CN112115017B - Logic code monitoring method and device of satellite-borne software program - Google Patents

Logic code monitoring method and device of satellite-borne software program Download PDF

Info

Publication number
CN112115017B
CN112115017B CN202010785872.9A CN202010785872A CN112115017B CN 112115017 B CN112115017 B CN 112115017B CN 202010785872 A CN202010785872 A CN 202010785872A CN 112115017 B CN112115017 B CN 112115017B
Authority
CN
China
Prior art keywords
logic code
monitoring
function
program
checksum
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010785872.9A
Other languages
Chinese (zh)
Other versions
CN112115017A (en
Inventor
李常亮
杨彪
张建伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CASIC Space Engineering Development Co Ltd
Original Assignee
CASIC Space Engineering Development Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CASIC Space Engineering Development Co Ltd filed Critical CASIC Space Engineering Development Co Ltd
Priority to CN202010785872.9A priority Critical patent/CN112115017B/en
Publication of CN112115017A publication Critical patent/CN112115017A/en
Application granted granted Critical
Publication of CN112115017B publication Critical patent/CN112115017B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3051Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/362Software debugging
    • G06F11/3644Software debugging by instrumenting at runtime
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/362Software debugging
    • G06F11/366Software debugging using diagnostics

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Techniques For Improving Reliability Of Storages (AREA)
  • Detection And Correction Of Errors (AREA)

Abstract

One embodiment of the invention discloses a method and a device for monitoring logic codes of a satellite-borne software program, wherein the method comprises the following steps: s10, the CPU bootstrap program loads the program from FLASH into RAM according to the specified address division; s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum; s15, executing the logic code segment of the monitoring logic code function, judging whether response is overtime, if yes, jumping to S18, otherwise, jumping to S17; s17, continuously and repeatedly calculating the checksum of the logic code segment realizing the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, if the checksum is changed, jumping to S18, otherwise, jumping to S15; s18: the repair logic code segment is executed, and execution proceeds to S15.

Description

Logic code monitoring method and device of satellite-borne software program
Technical Field
The invention relates to the technical field of space safety and maintenance. And more particularly, to a method and apparatus for monitoring logic code of a satellite-borne software program.
Background
With the development of technology, software of various devices on the satellite is more and more complex, and a large amount of software operation logic and data are stored in various types of RAMs. Generally, RAM devices are relatively susceptible to Single Event (SEU) events, causing changes to data and logic stored within the RAM. In general, for data in the data, the influence of a single event can be eliminated by means of three-backup storage, three-two judgment and the like. However, the logic code generally cannot eliminate the influence of the single event by adopting a simple three-backup method, and once the logic code is influenced by the single event, unpredictable faults such as program runaway, logic operation abnormity and the like may be caused, thereby bringing great hidden trouble to the operation of various devices on the satellite.
In general, if the single event effect of the logic code is to be eliminated, measures such as adding EDAC (error monitoring and correction) in the RAM access process can be adopted to effectively eliminate the single event effect. However, on one hand, adding the EDAC function requires changing the hardware design and causes expensive hardware cost, and on the other hand, the EDAC function itself puts higher requirements on the read-write timing of devices such as RAM and the like, which brings certain difficulty to the system timing design. In the general software RAM monitoring algorithm, because the logic code of the monitoring algorithm is also operated in the RAM, when the RAM monitoring capability is provided, once the logic code of the RAM monitoring program is influenced by a single event, the problems of monitoring failure, large-scale rewriting of memory data and the like can occur, and the using effect is difficult to guarantee.
Disclosure of Invention
The invention aims to provide a method for monitoring logic codes by software, which can effectively monitor and repair the contents of the logic codes in an RAM (random access memory) after a single event occurs, and can effectively reduce the influence of the single event on the logic codes of an RAM monitoring algorithm.
In order to achieve the above object, a first embodiment of the present invention provides a method for monitoring logic codes of a satellite-borne software program, including:
s10, the CPU bootstrap program loads the program from FLASH into RAM according to the specified address division;
s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum;
s15, executing the logic code segment for realizing the function of monitoring the logic code, judging whether the response is overtime, if yes, jumping to S18, otherwise, jumping to S17;
s17, continuously and repeatedly calculating the checksum of the logic code segment realizing the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, jumping to S18 if the checksum is changed, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and execution proceeds to S15.
In a specific embodiment, the loading, by the CPU boot program, the program from the FLASH into the RAM according to the specified address division includes:
storing a logic code segment for realizing the original function of the program in an original program function area of the RAM;
and storing the logic code segment for realizing the function of monitoring the logic code in the monitoring function area.
In a specific embodiment, the logic code segment implementing the function of monitoring the logic code includes a logic code monitoring section and a logic code repairing section, wherein the logic code monitoring section and the logic code repairing section are respectively disposed in different areas of the monitoring function area.
In a particular embodiment, the logical code repair section includes a primary repair logic code section and a backup repair logic code section.
In a specific embodiment, the S18 includes:
s180: judging whether the master repair logic code segment is changed or not by comparing the master repair logic code segment with the checksum calculated during power-on, if not, executing the master repair logic code segment, otherwise, jumping to S183;
s183: the backup repair logic code segment is executed.
In a specific embodiment, the primary repair logic code segment and the backup repair logic code segment are separately stored in the monitor function area of the RAM.
A second embodiment of the present invention provides a device for monitoring logic codes of a program of a satellite-borne software program, including: a CPU, a FLASH, and a RAM, wherein the CPU is configured to,
s10, loading the program from FLASH into RAM according to the specified address division by the bootstrap program;
s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum;
s15, executing the logic code segment for realizing the function of monitoring the logic code, judging whether the response is overtime, if yes, jumping to S18, otherwise, jumping to S17;
s17, continuously and repeatedly calculating the checksum of the logic code segment realizing the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, jumping to S18 if the checksum is changed, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and after execution is completed, the process proceeds to S15.
In one embodiment, the RAM includes:
the original program functional area is used for storing codes for realizing original functions;
and the monitoring functional area is used for storing the logic code segment for realizing the function of monitoring the logic code.
In a specific embodiment, the logic code segment implementing the function of monitoring the logic code includes a logic code monitoring section and a logic code repairing section, wherein the logic code monitoring section and the logic code repairing section are respectively disposed in different areas of the monitoring function area.
In a particular embodiment, the logical code repair section includes a primary repair logic code section and a backup repair logic code section.
The invention has the following beneficial effects:
the invention can avoid the long-term influence of logic errors caused by single event events on the operation of programs and equipment to the maximum extent. Meanwhile, the logic code monitoring and repairing module can be prevented from being influenced by the single event to the maximum extent by a mode of function separation and redundancy backup. The method can provide certain logic code monitoring capability for the equipment to the maximum extent through software under the condition that the embedded hardware design is basically unchanged, and can effectively improve the on-orbit operation stability and reliability of the satellite-borne equipment.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.
FIG. 1 illustrates a manner of address allocation in RAM in which one embodiment of the present invention can be implemented;
FIG. 2 illustrates a flow chart of a method of software implemented logic code monitoring that can implement an embodiment of the present invention;
FIG. 3 illustrates RAM monitor implementation logic for one embodiment of the invention;
FIG. 4 shows a block diagram of an apparatus for software implemented logic code monitoring, according to an embodiment of the invention
Detailed Description
In order to make the technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail with reference to the accompanying drawings.
The minimum system for the software operation of the common satellite-borne equipment mainly comprises a CPU, a FLASH and an RAM. The FLASH is used for storing programs, after the system is powered on, the CPU bootstrap program loads the programs into the RAM according to specified address division from the FLASH, allocates data, variables and stacks to specified positions in the RAM, then jumps to the first address of the logic code in the RAM, and starts to execute the logic code in the RAM.
Example 1-address assignment in RAM:
as shown in fig. 1, the address allocation method in RAM according to an embodiment of the present invention is applied to the system, and the system includes: CPU10, FLASH13 and RAM15, wherein the CPU10 is used for guiding the program from FLASH13 to load the program into RAM15 according to the specified address division, and the method also comprises the following steps:
storing a logic code segment for realizing the original function of the program in an original program function area of the RAM;
and storing the logic code segment for realizing the function of monitoring the logic code in the monitoring function area.
The method comprises the steps of partitioning the use condition of each code in the RAM, independently storing the program logic code segments to form a continuous monitorable RAM monitoring area, and creating physical conditions for the implementation of logic code monitoring.
And further independently storing the original program function logic codes and the logic codes for realizing the logic code monitoring function in the RAM monitoring area in a partitioning manner, wherein the original program function area is mainly used for storing the codes for realizing the original functions of the equipment, and the monitoring function area is used for storing the logic codes for realizing the logic code monitoring function.
For the monitoring function area, the logic code of the area can still be influenced by the single event, so the influence of the single event on the logic code monitoring function can be avoided to the maximum extent by adopting a mode of function separation and redundancy backup. Therefore, the logic code monitoring function needs to be divided into two independent modules of logic code monitoring and logic code repairing and stored respectively. And for the logic code repair module, the main share and the backup are respectively and independently stored.
Embodiment 2-a method for monitoring logic codes of a satellite-borne software program:
as shown in fig. 2, the present embodiment provides a method for monitoring a logic code of a satellite-borne software program, including:
and S10, after the system is powered on, driving the CPU bootstrap program to load the program from the FLASH into the RAM according to the specified address division.
In a specific example, the original program functional area is used for storing codes for realizing original functions; the monitoring function area stores a logic code segment for realizing the function of monitoring the logic code and a main backup restoration logic code segment. In order to implement the logic code monitoring function, the logic code monitoring function needs to be split into two independent functional modules, namely logic code monitoring and logic code repairing, in the implementation process.
And S13, calculating the checksum of the logic code segment realizing the original function, the logic code segment realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum.
In a specific example, for the logic code monitoring function, after the program is powered on and loaded, the function calculates the checksums of the logic code segments in the original program functional area and the logic code segments in the monitoring functional area, and stores the checksums.
And S15, executing the logic code segment of the monitoring logic code function, judging whether response is overtime, and jumping to S18 if the response is overtime, or else, jumping to S17.
In a specific example, in order to avoid that the logic code monitoring function itself is affected by a single event and fails to enter the logic code repair module, the operating state of the logic code monitoring module needs to be monitored, and the logic code repair function also needs to be started when the logic code monitoring function fails to be started or completes a single logic code monitoring for a long time.
S17, continuously and repeatedly calculating the checksum of the logic code segment realizing the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, jumping to S18 if the checksum is changed, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and execution proceeds to S15.
In a specific example, the logic code repair function is to start the logic code repair module when it is determined that an abnormal rewriting event occurs in the RAM monitoring area or the system determines that the logic code monitoring function is abnormal. The logic code repairing module directly accesses the program pair stored in the FLASH and rewrites the logic code area in the RAM, so that the logic code in the RAM is repaired correctly.
And then, continuously and repeatedly calculating the checksum of the area in the program running process, and comparing the checksum with the checksum calculated in the power-on process to realize the real-time monitoring of the RAM monitoring area. And when the calculated checksum is inconsistent with the checksum calculated during power-on, the RAM is considered to be abnormally rewritten, and at the moment, the RAM repair function needs to be started.
In order to avoid the influence of the single-particle event on the logic code repair function, the codes of the logic code repair function need to be backed up, and the main backup logic code repair function and the standby logic code repair function are all brought into the RAM monitoring range.
To this end, in a preferred embodiment, as shown in fig. 3, S18 includes:
s180: judging whether the master repair logic code segment is changed or not by comparing the master repair logic code segment with the checksum calculated during power-on, if not, executing the master repair logic code segment, otherwise, jumping to S183;
s183: the backup repair logic code segment is executed.
In the program running process, once the master repair function is judged to be influenced by the single-particle event, the backup logic code repair function is started to finish the correction of the logic codes, otherwise, the master repair logic code function is started.
Finally, through means of RAM address allocation, function separation, redundancy backup, state monitoring and the like, logic code monitoring of the satellite-borne software program is achieved, and a low-cost and easy-to-implement single-particle protection means is provided for the system.
Embodiment 3-a logic code monitoring apparatus of a satellite-borne software program:
a logic code monitoring device for a program of a satellite-borne software program, comprising: a CPU, a FLASH, and a RAM, wherein the CPU is configured to,
s10, the bootstrap program loads the program from FLASH into RAM according to the specified address division;
s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum;
s15, executing the logic code segment for realizing the function of monitoring the logic code, judging whether the response is overtime, if yes, jumping to S18, otherwise, jumping to S17;
s17, continuously and repeatedly calculating the checksum of the logic code segment realizing the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, if the checksum is changed, jumping to S18, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and execution proceeds to S15.
The RAM includes:
the original program functional area is used for storing codes for realizing original functions;
and the monitoring functional area is used for storing the logic code segment for realizing the function of monitoring the logic code.
The logic code segment for realizing the function of monitoring the logic code comprises a logic code monitoring segment and a logic code repairing segment, wherein the logic code monitoring segment and the logic code repairing segment are respectively arranged in different areas of the monitoring function area.
The logical code repair section includes a primary repair logic code section and a backup repair logic code section.
It should be understood that the above-mentioned embodiments of the present invention are only examples for clearly illustrating the present invention, and are not intended to limit the embodiments of the present invention, and it will be obvious to those skilled in the art that other variations or modifications may be made on the basis of the above description, and all embodiments may not be exhaustive, and all obvious variations or modifications may be included within the scope of the present invention.

Claims (10)

1. A method for monitoring logic codes of a satellite-borne software program is characterized by comprising the following steps:
s10, the CPU bootstrap program loads the program from FLASH into RAM according to the specified address division;
s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum;
s15, executing the logic code segment for realizing the function of monitoring the logic code, judging whether the response is overtime, if yes, jumping to S18, otherwise, jumping to S17;
s17, continuously and repeatedly calculating the checksum of the logic code segment which realizes the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, jumping to S18 if the checksum is changed, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and execution proceeds to S15.
2. The method of claim 1, wherein the CPU boot program loading the program from FLASH into RAM at specified address divisions comprises:
storing a logic code segment for realizing the original function of the program in an original program function area of the RAM;
and storing the logic code segment for realizing the function of monitoring the logic code in the monitoring function area.
3. The method according to claim 2, wherein the logic code sections implementing the function of monitoring the logic code comprise a logic code monitoring section and a logic code repairing section, wherein the logic code monitoring section and the logic code repairing section are respectively disposed in different areas of the monitoring function area.
4. The method of claim 3, wherein the logical code repair section comprises a primary repair logic code section and a backup repair logic code section.
5. The method according to claim 4, wherein the S18 includes:
s180: judging whether the master repair logic code segment is changed or not by comparing the master repair logic code segment with the checksum calculated during power-on, if not, executing the master repair logic code segment, otherwise, jumping to S183;
s183: the backup repair logic code segment is executed.
6. The method of claim 5 wherein the primary repair logic code segment and the backup repair logic code segment are each independently stored in a monitor function area of the RAM.
7. A logic code monitoring device of a satellite-borne software program, comprising: a CPU, a FLASH, and a RAM, wherein the CPU is configured to,
s10, the bootstrap program loads the program from FLASH into RAM according to the specified address division;
s13, obtaining and calculating the checksum of the logic code segment for realizing the original function of the program, the logic code segment for realizing the function of monitoring the logic code and the repair logic code segment, and storing the checksum;
s15, executing the logic code segment for realizing the function of monitoring the logic code, judging whether the response is overtime, if yes, jumping to S18, otherwise, jumping to S17;
s17, continuously and repeatedly calculating the checksum of the logic code segment which realizes the original function in the program running process, comparing the checksum with the checksum calculated in the power-on process, jumping to S18 if the checksum is changed, otherwise, jumping to S15;
s18: the repair logic code segment is executed, and execution proceeds to S15.
8. The apparatus of claim 7, wherein the RAM comprises:
the original program functional area is used for storing codes for realizing original functions;
and the monitoring functional area is used for storing the logic code segment for realizing the function of monitoring the logic code.
9. The apparatus of claim 8,
the logic code segment for realizing the function of monitoring the logic code comprises a logic code monitoring segment and a logic code repairing segment, wherein the logic code monitoring segment and the logic code repairing segment are respectively arranged in different areas of the monitoring function area.
10. The apparatus of claim 9,
the logical code repair section includes a primary repair logic code section and a backup repair logic code section.
CN202010785872.9A 2020-08-07 2020-08-07 Logic code monitoring method and device of satellite-borne software program Active CN112115017B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010785872.9A CN112115017B (en) 2020-08-07 2020-08-07 Logic code monitoring method and device of satellite-borne software program

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010785872.9A CN112115017B (en) 2020-08-07 2020-08-07 Logic code monitoring method and device of satellite-borne software program

Publications (2)

Publication Number Publication Date
CN112115017A CN112115017A (en) 2020-12-22
CN112115017B true CN112115017B (en) 2022-07-12

Family

ID=73799324

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010785872.9A Active CN112115017B (en) 2020-08-07 2020-08-07 Logic code monitoring method and device of satellite-borne software program

Country Status (1)

Country Link
CN (1) CN112115017B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113885928B (en) * 2021-05-31 2022-10-11 荣耀终端有限公司 Program updating method and electronic device

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6470430B1 (en) * 1999-06-17 2002-10-22 Daimlerchrysler Ag Partitioning and monitoring of software-controlled system
CN101976212A (en) * 2010-10-27 2011-02-16 西安空间无线电技术研究所 Small amount code reloading-based DSP anti-single-event error correction method
CN102354294A (en) * 2011-08-23 2012-02-15 西安空间无线电技术研究所 Method for detecting spatial single event upset of space-borne DSP (Digital Signal Processor) chip
CN102521062A (en) * 2011-11-29 2012-06-27 西安空间无线电技术研究所 Software fault-tolerant method capable of comprehensively on-line self-detection single event upset
CN102902556A (en) * 2012-09-06 2013-01-30 深圳市共进电子股份有限公司 Multistage boot load method of embedded equipment
CN108182078A (en) * 2016-12-08 2018-06-19 北京机电工程研究所 A kind of missile equipment not bomb disposal on-line software updating method of optimization
CN111488168A (en) * 2019-12-25 2020-08-04 湖北航天飞行器研究所 Weapon system control software safety upgrading method based on boot secondary loading

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101140809A (en) * 2007-09-07 2008-03-12 炬力集成电路设计有限公司 Flash controller supporting pipelined error-correcting code and configurable operations and control method thereof

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6470430B1 (en) * 1999-06-17 2002-10-22 Daimlerchrysler Ag Partitioning and monitoring of software-controlled system
CN101976212A (en) * 2010-10-27 2011-02-16 西安空间无线电技术研究所 Small amount code reloading-based DSP anti-single-event error correction method
CN102354294A (en) * 2011-08-23 2012-02-15 西安空间无线电技术研究所 Method for detecting spatial single event upset of space-borne DSP (Digital Signal Processor) chip
CN102521062A (en) * 2011-11-29 2012-06-27 西安空间无线电技术研究所 Software fault-tolerant method capable of comprehensively on-line self-detection single event upset
CN102902556A (en) * 2012-09-06 2013-01-30 深圳市共进电子股份有限公司 Multistage boot load method of embedded equipment
CN108182078A (en) * 2016-12-08 2018-06-19 北京机电工程研究所 A kind of missile equipment not bomb disposal on-line software updating method of optimization
CN111488168A (en) * 2019-12-25 2020-08-04 湖北航天飞行器研究所 Weapon system control software safety upgrading method based on boot secondary loading

Also Published As

Publication number Publication date
CN112115017A (en) 2020-12-22

Similar Documents

Publication Publication Date Title
CN110909394B (en) Server configuration file monitoring method, device, equipment and storage medium
CN1971536A (en) Correcting system and method of basic in-out system
JPWO2011111211A1 (en) MEMORY DIAGNOSIS METHOD, MEMORY DIAGNOSIS DEVICE, AND MEMORY DIAGNOSIS PROGRAM
CN111240720A (en) Boot program upgrading method and device and storage medium
CN101329631A (en) Method and apparatus for automatically detecting and recovering start-up of embedded system
CN112115017B (en) Logic code monitoring method and device of satellite-borne software program
CN104573529A (en) BIOS firmware dividing and updating method and system
CN111090443A (en) Method, equipment and storage medium for guaranteeing safe upgrade of linux system
CN114895845A (en) EMmC data storage control method and embedded mainboard
JPH11514124A (en) How to load an operating system
JP4279593B2 (en) Elevator control device
CN111273928B (en) Bootloader design method for self-upgrading
CN116795408A (en) ECU software upgrading method and system and vehicle
CN114741091A (en) Firmware loading method and device, electronic equipment and computer readable storage medium
CN112394965A (en) Battery management system upgrade and operation method, controller, battery management system and storage medium
CN112579338B (en) Starting method and system of equipment and storage medium
JP4867557B2 (en) Programmable controller
RU2305313C1 (en) Method for ensuring reliable operation of program computing means
JPH0728632A (en) Automatic replacing method for operating system and computer system utilizing the same
JPH03136153A (en) Microcontroller
CN108958982A (en) A kind of BIOS reinforcement means and system
CN113138653B (en) Power failure data protection method and terminal
JP2002063044A (en) Arithmetic unit and program-rewriting method
CN118051358A (en) Embedded system fault recovery method and device
CN118426845A (en) Method and device for starting embedded system, computer equipment and medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant