JP2020135555A - Processing execution method - Google Patents

Abstract

To provide a processing execution method capable of executing a series of privileged processing that is the processing related to the core of the OS without affecting the memory area of the original OS.SOLUTION: The processing execution method is executed by an information processing device 10 that has a first OS part 11 where a first OS works and a second OS part 12 where a second OS works. When the second OS part issues a privileged process that requires privilege to execute, the configuration of the second OS part is copied on a redundant part 13 where writing is restricted onto a device on which input/output is possible, which is different from the first OS part and the second OS part, and the redundant part executes the privileged processing.SELECTED DRAWING: Figure 1

Description

The present invention relates to a process execution method, a process execution device, and a program.

A plurality of OSs (Operating Systems) may be mounted on one information processing device.

As an example of such an information processing device, there is, for example, Patent Document 1. In Patent Document 1, the processor is logically divided into a processor for a first operating system and a processor for a second operating system, and the memory is a memory for the first operating system and a second operating system. A computer that is logically divided into memory for the system is described.

Japanese Unexamined Patent Publication No. 2001-290665

In a computer as described in Patent Document 1, a program to which a privilege level is given may be executed for processing related to the core of the OS. When executing such a program, if there is a problem in the program, the OS itself may not be able to continue.

For such problems, take measures such as reducing the core processing of the OS and executing the processing separately as much as possible, preparing multiple authority levels, and recovering by recovery processing when an exception occurs. be able to. However, in the case of each of the above methods, it is necessary to change the architect of the OS, which requires a lot of labor in designing, some modifications may affect the operation of existing users, and recovery may not be possible. Each had its own problems.

As described above, there still remains the problem that it is difficult to execute privileged processing, which is processing related to the core of the OS, without affecting the memory area of the original OS.

Therefore, an object of the present invention is a processing execution method, a processing execution device, which solves the problem that it is difficult to execute privileged processing, which is processing related to the core of the OS, without affecting the memory area of the original OS. To provide a program.

The processing execution method, which is one embodiment of the present invention, in order to achieve such an object
It is a processing execution method performed by an information processing apparatus having a first OS part in which the first OS functions and a second OS part in which the second OS functions.
When the second OS part issues a privileged process that requires privilege for execution, the second OS part is in a redundant part different from the first OS part and the second OS part in which writing to an I / O-capable device is restricted. The configuration of is copied, and the redundant part executes the privileged processing.

Further, the processing execution device according to another embodiment of the present invention is
A processing execution device having a first OS section in which a first OS functions and a second OS section in which a second OS functions.
In a redundant section different from the first OS section and the second OS section, writing to an I / O-capable device is restricted according to a privileged process issued by the second OS section that requires a privilege to execute. The configuration of the second OS unit is copied, and the redundant unit has a copy execution unit that executes the privileged processing.

In addition, the program which is another form of the present invention
An information processing device having a first OS section in which the first OS functions and a second OS section in which the second OS functions.
In a redundant part different from the first OS part and the second OS part, the writing to the device capable of I / O is restricted according to the privileged processing issued by the second OS part that requires privilege for execution. This is a program for copying the configuration of the second OS unit and realizing a copy execution unit in which the redundant unit executes the privileged processing.

The present invention solves the problem that it is difficult to execute privileged processing, which is processing related to the core of the OS, without affecting the memory area of the original OS by being configured as described above. It becomes possible to provide a method, a processing execution device, and a program.

It is a block diagram which shows an example of the structure of the information processing apparatus described in 1st Embodiment of this invention. It is a block diagram which shows an example of the logical structure of the information processing apparatus described in 1st Embodiment of this invention. It is a figure which shows an example of the processing flow in the block diagram of an information processing apparatus. It is a figure which shows an example of the end processing. It is a figure which shows an example of the processing flow in the case of an asynchronous instruction. It is a flowchart which shows an example of the operation of the information processing apparatus described in 1st Embodiment of this invention. It is a flowchart which shows an example of the operation of the information processing apparatus described in 1st Embodiment of this invention. It is a flowchart which shows an example of the operation of the information processing apparatus described in 1st Embodiment of this invention. It is a block diagram which shows an example of the structure of the processing execution apparatus in the 2nd Embodiment of this invention.

[First Embodiment]
The first embodiment of the present invention will be described with reference to FIGS. 1 to 8. FIG. 1 is a block diagram showing an example of the configuration of the information processing device 10. FIG. 2 is a block diagram showing an example of the logical configuration of the information processing device 10. FIG. 3 is a diagram showing an example of a processing flow in the configuration diagram of the information processing apparatus 10. FIG. 4 is a diagram showing an example of termination processing. FIG. 5 is a diagram showing an example of a processing flow in the case of an asynchronous instruction. 6 to 8 are flowcharts showing an example of the operation of the information processing apparatus 10.

In the first embodiment of the present invention, there is a first OS unit 11 in which the first OS (Operating System) 710 functions, and a second OS unit 12 in which the second OS 720 functions, and a device such as a disk or communication is allocated. The information processing device 10 (processing execution device) having the redundant unit 13 that is not provided will be described. As will be described later, when the information processing device 10 in the present embodiment issues a privileged process in which the second OS unit 12 is a process related to the core of the OS and requires a privilege to execute, the configuration of the second OS unit 12 is made redundant. Copy to 130. Then, by copying the configuration of the second OS unit 12, the redundant unit 130 causes the generated second OS'to execute the privilege processing. By executing the privileged processing on the second OS'generated in the redundant unit 130 in this way, the information processing apparatus 10 executes the privileged processing without affecting the operation of the original OS.

The information processing device 10 is an information processing device on which two OSs, the first OS 710 and the second OS 720, operate. FIG. 1 shows an example of the configuration of the information processing device 10. Referring to FIG. 1, the information processing apparatus 10 is a storage device that stores a processor 20, a memory 30, a second OS unit shared memory 41, a redundant unit shared memory 42, and a firmware that first operates at system startup. The FW 51 and the NVRAM (Non-Volatile Random Access Memory) 52, which is a non-volatile memory, are provided. Further, a keyboard 53, a display 54, a disk 55, an external input / output device 56, and the like are connected to the information processing device 10 via a system bus 60.

As shown in FIG. 1, the processor 20 is logically divided into a first processor 21, a second processor 22, and a redundant processor 23. Similarly, the memory 30 is logically divided into a first OS memory 31, a second OS memory 32, and a redundant OS memory 33.

As described above, the information processing device 10 includes the first OS unit 11 including the first processor 21 and the first OS memory 31, and the second OS including the second processor 22, the second OS memory 32, and the shared memory 41 for the second OS unit. The unit 12 is logically divided into a redundant unit 13 including a redundant processor 23, a redundant OS memory 33, and a shared memory 42 for the redundant unit. That is, the information processing device 10 has a first OS unit 11 and a second OS unit 12, and also has a redundant unit 13 having a configuration different from that of the first OS unit 11 and the second OS unit 12. Further, the keyboard 53, the display 54, and the disk 55 are logically divided for the first OS, and the external input / output device 56 is logically divided for the second OS.

A known means for logically dividing the information processing apparatus 10 may be used. For example, the information processing apparatus 10 logically divides the configuration of the information processing apparatus 10 into the first OS unit 11, the second OS unit 12, and the redundant unit 13 by using the method described in Japanese Patent Application Laid-Open No. 2001-290665. It can be divided.

FIG. 2 is an example of the logical configuration of the information processing apparatus 10. Referring to FIG. 2, the information processing apparatus 10 has a first OS 710, a second OS 720, and a second OS emulator 730.

Each function of the first OS 710 and the first OS 710 is realized by, for example, executing a program stored in the storage device by the first processor 21. Further, each function of the second OS 720 and the second OS 720 and each function of the second OS emulator 73 and the second OS emulator 73 are realized by, for example, executing the program stored in the storage device by the second processor 22. Will be done.

When the program issues a privileged process, the second OS720 starts a process for causing the redundant unit 13 to execute the privileged process. In addition, the second OS 720 receives the result of the privileged processing executed by utilizing the redundant unit 13. Further, in the redundant unit 13, the copied second OS (second OS') executes privileged processing.

With reference to FIG. 2, the second OS 720 has, for example, a kernel 721, a scheduler address notification unit 722, and an exception handling address notification unit 723. Further, the kernel 721 has a bypass processing request unit 7211 and a bypass processing result acquisition unit 7212.

The second OS emulator 730 suspends (temporarily stops) the second OS 720 in response to the instruction issued by the bypass processing request unit 7211, or causes the instruction issued by the bypass processing request unit 7211 to be shared memory for the second OS unit. Write in 41. In addition, the copied second OS emulator (second OS'emulator) in the redundant section 13 releases the suspend of the second OS 720 and stores the result of the privileged processing executed by the second OS' in the redundant section shared memory 42. To do.

Referring to FIG. 2, the second OS emulator 730 has, for example, an execution unit 731 and an end processing unit 732.

In response to an interrupt, the first OS 710 copies the information stored in the registers of the second processor 22 to the redundant processor 23, and copies the information stored in the second OS memory 32 to the redundant OS memory 33. Further, at the time of copying, the first OS 710 overwrites the memory image of the end processing by using the information notified from the scheduler address notification unit 722 and the exception processing address notification unit 723. Further, the first OS 710 reads the result of the privilege processing stored in the redundant unit shared memory 42 after the privilege processing is executed by the redundant unit 13, and stores the read privilege processing result in the second OS unit shared memory 41. To do.

Referring to FIG. 2, the first OS 710 has, for example, a copy execution unit 711 (copy execution unit) for privilege processing.

For example, the information processing apparatus 10 has a first OS 710, a second OS 720, and an emulator 730 for the second OS as described above.

FIG. 3 shows an example of processing when the redundant unit 13 executes privileged processing. As will be described later, the content of the processing to be executed by the redundant unit 13 changes according to the content of the privileged processing. That is, whether the second OS unit 12 is suspended for exclusive processing or the second OS unit 12 is not suspended for processing is changed. Hereinafter, each configuration described with reference to FIG. 2 will be described in more detail with reference to FIG.

The program of the second OS 720 issues privileged processing, which is processing related to the core of the OS ((1) in FIG. 3). Then, the bypass processing request unit 7211 accepts the issued privilege processing. Then, the bypass processing request unit 7211 issues an execution instruction according to the content of the received privilege processing ((2) in FIG. 3). For example, the processing of the bypass processing requesting unit 7211 starts the processing of executing the privileged processing in the redundant unit 13. Further, at this time, the bypass processing request unit 7211 determines whether or not it is necessary to exclusively execute the privilege processing based on the contents of the received privilege processing.

When it is determined from the contents of the privileged processing that the privileged processing needs to be executed exclusively, such as when the result of the privileged processing affects other processing, the bypass processing request unit 7211 issues a "execute in redundant area" instruction. Issue ((3) in Fig. 3). As a result, the process of causing the redundant unit 13 to execute the privileged process while suspending the second OS unit 12 starts. Further, when the bypass processing request unit 7211 makes an execution determination and issues an instruction, the scheduler address notification unit 722 notifies the first OS 710 of information indicating the common processing area address after processing used by the scheduler or the like. Further, the exception handling address notification unit 723 notifies the first OS 710 of information indicating the exception handling address. When it is determined from the contents of the privileged processing that it is not necessary to exclusively execute the privileged processing, the bypass processing request unit 7211 issues an "execute in redundant area (asynchronous)" instruction. As a result, the process of causing the redundant unit 13 to execute the privileged process without suspending the second OS unit 12 is started. The details of the process when issuing the "execute in redundant area (asynchronous)" instruction will be described later.

The execution unit 731 of the emulator 730 for the second OS suspends the second OS 720 in response to the "execute in redundant area" command ((4) in FIG. 3). Then, the execution unit 731 stores the information of the "execute in redundant area" instruction issued by the bypass processing request unit 7211 in the shared memory 41 for the second OS unit ((5) in FIG. 3). After that, the second OS 720 (or the emulator 730 for the second OS) interrupts the first OS 710 ((6) in FIG. 3).

The privilege processing copy execution unit 711 of the first OS 710 accepts interrupts. Then, the privilege processing copy execution unit 711 refers to the shared memory 41 for the second OS unit and receives the stored instruction information ((7) in FIG. 3).

The copy execution unit 711 for privilege processing copies the information stored in the register of the second processor 22 to the redundant processor 23 according to the received information, and copies the information stored in the second OS memory 32 to the redundant OS. Copy to memory 33 ((8) in FIG. 3). Further, at the time of copying, the first OS 710 overwrites the memory image of the end processing by using the address notified from the scheduler address notification unit 722 and the exception processing address notification unit 723.

FIG. 4 shows an example of overwriting the memory image in the termination process. As shown in FIG. 4, the privilege processing copy execution unit 711 overwrites the memory image of the termination processing on the address notified from the scheduler address notification unit 722 and the exception processing address notification unit 723. In the termination process, for example, information indicating that the result of the privileged processing is stored in the redundant part shared memory 42, or that the result of the privileged processing is stored in the redundant part shared memory 42 and then interrupted to the first OS 710 is performed. It contains information to show.

After performing the above-described processing, the privileged copy execution unit 711 performs interrupt processing on the second OS'built in the redundant OS memory 33 ((9) in FIG. 3).

The second OS emulator (second OS'emulator) copied to the redundant portion 13 releases the suspension of the second OS'((10) in FIG. 3).

The second OS (that is, the second OS') copied to the redundant unit 13 executes privileged processing ((11) in FIG. 3).

When the privileged processing is successful, the area of the termination processing on the redundant OS memory 33 is reached ((12) in FIG. 3). Then, the end processing unit 732 of the second OS emulator (second OS'emulator) copied to the redundant unit 13 sets the state indicating the result of the end processing in the redundant unit shared memory 42. Then, the end processing unit 732 performs interrupt processing on the first OS 710 ((13) in FIG. 3). On the other hand, when the privilege processing fails, the termination processing area for exceptions on the redundant OS memory 33 is reached ((12') in FIG. 3). Then, the end processing unit 732 sets the state indicating the result of the end processing in the redundant unit shared memory 42. Then, the end processing unit 732 performs interrupt processing on the first OS 710 ((13') in FIG. 3).

The first OS 710 accepts interrupts. Then, the privileged copy execution unit 711 of the first OS 710 acquires the information according to the result of the privileged processing from the redundant unit shared memory 42, and stores the acquired information in the second OS unit shared memory 41 (FIG. 3 (14)). Then, the first OS 710 interrupts the second OS 720 ((15) in FIG. 3).

The emulator 730 for the second OS releases the suspend of the second OS 720.

The second OS 720 skips its own privilege processing ((16) in FIG. 3). Then, the second OS 720 refers to the shared memory 41 for the second OS unit and receives the execution result of the privileged processing ((17) in FIG. 3).

The above is an example of the processing flow when it is necessary to execute privileged processing exclusively. The first OS 710, the second OS 720, and the second OS emulator 730 have a configuration for performing the above-described processing.

If it is determined that it is not necessary to exclusively execute the privileged processing, the bypass processing requesting unit 7211 issues an "execute in redundant area (asynchronous)" instruction instead of the "execute in redundant area" instruction (execution in redundant area (asynchronous)" ( (3) of FIG. In addition, the bypass processing request unit 7211 causes the second OS 720 to skip the privilege processing. In this case, the execution unit 731 of the emulator 730 for the second OS does not suspend the second OS 720 because it is an "execute in a redundant area (asynchronous)" instruction. Further, the process of canceling the suspension of the second OS'and the second OS 72 is omitted.

FIG. 5 shows an example of processing when it is not necessary to exclusively execute the privileged processing as described above. With reference to FIG. 5, when it is determined that it is not necessary to exclusively execute the privileged processing, the second OS 720 skips the privileged processing and continues the normal OS processing. On the other hand, the second OS (that is, the second OS') copied to the redundant unit 13 executes privileged processing to perform termination processing. In this way, when it is not necessary to exclusively execute the privileged processing, the normal OS processing by the second OS720 and the privileged processing by the second OS (that is, the second OS') copied to the redundant part 13 are executed in parallel. Will be done.

Subsequently, an example of the operation of the information processing apparatus 10 will be described with reference to FIGS. 6 to 8. 6 to 8 are flowcharts showing an example of the operation of the information processing apparatus 10. Referring to FIG. 6, the program of the second OS 720 issues a privileged process which is a process related to the core of the OS (step S101, (1) of FIG. 3). Then, the bypass processing request unit 7211 accepts the issued privilege processing. Then, the bypass processing requesting unit 7211 determines whether or not it is necessary to exclusively execute the privileged processing based on the contents of the received privileged processing (step S102; (2) of FIG. 3).

When it is determined from the contents of the privileged processing that the privileged processing needs to be executed exclusively (step S103, synchronization instruction), such as when the result of the privileged processing affects other processing, the bypass processing requesting unit 7211 sets Issue the "execute in redundant area" command (step S104; (3) in FIG. 3). On the other hand, when it is determined from the contents of the privileged processing that it is not necessary to exclusively execute the privileged processing (step S103, asynchronous instruction), the bypass processing request unit 7211 issues an "execute in redundant area (asynchronous)" instruction. To do.

The scheduler address notification unit 722 is used by the scheduler or the like when the bypass processing request unit 7211 determines execution and issues an "execute in redundant area" command or an "execute in redundant area (asynchronous)" command. The information indicating the common processing area address after processing is notified to the first OS 710. Further, the exception handling address notification unit 723 notifies the first OS 710 of information indicating the exception handling address.

The execution unit 731 suspends the second OS 720 in response to the "execute in redundant area" command (step S105, (4) in FIG. 3). Then, the execution unit 731 stores the information of the "execute in redundant area" instruction issued by the bypass processing request unit 7211 in the shared memory 41 for the second OS unit (step S106, (5) in FIG. 3). After that, the second OS 720 (or the emulator 730 for the second OS) interrupts the first OS 710 (step S107, (6) in FIG. 3).

The privilege processing copy execution unit 711 of the first OS 710 accepts interrupts. Then, the privilege processing copy execution unit 711 refers to the shared memory 41 for the second OS unit and receives the stored instruction information (step S108, (7) in FIG. 3).

The copy execution unit 711 for privilege processing copies the information stored in the register of the second processor 22 to the redundant processor 23 according to the received information, and copies the information stored in the second OS memory 32 to the redundant OS. Copy to the memory 33 (step S109; (8) in FIG. 3). Further, at the time of the above copying, the first OS 710 overwrites the memory image of the end processing by using the address notified from the scheduler address notification unit 722 and the exception processing address notification unit 723.

The privilege processing copy execution unit 711 performs interrupt processing on the second OS'built in the redundant OS memory 33 (step S110; FIG. 3 (9)).

The second OS emulator (second OS'emulator) copied to the redundant section 13 releases the suspension of the second OS'(step S111, (10) in FIG. 3).

Subsequently, referring to FIG. 7, the second OS (that is, the second OS') copied to the redundant portion 13 executes privilege processing (step S121; (11) in FIG. 3).

When the privilege processing is successful (step S122, success), the area of the termination processing on the redundant OS memory 33 is reached (step S123; (12) in FIG. 3). Then, the end processing unit 732 of the second OS emulator (second OS'emulator) copied to the redundant unit 13 sets the state indicating the result of the end processing in the redundant unit shared memory 42. Then, the end processing unit 732 performs interrupt processing for the first OS 710 (step S124; (13) in FIG. 3). On the other hand, when the privilege processing fails (step S122, failure), the termination processing area for exceptions on the redundant OS memory 33 is reached (step S125, (12') in FIG. 3). Then, the end processing unit 732 sets the state indicating the result of the end processing in the redundant unit shared memory 42. Then, the end processing unit 732 performs interrupt processing for the first OS 710 (step S126, (13') in FIG. 3).

The first OS 710 accepts interrupts. Then, the privileged copy execution unit 711 of the first OS 710 acquires the information according to the result of the privileged processing from the redundant unit shared memory 42, and stores the acquired information in the second OS unit shared memory 41 (step). S127. (14) in FIG. Then, the first OS 710 interrupts the second OS 720 (step S128, (15) in FIG. 3).

The emulator 730 for the second OS releases the suspend of the second OS 720. The second OS720 skips its own privilege processing (step S129; (16) in FIG. 3). Then, the second OS 720 refers to the shared memory 41 for the second OS unit and receives the execution result of the privileged processing (step S130, (17) in FIG. 3). The second OS 720 may be configured to discard the execution result of the privilege processing without receiving the execution result of the privilege processing when there is some problem in the execution result of the privilege processing.

Further, referring to FIGS. 6 and 8, when it is determined from the contents of the privileged processing that it is not necessary to exclusively execute the privileged processing (step S103, asynchronous instruction), the bypass processing requesting unit 7211 sets the “redundant area”. Issuance of the "execute (asynchronous)" instruction (step S131).

The execution unit 731 shares the information of the "execute in the redundant area" instruction issued by the bypass processing request unit 7211 for the second OS unit without suspending the second OS 720 in response to the "execute in the redundant area (asynchronous)" instruction. It is stored in the memory 41 (step S132). After that, the second OS 720 (or the second OS emulator 730) interrupts the first OS 710 (step S133).

The privilege processing copy execution unit 711 of the first OS 710 accepts interrupts. Then, the privilege processing copy execution unit 711 refers to the shared memory 41 for the second OS unit and receives the stored instruction information (step S134). Then, the copy execution unit 711 for privilege processing copies the information stored in the register of the second processor 22 to the redundant processor 23 according to the received information, and copies the information stored in the second OS memory 32. Copy to the redundant OS memory 33 (step S135). Further, at the time of copying, the first OS 710 overwrites the memory image of the end processing by using the address notified from the scheduler address notification unit 722 and the exception processing address notification unit 723. After that, the privilege processing copy execution unit 711 performs interrupt processing on the second OS'built in the redundant OS memory 33 (step S136).

The second OS'executes privilege processing in response to an interrupt (step S137). The content of the privileged processing is the same as the processing already described in paragraphs 0054 to 0055. Therefore, the description thereof will be omitted. After the privilege processing is completed, the termination processing unit 732 will perform interrupt processing for the first OS 710.

The first OS 710 accepts interrupts. Then, the privileged copy execution unit 711 of the first OS 710 acquires the information according to the result of the privileged processing from the redundant unit shared memory 42, and stores the acquired information in the second OS unit shared memory 41 (step). S138). Then, the first OS 710 interrupts the second OS 720 (step S139).

The second OS 720 accepts an interrupt (step S140). Then, the second OS 720 refers to the shared memory 41 for the second OS unit and receives the execution result of the privileged processing (step S141).

The above is an example of the operation of the information processing device 10.

As described above, the information processing device 10 has a first OS unit 11, a second OS unit 12, and a redundant unit 13 to which a device such as a disk or communication is not assigned. Further, when the second OS unit 12 issues a privileged process that is a process related to the core of the OS, the information processing device 10 copies the configuration of the second OS unit 12 to the redundant unit 130 and copies the configuration of the second OS unit 12. By doing so, the redundant unit 130 is configured to execute the privileged processing on the generated second OS'. With such a configuration, the redundant unit 13 to which a device such as a disk or communication is not assigned can execute privilege processing. As a result, the information processing apparatus 10 can execute the privileged processing without affecting the operation of the original OS even if there is some problem in the privileged processing.

In this embodiment, the redundant unit 13 does not allocate a device such as a disk or communication. However, the redundant unit 13 may be configured so that it can only be read by a device other than the memory that can perform I / O. In other words, the redundant unit 13 may be configured to limit writing to devices capable of I / O. When the redundant part 13 is configured in this way, the exception of the page fault can be paged in and continued without completing the processing of the second OS'.

[Second Embodiment]
Next, a second embodiment of the present invention will be described with reference to FIG. In the second embodiment, the outline of the configuration of the processing execution device 80 will be described.

The processing execution device 80 is a device having a first OS unit in which the first OS functions and a second OS unit in which the second OS functions. FIG. 9 shows an example of the configuration of the processing execution device 80, which is characteristic of the present embodiment. Referring to FIG. 9, the processing execution device 80 has, for example, a copy execution unit 81.

For example, the processing execution device 80 has an arithmetic unit such as a CPU and a storage device. The processing execution device 80 realizes the processing unit when the arithmetic unit executes the program stored in the storage device.

The copy execution unit 81 is different from the first OS unit and the second OS unit in that the writing to the I / O-capable device is restricted according to the privilege processing issued by the second OS unit that requires privilege for execution. Copy the configuration of the second OS part to the part. As a result, the copy execution unit 81 causes the redundant unit to execute privilege processing.

As described above, the processing execution device 80 has the copy execution unit 81. With such a configuration, the copy execution unit 81 can copy the configuration of the second OS unit to the redundant unit and cause the redundant unit to execute privilege processing. In the case of this embodiment, the redundant part is restricted from writing to the device capable of I / O. Therefore, even if there is a problem in the privileged processing executed in the redundant portion, it is possible to reduce the possibility that a problem will occur due to the execution of the privileged processing.

Further, the above-mentioned processing execution device 80 can be realized by incorporating a predetermined program into the processing execution device 80. Specifically, the program according to another embodiment of the present invention has a processing execution device having a first OS part in which the first OS functions and a second OS part in which the second OS functions, and the second OS part is added to the processing execution device. Copy the configuration of the second OS part to a redundant part different from the first OS part and the second OS part, where writing to the I / O-capable device is restricted according to the issued privileged processing that requires privilege to execute. , Is a program for realizing a copy execution unit 81 that causes a redundant unit to execute privileged processing.

Further, the process execution method executed by the process execution device 80 described above is a process execution performed by a process execution device having a first OS unit in which the first OS functions and a second OS unit in which the second OS functions. When the second OS part issues a privileged process that requires privilege to execute, the second OS is in a redundant part different from the first OS part and the second OS part, in which writing to the device capable of I / O is restricted. The method is to copy the configuration of the part and let the redundant part execute privileged processing.

Even an invention of a program or a process execution method having the above-described configuration can achieve the above-mentioned object of the present invention because it has the same actions and effects as the above-mentioned process execution device 80.

<Additional notes>
Part or all of the above embodiments may also be described as in the appendix below. Hereinafter, the outline of the processing execution device and the like in the present invention will be described. However, the present invention is not limited to the following configurations.

(Appendix 1)
It is a processing execution method performed by an information processing apparatus having a first OS part in which the first OS functions and a second OS part in which the second OS functions.
When the second OS part issues a privileged process that requires privilege for execution, the second OS part is in a redundant part different from the first OS part and the second OS part in which writing to an I / O-capable device is restricted. A process execution method of copying the configuration of the above and causing the redundant part to execute the privileged process.
(Appendix 2)
The process execution method described in Appendix 1.
A process execution method for issuing an execution command according to the content of the privileged process in response to the privileged process issued by the second OS unit.
(Appendix 3)
The processing execution method described in Appendix 2.
A process execution method for issuing the execution command for stopping the second OS unit when it is necessary to exclusively execute the privileged process issued by the second OS unit.
(Appendix 4)
The processing execution method according to Appendix 2 or Appendix 3.
A process execution method for issuing the execution instruction that does not stop the second OS unit when it is not necessary to exclusively execute the privileged process issued by the second OS unit.
(Appendix 5)
The processing execution method according to any one of Supplementary note 1 to Supplementary note 4.
A process execution method in which a memory image of end processing is overwritten in the memory included in the redundant portion when copying the configuration of the second OS portion to the redundant portion.
(Appendix 6)
The processing execution method according to any one of Supplementary note 1 to Supplementary note 5.
The information stored in the register of the processor of the second OS section is copied to the redundant processor of the redundant section, and the information stored in the memory of the second OS section is copied to the redundant OS memory of the redundant section. A process execution method for copying the configuration of the second OS part to the redundant part by copying to.
(Appendix 7)
The processing execution method according to any one of Supplementary note 1 to Supplementary note 6.
The first OS section copies the configuration of the second OS section to the redundant section.
A process execution method in which the second OS copied to the redundant portion executes the privileged process.
(Appendix 8)
The processing execution method according to any one of Supplementary note 1 to Supplementary note 7.
A process execution method for storing an execution result in a shared memory included in the second OS unit after the privileged process is executed by the redundant unit.
(Appendix 9)
The process execution method described in Appendix 8.
After the privilege processing is completed, the first OS unit reads the result of the privilege processing stored in the redundant unit shared memory of the redundant unit, and the first OS unit has the read result of the second OS unit. A process execution method stored in the shared memory.
(Appendix 10)
A processing execution device having a first OS unit in which the first OS functions and a second OS unit in which the second OS functions.
In a redundant section different from the first OS section and the second OS section, writing to an I / O-capable device is restricted according to a privileged process issued by the second OS section that requires a privilege to execute. A processing execution device having a copy execution unit that copies the configuration of the second OS unit and causes the redundant unit to execute the privileged processing.
(Appendix 11)
An information processing device having a first OS section in which the first OS functions and a second OS section in which the second OS functions.
In a redundant part different from the first OS part and the second OS part, the writing to the device capable of I / O is restricted according to the privileged processing issued by the second OS part that requires privilege for execution. A program for realizing a copy execution unit that copies the configuration of the second OS unit and causes the redundant unit to execute the privileged processing.

The programs described in each of the above embodiments and appendices may be stored in a storage device or recorded in a computer-readable recording medium. For example, the recording medium is a portable medium such as a flexible disk, an optical disk, a magneto-optical disk, and a semiconductor memory.

Although the present invention has been described above with reference to each of the above embodiments, the present invention is not limited to the above-described embodiments. Various changes that can be understood by those skilled in the art can be made to the structure and details of the present invention within the scope of the present invention.

10 Information processing device 11 1st OS part 12 2nd OS part 13 Redundant part 20 Processor 21 1st processor 22 2nd processor 23 Redundant processor 30 Memory 31 1st OS memory 32 2nd OS memory 33 Redundant OS memory 41 Shared memory for 2nd OS part 42 Shared memory for redundant part 51 FW
52 NVRAM
53 Keyboard 54 Display 55 Disk 56 External I / O device 60 System Bus 710 1st OS
711 Privilege processing copy execution unit 720 Second OS
721 Kernel 7211 Bypass processing request unit 7212 Bypass processing result acquisition unit 722 Scheduler address notification unit 723 Exception processing address notification unit 730 Emulator for 2nd OS 731 Execution unit 732 Termination processing unit 80 Processing execution device 81 Copy execution unit

Claims (11)

It is a processing execution method performed by an information processing apparatus having a first OS section in which a first OS (Operating System) functions and a second OS section in which a second OS functions.
When the second OS section issues a privileged process that requires a privilege to execute, the second OS section is different from the first OS section and the second OS section, and the second OS section is a redundant section in which writing to an I / O-capable device is restricted. A process execution method in which the redundant part executes the privileged process by copying the configuration of. The processing execution method according to claim 1.
A process execution method for issuing an execution command according to the content of the privileged process in response to the privileged process issued by the second OS unit. The processing execution method according to claim 2.
A process execution method for issuing the execution command for stopping the second OS unit when it is necessary to exclusively execute the privileged process issued by the second OS unit. The processing execution method according to claim 2 or 3.
A process execution method for issuing the execution instruction that does not stop the second OS unit when it is not necessary to exclusively execute the privileged process issued by the second OS unit. The processing execution method according to any one of claims 1 to 4.
A process execution method in which a memory image of end processing is overwritten in the memory included in the redundant portion when the configuration of the second OS portion is copied to the redundant portion. The processing execution method according to any one of claims 1 to 5.
The information stored in the register of the processor of the second OS section is copied to the redundant processor of the redundant section, and the information stored in the memory of the second OS section is copied to the redundant OS memory of the redundant section. A process execution method for copying the configuration of the second OS part to the redundant part by copying to. The processing execution method according to any one of claims 1 to 6.
The first OS section copies the configuration of the second OS section to the redundant section.
A process execution method in which the second OS copied to the redundant portion executes the privileged process. The processing execution method according to any one of claims 1 to 7.
A process execution method for storing an execution result in a shared memory included in the second OS unit after the privileged process is executed by the redundant unit. The processing execution method according to claim 8.
After the privilege processing is completed, the first OS unit reads the result of the privilege processing stored in the redundant unit shared memory of the redundant unit, and the first OS unit has the read result of the second OS unit. A process execution method stored in the shared memory. A processing execution device having a first OS section in which a first OS functions and a second OS section in which a second OS functions.
The redundant part, which is different from the first OS part and the second OS part and is restricted from writing to an I / O-capable device, is issued by the second OS part according to the privileged processing that requires privilege for execution. A processing execution device having a copy execution unit that copies the configuration of the second OS unit and the redundant unit executes the privileged processing. An information processing device having a first OS section in which the first OS functions and a second OS section in which the second OS functions.
The redundant part, which is different from the first OS part and the second OS part and is restricted from writing to an I / O-capable device, is issued by the second OS part according to the privileged processing that requires privilege for execution. A program for copying the configuration of the second OS part and realizing a copy execution part in which the redundant part executes the privileged processing.

Images