JP2018173918A - Connection destination determining apparatus, connection destination determining method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a connection destination determining apparatus, a connection destination determining method, and a program that can dynamically change allocation of a computer to a device in accordance with a damage to a facility and improve the continuous operation performance of the device.SOLUTION: A connection destination determining apparatus 20 that determines, from among a plurality of devices 10 provided in a facility, a device 10 to which a plurality of computers 20 provided in different areas in the facility are to be connected includes a determining unit 254 that determines the device 10 to which each of the plurality of computers 20 is to be connected, based on the damage to the facility.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a connection destination determination device, a connection destination determination method, and a program.

In the computer system mounted on the ship, each of the plurality of subsystems has a dedicated computer. In addition, each of the plurality of subsystems further includes a backup computer as a calculation load on the subsystem depending on the operating state of the ship or in preparation for a computer failure. The conventional computer system is configured to have a plurality of computers for each subsystem as described above, and this is a factor that increases the number of computers and the cost of the entire computer system.
For this reason, in recent years, a computer system capable of sharing a plurality of computers by a plurality of subsystems has been demanded. For example, Patent Document 1 discloses a system in which a management server changes assignment of computers according to a load state for each subsystem as a system that shares computers among a plurality of subsystems.

JP 2003-124976 A

However, in the conventional system, damage to the computer due to a failure such as a fire is not considered. For this reason, when there is a possibility that a computer assigned to a certain subsystem may become unusable due to a failure, or when it becomes unusable, it is difficult to assign another computer to the subsystem.
In addition, when the management server becomes inoperable due to a failure such as a failure or a fire, the computer assignment cannot be changed in the conventional system.
Then, there is a possibility that a subsystem under a high load state or a subsystem damaged by a computer may not operate normally due to insufficient resources.

  The present invention has been made in view of such problems, and a connection destination that can dynamically change the assignment of a computer to a device according to the damage received by the equipment and improve the continuous operation performance of the device. A determination device, a connection destination determination method, and a program are provided.

In order to solve the above problems, the present invention employs the following means.
According to the first aspect of the present invention, there is provided a connection destination determination device for determining a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility. And a determining unit that determines the connection destination device of each of the plurality of computers based on the damage received by the facility.
By doing in this way, the connection destination determination device is a device that is in a high load state due to the damage if the facility is damaged due to a failure such as a fire or the facility is likely to be damaged. Alternatively, another computer can be assigned to an apparatus that is difficult to continue to operate due to a computer failure. As a result, the connection destination determination device can improve the continuous operation performance of each of the plurality of devices.

According to the second aspect of the present invention, the connection destination determination device according to the first aspect further includes a priority determination unit that determines the priority of the device based on the possibility of damage to the facility. . The determining unit determines the device to which each of the plurality of computers is connected based on the priority.
For example, when there is a possibility of damage to equipment, the priority determination unit sets the priority of a device that is in a high load state in order to execute a function to avoid or reduce damage over the priority of other devices. Make it high. In this way, the decision unit can prioritize the assignment of computers to higher priority devices, so that devices that become heavily loaded based on the possibility of damage operate normally due to lack of resources. It is possible to suppress the failure.

According to the third aspect of the present invention, the connection destination determination device according to the first or second aspect includes a damage status specifying unit for specifying the status of damage received in the area where the computer is provided, and the damage And a rank determining unit that determines a provision rank indicating the rank of the apparatus that provides the computer based on the situation. The determination unit performs the determination based on the provision order determined by the rank determination unit.
By doing in this way, the determination part can determine the apparatus which becomes a connection destination of each computer according to the condition of damage. As a result, the connection destination determination device can prevent another device from operating normally due to a shortage of resources by assigning another computer to the device damaged by the computer.

According to the fourth aspect of the present invention, in the connection destination determination device according to the third aspect, the provision order is higher as the damage is smaller.
By doing in this way, the determination part can change assignment of a computer from the apparatus with a high provision order, ie, the apparatus with little damage and sufficient resources, to another apparatus. As a result, it is possible to prevent the apparatus serving as a computer provider from becoming unable to operate normally due to a lack of resources.

  According to the fifth aspect of the present invention, there is provided a connection destination determination method for determining a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility. And a determination step of determining the connection destination device of each of the plurality of computers based on the damage received by the facility.

  According to the sixth aspect of the present invention, the program determines a connection destination for determining a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility. The determination device is caused to execute a determination step of determining the device to which each of the plurality of computers is connected based on the damage received by the facility.

  According to the connection destination determination device, the connection destination determination method, and the program according to the present invention, it is possible to dynamically change the computer assignment to the device according to the damage received by the equipment, and to improve the continuous operation performance of the device. .

It is a figure which shows the outline | summary of the computer system which concerns on one Embodiment of this invention. It is a figure which shows the function structure of the computer which concerns on one Embodiment of this invention. It is a flow which shows the example of a process of the computer system which concerns on one Embodiment of this invention. It is a figure for demonstrating the function of the computer system which concerns on one Embodiment of this invention. It is a figure which shows the example of the hardware constitutions of the computer which concerns on one Embodiment of this invention.

  Hereinafter, a computer system 100 according to an embodiment of the present invention will be described with reference to FIGS.

(Overall configuration of computer system)
FIG. 1 is a diagram showing an outline of a computer system according to an embodiment of the present invention.
In the present embodiment, the computer system 100 is a system for controlling various devices (subsystems) provided in the facility. In the present embodiment, an example in which the facility is a ship will be described.
As shown in FIG. 1, a computer system 100 includes a computer network 2 including a plurality of subsystems 10 (10A, 10B, 10C,...) And a plurality of computers 20 (20A, 20B, 20C, 20D,...) And a changeover switch 30.

  The subsystem 10 is a device (or a device group composed of a plurality of devices) that is provided in a ship and executes various functions in the ship.

The computers 20 are provided in different areas in the ship, and are connected to another computer 20 belonging to the computer network 2 and any one of the plurality of subsystems 10 via the network NW so that they can communicate with each other.
The computer 20 switches the switch 30 (A) and the switch to the network NW (A) and the network NW (B) that exist independently according to the nature of information to be handled (constraints on the amount of information that can be transmitted and received and restrictions on information maintenance). Connection is made via a switch (B).
Further, the computer 20 connects the connected subsystem 10 from the one connected to the network NW (A) to the network (B) or the network NW (B) based on the instruction of the resource management unit 25. When changing from existing one to one connected to the network (A), the changeover switch to which the computer 20 is connected is changed from the changeover switch 30 (A) to the changeover switch 30 (B) or the changeover switch 30 (B). To changeover switch 30 (A).
The computer 20 executes various processes for executing the function of the connection destination subsystem 10 and also functions as a connection destination determination device that determines the subsystem 10 that is the connection destination of each of the plurality of computers 20.
In the present embodiment, a plurality of computers 20 may be assigned to one subsystem 10. Further, for example, when two computers 20A and 20B are allocated to the subsystem 10A, the subsystem 10A may cause both computers 20A and 20B to execute various processes, or perform processing using one of them as a backup. You may make it wait in the state which started the application for.

The changeover switch 30 is, for example, a switching hub, and switches the subsystem 10 that is a connection destination of each of the plurality of computers 20 based on an instruction from the computer 20.
Specifically, the changeover switch 30 constitutes a VLAN (Virtual Local Area Network) for each subsystem 10 and is set to a port P (P1, P2, P3, P4,...) To which each of the computers 20 is connected. Is switched so that the connection destination of the computer 20 can be switched.
For example, the changeover switch 30 (A) includes a VLAN 31 used for communication with the subsystem 10A, a VLAN 32 used for communication with the subsystem 10B, and an RM VLAN 33 (Resource used for communication when changing the connection destination). Management VLAN). When the connection destination of the computer 20A is the subsystem 10A, the changeover switch 30 sets the VLAN 31 to the port P1 to which the computer 20A is connected. Further, when the connection switch of the computer 20A is switched to the subsystem 10B, the changeover switch 30 sets the VLAN 32 to the port P1 to which the computer 20A is connected. Note that the RM VLAN 33 is set for all the ports P, and a command for switching the connection destination is transmitted and received using the RM VLAN 33. Similarly, the changeover switch 30 (B) configures a VLAN 34 used for communication with the subsystem 10C and an RM VLAN 35 used for communication related to resource management processing.

The computer system 100 may further include a detection system 40 (detection system 40 (A), detection system 40 (B)) as shown in FIG.
The detection system 40 is, for example, a radar and a sensor for detecting the approach of other ships, obstacles, and flying objects, a fire in the ship (the area where the computer 20 is installed), and the damage status. It has equipment such as sensors and monitoring tools for detecting cyber attacks.
The detection system 40 transmits a detection signal detected by each device to the computer 20.

(Functional structure of the computer)
FIG. 2 is a diagram showing a functional configuration of a computer according to an embodiment of the present invention.
Hereinafter, the functional configuration of the computer 20 according to the present embodiment will be described with reference to FIG.
As shown in FIG. 2, each of the plurality of computers 20 includes a communication unit 21, a storage unit 22, and a resource management unit 25.

The communication unit 21 communicates with the subsystem 10 and other computers 20 via the network NW.
The communication unit 21 transmits and receives various information, commands, and the like for realizing the functions of the subsystem 10 to and from the subsystem 10 that is the connection destination.
In addition, the communication unit 21 transmits and receives various information, commands, and the like related to the assignment change of the computer 20 with another computer 20.

  The storage unit 22 stores in advance applications for realizing the functions of the plurality of subsystems 10.

The resource management unit 25 dynamically changes the assignment of the computers 20 to each of the subsystems 10 according to the load and failure of the subsystems 10 including the computers 20 assigned to the subsystems 10.
The resource management unit 25 includes a priority determination unit 251, a damage status identification unit 252, a rank determination unit 253, a determination unit 254, and a resource request unit 255.

The priority determination unit 251 determines the priority of the subsystem 10 based on the possibility of damage to the ship.
The priority is an index indicating to which subsystem 10 the resource (computer 20) is preferentially assigned.
The priority determination unit 251 determines whether the ship has a threat (possibility of being damaged) based on the detection signal notified from the detection system 40. If there is a threat, for example, avoid the threat. Alternatively, the priority of the subsystem 10 that executes the process for reducing is set higher than the priority of the other subsystems 10.

The damage status specifying unit 252 specifies the status of damage received in the area where the computer 20 is provided.
Specifically, based on the detection signal notified from the detection system 40, the damage status specifying unit 252 is unable to continue the operation of the computer 20 due to the damage status received in the area where each of the computers 20 is provided. If there is a possibility that it is difficult to continue the operation of the computer 20 in the future, it is identified as “damaged”. Further, the damage status specifying unit 252 specifies “no damage” when the computer 20 can maintain the continuous operation.

The order determination unit 253 determines the provision order of each subsystem 10 based on the damage situation (the actual damage situation) identified by the damage situation identification unit 252.
The provision order is an index indicating to which subsystem 10 the resource is preferentially provided (the computer 20 is allocated to another subsystem 10). The order determination unit 253 sets the provision order of the subsystems 10 having sufficient resources so that each subsystem 10 can continue to operate. For example, the subsystem 10 having sufficient resources includes the subsystem 10 to which a plurality of computers 20 are allocated (there is a backup computer 20), and the subsystem 10 to which an unaffected computer 20 is allocated. It is.

The determination unit 254 determines the subsystem 10 to which each of the plurality of computers 20 is connected based on the damage received by the ship.
Specifically, the determination unit 254 provides the priority determined based on the priority determined by the priority determination unit 251 based on the possibility of damage to the ship and the damage actually received by the rank determination unit 253 Based on the ranking, the subsystem 10 to be connected to each computer 20 is determined.

  It becomes difficult for the resource request unit 255 to continuously use the computer 20 assigned to the subsystem 10 when the processing load requested from the subsystem 10 becomes high or when a failure occurs. If a resource request is issued, a resource request for requesting allocation of the resource (computer 20) is output.

(Processing flow of computer system)
FIG. 3 is a flow showing an example of processing of the computer system according to an embodiment of the present invention.
FIG. 4 is a diagram for explaining functions of a computer according to an embodiment of the present invention.
Hereinafter, an example of resource allocation processing in the computer system 100 according to the present embodiment will be described with reference to FIGS. 3 and 4.
Note that the following processing is executed in any one of the plurality of computers 20.

As shown in FIG. 3, first, the priority determination unit 251 of the computer 20 determines the priority of each subsystem 10 based on the possibility of damage to the ship (step S100).
Specifically, the priority determination unit 251 determines whether the ship has a threat (possibility of being damaged) based on the detection signal notified from the detection system 40. Then, when there is a threat in the ship, the priority determination unit 251 determines the priority of the subsystem 10 that is in a high load state in order to execute a function for avoiding or reducing the threat, for example. Set higher than priority.
As shown in FIG. 4, the computer system 100 is assumed to have subsystems 10A, 10B, 10C, 10D,. In the example shown in FIG. 4, it is assumed that the subsystem 10D is a navigation system. When the priority determination unit 251 determines that there is a possibility that the ship may collide with a threat, for example, an obstacle, based on the detection signal, the subsystem 10D executes a function for avoiding or reducing damage caused by the obstacle. The (navigation system) priority is set higher than the other subsystems 10A, 10B, 10C. In the example of FIG. 4, the priority is higher as the value is smaller, and the priority “1” set in the subsystem 10D indicates the highest priority. That is, when the ship has a threat, the priority determination unit 251 determines the priority (threat priority) based on the threat.
In addition, when there are a plurality of threats, the priority determination unit 251 sets the priority of which subsystem 10 to be high (or low) based on the time until damage calculated based on the detection signal occurs. You may make it judge whether to do.
Furthermore, when there is no threat to the ship, the priority determination unit 251 may set a predetermined priority (duty priority) in accordance with the operation state such as navigation of the ship or berthing. The priority determination unit 251 may overwrite the mission priority with the threat priority when the ship has a threat, or may obtain the priority by weighted averaging the mission priority and the threat priority.

Next, as shown in FIG. 3, the damage status specifying unit 252 of the computer 20 specifies the status of damage received in the area where the computer 20 is provided (step S101).
For example, it is assumed that damage such as a fire has occurred in an area where each of the computers 20A, 20B, and 20C is provided. Based on the detection signal notified from the detection system 40, the damage status specifying unit 252 determines that the continuous operation of the computers 20A, 20B, and 20C may be difficult due to damage. At this time, as shown in FIG. 4, the damage status specifying unit 252 specifies the damage status of the subsystems 10A and 10B to which the computers 20A, 20B, and 20C are connected as “damaged”.
Further, the damage status specifying unit 252 is a connection destination of the computers 20D, 20E, 20F,... When the areas where the other computers 20D, 20E, 20F,. The damage status of the subsystems 10C, 10D,... Is specified as “no damage”.

Next, as shown in FIG. 3, the rank determination unit 253 of the computer 20 provides each of the subsystems 10 based on the damage situation (the actual damage situation) identified by the damage situation identification unit 252. Is determined (step S102). At this time, the order determination unit 253 determines the provision order so that the possibility of degeneration of each subsystem 10 is minimized.
For example, as shown in FIG. 4, it is assumed that the computer 20A is assigned to the subsystem 10A, and the damage status of the subsystem 10A (the area where the computer 20A is provided) is “damaged”. . In this case, since the backup computer 20 is not assigned to the subsystem 10A, that is, is not made redundant, if the computer 20A cannot be used, the subsystem 10A must be degenerated. Therefore, the order determination unit 253 sets the provision order of the subsystem 10A low in order to minimize the possibility of degenerating the subsystem 10A.
On the other hand, the computer 20E and the backup computer 20F are allocated to the subsystem 10D, and the damage status of the subsystem 10D (the damage status of the area where the computers 20E and 20F are installed) is “no damage”. And In this case, the subsystem 10D is made redundant, and even if one of the computers 20E and 20F is assigned to the other subsystem 10, the function of the subsystem 10D can be maintained on the other side. Accordingly, the order determining unit 253 determines that the resource can be provided from the subsystem 10D, and sets the provision order of the subsystem 10D high. In the example of FIG. 4, the provision order is higher as the value is smaller, and “1” set in the subsystem 10D indicates the highest provision order.
Further, although the subsystem 10B is made redundant, the damage status is “damaged”, and therefore the subsystem 10B has to be degenerated when the damage is enlarged and the computers 20B and 20C cannot be used. On the other hand, the subsystem 10C is not made redundant, but has a lower priority than the subsystem 10B, and the damage status of the computer 20D is “no damage”. In this case, in addition to minimizing the possibility of degeneration of the subsystem 10B having a low priority, the order determination unit 253 maintains the resource request source system after the computer resource allocation is changed. The provision order of the system 10B is set lower than that of the subsystem 10C.
As described above, the order determination unit 253 determines the provision order based on the damage situation and the allocation state (whether or not redundancy is made) of the computers 20 for each subsystem 10. In the present embodiment, the order determination unit 253 determines the provision order by placing importance on the damage situation rather than the assignment state. However, in other embodiments, the provision order placing importance on the assignment state rather than the damage situation. May be determined.

Next, as illustrated in FIG. 3, the determining unit 254 determines whether a resource (computer 20) request is output from another computer 20 (step S103).
If no resource request is output from another computer 20 (step S103: NO), the determination unit 254 returns to the top of the process.
On the other hand, for example, when a resource allocation request for the subsystem 10A is output from the computer 20A allocated to the subsystem 10A (step S103: YES), the determination unit 254 provides the resource provider based on the provision order. Is selected, and a computer 20 to be newly assigned to the request source (subsystem 10A) is determined (step S104).
For example, in the example of FIG. 4, the determination unit 254 selects the subsystem 10D having the highest provision order as the providing source among the subsystems 10 excluding the requesting subsystem 10A. Then, the determination unit 254 allocates one of the computers 20E and 20F (for example, the computer 20F) of the subsystem 10D that is the provider to the subsystem 10A. In addition, the determination unit 254 issues an instruction to set the VLAN for the subsystem 10A to the port P to which the computer 20F of the changeover switch 30 is connected so that the computer 20F whose assignment is changed is connected to the subsystem 10A. Output.
When the computer 20 completes step S104, the computer 20 returns to the top of the process, and repeatedly executes the above-described steps S100 to S104.

(Hardware configuration of the computer)
FIG. 5 is a diagram illustrating an example of a hardware configuration of a computer according to an embodiment of the present invention.
Hereinafter, the hardware configuration of the computer 20 according to the present embodiment will be described with reference to FIG.

The computer 900 includes a CPU 901, a main storage device 902, an auxiliary storage device 903, an input / output interface 904, and a communication interface 905.
The plurality of computers 20 described above are mounted on different computers 900, respectively. The operation of each unit of the computer 20 described above is stored in the auxiliary storage device 903 of each computer 900 in the form of a program. The CPU 901 reads a program from the auxiliary storage device 903, develops it in the main storage device 902, and executes the above processing according to the program. That is, the CPU 901 also functions as the resource management unit 25 of the computer 20 described above. Further, the CPU 901 secures a storage area (storage unit 22) in the main storage device 902 for storing various types of information acquired and generated with the processing according to the program.
The computer 900 may be connected to the external storage devices 910 and 920 via the input / output interface 904 and the communication interface 905, and the storage area may be secured in the external storage devices 910 and 920.

In at least one embodiment, the auxiliary storage device 903 is an example of a tangible medium that is not temporary. Other examples of the tangible medium that is not temporary include a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, and a semiconductor memory connected via the input / output interface 904. When this program is distributed to the computer 900 via a communication line, the computer 900 that has received the distribution may develop the program in the main storage device 902 and execute the above processing.
The program may be for realizing a part of the functions described above. Further, the program may be a so-called difference file (difference program) that realizes the above-described function in combination with another program already stored in the auxiliary storage device 903.

(Function and effect)
As described above, the computer (connection destination determination device) 20 according to the present embodiment connects the plurality of computers 20 provided in different areas in the ship among the plurality of subsystems 10 provided in the ship. The computer 20 that determines the previous subsystem 10 includes a determination unit 254 that determines the subsystem 10 to which each of the plurality of computers 20 is connected based on the damage received by the ship.
By doing so, the computer 20 causes the subsystem 10 to be in a high load state due to the damage when the ship is damaged due to a failure such as a fire or the ship is likely to be damaged. Alternatively, another computer 20 can be assigned to the subsystem 10 in which the computer 20 fails and the continuous operation becomes difficult. Thereby, the computer 20 can improve the continuous operation performance of each of the plurality of subsystems 10.
Further, since different subsystems 10 can share the computer 20, it is not necessary to prepare a backup computer 20 for each subsystem 10. For this reason, the number of computers 20 in the entire computer system 100 can be reduced, and the cost for system construction can be reduced.

The computer 20 further includes a priority determination unit 251 that determines the priority of the subsystem 10 based on the threat to the ship (possibility of damage to the ship). The determining unit 254 determines the subsystem 10 to which each of the plurality of computers 20 is connected based on the priority.
For example, when there is a possibility of damage to the ship, the priority determination unit 251 determines the priority of the subsystem 10 that is in a high load state in order to execute the function of avoiding or reducing the damage to the other subsystem 10. Higher than the priority of. By doing in this way, the determination unit 254 can preferentially assign the computer 20 to the subsystem 10 with a high priority, so that the subsystem 10 that is in a high load state in order to counter the threat, It can be prevented that the system does not operate normally due to lack of resources.

Further, the computer 20 provides a damage status specifying unit 252 for specifying the status of damage received in the area where the computer 20 is provided, and the order indicating the order of the subsystem 10 that provides the computer 20 based on the status of the damage. A rank determining unit 253 that determines the rank; The determining unit 254 determines the subsystem 10 to which each of the plurality of computers 20 is connected based on the provision order determined by the order determining unit 253.
By doing in this way, the determination part 254 can determine the subsystem 10 which becomes each connection destination of the computer 20 according to the condition of damage. As a result, by assigning another computer 20 to the subsystem 10 that has been damaged by the computer 20, the computer 20 can suppress the subsystem 10 from operating normally due to a shortage of resources.

The resource provision order is set higher as the damage in the area where the resource (computer 20) is provided is smaller.
By doing in this way, the determination unit 254 can change the allocation of the computers 20 from the subsystem 10 with a high provision order, that is, the subsystem 10 with less damage and sufficient resources, to another subsystem 10. it can. Thereby, it can suppress that the subsystem 10 used as the provider of the computer 20 does not operate normally due to lack of resources.

In this embodiment, each of the plurality of computers 20 has the resource management unit 25 described above, and any one of the computers 20 executes resource allocation processing in the computer system 100.
By doing in this way, even if one computer 20 is damaged, for example, the resource allocation process can be executed in another computer 20. As a result, even if any area of the ship is damaged, the resource allocation process can be executed to reduce the possibility that each of the subsystems 10 will not operate normally.

The embodiment of the present invention has been described in detail above. However, the constituent elements in the above-described embodiment can be appropriately replaced with known constituent elements without departing from the technical idea of the present invention. The technical scope of the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the spirit of the present invention.
For example, in the above-described embodiment, the mode in which the rank determining unit 253 determines the resource providing rank based on the damage status and the allocation state (whether or not redundancy is provided) has been described, but the present invention is not limited to this. In another embodiment, the order determination unit 253 may determine the provision order based on the priority determined by the priority determination unit 251 in addition to the damage status and the allocation state. For example, when there are a plurality of subsystems 10 that are “no damage” and redundant, the provision order of the subsystems 10 having a lower priority may be set higher. In addition, the order determination unit 253 may change the provision order based on the damage situation and the assignment state after setting the provision order in the order of priority.

10 Subsystem (device)
100 Computer system 20 Computer (connection destination determination device)
21 Communication Unit 22 Storage Unit 25 Resource Management Unit 251 Priority Determination Unit 252 Damage Status Identification Unit 253 Order Determination Unit 254 Determination Unit 255 Resource Request Unit 30 Changeover Switch 40 Detection System

Claims (6)

A connection destination determination device that determines a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility,
A connection destination determination device comprising: a determination unit that determines a device to which each of the plurality of computers is connected based on damage received by the facility. A priority determining unit that determines the priority of the device based on the possibility of damage to the facility;
The connection destination determination device according to claim 1, wherein the determination unit determines the connection destination device of each of the plurality of computers based on the priority. A damage status identification unit for identifying the status of damage received in the area where the computer is installed;
A rank determining unit that determines a provision rank indicating a rank of the apparatus that provides the computer based on the damage status; and
The connection destination determination device according to claim 1, wherein the determination unit performs the determination based on the provision order determined by the rank determination unit. The connection destination determination device according to claim 3, wherein the provision order is higher as the damage is smaller. A connection destination determination method for determining a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility,
A connection destination determination method comprising: a determination step of determining the connection destination device of each of the plurality of computers based on damage received by the facility. A connection destination determination device that determines a connection destination device of a plurality of computers provided in different areas in the facility from a plurality of devices provided in the facility,
A program for executing a determination step of determining a device to which each of the plurality of computers is connected based on damage received by the facility.

Images