JP2001159937A - Data protection system for changeable storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To previously prevent data destruction generated when another medium is unreasonably changed for a medium to be fitted in the power supply stop state of a medium driver in an information processor. SOLUTION: When a power supply stop request to an external storage device is generated, a 1st decision means 41 decides whether a changeable storage medium fitted to the external storage device is in a usable state for the information processor at present or not. When the usable state of the storage medium is decided, a 2nd decision means 42 decides whether the storage medium is in a state of being accessible to an input/output at present or not. A power supply control means 43 decides that power supply is to be stopped or not on the basis of these decision result to control power supply.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a data protection method for an external storage medium in an information processing apparatus, and more particularly to a data protection method for an exchangeable storage medium (exchangeable storage medium).

[0002]

2. Description of the Related Art At present, a floppy (registered trademark) disk, which is an exchangeable storage medium that is cheaper and more portable than a fixed disk, is used as a data storage medium in personal computers, workstations, and even office computers. It is widely used for distribution media and software.

Recently, magneto-optical disks, IC memory cards, and the like have also been used as interchangeable storage media. However, although a replaceable medium such as a floppy disk (hereinafter simply referred to as a medium) has the advantage of being highly portable, it can be taken out of the drive at any time by a user, so that a certain medium on the medium can be removed. If the file is removed from the drive while data processing is being performed on the file, the data content of the file will be destroyed, or the file close processing will be left unprocessed, making it impossible to access the file thereafter. There is also a drawback that problems such as occur.

In order to deal with such a problem, conventionally, the following measures have been taken. That is,
When the medium is initialized, unique information is written to a certain sector of a certain track (usually, the first sector of the first track), and when the medium is removed from the drive, the unique information is stored in a memory in the information processing device. I do. When the medium is mounted on the drive again, the unique information is read from the medium, and the unique information is compared with the unique information stored in the memory. Access to the medium loaded in the device was allowed.

[0005] By doing so, even if the medium is removed while input / output access to a file on the medium is possible,
Even if another medium is mounted on the external storage device, it is possible to correctly close the certain file on the removed medium without destroying the data of the other medium.

[0006]

However, the conventional data protection method for exchangeable media as described above has the following problems.

[0007] The medium initialized by the information processing apparatus (system) having no data protection function of the exchangeable medium as described above becomes unusable once it is removed from the drive. That is, in such a medium, since predetermined specific information is not written in a predetermined area at the time of initialization, once it is taken out, it is determined as an error when determining the same medium,
After that, it becomes unusable.

Further, in order to make a medium on which unique information is not written at the time of initialization as described above usable in a system having the data protection function as described above, the medium must be used in this system before use. Initialization must be performed, but at the time of this initialization, all data previously stored on the medium is erased. Therefore, it is necessary to perform a complicated process of saving necessary data on the medium before the initialization and writing the saved data to the original area after the initialization. , The operation is troublesome. Further, when such a utility program must be newly created, its development is a heavy burden.

Further, if a data input / output request is made to a medium and the medium is removed before the processing for the data input / output request is completed, the data requested to be input / output is lost. There was a problem that it would. For this reason, the input / output request for the data is again sent to the OS (Operating System) on the application program side.
System)). To do so, it is necessary to obtain from the OS information on how far the data input / output request has been executed before the medium is removed.
A normal OS does not have such a function, and its realization has been almost impossible.

Further, when the reading of the unique information from the medium has failed (when an input / output error has occurred) or when the removed medium to be mounted on the drive device cannot be found, the operation is performed on the medium before the removal. The I / O request could not be canceled from the queue. Therefore, in order to cancel these input / output requests, it is necessary to perform an operation of dropping the system once and restarting the system again, which is very troublesome.

By the way, the drive device has a mechanism for electrically detecting the loading / unloading of the medium.
In a state where the power supply to the drive device is stopped, the detection mechanism does not operate as a matter of course, and the drive device cannot detect the mounting and removal of the medium.

For this reason, when the driving device shifts to the power supply stop state with the medium mounted, in this state,
It is possible to exchange a medium to be mounted on the drive device with another medium. In the above-described conventional data protection method, it has been possible to stop supplying power to the drive device when a medium is mounted and the medium is usable in the system.

For this reason, in an information processing apparatus having a resume function, power supply to the drive device is stopped when the medium mounted on the drive device is in a state usable in the system, and the drive device is mounted. When the power supply to the drive device is resumed after replacing the medium with another medium, the OS
Does not match the management information of the medium mounted on the drive device and the management information of the medium actually mounted on the drive device. Therefore, in this state, if data input / output processing is performed on a medium (equivalent to the another medium) mounted on the drive device, data on the medium may be destroyed.

Further, in an information processing apparatus also having a resume function, when the medium mounted on the drive unit is accessible for input / output, that is, when a file on the medium is opened, Even when the exchange is performed, there is a possibility that data in the above-described medium is destroyed.

A first object of the present invention is to replace an exchangeable storage medium (hereinafter simply referred to as a medium) initialized by another system having no data protection function of the medium with a new initial medium in the present system. The purpose is to be able to protect the data on the medium even if it is used without re-formatting.

Further, a second object of the present invention is to provide a data processing apparatus in which input / output processing is performed by mounting the medium again on the drive even if the medium being input / output processed is removed from the drive. Is to be able to resume the processing without losing the data.

Further, a third object of the present invention is to provide an information processing apparatus having a function of stopping power supply to the drive device, wherein the power supply to the drive device is stopped when the drive device is in a power supply stop state. An object of the present invention is to prevent data destruction of another medium, which has occurred when the medium to be mounted is incorrectly replaced with another medium.

[0018]

FIG. 1 is a diagram (part 1) illustrating the principle of the present invention. The present invention (first invention) relates to a data protection method for the exchangeable storage medium in an information processing apparatus including an external storage device in which the exchangeable storage medium is mounted as an external storage medium, Detecting means 1 for detecting the attachment and detachment of the exchangeable storage medium, and when the exchangeable storage medium becomes usable in the information processing apparatus, the unique information is stored in a predetermined area of the exchangeable storage medium. The unique information writing means 2 for writing to the memory in the information processing apparatus, and the detecting means 1 remove the external storage device from the external storage device when the exchangeable storage medium is in an input / output accessible state;
Thereafter, when it is detected that the exchangeable storage medium has been mounted again on the external storage device, the unique information writing means 2 writes the information in the information processing apparatus into the predetermined area of the mounted exchangeable storage medium. Determining means 3 for determining whether the detachable exchangeable storage medium has been attached to the external storage device again by checking whether or not the unique information written in the memory has been written; Permission means 4 for permitting input / output processing to the mounted exchangeable storage medium only when it is determined by the means 3 that the exchangeable storage medium removed from the storage device is mounted again. It is characterized by having.

According to a second aspect of the present invention, in addition to the means of the first aspect, the detecting means 1 is used when the exchangeable storage medium is in a state where input / output access is possible from the external storage device. Holding means for holding an unprocessed I / O request currently being processed or queued for the replaceable storage medium and a subsequent I / O request for the replaceable storage medium when the removal is detected; 11 and
When the determination unit 3 determines that the exchangeable storage medium once removed from the external storage device is mounted on the external storage device again, the holding unit 1
1 is further provided with a resuming unit 12 for resuming the input / output processing suspended by 1.

According to a third aspect of the present invention, in addition to the means of the first aspect, an error occurs when the determination means 3 reads data from the predetermined area of the exchangeable storage medium mounted on the external storage device. Occurs, the first forcibly terminating the input / output request held by the holding unit 11
Is further provided.

The fourth invention is directed to the second or third embodiment.
In addition to the means of the present invention, the determining means 3 determines that the replaceable storage medium newly attached to the external storage device is not the same as the original replaceable storage medium removed from the external storage device. Inquiry means 31 for inquiring the operator whether to end the judgment processing of the same exchangeable storage medium by the judgment means 3 and the operator permits the end of the judgment processing in response to the inquiry of the inquiry means 31 When the answer to the effect is made, the determination processing of the same exchangeable storage medium by the determination means 3 is forcibly terminated, and the I / O request held by the holding means 11 and the unexecuted I / O request are forcibly performed. And a second forced termination unit 32 for terminating the termination.

FIG. 2 is a diagram illustrating the principle of another invention. A fifth invention is a data protection method for the exchangeable storage medium in an information processing apparatus including an external storage device to which an exchangeable storage medium is mounted as an external storage medium,
When a request to stop power supply to the external storage device is issued, it is determined whether or not the exchangeable storage medium mounted on the external storage device is currently available for use in the information processing device. First determining means 41
When the first determination means 41 determines that the exchangeable storage medium is usable in the information processing apparatus, whether the exchangeable storage medium is currently in an input / output accessible state Second determination means 42 for determining whether or not
And determining whether to stop the power supply to the external storage device based on the determination result of the first determination unit 41 and the determination result of the second determination unit 42, Power supply control means 43 for controlling
And characterized in that:

The power supply control means 43, for example, determines whether the exchangeable storage medium is
When it is determined that the information processing apparatus is currently usable, the power supply to the external storage device is stopped after the exchangeable storage medium is disabled in the information processing apparatus. It may be configured.

Further, the power supply control means 43 determines that the exchangeable storage medium is
If it is determined that the input / output is accessible,
The power supply to the external storage device may be prohibited from being stopped.

In the first invention, the exchangeable storage medium (hereinafter simply referred to as a medium) mounted on the external storage device by the detecting means 1 can be used in the information processing apparatus (hereinafter referred to as the system). In such a state, the unique information writing means 2 writes the unique information (for example, time) in a predetermined area of the medium and in the memory of the system.

Thereafter, when the medium is removed from the external storage device, the detecting means 1 detects this, and the detecting means 1 notifies the judging means 3 of this detection. Judgment means 3
Receives this notification, checks whether or not the medium has been removed while the medium is in an input / output accessible state, and if so, stores that fact.

Thereafter, when a medium is mounted on the external storage device, the detecting means 1 detects this, and the detecting means 1 notifies the judging means 3 of this detection. Judgment means 3
When receiving this notification, the device checks whether or not the same information as the unique information written in the memory is written in the predetermined area of the loaded medium, and the removed medium is again It is determined whether or not the storage medium is loaded (determination processing of the same medium), and the determination result is notified to the permission unit 4.

The permission means 4 permits the input / output processing to / from the medium only when the notified judgment result indicates that the same medium has been mounted on the external storage device again.

As described above, when the medium is removed from the external storage device while the medium is in an input / output accessible state, the external storage device is removed until the removed medium is mounted on the external storage device again. Prohibits the data input / output processing for the medium mounted on the.

Therefore, even if another medium different from the removed medium is erroneously mounted on the external storage device, the data on the other medium will not be destroyed. In addition, the writing of the unique information to the medium to check whether the same medium is mounted in the external storage device is performed by the system using the medium mounted in the external storage device instead of at the time of initializing the medium as in the related art. Since the process is performed when the process is shifted to a usable state and the process is performed on a medium initialized by another system, whether or not the same medium is remounted in the external storage device is determined in the same manner as described above. Judgment is possible. Therefore, data can be protected even for a medium initialized by another system.

In the second aspect of the present invention, when it is detected by the detecting means 1 that a medium in an input / output accessible state is removed from the external storage device, the holding means 11 sends the medium to the medium. The currently processed I / O request and subsequent I / O requests are suspended. When the determination unit 3 determines that the medium has been mounted on the external storage device again, the resuming unit 12 sets the
, The execution of the input / output requests for the above-mentioned media, which has been suspended, is sequentially started in the order of occurrence.

Therefore, even if the medium is removed from the external storage device while the medium is in an input / output accessible state, if the medium is mounted on the external storage device again, no I / O request for the medium is lost. It is all done without.

In the third aspect of the present invention, if an error occurs in reading data from a predetermined area of the medium during the judgment processing of the same medium by the judging means 3, the forced ending means 21 sets the suspension The input / output request held by the means 11 is forcibly terminated.

Thus, all I / O requests to the medium previously queued are removed from the queue. For this reason, when the medium removed from the external storage device cannot be found when the medium is in the input / output accessible state, or when the medium cannot read data from the predetermined area due to external damage or the like, the conventional method is used. There is no need to perform an operation of dropping the system once and restarting it, and the system can be continued as it is.

In the fourth aspect of the present invention, when the determination means 3 determines that a medium different from the medium removed in the state where input / output access is possible is attached to the external storage device, The inquiry means 31 inquires, for example, by displaying a message, whether or not to terminate the determination processing of the same medium, and allows the operator to terminate the determination processing of the same medium in response to the inquiry. When a response to the effect is made, the second forced termination unit 32 forcibly terminates the input / output request held by the holding unit 11 (an input / output request that has been performed halfway or an unprocessed input / output request).

Therefore, in the fourth invention,
According to the judgment of the operator, the same effect as the above-described third invention can be obtained. In the fifth aspect, when a request to stop the power supply to the external storage device occurs, the first
The determination means 41 determines whether or not the medium mounted on the external storage device is currently available for use in the system.

Then, when the first judging means 41 judges that the medium is currently usable in the system, the second judging means 42 determines that the medium is in a state where the medium can be currently accessed for input / output. Is determined.

The power supply control means 43 determines whether or not the power supply to the external storage device can be stopped based on the result of the determination by the first determination means 41 and the result of the determination by the second determination means 42. The power supply to the storage device is controlled.

In this power supply control, for example, when the first determination means 42 determines that the medium is in a usable state, the power supply control means 43
After making the medium unusable in the system, power supply to the external storage device is stopped. Also,
The power supply control unit 43 includes, for example, the second determination unit 42
If it is determined that the medium is currently accessible for input / output, the stop of power supply to the external storage device is prohibited.

As described above, when a request to stop power supply to the external storage device is issued, when the medium is accessible for input / output, the request is prohibited, and when the medium is not usable in the system. Only, the power supply to the external storage device is stopped. Therefore,
When the medium is usable in the system as in the related art, or when the medium is in the I / O accessible state, the power supply to the external storage device is stopped, and then the power supply to the external storage device is stopped. After the supply is resumed, an operation that leads to data destruction of another medium such as mounting another medium on the external storage device becomes impossible.

[0041]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 3 is a block diagram illustrating a system configuration of the information processing apparatus according to the embodiment of the present invention.

In FIG. 1, a microprocessor (hereinafter, referred to as an MPU) 101 controls an OS (Operating System) and various application programs stored in a ROM (Read Only Memory) 102, for example, by a microprogram control. Run by
In addition to controlling the entire system, it also performs various processes related to data protection of a replaceable storage medium (in this embodiment, a floppy disk).

A floppy disk drive (hereinafter referred to as F
103) is a floppy disk which is one of exchangeable storage media mounted on the main body.
In addition to reading / writing data, it detects the attachment and detachment of the floppy disk to and from the main body, and outputs a detection signal to a floppy disk controller (hereinafter, referred to as FDC) 104.

In the FDD 103, in order to suppress power consumption, power supply from a power unit (PWR) 107, which will be described later, is stopped by an instruction from an operator's key input command.

The FDC 104 initializes (formats) a floppy disk mounted on the FDD 103 and creates a file on the floppy disk in response to an instruction of various control signals such as data read / write applied from the MPU 101. Reads / writes data from / to a file. Further, when a detection signal of the loading / removal of the floppy disk is input from the FDD 103, the detection is notified to the MPU 101 by an interrupt.

The RAM 105 is a readable / writable random access memory having a storage area for the OS, a system memory area used as a work area, a storage area for various application programs, a memory area used as a work area, and the like.

The timer (TMR) 106 is, for example, a timer with a built-in battery, and has a current time (year, month, day, hour,
Minutes, seconds). The time information of this timer 106 is
It can be read by the MPU 101.

The power supply unit (PWR) 107 is
1. Power is supplied to the ROM 102, the RAM 105, the FDC 104, and the FDD 105. The power supply to the FDD 103 is performed under the control of the MPU 101.

The ROM 102, RA
M105 and FDC 104 are connected directly by bus 108
It is connected to the MPU 101. Also, a keyboard (KB) 109 for command and data input, and an echo back display of key input to the keyboard 109,
A CRT controller (CRTC) 110 that controls display of a CRT display (CRT) 111 that displays a response message or the like to a key input command of the operator is also connected to the MPU 101 via the bus 108.

Next, FIG. 4 is a diagram for explaining the configuration and operation of the main part of the information processing apparatus having the above configuration according to the present invention. In FIG. 1, a file management unit 201, a medium protection unit 202, and a power supply management unit 203 are functional blocks realized by the MPU 101 executing some subsystems of the OS stored in the ROM 102.

The file management unit 201 performs a process of shifting a medium (floppy disk (FD) in this embodiment) 103f mounted on the portable medium device (FDD in this embodiment) 103f to a usable state and its floppy disk. The process of shifting the disk 103f to an unused state is performed. And
When performing a process of shifting the floppy disk 103f to a usable state, the floppy disk 10
The unique information 1051 which is identification information for protecting the data of 3f is stored in the system memory area 10 in the RAM 105.
The data is written and stored in a predetermined area of 5S, and also written in a predetermined area of the floppy disk 103f. In the present embodiment, the time (year, month, day, hour, minute, second) measured by the timer 106 is used as the unique information 1051. Further, the file management unit 201 determines whether all the files created on the floppy disk attached to the FDD 103 are in the current state, that is, whether the files are registered in the system and are usable in the system, Whether the file is accessible or not is managed for each file.

The medium protection unit 202 is removed from the FDD 103 when the floppy disk 103f mounted on the FDD 103 is in an input / output access state, and thereafter the floppy disk 103f 'is again removed from the FDD 103.
When the floppy disk 103f is detached from the floppy disk 103f 'and the newly inserted floppy disk 103f' is the same medium, the discrimination of the unique information 105 stored in the system memory 105S is performed.
1 and the unique information written in the floppy disk 103f 'is determined (if they match, the same floppy disk, that is, the one in which the removed floppy disk 103f is mounted again). Is determined). Also, the medium protection unit 202
Whether or not the floppy disk 103f is currently mounted on the FDD 103 is determined by an FDC 10 not shown in FIG.
Floppy disk 10 for FDD 103 from 4
Judgment is made based on an interrupt signal for notifying the attachment / detachment of 3f, and this is notified to the file management unit 201. Also, FDD 103 from power supply management unit 203 described later
The power supply management unit 203 determines whether or not to inquire whether the power supply to the power supply can be stopped. Further, the file management unit 2
01, the current state of the floppy disk 103f, that is, whether or not the floppy disk 103f currently mounted on the FDD 103 is available in the system. Inquires as to whether it is possible (whether there is an open file).

The power supply management unit 203 controls the power supply from the power supply unit 107 to the FDD 103. The power supply management unit 203 determines the power supply unit 10 based on the determination result in response to the inquiry from the medium protection unit 202 to stop the power supply to the FDD 103.
7 controls the stop of the power supply to the FDD 103 and the restart of the power supply to the FDD 103 after the stop of the power supply.

The FDD 103 has a mechanism (sensor) for detecting the mounting / removal of the floppy disk 103f with respect to the main body as described above, and every time the operation of mounting / removing the floppy disk is performed, the FDC 103
A notification is sent to the medium protection unit 202 via the communication unit 104.

The power supply unit 107 is a power supply for supplying drive power to the FDD 103. Next, the configuration of a file system which is an aggregate of files created on the floppy disk 103f will be described.

FIG. 5 is a diagram for explaining the configuration of the file system. The file is composed of a plurality of blocks each having a size of 1024 bytes. These blocks have "0", "1",... "N", "n + 1",.
.. Are assigned logical block numbers.

The block with the logical block number "0" is called a super block 300, and file system information such as the size of the file system, the block length, the size of the i list (described later), and the unused ( Empty)
(File system information) such as an i-node (described later) and an unused (empty) data block (described later) are stored.

The next block with the logical block number "1" is usually an unused area. Then, a plurality of i-nodes (i-node groups) are stored in each of the subsequent logical block numbers “2” to “n”, and these (n−1) i-node groups are i Listing 400
Is composed.

Since an i-node is created for each file, as many files as the number of i-nodes in the i-list are created on the floppy disk 103f. The inode stores information of a data block used by a corresponding file, and information (file management information) for file management such as the type of the file and the size of the file.

The blocks following the logical block number “n + 1” following the i-list 400 are data blocks for storing data of each file, and a set of these data blocks is called a data block area 500.

Next, the configuration of the super block 300 is shown in FIG. The first half of the 1024-byte superblock
The 512-byte area is an unused area. The latter 512-byte area includes a file system information management area 301 for storing the file system information, an i list 40
Empty i for managing information on empty (unused) i-nodes within 0
A node management area 302 and an empty data block management area 303 for managing information on empty (unused) data blocks in the data block area 500 are sequentially arranged, and a super block 3 following the empty data block management area 303 is arranged.
In the last area of 00, a unique information area 304 of a medium for storing unique information 1051 used to protect data of the floppy disk 103f mounted on the FDD 103 is arranged.

Next, the operation of the information processing apparatus having the above configuration will be described. The file management unit 201 mounts (mo
unt) When a request for an operation instruction is generated, a process of shifting the floppy disk 103f to a state usable by the system is performed, and immediately thereafter, a process shown in a flowchart of FIG. 7 is performed.

That is, the file management unit 201
The contents of the super block 300 (see FIG. 6) of the floppy disk 103f are read into a predetermined area on the system memory in the RAM 105 via the C104 (S10).
1).

Subsequently, the unique information 105 is output from the timer 106.
The current time (year, month, day, minute, hour, second) that is 1 is read (S012), and the time is written and stored in the system memory area in the RAM 105 (S103).

Next, the file management unit 201 stores the current time in the unique information 10 of the floppy disk 103f.
A specific information area 304 of the medium in the super block 300 loaded on the system memory as 51 (see FIG. 6)
(S104), and the super block 300 in which the unique information 1051 is set is transferred to the super block 30 on the floppy disk 103f via the FDC 104.
0 is written to the storage area (S105).

As a result, the super block 30 of the floppy disk 103f mounted on the FDD 103 is
0 indicates that the current time is in the floppy disk 10
3f is written as unique information 1051 for identifying the floppy disk 103f '.

When the writing of the unique information 1051 to the floppy disk 103f is completed, the file management unit 201 registers the floppy disk 103f in the system and performs a mounting process to make it usable in the system (S106). To end.

As described above, the floppy disk 103f mounted on the FDD 103 becomes available for use in the system when a mount request is issued, and the unique information 1051 is written in the super block 300.

Next, when the floppy disk is the FDD 103
The operation of the present embodiment in the case where it has been removed from will be described with reference to the flowchart of FIG. First, when the medium protection unit 202 detects that the floppy disk 103f attached to the FDD 103 has been removed via the FDC 104 (S201), the medium protection unit 202 notifies the device driver for the FDD 103 whether the floppy disk 103f is currently being processed or not. All the input / output requests of the processing are suspended (S202), and the processing of the device driver is stopped (S203).

Subsequently, the medium protection unit 202 refers to an open file table (not shown) in the system memory 105s and stores the current file on the floppy disk 103f.
Check whether there is an open file (S2
04) If there are no open files, the suspension of the device driver is released, the device driver restarts the process (S212), and the process ends.

On the other hand, if there is a file currently open on the floppy disk 103f, the medium protection unit 202 waits for the floppy disk 103f to be mounted on the FDD 103 (S205).

Then, the medium protection unit 202
When the floppy disk 103f is attached to the FDD 103 by the interruption from the FDD 103 (S205,
Yes), the super block 300 of the floppy disk 103f mounted on the FDD 103 is read via the FDC 104 (S206).

Then, the medium protection unit 202
It is checked whether or not an input / output error has occurred when reading the super block 300 based on the response status from step 4 (S207). If the reading of the super block 300 has been performed normally (S207, No), The unique information (time) 1051 stored in a predetermined area of the system memory 105s in the RAM 102 and the unique information area 30 of the medium in the super block 300 read out.
4 is compared with the unique information (time) stored in
208). Then, when they match, that is, when it is detected that the floppy disk 103f from which the removal from the FDD 103 has been detected in step S201 is mounted again on the FDD 103, the device driver is notified to release the suspension of the input / output request ( S209), the input / output request held by the device driver is restarted and executed (S212).

On the other hand, if it is determined in step S208 that the two pieces of unique information do not match, that is, that the floppy disk 103f 'different from the floppy disk 103f removed from the FDD 103 is mounted, the operator is notified to the CRT controller 110 Via CRT
Wrong floppy disk 103 on display 111
f 'is output, a warning message indicating that the floppy disk 103f is attached is output again.
Step S20 for judging whether or not the camera is mounted on the camera 03
5 to S208) are inquired as to whether or not to be forcibly terminated (S210).

When the operator inputs from the keyboard 109 a response indicating that the operation may be forcibly terminated, all of the input / output requests for the removed floppy disk 103f held in step S202 are sent to the device driver. After forcibly terminating as an error (S211), the processing of the device driver is restarted.

On the other hand, in step S210, if the operator performs a keyboard input for rejecting the forced termination of the same medium determination process, the process returns to step S205 to restart the same medium determination process again. , FD
The detection of the attachment of the floppy disk 103f to D103 is awaited.

When the medium protection unit 202 receives the notification that an input / output error has occurred from the FDC 104 in step S207, the medium protection unit 202 causes the device driver to perform the processing in steps S211 and S212. Floppy disk 103 reserved by the driver
All the uncompleted input / output requests to f are forcibly terminated with errors, and the processing of the device driver is restarted.

Next, the operation when a request to stop the power supply to the FDD 103 will be described with reference to the flowchart of FIG. First, the operator's keyboard 2
When the power supply management unit 203 detects that a request to shift to the power supply stop state to the FDD 103 has occurred due to a command input or the like from S06 (S301), the power supply management unit 203 executes
Inquiry (notification) of power supply stop is made to 02.
Upon receiving this inquiry, the medium protection unit 202
An inquiry is made to the file management unit 201 as to whether the floppy disk 103f is currently mounted on the FDD 103 and the floppy disk 103f is currently available in the system by a mount operation (S302).

When the medium protection unit 202 receives from the file management unit 201 a response notification that the floppy disk 103f is currently usable in the system, the medium protection unit 202 sends the response notification to the file management unit 202. An inquiry is made as to whether or not the file created on the floppy disk 103f is currently open (S303).

When the medium protection unit 202 receives a response notification from the file management unit 201 that there is no open file among the files created on the floppy disk 103f, the medium protection unit 202 first sends the file management unit 201 a response notification. On the other hand, the floppy disk 103f is instructed to perform an unmount operation, the file management unit 201 performs an unmount process on the floppy disk 103f, and the floppy disk 103f is made unused in the system (S304). ,
Next, the power supply management unit 203 is permitted to stop the power supply to the FDD 103. In response to this, the power supply management unit 203 controls the power supply unit 107 so that the power supply unit 107
The supply of the electrode to the DD 103 is stopped (S305). As a result, the stop of the power supply to the FDD 103 is stopped (S306).

As described above, when a request to stop the power supply to the FDD 103 is issued, even if the floppy disk 103f that is currently usable in the system is mounted on the FDD 103, the floppy disk 103f is If all the files created on the floppy disk 103f are closed, even if the power supply to the FDD 103 is stopped, the data of the files created on the floppy disk 103f will not be destroyed. In this case, the power supply to the FDD 103 is immediately stopped.

On the other hand, in step S303, the medium protection unit 202 receives a response notification from the file management unit 201 that there is an open file among the files currently created on the floppy disk 103f. To the power supply management unit 203, the FDD 103
Is notified that the power supply to the server cannot be stopped. Upon receiving this notification, the power supply management unit 203 does not stop the power supply unit 107 from supplying power to the FDD 103 (S307).

As described above, the floppy disk 103f mounted on the FDD 103 is mounted, and is now in a state where it can be used in the system.
When the power supply to the FDD 103 is stopped, the data of the open file is destroyed, or after the power supply to the FDD 103 is resumed, another floppy disk 103f '
If the floppy disk 103f 'is attached to the DD 103, the data on the floppy disk 103f' may be destroyed. In this case, even if there is a request to stop the power supply to the FDD 103, the request is not permitted.

In step S302, the medium protection unit 202 sends the current FDD1 from the file management unit 202.
03 is not mounted on the floppy disk 103f, or even if the floppy disk
If the mount operation is not performed on 3f, the power supply management unit 203 performs the processing of steps S305 and S306, and stops the power supply to the FDD 103.

As described above, if the floppy disk 103f is not mounted on the FDD 103, or if the floppy disk is not ready for use in the system even if it is mounted, the power supply to the FDD 103 is stopped. Also, the data on the floppy disk 103f is not destroyed, and the data on the floppy disk 103f 'is not destroyed even if another floppy disk 103f' is mounted after the power supply is restarted and mounted. Then, the power supply to the FDD 103 is immediately stopped.

Next, the operation of the device driver for the FDD 103, which is a module incorporated in the OS, with the medium protection unit 202 will be described with reference to the flowchart of FIG.

This device driver is usually provided by MPU1
The process waits for an interrupt from the FDC 104 with respect to the F.01, or a notification from the medium protection unit 202 that the input / output request for the floppy disk 103f mounted on the FDD 103 is released from the hold (S1001).

Then, it is activated by the occurrence of the interrupt or the issuance of the notification. After the activation, it is first determined which event of the interrupt or the notification is activated (S1002).

The interruption may include the loading of the floppy disk 103f to the FDD 103 or the FDD 103
When the interrupt is caused by the attachment of the floppy disk 103f to the FDD 103, the device driver immediately notifies the medium protection unit 202 of the removal (S1003).

A series of processes in steps S1001 to S1003 described above corresponds to the process in step S205 in the flowchart of FIG. On the other hand, FDD
If the interruption is due to the removal of the floppy disk 103f from the disk 103, all uncompleted I / O requests to the floppy disk 103f are suspended (S1004), and the FDD is sent to the medium protection unit 202.
A notification that the floppy disk 103f has been removed is sent from 103 (S1005).

This step S1001 → S1002 → S
A series of processing from 1004 to S1005 corresponds to the processing of step S201 in the flowchart of FIG. 8 described above.

When the device driver receives the notification from the medium protection unit 202 that the input / output request for the FDD 103 has been released from the medium protection unit 202 in step S1002, the floppy disk 103f has been removed from the FDD 103, and thus the process in step S1004 has been completed. Uncompleted input / output requests to the floppy disk 103f that have been suspended in step (1) are sequentially executed in the order of occurrence (S1006).

The above steps S1001 → S1002 →
A series of processing of 1006 corresponds to the processing of steps S209 to S212 in the flowchart of FIG. 8 described above.

As will be described later, the medium protection unit 202
Floppy disk 103 removed from DD 203
Since the notification of the cancellation of the input / output request is performed only when f is re-mounted on the FDD 103 without being replaced with another floppy disk 203f ', the above-described step S100
The in-flight I / O request for the floppy disk 103f held in step 4 is executed without any loss.

The device driver determines in step S10
After the end of the processing of step 03, S1005, or S1006, the process returns to step S1001 again, and waits for an interrupt from the FDC 104 or a notification from the medium protection unit 202.

Next, an operation between the power supply management unit 203 and the medium protection unit 202 will be described with reference to the flowchart of FIG. For example, when the user inputs a power-off command from the keyboard 109, the power supply management unit 203 is activated. Power supply management unit 2
03 is activated, first, the medium protection unit 202
To the power stop request (S1011), and waits for a response notification from the medium protection unit 202 to the notification.
(wait) state (S1012).

When the response notification is issued from the medium protection unit 202, the state changes from the wait state to the execution state, and the type of the response notification is determined (S1013).
Then, the response notification is sent from the power supply unit 107 to the FDD 103.
If the instruction instructs to stop the power supply to the FDD 103, the power supply unit 107 is immediately controlled to stop the power supply from the power supply unit 107 to the FDD 103 (S1014).
finish.

The above processing corresponds to the processing of steps S305 → S306 in the flowchart of FIG. 9 described above. On the other hand, in step S1013, FDD1
If the response notification indicates that the power supply to the power supply 03 cannot be stopped, the process immediately ends.

This processing corresponds to the processing of step S307 in the flowchart of FIG. 9 described above. As described above, when the user inputs a power-off command by key, the power supply management unit 203 inquires of the medium protection unit 203 whether the power supply to the FDD 103 can be stopped, and It is determined whether to stop the power supply to the FDD 103 according to the instruction from the unit 203.

Next, the operation of the medium protection unit 202 will be described with reference to FIG.
This will be described with reference to the flowchart of FIG. The medium protection unit 202 is normally in a state of waiting for a notification from the device driver for the FDD 103 or the power supply management unit 203 (wait state) (S1041).

When any notification is received, the wait state is released and the state transits to the execution state. First, the type of the notification is determined (S1042). If the notification is a notification from the device driver that the floppy disk 103f has been removed from the FDD 103, the file management unit 20 determines whether there is any file currently open on the floppy disk 103.
1 and makes a determination (S1043). Then, from the file management unit 201, the current floppy disk 1
Receiving a response indicating that there is no open file on the FDD 103
Of the hold release of the input / output request to the server (S104)
6) The process returns to step S1041 again to wait for a notification.

This notification is received by the device driver in step S1001 of the above-described flowchart of FIG.
In step 6, input / output request processing for the uncompleted floppy disk 103f, such as reading data from the floppy disk 103f and outputting buffered data to the MPU 101, is started.

On the other hand, if there is a currently open file among the files created on the floppy disk 103f in the above-mentioned step S1043, the medium protection unit 202 does not perform any processing and repeats the above-mentioned step. S1
The process returns to step 041 to wait for notification.

In step S1042, the medium protection unit 202 sends the FDD 103 from the device driver.
Receives the notification that the floppy disk 103f is mounted on the floppy disk 103f.
In addition to reading out the information written in the unique information area of the medium of the super block 300 of FIG.
Also read out the unique information 1005 stored in 05s,
It is checked whether or not the two match (S1044). When it is determined that the removed floppy disk 103f has been mounted on the FDD 103 again (S1045, Yes), the device driver is notified of the release of the I / O request hold (S1046). ), And returns to step S1041 again.

This notification is received by the device driver in step S1001 of the flowchart of FIG.
At step 06, execution of all pending I / O requests is started.

Thus, even if the floppy disk 103f mounted on the FDD 103 is mistakenly removed before all the input / output processing for the floppy disk 103f is completed, the floppy disk 103f can be mounted on the FDD 103 again. , All the uncompleted input / output processing is performed on the floppy disk 10.
Since the request is made for 3f, all uncompleted input / output requests for the floppy disk 103f are executed without losing any one before removal from the FDD 103.

[0107] On the other hand, the medium protection unit 202 operates the floppy disk 103f different from the floppy disk 103f removed from the FDD 103 in step S1045.
If it is determined that f 'has been attached to the FDD 103, no processing is performed, and the process immediately returns to step S1041.

As a result, the floppy disk 103f having an open file (in an input / output accessible state) is removed from the FDD 103, and then another floppy disk 103f 'is
When it is mounted on the D103, the uncompleted input / output processing required for the detached floppy disk 103f is not performed for the other floppy disk 103f ', and the data of the other floppy disk 103f' is Destruction is prevented.

On the other hand, when the medium protection unit 202 receives the notification of the power supply stop request from the power supply management unit 203 to the FDD 103 in step S1042,
A query is made to the file management unit 201 to determine whether or not the floppy disk 103f is mounted on the DD 103 and the floppy disk 103f can be used in the system by the mounting operation (S1).
047).

Then, the floppy disk 103f
Is operated (S1047, Yes),
Next, in the file on the floppy disk 103f,
It is checked whether there is a file that is currently open (S1048). If there is an open file (S1048, Yes), the power supply management unit 203 is notified that power supply to the FDD 103 cannot be stopped. (S1049).

This notification is received by the power supply management unit 203 when the power supply management unit 203 is in the state of step S1012 in the flowchart of FIG. 11 described above. As described above, since the power supply management unit 203 does not stop the power supply to the FDD 103 when receiving this notification, the power supply management unit 203 is currently mounted on the FDD 103 even when the power supply stop request to the FDD 103 is issued. When there is an open file among the files on the floppy disk 103f (when the FDD is in an input / output accessible state), the power supply to the FDD 103 is not stopped.

On the other hand, when the medium protection unit 202 determines in step S1048 that all the files on the floppy disk 103f are closed (S1048).
48, No), the floppy disk 103f is unmounted and removed from the system management (S1050), and the power supply management unit 203 is notified of permission to stop power supply (S1051).

This notification is received by the power supply management unit 203 in step S1013 of the flowchart of FIG. 11 described above, and as described above, upon receipt of this notification, the power supply management unit 203 sends the power supply unit 107 to the FDD 103. To stop the power supply.

Step S1042 → S1047 → S
The series of processing from 1048 to S1050 to S1051 is performed in steps S301 to S3 in the flowchart of FIG.
06.

As described above, when there is an open file on the floppy disk 103f mounted on the FDD 103 (the floppy disk 103f
Is in an I / O accessible state), FDD1
03 when a request to stop power supply is issued,
This request is not permitted, and after all the open files are closed, the floppy disk 1
03f, perform unmount processing, and then FD
The power supply to D103 is stopped.

For this reason, as in the prior art, when a certain file on the floppy disk 103f mounted on the FDD 103 is open, a request to stop the power supply to the FDD 103 is issued, and the driving device 103 is turned off. In this case, the operation of illegally replacing the floppy disk 103f becomes impossible. Therefore, in the information processing apparatus with the resume function, data destruction of the floppy disk newly mounted on the FDD due to the illegal replacement of the floppy disk in the state where the power supply to the FDD is stopped as in the related art is prevented.

In the above embodiment, the example in which the floppy disk 103f is used as the exchangeable storage medium has been described. However, the present invention is not limited to this, and the present invention is not limited thereto. It can be applied to data protection of all exchangeable storage media.

Also, the unique information 1005 is not limited to the current time as described above, but may be information generated uniquely in time series or information uniquely set in each exchangeable storage medium. Any information may be used.

[0119]

As described above, according to the present invention,
When performing a process of shifting an exchangeable storage medium (hereinafter simply referred to as a medium) to a usable state in an information processing apparatus (hereinafter referred to as a system), when the medium is mounted, the removed medium is again Since the unique information for identifying whether or not the media has been loaded is written to the media and the memory of the system, the media initialized by another system without the data protection function of the media is newly initialized by this system. Even if it is used without performing, if the format at the time of initialization is the same, the data on the medium can be protected.

Further, even when the medium being processed for input / output is removed from the drive unit, the input / output request being processed and the input / output request to be used as the medium are suspended, so that the removed medium is again used as described above. By mounting the drive, the processing can be resumed without losing the data being input / output, and all input / output requests issued to the medium until the mounting can be processed.

Further, in an information processing apparatus having a function of stopping power supply to a medium drive device, even if a request to stop power supply to the drive device is issued when a medium is input / output accessible, the power supply to the drive device is not affected. Disabling the supply of power is not permitted, and only when the medium becomes unusable in the system, the power supply to the drive is permitted to be stopped. It is possible to prevent data destruction of a newly mounted medium due to improper replacement of the medium while the power supply is stopped.

[Brief description of the drawings]

FIG. 1 is a diagram (1) illustrating the principle of the present invention.

FIG. 2 is a diagram (part 1) illustrating the principle of the present invention.

FIG. 3 is a system configuration diagram of an information processing apparatus according to an embodiment of the present invention.

FIG. 4 is a diagram illustrating the configuration and operation of a main part of the embodiment.

FIG. 5 is a configuration diagram of a file system created on a floppy disk.

FIG. 6 is a configuration diagram of a super block.

FIG. 7 is a flowchart illustrating an operation of setting unique information of a medium performed by a file management unit.

FIG. 8 is a flowchart illustrating an operation when a floppy disk is removed from the FDD.

FIG. 9 is a flowchart illustrating an operation when a power supply stop request to the FDD is generated.

FIG. 10 is a flowchart illustrating an operation of a device driver for FDD.

FIG. 11 is a flowchart illustrating an operation of a power supply management unit.

FIG. 12 is a flowchart illustrating an operation of a medium protection unit.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Detection means 2 Unique information writing means 3 Judgment means 4 Permission means 11 Reservation means 12 Resume means 21 First forced termination means 32 Second forced termination means 41 First judgment means 42 Second judgment means 43 Power supply control means

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Yoshihiro Morita 1015 Kamidadanaka, Nakahara-ku, Kawasaki City, Kanagawa Prefecture Inside Fujitsu Limited (72) Inventor Hiroshi Ito 1015 Kamikodanaka, Nakahara-ku, Kawasaki City, Kanagawa Prefecture Fujitsu Limited

Claims (3)

[Claims] 1. A data protection method for an exchangeable storage medium in an information processing apparatus having an external storage device in which an exchangeable storage medium is mounted as an external storage medium, wherein a power supply to the external storage device is stopped. A first determination unit configured to determine whether the exchangeable storage medium mounted on the external storage device is currently usable by the information processing device when a request is generated; When the first determination means determines that the exchangeable storage medium is currently in a state usable by the information processing apparatus, whether the exchangeable storage medium is currently in an input / output accessible state A second determining means for determining whether or not to stop the power supply to the external storage device based on a determination result of the first determining means and a determination result of the second determining means. And a power supply control means for controlling power supply to the external storage device. A data protection method for a replaceable storage medium, comprising: 2. The power supply control unit, when the first determination unit determines that the exchangeable storage medium is currently in a state usable by the information processing apparatus,
2. The data protection method for an exchangeable storage medium according to claim 1, wherein the power supply to the external storage device is stopped after the exchangeable storage medium is disabled in the information processing device. 3. The power supply control means, when the second determination means determines that the exchangeable storage medium is currently in an input / output accessible state, supplies power to the external storage device. 3. The data protection method for an exchangeable storage medium according to claim 1, wherein the suspension of the data is prohibited.