JP2013222396A - Information processing device, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To address such a problem that, when a failure occurs in a driver, restoration of a driver used by an essential operation application that is an application whose operation continuation is preferential is deferred and continuation of the operation of essential operation application is not prioritized.SOLUTION: A means determination unit 160 uses processing results of a driver 130 in which a failure occurs to extract the driver 130 that executes a processing for use in the processing of an essential operation application. A restoration processing management unit 140 restores the driver 130 extracted by the means determination unit 160 preferentially to programs other than the driver 130 in which the failure occurs. Therefore, the continuation of the operation of the essential operation application is prioritized.

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program that perform recovery when a failure occurs in a running program.

Conventionally, when a failure occurs in a driver program being executed by the information processing apparatus (hereinafter, the driver program is referred to as “driver”) (hereinafter, the failure is also referred to as “abnormal”), the driver in which the failure has occurred is recorded. . A technique has been proposed in which the activation of the driver is skipped at the next system activation of the information processing apparatus (for example, Patent Document 1).
In addition, when a failure of a driver that is being executed by the information processing apparatus occurs, a driver that has failed and a driver that uses the processing result of the driver are prepared in advance without stopping the operation of the information processing apparatus. In addition, a technique for recovering in a fixed order is known.
Here, driver recovery refers to a driver that has failed, a driver that uses the processing result of the driver, or a driver that has been affected by the failure of the driver, such as by restarting the driver. It is to return to a normal state. Therefore, “recovery” is also referred to as “restart”.

JP 2011-253339 A

  The information processing apparatus executes a plurality of programs such as a driver that uses the processing data of the driver in which the failure has occurred and an application program that performs processing using the processing data of those drivers (hereinafter, the application program is referred to as “application”). To do. In the conventional failure recovery method, even when there is an application for which priority is given to continuing the operation, the priority for continuing the operation of the application is not considered, and the order of restarting the drivers is determined. Therefore, there is a case where the restart of the driver used by the operation-required application that is an application having a high priority for operation continuation is postponed. Then, there is a problem that the operation of the operation-required application is interrupted until the driver used by the operation-required application is restarted.

  The main object of the present invention is to solve the above-mentioned problems. For example, the main object of the present invention is to give priority to the operation continuation of the operation-required application.

An information processing apparatus according to the present invention includes:
A program execution unit for executing a plurality of programs;
When an abnormality occurs in any one of the plurality of programs during execution of the plurality of programs by the program execution unit, a result of processing of the abnormality occurrence program in which an abnormality has occurred among the plurality of programs A program that is used to process a specific program other than the plurality of programs is extracted as a priority restart program, and the extracted priority restart program is prioritized over programs other than the abnormality occurrence program. And a program restarting unit for restarting.

  The information processing apparatus according to the present invention is restarted (recovered) with priority given to a program used by a specific program (for example, an operation essential application). Therefore, the information processing apparatus according to the present invention can prioritize operation continuation of a specific program (for example, an operation essential application).

FIG. 3 illustrates the first embodiment and illustrates an example of hardware resources of the information processing apparatus. FIG. 3 shows the first embodiment and shows a first example of the configuration of the information processing apparatus. FIG. 5 shows the first embodiment and shows a second example of the configuration of the information processing apparatus. FIG. 5 shows the first embodiment and shows a third example of the configuration of the information processing apparatus. Fig. 5 shows the first embodiment, and shows a first example of a program activation management list. FIG. 5 shows the first embodiment and shows an example of an application-program relevance list. FIG. 5 shows the first embodiment and is a flowchart showing an example of processing of the information processing apparatus. Fig. 11 shows the first embodiment, and shows a second example of a program activation management list. FIG. 9 shows the second embodiment and shows a fourth example of the configuration of the information processing apparatus. FIG. 9 shows the second embodiment and shows a fifth example of the configuration of the information processing apparatus. FIG. 9 shows the second embodiment and shows a sixth example of the configuration of the information processing apparatus. FIG. 25 is a diagram illustrating the second embodiment and is a diagram illustrating a third example of the program activation management list. FIG. 9 is a diagram illustrating the second embodiment and is a flowchart illustrating an example of processing of the information processing device.

Embodiment 1 FIG.
First, a hardware configuration example of the information processing apparatus 100 illustrated in Embodiment 1 will be described.
FIG. 1 is a diagram illustrating an example of hardware resources of the information processing apparatus 100 illustrated in the first embodiment.
The configuration in FIG. 1 is merely an example of the hardware configuration of the information processing apparatus 100. The hardware configuration of the information processing apparatus 100 is not limited to the configuration illustrated in FIG. It may be configured as follows.

In FIG. 1, the information processing apparatus 100 includes a CPU 911 (also called a central processing unit, a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, and a processor) that executes a program.
The CPU 911 is connected to, for example, a ROM (Read Only Memory) 913, a RAM (Random Access Memory) 914, a communication board 915, a display device 901, a keyboard 902, a mouse 903, and a magnetic disk device 920 via a bus 912. Control hardware devices.
Further, the CPU 911 may be connected to an FDD 904 (Flexible Disk Drive) or a compact disk device 905 (CDD). Instead of the magnetic disk device 920, a storage device such as an SSD (Solid State Drive), an optical disk device, a memory card (registered trademark) read / write device, a flash ROM, and a ROM other than the ROM 913 may be used.
The RAM 914 is an example of a volatile memory. The storage media of the ROM 913, the FDD 904, the CDD 905, and the magnetic disk device 920 are an example of a nonvolatile memory. These are examples of the storage device.
A communication board 915, a keyboard 902, a scanner device 907, a mouse 903, an FDD 904, and the like are examples of input devices.
The communication board 915, the display device 901, the printer device 906, and the like are examples of output devices.

The communication board 915 is connected to the network.
For example, the network may be a wide area network (WAN), a storage area network (SAN), or the like in addition to the LAN and the Internet.

The magnetic disk device 920 stores a kernel 921, a program group 923, and a file group 924.
The kernel 921 is also referred to as an operating system (OS).
The programs in the program group 923 are executed by the CPU 911 using the kernel 921.
For example, an application and a driver are examples of programs in the program group 923.
A program activation management list and an application-program relevance list, which will be described later, are examples of files in the file group 924.

The RAM 914 temporarily stores at least part of a kernel 921 program and application programs to be executed by the CPU 911.
The RAM 914 stores various data necessary for processing by the CPU 911.

The ROM 913 stores a BIOS (Basic Input Output System) program, and the magnetic disk device 920 stores a boot program.
When the information processing apparatus 100 is activated, the BIOS program in the ROM 913 and the boot program in the magnetic disk device 920 are executed, and the kernel 921 is activated by the BIOS program and the boot program.

  The program group 923 further stores a program for executing a function described as “˜unit” (except for “˜storage unit” in the following) in the description of the first embodiment. The program is read and executed by the CPU 911.

In the description of the first embodiment, the file group 924 includes “determination of”, “calculation of”, “comparison of”, “collation of”, “reference of”, “search of”, “Extract”, “examine”, “generate”, “set”, “register”, “select”, “input”, “receive”, “to” Information, data, signal values, variable values, and parameters that indicate the results of the processing described as “creation of”, “determination of”, “definition of”, “calculation of”, “update of”, etc. , “˜List” are stored as items.
The “˜list” is stored in a recording medium such as a disk or a memory.
Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit.
The read information, data, signal values, variable values, and parameters are extracted, searched, referenced, compared, computed, calculated, processed, edited, output, printed, displayed, controlled, determined, identified, detected, identified. Used for operations of the CPU 911 such as selection / calculation / derivation / update / creation / acquisition / notification / instruction / judgment / recovery.
Extraction / Search / Reference / Compare / Calculate / Process / Edit / Output / Print / Display / Control / Judgment / Identification / Detection / Distinction / Selection / Calculation / Derivation / Update / Create / Get / Notify / Instruct / Judge During operation of the CPU such as recovery, information, data, signal values, variable values, and parameters are temporarily stored in the main memory, registers, cache memory, buffer memory, and the like.
In addition, the arrows in the flowchart described in the first embodiment mainly indicate input / output of data and signals.
Data and signal values are recorded on a recording medium such as a memory of the RAM 914, a flexible disk of the FDD 904, a compact disk of the CDD 905, a magnetic disk of the magnetic disk device 920, other optical disks, a mini disk, and a DVD.
Data and signals are transmitted online via a bus 912, signal lines, cables, or other transmission media.

In addition, what is described as “˜unit” in the description of the first embodiment may be “˜circuit”, “˜device”, “˜device”, and “˜step”, “˜procedure”. , “To treatment” may be used.
That is, the information processing method according to the present invention can be realized by the steps, procedures, and processes shown in the flowchart described in the first embodiment.
Also, what is described as “˜unit” may be realized by firmware stored in the ROM 913.
Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware.
Firmware and software are stored as programs in a recording medium such as a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, and a DVD.
The program is read by the CPU 911 and executed by the CPU 911.
That is, the program causes the computer to function as the “˜unit” in the first embodiment. Alternatively, the computer executes the procedure and method of “˜unit” in the first embodiment.

As described above, the information processing apparatus 100 described in Embodiment 1 is an information processing apparatus including a processing device, a storage device, an input device, and an output device.
Then, as described above, the functions indicated as “˜units” are realized using these processing devices, storage devices, input devices, and output devices.

(Configuration of information processing device)
FIG. 2 is a diagram illustrating a first example of the configuration of the information processing apparatus.
FIG. 3 is a diagram illustrating a second example of the configuration of the information processing apparatus.
FIG. 4 is a diagram illustrating a third example of the configuration of the information processing apparatus.

First, the configuration of the information processing apparatus 100 will be described with reference to FIG.
As described above, the information processing apparatus 100 includes the magnetic disk device 920. The magnetic disk device 920 stores a kernel 921, an application 180, and a driver 130.
The quantities for the application 180 and the driver 130 are not limited.
In the description of the present embodiment, the driver 130 has five drivers 1 to 5 (drivers 130a to 130e), and the application 180 has two cases of application 1 (application 180a) and application 2 (application 180b). To do.

Of the two applications 180, the application 180b is assumed to be an operation-required application that is essential for the processing of the information processing apparatus 100.
That is, the operation-required application 180 and the non-required application 180 are executed in the same information processing apparatus 100.
Here, the operation-required application is a program that is required to continuously operate in the information processing apparatus 100.

Then, the program relevance notification function 191 of the application 180 stored in the magnetic disk device 920 is executed by the CPU 911 and causes the CPU 911 to function as the program relevance notification unit 190.
Although not shown, the program stored in the magnetic disk device 920 is executed by the CPU 911, and the CPU 911 executes the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program. It functions as the execution unit 200.

Here, the magnetic disk device 920 corresponds to an operation essential program information storage unit and a used program information storage unit.
The means determination unit 160 and the recovery process management unit 140 correspond to a program restart unit.

3 omits the illustration of the magnetic disk device 920 and the program relevance notification unit 190 from the configuration example of the information processing apparatus 100 shown in FIG.
FIG. 3 shows that the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 operate in the application layer. That is, the recovery process management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 may operate in the application layer.

  On the other hand, FIG. 4 shows that the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 are in the kernel 921. That is, the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 may operate in the kernel 921.

In the description of the present embodiment, the description will be given using an example of the configuration of the information processing apparatus 100 illustrated in FIG.
In this embodiment, an example in which a failure occurs in the driver 130 and the information processing apparatus 100 restores the driver 130 will be described. However, a program that the information processing apparatus 100 restores and a program that causes the failure are the drivers 130. For example, the application 180 may be used.

The CPU 911 executes the kernel 921 when the information processing apparatus 100 is activated.
Then, the program execution unit 200 activates a plurality of drivers 130 specified by the kernel 921 and executes the activated drivers 130. In addition, the program execution unit 200 activates the application 180 specified by the kernel 921 and executes the activated application 180.
The program activation management unit 170 generates a program activation management list (described later) for the driver 130 activated when the information processing apparatus 100 is activated. The generated program activation management list is stored in the magnetic disk device 920.
When the application 180 is activated, the program relevance notification unit 190 notifies the application relevance management unit 150 of a program (for example, the driver 130) used by the application 180 and whether or not the application 180 is an operation-required application.
The application relationship management unit 150 generates an application-program relationship list 503 (described later) based on the notification from the program relationship notification unit 190. The generated application-program association list 503 is stored in the magnetic disk device 920.

The means determination unit 160 determines the order in which programs are restored when a failure occurs in any of a plurality of operating programs (for example, the driver 130).
The restoration process management unit 140 restores the program (for example, the driver 130) based on the determination by the means determination unit 160.

(Description of program startup management list)
FIG. 5 is a diagram illustrating a first example of the program activation management list.
The program activation management list 500 includes a program column 501 indicating a program (for example, the driver 130) and a link column 502 indicating a program for outputting data used for processing by the program indicated in the program column 501.

Here, for example, “driver 2” is shown in the program column 501 of D51 in FIG. Then, “Driver 2” performs processing using the processing result of “Driver 4”. Therefore, the link column 502 of D51 in FIG. 5 indicates “driver 4” that outputs data used by “driver 2” for processing.
That is, the program activation management list 500 shows the execution order between the drivers 130. In addition to the driver 130, for example, an application 180 may be shown in the program column 501 and the link column 502 of the program activation management list 500.
A program (here, “driver 4”) that outputs (processes) data used by another program (here “driver 2”) is referred to as a lower-level program. A program (here, “driver 2”) that performs processing using data output (processed) from another program (here “driver 4”) is referred to as a higher-level program.

(Description of application-program relevance list)
FIG. 6 is a diagram illustrating an example of an application-program relevance list.
The application-program relationship list 503 includes an application column 504 in which the application 180 is indicated, a required column 505 in which whether or not the application 180 is an operation-required application, and a use in which a program used in the application is indicated. And a program column 506.
In the example of FIG. 6, it is indicated that “application 2” is an operation-required application.
That is, the application-program relevance list 503 defines operation-required applications that are required to operate continuously.

The application 180 uses the data processed by the driver 130 shown in the used program column 506 and performs processing.
In the example of FIG. 6, it is indicated that “application 2” uses the processing results of “driver 1” and “driver 2”. The application-program relevance list 503 may indicate that, for example, “application 2” uses the processing result of the other application 180.
That is, the application-program relevance list 503 shows programs that perform processing used for processing of operation-required applications.

(Description of processing at the time of starting the information processing apparatus)
As described above, when the information processing apparatus 100 is activated, the program activation management unit 170 generates a program activation management list (FIG. 5) for the activated program (for example, the driver 130).
The generated program activation management list is stored in the magnetic disk device 920.

Then, when the application 180 is activated, the program relevance notification unit 190 notifies the application relevancy management unit 150 of the program (for example, the driver 130) used by the application 180 and whether or not the application 180 is an operation-required application. To do.
The application relationship management unit 150 generates an application-program relationship list 503 (FIG. 6) based on the notification from the program relationship notification unit 190.
At this time, the application relation management unit 150 may store information specifying the application 180 such as a PID (Process ID) in the application-program relation list 503 in association with the application 180.
Further, the application relevance management unit 150 may be notified of information specifying the application 180 from the program relevance notification unit 190.
The generated application-program association list 503 is stored in the magnetic disk device 920.

Depending on the application 180, the program relevance notification function 191 may not be provided. Such an application 180 may be excluded from processing by the information processing apparatus 100.
In addition, the CPU 911 that executes the kernel 921 may notify the application relevance management unit 150 of an application 180 that does not include the program relevance notification function 191 as an application that is not necessarily required to operate. Then, based on the notification from the CPU 911, the application relevance management unit 150 may generate the application-program relevance list 503, assuming that the application 180 that does not include the program relevance notification function 191 is not an operation essential application.

(Description of processing of information processing apparatus when failure occurs in driver 130)
FIG. 7 is a flowchart illustrating an example of processing of the information processing apparatus.
When a failure occurs in any of the programs (for example, the driver 130) during execution of the plurality of drivers 130 by the CPU 911, the means determination unit 160 identifies the program in which the failure has occurred. A program in which a failure has occurred is also referred to as an abnormality occurrence program. Here, for example, the means determination unit 160 receives information specifying the program in which the failure has occurred from, for example, the CPU 911 that is executing the kernel 921.
Here, the description will be made assuming that a failure has occurred in the driver 130d “driver 4” (FIG. 2). The program activation management list 500 uses the example shown in FIG. 5, and the application-program relevance list 503 uses the example shown in FIG.

The means determination unit 160 refers to the application-program relevance list 503 (FIG. 6) and determines whether there is an operation-required application (S200 in FIG. 7).
Here, since the application 180b “application 2” is an operation-required application (“YES” in S200), the means determination unit 160 determines whether the operation-required application is operating based on information such as PID. (S201 in FIG. 7). Here, it is assumed that the operation-required application is operating (“YES” in S201).

  In addition, when the application 180 ends, the program relevance notification unit 190 may notify the application relevance management unit 150 that the application 180 has ended. Then, the application relationship management unit 150 may delete information indicating the application 180 notified of the end from the application-program relationship list 503. Then, the means determination unit 160 may determine whether or not the application 180 is operating by referring to the application-program relevance list 503.

  When there is no operation-required application (“NO” in S200) or when the operation-required application is stopped (“NO” in S201), the recovery processing management unit 140 is stored in the magnetic disk device 920 in advance. The program that needs to be restored is restored according to the restoration order (S206 in FIG. 7). Here, restoring a program in accordance with a preset restoration order is referred to as normal restoration.

Next, the means determination unit 160 refers to the program activation management list 500 (FIG. 5), and identifies the upper program of the driver 130d “driver 4” in which the failure has occurred (S202 in FIG. 7).
That is, the means determination unit 160 identifies (extracts) a program that uses the processing result of the driver 130d “driver 4” in which the failure has occurred.
Here, the means determination unit 160 identifies the driver 130b “driver 2” and the driver 130c “driver 3”.

Further, the means determination unit 160 refers to the application-program relevance list 503 (FIG. 6) and identifies a program used for the application 180b “application 2” that is an operation-required application (S203 in FIG. 7).
That is, the means determination unit 160 specifies (extracts) a program in which processing used for processing of an operation-required application is performed.
Here, the means determination unit 160 identifies the driver 130a “driver 1” and the driver 130b “driver 2”.

  Alternatively, the means determination unit 160 determines whether or not any of the programs (“driver 2” and “driver 3”) specified in the process of S202 of FIG. 7 is used for the operation-required application (“application 2”). The determination is made with reference to the application-program association list 503.

  That is, the means determination unit 160 determines whether or not the faulty driver 130d “driver 4” and the program (driver 130) specified in the process of S202 of FIG. 7 affect the operation-required application (FIG. 7). S204).

Here, “driver 2” among the programs (“driver 2” and “driver 3”) identified in the process of S202 of FIG. 7 is used as an operation-required application (“application 2”).
That is, the upper program “driver 2” of the failed driver 130d “driver 4” is used for the operation-required application, and the operation-required application is affected (“YES” in S204). Therefore, the means determination unit 160 determines that the recovery processing management unit 140 preferentially recovers the program (driver 130) used for the operation-required application (S205 in FIG. 7). On the other hand, when the means determination unit 160 determines that there is no influence on the operation-required application (“NO” in S204), the means determination unit 160 causes the recovery processing management unit 140 to perform normal recovery.

  In other words, the means determination unit 160 uses the result of the processing of the driver 130d “Driver 4” in which the failure has occurred to extract a program in which processing used for processing of the operation-required application is performed.

Here, the recovery processing management unit 140 performs recovery in the order of the driver 130d “driver 4”, the driver 130b “driver 2”, and the driver 130c “driver 3”.
That is, the recovery processing management unit 140 recovers the driver 130d “driver 4” in which the failure first occurs. Next, the recovery processing management unit 140 recovers the driver 130b “driver 2” used for the operation-required application among the programs higher than the driver 130 in which the failure has occurred. Finally, the recovery processing management unit 140 recovers the driver 130c “driver 3” that is unrelated to the operation-required application among the programs higher than the driver 130 in which the failure has occurred.

That is, the recovery processing management unit 140 recovers the program extracted by the means determination unit 160 with priority over programs other than the driver 130d “driver 4” in which the failure has occurred.
Then, the recovery process management unit 140 uses the result of the process of the driver 130d “Driver 4” in which the failure has occurred, but has priority over the program “Driver 3” that is not used for the process of the operation-required application. Then restore “Driver 2”.
Here, a program that is restored (restarted) with priority is referred to as a priority restart program.

  In the above description, the processing used for processing of the operation-required application “application 2” using the result of the processing of the driver 130d “driver 4” in which the failure has occurred, such as “driver 4 → driver 2 → application 2”. In the above example, only one program (only “driver 2”) is executed. That is, the example in which the means determination unit 160 extracts one program (driver 130) as the priority restart program has been described.

Here, a case where the means determination unit 160 extracts two or more priority restart programs will be described.
FIG. 8 is a diagram illustrating a second example of the program activation management list.
The example of FIG. 8 is used for the program activation management list 500 and the example of FIG. 6 is used for the application-program relevance list 503, and the description will be made assuming that a failure occurs in the “driver 5”.

In S202 of FIG. 7, the means determination unit 160 refers to the program activation management list 500 and executes the driver 130 in the order of “driver 5 → driver 4 → driver 3” or “driver 5 → driver 4 → driver 2”. To identify. Then, the means determination unit 160 identifies “driver 4”, “driver 3”, and “driver 2” as higher-level programs of “driver 5”.
Note that the processing of S200, S201, and S203 in FIG. 7 is the same as described above.

Then, the means determination unit 160 determines whether or not the “driver 5” in which the failure has occurred and the program specified in the process of S202 of FIG. 7 affect the operation-required application (S204 of FIG. 7).
Here, the means determining unit 160 uses “driver 2” as the use program of the operation-required application “application 2”, and the means determining unit 160 operates “driver 5”, “driver 4”, and “driver 2”. It is determined that the essential application is affected (“YES” in S204).

That is, the means determination unit 160 extracts “driver 4” and “driver 2” as the priority restart program.
Then, the recovery processing management unit 140 recovers “driver 4” based on the order shown in the program activation management list 500 after “driver 5” in which the failure has occurred. Then, the recovery processing management unit 140 recovers “Driver 2” after “Driver 4”.

(Effect of Embodiment 1)
In the normal recovery, when a failure occurs in the driver 130d “driver 4”, the recovery is performed in a preset recovery order, for example, “driver 4, driver 3, driver 2”. In this case, recovery of the “driver 2” used for the operation-required application is delayed, and recovery of the operation-required application is also delayed.
Further, in the normal recovery, when a failure occurs in the driver 130d “driver 4”, for example, after “driver 4” is recovered, “driver 3” and “driver 2” may be recovered simultaneously. In this case, the resources of the CPU 911 are dispersed by simultaneously restoring “Driver 3” and “Driver 2”, and as a result, restoration of “Driver 2” is delayed.

On the other hand, since the information processing apparatus 100 according to the first embodiment gives priority to the recovery of the program (driver 130) used for the operation-required application, the operation-required application can be recovered early.
Further, the information processing apparatus 100 according to the first embodiment does not need to set the restoration order of the program (driver 130) in advance.
Note that the program extracted by the information processing apparatus 100 as the priority restart program is not limited to the driver 130. For example, even if the program extracted as the priority restart program is the application 180, the same effect can be obtained. Further, the present invention is not limited to the case where a failure occurs in the driver 130. For example, the same effect can be obtained even when a failure occurs in the application 180.

Embodiment 2. FIG.
(Configuration of information processing device)
In the second embodiment, when the OS (kernel 921) switching time is shorter than the recovery time of the driver 130, an example in which the operation of the operation-required application is continued by switching the OS (kernel 921) will be described.
Note that parts that are not particularly described in the description of the second embodiment are the same as those in the first embodiment, and a description thereof will be omitted.

FIG. 9 is a diagram illustrating a fourth example of the configuration of the information processing device.
FIG. 10 is a diagram illustrating a fifth example of the configuration of the information processing device.
FIG. 11 is a diagram illustrating a sixth example of the configuration of the information processing device.
Compared to the first embodiment, a VMM 320, a running system 321 and a cold standby image unit 322 are added. Other components of the information processing apparatus 100 are the same as those in the first embodiment.

First, the configuration of the information processing apparatus 100 will be described with reference to FIG.
The running system 321 includes a program being executed by the CPU 911 and each unit (the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, and the program activation management unit 170) that the CPU 911 is functioning as “to part”. , A program relevance notification unit 190).
The VMM 320 is a program that causes the CPU 911 to execute a plurality of systems (a plurality of kernels 921) in parallel.
The VMM 320 is executed by the CPU 911, and causes the CPU 911 to function as a cold standby image unit 322 that performs processing equivalent to that of the active system 321.
Although illustration is omitted, the cold standby image unit 322 includes a driver 130 and an application 180 included in the running system 321. The cold standby image unit 322 includes various units such as the program execution unit 200 included in the running system 321. The program execution unit 200 included in the cold standby image unit 322 executes the driver 130 and the application 180 instead of the program execution unit 200 included in the running system 321. That is, the program execution unit 200 included in the cold standby image unit 322 corresponds to a program substitution execution unit. The cold standby image unit 322 including the program execution unit 200 corresponding to the program substitution execution unit also corresponds to the program substitution execution unit.
The cold standby image unit 322 stands by in a cold standby state until an instruction is given to a predetermined program.

FIG. 10 omits the illustration of the magnetic disk device 920 and the program relevance notification unit 190 from the configuration example of the information processing apparatus 100 shown in FIG. 9 and adds the illustration of the CPU 911.
FIG. 10 shows that the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 operate in the application layer. That is, the recovery process management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 may operate in the application layer.

  On the other hand, FIG. 11 shows that the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 are in the kernel 921. That is, the recovery processing management unit 140, the application relevance management unit 150, the means determination unit 160, the program activation management unit 170, and the program execution unit 200 may operate in the kernel 921.

  In the description of the present embodiment, the description will be given using the example of the configuration of the information processing apparatus 100 illustrated in FIG.

(Description of program startup management list)
FIG. 12 is a diagram illustrating a third example of the program activation management list.
The program start management list 500 of the second embodiment has a start time column 508 added as compared to the first embodiment.
The startup time column 508 shows the time required for the program to recover.

In the program column 501, the contents of “OS switching” are added.
“OS switching” indicates that the system is switched from the running system 321 to the cold standby image unit 322. The activation time column 508 of “OS switching” shows the time required for the system to switch and the necessary driver 130 to be activated.

(Description of processing at the time of starting the information processing apparatus)
The CPU 911 executes the VMM 320 when the information processing apparatus 100 is activated. Then, the CPU 911 executes the kernel 921 specified by the VMM 320. Further, the program execution unit 200 executes the driver 130 and the application 180 specified by the kernel 921.
As in the first embodiment, the program activation management unit 170 generates a program activation management list (FIG. 12) for the activated driver 130. At this time, the program start management unit 170 inputs the time required for starting each program in the start time column 508.

In the cold standby image unit 322, the program activation management unit 170 inputs a predetermined time in the activation time column 508 of “OS switching”.
Here, the time shown in the activation time column 508 of “OS switching” indicates that the cold standby image unit 322 uses a plurality of programs that are the same as a plurality of programs (for example, the driver 130) executed by the activated system 321. This is the time required to start execution in the execution start procedure. This time may be preset in the program activation management list 500, for example.

(Description of processing of information processing apparatus when failure occurs in driver 130)
FIG. 13 is a flowchart illustrating an example of processing of the information processing apparatus.
Also in the second embodiment, the description will be made assuming that a failure has occurred in the driver 130d “driver 4” (FIG. 9). The program activation management list 500 uses the example shown in FIG. 12, and the application-program relevance list 503 uses the example shown in FIG.
In the second embodiment, an example in which a failure occurs in the driver 130 and the information processing apparatus 100 restores the driver 130 as in the first embodiment will be described. The generated program is not limited to the driver 130, and may be the application 180, for example.

The processes in S500 to S504 and S506 in FIG. 13 are the same as the processes in S200 to S204 and S206 in FIG.
Here, as in the first embodiment, means determination unit 160 extracts “driver 2” as the priority restart program.

The means determination unit 160 calculates a restart time which is a time required for the recovery of the extracted priority restart program “Driver 2” and “Driver 4” in which a failure has occurred. In the example of FIG. 12, the means determination unit 160 calculates “5 ms + 5 ms = 10 ms”.
Then, the means determination unit 160 compares the restart time with the time (OS switching time) indicated in the “OS switching” startup time column 508 shown in the program startup management list 500 (S507 in FIG. 13).
When the restart time is shorter than the OS switching time (“YES” in S507), the recovery processing management unit 140 recovers the priority restart program as in the first embodiment (S505 in FIG. 13).
In the example of FIG. 12, since the restart time (10 ms) is shorter than the OS switching time (20 ms), the recovery processing management unit 140 recovers in the order of “driver 4”, “driver 2”, and “driver 3”. .

  On the other hand, when the restart time is longer than the OS switching time (“NO” in S507), the recovery processing management unit 140 does not recover the priority restart program. Instead, the cold standby image unit 322 releases (hots) the cold standby state, and starts executing a plurality of programs (drivers 130) executed in the activated system 321 (S508 in FIG. 13). Then, the cold standby image unit 322 also executes the application 180 that has been executed in the running system 321 in the same manner.

(Effect of Embodiment 2)
The information processing apparatus 100 according to the second embodiment selects a method (recovery of a priority restart program or OS switching) that enables an operation-required application to be recovered earlier. Therefore, in addition to the effects of the first embodiment, the information processing apparatus 100 according to the second embodiment can restore the operation essential application earlier.
The program extracted as the priority restart program by the information processing apparatus 100 according to the second embodiment is not limited to the driver 130. For example, even if the program extracted as the priority restart program is the application 180, the same effect is obtained. Is obtained. Further, the present invention is not limited to the case where a failure occurs in the driver 130. For example, the same effect can be obtained even when a failure occurs in the application 180.

  DESCRIPTION OF SYMBOLS 100 Information processing apparatus, 130 Driver, 140 Recovery process management part, 150 Application relevance management part, 160 Means determination part, 170 Program start management part, 180 Application, 190 Program relevance notification part, 191 Program relevance notification function, 200 Program execution unit, 320 VMM, 321 active system, 322 cold standby image unit, 500 program startup management list, 501 program column, 502 link column, 503 application-program relevance list, 504 application column, 505 required column, 506 use Program column, 508 Startup time column, 900 network, 901 display device, 902 keyboard, 903 mouse, 904 FDD, 905 Compact disk device, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 kernel, 923 program group, 924 file group.

Claims (7)

A program execution unit for executing a plurality of programs;
When an abnormality occurs in any one of the plurality of programs during execution of the plurality of programs by the program execution unit, a result of processing of the abnormality occurrence program in which an abnormality has occurred among the plurality of programs A program that is used to process a specific program other than the plurality of programs is extracted as a priority restart program, and the extracted priority restart program is prioritized over programs other than the abnormality occurrence program. An information processing apparatus comprising: a program restarting unit that restarts the program. The program restarting unit
The priority restart program is re-executed in preference to a program that uses a result of processing of an abnormal program in which an abnormality has occurred among the plurality of programs but does not perform processing used for processing of the specific program. The information processing apparatus according to claim 1, wherein the information processing apparatus is activated. The information processing apparatus further includes:
An operation-required program information storage unit that stores operation-required program information defined as the specific program is an operation-required program that is required to operate continuously,
The program restarting unit
Of the plurality of programs, a program that performs processing used for processing of the operation-required program by using a result of processing of the abnormality occurrence program in which an abnormality has occurred is extracted as the priority restart program. The information processing apparatus according to claim 1 or 2. The information processing apparatus further includes:
A used program information storage unit for storing used program information in which each program used for processing of the specific program is indicated as a used program and the execution order between the used programs is indicated. Prepared,
The program restarting unit
When two or more used programs are extracted as a priority restart program, each of the used programs extracted as a priority restart program is restarted in the order shown in the used program information. The information processing apparatus according to claim 1. The information processing apparatus further includes:
A program alternative execution unit capable of executing the plurality of programs instead of the program execution unit;
The program restarting unit
Restart time required for restarting the abnormality occurrence program and the priority restart program, and program replacement necessary for the program replacement execution unit to start executing the plurality of programs in a predetermined execution start procedure When the restart time is less than the program alternative execution start time, the priority restart program is restarted if the restart time is less than the program alternative execution start time. The information processing apparatus according to claim 1, wherein the program substitution execution unit starts execution of the plurality of programs. A program execution step in which a computer executes a plurality of programs;
When an abnormality occurs in any of the plurality of programs during execution of the plurality of programs in the program execution step, the computer generates an abnormality occurrence program in which an abnormality has occurred among the plurality of programs. A program that performs processing used for processing of a specific program other than the plurality of programs is extracted as a priority restart program using the result of the processing, and the extracted priority restart program other than the abnormality occurrence program is extracted. An information processing method comprising: a program restarting step for restarting in preference to a program. A program execution step for executing a plurality of programs;
When an abnormality occurs in any one of the plurality of programs during execution of the plurality of programs in the program execution step, a result of processing of the abnormality occurrence program in which the abnormality has occurred among the plurality of programs A program that is used to process a specific program other than the plurality of programs is extracted as a priority restart program, and the extracted priority restart program is prioritized over programs other than the abnormality occurrence program. A program for causing a computer to execute a program restarting step for restarting the computer.

Images