Control device and operation method thereof

Abstract

The present invention relates to a control device and a method of operating the same, comprising: a storage module capable of storing operating systems for operating CPU modules; a plurality of CPU modules capable of operating by each downloading one operating system from the storage module; and a common CPU module capable of operating by downloading from the storage module an operating system identical to the operating system downloaded to a faulty CPU module among the plurality of CPU modules that is not operating normally. Since the CPU module directly downloads and operates the operating system, the types of CPU modules can be unified, and the configuration of the control device can be simplified through the common CPU module while ensuring the continuity of mission execution.

Description

Technology Field

[0001] The present invention relates to a control device and a method of operating the same, and more specifically, to a control device and a method of operating the same that can simplify the configuration and reduce construction costs. Background Technology

[0002] Systems where safety is paramount because accidents caused by malfunctions can lead to massive damage are called safety-critical systems. As safety hazards are increasing due to the scaling up, increased complexity, and unmanned operation of systems, ensuring safety has become a critical issue in national defense and various industrial sectors.

[0003] For this reason, the U.S. Department of Defense and international standardization organizations such as the IEC are establishing safety-related standards to emphasize ensuring safety and proposing the linkage between system design and safety analysis. Furthermore, numerous studies are developing system design processes, methodologies, and tools that incorporate safety analysis activities.

[0004] Meanwhile, safety-critical systems capable of performing multiple missions are designed so that when a CPU module fails to operate, the other matching module can be utilized to continuously perform the mission. However, this design presents a problem of inefficient resource usage because all CPU modules are paired. Additionally, it leads to increased system complexity and higher costs for building and maintaining the system. Prior art literature

[0005] (Patent Document 0001) KR 10-1440504 B The problem to be solved

[0006] The present invention provides a control device and a method of operating the same that can simplify the configuration of the control device.

[0007] The present invention provides a control device and a method of operating the same that can reduce the cost of constructing the control device. means of solving the problem

[0008] A control device according to an embodiment of the present invention may include: a storage module capable of storing operating systems for operating CPU modules; a plurality of CPU modules capable of operating by each downloading one operating system from the storage module; and a common CPU module capable of operating by downloading from the storage module an operating system identical to the operating system downloaded to a non-operating CPU module among the plurality of CPU modules.

[0009] The above storage module may include: a common storage unit capable of storing the operating systems; a common data transmission and reception unit capable of transmitting and receiving data with the plurality of CPU modules and the common CPU module; a monitoring unit capable of monitoring the operating status of the plurality of CPU modules; and a common control unit capable of controlling the transmission of an operating system to the common CPU module according to the operating status of the plurality of CPU modules.

[0010] The above common data transmission and reception unit can receive operational data generated when the plurality of CPU modules operate, and the above common storage unit can classify and store the received operational data by CPU module.

[0011] The above common control unit can transmit to the above common CPU module an operating system identical to the operating system of the above abnormal CPU module and the operating data of the above abnormal CPU module together.

[0012] The above monitoring unit can determine the operating status of the CPU modules by analyzing the operating data of the plurality of CPU modules.

[0013] The number of CPU modules mentioned above is equal to the number of operating systems, and the number of common CPU modules may be less than the number of operating systems.

[0014] The above plurality of CPU modules may be three or more, and the above common CPU module may be one.

[0015] The storage module and the common CPU module are combined into a single integrated module, and the common CPU module can operate by selecting an operating system identical to the operating system of the above CPU module from among the operating systems stored in the storage module.

[0016] The system further includes an integrated CPU module capable of storing all operating systems for operating the aforementioned plurality of CPU modules, and selecting and operating an operating system identical to the operating system of the aforementioned abnormal CPU module among the stored operating systems, and the common control unit can control the integrated CPU module to operate from the time the abnormal CPU module occurs until the common CPU module downloads the operating system and is ready for operation.

[0017] The system includes a bus line connecting the plurality of CPU modules, the storage module, the common CPU module, and the integrated CPU module to each other, and at least the plurality of CPU modules can be detachably connected to the bus line.

[0018] A method for operating a control device according to an embodiment of the present invention comprises: a process of providing a control device in which a common CPU module and CPU modules capable of operating using the operating systems are connected to a storage module in which a plurality of operating systems are stored; and a process of the CPU modules operating; wherein, if an abnormal CPU module that does not operate normally occurs among the CPU modules, the common CPU module downloads an operating system identical to the operating system of the abnormal CPU module from the storage module and operates it.

[0019] The process of providing the above control device may include the process of connecting a number of CPU modules equal to the number of the above operating systems to the above storage module.

[0020] The process of providing the above control device may include connecting a number of common CPU modules to the storage module that is less than the number of CPU modules.

[0021] The process of operating the above CPU modules may include a process of monitoring the operating status of the plurality of CPU modules.

[0022] The above monitoring process may include: a process in which the storage module receives and stores respective operational data from the CPU modules; and a process of determining whether there is an abnormality in the operational data based on predetermined reference data; and if it is determined that abnormal operational data has occurred, a process of designating the CPU module that generated the abnormal operational data among the CPU modules as an abnormal CPU module.

[0023] The above monitoring process may include, after the process of determining the above abnormal CPU module, a process in which the common CPU module downloads from the storage module an operating system identical to the operating system of the above abnormal CPU module and the operating data of the above abnormal CPU module together.

[0024] The above monitoring process may include: a process of transmitting the operation data of the common CPU module to the storage module; and a process in which the storage module stores the operation data of the common CPU module.

[0025] In the above monitoring process, when the abnormal CPU module is replaced with a normal CPU module and is ready to perform a mission by downloading an operating system identical to the operating system of the abnormal CPU module from the storage module, the common CPU module stops operating and the normal CPU module can operate.

[0026] The process further includes providing an integrated CPU module capable of storing all operating systems for operating multiple CPU modules and selecting and operating one of the stored operating systems, and the monitoring process may include a process in which, while the common CPU module is preparing for operation, the integrated CPU module operates using an operating system identical to the operating system of the above CPU module among the stored operating systems.

[0027] The above monitoring process may include: a process in which the integrated CPU module transmits operational data to the storage module; and a process in which the storage module transmits the operational data of the integrated CPU module to the common CPU module and the normal CPU module. Effects of the invention

[0028] According to an embodiment of the present invention, in configuring a control device, a CPU module capable of performing a task and a storage module capable of storing an operating system capable of operating the CPU module are configured separately, and a common CPU module capable of replacing the CPU modules can be additionally configured. Accordingly, if an abnormal CPU module that does not operate normally occurs among the CPU modules, the common CPU module can download an operating system identical to the operating system of the abnormal CPU module from the storage module and perform the task performed by the abnormal CPU module.

[0029] Therefore, since the CPU module directly downloads and operates the operating system, the types of CPU modules can be standardized, and mission continuity can be ensured while simplifying the configuration of the control unit through the common CPU module. In addition, the costs required to build and maintain the control unit can be reduced. Brief explanation of the drawing

[0030] FIG. 1 is a block diagram schematically showing a control device according to an embodiment of the present invention. FIG. 2 is a block diagram of the CPU module shown in FIG. 1. FIG. 3 is a block diagram of the storage module illustrated in FIG. 1. FIG. 4 is a block diagram schematically showing a control device according to a modified example of the present invention. FIG. 5 is a block diagram of the integrated CPU module shown in FIG. 4. FIG. 6 is a flowchart showing the operation method of a control device according to an embodiment of the present invention in sequence. FIGS. 7 and 8 are conceptual diagrams illustrating, exemplarily, a method of operating a control device according to an embodiment of the present invention. FIG. 9 is a conceptual diagram exemplarily showing a method of operating a control device according to a modified example of the present invention. Specific details for implementing the invention

[0031] Hereinafter, embodiments of the present invention will be described in detail with reference to the attached drawings. However, the present invention is not limited to the embodiments disclosed below but may be implemented in various different forms, and the embodiments of the present invention are provided merely to ensure that the disclosure of the present invention is complete and to fully inform those skilled in the art of the scope of the invention. To explain the invention in detail, the drawings may be exaggerated, and like reference numerals in the drawings refer to like elements.

[0032] First, the control device according to an embodiment of the present invention may be mounted on various electronic equipment capable of performing multiple missions. For example, the electronic equipment may include flight control computer equipment mounted on an aircraft. The flight control computer equipment may include a flight control CPU module that controls the flight of an aircraft by means of an Operational Flight Program (OFP) and an embedded operating system, a mission control CPU module that is hardware-separated from the flight control CPU module and controls the mission of the aircraft by means of an OPF and an embedded operating system, and a signal processing CPU module that is hardware-separated from the flight control CPU module and the mission control CPU module and processes various command signals and control signals by means of an OPF and an embedded operating system, and may include actuators that execute flight control by driving various electronic and mechanical devices of the aircraft by means of each of the above CPU modules.

[0033] Here, electronic equipment is exemplified as flight control computer equipment mounted on an aircraft, but electronic equipment is not limited to this and can be diverse.

[0035] FIG. 1 is a block diagram schematically showing a control device according to an embodiment of the present invention, FIG. 2 is a block diagram of a CPU module shown in FIG. 1, and FIG. 3 is a block diagram of a storage module shown in FIG. 1.

[0036] Referring to FIG. 1, a control device according to an embodiment of the present invention may include a storage module capable of storing operating systems for operating CPU modules (110), a plurality of CPU modules (110) capable of operating by downloading one operating system from the storage module (130), and a common CPU module (120) capable of operating by downloading an operating system identical to the operating system downloaded to a CPU module that is not operating normally among the plurality of CPU modules (110) from the storage module (130).

[0037] Here, the plurality of CPU modules (110) may include three CPU modules, for example, a first CPU module (110a), a second CPU module (110b), and a third CPU module (110c). The first CPU module (110a) may be a flight control CPU module, the second CPU module (110b) may be a mission control CPU module, and the third CPU module (110c) may be a signal processing CPU module. However, the number of CPU modules (110) may be equal to the number of missions that the electronic equipment can perform; for example, the electronic equipment may perform three missions and the number of CPU modules (110) may be three. Alternatively, the electronic equipment may perform four or more missions and the number of CPU modules may be four or more, and the number and types may not be limited thereto and may vary. In addition, the number of CPU modules (110) and the number of missions may be the same as the number of operating systems described later.

[0038] Referring to FIG. 2, the CPU modules (110) may include a data transmission and reception unit (111) capable of transmitting and receiving data to and from a storage module (130), an actuator, etc., a storage unit (112) capable of storing various data such as an operating system and operating data, and a data processing unit (113) capable of performing various tasks using the operating system.

[0039] Multiple CPU modules (110) can be connected to each other using a bus line (150). Additionally, multiple CPU modules (110) can be connected to a storage module (130) using a bus line (150). Here, the bus line (150) can be connected to a data transmission / reception unit (111) of a CPU module. At this time, the data transmission / reception unit (111) may include a communication port installed in the CPU module.

[0040] The storage unit (112) may include memory such as RAM. The storage unit (112) may store an operating system downloaded from the storage module (130) and may store various operational data generated while the data processing unit (113) performs its duties. For example, the storage unit of the first CPU module (110a) may store the first operating system and the operational data of the first CPU module (110a), the storage unit of the second CPU module (110b) may store the second operating system and the operational data of the second CPU module (110b), and the storage unit of the third CPU module (110c) may store the third operating system and the operational data of the third CPU module (110c).

[0041] The data processing unit (113) may include a processor such as a CPU. The data processing unit (113) can perform a task by operating using the operating system stored in the storage unit (112).

[0042] The common CPU module (120) may include a data transmission / reception unit (not shown), a storage unit (not shown), and a data processing unit (not shown), just like the plurality of CPU modules (110). That is, the common CPU module (120) may have a structure substantially identical to the CPU modules (110), differing only in its purpose of use.

[0043] Additionally, the common CPU module (120) may be fewer than the number of tasks that the electronic equipment can perform or the number of the plurality of CPU modules (110), and may be fewer than the sum of the number of the plurality of CPU modules (110) and the storage module (130). Alternatively, the common CPU module (120) may be fewer than the number of operating systems stored in the storage module (130). For example, the number of tasks that the electronic equipment can perform and the number of CPU modules may be three, and the common CPU module (120) may be one.

[0044] These multiple CPU modules (110) and common CPU module (120) can be connected to a bus line (150) in a detachable or movable manner. In particular, the multiple CPU modules (110) are connected to a bus line (150) in a detachable manner so that when an abnormal CPU module occurs, the abnormal CPU module can be detached from the bus line (150) and a normal CPU module can be attached or connected to the bus line (150).

[0045] Referring to FIG. 3, the storage module (130) may include a common data transmission / reception unit (131) capable of transmitting and receiving data with a plurality of CPU modules (110), operating systems for operating the plurality of CPU modules (110), a common storage unit (132) capable of storing operating data of the plurality of CPU modules (110), a monitoring unit (133) capable of monitoring the operating status of the plurality of CPU modules (110), and a control unit (134) capable of controlling the overall operation of the common data transmission / reception unit (131), the common storage unit (132), and the monitoring unit (133).

[0046] The common data transmission and reception unit (131) can transmit and receive data with a plurality of CPU modules (110) through a bus line (150). At this time, the common data transmission and reception unit (131) may include a communication port installed in a storage module (130). In addition, the common data transmission and reception unit (131) can transmit and receive data with a common CPU module (120).

[0047] The common storage unit (132) can store operational data capable of operating multiple CPU modules (110) and various operational data generated from multiple CPU modules (110). The operational data stored in the common storage unit (132) may be provided in a number equal to the number of missions performed by the electronic equipment. For example, if the number of missions performed by the electronic equipment is three, there may be three operational data. However, the number of operational data is not limited to this and may vary depending on the number of missions performed by the electronic equipment. At this time, the common storage unit (132) can classify and store the operating system and operational data for each CPU module (110).

[0048] The monitoring unit (133) can monitor the operating status of multiple CPU modules (110) and detect abnormal CPU modules that are not operating normally. For example, the monitoring unit (133) can receive operating data of multiple CPU modules (110) through the common data transmission and reception unit (131) and determine whether there is an abnormality in the received operating data based on predetermined reference data. At this time, the reference data is data used to determine or diagnose whether there is an abnormality in the operating data, and refers to data used to read signal values, etc. of specific data included in the operating data.

[0049] If the monitoring unit (133) determines that there is abnormal operation data among the operation data, it can detect the CPU module that generated or transmitted the abnormal operation data and designate the CPU module as an abnormal CPU module. Additionally, the monitoring unit (133) can transmit the monitoring results to the control unit (134).

[0050] The control unit (134) can control the operation of the common data transmission / reception unit (131), the common storage unit (132), and the monitoring unit (133). In addition, the control unit (134) can control the operation of multiple CPU modules (110), as well as control the common CPU module (120) to perform tasks in place of the abnormal CPU module in the event that an abnormal CPU module occurs. For example, the control unit (134) can control the operation of the common storage unit (132), the common data transmission / reception unit (131), and the common CPU module (120) so that in the event that an abnormal CPU module occurs, the common CPU module (120) can download the operating system identical to the operating system of the abnormal CPU module and the operating data of the abnormal CPU module.

[0051] Additionally, when the abnormal CPU module is replaced with a normal CPU module, the control unit (134) transmits the operating system identical to that of the abnormal CPU module and the operating data of the common CPU module (120) to the normal CPU module, and the normal CPU module receives the operating system and operating data from the storage module (130) to continuously perform the tasks of the abnormal CPU module.

[0052] Here, the storage module (130) and the common CPU module (120) are described as being provided as independent structures, but as shown in FIG. 1, the storage module (130) and the common CPU module (120) may be formed as a single integrated module (M). When an abnormal CPU module occurs, the common CPU module (120) can continuously perform the task that the abnormal CPU module was performing by selecting and operating an operating system identical to the operating system of the abnormal CPU module from among the operating systems stored in the storage module (130). In this way, when the common CPU module (120) and the storage module (130) are provided as an integrated module, the common CPU module (120) can immediately perform the task of the abnormal CPU module by using the operating system stored in the storage module (130) without downloading an operating system identical to the operating system of the abnormal CPU module, thereby preventing the task from being temporarily interrupted.

[0053] The control device according to an embodiment of the present invention can ensure continuity in mission execution by enabling the common CPU module (120) to perform the mission of the abnormal CPU module in place of the abnormal CPU module when an abnormal CPU module occurs among the plurality of CPU modules (110) through such a configuration.

[0055] FIG. 4 is a block diagram schematically showing a control device according to a modified example of the present invention, and FIG. 5 is a block diagram of an integrated CPU module shown in FIG. 4. Hereinafter, descriptions of configurations that overlap with the previously described embodiment will be omitted.

[0056] Referring to FIG. 4, a control device according to a modified example of the present invention may further include an integrated CPU module (140) capable of storing all operating systems for operating a plurality of CPU modules (110) and selecting and operating an operating system identical to the operating system of an ideal CPU module among the stored operating systems. The integrated CPU module (140) may be connected to a plurality of CPU modules (110), a storage module (130), and a common CPU module (120) through a bus line (150).

[0057] Referring to FIG. 5, the integrated CPU module (140) may include a data transmission / reception unit (141) capable of transmitting and receiving data with a storage module (130), an integrated storage unit (142) capable of storing the same number of operating systems as the operating systems stored in the storage module (130), and an integrated data processing unit (143) capable of selecting and operating one of the operating systems stored in the integrated storage unit (112) to perform a mission.

[0058] When an abnormal CPU module occurs, the integrated CPU module (140) is stored in the integrated storage unit (112) and can select an operating system identical to the operating system of the abnormal CPU module to perform the duties of the abnormal CPU module. At this time, the integrated CPU module (140) can perform the duties of the abnormal CPU module until preparations for performing the duties are completed, such as when the common CPU module (120) downloads an operating system identical to the operating system of the abnormal CPU module from the storage module (130) and installs the operating system.

[0059] And when the common CPU module (120) is ready to perform the mission, the common CPU module (120) The operation or task can be stopped, and the common CPU module (120) can continuously perform the task of the abnormal CPU module.

[0060] The integrated CPU module (140) transmits various operational data generated during mission execution to the storage module (130), and the storage module (130) can receive operational data from the integrated CPU module (140) and store it in the common storage unit (132). Additionally, the storage module (130) transmits the operational data of the integrated CPU module (140) to the common CPU module (120), and the common CPU module (120) can receive the operational data of the integrated CPU module (140) and perform the mission.

[0062] Hereinafter, a method of operating a control device according to an embodiment of the present invention will be described. The method of operating a control device according to an embodiment of the present invention describes a method of operating the aforementioned control device.

[0063] FIG. 6 is a flowchart showing the operation method of a control device according to an embodiment of the present invention in sequence, and FIG. 7 and FIG. 8 are conceptual diagrams exemplarily showing the operation method of a control device according to an embodiment of the present invention.

[0064] Referring to FIG. 6, the method of operating a control device according to an embodiment of the present invention may include a process (S101) of providing a control device in which CPU modules (110) and a common CPU module (120) capable of operating using said operating systems are connected to a storage module (130) in which a plurality of operating systems are stored, and a process (S103) of operating the CPU modules (110). At this time, if an abnormal CPU module that does not operate normally occurs among the CPU modules (110), the process (S106, S107) of the common CPU module (120) downloading an operating system identical to the operating system of said abnormal CPU module from the storage module (130) and operating it may be included.

[0065] The process of providing a control device may include providing multiple CPU modules (110) and storage modules (130) in accordance with the number of tasks that the electronic equipment can perform. Additionally, the process of providing a control device may further include providing a common CPU module (120) capable of performing the task of an abnormal CPU module when an abnormal CPU module occurs among the multiple CPU modules (110). In this case, a number of common CPU modules (120) smaller than the number of CPU modules (110) can be connected to the storage module (130). Accordingly, the number of CPU modules used can be reduced compared to the conventional configuration of CPU modules (110) in pairs, thereby simplifying the structure of the control device.

[0066] The process of providing a control device may include connecting multiple CPU modules (110), a common CPU module (120), and a storage module (130) to each other using a bus line (150).

[0067] When a control device is provided in this manner, as illustrated in FIG. 7, a plurality of CPU modules (110) can each download and install an operating system stored in a storage module (130) to perform a mission (S102). For example, the first CPU module (110a) can download a first operating system (T1) for flight control, the second CPU module (110b) can download a second operating system (T2) for mission control, and the third CPU module (110c) can each download a third operating system (T3) for signal processing.

[0068] Afterwards, multiple CPU modules (110) can operate using an operating system and each can perform assigned tasks (S103).

[0069] In the process of multiple CPU modules (110) performing a task, the monitoring unit (133) of the storage module (130) receives operational data transmitted from the multiple CPU modules (110) and can monitor or monitor the operating status of the multiple CPU modules (110) based on previously stored reference data. For example, the monitoring unit (133) can read the signal value of specific data included in the operational data based on the reference data.

[0070] Based on the reading result, if the monitoring unit (133) determines (S105) that there is abnormal operating data among the operating data, it can detect the CPU module that generated or transmitted the abnormal operating data and designate the CPU module as an abnormal CPU module. Additionally, the monitoring unit (133) can transmit the monitoring result to the control unit (134).

[0071] When the abnormal CPU module is determined in this manner, the control unit (134) can stop the operation of the abnormal CPU module and control the operation of the common CPU module (120), the common data transmission / reception unit (131), and the common storage unit (132) so that the common CPU module (120) can download an operating system identical to the operating system of the abnormal CPU module. That is, when the abnormal CPU module is determined, the common CPU module (120) can download an operating system identical to the operating system of the abnormal CPU module (S106). For example, as shown in FIG. 8 (a), when the first CPU module (110a) is determined as the abnormal CPU module, the common CPU module (120) can download the operating system of the first CPU module (110a), i.e., the first operating system (T1). Alternatively, as shown in FIG. 8 (b), if the third CPU module (110c) is designated as an ideal CPU module, the common CPU module (120) can download the operating system of the third CPU module (110c), i.e., the third operating system (T3).

[0072] When the common CPU module (120) downloads an operating system identical to the operating system of the ideal CPU module, stores the operating system in the storage unit, and the stored operating system is installed in the common CPU module (120), the common CPU module (120) can operate and perform the task that the ideal CPU module was performing (S107). At this time, the operating data generated in the common CPU module (120) can be transmitted to and stored in the storage module (130).

[0073] On the other hand, if no abnormal CPU module occurs, the monitoring unit (133) can continuously monitor (S104) the operating status of multiple CPU modules (110).

[0074] Afterwards, the monitoring unit (133) monitors whether the abnormal CPU module has been replaced with a normal CPU module (S108) and can transmit the monitoring result to the control unit (134).

[0075] When the control unit (134) determines that the abnormal CPU module has been replaced with a normal CPU module, it may stop the operation of the common CPU module (120) and control the normal CPU module to perform the duties of the abnormal CPU module (S109). At this time, the control unit (134) may control the normal CPU module to download and store an operating system identical to the operating system of the abnormal CPU module. Additionally, the control unit (134) may control the operation of the common storage unit (132) and the common data transmission / reception unit (131) to transmit the operation data generated in the common CPU module (120) and transmitted to the storage module (130) to the normal CPU module.

[0076] Meanwhile, if the control device further includes an integrated CPU module (140), the control device can be operated as follows.

[0077] As illustrated in FIG. 9(a), when the first CPU module (110a) is determined to be an abnormal CPU module, the control unit (134) can stop the operation of the abnormal CPU module and control the integrated CPU module (140) to select an operating system identical to the operating system of the abnormal CPU module from among the operating systems stored in the integrated storage unit (112), and to operate with the selected operating system to perform a mission. The integrated CPU module (140) can transmit operational data generated during mission execution to the storage module (130). Additionally, the storage module (130) can transmit the operational data of the integrated CPU module (140) to the common CPU module (120).

[0078] Additionally, as illustrated in FIG. 9(b), the control unit (134) can control the operation of the integrated CPU module (140) so that the integrated CPU module (140) can perform a mission until the common CPU module (120) is ready to operate or is ready to perform a mission. That is, the control unit (134) can control the operation of the integrated CPU module (140) to prevent the mission from being interrupted during the time the common CPU module (120) is preparing to perform a mission.

[0079] Afterwards, when the common CPU module (120) is ready to perform its mission, the operation of the integrated CPU module (140) is stopped and the common CPU module (120) is operated so that the mission previously performed by the abnormal CPU module can be performed continuously.

[0081] In the foregoing, preferred embodiments of the present invention have been described and illustrated using specific terms, but such terms are intended solely to clarify the present invention, and it is obvious that various modifications and changes may be made to the embodiments and described terms of the present invention without departing from the technical spirit and scope of the following claims. Such modified embodiments should not be understood separately from the spirit and scope of the present invention, but should be considered to fall within the scope of the claims of the present invention. Explanation of the symbols

[0082] 110: CPU Module 120: Common CPU Module 130: Storage Module 140: Integrated CPU Module 150: Bus line

Claims

Claim 1 A storage module capable of storing operating systems for operating CPU modules; a plurality of CPU modules capable of operating by downloading one operating system from the storage module; and a common CPU module capable of operating by downloading an operating system identical to the operating system downloaded to a non-operating CPU module among the plurality of CPU modules from the storage module; wherein the storage module comprises: a common storage unit capable of storing the operating systems; a common data transmission / reception unit capable of transmitting and receiving data with the plurality of CPU modules and the common CPU module; and a monitoring unit capable of monitoring the operating status of the plurality of CPU modules. A control unit capable of controlling the transmission of an operating system to a common CPU module according to the operating status of the plurality of CPU modules; wherein the common storage unit can store operating data capable of operating the plurality of CPU modules and operating data generated from the plurality of CPU modules, and the monitoring unit can designate the CPU module that generated the abnormal operating data among the plurality of CPU modules as the abnormal CPU module if it is determined that abnormal operating data has occurred, and the control unit can control the common CPU module to download together an operating system identical to the operating system of the abnormal CPU module and the operating data of the abnormal CPU module from the common storage unit. Claim 2 delete Claim 3 A control device according to claim 1, wherein the common data transmission / reception unit can receive operation data generated when the plurality of CPU modules operate, and the common storage unit can classify and store the received operation data by CPU module. Claim 4 In claim 1, the control unit is a control device capable of transmitting to the common CPU module an operating system identical to the operating system of the abnormal CPU module and operating data of the abnormal CPU module together. Claim 5 In claim 3, the monitoring unit is a control device capable of determining the operating status of the CPU modules by analyzing the operating data of the plurality of CPU modules. Claim 6 In any one of claims 1, 3 to 5, the plurality of CPU modules is equal to the number of operating systems, and the common CPU module is a control device with fewer than the number of operating systems. Claim 7 A control device according to claim 6, wherein the plurality of CPU modules is three or more and the common CPU module is one. Claim 8 A control device according to any one of claims 3 to 5, wherein the storage module and the common CPU module are formed as a single integrated module, and the common CPU module is capable of selecting and operating an operating system identical to the operating system of the above CPU module among the operating systems stored in the storage module. Claim 9 A control device according to any one of claims 3 to 5, further comprising an integrated CPU module capable of storing all operating systems for operating the plurality of CPU modules and selecting and operating an operating system identical to the operating system of the abnormal CPU module among the stored operating systems, wherein the control unit is capable of controlling the integrated CPU module to operate from the time the abnormal CPU module occurs until the common CPU module downloads the operating system and is ready for operation. Claim 10 A control device according to claim 9, comprising a bus line connecting the plurality of CPU modules, the storage module, the common CPU module, and the integrated CPU module to each other, wherein at least the plurality of CPU modules are detachably connected to the bus line. Claim 11 A method for operating a control device comprising: a process of providing a control device in which CPU modules capable of operating using the operating systems and a common CPU module are connected to a storage module in which a plurality of operating systems are stored; and a process of operating the CPU modules; wherein the process of operating the CPU modules includes a process of monitoring the operating status of the plurality of CPU modules, and the monitoring process includes a process in which the storage module receives and stores respective operating data from the CPU modules; and a process of determining whether there is an abnormality in the operating data based on predetermined reference data; and if it is determined that abnormal operating data has occurred, a process of designating the CPU module that generated the abnormal operating data among the CPU modules as the abnormal CPU module; and a process in which the common CPU module downloads together an operating system identical to the operating system of the abnormal CPU module and the operating data of the abnormal CPU module from the storage module. Claim 12 In claim 11, the process of providing the control device comprises a method of operating the control device including the process of connecting a number of CPU modules equal to the number of operating systems to the storage module. Claim 13 A method of operating a control device according to claim 12, wherein the process of providing the control device comprises connecting a number of common CPU modules less than the number of CPU modules to the storage module. Claim 14 delete Claim 15 delete Claim 16 delete Claim 17 A method for operating a control device according to claim 11, wherein the monitoring process comprises: a process of transmitting operation data of the common CPU module to the storage module; and a process in which the storage module stores the operation data of the common CPU module. Claim 18 In claim 11, the monitoring process is a method of operating a control device in which, when the abnormal CPU module is replaced with a normal CPU module and ready to perform a task by downloading an operating system identical to the operating system of the abnormal CPU module from the storage module, the common CPU module stops operating and the normal CPU module operates. Claim 19 A method for operating a control device according to claim 18, further comprising the process of providing an integrated CPU module capable of storing all operating systems for operating a plurality of CPU modules and selecting and operating one of the stored operating systems, wherein the monitoring process comprises the process of operating the integrated CPU module using an operating system identical to the operating system of the above CPU module among the stored operating systems while the common CPU module is preparing for operation. Claim 20 A method of operating a control device according to claim 19, wherein the monitoring process comprises: a process in which the integrated CPU module transmits operation data to the storage module; and a process in which the storage module transmits the operation data of the integrated CPU module to the common CPU module and the normal CPU module.

Images