JP3728580B2 - Memory device and memory protection method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a memory device and a memory protection method for protecting setting data when an abnormality occurs in a process of writing setting data for performing various settings from a host device to an in-device memory. In a system configuration that includes a lower-level device, when the setting data is downloaded from the higher-level device to the lower-level device and stored in the internal memory of the lower-level device, the normal writing may not be completed due to a failure such as a power failure. The present invention relates to a memory device for performing relief and a memory protection method.
[0002]
[Prior art]
In various communication systems, various devices such as a cross-connect device for setting connection between a plurality of lines and a multiplexing device for performing byte multiplexing and demultiplexing are used as subordinate devices, and a system management device or a control terminal. A configuration is known in which a device or the like is used as a higher-level device, and setting data for performing operation settings of the lower-level device is downloaded from the higher-level device and updated or added as necessary.
[0003]
In this case, the memory configuration of the subordinate device consists of a non-volatile memory such as an EEPROM or a flash memory for backup of setting data, and an in-device memory for storing setting data for performing cross-connect or multiplexing processing. The setting data is written from the non-volatile memory to the in-device memory when the lower-level device is started up or when the package is replaced.
[0004]
When the setting data is updated by downloading from the host device, the configuration data is generally written to the nonvolatile memory and the setting data is written from the nonvolatile memory to the in-device memory. Therefore, the non-volatile memory is a backup memory for the in-device memory. It has also been proposed that a non-volatile memory is provided with a backup memory so as to have a duplex backup configuration.
[0005]
[Problems to be solved by the invention]
When setting data is written to the non-volatile memory for backup to the internal memory of the device from the host device etc., if an abnormality such as a power failure occurs, a processor runaway or reset, or a package is inserted or removed, the non-volatile memory However, the setting data writing error occurs. At that time, if the setting data stored in the device memory is normal, the system operation will not be hindered. However, if the setting data stored in the device memory is lost, the nonvolatile memory There is a problem that the system goes down until exchange or re-downloading of all setting data from the host device.
[0006]
Therefore, as described above, it is conceivable that the backup memory has a duplex configuration. However, even if the nonvolatile memory is duplicated, there is a problem that it is not possible to cope with a failure when downloading setting data from the host device. Even in the configuration where the host device is set up with a database that stores the setting data of each lower device and the management of the lower device is performed, all the setting data is saved for the failure when the setting data is downloaded. There is a problem that takes a long time to download.
SUMMARY OF THE INVENTION An object of the present invention is to solve the conventional problems and to remedy a failure when setting data is written in an in-device memory with an economical configuration.
[0007]
[Means for Solving the Problems]
The memory device of the present invention includes (1) in-device memories 7-1 to 7-n for transferring setting data from the upper device 1 to the lower device 2, and writing the setting data to the in-device memory normally. When the setting data is normally written to the operational backup memory 4, the setting data is read and written for backup. Control data write control to standby system backup memory 5 and internal memory 7-1 to 7-n, and whether this write is normal write or not is determined. Control for writing the setting data to the active backup memory 4 and whether or not this writing is normal writing are determined. And a memory control unit 6 that performs a control to write the standby backup memory 5 Luo read out configuration data.
[0008]
(2) When the setting data for performing various settings is transferred from the host device 1 and written, the standby backup memory 5 for backup, and when the setting data is normally written in the standby backup memory 5, In-device memories 7-1 to 7-n for reading and writing the setting data, and an operational backup for reading the setting data and writing it for backup when the setting data is normally written in the in-device memory And a memory 4.
[0009]
In the memory protection method of the present invention, (3) when setting data for performing various settings from the host device 1 is written to the in-device memory 7-1 to 7-n, and the writing to the in-device memory is normally completed. The setting data read from the internal memory is written into the active backup memory 4, and when the writing to the active backup memory 4 is normally completed, the setting data read from the active backup memory 4 is stored in the standby backup memory. 5 includes the process of writing.
[0010]
(4) In the memory protection method, when the setting data is stored in the internal memory when the writing to the active backup memory 4 or the standby backup memory 5 is not normally completed, the internal memory and the active system The contents of the backup memory 4 are compared, and if they do not match, the setting data read from the internal memory is written to the operational backup memory 4, and when this writing is completed normally, the internal memory and the operational backup memory 4 Is the same as the above, it includes a process of writing the setting data read from the active backup memory 4 to the standby backup memory 5.
[0011]
(5) In the memory protection method, if the setting data is not stored in the internal memory when the writing to the active backup memory 4 or the standby backup memory 5 is not normally completed, the active backup memory 4 is normal. If it is normal, the setting data read from the active backup memory 4 is written to the standby backup memory 5, and when this writing is completed normally, the setting data is written to the internal memory and operated. If the system backup memory 4 is not normal, it is determined whether or not the standby system backup memory 5 is normal. If the system backup memory 4 is normal, the setting data read from the standby system backup memory 5 is written to the operation system backup memory 4 and this writing is performed. When the process is successfully completed, the setting data is written to the internal memory and set in this internal memory. After writing the data, and including the step determines whether or not the normal reads its configuration data.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 is an explanatory diagram of the principle of the present invention. 1 is a host device, 2 is a lower device, 3 is a database of the host device, 4 is an operational backup memory, 5 is a standby backup memory, 6 is a memory control unit, 7 Reference numerals -1 to 7-n denote in-device memories. The host device 1 can be a control terminal device such as a workstation and downloads setting data to the lower device 2 via a line.
[0013]
Further, the operational backup memory 4 and the standby backup memory 5 of the lower level device 2 can be configured by a nonvolatile memory such as an EEPROM or a flash memory. The internal memories 7-1 to 7-n are generally constituted by random access memories (RAM), and are volatile memories with respect to the nonvolatile memories. The memory control unit 6 can be realized by a memory control function of the processor.
[0014]
The memory controller 6 writes the setting data from the host device 1 to a predetermined in-device memory or all the in-device memories. When this writing is completed normally, the setting data is read from the in-device memory, and the operational backup memory Write to 4. This operational backup memory 4 has an area corresponding to each internal memory 7-1 to 7-n, holds setting data, and an abnormality occurs in any of the internal memories 7-1 to 7-n. The setting data can be restored to the in-device memory where an abnormality has occurred. When the writing to the in-device memory is normally completed, the setting data is read from the active backup memory 4 and written to the standby backup memory 5. When this writing is normally completed, the normal operation that operates according to the setting data is performed. Become operational.
[0015]
Therefore, if the setting data is not normally written to the active backup memory 4, and if the internal memory is normal, the setting data stored in the internal memory is used for the active backup memory 4. Rewriting is performed, and when the setting data is not stored in the internal memory, the operation backup memory is rewritten using the setting data stored in the standby backup memory 5. In addition, when writing to the active backup memory 4 is normally completed and a writing error occurs in the standby backup memory 5, if the setting data of the active backup memory 4 is normal, the setting is made from the active backup memory 4. Data can be restored.
[0016]
FIG. 2 is an explanatory diagram of the first embodiment of the present invention, in which 11 is an upper device, 12 is a lower device, 13 is a CPU panel, 14 is an operational backup memory (BUM), and 15 is a standby backup memory ( BUM), 16 is a processor (CPU), 17 is a work memory composed of random access memory (RAM), 18 is a bus, 19 and 20 are communication units, 21-1 to 21-n are operation panels, and 22 is in-device communication. A line, 23 indicates a communication unit, and 24 indicates an in-device memory.
[0017]
The active backup memory 14 of the CPU panel 13 corresponds to the active backup memory 4 of FIG. 1, and the standby backup memory 15 corresponds to the standby backup memory 5 of FIG. Further, the processor 16, the communication units 19 and 20, and the work memory 17 constitute the memory control unit 6 of FIG. The in-device memory 24 of the operation panels 21-1 to 21-n corresponds to the in-device memories 7-1 to 7-n in FIG.
[0018]
Each unit is controlled by the processor 16 of the CPU board 13, and the communication unit 19 connected to the processor 16 via the bus 18 transmits and receives data to and from the host device 11, and the communication unit 20 Data such as setting data is transmitted / received to / from the communication units 23 of the operation panels 21-1 to 21-n via the in-device signal line 22. The operation panels 21-1 to 21-n perform operation processing such as multiplexing processing and cross-connect processing according to the setting data stored in the in-device memory 24. Accordingly, in response to the addition or change of the operation process, the setting data is transferred from the higher-level device 11 and written in the in-device memory 24, and the setting data is added or updated. The lower level device 12 in this case is configured by mounting a CPU board 13 (CPU package) and a plurality of operation boards 21-1 to 21-n (operation processing packages) on a shelf or the like. And backboard wiring.
[0019]
FIG. 3 shows an operation when setting data is transferred from the upper apparatus 11 to the CPU board 13 of the lower apparatus 12 and stored in the internal memory 24 of the operation board. First, when the setting data A is transferred from the host device 11 to the CPU board 13, the processor 16 of the CPU board 13 temporarily stores the setting data A received via the communication unit 19 in the work memory 17 and is controlled by the processor 16. Then, whether or not the received data is normal is determined by a parity check, a sum check, or the like, and if it is determined to be abnormal, an NG response is sent to the host device 11. The host device 11 can perform retransmission processing, for example, using an NG response. If it is determined to be normal, the setting data A is read from the work memory 17 and transferred from the communication unit 20 via the in-device communication line 22 to the specified operation panel or all operation panels in the case of simultaneous setting. To do. The setting data is received by the communication unit 23 of the operation panel and stored in the in-device memory 24.
[0020]
After the writing to the in-device memory 24 is completed, the setting data A is read from the in-device memory 24 under the control of the processor 16, and it is determined whether or not the setting data A is normal. For example, the setting data A temporarily stored in the work memory 17 and the setting data A read from the in-device memory 24 can be compared and determined. If it is not normal, an NG response is returned to the host device 11. If normal, the standby BUM (backup memory) 15 connected to the bus 18 is prohibited from being written, and the normality setting data A is written to the operational BUM (backup memory) 14 connected to the bus 18. Include. That is, the active BUM and the standby system are connected via a control line (not shown) so that the setting data A is written only in the standby BUM connected to the same bus 18 and the active BUM in the active BUM. The BUM is controlled by the processor 16.
[0021]
Then, it is determined whether or not the writing of the setting data A has been completed normally. If it is not normal, an NG response is returned to the host device 11. If normal, the operation BUM is prohibited from being written, the standby BUM is writable, the setting data A read from the operation BUM is written to the standby BUM, and whether or not the writing is normally completed If it is not normal, an NG response is returned to the host device 11, and if it is normal, a normal end response is returned. In this case, the contents of the in-device memory 24, the active BUM, and the standby BUM are the same.
[0022]
If data writing to the active BUM or the standby BUM does not end normally, it can be normalized by the operations shown in FIGS. That is, as shown in FIG. 4, first, the CPU board and the operation board are started up, and are read from the in-device memory 24 of the operation board under the control of the processor 16 of the CPU board 13, and this in-device memory is read out. It is determined whether data has been set in 24. In this case, the determination can be made by reading the setting data stored in the in-device memory 24 or by reading a flag or the like indicating the writing of the setting data. If no data is set, the set data is not read out. The flag can be determined by indicating unwritten.
[0023]
When data has been set in the in-device memory 24, the contents of the active BUM and the in-device memory 24 are compared. This comparison can be performed, for example, by reading data in page units. If the comparison does not match, an abnormal state such as a power-off occurs in the process of writing the setting data to the operating BUM, and the setting data and the in-device memory held by the partial writing etc. in the operating BUM In this case, the standby BUM is prohibited from being written, and the setting data read from the in-device memory 24 is written to the active BUM. The contents are matched with the contents of the in-device memory 24. In this case, the setting data is not updated, but there is no problem in system operation.
[0024]
Then, it is determined whether or not the writing is normal. If the writing is not normal, a failure notification is sent to the host device 11. The host device 11 outputs, for example, an alarm by this failure notification and notifies the maintenance person. In the normal case and when the contents of the active BUM and the in-device memory 24 match, the active BUM is prohibited from being written, and the setting data read from the active BUM is written in the standby BUM. Then, it is determined whether or not the writing is normal. If the writing ends normally, the normal operation according to the setting data is performed. If the termination is not normal, a failure notification is sent to the host device 11.
[0025]
If the setting data is not stored in the in-device memory 24, that is, if the in-device memory has been set and not set, as shown in FIG. 5, it is determined whether or not the operational BUM is normal. If it is normal, the operation system BUM is prohibited from being written, and the setting data read from the operation system BUM is written to the standby system BUM. Then, it is determined whether or not the writing is normal. If the writing is not normal, a failure notification is sent to the host apparatus 11. If the writing is normal, the setting data A is transferred to the operation panel and stored in the internal memory 24. The setting data A stored in the in-device memory 24 is read to determine whether or not the setting data A is normal, that is, whether or not it has been normally written in the in-device memory 24. NG response is sent to 11, and if normal, the operation shifts to normal operation according to the setting data.
[0026]
If the active BUM is not normal, as shown in FIG. 6, it is determined whether or not the standby BUM is normal. If the normal BUM is not normal, a failure notification is sent to the host device 11, and if normal, the standby BUM is displayed. Write is prohibited, the setting data read from the standby BUM is written to the active BUM, it is determined whether or not the write is normal, and if it is not normal, a failure notification is sent to the host device 11, and if normal Transfers the setting data A to the operation panel, writes it to the internal memory 24, reads the setting data A, and whether this setting data A is normal, that is, whether it has been normally written to the internal memory 24. If it is not normal, an NG response is sent to the host device 11, and if it is normal, the operation shifts to normal operation according to the setting data.
[0027]
FIG. 7 is an explanatory diagram of the second embodiment of the present invention. The same reference numerals as those in FIG. 2 denote the same parts, 32 is a communication unit, 33 is a sub CPU board, 35 is a standby BUM (backup memory), Reference numeral 36 denotes a sub processor (CPU), 37 denotes a work memory including a random access memory (RAM), 38 denotes a bus, and 39 denotes a communication unit.
[0028]
In this embodiment, a CPU board 13, a sub CPU board 33, and an arbitrary number of operation boards 21-1 to 21-n are provided as the lower level devices 12, and the operation board BUM 14 and the sub CPU board 33 are on standby. A system BUM 35 is provided, and the CPU board 13 and the sub CPU board 33 are connected via communication units 32 and 39.
[0029]
The operation of storing the setting data from the host device 11 to each of the operation panels 21-1 to 21-n via the in-device communication line 22 is almost the same as in the configuration shown in FIG. To do. When the control information is transmitted and received between the processor 16 of the CPU board 13 and the processor 36 of the sub CPU board 33 and the setting data is written to the active BUM 14, the standby BUM 35 is prohibited from being written. In addition, when setting data is written to the standby BUM 35, the processors 16 and 36 perform control so that the operation BUM 14 is prohibited from being written.
[0030]
In the sub CPU board 33, the setting data transferred via the communication unit 32 of the CPU board 13 is temporarily stored in the work memory 37 from the communication unit 39. Under the control of the processor 37, the normality is confirmed by an error check or the like of the setting data, and writing is made to the standby BUM 35 only when it is normal. As in this embodiment, the system BUM 14 is mounted on the CPU board 13 and the standby BUM 35 is mounted on the sub CPU board 33, so that, for example, even if the sub CPU board 33 is removed, there is no problem in system operation. The standby system BUM 35 can be easily replaced.
[0031]
In each of the above-described embodiments, the setting data from the host device 11 is temporarily stored in the work memory 17 and checked for normality, and then written in the in-device memory 24. However, the standby system BUM is used. Then, once the setting data from the host device 11 is stored in the standby BUM and the normality is confirmed, the setting data is written in the in-device memory 24, and when the writing ends normally, the setting data is stored in the operating BUM. It can be configured to write.
[0032]
In this case, if the standby BUM is also used as a work memory and the setting data is securely held until the normal writing is completed for backup of the active BUM, the writing to the active BUM does not end normally. Since the setting data held in the system BUM is for backup, the setting data can be rewritten to the operation BUM using this.
[0033]
Further, since data write processing is generally performed in units of pages, the standby BUM that is also used as a work memory can have a small configuration having a storage capacity corresponding to the page units. A flash memory that can be written and erased in units of pages can be used. It is also possible to allocate a part of free space such as an EEPROM storing the program to the standby BUM.
[0034]
【The invention's effect】
As described above, according to the present invention, when setting data is normally written in the in-device memories 7-1 to 7-n, the setting data is written to the active backup memory 4, and further, the standby backup memory 5 If the writing is not completed normally, for example, if the in-device memory 24 is normal, the setting data is restored from the in-device memory 24, and the operational backup memory 4 is normal. If the setting data is restored from the active backup memory 4 and only the standby backup memory 5 is normal, the setting data can be restored from the standby backup memory 5. Therefore, in the case of abnormal termination of writing in the process of writing the setting data to the in-device memory 24, it can be easily restored without re-downloading the setting data from the host device 1.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating the principle of the present invention.
FIG. 2 is an explanatory diagram of the first embodiment of the present invention.
FIG. 3 is an explanatory diagram of a setting data writing operation according to the embodiment of this invention.
FIG. 4 is an explanatory diagram of a startup processing operation according to the embodiment of this invention.
FIG. 5 is an explanatory diagram of a startup processing operation according to the embodiment of this invention.
FIG. 6 is an explanatory diagram of a startup processing operation according to the embodiment of this invention.
FIG. 7 is an explanatory diagram of a second embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Upper apparatus 2 Lower apparatus 3 Database 4 Active system backup memory 5 Standby system backup memory 6 Memory control part 7-1 to 7-n In-apparatus memory

Claims (4)

In-device memory for writing and transferring setting data from the upper device to the lower device;
An operational backup memory that reads the setting data and writes it for backup when the setting data is normally written to the internal memory;
A standby backup memory that reads the setting data and writes it for backup when the setting data is normally written to the active backup memory;
Control of writing of the setting data to the internal memory of the device and whether or not writing to the internal memory of the device is normal writing are determined, and the setting data read from the internal memory at the time of normal writing is the operational backup a control for writing in the memory, writing to the active system memory determines whether normal writing or, when the normal write, a control for writing said setting data read out from said active system backup memory to the standby backup memory When the setting data is not normally written to any one of the internal memory, the active backup memory, and the standby backup memory, an abnormal end response is sent, and the setting data for the standby backup memory is transmitted. And a memory control unit that performs control to send a normal end when writing is normal. A memory device characterized by that. Has a device memory and operating system backup memory and standby backup memory, write the configuration data to make various settings from the host computer to the device memory is transferred to the lower-level device,
The setting data written in the internal memory is read out and collated with the setting data from the host device to determine whether or not normal writing is performed. When the normal writing is performed, the setting data read from the internal memory is write to the operation system backup memory,
Reading the setting data written in該運for system backup memory Te to determine normal writing or not, written at the time of normal writing, the setting data read out from該運for system backup memory to the standby backup memory process A memory protection method comprising: When setting data is stored in the internal memory when the active backup memory or the standby backup memory is not normal, the contents of the internal memory and the active backup memory are compared, and when there is a mismatch writes the configuration data read out from the device memory to the operating system backup memory, the contents when the writing is normally completed and with the apparatus memory with the operational system backup memory for the operating system backup memory match 3. The memory protection method according to claim 2, further comprising a step of writing the setting data read from the active system backup memory to the standby system backup memory. When either the operation system backup memory or the standby system backup memory is not normal and the setting data is not stored in the internal memory, it is determined whether or not the operation system backup memory is normal. writes the configuration data read from該運for system backup memory to the standby backup memory, when the write is completed successfully with respect to the standby system backup memory, the setting data stored in the active system backup memory in the device When the operation backup memory is not normal, it is determined whether or not the standby backup memory is normal. If the operation backup memory is normal, the setting data read from the standby backup memory is stored in the operation backup memory. write to write, for the operating system backup memory When body is successful, the writing the setting data into the device memory, after writing the configuration data to the device memory, the process determines normal or not by reading the configuration data from the device memory 4. The memory protection method according to claim 2, further comprising:

Images