JP3589830B2 - Electronic computer system - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a technique for maintaining software (including firmware) such as a computer system program.
[0002]
2. Description of the Related Art In recent years, the spread of computer systems has been remarkable, and the software used for them has become very complicated and large-scale. Under such circumstances, software failures often occur, and the number of man-hours and costs required for maintenance such as software revisions are increasing, and higher efficiency is required.
[0003]
[Prior art]
In computer systems, revisions (version upgrades) are required to correct bugs and add functions to programs installed in external storage devices (for example, magnetic disk devices) provided in the computer systems. This revision work may be performed by replacing the entire program with a previous program at once.
[0004]
However, since the scale of the program is increasing day by day as described above, a correction program (correction data) for making necessary corrections to the installed program must be executed on the computer system in order to increase the efficiency of the revision work. It may be performed by.
[0005]
The switching from the program before the revision to the program after the revision modified by the modification program is manually performed by a maintenance worker during a time period in which the operation of the computer system is not hindered in accordance with the operation status.
[0006]
Since the verification of the program before the revision (confirmation of reliability) is not always thorough, the program before the revision must remain in the external storage device of the computer system, and if the program after the revision fails, When this occurs, the program can be promptly switched to the program before the revision, and the continuation of the operation of the computer system is ensured. In the event of a failure, the work of changing the program after the revision to the program before the revision is also performed manually by a maintenance worker.
[0007]
The program before the revision is deleted by the maintenance worker after the operation of the program after the revision has been performed without any trouble for a certain period of time or after the verification work of the program after the revision has been sufficiently performed.
[0008]
[Problems to be solved by the invention]
As described above, when a program is revised, the program is switched to the program after the revision, or the program is changed to the program before the revision in the event of a failure, the maintenance worker must send the program to the site (where the computer system to be maintained is installed). It is the present situation that they go out and work by hand.
[0009]
Therefore, the work time required for revising these programs, switching to the program after the revision, and changing to the program before the revision in the event of a failure is extremely long, and the burden on maintenance personnel is large, and It was inefficient.
[0010]
Accordingly, it is an object of the present invention to improve the efficiency of processing or work accompanying a revision of a computer system program.
[0011]
[Means for Solving the Problems]
According to one aspect of the present invention, a program execution unit, a first program storage unit in which a program is stored, and the same or the same version number of a program stored in the first program storage unit different Second program storage means for storing a version number program, switching period storage means for storing a switching period, A current IPL machine number storage means for storing an IPL machine number for specifying a storage means for storing a program as an operating system in the first and second program storage means; A next IPL machine number storage means for storing an IPL machine number for specifying a storage means for storing a program as an active system or a program as a next active system; Clock means for detecting the current date and time, and when the date and time by the clock means are not in the switching period of the switching period storage means Or, when the IPL machine number stored in the current IPL machine number storage means is the same as the IPL machine number stored in the next IPL machine number storage means To Identified by the IPL machine number stored in the current IPL machine number storage means The first And the second Of program storage means Stored in any The program is a program to be executed by the program execution means, and the date and time by the clock means are stored in the switching period storage means during the switching period. And the IPL machine number stored in the current IPL machine number storage means is not the same as the IPL machine number stored in the next IPL machine number storage means To Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Of the second program storage means Stored in any Switching means for performing a switching process to make a program a program executed by the program execution means; Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Of the second program storage means Remembered by one Error detecting means for detecting the presence of an error in the program, the switching means, Identified by the IPL machine number stored in the next IPL machine number storage means Said First and After the program of the second program storage means is changed to a program to be executed by the program execution means, if the presence of an error is detected by the error detection means, Identified by the IPL machine number stored in the current IPL machine number storage means The first And the second Of program storage means Stored in any A program to be executed by the program execution means; Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Of the second program storage means Stored in any Discard the program, Identified by the IPL machine number stored in the current IPL machine number storage means The first And the second Of program storage means Stored in any Program Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Second program storage means Any of An electronic computer system is provided for copying to a computer.
[0012]
According to the computer system to which the present invention is applied, the switching unit selectively programs the program in the first program storage unit or the second program storage unit according to whether or not the switching period is stored in the switching period storage unit. Since the execution means is executed, it is not necessary for the maintenance worker to perform the switching work after performing the program revision work, thereby reducing the work load and improving the efficiency of the work associated with the program revision. Can be.
[0017]
According to still another aspect of the present invention, a clock program for functioning as clock means for detecting the current date and time, and a case where the date and time by the clock means are not in the switching period indicated by the switching period stored in the switching period storage means , Alternatively, in the first program storage means in which the program is stored and the second program storage means in which a program of the same or different version number as the version number of the program stored in the first program storage means is stored, the program may be used as an active system. The IPL machine number stored in the current IPL machine number storing means for storing the IPL machine number for specifying the storing means for storing the program, and the program as the working system or the next working system in the first and second program storing means When the IPL device number stored in the next IPL device number storage device that stores the IPL device number that specifies the storage device that stores the program as To The IPL machine number stored in the current IPL machine number storage means; First And the second Of program storage means Stored in any A program for executing the program, wherein the date and time by the clock means is during the switching period. And the IPL machine number stored in the current IPL machine number storage means is not the same as the IPL machine number stored in the next IPL machine number storage means To The first and second IPL numbers specified by the IPL number stored in the next IPL number storage means Of the second program storage means Stored in any A switching program for functioning as a switching means for performing a switching process as a program for executing the program; Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Of the second program storage means Remembered by one Storing an error detection program for functioning as error detection means for detecting the presence of an error in the program, the switching program, Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Of the second program storage means Stored in any After the program is executed by the program execution unit, if the error detection unit detects the presence of an error, Identified by the IPL machine number stored in the current IPL machine number storage means The first And the second Of program storage means Stored in any A program to be executed by the program execution means; Identified by the IPL machine number stored in the next IPL machine number storage means The first as well as Of the second program storage means Remembered by one Discard the program, Identified by the IPL machine number stored in the current IPL machine number storage means The first And the second Of program storage means Stored in any Program Identified by the IPL machine number stored in the next IPL machine number storage means Said First and Second program storage means Any of A computer-readable storage medium including a program for causing a computer to function as a copying unit is provided.
[0018]
When the maintenance program for the computer system stored in the storage medium of the present invention is executed in the computer system, the switching is performed according to whether or not the switching period is stored in the switching period storage means. program In this way, the program in the first program storage means or the second program storage means is selectively executed by the execution program, so that the maintenance worker does not need to perform the switching work after performing the program revision work. The burden can be reduced, and the work associated with the program revision can be made more efficient.
[0019]
According to still another aspect of the present invention, a remote maintenance system (electronic computer) including a plurality of general user terminals and a maintenance center connected to the general user terminals via a communication line for remotely maintaining the general user terminals. A remote data maintenance program applied to the general user terminal, the correction data storing means storing correction data indicating a revision of the program executed by the general user terminal, and the correction data stored in the correction data storage means being stored in the general user terminal. A maintenance center program having transfer means for transferring to a terminal, a program storage means for storing two or more programs having the same contents as an active system and a standby system, and a standby in accordance with the correction data transferred from the maintenance center For a general user terminal having application means for performing an application process for revising a program as a system When a storage medium storing the remote maintenance program with is provided.
[0020]
When the remote maintenance program stored in the storage medium of the present invention is executed in the remote maintenance system (computer system), the correction data is transferred from the maintenance center to the general user terminal, and the application means of the general user terminal receiving the correction data waits. Since the program as a system is automatically updated according to the correction data, the maintenance worker does not need to go to the site and perform the work of updating the program, thereby reducing the work load of the maintenance worker and updating the program. The efficiency of the work associated with can be improved.
[0021]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[First Embodiment]
FIG. 1 is a block diagram showing a schematic configuration of a computer system according to the first embodiment of this invention.
[0022]
This computer system includes a central processing unit (CPU) 11, a main storage device (MEM) 12, a boot ROM (ROM) 13, and an external storage device (program storage means) 14 as program execution means. The boot ROM 13 stores a program including a program for realizing the function of the switching unit.
[0023]
The computer system further includes a switching period storage unit (switching period storage unit) 15 in which switching periods (switching start date and time and switching end date and time) are stored, a clock circuit (clock unit) 16 for detecting the current date and time, An IPL machine number storage unit 17 and a next IPL machine number storage unit 18 are provided.
[0024]
The external storage device 14 has a first program area 14a and a second program area 14b in which two programs (including data) of the same or different versions executed by the central processing unit 11 are stored.
[0025]
The central processing unit 11 executes one of the first program area 14a and the second program area 14b as an active system and the other as a standby system, and switches to the standby system when a failure occurs in the active system.
[0026]
In order to identify the first program area 14a and the second program area 14b, the first program area 14a is assigned an IPL number 0 and the second program area 14b is assigned an IPL number 1.
[0027]
The current IPL machine number storage unit 17 and the next IPL machine number storage unit 18 store an IPL machine number (in this case, IPL machine number 1) corresponding to the program area as the active system.
[0028]
In the case where the maintenance worker performs a program revision operation, one of the first and second program areas 14a and 14b which is used as a standby system (in this case, the first program area 14a) is used. Then, the revised version is installed by installing the revised program or executing the modified program.
[0029]
Next, the switching period is stored in the switching period storage unit 15, and the IPL unit number (the IPL unit number 0 in this case) of the first program area 14 a for which the edition was revised is stored in the next IPL unit number storage unit 18. The IPL machine number 1 of the second program area 14b remains stored in the current IPL machine number storage unit 17.
[0030]
The boot ROM 13 stores a program for performing an IPL (initial program load) process. The central processing unit 11 executes the program of the boot ROM 13 to perform the IPL processing as shown in FIG.
[0031]
That is, when the IPL process is started (step “abbreviated to ST” hereinafter) 1, it is determined whether or not the current date and time detected by the clock circuit 16 is within the switching period stored in the switching period storage unit 15 ( ST2).
[0032]
In ST2, if the current date and time detected by the clock circuit 16 is within the switching period stored in the switching period storage unit 15, the IPL unit number of the current IPL unit number storage unit 17 and the next IPL unit number storage unit It is determined whether the 18 IPL machine numbers are the same (ST3).
[0033]
In ST3, if the IPL machine number in the current IPL machine number storage unit 17 and the IPL machine number in the next IPL machine number storage unit 18 are not the same, the IPL machine number stored in the next IPL machine number storage unit 18 (in this case, Loads the program in the area of the external storage device 14 (in this case, the first program area 14a) corresponding to the IPL machine number 0) into the main storage device 12 (ST4), and initializes the switching period of the switching period storage unit 15. (ST5), the following processing (execution of the loaded program, etc.) is performed (ST6).
[0034]
In ST2, if the current date and time detected by the clock circuit 16 is not within the switching period stored in the switching period storage unit 15, and in ST3, store the IPL unit number and the next IPL unit number in the current IPL unit number storage unit 17. If the IPL number of the unit 18 is the same, the area of the external storage device 14 corresponding to the IPL number (in this case, IPL number 1) stored in the current IPL number storage 17 (in this case, The program in the second program area 14b) is loaded into the main storage device 12 (ST7), and ST6 is executed.
[0035]
According to this embodiment, the maintenance worker performs the predetermined setting work (setting of the switching period and the IPL machine number) after the program revision work, thereby automatically switching to the program after the revision. Therefore, there is no need for the maintenance worker to switch to the program after the revision, and the work burden on the maintenance worker is small.
[0036]
[Second embodiment]
FIG. 3 is a block diagram illustrating a schematic configuration of a computer system according to the second embodiment of this invention. Components that are substantially the same as those in the first embodiment are given the same numbers, and a part of the description is omitted.
[0037]
The computer system according to the second embodiment includes an error detection unit 19 in addition to the configuration of the first embodiment. The error detection unit 19 has an error state flag (the initial state is OFF “OFF”) corresponding to the current IPL model number and the next IPL model number. The error detection unit 19 checks the program when the program is loaded from the external storage device 14 to the main storage device 12, and turns on the error state flag if there is an error in the program. .
[0038]
In the second embodiment, the central processing unit 11 performs the IPL processing as shown in FIG.
That is, when the IPL process is started (step 1), it is determined whether or not the current date and time detected by the clock circuit 16 is within the switching period stored in the switching period storage unit 15 (ST2).
[0039]
In ST2, if the current date and time detected by the clock circuit 16 is within the switching period stored in the switching period storage unit 15, the IPL unit number of the current IPL unit number storage unit 17 and the next IPL unit number storage unit It is determined whether the 18 IPL machine numbers are the same (ST3).
[0040]
In ST3, if the IPL machine number in the current IPL machine number storage unit 17 and the IPL machine number in the next IPL machine number storage unit 18 are not the same, the IPL machine number stored in the next IPL machine number storage unit 18 (in this case, Loads the program in the area of the external storage device 14 (in this case, the first program area 14a) corresponding to the IPL machine number 0) into the main storage device 12 (ST4).
[0041]
If an error is detected during the loading process (ST5), a program interrupt occurs and the error status flag corresponding to the next IPL machine number of the error detection unit 19 is turned ON. The contents of the detection unit 19 are checked (ST6), and an external device corresponding to the IPL machine number (in this case, IPL machine number 1) stored in the current IPL machine number storage unit 17 in which the error state flag is OFF “OFF”. The program in the area of the storage device 14 (in this case, the second program area 14b) is reloaded into the main storage device 12 (ST7).
[0042]
Next, the IPL machine number in the current IPL machine number storage unit 17 is copied to the next IPL machine number storage unit 18 (ST8), and the process proceeds to the next process (ST9).
In ST2, if the current date and time detected by the clock circuit 16 is not within the switching period stored in the switching period storage unit 15, and in ST3, store the IPL unit number and the next IPL unit number in the current IPL unit number storage unit 17. If the IPL number of the unit 18 is the same, the area of the external storage device 14 corresponding to the IPL number (in this case, IPL number 1) stored in the current IPL number storage 17 (in this case, The program in the second program area 14b) is loaded into the main storage device 12 (ST10), and ST9 is executed. If no error is detected in ST5, ST9 is executed.
[0043]
According to this embodiment, when it is detected that an error exists in the program after the revision, the program is automatically returned to the program before the revision, so that the maintenance worker cannot respond promptly. Even with this, the operation of the computer system can be continued.
[0044]
[Third Embodiment]
FIG. 5 is a block diagram showing a schematic configuration of a computer system according to the third embodiment of this invention. Components that are substantially the same as those in the first and second embodiments are denoted by the same reference numerals, and description thereof is partially omitted.
[0045]
In the computer system according to the third embodiment, in addition to the configuration of the first embodiment, a warranty period storage unit (warranty period storage unit) 20 for storing a warranty period, and a warranty period monitoring unit 21 It has.
[0046]
The warranty period storage unit 20 is a table in which a status flag, a warranty period (the number of storage days), and a version number are set in correspondence with the software logical number. Set by maintenance personnel. The warranty period is a period (days) in which the program before the revision is to remain after switching from the program before the revision to the program after the revision.
[0047]
The warranty period monitoring unit 21 detects the number of days since switching from the program before the revision to the program after the revision, determines whether or not it is within the warranty period of the warranty period storage unit 20, and determines whether the warranty period has elapsed. In this case, the contents of the revised program are copied to the area 14a or 14b of the external storage device 14 where the program before the revision is stored.
[0048]
In the third embodiment, the central processing unit 11 executes a program of the boot ROM 13 to perform an IPL process including a process as shown in FIG.
That is, the patrol function is activated with the activation of the IPL process (step 1), and it is determined whether or not the current time is within the guarantee period of the guarantee period storage unit 20 (ST2). In ST2, if it is within the warranty period, change to the program in the second program area 14b corresponding to the IPL machine number 1 in which the program before the revision is stored is set to prohibit (ST3). Is subtracted (ST4). The process of ST4 is performed only once a day.
[0049]
Next, it is determined whether or not the warranty period is equal to "0" (ST5). If the warranty period is not equal to "0", the process returns to ST1, and if the warranty period is equal to "0", the process returns to ST1. Then, the contents of the first program area 14a corresponding to the IPL machine number 0 where the revised program is stored are copied to the second program area 14b corresponding to the IPL machine number 1 where the program before the revision is stored (ST6). ), The change prohibition state is released (ST7), and this processing ends (ST8). In ST2, even if it is not within the warranty period, this process is terminated (ST8).
[0050]
According to this embodiment, the maintenance worker sets the warranty period after the program is updated, and leaves the program before the update until the warranty period elapses after switching to the program after the update. As a result, it is possible to quickly switch to the program before the revision if necessary.
[0051]
After the warranty period has passed, it is assumed that the revised program has been sufficiently verified, and the revised program is automatically copied over the original program. There is no need for the maintenance worker to perform the work, and the workload of the maintenance worker can be reduced.
[0052]
[Fourth Embodiment]
FIG. 7 is a block diagram illustrating a schematic configuration of a computer system according to the fourth embodiment of this invention. Components that are substantially the same as those in the first to third embodiments are denoted by the same reference numerals, and a description thereof is partially omitted.
[0053]
The computer system according to the fourth embodiment includes a changeover switch 22 in addition to the configuration of the third embodiment. The changeover switch 22 is means for a maintenance worker to forcefully set which of the first and second program areas 14a and 14b of the external storage device 14 is to be loaded into the main storage device 12.
[0054]
FIG. 8 shows a process performed when the changeover switch 22 is turned ON. That is, when it is detected that the changeover switch 22 is turned on (ST1), it is determined whether or not the current time is within the guarantee period of the guarantee period storage unit 20 (ST2).
[0055]
In ST2, if it is within the guarantee period, the IPL machine number in the current IPL machine number storage unit 17 is compared with the IPL machine number in the next IPL machine number storage unit 18 (ST3). The warranty period in the period storage unit 20 is cleared (ST4), the process by the warranty period monitoring unit 21 is canceled, and the process ends (ST5).
[0056]
This process is also terminated when the warranty period is not within ST2 and when the IPL machine number in the current IPL machine number storage unit 17 is the same as the IPL machine number in the next IPL machine number storage unit 18 in ST3. .
[0057]
According to this embodiment, the maintenance worker turns on the changeover switch 22 when the occurrence of a failure in the revised program is detected or other necessary after switching to the revised program. In addition, the program to be executed is switched to the program before the revision, and the automatic copying of the program after the revision to the program before the revision to be executed after the elapse of the warranty period is stopped.
[0058]
The changeover switch 22 is initially set to off "OFF", and the process when the changeover switch 22 is off is the same as that of the third embodiment.
[Fifth Embodiment]
FIG. 9 is a block diagram showing a schematic configuration of a computer system according to the fifth embodiment of the present invention. Components that are substantially the same as those in the first to fourth embodiments are denoted by the same reference numerals, and a description thereof is partially omitted.
[0059]
The computer system according to the fifth embodiment includes a diagnosis unit (diagnosis unit) 23 in addition to the configuration of the third embodiment. The diagnostic unit 23 diagnoses whether or not the failure is caused by the program when the failure is detected during the execution of the program by the central processing unit 11.
[0060]
FIG. 10 shows a process performed when the occurrence of a failure is detected during the execution of the revised program by the central processing unit 11. That is, when the occurrence of a device failure is detected (ST1), the dump file is analyzed and the soft error code is analyzed (ST2).
[0061]
Next, it is determined whether or not the cause of the failure is caused by the program being executed (ST3). In ST3, when the cause of the failure is due to the program being executed, the program is switched to loading and execution of the program before the revision (ST4), and the warranty period in the warranty period storage unit 20 is cleared (ST5). ), The process by the warranty period monitoring unit 21 is canceled, and this process is terminated (ST6).
[0062]
If the cause of the failure is not due to the program being executed in ST3, this process is terminated (ST6).
According to this embodiment, after switching to the program after the revision, the occurrence of a failure is detected during the execution of the program after the revision, and if the cause of the failure is caused by the program being executed, the In addition to switching to the previous program, automatic copying of the revised program to the pre-revised program to be performed after the warranty period has elapsed is stopped.
[0063]
Therefore, in the event that a failure due to the program occurs during the execution of the program after the revision after the revision, the operation based on the program before the revision can be continued without prompt action by a maintenance worker.
[0064]
[Sixth Embodiment]
FIG. 11 is a block diagram showing a schematic configuration of a computer system according to the sixth embodiment of the present invention. Components that are substantially the same as those in the first to fifth embodiments are denoted by the same reference numerals, and description thereof is partially omitted.
[0065]
In the computer system according to the sixth embodiment, in addition to the configuration of the first embodiment, a correction data storage unit (correction data storage unit) 24, a revision / correction function unit (application unit) 25, and An instantaneous interruption detection unit 26 is provided.
[0066]
The correction data storage unit 24 stores correction data, which is data necessary for revising a program (program of the first program area 14a or the second program area 14b) stored in the external storage device 14 or a program. The correction data is stored in the correction data storage unit 24 by the maintenance worker before the revision work.
[0067]
The revision / modification function unit 25 is a process for revising a program in the first program area 14a or the second program area 14b of the external storage device 14 according to the modification data in the modification data storage unit 24 in accordance with an instruction of the maintenance worker. Perform application processing.
[0068]
The instantaneous interruption detection unit 26 detects whether or not an instantaneous interruption of the power supply has occurred while the application processing by the revision / correction function unit 25 is being executed.
FIG. 12 shows a process performed when an instantaneous power interruption occurs during the application process. First, when a program revision / modification process is started (ST1), the update state flag of a file constituting a program to be revised is turned ON (ST2), and a file necessary for the program revision is turned on. Update processing is performed (ST3).
[0069]
After the update processing, the update state flag is set to "OFF" (ST4), and the processing is terminated (ST5). If an instantaneous power interruption occurs during the file update process (ST3), the update status flag for the file being updated remains on.
[0070]
FIG. 13 shows a process at the time of restarting after a momentary power interruption occurs during the application process. When the system is restarted after an instantaneous interruption (ST1), an initialization process is performed (ST2), and it is determined whether or not the file constituting the program is being updated by referring to an update state flag (ST3). . If the file is being updated in ST3, the program before the edition is copied to the first or second program area 14a, 14b of the external storage device 14 in which the program being updated is stored (ST4). The process ends (ST5). If the file is not being updated in ST3, this process ends (ST5).
[0071]
According to this embodiment, since the revision data is automatically performed by the revision data storage unit 24 and the revision / modification function unit 25, the work load of the maintenance worker can be reduced. Also, the presence or absence of an instantaneous power interruption during the program revision process is recognized by referring to the status update flag at the time of restart, and if an instantaneous power interruption occurs during the revision process, the Since the program is copied so as to overwrite the program being revised, the reliability of the program revision can be improved.
[0072]
[Seventh Embodiment]
FIG. 14 is a diagram showing the configuration of the remote maintenance system according to the seventh embodiment of the present invention. The remote maintenance system includes a plurality of general user terminals 31, a maintenance center 32, a development system 33, and a verification system (verification device) 34 as computer systems to be maintained. The general user terminal 31 has the same configuration as the computer systems of the first to sixth embodiments.
[0073]
The plurality of general user terminals 31 and the maintenance center 32 are connected to each other via a communication line. The maintenance center 32 is a device for centrally remotely maintaining a plurality of general user terminals 31.
[0074]
The development system 33 is a system that develops correction data indicating the contents of a revised version of a program executed by the general user terminal 31. The developed correction data is temporarily verified in the development system 33, sent to the maintenance center 32 via a medium 35 such as a floppy disk, and registered. The development system 33 and the maintenance center 32 may be connected via a communication line, and the developed correction data may be transferred and registered via the communication line.
[0075]
The verification system 34 performs an application process, which is a process of revising a program executed by the general user terminal 31 based on the correction data, under the same conditions as the general user terminal 31, and checks for the presence of a bug in the program and the general user terminal 31. It is a system that inspects the reliability, such as the consistency of the information, and recognizes the pass / fail. The maintenance center 32 and the verification system 34 are connected to each other via a communication line.
[0076]
The maintenance center 32 includes a correction data storage unit (correction data storage unit) 32a and a transfer unit (transfer unit) not shown.
The correction data created by the development system 33 is registered in the correction data storage unit 32a of the maintenance center 32. A plurality of correction data can be registered in the correction data storage unit 32a, and a transfer level indicating a transfer destination of the correction data is set in accordance with the identification (P-NO) of each registered correction data. be able to.
[0077]
There are two transfer levels, “general” indicating transfer to the general user terminal 31 and “verification” indicating transfer to the verification system. Correction data developed by the development system 33 is registered in the maintenance center 32 for the first time. Is set to "verify".
[0078]
The correction data registered in the correction data storage unit 32a is transferred by the transfer unit to the general user terminal 31 or the verification system 34 according to the corresponding transfer level.
In the verification system 34 to which the correction data has been transferred, the program executed by the general user terminal 31 is executed based on the correction data in the same manner as that executed by the general user terminal 31, and the verification of the revised program is performed. I do. The result of the verification (“good” or “bad”) is notified to the maintenance center 32.
[0079]
When the verification result from the verification system 34 is “good”, the maintenance center 32 changes the transfer level corresponding to the correction data from “transfer” to “general”. When the verification result by the verification system 34 is “bad”, the development system 33 is notified of the fact.
[0080]
The general user terminal 31 is an external storage device (program storage unit) such as a magnetic disk device having a storage area for storing two or more programs having the same contents as the active system and the standby system, and the correction transferred from the maintenance center 32. It has an application unit (application unit) that performs application processing on a program as a standby system according to data, and a switching unit (switching unit) that performs switching processing for switching from the active system to the standby system.
[0081]
In the general user terminal 31, upon receiving the transfer of the correction data from the maintenance center 32, the application unit updates the program as a standby system of the external storage device according to the correction data.
[0082]
According to this embodiment, the modification data necessary for the revision of the program executed by the general user terminal 31 is created in the development system 33 and then registered in the maintenance center 32. And the application unit of the general user terminal 32 performs the application processing. Therefore, the maintenance worker can intensively perform the revision work on the plurality of general user terminals 31 at the maintenance center 32. This can improve the efficiency of the revision work.
[0083]
When the correction data is registered in the correction data storage unit 32a of the maintenance center 32, the transfer level is “verified”, and after being transferred to the verification system 34 and verified, the transfer level is set to “general”. To transfer only the correction data having the transfer level "general" to the general user terminal 31, the reliability of the correction data is high, and the general user terminal 31 System down can be prevented.
[0084]
[Eighth Embodiment]
FIG. 15 is a diagram showing the configuration of the remote maintenance system according to the eighth embodiment of the present invention. Components that are substantially the same as those of the seventh embodiment are denoted by the same reference numerals, and description thereof is partially omitted.
[0085]
The maintenance center 32 of the remote maintenance system according to the eighth embodiment has a period storage section (period storage means) 32b. In the period storage unit 32b, a switching period (a program for an active system) to a program for a revised system (a program for a standby system) when a program executed by the general user terminal 31 is subjected to a revision process (a program for a standby system). Switching information including a switching start date and time, a switching end date and time, and a warranty period, which is the number of days for which the program before the revision after switching to the program after the revision (standby system program) should remain, is stored.
[0086]
The switching information including the switching period and the guarantee period includes the automatic driving schedule information (P-ON [power-on] time, OS-IPL time, OS-STOP time, P-OFF [power-off] time). The maintenance center 32 receives the transfer of the automatic operation schedule information, refers to the automatic operation schedule information, and is automatically determined for each of the general user terminals 31. 32b.
[0087]
The switching information including the switching period and the warranty period is transferred when the correction data is transferred to the general user terminal 31 by the transfer unit of the maintenance center 32.
[0088]
In the general user terminal 31, after the application processing for the standby system program by the application unit, the operation system program (the program before the revision) is changed to the standby system program (the program before the revision) according to the switching period included in the switching information from the maintenance center 32. (The program after the revision), and after a lapse of the warranty period included in the switching information from the maintenance center 32 after this switching process, the program as the standby system (the program before the revision) is replaced by the program as the active system. The program as the standby system is revised by overwriting (the program after revision).
[0089]
After switching from the active system to the standby system, if it is detected that there is an error in the program for the active system within the warranty period from the maintenance center 32, the version is changed by further switching from the active system to the standby system. Execute the previous program.
[0090]
According to this embodiment, the maintenance center 32 updates the program of the general user terminal 31, switches the program to the updated program after the update processing, copies the program after the update to the program before the update, and executes the processing after the update. When the error occurs in the program, the processing for switching to the program before the revision is all automatically performed, so that the work load of the maintenance worker is almost eliminated.
[0091]
[Ninth embodiment]
FIG. 16 is a diagram showing the configuration of the remote maintenance system according to the ninth embodiment of the present invention. The same components as those in the seventh and eighth embodiments are denoted by the same reference numerals, and the description thereof will be partially omitted.
[0092]
In the remote maintenance system according to the ninth embodiment, after the general user terminal 31 completes the revision of the program as the standby system of the external storage device by the application unit, the general user terminal 31 completes the revision of the program. The maintenance center 32 is notified of the fact that the update has been performed and the application list (P-NO member list) of the correction data used for the revision.
[0093]
The maintenance center 32 receiving the notification displays the completion of the program revision and an application list on the display (display means) of the maintenance person terminal 36 of the maintenance center 32, and displays the pager carried by the maintenance worker. Automatically send to. The maintenance worker recognizes that the edition of the program has been completed by ringing the pager or displaying on the maintenance terminal, and refers to the application list displayed on the terminal 36 for maintenance personnel.
[0094]
[Tenth embodiment]
FIG. 17 is a diagram showing the configuration of the remote maintenance system according to the tenth embodiment of the present invention. The same components as those in the seventh to ninth embodiments are denoted by the same reference numerals, and a part of the description will be omitted.
[0095]
In the remote maintenance system according to the tenth embodiment, the general user terminal 31 includes a message that the switching unit has performed the switching process from the active system to the standby system and then has performed the switching process from the active system to the standby system. The switching result is notified to the maintenance center 32.
[0096]
The maintenance center 32 that has received the notification displays the switching result on a display (display means) of the maintenance staff terminal 36 of the maintenance center 32 and automatically transmits the switching result to a pager carried by the maintenance worker. The maintenance worker recognizes that the switching of the program is completed by ringing the pager or by displaying on the terminal for maintenance personnel 36, and refers to the switching result displayed on the terminal for maintenance personnel 36.
[0097]
[Eleventh embodiment]
FIG. 18 is a diagram showing the configuration of the remote maintenance system according to the eleventh embodiment of the present invention. The same reference numerals are given to the same components as those in the seventh to tenth embodiments, and a part of the description is omitted.
[0098]
In the remote maintenance system according to the eleventh embodiment, if the general user terminal 31 does not notify the switching result in the tenth embodiment during the switching period, the maintenance center 32 establishes a callback connection. It is connected to the general user terminal 31 that has not been notified of the switching result, and issues a program switching instruction.
[0099]
The general user terminal 31 that has received the switching instruction immediately performs the switching process from the active system to the standby system when the host CPU is in a stopped state. When the host CPU is operating, the general user terminal 31 notifies the maintenance center 32 that switching is not possible.
[0100]
The maintenance center 33 notified of the switching failure from the general user terminal 31 refers to the OS-STOP time from the automatic operation schedule information of the general user terminal 31 held by the maintenance center, and calls back again at that time. Thus, the user is connected to the general user terminal 31 and gives a switching instruction. In this case, since the host CPU is stopped in this case, the general user terminal 31 immediately switches from the active system to the standby system.
[0101]
When the general user terminal 31 receives the switching instruction from the maintenance center 32 and the host CPU is operating, the general user terminal 31 notifies the maintenance center 32 that switching is not possible or does not notify the general user terminal 31. The switching process may be automatically performed when the host CPU is stopped.
[0102]
[Twelfth embodiment]
FIG. 19 is a diagram showing the configuration of the remote maintenance system according to the twelfth embodiment of the present invention. The same reference numerals are given to the same components as those in the seventh to eleventh embodiments, and a part of the description will be omitted.
[0103]
In the remote maintenance system according to the twelfth embodiment, the general user terminal 31 has a function of checking the guarantee period of the switching information transferred from the maintenance center 32. The terminal 31 is connected to the maintenance center 32 and requests the maintenance center 32 to transfer the correction data. The maintenance center that has received the correction data transmission request transfers the correction data to the general user terminal 31.
[0104]
【The invention's effect】
Since the present invention is configured as described above, it greatly reduces the burden on maintenance workers for updating a program, switching to a program after an update, changing to a program before an update when a failure occurs, and other operations. This makes it possible to increase the efficiency of work or processing involved in the revision of the program.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a schematic configuration of a computer system according to a first embodiment of this invention.
FIG. 2 is a flowchart illustrating processing of the computer system according to the first embodiment of this invention.
FIG. 3 is a block diagram illustrating a schematic configuration of a computer system according to a second embodiment of this invention.
FIG. 4 is a flowchart illustrating a process performed by the computer system according to the second embodiment of this invention;
FIG. 5 is a block diagram illustrating a schematic configuration of a computer system according to a third embodiment of this invention.
FIG. 6 is a flowchart illustrating processing of the computer system according to the third embodiment of this invention.
FIG. 7 is a block diagram illustrating a schematic configuration of a computer system according to a fourth embodiment of this invention.
FIG. 8 is a flowchart illustrating processing of the computer system according to the fourth embodiment of this invention.
FIG. 9 is a block diagram illustrating a schematic configuration of a computer system according to a fifth embodiment of the present invention.
FIG. 10 is a flowchart illustrating processing of the computer system according to the fifth embodiment of this invention.
FIG. 11 is a block diagram illustrating a schematic configuration of a computer system according to a sixth embodiment of the present invention.
FIG. 12 is a flowchart showing a process at the time of a revision process of the computer system according to the sixth embodiment of the present invention.
FIG. 13 is a flowchart illustrating a process at the time of restart after a momentary power interruption of the computer system according to the sixth embodiment of this invention.
FIG. 14 is a diagram illustrating a schematic configuration of a remote maintenance system according to a seventh embodiment of the present invention.
FIG. 15 is a diagram illustrating a schematic configuration of a remote maintenance system according to an eighth embodiment of the present invention.
FIG. 16 is a diagram illustrating a schematic configuration of a remote maintenance system according to a ninth embodiment of the present invention.
FIG. 17 is a diagram illustrating a schematic configuration of a remote maintenance system according to a tenth embodiment of the present invention.
FIG. 18 is a diagram illustrating a schematic configuration of a remote maintenance system according to an eleventh embodiment of the present invention.
FIG. 19 is a diagram illustrating a schematic configuration of a remote maintenance system according to a twelfth embodiment of the present invention.
[Explanation of symbols]
11 Central Processing Unit (CPU)
12 Main memory (MEM)
13. Boot ROM (ROM)
14 External storage device
15 Switching period storage
16 Clock circuit
17 Current IPL machine number storage
18th IPL machine number storage
19 Error detector
20 Warranty period storage
21 Warranty period monitoring unit
22 Changeover switch
23 Diagnosis unit
24 Correction data storage
25 Revision / Modification Function Department
26 Instantaneous interruption detector
31 General user terminal (computer system)
32 Maintenance Center
33 Development System
34 Verification system
36 Maintenance terminal

Claims (2)

Program execution means;
First program storage means for storing a program,
A second program storage unit in which a program having the same or different version number as the version number of the program stored in the first program storage unit is stored;
Switching period storage means for storing a switching period,
A current IPL machine number storage unit for storing an IPL machine number for specifying a storage unit for storing a program as an operation system in the first and second program storage units;
A next IPL machine number storage unit that stores an IPL machine number that specifies a storage unit that stores a program as an active system or a program as a next active system in the first and second program storage units;
Clock means for detecting the current date and time;
If the date and time by the clock means is not during the switching period of the switching period storage means, or the IPL machine number stored in the current IPL machine number storage means is the same as the IPL machine number stored in the next IPL machine number storage means In the case of , the program stored in any of the first and second program storage means specified by the IPL machine number stored in the current IPL machine number storage means is a program executed by the program execution means. the Ri Oh in between switching period and the current IPL machine number the the IPL device number stored in the storage means following IPL machine number IPL machine number stored in the storage unit of time by the clock means is the switching period storage means flop but stored in one of said first and second program storage means identified by said next IPL machine number storage IPL machine number stored in the unit if not identical And switching means for switching processing of a program for executing grams said program execution means,
Error detection means for detecting the presence of an error in a program stored in any of the first and second program storage means specified by the IPL machine number stored in the next IPL machine number storage means ,
The switching means converts the program of the first and second program storage means specified by the IPL machine number stored in the next IPL machine number storage means into a program to be executed by the program execution means, and then detects the error. When the presence of an error is detected by the means, the program stored in one of the first and second program storage means specified by the IPL machine number stored in the current IPL machine number storage means is stored in the memory. discards said next IPL machine number or the program stored in the first and second program storage means specified by the stored IPL machine number in the memory means together with a program that the program executing means executes, the serial to any one of the first and second program storage means specified by IPL machine number stored in the current IPL machine number storage means Computer system adapted to copy any of the first and second program storage means specified by IPL machine number that is stored a program to the next IPL machine number storage means. A clock program for functioning as a clock means for detecting the current date and time,
If the date and time by the clock means are not within the switching period indicated by the switching period stored in the switching period storage means, or the first program storage means storing the program and the version number of the program stored in the first program storage means IPL stored in the current IPL machine number storage means for storing an IPL machine number for specifying a storage means for storing a program as an active system in a second program storage means for storing a program of the same or different version number The next IPL machine number storing means for storing a machine number and an IPL machine number for specifying a storage means for storing a program as an operating system or a program as a next operating system in the first and second program storing means. the first and second flop when IPL machine number are the same are identified by the IPL device number stored in the current IPL machine number storage means has And program for carrying out any programs stored in grams storage means, said clock means date and Ri Oh in between the switching period by the IPL device number stored in the current IPL machine number storage unit the next IPL machine If the IPL number stored in the number storage means is not the same, the IPL number is stored in one of the first and second program storage means specified by the IPL number stored in the next IPL number storage means . A switching program for functioning as switching means for performing a switching process to be a program for executing the program;
To function as error detection means for detecting the presence of an error in a program stored in any of the first and second program storage means specified by the IPL machine number stored in the next IPL machine number storage means Memorizing the error detection program,
The switching program includes a program that is executed by the program execution unit and executes a program stored in one of the first and second program storage units specified by the IPL unit number stored in the next IPL unit number storage unit. after, if the presence of an error is detected by the error detection means, wherein either of said first and second program storage means specified by IPL machine number stored in the current IPL machine number storage means The stored program is a program to be executed by the program execution means, and is stored in one of the first and second program storage means specified by the IPL machine number stored in the next IPL machine number storage means . discard the program, the first and second professional specified by IPL machine number stored in the current IPL machine number storage means To function as a means for copying the one of the first and second program storage means specified by IPL machine number stored in the next IPL machine number storage means a program stored in any of ram memory means Computer-readable storage medium including the program.

Images