JP2015148859A - Information processing device and start control program, and start control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To appropriately determine whether or not data held in a nonvolatile memory is deteriorated so as to surely prevent the startup of a device in a state where the data is deteriorated.SOLUTION: An information processing device that is provided with a nonvolatile memory storing data including a control program and is started by a control program includes: a determination period setting unit that sets a determination period on the basis of the use state of the information processing device; a data determination unit that calculates an elapsed time from a previous refresh or a previous data rewrite and checks, if the elapsed time is more than the determination period, data stored in the nonvolatile memory; and a start control unit that performs, if the data is determined to be normal by the check, start processing.

Description

  The present invention relates to an information processing device, a startup control program, and a startup control method, and more particularly, to an information processing device including a nonvolatile memory, a startup control program that controls startup of the information processing device, and a startup control method.

  A program for controlling the device is generally written in a nonvolatile memory (for example, SSD (Solid State Drive) or eMMC (embedded Multi Media Card)), and the data such as the above program is nonvolatile when the power is turned on. The apparatus is read out from the memory and expanded into a volatile memory (for example, RAM (Random Access Memory)) to operate the apparatus. This non-volatile memory has a fixed period during which no data is supplied (this retention period is referred to as a data retention period), and data that has passed the data retention period is not guaranteed. Degradation (change to a value different from the value in which at least a part of information of data is written) occurs, and data cannot be read normally.

  This problem will be described in detail. A nonvolatile memory is generally composed of a MOS (Metal Oxide Semiconductor) transistor (cell) having a two-layer gate electrode, and a high electric field is generated between the floating gate and the silicon substrate. In addition, information is stored by tunneling the gate insulating film and injecting charges into the floating gate. However, since the charges injected into the floating gate gradually escape to the silicon substrate, information is lost over time. . Therefore, before the information is lost, a process (referred to as refresh) is performed to restore the charge by energizing the nonvolatile memory.

  However, refreshing cannot be performed unless the device is turned on, and data cannot be normally read when the device is turned on when the data retention period has passed with the device turned off. From such a background, a technique for controlling the start-up of the apparatus based on the data retention period has been proposed. For example, in Patent Document 1 below, data is stored in a predetermined data holding period even after the power supply is stopped. Data storage means capable of continuously holding, time measuring means capable of timing the current date and time, and start date and time storage means for storing the start date and time of the data holding period and continuously holding data even in the absence of power supply Determining means for determining whether or not the data holding period has elapsed based on the start date and time of the data holding period and the current date and time indicated by the timing means; and the data holding period has elapsed by the determining means An information processing apparatus having an activation control means for controlling the information processing apparatus main body not to be activated when it is determined that the information processing apparatus body is activated is disclosed.

  Further, regarding a technique for checking data held in a non-volatile memory, Patent Document 2 below discloses an information processing apparatus main body, and a non-volatile semiconductor memory drive accommodated in the information processing apparatus main body. And the information processing apparatus main body includes clock means for counting time information, and main control means for outputting the time information counted by the clock means to the nonvolatile semiconductor memory drive when the power is turned on. The non-volatile semiconductor memory drive includes a counter, a value of the counter, and the time information input from the information processing apparatus main body. And an information processing apparatus having memory control means for calculating and managing an elapsed time from the power-off to the current power-on. The memory control unit of the nonvolatile semiconductor memory drive, based on the elapsed time the calculated, it is described that the execution control checks for memory state of the nonvolatile semiconductor memory.

JP 2012-088780 A Special table 2010-515953 gazette

  Non-volatile memory equipped with MLC (Multiple Level Cell) that can record 2-bit data on one recording element used in SSD, eMMC, etc. has been emerging for several years. However, it is known that the data retention period is shorter than the conventional one, though the capacity is easily increased. In addition, the data retention period is easily affected by temperature, etc., and it has been reported that the data retention period may be significantly shortened under poor conditions (especially in high temperature environments) compared to the spec values calculated under ideal conditions. Yes.

  Here, in Patent Document 1, it is determined whether or not to start the information processing apparatus when the power is turned on in consideration of the data retention period. However, even if such a determination is made, the data retention period remains at the temperature. If it fluctuates due to the influence of the above, the data held in the nonvolatile memory may not be read normally, and in this case, the apparatus cannot be started up normally.

  In Patent Document 2, the storage state of the nonvolatile memory is checked based on the power-off period and the data retention period. Even in this method, if the data retention period varies due to the influence of temperature or the like, the nonvolatile memory is checked. In some cases, the storage state of the volatile memory cannot be properly checked. In this case, if the data held in the non-volatile memory is deteriorated, the apparatus cannot be started up normally.

  As described above, the data retention period is getting shorter, and further the data retention period is fluctuated due to the influence of temperature or the like. Therefore, whether or not the data held in the non-volatile memory is normal is determined appropriately only in the data retention period. It is necessary to consider the possibility that the data is deteriorated even within the data retention period. In addition, if part of the data such as the control program has deteriorated when the device is turned on, the device may run away, causing fatal damage and making it impossible to restart. It is necessary to surely avoid starting up the device in the state where

  One possible method is to check whether the data such as the device control program is normal each time the device is turned on. However, if the data is checked every time the device is turned on, the device is started. Takes a long time, and a troublesome waiting time is generated for the user.

  The present invention has been made in view of the above problems, and the main purpose of the present invention is to appropriately determine whether or not data such as a control program held in a nonvolatile memory is deteriorated, and the data is deteriorated. It is an object of the present invention to provide an information processing apparatus, a start control program, and a start control method that can surely prevent the apparatus from being started in the state of being performed.

  One aspect of the present invention includes a non-volatile memory that stores data including a control program, and in an information processing apparatus activated by the control program, a determination period that sets a determination period based on a usage status of the information processing apparatus A setting unit; and a data determination unit that calculates an elapsed time from the previous refresh or previous data rewrite, and checks the data stored in the nonvolatile memory when the elapsed time is equal to or longer than the determination period; An activation control unit that performs activation processing when the data is determined to be normal by the check.

  One aspect of the present invention is a startup control program that includes a non-volatile memory that stores data including a control program and operates on an information processing apparatus that is started up by the control program. The information processing apparatus includes: A determination period setting process for setting a determination period on the basis of the usage status, calculating an elapsed time from the previous refresh or previous data rewrite, and when the elapsed time is equal to or longer than the determination period, the non-volatile A data determination process for checking data stored in a memory, and a start control process for performing a start process when the data is determined to be normal by the check are executed.

  One aspect of the present invention is a startup control method in an information processing apparatus that includes a non-volatile memory that stores data including a control program, and that is started up by the control program. A determination period setting process for setting a period, and an elapsed time from the previous refresh or previous data rewrite are calculated, and when the elapsed time is equal to or longer than the determination period, the data stored in the nonvolatile memory is A data determination process to be checked, and a start control process to perform a start process when the data is determined to be normal by the check are executed.

  According to the information processing apparatus, the activation control program, and the activation control method of the present invention, it is appropriately determined whether or not the data such as the control program held in the nonvolatile memory is deteriorated, and the data is deteriorated. It is possible to reliably prevent the apparatus from starting up.

  The reason is that the control unit (startup control program) of the information processing apparatus sets a determination period based on the usage status of the apparatus, and the elapsed time and determination period from the previous refresh or data rewrite of the nonvolatile memory. If the elapsed time exceeds the determination period, the data stored in the non-volatile memory is checked. If the data is determined to be normal by the check, normal startup processing is performed and the data is not normal. This is because the activation process is not performed and control for notifying an error is performed.

1 is a diagram illustrating an external configuration of an information processing apparatus (image forming apparatus) according to an embodiment of the present invention. 1 is a block diagram illustrating a configuration of an information processing apparatus (image forming apparatus) according to an embodiment of the present invention. It is a block diagram which shows the structure of the control part of the information processing apparatus (image forming apparatus) which concerns on one Example of this invention. It is a flowchart figure which shows the operation | movement (processing at the time of first time use) of the information processing apparatus which concerns on one Example of this invention. It is a figure which shows the example of a setting of the default value of the determination period based on the data retention period of a non-volatile memory. It is a flowchart figure which shows operation | movement (process at the time of normal use) of the information processing apparatus which concerns on one Example of this invention. It is a flowchart figure which shows operation | movement (update process of a determination period) of the information processing apparatus which concerns on one Example of this invention.

  As shown in the background art, since a nonvolatile memory has a data retention period in which data can be held in a state where power is not supplied, the charge is restored by energizing and refreshing before the data deteriorates. Things have been done. As described above, since refresh can be performed when the apparatus is in a power-on state, it is unnecessary to regularly check the data held in the nonvolatile memory.

  However, for example, a device used in a company may be turned off during a long holiday or stored in a warehouse to wait for shipment of the device. If it has passed, the apparatus cannot be started up normally due to data deterioration. Therefore, conventionally, it is determined whether or not to start the information processing device when the power is turned on in consideration of the data retention period, and the storage state of the nonvolatile memory is checked based on the power off period and the data retention period. I do.

  By monitoring the data retention period in this way, it is possible to suppress the start-up of the device in a state where the data is deteriorated to some extent. However, the data retention period is easily affected by the environment, especially in a high temperature environment. The period is shortened. Therefore, even if the data retention period calculated under ideal conditions is monitored, it cannot be reliably determined whether or not the data is degraded. In particular, a nonvolatile memory equipped with MLC tends to have a short data retention period due to its configuration, so that even if it is within the data retention period calculated under ideal conditions, the device can be started up normally due to data degradation. May not be possible. In addition, if the data check is performed every time the apparatus is turned on, it takes time to start the apparatus and a waiting time occurs. Against this background, it is desired to propose a method for appropriately determining the deterioration of data held in the nonvolatile memory and reliably preventing the apparatus from starting up when the data is deteriorated.

  Therefore, in one embodiment of the present invention, considering the characteristic of the nonvolatile memory that the data retention period varies depending on the environment, a determination period for determining whether to perform data check is set based on the usage status of the apparatus. Even if it is within the data retention period calculated under ideal conditions, if the elapsed time from the previous refresh or the last write exceeds the above determination period, the data in the nonvolatile memory is Control to check whether it is normal.

  Specifically, it collects power on / off history information, output history information, etc., identifies the usage status of the device by analyzing user characteristics, and sets the determination period based on the usage status of this device To do. Then, the elapsed time from the time of writing data to the non-volatile memory (firmware update or initial writing) or the time of the last refresh is measured, and the elapsed time is equal to or longer than the determination period set according to the usage status of the device. If the elapsed time is equal to or longer than the determination period, the data of the nonvolatile memory is checked when the apparatus is turned on. If it is determined that the data is not normal as a result of the check, the activation process of the apparatus is not performed and the user is notified of that fact.

  As described above, by setting the determination period according to the usage status of the apparatus, it is possible to appropriately determine the deterioration of the data held in the nonvolatile memory even if the data retention period changes depending on the environment. As a result, it is possible to reliably prevent the apparatus from being activated by the deteriorated data without affecting the activation time during normal use, and to prevent damage to the apparatus.

  In order to describe the above-described embodiment of the present invention in more detail, an information processing apparatus, a startup control program, and a startup control method according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a diagram schematically illustrating an external configuration of an information processing apparatus according to the present embodiment, FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus, and FIG. 3 illustrates a configuration of a control unit of the information processing apparatus. FIG. 4, 6, and 7 are flowcharts illustrating the operation of the information processing apparatus according to the present exemplary embodiment. FIG. 5 illustrates an example of setting a default value of a determination period based on a data retention period of a nonvolatile memory. FIG.

  First, the nonvolatile memory will be described. In the NAND type memory which is currently the mainstream in the nonvolatile memory, a cell having 1 bit data as a cell having a minimum circuit configuration for storing information is an SLC (Single Level Cell), 2 bit data. The one that holds is called MLC. Although this nonvolatile memory can hold data by keeping the charge in the floating gate, the charge of the floating gate is gradually lost after a certain time has elapsed, so the charge is returned within the data retention period in which data can be held. Processing (refresh) is required.

  Here, the nonvolatile memory has been increased in capacity and miniaturized, and accordingly, the data retention period has gradually decreased. It has also been reported that the data retention period is affected by the environment (especially temperature), and that the nonvolatile memory such as SSD and eMMC has a significantly shortened data retention period depending on the high temperature state. Therefore, it is not possible to reliably determine whether or not data is deteriorated only by the data retention period calculated under ideal conditions.

  In addition, there are various types of information processing devices, and there are devices that are always in operation such as servers, while there are long-term holidays such as companies such as image forming devices such as MFP (Multi Function Peripheral). Some devices are powered off. For this reason, for example, air conditioning may be turned off during summer holidays and the environment surrounding the equipment may become hot, and the data retention period may be significantly shortened. Based on the data retention period calculated under ideal conditions, Even if the check is performed, it cannot be reliably determined whether or not the data is deteriorated.

  Therefore, in the present embodiment, in consideration of such characteristics of the nonvolatile memory, power on / off history information, output history information (for example, information on processing such as printing, copying, scanning, etc.) The user's usage trend is identified, and the usage status of the device by one or more users determined from this usage trend (for example, maximum power off). A determination period serving as a reference for determining whether or not to perform a data check is set according to a period, an accumulated power-off period, and an average number of times of power-on in a predetermined period. Then, the elapsed time from the previous refresh or the previous data write is compared with the determination period, and if the elapsed time is equal to or longer than the determination period, even if it is within the data retention period, the nonvolatile A memory data check is performed, and if the data has deteriorated, the user is notified of the fact without performing the startup process of the apparatus. Hereinafter, an information processing apparatus that enables such control will be described using an image forming apparatus as an example.

  FIG. 1 is a block diagram illustrating a configuration of the information processing apparatus according to the present exemplary embodiment. As shown in FIG. 1, the information processing apparatus according to the present embodiment is an image forming apparatus 10 such as an MFP, and optically reads a document to acquire image data, and prints an image based on the image data on a recording sheet. Or acquiring a print job from an external computer device or the like, printing an image based on the image data of the original specified by the print job on recording paper, or storing / outputting the image data.

  Specifically, as illustrated in FIG. 2, the image forming apparatus 10 includes a control unit 20 and an apparatus main body 30.

  The control unit 20 includes a CPU (Central Processing Unit) 21, a RAM 22, a nonvolatile memory 23, an RTC (Real Time Clock) 24, and the like. The CPU 21 performs overall control of the image forming apparatus 10 by reading out programs and data from the nonvolatile memory 23, developing them in the RAM 22, and executing them. The nonvolatile memory 23 stores programs and data executed by the CPU 21. The RAM 22 stores the arithmetic processing result of the CPU 21 and the like. The RTC 24 is a clock unit that measures the date and time when an event (such as power on / off or execution of a function provided in the image forming apparatus 10) for specifying the usage status of the apparatus occurs, and the current date and time. And used as a timer for measuring elapsed time.

  Here, the non-volatile memory 23 can store a large amount of data in the MLC because of its configuration. However, since the number of times of writing is larger in the SLC and more reliable, in this embodiment, the non-volatile memory 23 is non-volatile. As the memory 23, an eMMC equipped with a dual mode in which SLC and MLC operate within one memory is used. In the SLC area, there are a boot program for starting the apparatus, data used at startup, information used by the data determination unit 27 described later, a program for updating the control program, a startup control program described later, and the like. The other control programs and data are stored in the MLC area. The nonvolatile memory 23 is not limited to the above configuration, and may be configured to store important programs and data in the NOR flash memory and store other programs and data in the NAND flash memory.

  The control unit 20 also functions as an image processing unit 25, a determination period setting unit 26, a data determination unit 27, and an activation control unit 28, as shown in FIG.

  The image processing unit 25 performs image processing such as compression / decompression processing, enlargement / reduction processing, gradation correction processing, and screen processing on the image data. Further, the image processing unit 25 performs PWM (Pulse Width Modulation) conversion on the image data after the image processing, and outputs it to the engine 33.

  The determination period setting unit 26 sets a determination period (Tj) serving as a reference for the data determination unit 27 to determine data deterioration. Specifically, when the apparatus is used for the first time, the determination period (Tj) is set to a predetermined default value (for example, 30 days). In addition, during normal use after that, it collects power on / off history information, output history information, and the like, and information for identifying the usage status of the device from these information (maximum power off period, cumulative power off period, The average power-on count is calculated, and the determination period (Tj) is updated based on the calculated information according to the procedure described later.

  The data determination unit 27 acquires the current date and time from the RTC 24, acquires the previous refresh date and time or the previous data write (rewrite) date and time from the SLC area of the nonvolatile memory 23, and performs the previous refresh or previous data write. The elapsed time (Tn) from the time of (rewriting) to the present is calculated. Alternatively, when the RTC 24 is used as a timer, the elapsed time (Tn) is acquired from the RTC 24. Then, it is determined whether the elapsed time (Tn) is equal to or longer than the determination period (Tj). If the elapsed time (Tn) is equal to or longer than the determination period (Tj), before the activation control unit 28 activates the device, The validity of the data held in the MLC area of the nonvolatile memory 23 is checked. The validity of the data is also checked when the date / time information and the determination period (Tj) cannot be obtained or when the elapsed time (Tn) cannot be calculated. Specifically, whether all the data in the MLC area is read and the checksum and HASH value (fixed-length pseudo-random number representing the characteristics of the data obtained from the original data by a certain calculation procedure) are correct. Make sure. The determined result is notified to the activation control unit 28.

  If the data determination unit 27 determines that the data is correct as a result of the data check by the data determination unit 27, the activation control unit 28 performs the apparatus activation process as usual (or performs the apparatus activation process after performing the refresh process). If it is determined that the data is not correct (if the checksum or HASH value does not match), the apparatus 31 is not activated and the panel 31 is informed that the data has deteriorated (data error notification). And instructing the user to take measures such as calling a service person to request repairs. When the program and data are rewritten in the entire area of the nonvolatile memory 23, the apparatus is started.

  The determination period setting unit 26, the data determination unit 27, and the activation control unit 28 may be configured as hardware, or the control unit 20 may be configured as the determination period setting unit 26, the data determination unit 27, and the activation control unit 28. It is good also as a structure which is comprised as a starting control program made to function as, and makes the said CPU 21 run the said starting control program.

  The apparatus main body 30 includes a panel 31, a scanner 32, an engine 33, a power supply unit 34, and the like.

  The panel 31 is a touch panel in which electrodes are arranged in a grid on an LCD (Liquid Crystal Display) or an organic EL (Electro Luminescence) display device, and displays various screens for realizing functions such as copying and scanning. At the same time, it accepts various instructions for these functions.

  The scanner 32 is a portion that optically reads an image of a document placed on a document table, such as a light source that scans the document and a CCD (Charge Coupled Devices) that converts light reflected by the document into an electrical signal. It comprises an image sensor and an A / D converter that A / D converts an electrical signal.

  The engine 33 is composed of components necessary for image formation using an image forming process such as an electrophotographic method or an electrostatic recording method, and an image is recorded on recording paper based on a PWM signal sent from the image processing unit 25. Form. Specifically, the photosensitive drum charged by the charging device is irradiated with light corresponding to the image from the exposure device to form an electrostatic latent image, and the toner charged by the developing device is attached and developed. The image is primarily transferred to a transfer belt, secondarily transferred from the transfer belt to a paper medium, and a fixing device fixes the toner image onto the paper medium.

  The power supply unit 34 is connected to an external power supply and supplies power to each unit of the image forming apparatus 10. The power supply unit 34 can supply power to at least the RTC 24 unless the main power supply of the image forming apparatus 10 is turned off, and the RTC 24 can measure the elapsed time (Tn). Further, the power supply unit 34 may include a battery, and the RTC 24 can measure the elapsed time (Tn) by the electric power supplied from the battery.

  FIG. 2 is an example of the image forming apparatus 10 of the present embodiment, and the configuration thereof can be changed as appropriate. For example, a communication I / F unit may be provided so that print processing can be executed based on a print job acquired from a computer device connected to a network, or FAX transmission / reception can be performed.

  Hereinafter, the operation of the image forming apparatus 10 configured as described above will be described. The CPU 21 executes the process of each step shown in the flowcharts of FIGS. 4, 6, and 7 by developing and executing the activation control program stored in the SLC area of the nonvolatile memory 23 in the RAM 22.

[First time use]
First, the operation of the image forming apparatus 10 when used for the first time will be described with reference to the flowchart of FIG.

  When the user turns on the power for the first time after shipment from the factory, the control unit 20 (data determination unit 27) checks all data in the nonvolatile memory 23 because the usage status of the device cannot be specified. Perform (S101). For example, all the data stored in the SLC area and the MLC area are read out, and it is confirmed whether the checksum and HASH value are correct.

  If there is a data error as a result of the data check (Yes in S102), the control unit 20 (activation control unit 28) does not perform the apparatus activation process, and notifies the panel 31 of the data error as necessary. Then, rewriting of the program and data is instructed (S103). On the other hand, if there is no data error (No in S102), the activation control unit 28 performs a normal activation process (S105) after refreshing the nonvolatile memory 23 (S105), and can be used as a device. To.

  Then, the determination period setting unit 26 sets the determination period (Tj) to a default value (S106). Here, when the number of times of data writing to the nonvolatile memory 23 increases, the gate insulating film deteriorates due to charge tunneling, and the charge injected into the floating gate easily escapes to the silicon substrate. The upper limit (lifetime) of the number of times is defined in advance. Therefore, as shown in FIG. 5, the determination period setting unit 26 starts to decrease the default value when the number of times of data writing exceeds half of the lifetime, and sets the default value to be 0 when the lifetime is reached. . Here, it is assumed that the upper limit of the number of writings of eMMC is 10,000, and the number of writings remains 5000 or more, and the determination period (Tj) is set to 30 days.

[Normal use]
Next, the operation of the image forming apparatus 10 during normal use after the first use will be described with reference to the flowchart of FIG. It should be noted that the determination period (Tj) serving as a threshold for determining whether or not the data determination unit 27 performs the data check, the previous data write date / time or the previous refresh date / time (Tb), and the previous power supply are turned off. The date and time are stored in the SLC area of the nonvolatile memory 23 in advance.

  First, the control unit 20 (data determination unit 27) reads the previous data write date / time or the previous refresh date / time (Tb) from the SLC area of the nonvolatile memory 23 and obtains the current date / time from the RTC 24 when the power is turned on. Then, an elapsed time (Tn) from Tb to the current date and time is calculated (S201). Alternatively, when the RTC 24 is used as a timer, the elapsed time (Tn) is acquired from the RTC 24.

  Next, the data determination unit 27 reads the determination period (Tj) from the SLC area of the nonvolatile memory 23, and determines whether the elapsed time (Tn) is equal to or longer than the determination period (Tj) (S202). In the case of Tn <Tj, that is, when the elapsed time since the previous data write or refresh is less than the determination period, the activation control unit 28 turns off the previous power from the SLC area of the nonvolatile memory 23. The power-off period from the date to the current date is calculated, and it is determined whether the power-off period is less than a predetermined period (for example, 180 days) (S206). The activation control unit 28 performs normal activation processing when the power-off period is less than the predetermined period (S208), and performs refresh processing of the nonvolatile memory 23 when the power-off period is equal to or longer than the predetermined period. After the execution (S207), normal activation processing is performed (S208). Here, it is determined whether or not the power-off period is less than the predetermined period. However, if the elapsed time (Tn) is less than the determination period (Tj), the normal startup process is immediately performed and necessary after the startup process. Refresh may be performed according to the above.

  On the other hand, if Tn ≧ Tj, that is, if the elapsed time since the previous data write or refresh is longer than the determination period, the data determination unit 27 may be non-volatile because data may be degraded. The validity of the data in the MLC area of the memory 23 is checked (S203). For example, all the data stored in the MLC area is read, and it is confirmed whether the checksum and HASH value are correct. If the determination period (Tj), the previous data write date / time or the previous refresh date / time (Tb) cannot be read from the SLC area of the nonvolatile memory 23, the validity of the data in all areas including the SLC area is confirmed. To check. In addition, when the current date and time cannot be acquired from the RTC 24, the elapsed time (Tn) cannot be calculated (or when the RTC 24 measures the elapsed time, the elapsed time cannot be acquired from the RTC 24), and the elapsed time (Tn) is inconsistent. If it occurs, it is determined that the RTC is abnormal, and the validity of the data is checked.

  As a result of the data check, when there is no data error (No in S204), the activation control unit 28 determines that the power-off period of the nonvolatile memory 23 is less than a predetermined period (for example, 180 days) as described above. It is determined whether or not there is (S206). The activation control unit 28 performs normal activation processing when the power-off period is less than the predetermined period (S208), and performs refresh processing of the nonvolatile memory 23 when the power-off period is equal to or longer than the predetermined period. After the execution (S207), normal activation processing is performed (S208). Here, it is determined whether or not the power-off period is less than the predetermined period. However, if there is no data error, a normal startup process is performed immediately, and a refresh process is performed as necessary after the startup process. May be.

  If there is a data error such as the checksum or HASH value does not match (Yes in S204), the activation control unit 28 does not perform the apparatus activation process, and informs the panel 31 of data error notification and data as necessary. Information for instructing to rewrite is notified (S205), and a service man is called to urge the user to perform repairs. In S205, the activation control unit 28 sets the flag so that the apparatus activation process is not performed until the data rewrite (firmware update) is performed, and the data rewrite is performed. Drop the flag.

  Thereafter, the determination period setting unit 26 updates the determination period (S209). That is, at the first use, the determination period setting unit 26 sets the determination period (Tj) to a default value. However, when the power-off period is short or the power-on frequency is large, the nonvolatile memory 23 is appropriately energized. The determination period (Tj) can be extended because the possibility that the charge is lost is low. Further, when the number of power-on times is large, it is preferable to lengthen the determination period (Tj) in order to reduce the troublesomeness of the data check. Therefore, in this embodiment, as shown in the flowchart of FIG. 7, the determination period (Tj) is increased in accordance with the usage status of the apparatus.

  Specifically, first, the determination period setting unit 26 obtains device power-on / off history information, output history information, and the like from the SLC area of the nonvolatile memory 23 in order to identify the usage status of the device. Based on the information, information such as the maximum power-off period, the cumulative power-off period since the previous refresh, and the average number of power-ons per month are calculated (S301). Note that these information is reset when a refresh or firmware update is performed.

  Next, the determination period setting unit 26 compares the maximum power-off period with a predetermined period (S302). If the maximum power-off period is, for example, 15 days or longer (a period assuming that the device is stored in a warehouse or the like), the data retention period may vary greatly depending on the storage environment. 26 leaves the determination period (Tj) at the default value (S303). The determination period (Tj) is also set to the default value when the power on / off history information, the output history information, or the like cannot be acquired in S301, or when the information cannot be calculated to identify the usage status of the apparatus. Leave.

  In addition, when the maximum power-off period is, for example, 4 to 14 days (a period in which it is assumed that the device is left in a power-off state due to a company holiday, etc.), the data retention period may be increased due to air conditioning stoppage or the like. The determination period setting unit 26 compares the average number of times the power is turned on in a month with a predetermined number of times because the floating gate charge may be lost depending on the power-on interval. (S304). If the average power-on count for one month is, for example, 5 times or more, the determination period (Tj) is set to the default value + 30 days (S305), and the average power-on count for one month is, for example, 5 times. If it is less, the determination period (Tj) is set to the default value + 15 days (S306).

  In addition, when the maximum power-off period is, for example, 3 days or less (a period assuming that the apparatus is turned on almost on a daily basis), the charge of the floating gate may be lost during the power-off. Although it is low, since it is necessary to consider the variation of the data retention period according to the accumulated power-off period since the last refresh, the determination period setting unit 26 compares the accumulated power-off period with a predetermined period. (S307). If the cumulative power-off period is, for example, less than 180 days, the determination period (Tj) is set to the default value + 60 days (S308). If the cumulative power-off period is, for example, 180 days or more, the determination period (Tj) Is set to the default value +30 days (S309).

  In the above, the determination period (Tj) is set based on the maximum power-off period, the cumulative power-off period, and the average power-on number. However, instead of these information or in addition to these information, other information is set. It may be used. For example, if the device is turned on at regular intervals (for example, the power is turned on every morning) or if the number of executions of printing, copying, scanning, etc. is large, the chance of energizing the nonvolatile memory increases. Since it is considered that the possibility of charge disappearing is low, the determination period (Tj) can be set based on these information or in consideration of the information. In addition, since the temperature changes depending on the season in which the device is used and the fluctuation of the data retention period is considered to be large, the season to which the current date and time belongs is specified, and based on the season information or taking into account the season information Thus, the determination period (Tj) can be set. In addition, the temperature changes depending on the location where the device is located (latitude, indoor / outdoor, etc.), the environment in which the device is used (whether or not the air conditioner is set, whether the heating element is nearby, etc.) Since it is considered that the variation of the retention period becomes large, a GPS (Global Positioning System) sensor and a temperature sensor are provided in the image forming apparatus 10 as necessary, and information acquired from these sensors and information measured / set by the user are included. The determination period (Tj) can also be set based on this information or in consideration of these pieces of information.

  In this way, the determination period is set based on the usage status of the device specified by the maximum power-off period, cumulative power-off period, average power-on count, etc., and the elapsed time from the previous data write or refresh time is determined By checking the data of the non-volatile memory 23 when the period is longer than the period, and not performing the apparatus start-up process when there is a data error, the start-up time during normal use is hardly affected. Data deterioration can be appropriately determined, and activation of the apparatus due to deteriorated data can be reliably prevented.

  In addition, this invention is not limited to the said Example, The structure and control can be changed suitably, unless it deviates from the meaning of this invention.

  For example, in the above-described embodiment, the image forming apparatus 10 is described as an example of the information processing apparatus, but the control of the present invention can be similarly applied to any information processing apparatus including a nonvolatile memory.

  In the above embodiment, the nonvolatile memory 23 composed of the SLC area and the MLC area has been described as an example. However, the nonvolatile memory 23 is composed of a plurality of memories having different data retention periods, and is relatively reliable. If important programs and data are stored in one or more memories (that is, memories other than the memory with the lowest reliability) and the elapsed time is equal to or longer than the determination period, the relative The data check may be performed for one or a plurality of memories with low reliability (short data retention period) (that is, memories other than the memory with the highest reliability).

  The present invention can be used for an information processing apparatus including a nonvolatile memory, a start control program for controlling start of the information processing apparatus, a recording medium storing the start control program, and a start control method for the information processing apparatus.

DESCRIPTION OF SYMBOLS 10 Image forming apparatus 20 Control part 21 CPU
22 RAM
23 Nonvolatile memory 24 RTC
25 Image processing unit 26 Determination period setting unit 27 Data determination unit 28 Start control unit 30 Main body 31 Panel 32 Scanner 33 Engine 34 Power supply unit

Claims (15)

In an information processing apparatus that includes a nonvolatile memory that stores data including a control program and is activated by the control program,
A determination period setting unit configured to set a determination period based on the usage status of the information processing apparatus;
A data determination unit that calculates an elapsed time from the previous refresh or previous data rewrite, and checks the data stored in the nonvolatile memory when the elapsed time is equal to or longer than the determination period;
A startup control unit that performs startup processing when the data is determined to be normal by the check,
An information processing apparatus characterized by that. The determination period setting unit calculates information for specifying a usage status of the information processing apparatus based on use history information of the information processing apparatus, and sets the determination period based on the information.
The information processing apparatus according to claim 1. The information specifying the usage status of the information processing apparatus includes a maximum power-off period, a cumulative power-off period, an average number of power-ons within a predetermined period, a power on / off cycle, and a predetermined period of a function provided in the information processing apparatus Including one or more pieces of information selected from the environmental temperature of the information processing apparatus,
The information processing apparatus according to claim 2. The data determination unit determines whether the data stored in the nonvolatile memory is normal based on a checksum or HASH value of the data;
The information processing apparatus according to any one of claims 1 to 3. A clock unit that measures the elapsed time from the previous refresh or the previous data rewrite by the power supplied from the battery or the main power source provided in advance in the information processing apparatus,
The data determination unit acquires the elapsed time from the clock unit.
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The data determination unit is unable to acquire the previous refresh date or the previous data rewrite date, when the current date cannot be acquired, when the elapsed time cannot be calculated or acquired, or when the determination period cannot be acquired Checks the data stored in the non-volatile memory,
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The nonvolatile memory is composed of a plurality of memories having different data retention periods,
The data determination unit checks data stored in a memory having a relatively short holding period;
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The memory having a relatively long retention period is a memory equipped with SLC (Single Level Cell), and the memory having a relatively short retention period is a memory equipped with MLC (Multiple Level Cell).
The information processing apparatus according to claim 7. Usage history information of the information processing device is stored in a memory equipped with the SLC,
The determination period setting unit calculates information for specifying the usage status of the information processing device based on the use history information stored in the memory equipped with the SLC, and determines the determination period based on the information. Set,
The information processing apparatus according to claim 8. The memory having a relatively long retention period is a NOR-type memory, and the memory having a relatively short retention period is a NAND-type memory.
The information processing apparatus according to claim 7. The activation control unit refreshes the nonvolatile memory before the activation process when the data is determined to be normal by the check.
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The activation control unit, when it is determined by the check that the data is not normal, broadcasts information instructing rewriting of data stored in the nonvolatile memory,
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. A startup control program comprising a non-volatile memory for storing data including a control program and operating on an information processing device started by the control program,
In the information processing apparatus,
A determination period setting process for setting a determination period based on the usage status of the information processing apparatus;
A data determination process for calculating an elapsed time from the previous refresh or previous data rewrite, and checking the data stored in the nonvolatile memory when the elapsed time is equal to or longer than the determination period;
When the data is determined to be normal by the check, a start control process for performing a start process is executed.
An activation control program characterized by the above. The nonvolatile memory is composed of a plurality of memories having different data holding periods, and the activation control program is stored in a memory having a relatively long holding period,
In the data determination process, data stored in a memory having a relatively short holding period is checked.
The start control program according to claim 13. A startup control method in an information processing apparatus that includes a nonvolatile memory that stores data including a control program and is started by the control program,
A determination period setting process for setting a determination period based on the usage status of the information processing apparatus;
A data determination process for calculating an elapsed time from the previous refresh or previous data rewrite, and checking the data stored in the nonvolatile memory when the elapsed time is equal to or longer than the determination period;
A start control process for performing a start process when the data is determined to be normal by the check;
An activation control method characterized by the above.

Images