JP2004246576A - Program rewriting method and semiconductor device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a program rewriting method capable of safely rewriting a program recorded in a recording medium with a new program received from a server. <P>SOLUTION: This program rewriting method comprises a step (a) for communicating with a server by executing a second program, a step (b) for transmitting a new first program to this device, a step (c) for recording the new first program in the first area of a recording medium, a step (d) for communicating with the server by executing the new first program recorded in the first area of the recording medium, a step (e) for transmitting the new second program to the device and a step (f) for recording the new second program in the second area of the recording medium. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a method for rewriting a program recorded on a recording medium of a device connected to a server via a network. Further, the present invention relates to a semiconductor device used for a device connected to a server via a network.
[0002]
[Prior art]
Conventionally, a communication controller (communication LSI) has a CPU core and a flash ROM for recording a program (firmware) to be executed by the CPU core. The program recorded in the flash ROM includes a code required for communication, and communication becomes impossible when the code required for communication is rewritten. The program could not be rewritten. Therefore, in order to rewrite the program, a ROM writer or the like had to be used.
[0003]
However, devices with a built-in communication controller are not always located within easy reach of humans, and may be difficult to remove from a network. Further, when a large number of devices are connected to the network, it is not easy to rewrite the firmware of the communication controller in all of these devices.
[0004]
By the way, conventionally, there is a computer system in which a boot processing program can be rewritten by remote control particularly during operation (for example, see Patent Document 1).
[0005]
[Patent Document 1]
Japanese Patent No. 2940480
[0006]
The computer system disclosed in Patent Document 1 includes at least two nonvolatile storage devices, a nonvolatile storage device selector that switches between at least two nonvolatile storage devices, a multitasking operating system, and at least two nonvolatile storage devices. This requires a register with a latch for holding a rewrite state of a boot processing program in the device, and uses at least two nonvolatile storage devices as an active nonvolatile storage device and a standby nonvolatile storage device.
[0007]
In addition, there is a remote software download method in which a plurality of devices can be simultaneously and simultaneously downloaded without leaving the function of each device online (see, for example, Patent Document 2).
[0008]
[Patent Document 2]
JP-A-5-158703
[0009]
In the remote software download method disclosed in Patent Document 2, each device constituting the network requires two types of EEPROMs, one for the current operation and the other for the backup, and a plurality of devices are transmitted using a broadcast type communication means from the network management device. First means for writing program data to a spare EEPROM, using a point-to-point type communication means to confirm that the program data written to the spare EEPROM of each device by the first means is normal. A second means for confirming, a third means for using a broadcast type communication means to start up a plurality of devices by designating an EEPROM as an active or a spare, and a third means for each device When an abnormality is detected after start-up, the EEPROM is automatically switched from the standby EEPROM to the current EEPROM and Fourth means for performing Chiage requires a fifth means for confirming EEPROM currently in operation in the second individual device similar to the device.
[0010]
Further, there is a control device capable of writing and rewriting an application portion of firmware in a nonvolatile rewritable memory using a serial communication port or the like (for example, see Patent Document 3).
[0011]
[Patent Document 3]
JP 2000-112765 A
[0012]
The control device disclosed in Patent Literature 3 checks whether or not the second part of the firmware is stored in the second storage means when activated according to the first part of the firmware. Executing the second part of the firmware, maintaining a standby state if not stored, and externally following the program during the standby state or when a write instruction is given during execution of the second part of the firmware; The second part of the firmware is received via the communication means, and the writing of the second part to the second storage means is awaited.
[0013]
[Problems to be solved by the invention]
In view of the above, a first object of the present invention is to provide a program rewriting method capable of safely rewriting a program recorded on a recording medium of an apparatus connected to a server via a network. I do. It is a second object of the present invention to provide a semiconductor device used for a device connected to a server via a network.
[0014]
[Means for Solving the Problems]
In order to solve the above problems, a program rewriting method according to the present invention provides a first program and a predetermined program for rewriting a program recorded on a recording medium of a device connected to a server via a network. A method of rewriting a second program for realizing a function, the method comprising: executing (a) communication with a server by executing a second program in an apparatus; (B) transmitting the program to the device, (c) recording a new first program in the first area of the recording medium in the device, and recording the first program in the first area of the recording medium in the device. (D) performing communication with the server by executing the newly executed first program, and executing a new second program in the server. And step (e) of transmitting device, the apparatus comprises a step (f) to record a new second program in a second area of the recording medium.
[0015]
Thereby, the program can be safely rewritten.
[0016]
Further, the new first program has first information at the end indicating that recording of the new first program in the first area of the recording medium has been completed, and the apparatus includes the following steps: After (f), the method further comprises a step (g) of rewriting the first information with second information indicating that recording of the new second program in the second area of the recording medium has been completed. It is good. In addition, a third program for boot processing of the device is recorded in a third area of the recording medium, and step (a) is performed in the apparatus by the third program recorded in the third area of the recording medium. By executing the program and transferring the control to the second program recorded in the second area of the recording medium when the second information is recorded in the second area of the recording medium, Step (d) is to execute the third program recorded in the third area of the recording medium after the restart in the apparatus, and the first information is stored in the second area of the recording medium. When recorded, communication with the server may be performed by transferring control to the first program recorded in the first area of the recording medium.
[0017]
Further, the device and the server may perform communication using a packet to be treated as an error in a TFTP (Trial File Transfer Protocol).
Thereby, it is possible to prevent the program (firmware) of the TFTP client other than the information processing device 3 from being rewritten.
Furthermore, the packet may include information about the version of the second program.
[0018]
Further, the second program may have information about the version at the end.
This makes it possible to easily manage whether the second program recorded in the second area is to be rewritten or not.
[0019]
Also, step (b) transmits a new first program to the device using the IEEE802.3 packet in the server, and step (e) uses the IEEE802.3 packet in the server, A new second program may be transmitted to the device.
Thereby, the program size of the update-dedicated program can be reduced.
[0020]
Further, step (b) transmits a new first program to the device in units of blocks of a predetermined size in the server, and step (c) transmits a new first program of the predetermined size to the device in the device. The recording is performed in the first area of the recording medium in units of blocks, and in the step (e), a new second program is transmitted to the apparatus in units of blocks of a predetermined size in the server, and the step (f) is performed in the apparatus. Alternatively, the new second program may be recorded in the second area of the recording medium in blocks of a predetermined size.
[0021]
In this way, when rewriting is interrupted in the middle of the main program due to a communication error or the like, it is not necessary to rewrite blocks that have already been rewritten (erased and written). It is possible to shorten the time required for rewriting when the block has been rewritten, and to prevent the rewriting life of a block that has already been rewritten (erased and written) from being shortened.
[0022]
Further, a semiconductor device according to the present invention is a semiconductor device used for a device connected to a server via a network, and includes a first area for recording a first program for rewriting a program, and a predetermined area. A memory having a second area for recording a second program for realizing the function, and communication with the server by executing the second program recorded in the second area of the memory, to create a new The first program is received from the server, the new first program is recorded in a first area of the memory, and the new first program recorded in the first area of the memory is executed. And a processing unit for receiving the new second program from the server and recording the new second program in the second area of the memory.
Thus, the program in the memory can be safely rewritten.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration of a system for realizing a program rewriting method according to an embodiment of the present invention. As shown in FIG. 1, the system 1 includes a server computer 2 and an information processing device 3. The server computer 2 and the information processing device 3 are connected via a network.
The server computer 2 stores the latest version of the program to be executed by the information processing device 3, and transmits the latest version of the program to the information processing device 3 as necessary.
[0024]
FIG. 2 is a diagram showing the internal configuration of the information processing device 3 of FIG. As shown in FIG. 2, the information processing device 3 includes a CPU 4, a RAM 5, a ROM 6, a communication controller 7, and a network interface 8.
The CPU 4 executes a program stored in the ROM 6 while using the RAM 5 as a work area.
[0025]
The communication controller 7 is connected to a network interface 8 that is responsible for a physical layer (for example, 10Base-T defined in IEEE802.3) of communication using TCP / IP, and performs TCP / IP communication with an external device. Communication using is performed.
FIG. 3 is a diagram showing an internal configuration of the communication controller 7 of FIG. 2 as a semiconductor device according to one embodiment of the present invention. As shown in FIG. 3, the communication controller 7 includes a network interface unit 11, a bus interface unit 13, a CPU core 15, and a flash ROM 17.
[0026]
The network interface unit 11 receives communication data from an external device and sends it to the CPU core 15, and receives communication data from the CPU core 15 and sends it to the external device.
The bus interface unit 13 receives communication data and the like from the CPU 4 and sends it to the CPU core 15, and receives communication data and the like from the CPU core 15 and sends it to the CPU 4.
[0027]
The flash ROM 17 records a program (firmware) for the CPU core 15 to realize a function such as communication using TCP / IP.
FIG. 4 is a diagram showing a memory map of the flash ROM 17. As shown in FIG. 4, the flash ROM 17 has a boot sector (boot program recording area), a main program recording area, and an update-only program recording area.
[0028]
The boot sector is an area for recording a boot program which is a program executed when the communication controller 7 is started.
The main program recording area is an area for recording a main program that is a program for the communication controller 7 to realize a predetermined function. The main program includes a code for rewriting a program recorded in the update-dedicated program recording area to the latest version of the program, as described later.
[0029]
At the end of the main program recording area, a version information recording area for recording version information of the main program is provided. The version information recorded in the version information recording area is stored in the server computer 2 (see FIG. 1). By comparing with the version information of the main program stored in (1), it is possible to determine whether or not the main program currently recorded in the main program recording area is the latest version of the main program.
[0030]
The update-dedicated program recording area is an area for recording an update-dedicated program that is a program for performing a process of rewriting a main program currently recorded in the main program recording area to a latest version of the main program. At the end of the update-dedicated program recording area, there is provided a signature recording area for recording a signature indicating that the update-dedicated program has been rewritten or the main program has been rewritten.
[0031]
The update-dedicated program is a program specialized for rewriting the main program currently recorded in the main program recording area to the latest version of the main program, and thus has a smaller program size than the main program.
[0032]
Next, a program rewriting operation in the system 1 will be described with reference to FIGS.
FIG. 5 is a flowchart showing operations of the server computer 2 and the CPU core 15.
When activated, the CPU core 15 executes the boot program, shifts the processing from the boot program to the main program, and executes the main program (step S101). As described later, under a predetermined condition, the CPU core 15 may shift the processing from the boot program to the update-dedicated program after executing the boot program, and execute the update-dedicated program.
[0033]
The CPU core 15 requests the server computer 2 for the latest version of the update-dedicated program by using a TFTP (Trial File Transfer Protocol) on UDP / IP. The server computer 2 transmits the latest version of the dedicated update program to the CPU core 15 by using the TFTP (step S201).
[0034]
The CPU core 15 records the latest version of the dedicated update program received from the server computer 2 in the dedicated update program recording area of the flash ROM 17 (step S102). At this time, a signature indicating that rewriting of the update-dedicated program has been completed is recorded in the signature recording area at the end of the update-dedicated program recording area. Since the signature recording area is provided at the end of the update-dedicated program recording area, the fact that the signature indicating that rewriting of the update-dedicated program has been completed is recorded in the signature recording area means that the update-dedicated program is rewritten. Is completed.
[0035]
Note that, for some reason (for example, network trouble), the transfer of the update-only program is interrupted halfway, and the update-only program is partially rewritten but not completed. Update-only programs are incomplete. However, even in such a case, the main program in the main program recording area remains in its original state, and the main program in the main program recording area is not affected at all. Has no effect.
[0036]
When the update-dedicated program is completely rewritten, the CPU core 15 restarts and executes the boot program. Here, since the signature indicating that the rewriting of the update-only program has been completed is recorded in the signature recording area at the end of the update-only program recording area, the CPU 15 shifts the processing from the boot program to the update-only program, An update-only program is executed (step S103).
Next, the CPU core 15 requests the server computer 2 for the latest version of the main program. The server computer 2 transmits the latest version of the main program to the CPU core 15 (Step S202).
[0037]
The CPU core 15 records the latest version of the main program received from the server computer 2 in the main program recording area of the flash ROM 17 (Step S104).
If the transfer of the main program is interrupted due to a network trouble or the like, and the rewriting of the main program is performed halfway but not completed, the main program in the main program recording area becomes incomplete. . However, even in such a case, the update-dedicated program in the update-dedicated program recording area is complete. Therefore, after restarting, the CPU core 15 can execute the update-only program in the update-only program recording area again, and can try to rewrite the main program again.
[0038]
When the rewriting of the main program is completed, the CPU core 15 records a signature indicating that the rewriting of the main program is completed in the signature recording area at the end of the update-specific program recording area (step S105). This allows the CPU core 15 to execute the boot program at the next restart, shift the processing from the boot program to the latest version of the main program, and execute the latest version of the main program.
[0039]
As described above, according to the present embodiment, even if the transfer of the update-dedicated program is interrupted halfway and the update-dedicated program is partially rewritten but not completed, Since the main program has no effect, the update-only program can be rewritten. In addition, even if the transfer of the main program is interrupted halfway and the rewriting of the main program is performed halfway but not completed, the update-only program in the update-only program recording area is complete. Therefore, rewriting of the main program can be attempted again. Accordingly, the program recorded in the flash ROM 17 can be safely rewritten.
[0040]
In the present embodiment, TFTP on UDP / IP is used to transfer a program from the server computer 2 to the CPU core 15. General-purpose protocols such as TCP / IP and UDP / IP have a hierarchical structure, and there are detailed rules (for example, rules for retransmission) in the protocols, so general-purpose protocols such as TCP / IP and UDP / IP The code for implementing the protocol is complex and the code size is large. For this reason, the program size of the update-dedicated program increases, and it may be necessary to prepare another flash ROM, or the size of the main program recording area may be compressed and reduced.
Therefore, the IEEE 802.3 packet may be used as it is without using the TFTP (use of a raw packet). If the packet is used as it is, the program size of the update-dedicated program can be reduced, eliminating the need to prepare another flash ROM and preventing the main program recording area from being compressed and reduced in size. be able to.
[0041]
Further, if TFTP on UDP / IP is used to transfer the program from the server computer 2 to the CPU core 15, TFTP packets from TFTP clients other than the information processing device 3 are used because TFTP is a general-purpose protocol. It is conceivable that the server computer 2 malfunctions due to this and rewrites the program (firmware) of the TFTP client other than the information processing device 3. If a dedicated protocol is implemented on top of TCP / IP, UDP / IP, etc. in order to prevent such a situation, the program size of the update-dedicated program or the main program increases. Therefore, the server computer 2 may use a non-TFTP standard packet as the TFTP packet broadcast on the network.
[0042]
FIG. 6 is a diagram illustrating an example of a TFTP packet that the server computer 2 broadcasts on a network. The TFTP packet shown in FIG. 6 represents a file read request (RRQ: Read Request) of a file name that cannot be normally called “ABCDEFGHIJKLMNOPQ”, and the mode “XYZ” does not exist in TFTP. Therefore, the TFTP client other than the information processing device 3 transmits the error code 1 (indicating that a file having such a file name cannot be found) or the error code 4 (indicating that the mode is invalid) to the server computer 2. Return to. On the other hand, the information processing device 3 returns a TFTP packet as shown in FIG.
[0043]
The TFTP packet shown in FIG. 7 means “undefined error, see error message for details of error”. Since this is different from the TFTP packet returned by the TFTP client other than the information processing device 3 to the server computer 2, the server computer 2 can identify the information processing device 3 to be rewritten from the other TFTP clients. it can.
Thereby, it is possible to prevent the program (firmware) of the TFTP client other than the information processing device 3 from being rewritten.
[0044]
The character string representing the version information of the main program may be included in the file name of the TFTP packet in FIG. 6 and the error message of the TFTP packet in FIG.
[0045]
In this embodiment, as shown in FIG. 4, a version information storage area is provided at the end of the main program storage area of the flash ROM 17. Therefore, during the rewriting process of the main program by executing the update-dedicated program (see steps S202 and S104 in FIG. 5), the old version information before being rewritten is stored in the version information storage area, and the CPU core 15 Returns old version information in response to an inquiry from the server computer 2. Therefore, during the rewriting process of the main program by the execution of the update-dedicated program (before the rewriting process of the main program is completed), the main program in the main program storage area is to be rewritten.
[0046]
After the rewriting process of the main program by the execution of the update-dedicated program is completed, the latest version information after the rewriting is stored in the version information storage area, and the CPU core 15 receives the inquiry from the server computer 2. The latest version information is returned. Therefore, after the rewriting process of the main program by the execution of the update-dedicated program is completed, the main program in the main program storage area is not to be rewritten.
[0047]
As described above, according to the present embodiment, the main program in the main program storage area is to be rewritten (an old version of the main program) or not to be rewritten (to be the latest version of the main program). ) Can be easily managed.
[0048]
If the main program in the main program storage area of the flash ROM 17 is rewritten (erased and written) in block units of a predetermined size, if the rewriting is interrupted in the middle of the main program due to a communication error or the like, Rewriting of a block that has already been rewritten (erased and written) can be made unnecessary, and the time required for rewriting when rewriting the main program is retried can be shortened. And writing) can be prevented from being shortened.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a system for realizing a program rewriting method.
FIG. 2 is a diagram showing an internal configuration of the information processing apparatus of FIG. 1;
FIG. 3 is a diagram showing an internal configuration of the communication controller of FIG. 2;
FIG. 4 is a view showing a memory map of the flash ROM of FIG. 3;
FIG. 5 is a flowchart showing the operation of the system of FIG. 1;
FIG. 6 is a diagram showing an example of a format of a transmitted / received packet.
FIG. 7 is a diagram showing an example of a format of a transmitted / received packet.
[Explanation of symbols]
1 system, 2 server computer, 3 information processing device, 4 CPU, 5 RAM, 6 ROM, 7 communication controller, 8 network interface, 11 network interface unit, 13 bus interface unit, 15 CPU core, 17 flash ROM

Claims (9)

A method for rewriting a first program for rewriting a program recorded on a recording medium of a device connected to a server via a network and a second program for realizing a predetermined function in the device. ,
(A) performing communication with the server by executing the second program in the device;
(B) transmitting, in the server, a new first program to the device;
(C) recording the new first program in a first area of the recording medium in the device;
(D) performing communication with the server by executing the new first program recorded in a first area of the recording medium in the device;
(E) transmitting, in the server, a new second program to the device;
(F) recording the new second program in a second area of the recording medium in the device;
A method comprising: The new first program has, at the end thereof, first information indicating that recording of the new first program in the first area of the recording medium has been completed;
In the apparatus, after the step (f), rewriting the first information to second information indicating that recording of the new second program in the second area of the recording medium has been completed. The method of claim 1, further comprising: (g). A third program for boot processing of the device is recorded in a third area of the recording medium,
In the step (a), the apparatus executes the third program recorded in a third area of the recording medium, and the second information is recorded in a second area of the recording medium. In this case, by transferring control to a second program recorded in a second area of the recording medium, communication with the server is performed,
Step (d), in the device, after the restart, executes the third program recorded in the third area of the recording medium, and stores the first information in the second area of the recording medium. 3. The method according to claim 2, wherein, if recorded, communication with the server is performed by transferring control to a first program recorded in a first area of the recording medium. The method according to any one of claims 1 to 3, wherein the device and the server communicate with each other using a packet to be treated as an error in a TFTP (Trial File Transfer Protocol). The method of claim 4, wherein the packet includes information about a version of the second program. The method according to claim 1, wherein the second program has information about a version at a tail portion. Step (b) transmits a new first program to the device using the IEEE802.3 packet in the server, and step (e) uses the IEEE802.3 packet in the server. 4. The method according to claim 1, further comprising transmitting a new second program to the device. Step (b), in the server, transmitting a new first program to the device in block units of a predetermined size;
Step (c), in the device, recording the new first program in a first area of the recording medium in block units of a predetermined size;
Step (e), in the server, transmitting a new second program to the device in block units of a predetermined size;
8. The apparatus according to claim 1, wherein in the step (f), the new second program is recorded in a second area of the recording medium in units of blocks of a predetermined size. The method described in the section. A semiconductor device used for a device connected to a server via a network,
A memory having a first area for recording a first program for rewriting a program and a second area for recording a second program for realizing a predetermined function;
The communication with the server is performed by executing the second program recorded in the second area of the memory, a new first program is received from the server, and the new first program is executed. The communication with the server is performed by recording the new first program recorded in the first area of the memory and executing the new first program recorded in the first area of the memory. A processing unit that receives from the server and records the new second program in a second area of the memory;
A semiconductor device comprising:

Images