JP2005056148A - Driver update system, driver update method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To update a driver for duplicated input/output devices related to input/output operation of an OS and an application program without stopping the input/output operation. <P>SOLUTION: The driver 700 has an upper driver 710 and lower drivers 720, 730 controlling the input/output operation of the respective duplicated input/output devices. Of the lower drivers 720, 730, one is a driver for an active system, and the other is a driver for a standby system. When an instruction for updating the driver is issued, the upper driver updates the driver of the standby system to perform reinstallation. Next, the active system and the standby system are changed over. The update/reinstallation of the driver of the standby system, and the changeover of the active system/standby system are performed once again. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a driver update system, a driver update method, and a program for updating a device driver program (driver) that performs operation control of each input / output device provided in a redundant configuration.

  A program for controlling an input / output device connected to an electronic computer system is called a device driver program. Hereinafter, the device driver program is referred to as a driver. The driver controls the input / output devices and the like according to requests from an operating system (hereinafter referred to as OS) and an application program (hereinafter referred to as application).

  The driver is updated for reasons such as eliminating bugs and updating devices. To control with the updated driver, the old driver must be stopped and unloaded, the new driver must be loaded and the execution started. Therefore, while updating the driver, the OS and the application cannot access a device that is not controlled by the driver.

  On the other hand, computer systems, particularly computer input / output devices used for applications such as mainframe servers, have a redundant configuration for non-stop operation. In such an electronic computer system, it is required that the operations of the OS and the application do not (temporarily) stop even when the driver is updated.

A conventional technique for updating a driver that controls a redundantly configured device without (temporarily) stopping the operation of the OS and the application is a technique for loading the driver to be updated and initial setting of the related application ( For example, see Patent Document 1.) While the driver is being updated, both the old driver and the new driver are loaded, and the control of each device is gradually transferred from the old driver to the new driver.
JP-A-8-69430 (page 3-6, FIGS. 8 and 9)

  According to this driver update method, since the OS and the application can access any device via the driver, the operations of the OS and the application that attempt to access the device to which the driver in charge is about to be switched are (temporarily) stopped.

  An object of the present invention is to make it possible to update a driver that controls a device having a redundant configuration without (temporarily) stopping operations of an OS and application programs.

A driver update system according to a first aspect of the present invention includes:
At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A driver update system for updating the lower driver of a device control system configured by an upper driver that commonly controls the at least two lower drivers,
A control stop instruction means for instructing the upper driver to stop the control by the lower driver corresponding to the standby device;
Lower driver replacement means for replacing the lower driver whose control has been stopped with a new lower driver;
Control start instruction means for instructing the upper driver to start control by the replaced new lower driver;
Switching instruction means for instructing the host driver to switch the active device to the standby system and to switch the standby device to the active system;
The upper driver is instructed to stop the device control by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is moved to the new lower driver. Updating means for instructing the upper driver to replace the driver and start control by the new lower driver after the replacement;
It comprises.

According to the present invention, the control of the device operating as the standby system is stopped, the lower driver is updated, and the control is started. Next, the active system and the standby system are switched, the control of the apparatus that has changed from the active system to the standby system is stopped, the lower driver is updated, and the control is started.
Therefore, the lower driver is updated without (temporarily) stopping the operation of the OS and the application program.

For example, in the above driver update system,
The control stop instruction means receives an instruction to update the lower driver and the new lower driver to be exchanged from the upper device, and stops the control by the lower driver corresponding to the standby device. Instruct the upper driver,
The lower driver replacement means replaces the lower driver whose control has been stopped with a new lower driver in response to a notification from the upper driver that control has been stopped,
The control start instructing unit instructs the upper driver to start control by the replaced new lower driver after completion of the replacement by the lower driver replacing unit,
In response to the notification that the control from the upper driver has started, the switching instruction means instructs the upper driver to switch between the active device and the standby device,
In response to the switching completion notification from the upper driver, the updating means performs a process for updating the lower driver corresponding to the active device.

In the above driver update system,
The update means is, for example,
A second control stop instruction means for instructing the upper driver to stop the control by the lower driver responsible for controlling the device switched from the active system to the standby system;
A second lower driver replacement means for replacing the lower driver with a new lower driver after the control by the lower driver is stopped;
A second control start instruction means for starting control by the new lower driver after replacement;
It comprises.

In the above driver update system,
One of the at least two devices can be set to operate mainly as an active system.
In this case, the updating means
The system further comprises second switching instruction means for instructing the upper driver to switch the device mainly operating as the active system to the active system after updating the lower driver and starting the control as the standby system.

In the above driver update system,
The lower driver replacing unit may determine whether the lower driver and the new lower driver are new or old, and do not replace if the new driver is the same as or older than the lower driver.

  According to the present invention, it is possible to prevent the driver program from being downgraded by mistake.

The driver update method according to the second aspect of the present invention includes:
At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A driver update method for updating the lower driver of a device control system composed of an upper driver that commonly controls the at least two lower drivers,
A control stop instruction step for instructing the upper driver to stop the control by the lower driver corresponding to the standby device;
A lower driver replacement step of replacing the lower driver whose control has been stopped with a new lower driver;
A control start instruction step for instructing the upper driver to start control by the replaced new lower driver;
A switching instruction step for switching the active device to the standby system and instructing the host driver to switch the standby device to the active system;
The upper driver is instructed to stop the control of the corresponding device by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is An update step for instructing the upper driver to replace with a new lower driver and start control of the corresponding device by the new lower driver after replacement;
Is provided.

The program according to the third aspect of the present invention is:
At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A program for updating the lower driver of a device control system composed of an upper driver that commonly controls the at least two lower drivers,
A control stop instruction procedure for instructing the upper driver to stop control by the lower driver corresponding to a standby device;
A lower driver replacement procedure for replacing a lower driver whose control has been stopped with a new lower driver,
A control start instruction procedure for instructing the upper driver to start control by the replaced new lower driver;
A switching instruction procedure for switching the active device to the standby system and instructing the host driver to switch the standby device to the active system;
The upper driver is instructed to stop the control by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is replaced with a new lower driver. An update procedure for instructing the upper driver to replace and start control by the new lower driver after replacement;
Is executed on the computer.

  The present invention, for example, in an electronic computer system including a configuration of multiplexed input / output devices, device drivers that control the input / output devices without stopping the operation of the OS or application program for those input / output devices. The program can be updated.

  Hereinafter, a computer system according to an embodiment of the present invention will be described. Here, an example in which only the external storage device is duplicated will be described. The configuration of this computer system is shown in FIG. In order to facilitate understanding, a device driver program (hereinafter referred to as a driver) used to control these external storage devices is generated from the same file. An input / output request of an application program (hereinafter referred to as an application) is assumed to pass through an operating system (OS).

  As shown in the figure, in this computer system, external storage devices 220 and 230, a keyboard 310, a mouse 320 and a display 400 are connected to a computer 100.

  The computer 100 functions as an information processing apparatus such as a workstation or a server. The computer 100 includes a control unit 110, a main storage unit 120, and an input / output channel 130.

  The control unit 110 includes a central processing unit (CPU) and the like, and executes various data processing using an operation program stored in the main storage unit 120. Here, the operation program includes an OS, a driver, an application, and the like.

  The main storage unit 120 is composed of, for example, a RAM (Random Access Memory) and functions as a work area of the control unit 110. The main storage unit 120 is loaded with execution codes or data such as an OS, a driver, an application, a driver update program, and a “new driver” from the external storage device 220 or 230.

  The input / output channel 130 includes a CPU and performs data transfer processing between the main storage unit 120 and the input / output device.

The external storage device 220 and the external storage device 230 are composed of a hard disk, a hard disk array, or the like, and play a role as an auxiliary storage device of the computer 10.
One of the external storage device 220 and the external storage device 230 operates as an active system, and the other operates as a standby system. When the active system becomes inoperable due to a failure or the like, for example, the driver switches the active system and the standby system. The data stored in the external storage device 220 and the data stored in the external storage device 230 are synchronized by a technique such as mirroring.

  The keyboard 310 and the mouse 320 are devices that a user instructs the computer 100 to start various information processing. The display 400 is a device that displays the processing result of the computer 100 to the user.

The driver is a program for bridging the OS, application, input / output device, and the like. The configuration and function of the driver will be described with reference to FIG.
As illustrated, the driver 700 includes an upper driver 710 and lower drivers 720 and 730.
The host driver 710 includes an external interface 711, a dispatch unit 712, an internal interface (I / F) 713, and the like.
The lower driver 720 includes an internal I / F 721, a processing unit 722, a hardware interface (I / F) 723, and the like. The lower driver 730 has the same configuration and function as the lower driver 720.

The driver 700 receives an input / output request from the OS 600 by the external interface 711 in the upper driver 710. The dispatch unit 712 includes a queue, and input / output requests transmitted from the OS 600 are stored in this queue. The dispatch unit 712 sends the input / output request stored in the queue to the external storage device on the active system side. The dispatch unit 712 also receives a control command for controlling the driver 700 from the OS 600, and executes the disconnection and incorporation of the lower-level driver based on the control command.
Since the driver 700 distributes the input / output requests received from the OS 600 and the data stored in the external storage devices 220 and 230 is synchronized, the OS 600 uses whichever of the external storage devices 220 and 230 is the active system. The input / output request can be transmitted to the driver 700 without considering whether the

The upper driver 710 holds an entry point table (not shown). The entry point table describes addresses (entry points) for calling the lower-level driver on the active system side.
The internal I / F 713 calls an address (of the lower driver) described in the entry point table in response to each input / output request. When the internal I / F 713 calls these addresses, the lower driver executes processing corresponding to the entry point.

The lower drivers 720 and 730 receive input / output requests and the like from the upper driver 710 through the internal I / Fs 721 and 731, respectively, and the input / output requests and the like are analyzed by the processing units 722 and 732, respectively. Further, based on the analysis result such as the input / output request, the hardware I / F 723 and 733 sends a signal for controlling the external storage devices 220 and 230.
Processing results (for example, read data) of the external storage devices 220 and 230 are received by the hardware I / Fs 723 and 733 and transmitted to the OS 600 via the internal I / Fs 721, 731 and 713 and the external interface 711. Is done.

  In addition, the upper driver 710 outputs a control command (such as logical separation and registration of the driver) for controlling the lower drivers 720 and 730. The lower drivers 720 and 730 execute a predetermined process according to the control command.

For example, when the upper driver 710 transmits a control command for requesting presentation of its driver information (including entry points and version information) to the lower drivers 720 and 730, the lower drivers 720 and 730 send the driver information to the upper driver 710. Send to.
Further, when a control instruction for instructing the lower driver 720 or 730 to end is transmitted, the lower driver 720 or 730 ends the execution.

  Further, the dispatch unit 712 holds driver management information for managing lower-level drivers in order to distribute input / output requests to the active system. An example of this driver management information is shown in FIG.

As shown in the figure, the driver management information includes, for example, a driver identifier, an entry point, information on working / standby, version information, and the like.
The driver identifier is information given by the upper driver 710 to identify the lower drivers 720 and 730 and is unique within the driver 700. This information does not change even if the lower driver is updated.
The information regarding the working / standby is information indicating whether the driver is operating as the working system or the standby system.
The version information is information regarding the version assigned to the lower drivers 720 and 730.

  When the driver 700 receives an instruction to switch between the active system and the standby system, the upper driver 710 overwrites the contents of the entry point table with the entry point to the lower driver that controls the apparatus that has become the active system. Then, the information regarding the working / standby of the driver management information is updated. In other words, the information on the active / standby of the lower-level driver that controls the active device is updated to information indicating that the operation on the active system is being performed, and the lower-level driver that has controlled the active device until then. Is updated to information indicating that the operation in the standby system is being performed.

  The driver update program executes driver update processing for replacing the lower drivers 720 and 730 with new lower drivers. The configuration and function of the driver update program will be described with reference to FIG. The driver update program 800 includes a control unit 810, a control instruction unit 820, a driver update unit 830, a switching instruction unit 840, and a synchronization instruction unit 850.

The control unit 810 controls the control instruction unit 820, the driver update unit 830, the switching instruction unit 840, the synchronization instruction unit 850, and the like.
The control instruction unit 820 instructs the upper driver 710 to disconnect / register the lower driver and waits for a response from the upper driver 710. When disconnecting the lower driver, an instruction to stop the lower driver by designating the driver identifier is issued to the upper driver 710. In the case of incorporating a lower driver, an instruction to specify the driver file and incorporate it so as to operate as a lower driver is issued to the upper driver 710. Note that the host driver 710 is inquired in advance to obtain a driver identifier. (same as below.)
The driver update unit 830 reads a new lower driver into the main storage unit 120 and makes it executable as a lower driver of the driver 700.
The switching instruction unit 840 designates the driver identifier of the lower driver that controls the active system and the driver identifier of the lower driver that wants to control the active system, and instructs the upper driver to switch between the active system and the standby system. Go to 710.
The synchronization instruction unit 850 instructs the upper driver 710 to synchronize the data stored in the external storage devices 220 and 230 via the lower drivers 720 and 730.

  In the following description, the entire operation of the driver update program 800 will be described without describing the individual operations of the control unit 810, the control instruction unit 820, the driver update unit 830, the switching instruction unit 840, and the synchronization instruction unit 850.

Next, the driver update process will be described with reference to FIG.
The driver update instruction is to operate the keyboard 310, mouse 320, etc. to give the computer 100 an instruction to start executing the driver update program. Note that initially, the external storage device 220 is the active system and the external storage device 230 is the standby system, and the version of the lower driver before the update and the version after the update are different.

  First, the driver update program 800 reads update data of a new lower driver into the main storage unit 120 (step S11). For example, the driver update program 800 reads update data of a new lower driver from the CD-ROM.

  Next, the driver update program 800 instructs the upper driver 710 to remove the lower driver set on the standby system side from the control and stop the lower driver (step S12). After confirming that there is no input / output processing to be processed by the standby side, the upper driver 710 logically disconnects the input / output device and stops the operation of the corresponding lower driver. The upper driver 710 transmits information indicating that the lower driver has been stopped to the driver update program 800.

  When the driver update program 800 receives the data indicating that the lower driver has been stopped, the driver update program 800 replaces the standby lower driver with a new lower driver and starts it (step S13). Next, the driver update program 800 instructs the upper driver 710 to incorporate this new lower driver into the driver 700 (step S14). The upper driver 710 acquires information related to the lower driver from the new lower driver and registers it in the driver management information. Then, the upper driver 710 transmits information indicating that the installation of the lower driver is completed to the driver update program.

Then, the driver update program 800 instructs the upper driver 710 to switch between the active system and the standby system (step S15). The standby system selected at this time is a standby system in which the lower-level driver is updated in the immediately preceding step S12 to step S14.
The upper driver 710 replaces the information regarding the current / standby of the two lower drivers that are the switching target described in the driver management information. Then, after the processing of the currently executed input / output request is completed (before the next input / output request is processed), the entry point is rewritten to indicate the entry point of the lower driver switched to the active system. The host driver 710 transmits information indicating that the active system and the standby system have been switched to the driver update program.

Next, when receiving information indicating that the active system and the standby system have been switched, the driver update program 800 compares the version of the lower driver on the standby system side with the version of the lower driver to be updated, and whether the two versions are equal. It is determined whether or not (step S16). That is, the driver update program acquires information on the version of the standby lower-level driver from the higher-level driver 710 (driver management information), and determines whether the version matches the version of the new lower-level driver, for example, the version number of each lower-level driver. (Or creation date and time).
If the versions of the two lower drivers are not equal (step S16: NO), the driver update program 800 determines that the standby driver is not updated, and returns to step S12 to update the driver. to continue.
If they are equal (step S16: YES), the driver update program 800 determines that both the active and standby lower-level drivers have been updated, and ends the driver update process. The driver update program 800 displays a message on the display 400 that the lower level driver that controls the external storage devices 220 and 230 has been updated. Then, as a post-processing, the driver update program instructs the host driver 700 to instruct to synchronize the data of the active system and the standby system.

Through the above steps, the lower driver 730 is updated first, and then the lower driver 720 is updated.
During this time, the external storage devices 220 and 230 operate as the active system while being switched. The input / output operation of the active system is performed in the same way as in the normal case. That is, the input / output request from the OS 600 is processed while the lower-level driver is updated. In addition, while the driver is being updated, no input / output request is sent to the external storage device that the driver was in control of, so even if the external storage device cannot be accessed, there is virtually no problem. Absent.

  In addition, this invention is not limited to the said embodiment, A various deformation | transformation and application are possible.

For example, in the above-described embodiment, an example in which the input / output device (external storage device) is duplicated has been described. However, the input / output device may have a multiplicity higher than that. In this case, there are as many lower-level drivers as the number of input / output devices. In this case, the update order of the lower driver is, for example, the following procedure. That is, after updating all the lower drivers that are in charge of the standby system, the driver 700 switches between the active system and one of the standby systems, and updates the lower driver that was in charge of the active system before switching. Further, an input / output device that operates as a working system by default may be set in advance, and the input / output device may be restored to the working system after the lower driver is updated. Note that there may be two or more input / output devices operating as the active system.
Further, the input / output device is not limited as long as it has a redundant configuration.

  Further, when the computer 100 is connected to the communication network and the update data of the lower driver is stored in another computer connected to the communication network, the driver update program 800 downloads the update data of the lower driver. You may comprise as follows.

  Further, the lower driver 720 program and the 730 program may be different. In this case, the driver update program 800 replaces the lower drivers 720 and 730 with new lower drivers for each.

  Further, in order to prevent downgrade of the lower driver, the update of the lower driver may be stopped when the version of the lower driver to be updated is older or the same as that of the operating lower driver.

In addition, the data of the new lower driver may not be in the form of a binary program (that is, it can operate as a driver as it is), but may be in the form of a program list (so-called source program). In this case, the driver update program 800 starts the compiler (the update program 800 may include the compiler), and creates a binary program (lower driver) from the updated program list.
Also, the new lower driver data may not be the entire new lower driver data, but may be differential data (so-called patch) before and after the update. In this case, the driver update program 800 creates the updated lower driver by applying the difference data to the lower driver before the update.

  Further, when the functions of the driver update program 800 described above are realized by sharing between the OS and the application, or by cooperation between the OS and the application, only the part other than the OS may be stored in the medium.

  It is also possible to superimpose a program on a carrier wave and distribute it via a communication network. For example, the program may be posted on a bulletin board system on a communication network, and the program may be distributed via the network.

It is the figure which showed the structure of the computer system concerning embodiment of this invention. FIG. 2 is a block diagram for explaining a configuration and functions of a driver that controls input / output operations of the external storage device of FIG. 1. FIG. 3 is a diagram illustrating an example of driver management information managed by a higher-level driver in FIG. 2. FIG. 3 is a block diagram for explaining a function of a driver update program for updating a lower driver in FIG. 2. It is a flowchart for demonstrating the driver update process concerning embodiment of this invention.

Explanation of symbols

100 Computer 110 Control Unit 120 Main Storage Unit 130 Input / Output Channels 220 and 230 External Storage Device 310 Keyboard 320 Mouse 400 Display 600 Operating System (OS)
700 Driver 710 Higher level driver 711 External interface 712 Dispatch units 713, 721, 731 Internal I / F
720, 730 Lower level drivers 722, 732 Processing units 723, 733 Hardware I / F
800 Driver update program 810 Control unit 820 Control instruction unit 830 Driver update unit 840 Switching instruction unit 850 Synchronization instruction unit

Claims (7)

At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A driver update system for updating the lower driver of a device control system configured with an upper driver that commonly controls the at least two lower drivers,
Control stop instruction means for instructing the upper driver to stop the control by the lower driver corresponding to the standby device;
Lower driver replacement means for replacing the lower driver whose control has been stopped with a new lower driver;
Control start instruction means for instructing the upper driver to start control by the replaced new lower driver;
Switching instruction means for switching the active device to the standby system, and instructing the host driver to switch the standby device to the active system;
The upper driver is instructed to stop the control of the device by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is moved to the new lower driver. Updating means for instructing the upper driver to replace the driver and start control by the new lower driver after the replacement;
A driver update system comprising: The control stop instruction means receives an instruction to update the lower driver and the new lower driver to be exchanged from the upper device, and stops the control by the lower driver corresponding to the standby device. Instruct the upper driver,
The lower driver replacement means replaces the lower driver whose control has been stopped with a new lower driver in response to a notification from the upper driver that control has been stopped,
The control start instructing unit instructs the upper driver to start control by the replaced new lower driver after completion of the replacement by the lower driver replacing unit,
In response to the notification that the control from the upper driver has started, the switching instruction means instructs the upper driver to switch between the active device and the standby device,
In response to the switching completion notification from the upper driver, the updating means performs processing for updating the lower driver corresponding to the device that was the active system.
The driver update system according to claim 1. The updating means includes
A second control stop instruction means for instructing the upper driver to stop the control by the lower driver responsible for controlling the device switched from the active system to the standby system;
A second lower driver replacement means for replacing the lower driver with a new lower driver after the control by the lower driver is stopped;
A second control start instruction means for starting control by the new lower driver after replacement;
The driver update system according to claim 1, further comprising: One of the at least two devices is set to operate mainly as an active system,
The updating means includes
And a second switching instruction means for instructing the upper driver to switch the device mainly operating as the active system to the active system after updating the lower driver and starting the control as the standby system. The driver update system according to claim 1, 2, or 3.   2. The lower driver replacement means determines whether the lower driver and the new lower driver are new or old, and does not replace if the new driver is the same as or older than the lower driver. 5. The driver update system according to any one of 4 above. At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A driver update method for updating the lower driver of a device control system composed of an upper driver that commonly controls the at least two lower drivers,
A control stop instruction step for instructing the upper driver to stop the control by the lower driver corresponding to the standby device;
A lower driver replacement step of replacing the lower driver whose control has been stopped with a new lower driver;
A control start instruction step for instructing the upper driver to start control by the replaced new lower driver;
A switching instruction step for switching the active device to the standby system and instructing the host driver to switch the standby device to the active system;
The upper driver is instructed to stop the control of the corresponding device by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is An update step for instructing the upper driver to replace with a new lower driver and start control of the corresponding device by the new lower driver after replacement;
A driver update method comprising: At least two lower-level drivers that control at least two devices configured redundantly so that one unit operates as an active system and the other operates as a standby system, and controls the at least two devices one-to-one; A program for updating the lower driver of a device control system composed of an upper driver that commonly controls the at least two lower drivers,
A control stop instruction procedure for instructing the upper driver to stop control by the lower driver corresponding to a standby device;
A lower driver replacement procedure for replacing a lower driver whose control has been stopped with a new lower driver,
A control start instruction procedure for instructing the upper driver to start control by the replaced new lower driver;
A switching instruction procedure for switching the active device to the standby system and instructing the host driver to switch the standby device to the active system;
The upper driver is instructed to stop the control by the lower driver responsible for controlling the device switched from the active system to the standby system, and after the control by the lower driver is stopped, the lower driver is replaced with a new lower driver. An update procedure for instructing the upper driver to replace and start control by the new lower driver after replacement;
A program that causes a computer to execute.

Images