JP2009009391A - Updating software self-update method and portable terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To re-execute an update process even if a failure such as power interruption occurs during a wireless update on updating software itself using only differential data. <P>SOLUTION: A nonvolatile memory has first and second updating software storage areas 201 and 202 for storing different versions of updating software. In a self-update on the updating software, the newer of the updating software stored in both storage areas writes new updating software generated according to differential data to the area where the older updating software is stored. If the self-update on the updating software fails owing to power interruption, the newer updating software re-executes the self-update process after power restoration. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a portable terminal device, and in particular, update processing software self-update for updating software itself for updating software via wireless stored in a nonvolatile memory in a portable terminal based on difference data Regarding the method.

Currently, mobile terminals such as mobile phones are widely used. In order to add such functions of the mobile terminal, improve performance, correct defects, etc., it is necessary to update software such as programs stored in the memory in the terminal. A technology called FOTA (Firmware Over The Air) is known that uses a rewritable nonvolatile memory such as a flash memory as a memory for storing software, and updates the software of the mobile terminal via radio (patent) Reference 1).
JP 2006-309516 A

  In the conventional FOTA, the parts other than the update processing software that updates the software are updated only with the difference data of the software before and after the update. However, the update of the update processing software itself (self-update) downloads all new software, It is a specification to update by overwriting. Therefore, when updating the update processing software itself, a large amount of data is downloaded via wireless, leading to an increase in communication time and packet cost.

  However, if only the difference data is updated in updating the update processing software itself, the re-update process cannot be started due to a power interruption or the like during the update process.

  The present invention has been made in such a background, and even when a problem such as a power failure occurs when the update processing software itself is updated by wireless using only difference data, the update processing is performed again. It is intended to provide a software self-updating method that can be executed and a portable terminal device employing the same.

  The update processing software self-updating method according to the present invention is an update processing software self-updating method for updating update processing software itself for updating software stored in a non-volatile memory in a mobile terminal based on difference data. In the nonvolatile memory, first and second update processing software storage areas for storing different revision numbers of update processing software are provided, and when the update processing software is self-updated, the first and second update processing software are provided. The new update processing software generated based on the difference data by the new update processing software stored in the update processing software storage area is updated to the update processing software area in which the old update processing software is stored. It is characterized by writing.

  In this way, by providing the first and second update processing software storage areas for storing different revision numbers of update processing software, the self-update has failed due to the power interruption at the time of self-update of the update processing software. However, the self-update process can be executed again by the newer update process software after the power is restored.

  When the update processing software is self-updated, prior to the update, the older update processing software of the first and second update processing software storage areas is stored in a file system that can be backed up in a nonvolatile manner. Also good. This makes it possible to perform the self-update process again even if a problem occurs in the remaining update processing software after the self-update failure.

  In addition to the first and second update processing software storage areas in the nonvolatile memory, a third update processing software area for storing a copy of the older update processing software of the different revision number is provided, When the update processing software is self-updated, the new update processing software generated based on the difference data is updated by the new update processing software stored in the first and second update processing software storage areas. The update processing software may be written in one of the two update processing software areas, and a copy of the newer update processing software before the update is written in the other.

  By performing generation management as such a three-sided redundant configuration, it is possible to update the old generation update processing software while retaining the proven old generation update processing software.

  The present invention can also be grasped as a portable terminal device having the update processing software self-updating function as described above or a computer program for executing such a function.

  According to the present invention, by managing a plurality of update processing software and assigning a revision number, the update data can be converted into differential data using the update processing software with a new revision number without affecting the current update processing software. Based on this, new update processing software can be created.

  When the latest update processing software cannot be started due to its own malfunction or flash memory failure due to damage, it is possible to reduce the possibility that the software cannot be updated by executing the update processing software of the old revision number.

  Since the update based on the difference data is performed, when the update processing software needs to be self-updated, the generation of communication time and packet costs can be minimized.

  DESCRIPTION OF EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 shows a schematic hardware configuration of a mobile terminal 10 in the present embodiment as an example of a mobile phone.

  The mobile terminal 10 includes a control unit 11, an audio processing unit 12, a microphone 13, a speaker 14, a storage unit 15, a communication unit 16, a duplexer 17, an antenna 17 a, an operation unit 18, and a display unit 19. The control unit 11 includes a mobile phone LSI equipped with a CPU (Central Processing Unit) 30 and controls processing of the mobile terminal 10 and control of each unit.

  The voice processing unit 12 performs voice processing such as a call and music reproduction under the control of the control unit 11, and performs voice input from the microphone 13 and voice output to the speaker 14.

  The storage unit 15 is a part that stores programs and data. In the present embodiment, the storage unit 15 includes a flash memory 20 that is a nonvolatile memory such as a NAND memory, and a RAM 24 such as an SDRAM (Synchronous Dynamic Random Access Memory).

  The flash memory 20 is a rewritable nonvolatile memory that stores a program executed by the control unit 11. The flash memory 20 has a boot area 21 for storing a boot program, a program area 22 for storing a program body code (program code), and a storage area 23 for storing other necessary data and programs. To do. In addition to the program, the storage area 23 can store various data such as a telephone directory, electronic mail, web content, music, and images.

  The program area 22 is expanded in the RAM 24 at the time of booting by the boot program, and software such as a program is executed on the RAM 24. More specifically, when power is supplied to the control unit 11 and the storage unit 15, the contents of the boot area of the flash memory 20 are read into a memory area (not shown) built in the control unit by the built-in logic of the control unit 11. Executed. This program incorporates a boot process defined by the present invention. By this program, an execution target program code is expanded from the flash memory 20 to the RAM 24, and the program is executed on the RAM 24.

  The communication unit 16 is a part that performs radio transmission and reception with a base station (not shown) via the antenna 17 a under the control of the control unit 11. The duplexer 17 is an antenna sharing machine. In other words, the transmission signal and the reception signal share one antenna, and are configured by a filter circuit having a function of transmitting the reception signal from the antenna to the reception unit and transmitting the transmission signal from the transmission unit to the antenna.

  The operation unit 18 includes a numeric keypad, various control keys, and the like, and has a function of inputting user instructions and information to the control unit 11.

  The display unit 19 includes a display device such as an LCD or an organic EL, for example, and has a function of displaying visible information such as text and images (still images and moving images) to the user.

  Hereinafter, the operation in the present embodiment will be described.

  As shown in FIG. 2, in FOTA, when software needs to be updated, the software provider stores data necessary for the update in a distribution server 25 on a network such as the Internet, and the mobile terminal 10 is required for the update. Download the correct data over the air.

  As shown in FIG. 3, conventionally, update of the update processing software itself (self-update) is performed by downloading the entire new update processing software 241 into the RAM 24 via wireless, and the boot program is not the update processing software 241 but the flash memory. By overwriting the area 201 storing the current update processing software (old update processing software) in the software storage area 200 before update 20, as shown in the software storage area 210 after update, a new one is created on the flash memory 20. Update processing software is stored.

  In contrast to such a conventional technique, the present invention attempts to implement the update of the update processing software itself only with the difference data between the old and new programs. For this purpose, it is necessary to execute the current update processing software, create new update processing software based on the difference data, and write it to the flash memory. Since the current update processing software is executed on the RAM, it is possible to overwrite the created new update processing software on the area where the current update processing software is stored. However, when the power of the mobile terminal is interrupted during writing to the flash memory, the update processing software in the flash memory becomes incomplete. At the same time, new update processing software on the RAM disappears. Therefore, it is impossible to restart the update process. A mobile terminal normally uses a battery as a power source. Due to factors such as a decrease in the remaining battery level or dropping of the battery pack due to a drop in the terminal, the power supply may be cut off during processing compared to a stationary device. high. On the other hand, FOTA generally has a specification that allows update processing to be resumed even if a power interruption occurs during software update.

  Therefore, as shown in FIG. 4, areas 201 and 202 for storing a plurality of update processing software are secured in the software storage area 200 before updating in the flash memory 20. That is, an area 202 that is an initial reserved area for storing new update processing software is secured separately from the area 201 for storing the current update processing software. The update processing software 241 writes a new update processing software 243 created based on the difference data 242. As a result, even when a power interruption occurs during the self-update process of the update process software and the new update process software being written to the area 202 is incomplete, the current update process software is retained in the flash memory 24. Therefore, the update process can be resumed based on this.

  With this configuration, the portable terminal always holds two update processing software that are different from the old and new, so it is necessary to always execute the newer update processing software at the time of software update execution. In order to realize this, a revision number is assigned to the update processing software. For example, as shown in FIG. 5, when the portable terminal is shipped, the update processing software is stored in only one of the two storage areas 201 and 202, and the version number “00” is written at the end of the storage area. When the update processing program is self-updated, the new update processing software is written in one of the vacant storage areas, and at the same time, the version number “01” is written at the end of the program code.

  Further, when the update processing software needs to be self-updated, as shown in FIG. 6, the current update processing software 241 creates the latest update processing software 243 from the difference data 242, and the update processing with a small revision number is performed. Overwriting the area 201 of the software (here, version number “00”), the revised version number is set to “02”. In this manner, a new revision number is assigned every time the update processing software is self-updated.

  At the time of software update execution, the boot program is always configured to execute an update processing program with a large revision number first. As a result, it is possible to always perform software updates using the latest update processing software.

  However, if the latest update processing software is damaged due to an abnormality in the flash memory or the like, the update processing program for the other storage area is started although the generation is old.

  FIG. 7 is a flowchart showing processing at the time of activation of the mobile terminal in the present embodiment. This process is executed by the control unit 11 shown in FIG.

  First, it is determined whether software update is necessary (S11). This can be done by checking whether or not the flag is set by taking a measure such as setting a predetermined flag when the difference data for update is downloaded. If it is determined that no software update is necessary, normal software is activated (S12).

  If it is determined that the software update is necessary, the revision numbers of the two update processing software in the flash memory are compared, and the larger update processing software is expanded on the RAM and activated (S13). If the update processing software can be started (S14, Yes), the process proceeds to the software update processing (S17). If the update processing software cannot be started for some reason, the update processing software with a small revision number is started (S15). If the update processing software with a small revision number can be started (S16, Yes), the process proceeds to step S17. If it cannot be started (S16, No), a predetermined process such as power-off is performed, and this process ends (S18).

  Next, a second embodiment of the present invention will be described. The hardware configuration is the same as that shown in the first embodiment, and redundant illustration and description are omitted. In the second embodiment, at the time of self-update, one-sided update processing software is copied to a file system for backup.

  First, it is assumed that the mobile terminal has a file system area having fault tolerance. Such a file system originally stores various data such as music, images, moving images, and settings in a nonvolatile manner. A fault-tolerant file system can be configured by using a part of the flash memory, even if the power is cut off, data that has been written is retained without being lost. .

  As shown in FIG. 8, it is assumed that update processing software having revision numbers 00 and 01 exists in areas 201 and 202 in the pre-update software storage area 200 of the flash memory 20 as described above. At the start of the update process, the update process software 00 with the smaller revision number to be overwritten is copied to the file system 300 and backed up. Here, the notation “update processing software 00” means update processing software having a revised version number 00. The same applies to other revised versions. At the time of self-update, the difference data 242 is applied to the current update processing software 241 on the RAM 24 in which the update processing software 01 in the area 202 of the flash memory 20 is expanded, and new update processing software 243 is generated. (2). This update processing software 243 is written back in the area 201 of the update processing software 00 in the flash memory 20 as the revision number 02 (3).

  However, as shown in FIG. 9, when writing to the flash memory 20 after creation of new update processing software (2), when a power failure occurs (3), data being written to the area 201 of the update processing software 00 Becomes incomplete. After power recovery (4), the update processing software 01 tries to write the update processing software 02 into the area 201 again. At this time, when the update processing software 01 cannot start the update processing normally due to its own malfunction (5), the update processing software 01 cannot be started even in accordance with the processing shown in FIG. 7 (6).

  Therefore, as shown in FIG. 10, the update processing software 00 is backed up in the file system 300 (1), and new update processing software is created (2) When writing to the flash memory 20 (3) (4) After the power is restored (5), the update processing software 00 previously backed up in the file system 300 is written back to one side of the areas 201 and 202 (area 201 in the figure) (6). However, even if the activation cannot be started due to a defect in the update processing software 01 (7), the update processing can be resumed using the rewritten update processing software 00 (8). At this time, the update processing software 02 that is the update destination is written in the area of the update processing software 01.

  Next, a third embodiment of the present invention will be described. The hardware configuration is the same as that shown in the first embodiment, and redundant illustration and description are omitted. In the first embodiment, the update processing software is managed on two sides, but in the third embodiment, the update processing software is managed on three sides.

  First, it is assumed that the update processing software 00, 01 exists. In order to add the update processing software 02 to the portable terminal, the update processing software 02 is overwritten by using the update processing software 01 in the update processing software 00 portion. The update processing software 01 executes the operation after the update processing from the revised version number 00 to 01 is completed. In other words, since the update from the revision number 00 to 01 is performed using the update processing software 00, the operation of the update processing software 01 is confirmed to be executed from the revision number 01 to 02. It will be when.

  As described with reference to FIG. 4, if the update process fails due to power interruption or the like during the update process software update, the update process software 00 is destroyed inside the portable terminal, and only the update process software 01 exists. If a problem with the update processing software 01 is detected in the process of updating the revised version number 01 to 02, the update processing software 00 does not exist, and the update processing may not be possible. The third embodiment is a solution for such a case.

  As shown in FIG. 11, there are two areas 201 and 202 in which the revision number 00 is stored as update processing software in the software storage area 200 before the update of the flash memory 20, and the revision number 01 is further stored. A three-sided structure having a spare area 203 of FIG. In the state of FIG. 11, the next self-update is performed by executing the update processing software 01. At this time, the update processing software 02 is overwritten on one of the areas 201 and 202 (202 in this case). As a result, as shown in the updated software storage area 210 in FIG. 12, the update processing software is rewritten so that it has two old revision numbers 01 and one new revision number 02. It is done. That is, the area 201 is overwritten with a copy of the older update processing software 01 in the area 203 (the one that actually executed the update process).

  As shown in FIG. 13, when a power interruption occurs while the new update processing software 02 is being written to the area 202 using the update processing software 01, the contents of the area 202 are in a garbage state. Furthermore, the update process may not be resumed due to a problem with the revised version number 01 in the area 203 after the power supply is restored. Even in such a case, the update processing can be resumed by the update processing software 00 in the area 201. In this case, the update processing software 00 applies the difference file from 01 to 02 to the update processing software 01 to generate the update processing software 02. As a result, the latest update processing software 02 is stored in the area 202. At this time, since the update processing software 01 has a defect, the update processing software 01 is not copied to the area 201. In the next version upgrade to the update processing software 03, the update processing software 03 is written in the area 203 of the update processing software 01 using the update processing software 02. At the same time, a copy of the update processing software 02 is written in the area 201.

  FIG. 14 shows a flowchart for realizing the processing of the third embodiment.

  First, as in the process of FIG. 7, it is determined whether or not software update is necessary (S21). If it is determined that software update is not necessary, normal software is activated (S22).

  If it is determined that the software update is necessary, the revision numbers of the two update processing software in the flash memory are compared, and the larger update processing software is expanded on the RAM and activated (S23). If this update process software can be started (S24, Yes), the process proceeds to the software update process (S27). If the update processing software cannot be started for some reason, the update processing software of the revision number N-1 is started (S25). When the update processing software of the revision number N-1 can be started (S26, Yes), the process proceeds to step S27. If it cannot be started (S26, No), a predetermined process such as power-off is performed, and this process ends (S28).

  When the writing of the update process software N + 1 is completed by the software update process (S27) (S29, Yes), a copy of the normal update process software N is created and stored in a predetermined area (S30). If the normal update processing software N does not exist, this step S30 is not executed.

  The process of FIG. 14 is substantially similar to the process of FIG. 7, but is different from FIG. 7 in that when the power interruption occurs before the completion of copy writing in step S30, there are revision numbers 02, 01, 00. Therefore, when 02 and 01 cannot be activated for some reason, it is assumed that they are activated at 00.

  The preferred embodiments of the present invention have been described above, but various modifications and changes other than those mentioned above can be made.

It is a figure which shows schematic hardware constitutions of the portable terminal in embodiment of this invention for a mobile telephone as an example. It is explanatory drawing of the update of the software by FOTA. It is explanatory drawing of the update (self-update) of the conventional update process software itself. It is explanatory drawing of a structure and operation | movement of embodiment of this invention. It is explanatory drawing following FIG. It is explanatory drawing following FIG. It is the flowchart which showed the example of a process at the time of starting of the portable terminal in embodiment of this invention. It is explanatory drawing of the structure of the 2nd Embodiment of this invention. It is explanatory drawing of the problem which the 2nd Embodiment of this invention solves. It is explanatory drawing of operation | movement of the 2nd Embodiment of this invention. It is explanatory drawing of the structure of the 3rd Embodiment of this invention. It is explanatory drawing of operation | movement of the 3rd Embodiment of this invention. It is explanatory drawing of other operation | movement of the 3rd Embodiment of this invention. It is the flowchart which showed the example of a process at the time of starting of the portable terminal in the 3rd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Portable terminal, 11 ... Control part, 15 ... Memory | storage part, 20 ... Flash memory, 21 ... Boot area, 22 ... Program area, 23 ... Storage area, 24 ... Flash memory, 25 ... Distribution server, 200 ... Software before update Storage area 201 ... area 202 ... area 203 ... area 210 ... updated software storage area 241 ... update processing software 242 ... difference data 243 ... update processing software 300 ... file system

Claims (14)

An update processing software self-updating method for updating update processing software itself for updating software stored in a non-volatile memory in a portable terminal based on difference data,
In the nonvolatile memory, a first update processing software storage area and a second update processing software storage area for storing update processing software of different revision numbers are provided,
When the update processing software is self-updated, the new update processing software generated based on the difference data by the new update processing software stored in the first and second update processing software storage areas is replaced with the old one. An update processing software self-updating method comprising writing to an update processing software area in which update processing software is stored.   2. The update processing software self-updating method according to claim 1, wherein when the update processing software is self-updated, the new update processing software is temporarily expanded on a RAM and the update processing is executed on the RAM.   2. The update processing software self-updating method according to claim 1, wherein when the self-updating fails due to power-off at the time of self-updating of the updating processing software, the self-updating processing is executed again by the newer updating processing software after power recovery.   The update processing software of the first and second update processing software storage areas is stored in a file system that can be backed up in a nonvolatile manner prior to the update when the update processing software is self-updated. The update processing software self-update method described in 1.   When the self-update fails due to power interruption during the self-update of the update processing software, when the new update processing software cannot be started when the self-update processing is attempted again by the new update processing software after the power is restored The update processing software self-updating method according to claim 1, wherein self-updating processing is executed again using update processing software backed up in the file system.   In addition to the first and second update processing software storage areas in the nonvolatile memory, a third update processing software area for storing a copy of the older update processing software of the different revision number is provided, When the update processing software is self-updated, the new update processing software generated based on the difference data is updated by the new update processing software stored in the first and second update processing software storage areas. 2. The update processing software self-updating method according to claim 1, wherein after the update processing software is written in one of the two update processing software areas, a copy of the newer update processing software before the update is written in the other. .   When the self-update fails due to power interruption during the self-update of the update processing software, when the new update processing software cannot be started when the self-update processing is attempted again by the new update processing software after the power is restored The update processing software self-updating method according to claim 6, wherein the self-updating process is executed again using the older update processing software in which the update processing software at the time of the self-updating is not overwritten. A mobile terminal device having an update processing software self-updating function for updating update processing software itself for updating software via wireless stored in a nonvolatile memory based on difference data,
A non-volatile memory having first and second update processing software storage areas for storing update processing software of different revision numbers;
When the update processing software is self-updated, the new update processing software generated based on the difference data by the new update processing software stored in the first and second update processing software storage areas is replaced with the old one. A self-updating means for writing into an update processing software area in which the update processing software is stored.   9. The portable terminal according to claim 8, wherein the self-updating unit executes the self-updating process again with the newer updating process software after the power is restored when the self-updating fails due to power-off at the time of self-updating of the updating process software. apparatus.   10. The portable terminal device according to claim 8, further comprising a RAM that temporarily expands the newer update processing software when the update processing software is self-updating, wherein the self-updating unit executes the expanded update processing software. .   9. The update processing software according to claim 8, further comprising a file system capable of backing up the older update processing software in the first and second update processing software storage areas in a non-volatile manner prior to the update. The portable terminal device described.   The self-updating means updates the newer one when the self-updating fails due to a power interruption at the time of the self-updating of the updating processing software, and when the self-updating processing is executed again by the newer updating processing software after power recovery. 9. The portable terminal device according to claim 8, wherein when the processing software cannot be activated, the self-updating process is executed again using the update processing software backed up in the file system.   In addition to the first and second update processing software storage areas in the nonvolatile memory, a third update processing software area for storing a copy of the older update processing software of the different revision number is provided, The self-updating means generates a new update generated based on the difference data by the newer update processing software stored in the first and second update processing software storage areas when the update processing software is self-updated. The processing software is written in one of the two update processing software areas in which the older update processing software is stored, and then a copy of the newer update processing software before the update is written in the other. Mobile terminal device.   The self-updating means updates the newer one when the self-updating fails due to a power interruption at the time of the self-updating of the updating processing software, and when the self-updating processing is executed again by the newer updating processing software after power recovery. 9. The portable terminal device according to claim 8, wherein when the processing software cannot be activated, the self-updating process is executed again using the older update processing software in which the update processing software at the time of self-updating is not overwritten.

Images