Facility Control System Second-Layer Computer Substitution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Facility control systems face inefficiencies and increased costs due to the potential for split-brain syndrome and the need for additional standby computers when abnormal conditions occur in first-layer computers, leading to interrupted operations and higher costs.
Innovation Solution
A facility control system with a selection processing portion that allows manual selection of whether the second-layer computer should execute the first-layer program, enabling the second-layer computer to substitute for the first-layer computer in case of an abnormality, thus preventing unnecessary system interruptions and reducing costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a standby computer is provided to take over the first-layer program when an abnormal condition occurs, then the operation continuity is improved, but the device complexity and cost increase
Solution Approach 1:
The second-layer computer is designed to perform multiple functions: its original second-layer program execution and the first-layer program execution when needed. By making the second-layer computer universal, the system eliminates the need for a dedicated standby computer, reducing device complexity while maintaining operation continuity through automatic program switching upon abnormal conditions
Solution Approach 2:
The invention merges the standby function into the existing second-layer computer structure. Instead of having separate standby hardware, the second-layer computer is configured to execute either its original program or the first-layer program based on operational needs, combining multiple functions into a single computational resource
2Reliability
If the second-layer computer automatically executes the first-layer program when an abnormal condition occurs, then the operation continuity is improved, but the risk of split-brain syndrome increases
Solution Approach 1:
The system implements a feedback mechanism where the monitoring program continuously detects abnormal conditions and provides information about system state to the service switching program. This feedback loop enables informed decision-making about program switching, allowing the system to distinguish between genuine abnormalities requiring takeover and transient issues, thereby preventing split-brain syndrome while maintaining continuity
Solution Approach 2:
The monitoring program operates in advance to detect abnormal conditions before they cause system failure. By preliminarily identifying issues and triggering appropriate responses, the system can smoothly transition programs based on validated abnormal conditions rather than reacting to symptoms, reducing the risk of erroneous takeover decisions
3Reliability
If additional monitoring and switching programs are added, then the system reliability is improved, but the device complexity increases
Solution Approach 1:
The monitoring program and service switching program are integrated into the existing computer system, allowing it to monitor itself and automatically switch programs without external intervention. This self-service capability adds reliability through continuous monitoring and automatic recovery while minimizing added complexity by using internal resources rather than external standby systems
Data Source
AI summary
A facility control system comprises a selection processing portion that selects, based on a manual operation and when an abnormal condition occurs in a first-layer computer that executes a first-layer program which issues an apparatus operating command to an apparatus controller, whether to cause a second-layer computer to execute the first-layer program that had been executed by the first-layer computer, and a substitute command output processing portion which outputs a substitute command in accordance with selection information selected by the selection processing portion. The second-layer computer executes the first-layer program that had been executed by the first-layer computer in which the abnormal condition occurred based on a substitute command outputted by the substitute command output processing portion.