JP2005108202A - Data updating system, data updating device and external storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To arbitrarily restrict the frequency allowing data updating at the distribution origin of data for updating when the data is updated by distributing the data for updating stored in a portable storage medium. <P>SOLUTION: The upper limit number allowing data updating and the frequency of updating the data are stored in an updating frequency data storing section 112 in the external storage medium 103, and on the basis of these updating frequency data, an updating allowance determining section 110 determines the presence of data updating allowance at a terminal 102. When updating is allowed, the data for updating is provided to an updating data reading section 109 in the terminal 102, the data is updated using the data for updating by a post-updating data recovery section 107 of the terminal 102, and the updated data is stored in a terminal data storing section 104. When the data is updated, the updating frequency data is updated by an updating frequency updating section 111. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data update system for updating data such as a program in an electronic device, a data update device, and an external storage medium.

  For update to portable storage media such as flexible disks, CD-ROMs, DVD-ROMs, IC chips, etc. for the purpose of correcting program defects and adding functions in electronic devices such as personal computers and portable communication terminals Data update methods for performing desired update operations by storing data and causing the electronic device to read the update data are widely used in general.

  FIG. 17 shows a configuration example of a conventional data update system. In this conventional example, update data is stored in the update data storage unit 1210 in the external storage medium 1202, and the terminal 1201 reads the update data under the control of the control unit 1208. Reading through the unit 1205. Then, the terminal 1201 reads the pre-update data stored in the in-terminal data storage unit 1203 via the in-terminal data read / write unit 1207, and the pre-update data and the update data read from the external storage medium 1202 Thus, the updated data restoring unit 1204 restores the updated data, and the restored updated data is stored in the in-terminal data storage unit 1203 via the in-terminal data read / write unit 1207.

  As a technique for restoring post-update data from pre-update data and update data, for example, there is a data update method as disclosed in JP-A-8-255104 (Patent Document 1). In this data update method, data for update is transferred through a communication path such as a network to perform data update. The transmission side device compares the data before update with the data after update and extracts the difference. Then, only the difference data is transferred as update data, and the terminal device on the receiving side restores the updated data from the pre-update data and the transferred difference data in the device, and updates the data. A simple procedure is used.

  In the example of Patent Document 1, a series of COPY instructions for instructing a specified series of characters to be copied to a file being configured and an ADD instruction for instructing addition of a series of characters in update difference data. By creating these instructions, it is possible to restore the updated data by executing these two kinds of instructions, and to reduce the amount of difference data to be transferred.

  The data update method as shown in FIG. 17 is used when a software manufacturer or the like that supplies an operation program for an electronic device wants to update data without collecting the electronic device at hand. . Since collecting the electronic device is very expensive, it is possible to reduce the collection cost and improve user convenience by distributing the storage medium storing the update data and enabling the user to update the data. Improvement can be expected.

  When the update data is stored in the portable storage medium and distributed as described above, the storage medium may be transferred to a hand other than a regular user assumed by a distribution source such as an electronic device manufacturer. There is. For example, if the data update is charged, the user who paid the fee can update the data for the non-regular user who has transferred the storage medium storing the update data to other users. End up. Therefore, in the conventional data update method as described above, the data update may be performed more times than the number permitted by the distribution source of the update data.

JP-A-8-255104

  The present invention has been made in view of the above circumstances. When updating data stored in a portable storage medium and updating the data, the number of times data can be updated at the distribution source of the update data is arbitrarily set. An object of the present invention is to provide a data update system, a data update device, and an external storage medium that can be limited to the above.

  The data update system of the present invention is a data update system that updates data in an electronic device using update data stored in a portable storage medium, and can perform data update using the update data. Update number data storage means for storing update number data including information relating to the possible number of times, and data update permission when updating data by a data update device that performs data update processing in the electronic device based on the update number data Update permission determination means for determining presence / absence, update data reading means for reading the update data based on the data update permission, and when the update data is read by the data update device by the data update permission Update number update means for updating the update number data, both the update data and the pre-update data The other is intended and a post-update data restoring means for restoring the updated data by using only data for the update.

  As a result, the update permission determination means determines whether or not data update is permitted based on the update count data, and when there is data update permission, the update data is read by the update data reading means and updated by the post-update data restoration means. Later data is restored. When the data update is performed, the update count update means updates the update count data, and when the data update count reaches a predetermined number, the update permission determination means determines that there is no update permission and is portable. Since update data can be prevented from being read from the storage medium, the number of data updates can be limited.

  According to another aspect of the present invention, the data update system includes an update data erasure unit that erases the update data when the update permission determination unit determines that there is no data update permission. Also included.

  As a result, the update data can be erased when the data update permission is lost, so reading by an unauthorized means can be prevented, and the number of data updates can be more reliably limited.

  Further, as one aspect of the present invention, the data update system includes an identifier storage unit that stores a device identifier for identifying the data update device, and the update count data storage unit is provided for each device identifier. Each of which stores the update count data.

  Thus, the update count data provided for each device identifier can be used to manage the update count for each corresponding data update device, and the number of data updates can be limited for each device identifier.

  Further, as one aspect of the present invention, in the data update system described above, the update count data storage unit includes information indicating an update count at which data update is performed by the data update device, and an upper limit for which the data update is permitted. The storage of update number data including information indicating the number of times is also included.

  As a result, the update permission determination means can easily determine whether or not data update is permitted by comparing the number of updates with the upper limit number.

  In addition, as one aspect of the present invention, the data update system described above may include the update permission determination unit and the update count update unit provided in the portable storage medium.

  As a result, permission to update data is determined in the portable storage medium, and if the data update permission is not granted, the update data stored in the portable storage medium can be prevented from being read from the portable storage medium to the data update device. The number of times data can be updated at the distribution source that distributes the business data can be arbitrarily limited.

  Further, as one aspect of the present invention, in the above data update system, based on the determination of the restoration result, the restoration result judgment unit that judges the validity of the updated data restored by the updated data restoration unit, and the restoration result And an updated data writing means for writing the updated data.

  As a result, when the post-update data is restored, it is possible to determine the validity of the post-update data by the restoration result judging means, and to write only when the restored post-update data is normal. When a failure occurs, it is possible to reduce the risk that invalid data is written and the device that updated the data does not operate normally.

  In addition, as one aspect of the present invention, the data update system described above includes the update data including difference data between the pre-update data and the post-update data.

  Thereby, the post-update data can be restored using the difference data of the update data and the pre-update data, and the data amount of the update data can be reduced. For this reason, the storage capacity of the update data in the portable storage medium can be reduced, and the time for reading the update data by the data update device can be shortened.

  An external storage medium of the present invention is an external storage medium in a data update system that updates data in an electronic device using update data, and is connected to a data update device that performs data update processing in the electronic device, Update data storage means configured to be separable and for storing the update data, and update count data storage for storing update count data including information relating to the number of times data can be updated using the update data Means, update permission determination means for determining whether or not data update is permitted when data is updated by the data update device based on the update count data, and the update data is transferred to the data update device by the data update permission. Update number update means for updating the update number data when read is provided.

  As a result, for example, when data update is performed by a data update device configured in an electronic device or the like, the update count data is updated by the update count update means, and the number of data updates reaches a predetermined number of times. In some cases, the update permission determination means determines that there is no update permission and prevents the data update device from reading update data from the external storage medium. Can be limited.

  According to another aspect of the present invention, the external storage medium includes an update data erasure unit that erases the update data when it is determined by the update permission determination unit that there is no data update permission. Also included.

  As a result, when the data update permission is lost, the update data can be erased from the external storage medium, so reading by an unauthorized means can be prevented and the number of data updates can be more reliably limited.

  Further, as one aspect of the present invention, the external storage medium described above, wherein the update count data storage means stores the update count data for each device identifier for identifying the data update device, respectively. It is.

  Accordingly, it is possible to determine whether or not data update is permitted based on the update count data provided for each device identifier in the external storage medium, and to limit the number of data updates for each data update device having the corresponding device identifier.

  Further, as one aspect of the present invention, in the above external storage medium, the update count data storage means includes information indicating an update count at which data update has been performed by the data update device and an upper limit for which the data update is permitted. The storage of update number data including information indicating the number of times is also included.

  Thereby, it is possible to easily determine whether or not data update is permitted by comparing the number of updates and the upper limit number in the update permission determination unit of the external storage medium.

  The present invention also provides a program for causing a computer to realize the function of each means in any one of the above external storage media.

  The data update device of the present invention is a data update device in a data update system that updates data in an electronic device using update data, and is configured to be connectable to an external storage medium that stores the update data, Update data reading means for reading the update data based on data update permission in the external storage medium, and update for restoring post-update data using both the update data and pre-update data or only the update data And a post-data restoring means.

  As a result, data update permission can be obtained from the external storage medium, update data can be read and post-update data can be restored, and the number of data updates can be limited by the data update permission.

  In addition, as one aspect of the present invention, the above data update device includes an identifier storage unit that stores a device identifier for identifying the device itself.

  As a result, the type or individual of the data update device can be identified by the device identifier. For example, by notifying the external storage medium of the device identifier when performing data update, the data update permission determination for each device identifier in the external storage medium It is possible to limit the number of data updates.

  Further, as one aspect of the present invention, the data updating apparatus is based on the restoration result determination unit that determines the validity of the updated data restored by the updated data restoration unit, and the determination of the restoration result And an updated data writing means for writing the updated data.

  As a result, when the post-update data is restored in the data update device, the restoration result judgment means judges the validity of the post-update data, and can be written only when the restored post-update data is normal. It is possible to alleviate the risk that, when a failure occurs during restoration, invalid data is written, and the device that updated the data does not operate normally.

  The present invention also provides a program for causing a computer to realize the function of each means in any of the above data updating apparatuses.

  The data update method of the present invention is a data update method for updating data in an electronic device using update data stored in a portable storage medium, wherein the data update is performed using the update data. Based on update number data including information on the number of possible times, determining whether or not to allow data update when updating data by a data update device that performs data update processing in the electronic device, based on the data update permission, A step of reading the update data, a step of updating the update count data when the update data is read by the data update device with the data update permission, and both the update data and the pre-update data Or the step of restoring post-update data using only the update data.

  Thereby, it is determined whether or not the data update is permitted based on the update count data. When the data update is permitted, the update data is read and the updated data is restored. Update the data when the data is updated, and when the number of data updates reaches a predetermined number, determine that there is no update permission so that the update data is not read from the portable storage medium. Therefore, the number of data updates can be limited.

  The present invention also provides a program for causing a computer to execute each step in the data update method.

  According to the present invention, when the update data stored in the portable storage medium is distributed and the data is updated, it is possible to arbitrarily limit the number of times the data can be updated at the distribution source of the update data. can get.

  The data update system of the present embodiment is applicable to electronic devices such as mobile terminal devices such as mobile phone devices and personal digital assistants (PDAs). Here, a case will be described in which a data updating device is configured in a terminal corresponding to an electronic device having data to be updated, and has a function of updating data in the device itself.

(First embodiment)
FIG. 1 is a block diagram showing a functional configuration of a data update system according to the first embodiment of the present invention. The data update system 101 according to the first embodiment includes a terminal 102 including a data update device that stores update target data and performs update processing of data stored in the own device using update data, and a terminal 102. And an external storage medium 103 corresponding to an example of a portable storage medium in which update data for data update provided is stored. The external storage medium 103 is composed of a portable medium, and is configured to be detachable from the terminal (data update device) 102 so as to be connected and disconnected.

  The terminal 102 is updated from the in-terminal data storage unit 104 that stores pre-update data and post-update data, the control unit 106 that controls the entire terminal, and both pre-update data and update data, or update data alone. An after-update data restoration unit (corresponding to an example of an after-update data restoration unit) 107 that restores post-data, an in-terminal data read / write unit 108 that reads and writes data stored in the in-terminal data storage unit 104, And an update data reading unit (corresponding to an example of update data reading means) 109 that reads update data from the external storage medium 103.

  The external storage medium 103 includes an update permission determination unit (corresponding to an example of an update permission determination unit) 110 that determines whether or not update permission is present from update number data, and update number data when the terminal 102 performs data update. Update count update unit (corresponding to an example of update count update means) 111, update count data storage section (corresponding to an example of update count data storage means) 112 for storing update count data, and update data And an update data storage unit 113 that stores. Examples of the external storage medium 103 include an SD (trademark) memory card, an SD (trademark) I / O card, a multimedia card (MMC), a memory stick (trademark), a compact flash (trademark) (CF) card, a hard disk drive, and a USB memory. Various storage media such as can be used.

  Next, the operation of the data update system 101 according to the first embodiment will be described with reference to FIGS.

  FIG. 2 shows an operation when the pre-update data stored in the in-terminal data storage unit 104 in the terminal 102 is updated using the update data stored in the update data storage unit 113 in the external storage medium 103. It is a flowchart which shows a procedure.

  When the control unit 106 of the terminal (data update device) 102 starts data update processing (step S201), first, the update permission determination unit 110 in the external storage medium 103 receives update count data from the update count data storage unit 112. Read (step S202). Next, the update permission determination unit 110 interprets the contents of the update count data and determines whether or not there is update permission (step S203).

  If it is determined in step S203 that there is no update permission, the update permission determination unit 110 notifies the update data reading unit 109 in the terminal 102 that the update is not possible (step S209), and the control unit 106 updates the data. It completes without performing (step S210).

  On the other hand, if it is determined in step S203 that the update is permitted, the update count update unit 111 updates the update count data stored in the update count data storage unit 112 (step S204). Then, the update permission determination unit 110 reads the update data from the update data storage unit 113 and passes it to the update data reading unit 109 (step S205).

  Next, the post-update data restoration unit 107 in the terminal 102 receives update data from the update data reading unit 109 and receives pre-update data stored in the terminal data storage unit 104 from the terminal data read / write unit 108. (Step S206). Then, the post-update data restoration unit 107 restores the post-update data from the pre-update data and the update data (step S207). Next, the updated data is written into the in-terminal data storage unit 104 by the in-terminal data read / write unit 108 (step S208), and the control unit 106 ends the data update process (step S210).

  FIG. 3 is a diagram illustrating an example of the data structure of the update count data. The update count data is stored in the external storage medium 103 by the update count data storage unit 112 and is used for determination of update permission. Here, the update count data includes an update count 301 indicating the number of times data update has been performed with the update data stored in the update data storage unit 113, and the number of times the data update is permitted to be executed by the update data. It is assumed that the data structure includes the upper limit number 302 to be expressed.

  FIG. 4 is a flowchart showing an operation procedure for determining whether or not there is update permission in the update permission determination unit 110. FIG. 4 shows a detailed procedure of the update permission presence / absence determination step in step S203 of FIG. 2 when the update count data has a data structure like the example shown in FIG.

  When the update permission determination unit 110 starts determining whether or not update is permitted (step S401), first, the update number 301 and the upper limit number 302 stored in the update number data storage unit 112 are read (step S402). The magnitudes are compared (step S403).

  As a result of the comparison in step S403, if the number of updates is less than the upper limit number, the update permission determination unit 110 determines that there is update permission (step S404), and ends this process (step S406). On the other hand, when the update count reaches the upper limit count or more, the update permission determination unit 110 determines that there is no update permission (step S405), and ends this process (step S406).

  As described above, in the first embodiment, the external storage medium 103 includes the update permission determination unit 110, the update count update unit 111, and the update count data storage unit 112, and the update count data storage unit 112 stores update data. Whether the number of times data was updated using the update data stored in the unit 113 and the upper limit number that may be updated are stored, and the update permission determination unit 110 determines whether the number of updates is less than a predetermined upper limit number. Determine if. Then, it is determined that the data can be updated only when the number is less than the upper limit number, and the update data is read from the update data storage unit 113 and passed to the update data reading unit 109 on the terminal 102 side, and the update number update unit The update count of the update count data storage unit 112 is updated by 111. Thereby, for example, by setting an upper limit number of times that the update is permitted at the distribution source of the update data, the number of times that the user can update the data using the update data stored in the update data storage unit 113 is arbitrarily limited. can do.

  When the update count data has the data structure illustrated in FIG. 3, an update count data setting device as shown in FIG. 5 is used to set the update count data. FIG. 5 is a block diagram illustrating a configuration example in which an update count data setting device 151 is connected to the external storage medium 103.

  The update count data setting device 151 is a device for setting update count data in the external storage medium 103, an upper limit count setting unit 152 for setting the upper limit count 302, an update count setting unit 153 for setting the update count 301, An update count data writing unit 154 that writes the update count data to the update count data storage unit 112 in the external storage medium 103. In this case, in the external storage medium 103 used for data update, in the update count data storage section 112, an update count storage section 131 that stores the update count 301 and an upper limit count storage section 132 that stores the upper limit count 302 are provided. It is done.

  In this update count data setting device 151, based on the operation instruction of the update data distributor, the upper limit count setting section 152 sets the upper limit count 302 and the update count setting section 153 sets the update count 301, respectively. The unit 154 writes data to the upper limit number storage unit 132 and the update number storage unit 131 of the update number data storage unit 112 in the external storage medium 103, respectively.

  In order to store the update data in the external storage medium 103, an update data writing device as shown in FIG. 6 is used. FIG. 6 is a block diagram illustrating a configuration example in which the update data writing device 161 is connected to the external storage medium 103.

  The update data writing device 161 includes a data storage unit 162 that stores basic data for generating update data such as pre-update data and post-update data, an update data generation unit 163 that generates update data, An update data writing unit 164 that writes the update data to the update data storage unit 113 in the external storage medium 103. In the update data writing device 161, the update data generation unit 163 reads the pre-update data, the post-update data, and the like from the data storage unit 162, and updates the update data such as the difference data between the pre-update data and the post-update data. The update data writing unit 164 generates the update data and writes the update data into the update data storage unit 113 in the external storage medium 103.

  The update count data is stored in an area that cannot be easily rewritten. This makes it possible to more reliably limit the number of updates. The update count data storage unit 112 having an area that cannot be easily rewritten may be provided in the external storage medium 103 as described above, or may be provided in the terminal 102.

  Further, as a modification of the first embodiment, the update permission determination unit 110 and the update count update unit 111 may be provided on the terminal side. FIG. 7 is a block diagram showing a configuration of a modification of the first embodiment. A data update system 101A according to this modification includes a terminal 102A and an external storage medium 103A. The terminal 102A includes an update permission determination unit 110 and an update count update unit 111. The external storage medium 103A includes update count data. Only the storage unit 112 and the update data storage unit 113 are provided. Other configurations are the same as those of the first embodiment shown in FIG. Thus, even if the update permission determination unit 110 and the update count update unit 111 are provided on the terminal side, the same function as described above can be realized.

  According to the first embodiment described above, update data is distributed when update data is stored and distributed in the portable external storage medium 103 and data such as an operation program in the terminal 102 is updated. Originally, by setting the update count data in the external storage medium 103, it is possible to arbitrarily limit the number of times data can be updated. As a result, when the update data itself or the external storage medium 103 storing the update data is transferred to an unintended third party, the number of times the update data distribution source has permitted by the unauthorized user, etc. It is possible to prevent a large number of data updates.

(Second Embodiment)
FIG. 8 is a block diagram showing a functional configuration of a data update system according to the second embodiment of the present invention. As in the first embodiment, the data update system 501 of the second embodiment stores data to be updated, and performs data update processing for updating data stored in the own device using update data. A terminal 502 including the device and an external storage medium 503 storing update data for updating data of the terminal 502 are configured.

  The terminal 502 is updated from an in-terminal data storage unit 504 that stores pre-update data and post-update data, a control unit 506 that controls the entire terminal, and both pre-update data and update data, or update data alone. An after-update data restoration unit 507 that restores post-data, an in-terminal data read / write unit 508 that reads and writes data stored in the in-terminal data storage unit 504, and an update that reads update data from the external storage medium 503 And a data reading unit 509.

  In addition, the external storage medium 503 includes an update permission determination unit 510 that determines whether or not update is permitted from the update number data, an update number update unit 511 that updates the update number data when the terminal 502 performs data update, an update An update count data storage unit 512 for storing count data, an update data storage unit 513 for storing update data, and an update data storage unit when notified from the update permission determination unit 510 that update permission has been lost An update data erasure unit (corresponding to an example of an update data erasure unit) 514 that erases the update data stored in 513 is provided.

  Next, the operation of the data update system 501 of the second embodiment will be described with reference to FIG.

  FIG. 9 shows an operation when the pre-update data stored in the in-terminal data storage unit 504 in the terminal 502 is updated using the update data stored in the update data storage unit 513 in the external storage medium 503. It is a flowchart which shows a procedure.

  When the control unit 506 of the terminal (data update device) 502 starts the data update process (step S601), first, the update permission determination unit 510 in the external storage medium 503 receives update count data from the update count data storage unit 512. Read (step S602). Next, the update permission determination unit 510 interprets the contents of the update count data and determines whether or not there is update permission (step S603).

  If it is determined in step S603 that there is no update permission, the update permission determination unit 510 notifies the update data reading unit 509 in the terminal 502 that update is not possible (step S611), and the control unit 506 updates the data. It completes without performing (step S612).

  On the other hand, if it is determined in step S603 that the update is permitted, the update count update unit 511 updates the update count data stored in the update count data storage unit 512 (step S604). Then, the update permission determination unit 510 reads the update data from the update data storage unit 513 and passes it to the update data reading unit 509 (step S605).

  Next, the update permission determination unit 510 interprets the content of the update count data updated in step S604, and determines whether or not there is update permission (step S606). If it is determined in step S606 that there is no update permission, the update data deletion unit 514 deletes the update data stored in the update data storage unit 513 (step S607). On the other hand, if it is determined in step S606 that the update is permitted, the update data is not deleted.

  Thereafter, the post-update data restoration unit 507 in the terminal 502 receives the update data from the update data reading unit 509 and receives the pre-update data stored in the terminal data storage unit 504 from the terminal data read / write unit 508 ( Step S608). Then, the post-update data restoration unit 507 restores the post-update data from the pre-update data and the update data (step S609). Next, the updated data is written into the in-terminal data storage unit 504 by the in-terminal data read / write unit 508 (step S610), and the control unit 506 ends the data update process (step S612).

  In the second embodiment, it is assumed that the data structure of the update count data used is the same as that of the first embodiment shown in FIG. Further, in the operation of the second embodiment, the operation for determining whether or not the update is permitted in step S603 and step S606 is the same as that of the first embodiment described with reference to FIG.

  As described above, in the second embodiment, the external storage medium 503 is provided with the update data erasure unit 514, and when the number of updates reaches a predetermined number, the update data is erased so that the data can be updated by unauthorized means. Data reading can be prevented, and the number of data updates can be more reliably limited. In addition, since the usable area of the storage medium can be increased by deleting the update data, there is an effect that the amount of data that can be stored increases when the user uses the storage medium for other data storage. .

(Third embodiment)
FIG. 10 is a block diagram showing a functional configuration of a data update system according to the third embodiment of the present invention. As in the first embodiment, the data update system 701 according to the third embodiment stores data to be updated, and performs data update processing for updating data stored in the own apparatus using update data. A terminal 702 including the device and an external storage medium 703 storing update data for updating data of the terminal 702 are configured.

  The terminal 702 includes an in-terminal data storage unit 704 that stores pre-update data and post-update data of the terminal 702, a control unit 706 that controls the entire terminal 702, and both pre-update data and update data, or update A post-update data restoration unit 707 that restores post-update data from only the data for use, an in-terminal data read / write unit 708 that reads and writes data stored in the in-terminal data storage unit 704 and the terminal identifier storage unit 714, An update data reading unit 709 that reads update data from the external storage medium 703 and a terminal identifier storage unit (corresponding to an example of an identifier storage unit) 714 that stores a terminal identifier set for each terminal are provided.

  Further, the external storage medium 703 includes an update permission determination unit 710 that determines whether or not update permission exists from the update number data, an update number update unit 711 that updates the update number data when the terminal 702 performs data update, and an update An update count data storage unit 712 that stores the count data and an update data storage unit 713 that stores update data are provided.

  The update count data storage unit 712 stores update count data for each terminal identifier. That is, the update count data includes a terminal identifier 721, an update count 722 indicating the number of times data update has been performed by the update data stored in the update data storage unit 713 in the terminal having this terminal identifier, and this terminal identifier. It is assumed that the terminal has a data structure including an upper limit number of times 723 that represents the number of times data update execution is permitted by the update data. Next, the operation of the data update system 701 according to the third embodiment will be described with reference to FIG.

  FIG. 11 shows an operation when the pre-update data stored in the in-terminal data storage unit 704 in the terminal 702 is updated using the update data stored in the update data storage unit 713 in the external storage medium 703. It is a flowchart which shows a procedure.

  When the control unit 706 of the terminal (data update device) 702 starts the data update process (step S801), the terminal data read / write unit 708 reads the terminal identifier stored in the terminal identifier storage unit 714 and updates the data read unit. Through 709, the data is transferred to the update permission determination unit 710 in the external storage medium 703 (step S802). Next, the update permission determination unit 710 reads update number data corresponding to the terminal identifier from the update number data storage unit 712 (step S803). Then, the update permission determination unit 710 interprets the contents of the update count data and determines whether or not there is update permission (step S804).

  If it is determined in step S804 that there is no update permission, the update permission determination unit 710 notifies the update data reading unit 709 in the terminal 702 that updating is not possible (step S810), and the control unit 706 updates the data. It completes without performing (step S811).

  On the other hand, when it is determined in step S804 that the update is permitted, the update number update unit 711 updates the portion corresponding to the terminal identifier in the update number data stored in the update number data storage unit 712 (step S804). S805). Then, the update permission determination unit 710 reads the update data from the update data storage unit 713 and passes it to the update data reading unit 709 (step S806).

  Next, the post-update data restoration unit 707 in the terminal 702 receives update data from the update data reading unit 709 and receives pre-update data stored in the terminal data storage unit 704 from the terminal data read / write unit 708. (Step S807). Then, the post-update data restoration unit 707 restores the post-update data from the pre-update data and the update data (step S808). Next, the updated data is written into the in-terminal data storage unit 704 by the in-terminal data read / write unit 708 (step S809), and the control unit 706 ends the data update process (step S811).

  In the operation of the third embodiment, the operation for determining whether or not update is permitted in step S804 is the same as that of the first embodiment described with reference to FIG.

  As described above, in the third embodiment, the terminal identifier storage unit 714 is provided in the terminal 702, and the external storage medium 703 has a data structure in which the update count data is stored for each terminal identifier, thereby enabling data updating. Can be finely limited for each terminal identifier.

(Fourth embodiment)
FIG. 12 is a block diagram showing a functional configuration of a data update system according to the fourth embodiment of the present invention. As in the first embodiment, the data update system 901 according to the fourth embodiment stores data to be updated, and performs data update processing for updating data stored in the own apparatus using update data. A terminal 902 including the device and an external storage medium 903 storing update data for updating data of the terminal 902 are configured.

  The terminal 902 includes an in-terminal data storage unit 904 that stores pre-update data and post-update data of the terminal 902, a control unit 906 that controls the entire terminal 902, both pre-update data and update data, or update Update from the external storage medium 903, the post-update data restoration unit 907 that restores the post-update data only from the data for use, the data read / write unit 908 that reads and writes data stored in the data storage unit 904 in the terminal Update data reading unit 909 for reading data for use and a restoration result determination unit (corresponding to an example of a restoration result determination unit) 914 for determining whether or not the updated data restored by the updated data restoration unit 907 is restored correctly. And. The in-terminal data read / write unit 908 has a function of updated data write means.

  Further, the external storage medium 903 includes an update permission determination unit 910 that determines whether or not update permission exists from the update number data, an update number update unit 911 that updates the update number data when the terminal 902 performs data update, and an update An update count data storage unit 912 that stores count data and an update data storage unit 913 that stores update data are provided. Note that the update data stored in the external storage medium 903 includes difference data between the pre-update data and the post-update data, and determination data for determining the restoration result of the post-update data.

  Next, the operation of the data update system 901 of the fourth exemplary embodiment will be described with reference to FIG.

  FIG. 13 shows an operation when the pre-update data stored in the in-terminal data storage unit 904 in the terminal 902 is updated using the update data stored in the update data storage unit 913 in the external storage medium 903. It is a flowchart which shows a procedure.

  When the control unit 906 of the terminal (data update device) 902 starts data update processing (step S1001), first, the update permission determination unit 910 in the external storage medium 903 receives update count data from the update count data storage unit 912. Read (step S1002). Next, the update permission determination unit 910 interprets the contents of the update count data and determines whether or not there is update permission (step S1003).

  If it is determined in step S1003 that there is no update permission, the update permission determination unit 910 notifies the update data reading unit 909 in the terminal 902 that updating is not possible (step S1010), and the control unit 906 updates the data. It completes without performing (step S1011).

  On the other hand, if it is determined in step S1003 that the update is permitted, the update count update unit 911 updates the update count data stored in the update count data storage unit 912 (step S1004). Then, the update permission determination unit 910 reads the update data from the update data storage unit 913 and passes it to the update data read unit 909 (step S1005).

  Next, the post-update data restoration unit 907 in the terminal 902 receives update data from the update data reading unit 909 and receives pre-update data stored in the terminal data storage unit 904 from the terminal data read / write unit 908. (Step S1006). Then, the post-update data restoration unit 907 restores the post-update data from the pre-update data and the update data (step S1007). Thereafter, the restoration result determination unit 914 determines the validity of the restored updated data from the determination data and the restored updated data (step S1008).

  If it is determined in step S1008 that the restoration result is valid, the in-terminal data read / write unit 908 writes the updated data to the in-terminal data storage unit 904 (step S1009), and the control unit 906 performs data update processing. Is finished (step S1011). On the other hand, when a failure or the like occurs in the data restoration process and it is determined in step S1008 that the restoration result is invalid, the control unit 906 ends without updating the data (step S1011).

  Note that in the fourth embodiment, the data structure of the update count data used is the same as that of the first embodiment shown in FIG. In the operation of the fourth embodiment, the operation for determining whether or not update is permitted in step S1003 is the same as that of the first embodiment described with reference to FIG.

  Further, the restoration result judgment operation in step S1008 and the structure of the judgment data referred to in this step are realized by widely used error detection methods (checksum, CRC, parity check, etc.). Is possible.

  As described above, in the fourth embodiment, the restoration result determination unit 914 is provided in the terminal 902, and the validity of the restored post-update data is determined using the restoration result determination data provided in the update data. By writing the data in the terminal data storage unit 904 after that, it is possible to prevent the writing of invalid data when the restoration of the updated data fails.

(Fifth embodiment)
FIG. 14 is a block diagram showing a functional configuration of a data update system according to the fifth embodiment of the present invention. As in the first embodiment, the data update system 1501 according to the fifth embodiment stores data to be updated, and performs data update processing for updating data stored in the own apparatus using update data. A terminal 1502 including the device and an external storage medium 1503 storing update data for updating data of the terminal 1502 are configured.

  The terminal 1502 is updated from an in-terminal data storage unit 1504 that stores pre-update data and post-update data, a control unit 1506 that controls the entire terminal, and both pre-update data and update data, or update data alone. An after-update data restoration unit 1507 for restoring post-data, an in-terminal data read / write unit 1508 for reading and writing data stored in the in-terminal data storage unit 1504, and an update for reading update data from the external storage medium 1503 Data read unit 1509, update permission determination unit 1510 that determines whether or not update permission exists from update number data, update number update unit 1511 that updates update number data when terminal 1502 performs data update, Current date and time storage unit 1521 that stores the date and time, and updatable period storage unit that stores an updatable period And a 522.

  The external storage medium 1503 includes an update count data storage unit 1512 that stores update count data, and an update data storage unit 1513 that stores update data.

  Next, the operation of the data update system 1501 of the fifth embodiment will be described with reference to FIG.

  FIG. 15 shows an operation when the pre-update data stored in the terminal data storage unit 1504 in the terminal 1502 is updated using the update data stored in the update data storage unit 1513 in the external storage medium 1503. It is a flowchart which shows a procedure.

  When the control unit 1506 of the terminal (data update device) 1502 starts data update processing (step S1601), first, the update permission determination unit 1510 in the terminal 1502 reads the updateable period read from the updateable period storage unit 1522, and Based on the current date and time read from the current date and time storage unit 1521, it is determined whether the current date and time is within the update period (step S1602). If it is determined in step S1602 that it is outside the update period, the update permission determination unit 1510 notifies the update data reading unit 1509 in the terminal 1502 that update is not possible (step S1610), and the control unit 1506 transmits data. The process ends without updating (step S1611).

  On the other hand, if it is determined in step S1602 that it is within the update period, the update permission determination unit 1510 reads the update count data from the update count data storage unit 1512 in the external storage medium 1503 (step S1603). Next, the update permission determination unit 1510 interprets the contents of the update count data and determines whether or not there is update permission (step S1604).

  If it is determined in step S1604 that there is no update permission, the process proceeds to step S1610 as in the case where the update period is out, and the update permission determination unit 1510 cannot update the update data reading unit 1509 in the terminal 1502. And the control unit 1506 ends without updating the data (step S1611).

  On the other hand, if it is determined in step S1604 that the update is permitted, the update count update unit 1511 updates the update count data stored in the update count data storage unit 1512 (step S1605). Then, the update permission determination unit 1510 reads the update data from the update data storage unit 1513 and passes it to the update data reading unit 1509 (step S1606).

  Next, the post-update data restoration unit 1507 in the terminal 1502 receives the update data from the update data read unit 1509 and receives the pre-update data stored in the terminal data storage unit 1504 from the terminal data read / write unit 1508. (Step S1607). Then, the post-update data restoration unit 1507 restores the post-update data from the pre-update data and the update data (step S1608). Next, the updated data is written into the in-terminal data storage unit 1504 by the in-terminal data read / write unit 1508 (step S1609), and the control unit 1506 ends the data update process (step S1611).

  In the fifth embodiment, an updatable period can be set, and updating is not possible outside the updatable period stored in the updatable period storage unit 1522. Further, in order to prevent unauthorized updating outside the updatable period, if the current date is changed, the updatable period of the updatable period storage unit 1522 is linked with the change of the current date and time in the current date and time storage unit 1521. It has a function to change. For example, in order to prevent fraud such as “when the updatable period is 15:00 and the current date and time is 16:00, the clock can be updated for another hour by returning the clock for 2 hours”, the current date and time is set back by 2 hours. Then, the time change operation is performed so that the updatable period is also returned by 2 hours.

  By setting the updatable period in this way, it is possible to limit the update period so that only a predetermined period can be updated. Further, by changing the updatable period in conjunction with the change of the current date and time, it is possible to prevent unauthorized updating due to the change of the current date and time. An example of holding the renewable period on the terminal side is when storing settings that allow free software updates for a certain period of time, depending on the contract, etc., at the time of terminal purchase or software installation, etc. Applicable.

  As a modification of the fifth embodiment, an update permission determination unit 1510, an update count update unit 1511, a current date and time storage unit 1521, and an updatable period storage unit 1522 may be provided on the external storage medium side. Is possible. FIG. 16 is a block diagram showing a configuration of a modified example of the fifth embodiment. A data update system 1501A according to this modification includes a terminal 1502A and an external storage medium 1503A. In the external storage medium 1503A, an update permission determination unit 1510, an update count update unit 1511, a current date / time storage unit 1521, and an updateable data storage system 1501A. A period storage unit 1522 is provided. Other configurations are the same as those of the fifth embodiment shown in FIG. As described above, even when the update permission determination unit 1510, the update count update unit 1511, the current date / time storage unit 1521, and the updatable period storage unit 1522 are provided on the external storage medium side, the same function as described above can be realized. As an example of holding the updatable period on the external storage medium side, when the purchase of the update data is performed in the form of “buy the right to use the update data for one month”, the period of one month Can be applied to the case where the data is stored on the medium together with the update data.

  The present invention is not limited to the above-described embodiment, and can be implemented in various modes without departing from the scope of the invention.

  In the first, second, and fourth embodiments, the structure of the update count data has been described using an example as shown in FIG. 3, but the number of updates performed so far is the upper limit that can be updated. Other data structures may be used as long as the data structure can know whether or not it has been reached. For example, the data structure may be configured to hold only the number of times that updating is permitted, and the number of times of permission may be reduced each time data is updated, and after that the number of times becomes 0, updating may not be permitted.

  Further, in the third embodiment, the structure of the update count data has been described using an example including the terminal identifier 721, the update count 722, and the upper limit count 723 as shown in FIG. 10, but the upper limit count for each terminal identifier. Any other data structure may be used as long as the data structure can know whether or not the above has been reached. The terminal identifier may be assigned so that each terminal can be uniquely specified, or the same terminal identifier may be assigned to a plurality of terminals.

  In the second embodiment, the operation for updating data has been described using the example shown in the flowchart of FIG. 9, but the following modification is also conceivable. For example, step S606 (determination of whether or not update is permitted) and step S607 (deletion of update data) in FIG. 9 are not performed, and the update data is determined when it is determined that there is no update permission in the determination of whether or not update is permitted in step S603. The operation may be performed to erase.

  Further, in the fourth embodiment, the operation when data update is performed has been described using an example as shown in the flowchart of FIG. 13, but as a modified example, for example, restoration is performed in determination of the restoration result in step S1008. When it is determined that the result is invalid, the process may not be terminated immediately, and data restoration may be attempted again.

  In the first to fourth embodiments, the post-update data is restored from the update data and the pre-update data. However, the post-update data is restored using only the update data. It is also possible to use a data restoration method. Further, the update data may be the updated data itself.

  As described above, in the present embodiment, update number data is provided together with update data on an external storage medium distributed for data update, and is updated by the update number update unit when data update is performed using the update data. While updating the number of times data, the update permission determination unit determines the number of times the data has been updated. When the number of updates reaches a predetermined number, it is determined that there is no update permission. The data restoration unit is prevented from reading update data. As a result, the number of times data can be updated at the distribution source of the update data can be limited.

  In addition, it is possible to prevent the update data from being read out by unauthorized means by deleting the update data after performing the data update a predetermined number of times. As a result, in addition to limiting the number of data updates, the management function related to data update can be further strengthened.

  Also, by providing a terminal identifier and determining the number of data updates for each terminal identifier, the number of data updates can be limited and managed for each terminal or user. Thereby, even within the number of times that data can be updated, it is possible to prevent data update by anyone other than an authorized user.

  In addition, by judging the validity of the restored post-update data and writing the post-update data only when the restoration result is judged to be correct, a failure or the like occurs at the time of data restoration and the post-update data is restored correctly. If this is not the case, it is possible to prevent problems such as writing incorrect data and causing the terminal to not operate normally.

  The present invention has an effect of arbitrarily limiting the number of times data can be updated at the distribution source of the update data when the update data stored in the portable storage medium is distributed and the data is updated. It is useful for a data update system for updating data such as a program in an electronic device, a data update device, an external storage medium, and the like.

The block diagram which shows the function structure of the data update system which concerns on the 1st Embodiment of this invention. The flowchart which shows the operation | movement procedure at the time of the data update in the data update system of 1st Embodiment. The figure which showed an example of the data structure of the update frequency data in this embodiment The flowchart which showed the operation | movement procedure of determination of the presence or absence of the update permission in the update permission determination part of this embodiment. 1 is a block diagram showing an example of a configuration in which an update count data setting device is connected to an external storage medium in the present embodiment 1 is a block diagram showing a configuration example in which an update data writing device is connected to an external storage medium in the present embodiment. The block diagram which shows the structure of the modification of 1st Embodiment. The block diagram which shows the function structure of the data update system which concerns on the 2nd Embodiment of this invention. The flowchart which shows the operation | movement procedure at the time of the data update in the data update system of 2nd Embodiment The block diagram which shows the function structure of the data update system which concerns on the 3rd Embodiment of this invention. The flowchart which shows the operation | movement procedure at the time of the data update in the data update system of 3rd Embodiment The block diagram which shows the function structure of the data update system which concerns on the 4th Embodiment of this invention. The flowchart which shows the operation | movement procedure at the time of the data update in the data update system of 4th Embodiment The block diagram which shows the function structure of the data update system which concerns on the 5th Embodiment of this invention. The flowchart which shows the operation | movement procedure at the time of the data update in the data update system of 5th Embodiment The block diagram which shows the structure of the modification of 5th Embodiment. Block diagram showing a configuration example of a conventional data update system

Explanation of symbols

101, 501, 701, 901, 1501 Data update system 102, 502, 702, 902, 1502 Terminal (data update device)
103, 503, 703, 903, 1503 External storage medium 104, 504, 704, 904, 1504 In-terminal data storage unit 106, 506, 706, 906, 1506 Control unit 107, 507, 707, 907, 1507 Data restoration after update Unit 108, 508, 708, 908, 1508 Intra-terminal data read / write unit 109, 509, 709, 909, 1509 Update data read unit 110, 510, 710, 910, 1510 Update permission determination unit 111, 511, 711, 911, 1511 Update count update unit 112, 512, 712, 912, 1512 Update count data storage unit 113, 513, 713, 913, 1513 Update data storage unit 131 Update count storage unit 132 Upper limit count storage unit 151 Update count data setting device 152 Maximum number of times setting 153 Update count setting section 154 Update count data writing section 161 Update data writing device 162 Data storage section 163 Update data generation section 164 Update data writing section 301 Update count 302 Upper limit count 514 Update data erasure section 714 Terminal identifier storage section 914 Restoration result determination unit 1521 Current date and time storage unit 1522 Updatable period storage unit

Claims (18)

A data update system for updating data in an electronic device using update data stored in a portable storage medium,
Update number data storage means for storing update number data including information on the number of times data can be updated using the update data;
Update permission determination means for determining whether or not data update is permitted when data is updated by a data update device that performs data update processing in the electronic device based on the update count data;
Update data reading means for reading the update data based on the data update permission;
Update number update means for updating the update number data when the data for update is read by the data update device by the data update permission;
A data update system comprising post-update data restoring means for restoring post-update data using both the update data and pre-update data or only the update data. The data update system according to claim 1,
A data update system comprising update data erasure means for erasing the update data when the update permission judgment means judges that data update permission is not given. The data update system according to claim 1,
Comprising identifier storage means for storing a device identifier for identifying the data updating device;
The update count data storage means stores the update count data for each device identifier. The data update system according to claim 1 or 3,
The update count data storage means stores update count data including information indicating the number of updates in which data update has been performed by the data update device and information indicating the upper limit count for which the data update is permitted. A data update system according to any one of claims 1 to 4,
A data update system comprising the update permission determination means and the update count update means in the portable storage medium. A data update system according to any one of claims 1 to 5,
A restoration result judging means for judging the validity of the updated data restored by the updated data restoring means;
A data update system comprising post-update data writing means for writing the post-update data based on the determination of the restoration result. A data update system according to any one of claims 1 to 6,
The update data includes a difference data between the pre-update data and the post-update data. An external storage medium in a data update system for updating data in an electronic device using update data,
It is configured to be connectable and separable to a data update device that performs data update processing in the electronic device,
Update data storage means for storing the update data;
Update number data storage means for storing update number data including information on the number of times data can be updated using the update data;
Update permission determination means for determining presence or absence of data update permission when updating data by the data update device based on the update count data;
An external storage medium comprising update number update means for updating the update number data when the data for update is read by the data update device with the data update permission. An external storage medium in the data update system according to claim 8,
An external storage medium comprising update data erasure means for erasing the update data when the update permission judgment means judges that data update permission is not given. An external storage medium in the data update system according to claim 8,
The update count data storage means is an external storage medium that stores the update count data for each device identifier for identifying the data update device. An external storage medium in the data update system according to claim 8 or 10,
The update number data storage means is an external storage medium for storing update number data including information indicating the number of updates performed by the data update device and information indicating an upper limit number of times the data update is permitted.   The program for implementing the function of each means in the external storage medium as described in any one of Claims 8 thru | or 11 with a computer. A data update device in a data update system for updating data in an electronic device using update data,
An external storage medium that stores the update data is configured to be connectable,
Update data reading means for reading the update data based on data update permission in the external storage medium;
A data updating apparatus comprising: an after-update data restoring unit that restores after-update data using both the update data and the pre-update data or only the update data. A data update device in a data update system according to claim 13,
A data update device comprising identifier storage means for storing a device identifier for identifying the device itself. A data update device in a data update system according to claim 13,
A restoration result judging means for judging the validity of the updated data restored by the updated data restoring means;
A data updating apparatus comprising: an updated data writing unit that writes the updated data based on the determination of the restoration result.   The program for implement | achieving the function of each means in the data update apparatus as described in any one of Claim 13 thru | or 15 with a computer. A data update method for updating data in an electronic device using update data stored in a portable storage medium,
Presence or absence of data update permission when updating data by a data update device that performs data update processing in the electronic device based on update number data including information on the number of times data can be updated using the update data Determining
Reading the update data based on the data update permission;
Updating the update count data when the data for update is read by the data update device with the data update permission;
And a step of restoring post-update data using both the update data and pre-update data or only the update data.   A program for causing a computer to execute each step in the data update method according to claim 17.

Images