JP2005056319A - Software update system, method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a method capable of updating software in module units on an OS having a dynamic link function. <P>SOLUTION: A server 1 divides a program into a module 102 and a main program 103, compiles the main program 103, provides a link in a manner utilizing a shared library, complies the module 102 as the shared library, and sends the compiled module 104 and the main program 105 to a terminal device 3. The server also has a module change means 13 for changing the module and makes changes to the data to be updated. The terminal device 3 has a storage means 33 for storing a module 106 and a main program 107. On receiving the data to be updated, the terminal device writes it in the storage means 33, creates dynamic links to the module and the main program stored in the storage means 33, and executes the dynamically linked program. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a software update system, a software update method, and a software update program for updating software.

  In the conventional software update method for embedded devices such as mobile phones, in order to speed up the software update, the entire software is disassembled into multiple elements, and only the elements corresponding to the parts to be updated are included. It is updated (for example, see Non-Patent Document 1 and Patent Document 1).

  Non-Patent Document 1 describes the structure of mobile phone mobile device software on the premise of software update. The software structure includes a module obtained by dividing the software into a plurality of modules and a jump vector table for referencing the modules. With this configuration, even when there is a shift in the function arrangement due to a certain module being updated, the effect of the update can be suppressed by using the jump vector table.

  Further, Patent Document 1 describes a software rewriting method for a mobile phone. According to this software rewriting method, a program area for each function is provided with a control area indicating the reference relationship between the programs, and when the program is updated, the control area is updated to renew the new program. It is arranged.

  However, since the above conventional software update method is premised on operation on a real-time OS (operating system), a module on an OS having a dynamic link function such as embedded Linux, which has been spreading in recent years. A method for realizing software rewriting in units is not described. Further, it has been difficult to apply the conventional software update method to an OS having a dynamic link function.

In addition, in the software rewriting method on the OS having a dynamic link function such as the above-described embedded Linux, the fault tolerance ensuring method using modularization is not clearly shown. It is necessary to ensure sex.
JP 2002-94639 A Ryozo Kiyohara, Mariko Kurihara, Kiyoshi Takahashi, Daizo Tachibana, “Examination on SW update of mobile phone”, Information Processing Society of Japan, Mobile Computing and Wireless Communication Study Group Report (22-13), October 18, 2002, pp. 199 93-100

  The present invention has been made in view of the above-described conventional circumstances, and it is a first object of the present invention to provide a system and method capable of updating software in module units on an OS having a dynamic link function. And It is a second object of the present invention to provide a system and method capable of updating software on a module-by-module basis in a software rewriting system on an OS having a dynamic link function and ensuring fault tolerance. .

The terminal device of the present invention is a terminal device in a software update system,
Storage means for storing a shared library module and software divided into a main program linked to the shared library, each including one or more program files;
Communication means for receiving update data including a module to be updated and a main program;
Writing means for writing the update data received by the communication means into the storage means;
Dynamic link means for dynamically linking the module and the main program stored in the storage means;
Execution means for executing the dynamically linked program;
It has the composition provided with.

  With this configuration, it is possible to update software in units of modules on an OS having a dynamic link function.

The terminal device of the present invention is
The storage means is provided with a divided storage area for storing the module and the main program in a divided storage area,
The writing means rewrites the update data received by the communication means from the pre-update data in the corresponding divided storage area,
The terminal device
Backup means for backing up the pre-update data corresponding to the update data;
Detecting means for detecting a failure during writing of the writing means;
Fault storage means for storing fault information detected by the detection means;
Restarting means for restarting the terminal device;
A failure detection determination means for determining whether or not a failure has occurred during writing to the divided storage area of the update data before restart after restart by the restart means; and
When it is determined that there is a failure by the failure detection determination unit, a restoration unit that writes the backed up pre-update data back to the original divided storage area;
Partition mounting means for mounting each of the divided storage areas as a partition on a file system used in the terminal device;
Further comprising
The dynamic link means has a configuration for dynamically linking the module and the main program stored in the divided storage area mounted on the file system.

  With this configuration, fault tolerance can be ensured when updating software in units of modules on an OS having a dynamic link function.

Furthermore, the terminal device of the present invention
The storage means is provided with a divided storage area for storing the module and the main program in a divided storage area,
The writing means writes the update data into a divided storage area;
The terminal device
A write destination designating unit for designating the divided storage area to which the write unit should write the update data;
Detecting means for detecting a failure during writing of the writing means;
Fault storage means for storing fault information detected by the detection means;
Restarting means for restarting the terminal device;
A failure detection determination unit that determines whether or not a failure has occurred during writing to the divided storage area of the update data before the restart after the restart by the restart unit, from the information in the fault storage unit;
Partition mount control means for controlling the mounting method of the divided storage area according to the presence or absence of occurrence of a failure determined by the failure detection determination means;
In accordance with an instruction from the partition mount control means, partition mount means for mounting the divided storage area as a partition on a file system used in the terminal device;
Further comprising
The partition mount control means uses the divided area in which the update data is written if no failure has occurred, and the divided storage area in which the module existed before the writing as a partition in the file system if a failure has occurred. Instruct the partition mounting means to mount,
The dynamic link means has a configuration for dynamically linking the module and the main program stored in the divided storage area mounted on the file system.

  With this configuration, fault tolerance can be ensured when updating software in units of modules on an OS having a dynamic link function. Furthermore, it is possible to reduce the writing time by reducing the number of times of data writing and to extend the life of the storage means by reducing the number of times of writing of the storage means.

The server of the present invention is a server in a software update system,
File unit dividing means for dividing the software into modules and main programs each consisting of one or more program files;
Storage means for storing data including the module and the main program divided by the file unit dividing means;
Module changing means for changing the data stored in the storage means;
A main program compiling means for compiling the main program stored in the storage means and linking in a form using a shared library;
Module compiling means for compiling the module stored in the storage means and making it a shared library;
A communication means for transmitting the module and the main program via a communication line;
It has the composition provided with.

  With this configuration, it is possible to update software on a module basis for a terminal device equipped with an OS having a dynamic link function.

  Moreover, this invention provides the software update system provided with the said terminal device and the said server.

  With this configuration, it is possible to update software in units of modules on an OS having a dynamic link function.

The software update method of the present invention is a software update method in a terminal device capable of software update,
Storing the software divided into a shared library module and a main program linked to the shared library, each including one or more program files;
Receiving update data including a module to be updated and a main program;
Writing the update data received by the communication means into the storage means;
A dynamic link step for dynamically linking the module and the main program stored in the storage unit;
Executing the dynamically linked program;
Equipped with.

  With this configuration, it is possible to update software in units of modules on an OS having a dynamic link function.

The software update method of the present invention includes:
The step of storing the software in the storage means stores the module and the main program in a plurality of divided storage areas provided in the storage means,
The step of writing the module is to rewrite the update data received by the communication means from the pre-update data in the corresponding divided storage area,
The software update method is:
Backing up the pre-update data;
Detecting a failure during the writing;
Storing fault information detected by the detecting means;
Restarting the terminal device;
A failure detection determination means for determining from the failure information whether or not a failure has occurred during writing to the divided storage area of the update data before the restart after the restart by the restart means;
When it is determined that there is a failure by the failure detection determination means, the step of rewriting the backed up pre-update data to the original divided storage area;
Mounting each of the divided storage areas as a partition on a file system used in the terminal device;
Further comprising
The step of dynamically linking dynamically links the module and the main program stored in the divided storage area mounted on the file system.

  With this configuration, fault tolerance can be ensured when updating software in units of modules on an OS having a dynamic link function.

Furthermore, the software update method of the present invention includes:
The step of storing the software in the storage means stores the module and the main program in a plurality of divided storage areas provided in the storage means,
The step of writing the update data is to write the update data received by the communication means to the divided storage area,
The software update method is:
Designating the divided storage area in which the update data is to be written;
Detecting a failure during writing of the update data;
Storing fault information detected by the detecting means;
Restarting the terminal device;
Determining from the failure information whether a failure has occurred during the writing of the update data before restarting into the divided storage area after restarting by the restarting means;
Depending on the presence or absence of a failure determined by the failure detection determination means, if no failure has occurred, the divided area where the update data has been written is stored, and if a failure has occurred, the divided storage in which the module existed before writing Directing the area to be mounted on the file system as a partition;
In accordance with the instructions, mounting the divided storage area as a partition on a file system;
Further comprising
The step of dynamically linking dynamically links the module and the main program stored in the divided storage area mounted on the file system.

  Fault tolerance can be ensured when updating software in units of modules on an OS having a dynamic link function. Furthermore, it is possible to reduce the writing time by reducing the number of times of data writing and to extend the life of the storage means by reducing the number of times of writing of the storage means.

The software update method of the present invention is a software update method in a server capable of updating the software of the terminal device,
Dividing the software into modules and main programs each consisting of one or more source program files;
Storing the module and the main program divided by the file unit dividing means;
Modifying the data stored in the storage means;
Compiling the main program stored in the storage means and linking in a form using a shared library;
Compiling and storing a module stored in the storage means into a shared library;
Transmitting the module and the main program to the terminal device via a communication line;
Equipped with.

  With this configuration, it is possible to update software on a module basis for a terminal device equipped with an OS having a dynamic link function.

  Furthermore, the present invention provides a software update program for causing a computer to execute each step of the software update method.

  With this program, it is possible to update software in units of modules for a terminal device equipped with an OS having a dynamic link function.

  According to the present invention, it is possible to easily provide a system and method capable of updating software in module units on an OS having a dynamic link function.

(First embodiment)
FIG. 1 is a schematic configuration diagram showing a software update system for explaining a first embodiment of the present invention. As shown in FIG. 1, the software update system according to the first embodiment includes a server 1 and a terminal device 3 that receives data from the server 1 via a communication line 2. The terminal device 3 is, for example, an embedded device in which Linux is embedded as an OS and can execute an application program described in C language. However, the present invention is not limited to this, and other OS and program language may be used.

  The server 1 includes a file unit dividing unit 11 that divides an existing application program (hereinafter referred to as an application) 101 in units of source code files, a module 102 that is obtained by dividing the application 101 by the file unit dividing unit 11, and a main program 103. Storage means 12 for storing the module, module changing means 13 for changing the module 102 stored in the storage means 12, and compiling / sharing of the module 102 stored in the storage means 12 into a shared library Means 14, main program compilation / shared library linking means 15 for compiling the main program 103 stored in the storage means 12 to be executed using a shared library, and compilation / shared library means 14 Accordingly, the storage unit 16 that stores the compiled module 104 and the main program 105 that is compiled by the main program compilation / shared library link unit 15, and the module 104 and the main program 105 that are stored in the storage unit 16 are stored. The communication means 17 which transmits to the terminal device 3 via the communication line 2, and the operation control means 18 which controls operation | movement of the server 1 are provided. The operation control means 18 is mainly composed of a processor that operates according to a predetermined program.

  The terminal device 3 includes a communication unit 31 that receives a module or a main program sent from the server 1 through the communication line 2, a writing unit 32 that writes the received module and main program to the storage unit 33, and a writing unit 32. Storage means 33 for storing the module 106 and the main program 107 written by the above, a dynamic link means 34 for dynamically linking the module 106 and the main program 107, an execution means 35 for executing the dynamically linked software, and a terminal And an operation control means 36 for controlling the operation of the apparatus 3. The operation control means 36 is mainly composed of a processor that operates according to a predetermined program.

  The operation of the software updating apparatus configured as described above will be described below. In the following description, since all operations are executed in accordance with commands issued from the operation control means 18 in the server 1 and from the operation control means 36 in the terminal device 3, the operation control means. Instructions from 18 or 36 are omitted.

  First, an operation when transferring the entire application 101 will be described with reference to FIG. FIG. 2 is a flowchart for explaining the operation of application transfer in the software update system according to the first embodiment of the present invention. The operation when transferring the entire application 101 is indicated by solid arrows in FIG.

  First, the file unit dividing means 13 divides the source code of the application 101 into a plurality of modules 102a, 102b, 102c and the main program 103 (step 201). In the present embodiment, the case where the application 101 is divided into three modules will be described as an example. However, the number is not limited as long as the application 101 is divided into a plurality of modules.

  Moreover, how to divide the application 101 can be freely performed according to a request to the system. For example, the user of this system may select a division method such as dividing each module so as to have an equal size, or dividing so that the dependency relationship between modules is minimized, and automatically selects those standards. The program may be automatically divided into modules using an evaluation program. For example, in the case of C language, the main program 103 corresponds to a module including a function named main. This main program may also be selected by the user, or may be automatically determined by a program or the like.

Next, the compiling / shared library creating means 14 compiles the modules 102a, 102b, and 102c into a shared library, and generates corresponding modules 104a, 104b, and 104c, respectively (step 202). Here, assuming that the module 102a consists of a single file and the file name is file-102a.c, Linux, which is currently used widely, and gcc, which is a compiler widely used on Linux, are used. When (GNU Compiler Collection) is used, for example, the following command can be executed to compile and create a shared library.
gcc -O -g -c -fPIC -o sub.o file-102a.c
gcc -shared -Wl, -soname, libsubs.so.1 -o libsubs.so.1 sub.o

  Here, the file libsubs.so.1 generated when the above command is executed is a module made into a shared library. In the above example, the case where the module 102 is composed of one file has been described. However, when there are a large number of files such as C language programs, the command on the first line is executed for each file, and the second line Just add the file names to the end of the command.

Next, the main program compile / shared library link means 15 compiles the main program 103 using a shared library, and generates the main program 105 (step 203). Here, assuming that the main program 103 consists of one file and the file name is main.c, when using Linux and gcc, compilation can be performed by executing the following command.
gcc -c -o main.o main.c
gcc -o main main.o libsubs.so.1 -ldl

  A file main generated when the above command is executed is a main program compiled using a shared library. Further, like the module 102, the main program 103 may include a plurality of files.

  Next, the communication unit 17 transmits the compiled and shared library modules 104a, 104b, 104c and the compiled main program 105 to the terminal device 3 via the communication line 2 (step 204).

  The communication means 31 provided in the terminal device 3 receives the data transmitted from the server 1, and the writing means 31 stores the received data in the storage means 32 (step 205). Next, the dynamic link means 34 dynamically links the modules 106a, 106b, 106c and the main program 107 (step 206). The execution means 35 executes the dynamically linked program (step 118). In this way, the transfer of the application 100 from the server 1 to the terminal device 3 is completed.

  Next, an update method when only one module is changed will be described with reference to FIG. FIG. 3 is a flowchart for explaining the operation of the update method in the software update system according to the first embodiment of the present invention. Here, a case where the module 102b is updated from the module 102b (ver1) to the module 102b (ver2) will be described as an example. Note that ver1 indicates the first version and ver2 indicates the second version. The same applies to the case of updating the main program or the case of simultaneously updating a plurality of modules and the main program. In addition, the operation | movement at the time of updating this module 102b is shown with the arrow of the broken line in FIG.

  First, the developer uses the module changing means 13 to change the module 102b stored in the storage means 12 from ver1 to ver2 (step 301). At this time, it is assumed that the change to the module 102b is a change of only the internal processing, and there is no change in the data or interface that affects the outside. The module changing means 13 may be performed by a developer using a general-purpose editor or the like, or a dedicated tool for changing may be used.

  Next, the compiling / shared library creating means 14 compiles the module 102b (ver2) into a shared library (step 302). The execution method of this step is equivalent to step 202 in FIG. Next, the communication unit 112 transmits the compiled module 104b (ver2) to the terminal device 3 via the communication line 2 (step 303).

  The communication unit 31 provided in the terminal device 3 receives the data transmitted from the server 1, and the writing unit 31 stores the received data in the storage unit 32 (step 304). At this time, since only the module 104b (ver 2) has been transmitted from the server 1, only the module 106b (ver 1) stored in the storage means 32 is updated to the new version (ver 2). Next, the dynamic link means 117 dynamically links the modules 106a, 106b (ver2), 106c and the main program 107 (step 305). The execution means 118 executes the dynamically linked program (step 306).

  According to the software update system of the first embodiment of the present invention, the file unit dividing means for dividing the file unit, the compiling / shared library means for converting the module into a shared library, and the main program By providing a main program compile / shared library link means for compiling as a shared library, existing applications can be divided into arbitrary modules and main programs in units of files without creating jump tables, etc. By providing communication means for performing data transfer and dynamic link means, existing applications can be updated in units of modules, and software update on an OS having a dynamic link function can be easily realized. Can

  In this embodiment, the software for module division has been described as an existing application, but it can also be used when developing a new application. When dividing an existing application, it was obtained as an advantage that no special operation was required. However, when developing a new application, it is possible to develop an application without being aware of the division into modules. It has the advantage of being possible. In addition, when developing an application in consideration of module division, it is possible to achieve more efficient module division, and it is possible to obtain advantages such as improved execution performance, such as shortening the call time from the dynamic link library. Yes.

(Second Embodiment)
FIG. 4 is a schematic configuration diagram showing a software update system for explaining the second embodiment of the present invention. In the figure, the same reference numerals are given to the portions overlapping those in FIG. 1 described in the first embodiment.

  As shown in FIG. 4, in the terminal device 4 according to the second embodiment, in the storage unit 33, the divided storage areas 40a for storing the modules 106a, 106b, 106c and the main program 107 on different partitions in Linux, respectively. , 40b, 40c, and 40d.

  Further, the terminal device 4 is sent from the writing means 41 for writing the received data to the corresponding divided storage area 40, the backup means 42 for saving the data before the writing means 41 writes the data, and the backup means 42. Backup storage means 43 for storing the stored data, restoration means 44 for writing back the data stored in the backup storage means 43 to the original divided storage area, and whether or not writing failed during the writing operation of the writing means 41 A failure detection determination unit 45 that restarts the terminal device 4 after the operation of the writing unit 41 ends or when a failure is detected by the failure detection determination unit 45, and a failure detection If no failure is detected by the determination unit 45, the divided storage areas 40a, 40b, 40c, and 40d are assigned to the respective partitions. A partition mounting means 47 for mounting in the file system, an operation control means 48 for controlling the operation of the entire terminal device 4, and a failure detection means for detecting whether or not a failure has occurred during the operation of the writing means 41. 49 and a failure storage means 50 for storing whether or not a failure has been detected by the failure detection means 49. Here, the operation control means 48 is mainly composed of a processor that operates according to a predetermined program.

  The operation of the software updating apparatus configured as described above will be described below. FIG. 5 is a diagram for explaining a configuration of a file system according to the second embodiment.

  As shown in FIG. 5, the divided storage areas 40a, 40b, 40c, and 40d are each configured as an independent file system. Here, these divided storage areas are composed of, for example, an integer number of blocks (sectors) such as a flash ROM widely used in embedded devices and the like. Due to the operation of the partition mounting means 47, the divided storage areas 40a, 40b, 40c, and 40d appear as a directory structure as shown in FIG. 5 to the application on Linux.

  That is, the divided storage area 41d is used as a root file system, and the divided storage areas 40a, 40b, and 40c are mounted at mount points / fsys1, / fsys2, and / fsys3 in the root file system, respectively. In the directory / in the root file system, the main program 107 is stored as a file. Modules 106a, 106b, and 106c are stored in / fsys1, / fsys2, and / fsys3, respectively.

  In order to update each module by using this configuration, it is only necessary to rewrite the sector of the flash ROM in each divided storage area, and it is not necessary to rewrite modules in other divided storage areas. Each divided storage area may be composed of one sector of the flash ROM, or may be composed of a number of sectors of flash ROM having a total size of MB. In the former case, the capacity of the backup storage means 43 only needs to be large enough to store one sector, and when used in an embedded device with a strict limit on the memory capacity, fault tolerance can be achieved only by adding a small capacity memory. Can be realized. In the latter case, it is only necessary to divide the application into large modules, and it is possible to improve execution efficiency and reduce management complexity by reducing the number of modules.

  FIG. 6 is a flowchart for explaining the operation of the software updating method in the terminal device according to the second embodiment. Here, a case where the module 106b (ver1) stored in the divided storage area 40b is rewritten to the module 106b (ver2) will be described as an example. The operation in the server 10 is the same as steps 301 to 303 in FIG.

  First, in accordance with an instruction from the operation control means 48, the backup means 42 stores the module 106b (ver1) (ver1 indicates that it is the first version) in the divided storage area 41b in the backup storage means 43 ( Step 601). Next, the writing means 41 writes the module 106b (ver2) (ver2 indicates that it is the second version) into the divided storage area 41b (step 602).

  Next, the failure detection means 49 detects whether the writing in step 702 has been completed normally or whether a failure has occurred and ended abnormally (step 603). If the process ends normally, no failure is stored in the failure storage means 50 (step 604). If a failure occurs and terminates abnormally, the failure occurrence is stored in the failure storage means 50 (step 605).

  Next, the restarting means 46 restarts the software or the terminal device 4 (step 606). After the restart, the failure detection determination unit 45 determines whether or not a failure occurrence is stored in the failure storage unit 50 (step 607). If the occurrence of the failure is stored, the restoration unit 44 writes the module 106b (ver1) stored in the backup storage unit 43 back to the divided storage area 40b (step 611), and sets the failure storage unit 50 to have no failure. Then, the process returns to step 706 (step 612).

  If no failure is stored in step 607, then the partition mounting means 47 mounts each partition of the divided storage areas 40a, 40b, 40c and 40d in the directory shown in FIG. Step 608). The dynamic link means 34 dynamically links all the modules 106a, 106b, 106c and the main program 107 (step 609). Next, the execution means 35 executes the dynamically linked software (step 610).

  According to such a software update system of the second embodiment of the present invention, the compiling / shared library unit, the main program compiling / shared library link unit, the divided storage area, the fault detecting unit, and the fault memory By means of means, backup means, backup storage means, restoration means, failure detection determination means, restart means, partition mount means, and dynamic link means, it is easy to update software in units of modules. In addition, it can be realized by using a small storage capacity, and even if a write failure occurs during data writing, the operation can be continued and fault tolerance can be ensured.

  In the present embodiment, the method of transmitting the module generated by the server as it is from the server to the terminal device has been described. However, for example, the difference between the old version and the new version as disclosed in JP-A-8-255104 is used. It is also possible to reduce the amount of data transmitted from the server to the terminal device using the extraction technique.

  In addition, when a failure is determined by the failure detection determination unit 45, the user is notified through a display unit, a speaker (not shown), or the like of the terminal device 3, or the communication unit 31 has a transmission function so that the communication unit is Fault information may be notified to the server via

(Third embodiment)
FIG. 7 is a schematic configuration diagram showing a software update system for explaining the third embodiment of the present invention. In the figure, the same reference numerals are given to the portions overlapping those in FIG. 1 described in the first embodiment.

  In the terminal device 7 according to the third embodiment, in the storage unit 33, the divided storage areas 70a, 70b, 70c, 70d, which store the modules 106a, 106b, 106c and the main program 107 on different partitions in Linux, respectively. 70e is provided.

  Further, the terminal device 7 writes the data received from the divided storage area communication means 31 to the unused divided storage area, and the divided storage area and the divided storage area in which the old version of the received module is stored. The writing means 71 for transmitting to the partition mount control means, the failure detecting means 72 for detecting the failure of the writing failure while the writing means 71 is writing the data to the divided storage area, and the failure detected by the failure detecting means 72 Fault storage means 73 for storing, fault detection determination means 74 for judging whether or not a fault occurrence is stored in the fault storage means 73 at the time of booting, software or terminal when a fault occurs during writing or when writing is normally completed The restarting means 75 for restarting the device 7 and the method for mounting the divided storage area are controlled depending on whether or not a failure has occurred The partition mount control means 76, the partition mount means 77 for mounting the partition according to the instructions of the partition mount control means 76, the operation control means 78 for controlling the overall operation of the terminal device 7, and the data received by the communication means 31 And a write destination designation means 79 for designating a destination to write. Here, the operation control means 78 is mainly composed of a processor that operates according to a predetermined program.

  The operation of the software updating apparatus configured as described above will be described below. First, the structure of the file system will be described with reference to FIGS. FIG. 8 is a diagram for explaining the configuration and operation of the file system according to the second embodiment, and FIG. 9 is a diagram for explaining the configuration and operation of the file system according to the third embodiment. is there.

  Each of the divided storage areas 70a to 70e is configured as an independent file system composed of an integral number of blocks (sectors) of the flash ROM, as in FIG. 4, and in FIG. 8, each of the divided storage areas 70a, 70b, and 70c Mounted in the directory / fsys1, / fsys2, / fsys3. In FIG. 8, the flow of data at the time of module backup, writing of a new module, and restoration in the second embodiment is indicated by arrows. In the second embodiment, even if a failure does not occur at the time of writing, data is written twice, that is, backup to the backup storage means of the module and writing to the divided storage area. Writing occurs.

  On the other hand, in this embodiment, a divided storage area 70e is added instead of the backup storage means. The downloaded module is written into the divided storage area 70e. The divided storage area 70b was mounted at / fsys2 before writing, but after writing, the divided storage area 70e was mounted at / fsys2, and a new module in the divided storage area 70e was installed in the divided storage area 70b. It looks like it was replaced with the old module, and updates the module. That is, the modules and the main program stored in the divided storage area where no failure has occurred are dynamically linked and executed.

  Next, the operation of the terminal device 7 will be described with reference to FIG. FIG. 10 is a flowchart for explaining the operation of the software update method in the terminal device according to the third embodiment. Here, a case where the module 106b (ver1) stored in the divided storage area 70b is updated to the module 106b (ver2) will be described as an example. The operation in the server 10 is the same as steps 301 to 303 in FIG.

  First, based on an instruction from the operation control means 78, the write destination designation means 79 determines a write destination, and according to the determination, the write means 71 writes the data obtained from the communication means 31 into the divided storage area 70e (step 1001). At this time, the write destination designation means 79 designates a backup divided storage area that is not used at that time.

  Next, the failure detecting means 72 determines whether or not a failure has occurred during writing and the writing has been normally completed (step 1002). If a failure has occurred, the failure storage means 73 is instructed to record the failure occurrence (step 1004). If no failure has occurred, no failure is recorded (step 1003).

  Next, the restarting means 75 restarts the terminal device 7 (step 1005). Next, after restarting, the failure detection determination unit 74 determines whether a failure is recorded in the failure storage unit 73 (step 1006).

  If a failure is recorded, the partition mount control means 76 instructs the partition mount means 77 to mount the divided storage areas 70a to 70d as before rewriting, and the partition mount means 77 mounts according to the instructions. (Step 1008).

  If no failure has been recorded, the partition mount control means 76 mounts the divided storage area 70e instead of the directory / fsys2 that mounted the divided storage area 70b, and mounts the other partitions as before. Then, the partition mount unit 77 is instructed, the partition mount unit 77 mounts in accordance with the instruction, and notifies the write destination designation unit 79 that the divided storage area 70b is not used (step 1007).

  Next, the operation control means 78 stores no failure in the failure storage means 73 (step 1009). Next, the dynamic link means 34 dynamically links all modules and the main program (step 1010). Next, the execution means 35 executes the dynamically linked software (step 1011).

  According to such a software updating system of the third embodiment of the present invention, a compiling / shared library unit, a main program compiling / shared library link unit, a divided storage area, a write destination designating unit, a failure By providing detection means, failure storage means, failure detection determination means, restart means, partition mount control means, partition mount means, and dynamic link means, it is easy to update software in units of modules. Further, it can be realized by using only a small storage capacity, and even if a write failure occurs at the time of data writing, the operation can be continued and fault tolerance can be ensured. Further, the writing time can be reduced by reducing the number of data writing times, and the life can be extended by reducing the number of writing times of the nonvolatile memory.

  The software update system of the present invention has an effect that enables simple software update, and is useful for an embedded device equipped with an OS having a dynamic link function.

1 is a schematic configuration diagram showing a software update system for explaining a first embodiment of the present invention; Flow chart for explaining operation of application transfer in the software update system according to the first embodiment FIG. 3 is a flowchart for explaining the operation of the update method in the software update system according to the first embodiment. The schematic block diagram which shows the software update system for describing the 2nd Embodiment of this invention The figure for demonstrating the structure of the file system which concerns on 2nd Embodiment. The flowchart for operation | movement description of the software update method in the terminal device which concerns on 2nd Embodiment Schematic configuration diagram showing a software update system for explaining a third embodiment of the present invention The figure for demonstrating the structure and operation | movement of a file system which concern on 2nd Embodiment. The figure for demonstrating the structure and operation | movement of a file system concerning 3rd Embodiment. The flowchart for operation | movement description of the software update method in the terminal device which concerns on 3rd Embodiment

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Server 2 Communication line 3, 4, 9 Terminal device 11 File unit division means 12, 16 Storage device 13 Module change means 14 Compile / shared library means 15 Main program compile / shared library link means 17, 31 Communication means 18, 36 , 48, 78 Operation control means 32, 41, 71 Write means 34 Dynamic link means 35 Execution means 40, 70 Divided storage area 42 Backup means 43 Backup storage means 44 Restoration means 45, 74 Fault detection determination means 46, 75 Restart means 47, 77 Partition mount means 49, 72 Fault detection means 50, 73 Fault storage means 76 Partition mount control means 79 Write destination designation means

Claims (10)

A terminal device in a software update system,
Storage means for storing a shared library module and software divided into a main program linked to the shared library, each including one or more program files;
Communication means for receiving update data including a module to be updated and a main program;
Writing means for writing the update data received by the communication means into the storage means;
Dynamic link means for dynamically linking the module and the main program stored in the storage means;
Execution means for executing the dynamically linked program;
A terminal device comprising: The terminal device according to claim 1,
The storage means is provided with a divided storage area for storing the module and the main program in a divided storage area,
The writing means rewrites the update data received by the communication means from the pre-update data in the corresponding divided storage area,
The terminal device
Backup means for backing up the pre-update data corresponding to the update data;
Detecting means for detecting a failure during writing of the writing means;
Fault storage means for storing fault information detected by the detection means;
Restarting means for restarting the terminal device;
A failure detection determination means for determining whether or not a failure has occurred during writing to the divided storage area of the update data before restart after restart by the restart means; and
When it is determined that there is a failure by the failure detection determination unit, a restoration unit that writes the backed up pre-update data back to the original divided storage area;
Partition mounting means for mounting each of the divided storage areas as a partition on a file system used in the terminal device;
Further comprising
The dynamic link means is a terminal device for dynamically linking the module and the main program stored in the divided storage area mounted on the file system. The terminal device according to claim 1,
The storage means is provided with a divided storage area for storing the module and the main program in a divided storage area,
The writing means writes the update data into a divided storage area;
The terminal device
A write destination designating unit for designating the divided storage area to which the write unit should write the update data;
Detecting means for detecting a failure during writing of the writing means;
Fault storage means for storing fault information detected by the detection means;
Restarting means for restarting the terminal device;
A failure detection determination means for determining whether or not a failure has occurred during writing to the divided storage area of the update data before restart after restarting by the restarting means, from information in the failure storage means;
Partition mount control means for controlling the mounting method of the divided storage area according to the presence or absence of occurrence of a failure determined by the failure detection determination means;
In accordance with an instruction from the partition mount control means, partition mount means for mounting the divided storage area as a partition on a file system used in the terminal device;
Further comprising
The partition mount control means uses the divided area in which the update data is written if no failure has occurred, and the divided storage area in which the module existed before the writing as a partition in the file system if a failure has occurred. Instruct the partition mounting means to mount,
The dynamic link means is a terminal device for dynamically linking the module and the main program stored in the divided storage area mounted on the file system. A server in a software update system,
A file unit dividing means for dividing the software into a module and a main program each consisting of one or more source program files;
Storage means for storing data including the module and the main program divided by the file unit dividing means;
Module changing means for changing the data stored in the storage means;
A main program compiling means for compiling the main program stored in the storage means and linking in a form using a shared library;
Module compiling means for compiling the module stored in the storage means and making it a shared library;
A communication means for transmitting the module and the main program via a communication line;
A server with   A software update system comprising the terminal device according to any one of claims 1 to 3 and the server according to claim 4. A software update method in a terminal device capable of software update,
Storing the software divided into a shared library module and a main program linked to the shared library, each including one or more program files;
Receiving update data including a module to be updated and a main program;
Writing the update data received by the communication means into the storage means;
A dynamic link step for dynamically linking the module and the main program stored in the storage unit;
Executing the dynamically linked program;
A software update method for a terminal device comprising: The software update method according to claim 6, comprising:
The step of storing the software in the storage means stores the module and the main program in a plurality of divided storage areas provided in the storage means,
The step of writing the module is to rewrite the update data received by the communication means from the pre-update data in the corresponding divided storage area,
The software update method is:
Backing up the pre-update data;
Detecting a failure during the writing;
Storing fault information detected by the detecting means;
Restarting the terminal device;
A failure detection determination means for determining whether or not a failure has occurred during writing to the divided storage area of the update data before the restart after the restart by the restart means;
When it is determined that there is a failure by the failure detection determination means, the step of rewriting the backed up pre-update data to the original divided storage area;
Mounting each of the divided storage areas as a partition on a file system used in the terminal device;
Further comprising
A software update method for a terminal device, wherein the step of dynamically linking dynamically links the module and the main program stored in the divided storage area mounted on the file system. The software update method according to claim 6, comprising:
The step of storing the software in the storage means stores the module and the main program in a plurality of divided storage areas provided in the storage means,
The step of writing the update data is to write the update data received by the communication means to the divided storage area,
The software update method is:
Designating the divided storage area in which the update data is to be written;
Detecting a failure during writing of the update data;
Storing fault information detected by the detecting means;
Restarting the terminal device;
After restarting by the restarting means, determining from the failure information whether or not a failure has occurred during the writing of the update data before restarting into the divided storage area;
Depending on the presence or absence of a failure determined by the failure detection determination means, if no failure has occurred, the divided area where the update data has been written is stored, and if a failure has occurred, the divided storage in which the module existed before writing Directing the area to be mounted on the file system as a partition;
In accordance with the instructions, mounting the divided storage area as a partition on a file system;
Further comprising
A software update method for a terminal device, wherein the step of dynamically linking dynamically links the module and the main program stored in the divided storage area mounted on the file system. A software update method in a server capable of updating software of a terminal device,
Dividing the software into modules and main programs each consisting of one or more source program files;
Storing the module and the main program divided by the file unit dividing means;
Modifying the data stored in the storage means;
Compiling the main program stored in the storage means and linking in a form using a shared library;
Compiling and storing a module stored in the storage means into a shared library;
Transmitting the module and the main program to the terminal device via a communication line;
Software update method for server with   A software update program for causing a computer to execute the steps according to claims 6 to 9.

Images