed in units of blocks to the non-operation memory unit in units of blocks, as described above. When it is determined that the rewriting of all blocks has been completed, the boiler apparatus 1 can make the operation programs 111P stored in the first memory unit 121 and the second memory unit 122 each have the same version. In this way, in the boiler system 100, the latest version operation program 111P is distributed to the boiler apparatus 1 by, for example, the edge device 5, so that it is possible to simultaneously update (upgrade) all of the multiple apparatuses corresponding to the same model in the boiler apparatus 1. In addition, at that time, the edge device 5 again distributes the latest version operation program 111P to the boiler apparatus 1 in block units, so that the operation programs 111P stored in the first storage unit 121 and the second storage unit 122 can be made to be the same version. As described above, the latest version operating program 111P is distributed to the boiler equipment 1, for example, by the edge device 5, so that the operating programs 111P stored in the first memory unit 121 and the second memory unit 122 can always be the same version. The abnormality detection function of the operation program by the boiler apparatus 1 according to the first embodiment and the abnormality response processing function when an abnormality is detected have been described above.

[0040] Next, an operation of detecting an abnormality in the operating program by the boiler apparatus 1 according to this embodiment and an operation of handling the abnormality when an abnormality is detected will be described. 6A and 6B are flowcharts illustrating the processing of the boiler apparatus 1. FIG.

[0041] Referring to the flowchart in Fig. 6A, in step S10, the boiler apparatus 1 (program version determination unit 1121) determines whether the versions of the operating program 111P stored in the operating memory unit and the operating program 111P stored in the non-operating memory unit match. If they match (Yes), the process proceeds to step S11. If they do not match (No), the process proceeds to step S30.

[0042] In step S11, the boiler apparatus 1 (comparison inspection unit 1122) determines whether the operating program stored in the operation memory unit and the operating program stored in the non-operation memory unit match. If they match (Yes), the process proceeds to step S30. If they do not match (No), the process proceeds to step S12.

[0043] In step S12, the boiler apparatus 1 (cyclic redundancy check unit 1123) performs a cyclic redundancy check (CRC check) on the operating program stored in the operating memory unit and each of the operating programs stored in the non-operating memory unit.

[0044] In step S13, if the running operation program stored in the operation memory unit is determined to be normal and the operation program 111P stored in the non-operating memory unit is determined to be abnormal, the process proceeds to step S14. Otherwise (No), the process proceeds to step S15.

[0045] In step S14, the boiler apparatus 1 (program abnormality inspection unit 112) assigns a version number indicating an abnormality to the operation program 111P stored in the inoperative storage unit, and ends the abnormality detection operation.

[0046] In step S15, if the running operation program stored in the operation memory unit is determined to be abnormal and the operation program 111P stored in the non-operating memory unit is determined to be normal, the process proceeds to step S16. Otherwise, the process proceeds to step S21.

[0047] In step S16, the boiler apparatus 1 (program abnormality inspection unit 112) starts up the program switching unit 113 by executing the switching program 113P.

[0048] 6B, in step S17, the program switching unit 113 switches the non-operating memory unit in which the normal operation program 111P is stored to the operating memory unit. Specifically, the program switching unit 113 resets and restarts the control unit 11 to switch the non-operating memory unit to the operating memory unit.

[0049] In step S18, the abnormality handling processor 114 issues an alarm to, for example, a display (not shown) and / or the administrator's email address to notify the occurrence of an abnormality.

[0050] In step S19, the abnormality response processing unit 114 transfers to the operation execution unit 111 the handover information such as setting data, heat management data, and the like, and the operating state information such as the state information indicating the combustion state of the boiler 1.

[0051] In step S20, the abnormality response processing unit 114 outputs the above information (handover information, operating state information, etc.) to, for example, the unit count control device 2, an external server (edge ​​device 5, cloud, etc.), and an inspection device. After assigning, for example, a version number indicating an abnormality to the operation program 111P stored in the operation storage unit, the abnormality detection operation may be terminated.

[0052] In step S21, the boiler apparatus 1 is brought into a completely stopped state, and the abnormality detection operation is completed.

[0053] In step S30, the boiler apparatus 1 (cyclic redundancy check unit 1123) performs a cyclic redundancy check (CRC check) on the operating program currently in operation stored in the operation storage unit.

[0054] In step S31, if the running operation program is determined to be normal by a cyclic redundancy check (CRC check), the abnormality detection operation is terminated. If not (No), the process proceeds to step S21.

[0055] The boiler apparatus 1 according to this embodiment has been described above.

[0056] Although the preferred embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments and can be embodied in various forms.

[0057] For example, in the above-described embodiment, as described above, the first memory unit 121 and the second memory unit 122 are configured to store the operation program 111P independently, and the third memory unit 123 is configured to store the abnormality inspection program 112P, the switching program 113P, and the abnormality response processing program 114P, but this is not limited to this. In addition to the operation program 111P, the first storage unit 121 and the second storage unit 122 may each independently store an abnormality inspection program 112P, a switching program 113P, and an abnormality response processing program 114P. In this way, the control unit 11 can realize the functions of the program abnormality checking unit 112, the program switching unit 113, and the abnormality handling processing unit 114 by respectively executing the abnormality checking program 112P, the switching program 113P, and the abnormality handling processing program 114P stored in the operation storage unit. Also, the control unit 11 can realize the functions of the program version determination unit 1121, the comparison check unit 1122, and the cyclic redundancy check unit 1123 by respectively executing the program version determination program 1121P, the comparison check program 1122P, and the cyclic redundancy check program 1123P included in the abnormality checking program 112P stored in the operation storage unit.

[0058] In addition, the program abnormality inspection unit 112 compares the contents of the operation program 111P stored in the operation memory unit and the operation program 111P stored in the non-operation memory unit, performs a cyclic redundancy check on each, and performs processing such as program switching based on the inspection results. In addition, the abnormality inspection program 112P, the switching program 113P, and the abnormality response processing program 114P, which are stored independently in the first memory unit 121 and the second memory unit 122, can also be made to be the same version programs, similar to the operation program 111P. In this way, it is possible to realize the same functions and processes as those in the first embodiment. The above describes the modified configuration for storing data in the storage unit 12.

[0059] The boiler apparatus 1 described above provides the following effects. (1) The boiler apparatus 1 of the present invention is a boiler apparatus 1 including a control unit 11 as a local control unit and a memory unit 12 including at least a first memory unit 121 and a second memory unit 122, The storage unit 12 stores an operation program 111P of the boiler apparatus, an abnormality inspection program 112P for inspecting an abnormality in the operation program 111P, a switching program 113P for switching the operation program 111P, and an abnormality response processing program 114P, and at least the operation program 111P is stored independently in a first storage unit 121 and a second storage unit 122, The control unit 11 functions as an operation execution unit 111 that executes the operation of the boiler apparatus 1 by executing an operation program 111P stored in the operation memory unit, with either the first memory unit 121 or the second memory unit 122 as an operation memory unit and the other as a non-operation memory unit, By executing the abnormality inspection program 112P stored in the storage unit 12, the abnormality inspection unit 112 inspects the operation program 111P in operation for abnormality, and when the result indicates that the operation program 111P in operation is abnormal, functions as a program abnormality inspection unit 112 that executes the switching program 113P stored in the storage unit 12; When the execution of the switching program 113P results in a result indicating that the operating program 111P in operation is abnormal, the program switching unit 113 functions as a program switching unit that switches the operating program 111P stored in the non-operating storage unit to the operating storage unit in place of the operating program 111P in operation, and executes the operating program 111P stored in the non-operating storage unit; By executing the abnormality handling processing program 114P stored in the storage unit 12, the abnormality handling processing unit 114 functions as an abnormality handling processing unit 114 that performs abnormality handling processing after the program switching unit 113 has performed program switching. This improves the detection accuracy when an abnormality occurs in the operating program in the control unit 11 of the boiler equipment 1, and when an abnormality is detected in the operating program 111P in the control unit 11 of the boiler equipment 1, an alarm of the abnormality is notified to the maintenance department, and data can be collected by inspection equipment, data can be handed over to the inspection equipment, and data can be collected from the board.

[0060] (2) In the boiler apparatus 1 of the present invention, the abnormality inspection program 112P further includes a program version determination program 1121P, a comparison inspection program 1122P, and a cyclic redundancy check program 1123P, The control unit 11 as a local control unit By executing the program version determination program 1121P, it functions as a program version determination unit 1121 that determines whether the versions of the operating program stored in the operation memory unit and the operating program stored in the non-operation memory unit are the same, By executing the comparison inspection program 1122P, it functions as a comparison inspection unit 1122 that performs a comparison inspection to check whether the operating program stored in the operation memory unit and the operating program stored in the non-operation memory unit match, By executing the cyclic redundancy check program 1123P, it functions as a cyclic redundancy check unit 1123 that performs a cyclic redundancy check on the operating program stored in the operating memory unit and the operating program stored in the non-operating memory unit, The program abnormality inspection unit 112 The program version determination unit 1121 determines that the versions of the operating program stored in the operating memory unit and the operating program stored in the non-operating memory unit are the same, The comparison inspection unit 1122 determines that the operating program stored in the operation memory unit and the operating program stored in the non-operation memory unit do not match, When the cyclic redundancy check unit 1123 determines that the operating program stored in the operation memory unit is abnormal and that the operating program stored in the non-operating memory unit is normal, the switching program 113P is executed. This improves the accuracy of detecting abnormalities in the operating program when they occur compared to testing using only a cyclic redundancy test, and also enables reliable testing of program abnormalities, thereby further increasing the reliability of boiler operation.

[0061] (3) In addition, in the boiler apparatus 1 of the present invention, the abnormality handling processing unit 114 issues an alarm to notify the occurrence of an abnormality as an abnormality handling process, and also makes it possible to take over the data stored in the boiler apparatus 1. This allows setting data related to combustion control to be stored in the unit count control device, an external server, or a terminal.

[0062] (4) The boiler apparatus 1 of the present invention further includes an operating state information storage unit 124 that stores operating state information, and a communication unit 15. The abnormality response processing unit 114 transmits the operating state information stored in the operating state information storage unit 124 via the communication unit 15 to the number of units control device 2 or an externally installed device. As a result, after switching to the normal operating program, the information in the operating status information memory unit 124 can be saved in the number control device 2, an external server, and a terminal via the communication unit 15, which can be useful for maintenance of the boiler device 1.

[0063] (5) In addition, in the boiler apparatus 1 of the present invention, if the comparison inspection unit 1122 determines that the operating program stored in the operation memory unit and the operating program stored in the non-operation memory unit do not match, and the cyclic redundancy check unit 1123 determines that both the operating programs stored in the operation memory unit and the non-operation memory unit are normal or abnormal, The control unit 11 as a local control unit stops the operation of the operating program that is currently running. This allows the system to be stopped if a particularly abnormal case occurs.

[0064] (6) In the boiler apparatus 1 of the present invention, the memory unit 12 includes a third memory unit 123, The abnormality inspection program 112P, the switching program 113P, and the abnormality response processing program 114P are stored in the third storage unit 123. This allows the abnormality inspection program 112P, the switching program 113P, and the abnormality handling process program 114P to be stored in appropriate memories depending on the memory configuration in the storage unit 12.

[0065] (7) In addition, in the boiler apparatus 1 of the present invention, the abnormality inspection program 112P, the switching program 113P, and the abnormality response processing program 114P are independently stored in the first storage unit 121 and the second storage unit 122, respectively. The control unit 11 as a local control unit executes an abnormality inspection program 112P, a switching program 113P, and an abnormality handling processing program 114P stored in either the first storage unit 121 or the second storage unit 122, which are operating storage units. This allows the abnormality inspection program 112P, the switching program 113P, and the abnormality handling process program 114P to be stored in appropriate memories depending on the memory configuration in the storage unit 12. [Explanation of symbols]

[0066] 100 Boiler System 2. Number control device 1. Boiler equipment 11 Control section 111 Operation Execution Department 112 Program Abnormality Inspection Unit 1121 Program version determination unit 1122 Comparative Inspection Department 1123 Cyclic Redundancy Check Unit 113 Program change section 114 Abnormality Response Processing Unit 111P Driving Program 112P Abnormality Inspection Program 1121P Program version determination program 1122P Comparison Inspection Program 1123P Cyclic Redundancy Check Program 113P Switching Program 114P Abnormality response processing program 12 Storage section 121 1st memory section 122 2nd memory section 123 Third memory section 124 Operating state information storage unit 15 Communications Department 5 Edge Devices 7 Network

Claims

1. a local control unit; A boiler apparatus including a memory unit including at least a first memory unit and a second memory unit, The storage unit storing an operation program for the boiler device, an abnormality inspection program for inspecting the operation program for abnormalities, a switching program for switching the operation program, and an abnormality response processing program; At least the operation program is stored independently in the first storage unit and the second storage unit, The local control unit one of the first storage unit and the second storage unit as an operation storage unit and the other as a non-operation storage unit, and executes an operation program stored in the operation storage unit to function as an operation execution unit that executes operation of the boiler apparatus; By executing the abnormality inspection program stored in the storage unit, the abnormality inspection unit inspects the operating program during operation for abnormalities, and when the result indicates that the operating program during operation is abnormal, functions as a program abnormality inspection unit that executes the switching program stored in the storage unit; When the execution of the switching program results in a result indicating that the operating program in operation is abnormal, the program switching unit switches the operating program stored in the operating program in operation to an unoperated storage unit as the operating storage unit, and executes the operating program stored in the unoperated storage unit; The boiler apparatus functions as an abnormality response processing unit that performs abnormality response processing after program switching by the program switching unit by executing the abnormality response processing program stored in the storage unit.

2. The abnormality inspection program further a program version determination program, a comparison check program, and a cyclic redundancy check program; The local control unit By executing the program version determination program, the program functions as a program version determination unit that determines whether the versions of the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit are the same, By executing the comparison inspection program, the system functions as a comparison inspection unit that performs a comparison inspection to determine whether the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit match, By executing the cyclic redundancy check program, the device functions as a cyclic redundancy check unit that performs a cyclic redundancy check on the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit; The program abnormality inspection unit The program version determination unit determines that the versions of the operating program stored in the operation storage unit and the operating program stored in the non-operation storage unit are the same, The comparison inspection unit determines that the operating program stored in the operation storage unit does not match the operating program stored in the non-operation storage unit, 2. The boiler apparatus according to claim 1, wherein the switching program is executed when the cyclic redundancy check unit determines that the operating program stored in the operation memory unit is abnormal and that the operating program stored in the non-operating memory unit is normal.

3. The abnormality response processing unit As an abnormality response process, an alarm is issued to notify the occurrence of an abnormality, 3. The boiler apparatus according to claim 1, wherein data stored in the boiler apparatus can be taken over.

4. an operating state information storage unit that stores operating state information; a communication unit, The abnormality response processing unit The boiler apparatus according to any one of claims 1 to 3, wherein the operating state information stored in the operating state information storage unit is transmitted to a number control device or an externally installed device via the communication unit.

5. The comparison inspection unit determines that the operating program stored in the operation storage unit does not match the operating program stored in the non-operation storage unit, If the cyclic redundancy check unit determines that both the operation programs stored in the operation memory unit and the non-operation memory unit are normal or abnormal, The boiler apparatus according to claim 2 , wherein the local control unit stops the operation of the operating program that is currently running.

6. The storage unit a third storage unit; The boiler apparatus according to any one of claims 1 to 5, wherein the abnormality inspection program, the switching program, and the abnormality response processing program are stored in the third storage unit.

7. the abnormality inspection program, the switching program, and the abnormality response processing program are stored independently in the first storage unit and the second storage unit, respectively; The local control unit A boiler apparatus according to any one of claims 1 to 5, wherein the operation memory unit executes the abnormality inspection program, the switching program, and the abnormality response processing program stored in either the first memory unit or the second memory unit.

Images