EP1872210A1 - Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication - Google Patents

Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication

Info

Publication number
EP1872210A1
EP1872210A1 EP06754785A EP06754785A EP1872210A1 EP 1872210 A1 EP1872210 A1 EP 1872210A1 EP 06754785 A EP06754785 A EP 06754785A EP 06754785 A EP06754785 A EP 06754785A EP 1872210 A1 EP1872210 A1 EP 1872210A1
Authority
EP
European Patent Office
Prior art keywords
software code
memory
update
new software
microprocessor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP06754785A
Other languages
German (de)
English (en)
Inventor
Reinhard Griech
Christian Seiler
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Endress and Hauser SE and Co KG
Endress and Hauser Group Services Deutschland AG and Co KG
Original Assignee
Endress and Hauser SE and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Endress and Hauser SE and Co KG filed Critical Endress and Hauser SE and Co KG
Publication of EP1872210A1 publication Critical patent/EP1872210A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the invention relates to a method for upgrading a microprocessor-controlled device with new software code via a communication network.
  • microprocessor-controlled devices In general, it is necessary for microprocessor-controlled devices to adjust the software in the device from time to time, as this is normally developed continuously by the device manufacturer.
  • the corresponding software update can z. B. be transmitted directly to the device by a service technician to the device. If problems occur during the transfer to the device or during the operation of the software update, the service technician can usually remedy these immediately on site.
  • microprocessor-controlled devices such. B. in the process automation technology via communication networks with higher-level units. This means that the software update can also be transferred to the device via the communication network.
  • a major disadvantage here is that the installation of a software update in a device is a relatively critical process and problems are never completely ruled out. In extreme cases, these problems can lead to total failure of the device.
  • microprocessor-based field devices are often used, which serve to detect and / or influence process variables.
  • field devices are level gauges, mass flow meters, pressure and temperature measuring devices, pH and conductivity meters, etc., which detect the corresponding process variables level, flow, pressure, temperature or pH value or conductivity value as sensors.
  • actuators z As valves control the flow of a liquid in a pipe section or as pumps the level in a container.
  • field devices are recording devices which record measurement data on site.
  • a variety of such field devices is manufactured and sold by the company. Endress + Hauser.
  • field devices in modern automation systems are connected via fieldbus systems (HART, Profibus, Foundation Fieldbus, etc.) to higher-level units (eg, control systems or control units).
  • higher-level units eg, control systems or control units.
  • these units are used for process control, process visualization, process monitoring.
  • Networks, z. B. connected to the Internet One option for connecting field devices to the Internet is provided by the Fieldgate product from Endress + Hauser.
  • the software used in the field devices is being developed continuously. Thus, upgrading these devices with new software code over a communication network may be necessary from time to time.
  • the update process is controlled by a host computer and does not run off self-sufficient.
  • EP-1108984 Al a further generic method is known.
  • pre-power fail Since power failures during the update process can lead to software errors, normally further hardware, e.g. an elaborate early detection of a power failure (pre-power fail) with energy buffering necessary.
  • the object of the present invention is therefore to provide a simple method for upgrading a microprocessor-controlled device with new software code via a communication network, which does not have the disadvantages mentioned above, in particular system errors, which can lead to a total failure of the device avoids and thereby Resource-saving and cost-effective is feasible.
  • the device having a non-volatile program memory, with two memory areas having a first and a second memory area,
  • the first memory area for a basic program that provides a first operating system and first functionalities of the device
  • the essential idea of the invention is that the device always has a running software with which the microprocessor system can be started.
  • the new software code may also include the operating system or the entire firmware of the device.
  • the non-volatile program memory has an address space which is larger than that which can be managed by the microprocessor connected to the program memory.
  • the address space of the microprocessor can be used optimally and the address space is not restricted by the second memory area.
  • the address space of the program memory is just twice as large as that manageable by the microprocessor.
  • a typical memory size for the program memory is 1064 kB.
  • the program memory has a controllable by the microprocessor switching input, via which the two memory areas can be selected.
  • Fig. 3 program memory of a field device with a division
  • FIG. 4 shows a soot diagram for the method according to the invention
  • FIG. 5 shows a soot diagram for triggering the update process
  • FIG. 6 soot diagram for the function call "perform update”.
  • a communication network of automation technology is shown in more detail.
  • a data bus Dl several computer units workstations WSL, WS2, connected. These computer units serve as higher-level units (control systems or control units), including for process visualization, process monitoring and engineering, as well as for operating and monitoring field devices.
  • the data bus Dl operates z. Eg according to the Profibus DP standard or according to the HSE (High Speed Ethernet) standard of the Foundation Fieldbus.
  • the data bus D1 is connected to a fieldbus segment SM1.
  • the field bus segment SM1 consists of several devices F1, F2, F3, F4, which are generally referred to as field devices in process automation technology and which are interconnected via a field bus FB.
  • the field devices F1, F2, F3, F4 may be sensors or actuators.
  • the fieldbus FB operates according to one of the known fieldbus standards Profibus, Foundation Fieldbus or HART.
  • FIG. 2 is a block diagram of a field device according to the invention z. B. Fl shown in more detail.
  • a microprocessor ⁇ P is connected to the measurement processing via an analog-to-digital converter A / D and an amplifier V to a sensor MA, which detects a process variable (eg, pressure, flow or level).
  • the microprocessor ⁇ P is connected to a plurality of memories.
  • the memory VM serves as a temporary (volatile) working memory RAM.
  • the program memory software or software components are stored, which are executed in the microprocessor uP.
  • the program memory PS has a switching input Sl via which different memory areas can be selected by the microprocessor ⁇ P via a port output PA.
  • NVM z In a non-volatile writeable data memory NVM z. Eg EEPROM memory, parameter values (eg calibration data, etc.) are stored.
  • parameter values eg calibration data, etc.
  • the running in the microprocessor uP software code, the program to be executed, defines u. a. the application-related functionalities of the field device (measured value calculation, envelope evaluation, linearization of the measured values, diagnostic tasks).
  • microprocessor ⁇ P is connected to a display operation unit A / B (e.g., multi-button LCD display).
  • the microprocessor ⁇ P is connected via a communication controller COM to a fieldbus interface FBS.
  • a power supply unit NT supplies the necessary energy for the individual electronic components of the field device F1. It can be powered by fieldbus FB or by a separate power source. The supply lines for the power supply of the individual components in the field device are not shown for clarity.
  • a watchdog WD also connected to the microprocessor ⁇ P, monitors the operation of the microprocessor ⁇ P. If a program interruption occurs due to a system error, the monitoring unit initiates a system start.
  • the program memory PS is shown enlarged with the two memory areas boot area BA and update area UA.
  • the program memory PS has a memory space of 1024 KB. Its address space is just twice as large as that managed by the ⁇ P microprocessor. About the switching input Sl, the two memory areas BA and UA can be selected by the microprocessor uP and fully addressed.
  • Fig. 4 is a flowchart is shown, the system behavior after a system start in one of the field devices z. B. Fl reproduces.
  • the system is started with the basic program, which provides a first operating system and first functionalities of the field device, from the first storage area (boot area).
  • system variable UPDATE is read, which is stored in the memory NVM, the configuration memory.
  • the system variable UPDATE is set to "invalid firmware". Subsequently, via the communication network KN, a connection to a higher-level unit a server or a host computer z. B. WSl and requested the transfer of the new software code. The new software code is then transferred to the field device F1 and stored in the second memory area UB (Update Area).
  • a special update program is loaded into the RAM VM and executed. This program switches the port output PA so that only the update area UB of the program memory PS can be used for saving.
  • the microprocessor thus only accesses the update area UB without noticing this in terms of the address.
  • the new software code is transmitted serially in the update area UB of the program memory PS and stored there.
  • the new software code is checked for bit errors using a CRC test.
  • the new software code is executed from the second memory area UA.
  • the new software code can include both a new operating system and improved device software. Since a valid firmware is now available in the field device with the new software code, the system variable UPDATE is set to the value "valid firmware".
  • FIG. 5 shows a soot diagram for triggering the update process. This can be triggered by the system itself via a timer or externally.
  • the system variable UPDATE is described with the value "perform update" and the device performs a system start with the basic program, ie a reboot process is started.
  • FIG. 6 shows a soot diagram for the function call "perform firmware update.” Due to the size, the diagram was based on the two subfigures 6a and 6b divided up. The individual process steps have essentially already been described above.
  • the new software may also be piecewise, i. H. be transmitted in smaller packages in the device.
  • an update task repeatedly changes the memory area in the program memory PS between the first and the second memory area.
  • the watchdog unit WD can be used to start the system with the always-available basic program.
  • the device can also independently trigger an update process.
  • the device By setting the system variable UPDATE, the device can be restarted remotely or locally with the basic program.
  • the method results in a very robust microprocessor-controlled device, which always has executable software, the basic program. Possible faults during the update process do not mean that a service technician must visit the device and rectify the fault locally.
  • the inventive method is due to its simplicity and robustness not only for field devices of automation technology but generally for microprocessor-controlled devices, which are generally referred to as "embedded systems", suitable.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)

Abstract

L'invention concerne un procédé pour munir un dispositif régulé par microprocesseur d'un nouveau code de logiciel dans un réseau de communication. Ledit dispositif comprend une mémoire programme non volatile, avec deux zones de mémorisation, une première et une seconde zone de mémorisation. La première zone de mémorisation (secteur de démarrage) est prévue pour un programme de base mettant à disposition un premier système d'exploitation et de premières fonctionnalités du dispositif et la seconde zone de mémorisation (secteur de mise à jour) est prévue pour le code de logiciel à écraser. La première zone de mémorisation est protégée contre l'écrasement conformément au matériel. Il est prévu les étapes suivantes: il intervient d'abord un démarrage du système avec le programme de base provenant de la première zone de mémorisation. A cet effet, une variable de système ACTUALISATION est lue. Si cette variable présente la valeur "effectuer actualisation", une fonction "effectuer actualisation micrologiciel". Cette variable est ensuite ajustée à la valeur "micrologiciel invalide". La liaison est ensuite établie avec une unité surordonnée et le nouveau code de logiciel est transmis dans l'appareil. Après la mémorisation du nouveau code de logiciel dans la seconde zone de mémorisation, une vérification du nouveau code de logiciel est effectuée en vue d'éventuels taux d'erreurs sur les bits. Si des taux d'erreurs sur les bits sont intervenus lors de la transmission, le système est à nouveau relancé. Si aucun taux d'erreurs sur les bits n'est intervenu, le nouveau code de logiciel est mis en oeuvre à partir de la seconde zone de mémorisation et la variable système ACTUALISATION est décrite avec la valeur "micrologiciel invalide". Ce procédé permet de munir de manière sûre des dispositifs régulés par microprocesseur d'un nouveau code de logiciel dans un réseau de communication.
EP06754785A 2005-04-22 2006-04-21 Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication Withdrawn EP1872210A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102005018910A DE102005018910A1 (de) 2005-04-22 2005-04-22 Verfahren zum Aufrüsten eines mikroprozessorgesteuerten Geräts mit neuem Softwarecode über ein Kommunikationsnetzwerk
PCT/EP2006/061732 WO2006111573A1 (fr) 2005-04-22 2006-04-21 Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication

Publications (1)

Publication Number Publication Date
EP1872210A1 true EP1872210A1 (fr) 2008-01-02

Family

ID=36658884

Family Applications (1)

Application Number Title Priority Date Filing Date
EP06754785A Withdrawn EP1872210A1 (fr) 2005-04-22 2006-04-21 Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication

Country Status (4)

Country Link
US (1) US20090217023A1 (fr)
EP (1) EP1872210A1 (fr)
DE (1) DE102005018910A1 (fr)
WO (1) WO2006111573A1 (fr)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102007021099A1 (de) 2007-05-03 2008-11-13 Endress + Hauser (Deutschland) Ag + Co. Kg Verfahren zum Inbetriebnehmen und/oder Rekonfigurieren eines programmierbaren Feldmeßgeräts
DE102007037879A1 (de) * 2007-08-10 2009-02-12 BSH Bosch und Siemens Hausgeräte GmbH Hausgerät und Verfahren zum Betreiben eines Hausgeräts
US20090077634A1 (en) * 2007-09-19 2009-03-19 Aten International Co., Ltd. Firmware update method and system using the same
DE102010048809A1 (de) 2010-10-20 2012-04-26 Hüttinger Elektronik Gmbh + Co. Kg Leistungsversorgungssystem für eine Plasmaanwendung und/oder eine Induktionserwärmungsanwendung
DE102010048810A1 (de) 2010-10-20 2012-04-26 Hüttinger Elektronik Gmbh + Co. Kg System zur Bedienung mehrerer Plasma- und/oder Induktionserwärmungsprozesse
US20120272103A1 (en) * 2011-04-21 2012-10-25 Microsoft Corporation Software operability service
DE102012212412A1 (de) * 2012-06-29 2014-01-02 Siemens Ag Netzwerkeinrichtung und Verfahren zum Betreiben einer Netzwerkeinrichtung für ein Automatisierungsnetzwerk
EP3028147B1 (fr) * 2013-07-31 2021-04-14 Hewlett-Packard Development Company, L.P. Mise à jour de code de lancement
DE102013108478A1 (de) 2013-08-06 2015-02-12 Endress+Hauser Process Solutions Ag Verfahren zur Erweiterung einer eingebetteten Softwarekomponente eines Feldgerätes
DE102013220523B4 (de) 2013-10-11 2023-05-25 Continental Automotive Technologies GmbH Verfahren zum Aktualisieren einer Betriebsfunktion eines Sensors und ein Sensormodul
KR102261815B1 (ko) * 2014-10-30 2021-06-07 삼성전자주식회사 펌웨어 업데이트 시간을 줄일 수 있는 데이터 저장 장치, 및 이를 포함하는 데이터 처리 시스템
DE102016219262A1 (de) 2016-10-05 2018-04-05 Vega Grieshaber Kg Verfahren zur Aktualisierung eines Hauptteils einer Firmware eines Feldgeräts
EP3339990A1 (fr) * 2016-12-20 2018-06-27 Schneider Electric Industries SAS Dispositif de terrain auto-adaptatif
US11153164B2 (en) 2017-01-04 2021-10-19 International Business Machines Corporation Live, in-line hardware component upgrades in disaggregated systems
US10534598B2 (en) * 2017-01-04 2020-01-14 International Business Machines Corporation Rolling upgrades in disaggregated systems
DE102021133560A1 (de) 2021-12-16 2023-06-22 Endress+Hauser Conducta Gmbh+Co. Kg Verfahren zum Erweitern von Anwendungsmöglichkeiten eines Sensors, Sensor und Anwendung des Sensors

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE4214184A1 (de) * 1991-05-06 1992-11-12 Intel Corp Computersystem mit einem nicht-fluechtigen speicher und verfahren zu dessen aktualisierung

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5388267A (en) * 1991-05-29 1995-02-07 Dell Usa, L.P. Method and apparatus for updating and restoring system BIOS functions while maintaining BIOS integrity
US5432927A (en) * 1992-06-17 1995-07-11 Eaton Corporation Fail-safe EEPROM based rewritable boot system
US5960445A (en) * 1996-04-24 1999-09-28 Sony Corporation Information processor, method of updating a program and information processing system
US6134628A (en) * 1998-01-30 2000-10-17 Ricoh Company, Ltd. Method and computer-based system for rewriting a nonvolatile rewritable memory
US6275931B1 (en) * 1998-06-22 2001-08-14 Elsag International N.V. Method and apparatus for upgrading firmware boot and main codes in a programmable memory
DE10084648T1 (de) * 1999-05-27 2002-05-16 Invensys Plc Foxboro Über Feldbus upgradebare Vorrichtung und Verfahren hierfür
US6594756B1 (en) * 1999-09-08 2003-07-15 Intel Corporation Multi-processor system for selecting a processor which has successfully written it's ID into write-once register after system reset as the boot-strap processor
US20030095648A1 (en) * 1999-10-05 2003-05-22 Lifecor, Inc. Fault-tolerant remote reprogramming for a patient-worn medical device
EP1108984B1 (fr) * 1999-10-18 2019-08-14 Endress + Hauser Flowtec AG Appareil mobile programmable
US6584559B1 (en) * 2000-01-28 2003-06-24 Avaya Technology Corp. Firmware download scheme for high-availability systems
US6665813B1 (en) * 2000-08-03 2003-12-16 International Business Machines Corporation Method and apparatus for updateable flash memory design and recovery with minimal redundancy
KR20040029089A (ko) * 2001-09-03 2004-04-03 코닌클리케 필립스 일렉트로닉스 엔.브이. 네트워크 환경에서 사용하기 위한 디바이스
US7062763B2 (en) * 2001-11-13 2006-06-13 Sun Microsystems, Inc. Method and apparatus for remote software code update

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE4214184A1 (de) * 1991-05-06 1992-11-12 Intel Corp Computersystem mit einem nicht-fluechtigen speicher und verfahren zu dessen aktualisierung

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of WO2006111573A1 *

Also Published As

Publication number Publication date
WO2006111573A1 (fr) 2006-10-26
US20090217023A1 (en) 2009-08-27
DE102005018910A1 (de) 2006-10-26

Similar Documents

Publication Publication Date Title
EP1872210A1 (fr) Procede pour munir un dispositif regule par microprocesseur, d'un nouveau code de logiciel dans un reseau de communication
EP1525518B1 (fr) Procede d'actualisation de descriptions d'appareils pour des appareils de terrain employes dans l'automatisation de processus
EP2659317B1 (fr) Appareil de terrain avec compatibilité à long terme du micrologiciel
EP3850451B1 (fr) Procédé pour améliorer la performance de mesure d'appareils de terrain de la technique d'automatisation
WO2007051837A1 (fr) Procédé d’utilisation d’un appareil de terrain de la technique d’automatisation aux fonctionnalités spéciales
DE10251503A1 (de) Verfahren zur Offline-Parametrierung eines Feldgerätes der Prozessautomatisierungstechnik
WO2009013140A1 (fr) Procédé d'utilisation d'un appareil de terrain en technique d'automatisation
WO2010076164A1 (fr) Procédé de transfert de données de paramètres lors d'un téléchargement vers l'amont et/ou d'un téléchargement vers l'aval, de fixations de paramètres entre des dispositifs de champ et/ou un centre de contrôle
EP2062105A1 (fr) Système et procédé de fonctionnalisation en fonction du besoin de dispositifs de commande/régulation
EP1108984B1 (fr) Appareil mobile programmable
WO2011067071A2 (fr) Procédé pour optimiser le réglage de paramètres d'alimentation en énergie d'un module d'alimentation en courant d'un appareil de terrain
DE102009047542A1 (de) Verfahren zur Diagnose von fehlerhaften eingestellten Energieversorgungs-Parametern eines Feldgerät-Stromversorgungsmoduls
DE102007062395B4 (de) Verfahren zum Parametrieren eines Feldgerätes der Prozessautomatisierungstechnik
WO2012028367A1 (fr) Système de communication de plusieurs clients avec plusieurs appareils de terrain dans l'automatisation
DE102010027963A1 (de) Verfahren zum Betreiben eines Feldgerätes der Prozessautomatisierungstechnik
DE10148029A1 (de) Verfahren zur Datensicherung bei einem Feldgerät
WO2011042258A2 (fr) Procédé pour faire fonctionner une interface de bus de terrain
EP2618114B1 (fr) Extraction de valeurs de mesure, d'informations de diagnostic ou de paramètres d'appareils
WO2006013140A1 (fr) Appareil de terrain destine a l'automatisation
DE102005017298B4 (de) Verfahren und Vorrichtung zum Schreiben eines Ablaufsprogramms in eine Speichervorrichtung einer programmgesteuerten Steuervorrichtung
DE10255541B4 (de) Speicheranordnung für eine Mikrorechnerschaltung
WO2024068163A1 (fr) Système de formation d'un complexe de dispositifs sur site et dispositif sur site
EP1369756B1 (fr) Méthode pour éviter des erreurs d' accès à une structure des données
WO2008080756A1 (fr) Procédé pour faire fonctionner un appareil de terrain en technique d'automatisme au moyen d'un programme d'application présentant plusieurs variables formatées
WO2021089461A1 (fr) Système d'administration de ressources dans une installation pour de l'ingénierie d'automatisation

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20071010

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR

17Q First examination report despatched

Effective date: 20080201

RIN1 Information on inventor provided before grant (corrected)

Inventor name: SEILER, CHRISTIAN

Inventor name: GRIECH, REINHARD

DAX Request for extension of the european patent (deleted)
RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: ENDRESS+HAUSER (DEUTSCHLAND) AG+CO. KG

Owner name: ENDRESS+HAUSER GMBH+CO. KG

APBK Appeal reference recorded

Free format text: ORIGINAL CODE: EPIDOSNREFNE

APBN Date of receipt of notice of appeal recorded

Free format text: ORIGINAL CODE: EPIDOSNNOA2E

APBR Date of receipt of statement of grounds of appeal recorded

Free format text: ORIGINAL CODE: EPIDOSNNOA3E

APAF Appeal reference modified

Free format text: ORIGINAL CODE: EPIDOSCREFNE

APBT Appeal procedure closed

Free format text: ORIGINAL CODE: EPIDOSNNOA9E

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20151103