JP5084853B2 - Firmware update device, communication device, electronic device, firmware update system, firmware update method, and program - Google Patents

Description

  The present invention relates to a firmware update device that updates firmware, a communication device that performs communication, an electronic device that exhibits a function when a computer executes a program, a firmware update system that updates firmware, a firmware update method, and The present invention relates to a program executed by a computer.

  In a communication apparatus connected to a base station via a communication line, it may be necessary to update the firmware in order to add a program function or deal with a bug. The following procedure can be considered as a procedure for updating the firmware.

  First, for example, a new version of firmware for update is downloaded from the base station or the like to the communication device via the communication line, and the old version of firmware already stored in the communication device is updated to the new version for update. Rewrite to firmware. After this rewriting, the communication device is restarted to complete the firmware update.

  In relation to this, a system has been proposed that prevents the communication apparatus from being restarted due to a defect in the updated firmware or a data error during download (see, for example, Patent Documents 1 and 2). In these systems, a nonvolatile memory for storing recovery firmware is provided in the apparatus. The recovery firmware is written and held in advance in the nonvolatile memory (for example, at the time of factory shipment). This recovery firmware is stored in a different location from the firmware that is actually executed. As described above, even if the firmware that is actually executed is updated, it is erased. There is no.

  When the communication device cannot be restarted, the firmware that is actually executed is rewritten with the firmware for recovery, and then restarted to enter the operating state. In this way, it is possible to prevent the communication device from being in an operation stop state for a long time.

JP 2001-331327 A JP 2002-333990 A

  However, the systems disclosed in Patent Documents 1 and 2 require a process of writing recovery firmware in a nonvolatile memory in advance before shipment from the factory. For this writing, it is necessary to provide a terminal for writing firmware in the nonvolatile memory on the hardware board of the communication device. For this reason, the structure of a communication apparatus becomes complicated, and a production man-hour and parts cost increase.

  In the systems disclosed in Patent Documents 1 and 2, firmware different from the firmware that is actually executed may be erroneously written as recovery firmware due to human error. If it is intended to prevent such mistakes, firmware version management becomes complicated.

  The present invention has been made in view of the above circumstances, and provides a firmware update device, a communication device, and an electronic device that can update the firmware without increasing production man-hours, component costs, and complexity of plate management. An object is to provide a firmware update system, a firmware update method, and a program.

In order to achieve the above object, in the firmware updating apparatus according to the present invention, the first storage unit stores firmware for execution. The second storage unit, Ri spare storage unit der, having at the same time capacity capable of storing at least two firmware. The control unit reads the firmware stored in the first storage unit when the firmware is not stored in the second storage unit at the time of startup, and stores the firmware as recovery firmware in the second storage unit. Write. The input unit inputs firmware for update. The control unit stores the input update firmware in the second storage unit separately from the recovery firmware, and stores the firmware stored in the first storage unit in the second storage unit. Updated to the updated firmware, the update flag is turned on, and after reset, the update flag is turned on, and the firmware stored in the first storage unit does not operate normally, the first storage The firmware stored in the storage unit is updated to the recovery firmware stored in the second storage unit and the update flag is turned off. After the reset, the update flag is turned on and stored in the first storage unit When the updated firmware is operating normally, the update firmware stored in the second storage unit is changed to the recovery firmware stored in the second storage unit, and the update flag is changed. The To.

  According to the present invention, since the recovery firmware program is automatically generated based on the execution firmware, the step of writing the recovery firmware to the storage device and the terminal for writing are not required. Further, since the recovery firmware is a copy of the firmware that is being executed, there is no need to consider the difference between the versions of the firmware. As a result, the firmware can be updated without increasing production man-hours, component costs, and complexity of plate management.

It is a block diagram which shows the whole structure of the firmware update system which concerns on Embodiment 1 of this invention. It is a figure which shows the memory space of a microcomputer. It is a flowchart of the starting process of the communication apparatus of FIG. It is a figure which shows a mode that the firmware production | generation program for a recovery is transferred and executed. It is a figure which shows a mode that the firmware for recovery is produced | generated. It is a flowchart of the recovery determination process of the communication apparatus of FIG. It is a flowchart of the program update process of the communication apparatus of FIG. FIG. 6 is a diagram illustrating a state in which update firmware is stored in an area B. It is a figure which shows a mode that a firmware update program is transferred to internal RAM. It is a figure which shows a mode that the firmware memorize | stored in the internal non-volatile memory is updated to the firmware for an update. It is a figure which shows a mode that the firmware for an update is switched to the firmware for a recovery. It is a figure which shows a mode that a recovery execution program is transferred to internal RAM. It is a figure which shows a mode that the firmware memorize | stored in the internal non-volatile memory is updated to the firmware for recovery. It is a block diagram which shows the whole structure of the firmware update system which concerns on Embodiment 2 of this invention.

  Next, embodiments of the present invention will be described in detail with reference to the drawings.

Embodiment 1 FIG.
First, a first embodiment of the present invention will be described.

  FIG. 1 shows the overall configuration of a firmware update system 100 according to Embodiment 1 of the present invention. As shown in FIG. 1, the firmware update system 100 includes a communication device 1 and a server 2. The communication device 1 is connected to the base station 3. The server 2 is connected to the communication line network 4. The base station 3 is a base station of the communication network 4.

  The firmware update system 100 is a system for updating firmware executed by the communication apparatus 1. The update firmware is transmitted from the server 2 to the base station 3 via the communication line network 4 and downloaded from the base station 3 to the communication device 1.

  What is shown in the communication device 1 is a configuration necessary for updating the firmware, and should also be referred to as the firmware update device 5. As illustrated in FIG. 1, the communication device 1 (firmware update device 5) includes a microcomputer 10, a nonvolatile memory 11 as a second storage unit, and a communication controller 12.

  The microcomputer 10 is a computer capable of performing multitasking. The microcomputer 10 includes an internal nonvolatile memory 15 as a first storage unit and an internal random access memory (RAM) 16.

  The nonvolatile memory 11 is a spare storage unit. The non-volatile memory 11 is provided with two areas A and B in which firmware 20 can be stored. As will be described later, the update firmware 20 and the recovery firmware 20 are stored in the areas A and B, respectively.

  The communication controller 12 performs communication control with the base station 3. The update firmware 20 is downloaded via the communication controller 12. That is, the communication controller 12 is an input unit for inputting firmware 20 for update.

  FIG. 2 shows a memory space of the microcomputer 10. As shown in FIG. 2, an internal nonvolatile memory 15, an internal RAM 16, and a nonvolatile memory 11 are allocated to the memory space of the microcomputer 10.

  The internal nonvolatile memory 15 is divided into a fixed area and a rewrite area. In the fixed area, rewriting of data of the communication device 1 is prohibited, and the rewriting area is an area in which data is rewritten during operation of the communication device 1. In the shipping state, a main program 21, a download program 22, a recovery firmware generation program 23, a recovery execution program 24, and a firmware update program 25 are stored in the fixed area. On the other hand, firmware 20 is stored in the rewrite area.

  The main program 21 is a program executed by the microcomputer 10 from the time of reset. The download program 22 is a program for downloading update firmware. The main program 21 and the download program 22 are separate tasks.

  The recovery firmware generation program 23 generates the recovery firmware 20 by transferring the firmware 20 stored in the internal nonvolatile memory 15 to the area A of the nonvolatile memory 11 at the first startup. It is a program. The recovery execution program 24 is a program that executes recovery processing by overwriting the firmware 20 for recovery stored in the nonvolatile memory 11 with the firmware 20 stored in the internal nonvolatile memory 15. The firmware update program 25 is a program for updating the firmware 20 actually executed by the microcomputer 10 to the downloaded firmware 20 for update.

  The firmware 20 is firmware at the time of shipment, and is the first firmware that is actually executed by the microcomputer 10.

  The microcomputer 10 determines whether or not the recovery firmware 20 has been stored in the nonvolatile memory 11 by executing the main program 21 after resetting. If not, the recovery firmware 20 By executing the generation program 23, the firmware 20 stored in the internal nonvolatile memory 15 is read out and written in the nonvolatile memory 11 as recovery firmware, thereby generating the recovery firmware 20.

  Further, when the microcomputer 10 executes the download program 22 to download the update firmware 20 from the base station 3 and stores it in the nonvolatile memory 11, the microcomputer 10 executes the firmware update program 25. Then, the firmware 20 stored in the internal nonvolatile memory 15 is updated to the firmware 20 for update.

  Further, the microcomputer 10 executes the main program 21 to perform a normal operation check of the updated firmware 20 after updating the firmware 20, and if it is determined that the firmware 20 is not operating normally, recovery is performed. By executing the execution program 24, the firmware 20 stored in the internal nonvolatile memory 15 is updated to the recovery firmware 20 stored in the nonvolatile memory 11.

  Further, the microcomputer 10 executes the main program 21 to perform a normal operation check of the updated firmware 20 after updating the firmware 20, and if it is determined that it is operating normally, the microcomputer 10 is nonvolatile. The update firmware 20 stored in the nonvolatile memory 11 is changed to the recovery firmware 20 stored in the nonvolatile memory 11.

  Since the main program 21, the download program 22, the recovery firmware generation program 23, the recovery execution program 24, and the firmware update program 25 are placed in a fixed area of the internal nonvolatile memory 15 of the microcomputer 10, the program is updated. There is no worry about being rewritten. That is, these programs are prevented from being destroyed due to program update failure or the like during recovery and becoming impossible to self-recover.

  Since the recovery firmware generation program 23, the recovery execution program 24, and the firmware update program 25 are programs that access the internal nonvolatile memory 15, the microcomputer 10 transfers these programs to the internal RAM 16. Run.

  Next, the operation of the communication apparatus 1 (firmware updating apparatus 5) according to this embodiment will be described with reference to FIGS. Here, it is assumed that the areas A and B of the nonvolatile memory 11 are initialized at the time of shipment, and specific initial value data (for example, hexadecimal number, 0xFF, etc.) is written.

  First, the activation process of the communication device 1 will be described. FIG. 3 shows a flowchart of the activation process.

(Start process)
When the communication device 1 is activated, a reset signal is input to the microcomputer 10. The microcomputer 10 to which the reset signal is input starts to execute the main program 21 stored in the internal nonvolatile memory 15. In the main program 21, the microcomputer 10 first determines whether or not the recovery firmware 20 has been stored in the areas A and B of the nonvolatile memory 11 (step S1). The microcomputer 10 makes this determination depending on whether the data read from the areas A and B matches the initialization data. Immediately after shipment, the recovery firmware 20 is not stored in the areas A and B, and initial value data (0xFF, etc.) is written, so this determination is negative (step S1; No). .

  Subsequently, the microcomputer 10 transfers the recovery firmware generation program 23 from the internal nonvolatile memory 15 to the internal RAM 16 (step S2). Since the internal nonvolatile memory 15 cannot be accessed while the program stored in the internal nonvolatile memory 15 is being executed, the microcomputer 10 recovers the recovery stored in the internal nonvolatile memory 15 as shown in FIG. The recovery firmware generation program 23 is transferred to the internal RAM 16 and then the recovery firmware generation program 23 stored in the internal RAM 16 is executed.

  Subsequently, the microcomputer 10 jumps the execution position of the program from the current execution position on the main program 21 of the internal nonvolatile memory 15 to the execution start position of the recovery firmware generation program 23 (see FIG. 4). ), The execution of the recovery firmware generation program 23 stored in the internal RAM 16 is started (step S3).

  In the recovery firmware generation program 23, first, the microcomputer 10 sets the operation mode to the special mode, and makes the internal nonvolatile memory 15 readable (step S4).

  Subsequently, the microcomputer 10 transfers the firmware 20 from the internal nonvolatile memory 15 to the area A of the nonvolatile memory 11 as shown in FIG. 5 (step S5). The microcomputer 10 reads the firmware 20 from the internal nonvolatile memory 15 by a certain size and writes it into the area A of the nonvolatile memory 11. The microcomputer 10 repeatedly executes this transfer until all the data of the firmware 20 is written in the area A of the nonvolatile memory 11. As a result, the recovery firmware 20 is stored in the area A as shown in FIG.

  When the transfer is completed, the microcomputer 10 switches the operation mode from the special mode to the normal mode and returns itself to the normal state (step S6). Thereafter, the microcomputer 10 resets and restarts the communication device 1.

  As described above, by executing the recovery firmware generation program 23, the recovery firmware 20 is automatically generated in the area A based on the firmware 20 executed by the microcomputer 10. There is no need to store the recovery firmware 20 separately.

  After restarting, the microcomputer 10 again starts executing the main program 21 stored in the internal nonvolatile memory 15. The microcomputer 10 first determines whether or not the recovery firmware 20 has been stored in the areas A and B of the nonvolatile memory 11 (step S1). Here, since the recovery firmware 20 is stored in the area A, assuming that the recovery firmware 20 has already been stored (step S1; Yes), the microcomputer 10 performs a recovery determination process.

  In the recovery determination process, as shown in FIG. 6, the microcomputer 10 first determines whether or not the firmware 20 has been updated (step S11). Whether or not the firmware 20 has been updated is determined with reference to an F / W update flag described later. At this time, since the recovery firmware 20 is still restarted immediately after being stored in the area A, the firmware 20 has not been updated and the F / W update flag has not been set (step S11; No), the microcomputer 10 proceeds to normal operation processing.

  Here, if the firmware 20 needs to be updated during the normal operation process, the microcomputer 10 interrupts the normal operation process and executes the program update process shown in FIG. In this program update process, as shown in FIG. 7, first, the microcomputer 10 executes the download program 22 to download the update firmware 20 from the base station 3, and the area B of the nonvolatile memory 11. (Step S21).

  Subsequently, the microcomputer 10 determines whether or not the download of the update firmware 20 has been completed (step S22). If the download is not completed (step S22; No), the microcomputer 10 continues the download (step S21). In this way, the update firmware is stored in the area B as shown in FIG.

  When the download is completed (step S22; Yes), the microcomputer 10 transfers the firmware update program 25 stored in the internal nonvolatile memory 15 to the internal RAM 16 as shown in FIG. 9 (step S23).

  Subsequently, as shown in FIG. 9, the microcomputer 10 starts to execute the firmware update program 25 transferred to the internal RAM 16 (step S24).

  In the firmware update program 25, first, the microcomputer 10 sets the operation mode to the special mode and sets the internal nonvolatile memory 15 to a writable state (step S25).

  Subsequently, the microcomputer 10 reads the update firmware 20 created in the update area (area B) of the nonvolatile memory 11 and writes it in the internal nonvolatile memory 15 as shown in FIG. S26). This process is repeatedly executed until all the update firmware 20 is stored in the internal nonvolatile memory 15. As a result, as shown in FIG. 10, the firmware 20 stored in the internal nonvolatile memory 15 is updated to the update firmware 20.

  Subsequently, the microcomputer 10 turns on the F / W update flag (step S27). Further, the microcomputer 10 sets the operation mode to the normal mode, returns itself to the normal state (step S28), resets and restarts.

  After the reset, as shown in FIG. 3, the microcomputer 10 determines whether or not the recovery firmware 20 has been stored (step S1), and since it has already been stored (step S1; Yes), the recovery determination The process proceeds to processing (see FIG. 6).

  As shown in FIG. 6, since the microcomputer 10 has been updated with the firmware 20 (step S11; Yes), the microcomputer 10 determines whether or not the updated firmware 20 is operating normally. Is determined (step S12). For example, a test mode or the like for executing the main function of the firmware 20 by batch processing is prepared in advance, and if all the test results are successful, it can be determined that it is operating normally.

  If it is determined that the firmware 20 is operating normally (step S12; Yes), the microcomputer 10 changes the firmware 20 for updating the nonvolatile memory 11 to the firmware 20 for recovery ( Step S13). That is, as shown in FIG. 11, the microcomputer 10 sets the firmware 20 stored in the area B as the recovery firmware 20. When recovery is required at the next program update, the firmware 20 stored in the area B is used for recovery. In this way, the latest firmware 20 whose normal operation has been confirmed can be used as the recovery firmware 20.

  Subsequently, the microcomputer 10 proceeds to normal operation processing.

  On the other hand, if it is determined that the firmware 20 is not operating normally (step S12; No), the updated firmware 20 can be regarded as having some trouble, so the microcomputer 10 can be As shown, the recovery execution program 24 is transferred from the internal nonvolatile memory 15 to the internal RAM 16 (step S14), and the recovery execution program 24 stored in the internal RAM 16 is executed (step S15).

  Subsequently, the microcomputer 10 switches the operation mode from the normal mode to the special mode, and sets the internal nonvolatile memory 15 to a writable state (step S16).

  Next, as shown in FIG. 13, the microcomputer 10 reads the recovery firmware 20 created in the recovery area (here, area A) and writes it in the internal nonvolatile memory 15 (step S17). . This process is repeated until all the firmware 20 is written. As a result, the firmware 20 stored in the internal nonvolatile memory 15 is returned to the recovery firmware 20.

  Subsequently, the microcomputer 10 turns off the F / W update flag (step S18). Further, the microcomputer 10 sets the operation mode to the normal mode, returns itself to the normal state (step S19), resets, and restarts.

  Returning to FIG. 3, the microcomputer 10 has already stored the recovery firmware 20 (step S <b> 1; Yes), and thus proceeds to the recovery determination process. As shown in FIG. 6, since the F / W update flag is off (step S11; No), the microcomputer 10 shifts to normal operation.

Embodiment 2. FIG.
Next, a second embodiment of the present invention will be described.

  FIG. 14 shows the configuration of the firmware update system 100 according to this embodiment. As shown in FIG. 14, the firmware update system 100 is different from the firmware update system 100 according to the first embodiment in that the nonvolatile memory 11 is provided in the microcomputer 10 in the communication device 1. .

  The operation of the communication device 1 (firmware update device 5) is the same as that in the above embodiment.

  In each of the above embodiments, the program to be executed is computer-readable such as a flexible disk, a CD-ROM (Compact Disk Read-Only Memory), a DVD (Digital Versatile Disk), and an MO (Magneto-Optical Disk). A system that executes the above-described processing may be configured by storing and distributing the program in a recording medium and installing the program.

  Further, the program may be stored in a disk device or the like included in a predetermined server device on a communication network such as the Internet, and may be downloaded, for example, superimposed on a carrier wave.

  Further, when the above functions are realized by sharing an OS (Operating System) or when the functions are realized by cooperation between the OS and an application, only the part other than the OS may be stored in the medium and distributed. You may also download it.

  In each of the above embodiments, the set numerical value is an example, and needless to say, it is necessary to set appropriately according to the communication device 1 to which it is applied.

  In each of the above embodiments, the case of updating the firmware of the communication device 1 has been described, but the present invention is not limited to this. The present invention can be applied to any electrical device in which firmware is mounted, such as a game device or a television device.

  The present invention is suitable for an electronic device or the like that exhibits its function when a computer executes a program including firmware.

DESCRIPTION OF SYMBOLS 1 Communication apparatus 2 Server 3 Base station 4 Communication network 5 Firmware update apparatus 10 Microcomputer 11 Non-volatile memory 12 Communication controller 15 Internal non-volatile memory 16 Internal RAM
20 Firmware 21 Main Program 22 Download Program 23 Recovery Firmware Generation Program 24 Recovery Execution Program 25 Firmware Update Program 100 Firmware Update System

Claims (7)

A first storage unit for storing firmware for execution;
Spare storage unit der is, a second storage unit having at the same time capacity capable of storing at least two of said firmware,
When the firmware is not stored in the second storage unit at the time of startup, the firmware stored in the first storage unit is read out, and the recovery firmware is stored in the second storage unit A control unit to write as
An input unit for inputting the firmware for update;
Equipped with a,
The controller is
The inputted update firmware is stored in the second storage unit separately from the recovery firmware,
Updating the firmware stored in the first storage unit to the firmware for update stored in the second storage unit and turning on an update flag;
After the reset, when the update flag is on and the firmware stored in the first storage unit does not operate normally, the firmware stored in the first storage unit is changed to the second storage unit. Update to the firmware for recovery stored in the storage unit of, and turn off the update flag,
After the reset, when the update flag is on and the firmware stored in the first storage unit is operating normally, the update firmware stored in the second storage unit Is changed to the recovery firmware stored in the second storage unit and the update flag is turned off.
Firmware update device. In the control unit,
The first storage unit and the second storage unit are incorporated,
The firmware updating apparatus according to claim 1, wherein: Communication device comprising a firmware update apparatus according to claim 1 or 2. Electronic device equipped with firmware update apparatus according to claim 1 or 2. The firmware update device according to claim 1 or 2 ,
A server that transmits the firmware for update to the firmware update device via a communication network;
A firmware update system comprising: A first storage unit for storing firmware;
A second storage unit which is a spare storage unit and has a capacity capable of storing at least two pieces of firmware simultaneously ;
In a method for updating firmware of an electronic device comprising:
A determination step of determining whether the firmware is stored in the second storage unit when the electronic device is activated;
In the determination step, when the electronic device determines that the firmware is not stored in the second storage unit, the electronic device reads the firmware stored in the first storage unit, and A recovery firmware generation step of writing the second storage unit as recovery firmware;
An update firmware storage step in which the electronic device stores the input update firmware in the second storage unit separately from the recovery firmware;
A firmware update step in which the electronic device updates the firmware stored in the first storage unit to the update firmware stored in the second storage unit and turns on an update flag; ,
The firmware stored in the first storage unit when the electronic device is reset and the update flag is on and the firmware stored in the first storage unit does not operate normally. Updating the firmware for recovery stored in the second storage unit and turning off the update flag,
The update stored in the second storage unit when the electronic device is reset and the update flag is on and the firmware stored in the first storage unit is operating normally. A normal processing step of turning off the update flag by changing the firmware for recovery to the recovery firmware stored in the second storage unit;
Firmware update method including A first storage unit for storing firmware;
A second storage unit which is a spare storage unit and has a capacity capable of storing at least two pieces of firmware simultaneously ;
In a program executed by a computer that controls an electronic device comprising:
A determination procedure for determining whether the firmware is stored in the second storage unit at the time of startup;
In the determination procedure, when it is determined that the firmware is not stored in the second storage unit, the firmware stored in the first storage unit is read, and the second storage unit Recovery firmware generation procedure to write as recovery firmware to
An update firmware storage procedure for storing the input update firmware in the second storage unit separately from the recovery firmware;
A firmware update procedure for updating the firmware stored in the first storage unit to the update firmware stored in the second storage unit and turning on an update flag;
After the reset, when the update flag is on and the firmware stored in the first storage unit does not operate normally, the firmware stored in the first storage unit is changed to the second storage unit. An abnormality processing procedure for updating the firmware for recovery stored in the storage unit and turning off the update flag;
After the reset, when the update flag is on and the firmware stored in the first storage unit is operating normally, the update firmware stored in the second storage unit Is changed to the recovery firmware stored in the second storage unit, and the normal processing procedure for turning off the update flag,
A program that causes a computer to execute.

Images