JP4958734B2 - Electrical equipment, failure prevention method and failure prevention program - Google Patents

Description

  The present invention relates to an electrical apparatus such as an image forming apparatus, and more particularly to an electrical apparatus that can efficiently execute an application by using a predetermined function.

2. Description of the Related Art Conventionally, an image forming apparatus such as an MFP is preinstalled with an application program for each functional unit such as a printer, a copy, a facsimile, and a scanner, and software means for operating these application programs.
For example, it is generally known that an OS (Operating System), a platform, and the like provide an interface called an API (Application Program Interface) as a function for efficiently operating an application program.

The API is prepared in a format corresponding to the language and platform for describing the application program, and many of them are provided in the form of functions.
Here, the function is composed of a function signature composed of a character string or binary data for identifying a function (API) and a parameter (argument) for passing the function. There is also a mechanism for returning the value processed by the function to the caller.
If this is schematically shown, it can be expressed as follows.
Processing result = function signature (argument 1, argument 2, ...)
Therefore, in order to smoothly use such functions in each application, so-called “elements using functions” (see FIG. 7) are described in advance in the above-described format, and functions prepared as APIs are used. It can be used properly.

Here, in order to use the API correctly, it is necessary to investigate the API manuals and guidelines thoroughly and determine its usage and arguments, etc., but these are all done manually, and mistakes are made. There is a possibility of waking up.
This mistake is not greatly affected if the application itself or the platform has a certain level of tolerance and an environment that enables debugging or the like is in place.

However, depending on how the API is used, there is a serious influence, and as a result, not only the application but also the entire system such as memory data and OS may be crashed.
For example, FIG. 7 schematically illustrates the above-described state, and is a schematic diagram illustrating a state in which failures occur in a chain due to incorrect use of the API.
As shown in FIG. 7, an API called in an incorrect manner causes a fatal problem in the implementation part “providing function” or “related function” called by “providing function”. The entire system will be in a critical situation.

For this reason, an information processing apparatus capable of limiting the API that can be used for each application program has been proposed (see, for example, Patent Document 1).
According to this information processing apparatus, an API that can be used by an application program is determined, and an API operation is controlled according to the determination result, so that an API that can be used for each application program is arbitrarily set and restricted. Be able to.

Japanese Patent Laying-Open No. 2005-258924 (FIG. 10)

However, in the conventionally proposed information processing apparatus as described above, an API that can be used for each application program must be set in advance. Specifically, predetermined license information for the application program must be set. Must be attached.
For this reason, it is necessary for the user to determine in advance whether it can be used or not, and there is a possibility that an incorrect API is set for human work.
In addition, since the user must perform the setting in advance, it is very troublesome and inconvenient.

  The present invention has been proposed in order to solve the problems of the conventional techniques as described above. By experiencing a defect, the failure occurrence pattern is learned, thereby preventing inappropriate repetition of processing. As a result, an object of the present invention is to provide an electrical apparatus that can prevent the occurrence of a fault in software, hardware, or a system.

To achieve the above object, an electrical equipment of the present invention, depending on the call request from the application, the function providing means for providing a corresponding function, and error detection means for detecting a malfunction relating to the provided the function is defective When the request matches, the call request storage means for storing the call request of the detected function, the check means for checking the call request from the application and the call request stored by the call request storage means, And a function providing restriction unit that does not provide the corresponding function to the calling application.

According to the electrical apparatus of the present invention having such a configuration, a failure that occurred during application execution is detected, and the call request that caused the failure is specified. In other words, the occurrence of a malfunction is considered to be caused by an incorrect function call or usage, and the call request is specified.
When a call request similar to the specified call request is made again, it is determined that there is a high possibility that a failure will occur, and control is performed so as not to provide the requested function.
For this reason, once a defect is experienced, it is possible to reliably prevent a similar defect from recurring.
As described above, according to the present invention, since the apparatus itself has a function of learning the feature of occurrence of a failure and adopts a mechanism for automatically preventing the occurrence of the failure according to the learning content, reliability and convenience are provided. Excellent electrical equipment.

The electrical equipment of the present invention includes a pattern detecting means for detecting a call pattern constituting a call request from the application, the call request storage means, the call pattern according to the call request failure is detected feature At the same time, the collation means collates the call pattern detected by the pattern detection means with the call pattern stored by the call request storage means.

According to the electrical apparatus of the present invention having such a configuration, the call request from the application specified as the cause of the failure is further decomposed to extract characteristic elements, and pattern data obtained by combining these elements is obtained. It is supposed to hold. For this reason, it becomes possible to grasp in detail the configuration of the call request, and the characteristics of the occurrence of the failure can be accurately reflected.
Accordingly, it is possible to more reliably prevent the occurrence of defects and realize an electric device with further improved reliability.

Furthermore, the electrical equipment of the present invention, when the verification by the verification means matches has a configuration to the calling application with a dummy signal returning means for returning a predetermined dummy signal.

According to the electric equipment of the present invention having such a configuration, when a predetermined collation is matched, that is, when a call that may cause a malfunction is requested again, not only the provision of such a function is restricted. In this case, the calling application is notified that an incorrect function call has been made.
As a result, it is possible to inform the user that there is a high risk of occurrence of a problem.
For this reason, improvement measures can be promoted while suppressing the occurrence of defects, and the user can take necessary measures with a margin.

The electrical equipment of the present invention, said function providing means, response to the call request from the application, via the corresponding application program interface provides a predetermined function, said function providing limiting means, collation in the collation means If they match, a predetermined function is not provided via the corresponding application program interface.

According to the electric apparatus of the present invention having such a configuration, it is possible to prevent an erroneous function from being provided by calling an inappropriate interface (API) from an application.
Thereby, it is possible to avoid not only an application but also an OS that implements an API, a function related to this, and other serious failures that occur in the entire system.

Also, obstruction prevention method of the present invention is a failure prevention method for preventing a failure caused by misuse of the function, response to a call request from the application, and providing a corresponding function have been provided The step of detecting a defect related to the function, the step of storing a call request for the function in which the defect is detected, the step of checking the call request from the application, and the stored call request, and the check match In some cases, the method has a step of not providing a corresponding function to the calling application.

Thus, the present invention can be realized not only as the device invention described above but also as a method invention.
Therefore, the invention can be implemented without being restricted by the hardware configuration, and thus can be provided as a method having excellent versatility and expandability.

A failure prevention program according to the present invention is a failure prevention program for preventing occurrence of a failure due to misuse of the function in an electrical device that executes an application using a predetermined function. Function providing means for providing a corresponding function in response to a call request from an application, error detecting means for detecting a fault related to the provided function, and a call for storing a call request for a function in which a fault is detected Request storage means, collation means for collating the call request from the application with the call request stored by the call request storage means, and function that does not provide the corresponding function to the caller application if the collation matches Program for functioning as provision restriction means Are you.

Thus, the present invention can also be realized as a program.
As a result, the present invention can be realized by installing a program not only in an image forming apparatus such as a printer, a copier, and a multifunction machine but also in an information processing apparatus equipped with various applications, and is excellent in versatility and expandability. Can be provided as a fault prevention program.

  As described above, according to the present invention, it is possible to prevent reoccurrence of inappropriate processing and effectively prevent occurrence of a failure in software / hardware or a system.

A preferred embodiment of the present invention will be described below with reference to FIGS.
Here, the MFP (Multifunction) of this embodiment shown below
Peripheral) is realized by processing, means, and functions executed by a computer according to instructions of a program (software). The program sends a command to each component of the computer to perform predetermined processing and functions as shown below. That is, each process / means in the MFP of the present embodiment is realized by specific means in which a program and a computer cooperate.
Note that all or part of the program is provided by, for example, a magnetic disk, optical disk, semiconductor memory, or any other computer-readable recording medium, and the program read from the recording medium is installed in the computer and executed. The The program can also be loaded and executed directly on a computer through a communication line without using a recording medium.

FIG. 1 is a block diagram showing the overall configuration of an MFP according to an embodiment of the present invention, and FIG. 2 is a block diagram showing the configuration of an MFP service unit 1 that is the main component of the MFP according to this embodiment. is there.
The MFP according to the present embodiment includes a copy function, a scanner function, a print function, a facsimile function, and the like in one housing, and constitutes an electric device according to the present invention.

As shown in FIG. 1, the MFP includes an MFP service unit 1, an MFP main unit 2, and an application unit 3.
The MFP service unit 1 calls a corresponding API in response to an API call from the application unit 3, and provides a function required by the “function to be provided” mechanism 14 via this API. The “related functions” mechanism of the main unit 2 works in conjunction.

The main component of the MFP according to the present embodiment is an MFP service unit 1. As shown in FIG. 2, the MFP service unit 1 further includes a pattern detection mechanism 10, a pattern confirmation mechanism 11, a pattern storage mechanism 12, and a pattern storage unit. 13, a “providing function” mechanism 14 and an error response forming mechanism 15.
Note that each mechanism in the MFP service unit 1 is under the control of the controller 100 and performs a predetermined operation under the control of the controller 100.
Hereinafter, each mechanism of the MFP service unit 1 will be described in detail.

The pattern detection mechanism 10 analyzes an API (function) call request from an application and detects predetermined pattern data, and constitutes pattern detection means of the present invention.
Specifically, a specific pattern is recognized mainly from the configuration of an API call argument.
However, since the API may be composed of a plurality of functions, the pattern data in that case is extracted together with the association with the function signature.
For example, when the API call is the function DoService (1, “information”, true), the argument is “1” as an integer value, “information” as a character string, and “true” as a BOOL value is a function signature “ Extracted with “DoService”.
The function signature is shown as a character string for convenience of explanation, but may be a function pointer (address) or a call number in the realization of the API.
A description example regarding the API function “DoService” taken up here will be described later with reference to FIG.

The pattern confirmation mechanism 11 receives the pattern data extracted by the pattern detection mechanism 10 and compares it with the record of the pattern data stored in the pattern storage unit 13 so far, and constitutes the collating means of the present invention. .
In short, it is a mechanism for determining whether or not an API call from the application is inappropriate. When data matching the API call from the application exists in the pattern storage unit 13, the call is It is determined that there is a high possibility of causing a failure.

The pattern storage mechanism 12 is to specify the pattern data related to the original call and store it in the pattern storage unit 13 when a malfunction is detected in providing or executing the function in the “providing function” mechanism 14. The call request storage means of the present invention is configured.
Also, instead of triggering the detection of a defect, pattern data relating to all API calls is once recorded in a preset mode, and the record is erased when the processing does not cause a problem. (Good recording mode).
In this case, even if a critical failure occurs, the pattern data is surely recorded, which is effective.
Furthermore, when a new application is installed, the above-described recording certain mode is set only for a certain period, and pattern data related to all API calls may be recorded during this period (quarantine monitoring mode).
By setting this mode, a fixed trial period can be provided at the introduction stage, and the state can be monitored until the operation is stabilized.
Unlike the history, the pattern data is recorded in such a manner that the same pattern data is not recorded twice, so that saving of memory or the like is taken into consideration.

As described above, the pattern storage unit 13 records the API call pattern data related to the failure, and is configured by a storage medium such as a memory.
These records may be erased by a user's operation, or may be automatically erased by a time-limited setting.
In this case, even if the pattern data is erased, if the same application causes the same error again, the pattern data is stored again.
As a result, although the accuracy of determination is somewhat reduced, the storage area can be saved.
The pattern data recorded in the pattern storage unit 13 can be exported as an external file, and such an export file can be imported in another equivalent system.
As described above, a result learned in one system can be applied immediately in another system, and an abnormal pattern of API calls can be observed in an external test environment.

The “providing function” mechanism 14 assigns the required API to the application and provides a predetermined function, and constitutes a function providing means of the present invention. Specifically, an API implementation part such as an OS corresponds to this.
In the present embodiment, the pattern confirmation mechanism 11 controls the API so that the function is not provided when the call pattern where the trouble has occurred previously can be confirmed again (the present invention). Function provision restriction means).
In this case, the error response forming mechanism 15 can also generate API call error information in a pseudo and safe format and return a dummy API use result (dummy signal return means of the present invention). ).
For example, if the API has a return value, set it to return an invalid value or an error code, and throw a predefined exception if it is in a format that generates an exception for the calling application. That's fine.

Next, an operation procedure in the MFP of the present embodiment configured as described above will be described with reference to FIGS.
FIG. 3 is a flowchart showing an operation procedure related to error learning in the MFP according to this embodiment, and FIG. 4 is a flowchart showing a protection operation procedure based on the learning result in the MFP according to this embodiment.
First, a failure learning procedure in the MFP according to the present embodiment will be described with reference to FIG.

As shown in FIG. 3, first, it is assumed that the application of the application unit 3 makes an API (function) call “function (a, b, c)” (S1).
In response to this, the MFP service unit 1 calls a predetermined API, and the pattern detection mechanism 10 extracts the API call “function (a, b, c)” (S2).
Next, the pattern detection mechanism 10 extracts predetermined pattern data based on the API call (S3).
The pattern data is preferably pattern data formed by a combination of data constituting the API call.
For example, in the example of FIG. 3, each component “function”, “a”, “b”, “c” is extracted from the API call “function (a, b, c)”, respectively, and pattern data (“function” ", a, b, c) are formed and later subjected to recording and verification.

Here, the procedure is to request the pattern confirmation mechanism 11 to collate the pattern data with the pattern data related to the defect recorded as a history in the pattern storage unit 13, but the example of FIG. Since a case is assumed in which no call pattern data is recorded, normal processing is assumed to be substantially inconsistent with verification.
Note that the processing in the case where the collation matches will be described later with reference to FIG.

After step S3, the pattern detection mechanism 10 passes the extracted API call “function (a, b, c)” to the “providing function” mechanism 14 (S4).
The “providing function” mechanism 14 provides a predetermined function based on the called API and executes it. It is assumed here that some kind of failure has occurred (S5).
When the “providing function” mechanism 14 detects such a failure by a predetermined error detection means, the mechanism 14 recognizes that the exception is an exception and transmits a predetermined exception notification to the pattern detection mechanism 10 (S6).

Next, the pattern detection mechanism 10 that has received the exception notification passes the pattern data ("function", a, b, c) extracted in step S3 to the pattern storage mechanism 12 (S7).
Then, the pattern storage mechanism 12 records the received pattern data in the pattern storage unit 13.
As a result, an inappropriate API call with a high possibility of causing a malfunction is identified, and a certain learning result is obtained.

On the other hand, the pattern detection mechanism 10 transmits the exception notification to the calling application via a predetermined API (steps S8 and S9).
As a result, the user can recognize the occurrence of a failure and can perform necessary error processing (for example, system restart).

Next, the procedure of the protection operation based on the learning result will be described with reference to FIG.
Here, as in FIG. 3, it is assumed that the application first makes an API call “function (a, b, c)” (S11).
In response to this, the MFP service unit 1 calls a predetermined API, and the pattern detection mechanism 10 extracts the API call “function (a, b, c)” (S12).
Next, the pattern detection mechanism 10 extracts predetermined pattern data ("function", a, b, c) based on the API call, and requests the pattern confirmation mechanism 11 to collate the extracted pattern data. (S13).

Upon receipt of step S13, the pattern confirmation mechanism 11 searches the pattern storage unit 13, pattern data ("function", a, b, c) extracted in step S12 and pattern data recorded in the pattern storage unit 13 (S14).
In the example of FIG. 4, since matching is found as a result of collation (search) in step S14 (see step S7 in FIG. 3), the pattern confirmation mechanism 11 notifies the pattern detection mechanism 10 of this (this book In case of example, execute "true").
Note that if the collation does not match, normal processing is continued as in the example of FIG.

Then, the pattern detection mechanism 10 requests the error response formation mechanism 15 to transmit dummy response data (fake data) (S15).
The error response formation mechanism 15 returns predetermined fake data to the pattern detection mechanism 10 (S16), and is transmitted to the requesting application via the API (S17, S18).
As a result, the user can recognize the fact that the API or the function is called by mistake, and can take appropriate measures safely.

Next, an XML description example of actual pattern data in the MFP according to the present embodiment will be described with reference to FIG.
Here, two cases described in XML (Extensible Markup Language) will be described for the above-described API “DoService” example.
As shown in FIG. 5 (a), in the node started by the tag <signature>, the pattern causing the error is recorded by the <pattern> tag.
In addition, the actual value of the parameter is recorded in one pattern node.
In the <errors> tag portion, error information actually generated in this pattern is recorded and can be referred to by the user.
On the other hand, in FIG. 5B, the function signature is not limited to the function name part, but the function signature is obtained by integrating the number of function arguments, the respective data types, presence / absence of return values, data types, and the like. An example of XML description in the case is shown.
In such a case, the information corresponding to the function signature is recorded in the <signature> tag portion, and the parameters may be described simply by listing the parameters.

As described above, according to the MFP of the present embodiment, when any malfunction is detected in the “providing function” mechanism 14, the pattern detection mechanism 10 extracts the corresponding API call pattern, and the pattern storage mechanism 12 calls the call. Pattern data is recorded.
Then, if the API call pattern from the application unit 3 matches the call pattern recorded in advance, it is determined that the call is highly likely to cause a failure, and the operation of the “providing function” mechanism 14 is performed. I try to limit it.
For this reason, it is possible to prevent not only the failure of the “providing function” mechanism 14 caused by inappropriate use of APIs and functions, but also the occurrence of a failure related to the adjacent “related function” mechanism and the entire system. It becomes like this.

Specifically, a time killing application used while waiting for job processing in the MFP, that is, a countermeasure when using a game is assumed.
In application software such as a game, it is considered that the unique service of the MFP is rarely used, but there may be a case where the function of the MFP is called for some reason or purpose or due to a mistake of the creator.
In particular, when job processing is being performed on the MFP, it is considered that there is a higher possibility that a problem will occur than at normal time (idle time).
In such a case, if a measure that directly excludes the API is executed, an error occurs and the job processing may be interrupted.
Therefore, while taking measures for prohibiting the use of such an application, the occurrence of a failure can be minimized by using a software mechanism by adopting the MFP or the program according to the present embodiment.

As described above, according to the present embodiment, when the apparatus itself experiences a problem, the pattern of the problem occurrence is learned, thereby preventing inappropriate repetition of processing.
As a result, it is possible to prevent the occurrence of a failure that affects the software, hardware, or the entire system, and it is possible to realize an MFP that has durability, excellent reliability, and convenience.

[Other Embodiments]
Next, an MFP according to another embodiment of the present invention will be described with reference to FIG.
FIG. 6 is a block diagram showing the configuration of the MFP service unit 1 which is the main component of the MFP according to another embodiment of the present invention.
As shown in FIG. 6, the MFP according to the present embodiment has the same configuration as the MFP according to the above-described embodiment, but additionally differs in that it includes an application management mechanism 16 and an application identification mechanism 17.

The application identification mechanism 16 extracts information related to an application using the API from the platform in advance.
The application management mechanism 17 holds application identification information extracted by the application identification mechanism 16.
Specifically, when an API call is made, the pattern confirmation mechanism 11 accesses the application identification information held by the application management mechanism 17 and uses it as a judgment judgment material together with the API call.

For example, a specific API call from a certain application may cause a failure and is determined to be inappropriate, but even if the same API call is made from another application, it is determined to be a proper call Can do.
Conversely, a specific API call from a certain application is determined to be appropriate, but even if the same API call is made from another application, this can be determined as an inappropriate call.
Thus, according to the present embodiment, it is possible to make a determination regarding an API call in units of applications.

As described above, according to the MFP of the present embodiment, not only the same effects as those of the above-described embodiment are exhibited, but also the application identification mechanism 16 extracts identification information related to the application, 17 holds.
Since the pattern confirmation mechanism 11 collates each API call request while referring to the identification information held in the application management unit 17, the API call request that is likely to cause a failure is more accurately identified. It becomes possible to specify.
Therefore, according to the present embodiment, it is possible to realize an MFP having higher durability against defects and excellent reliability.

As mentioned above, although the preferred embodiment was shown and demonstrated about the electric equipment of this invention, the electric equipment concerning this invention is not limited only to embodiment mentioned above, A various change implementation is carried out in the scope of the present invention. It goes without saying that it is possible.
For example, in the present embodiment, the MFP is described as a typical example. However, the present invention may be applied to other image forming apparatuses or information processing apparatuses such as printers and copiers, thereby improving expandability. It is possible.

In this embodiment, an application execution environment installed in the MFP, such as a Java (registered trademark) virtual machine environment, is assumed. However, this function may be realized in a so-called simulator or emulator disposition execution environment. .
This makes it possible to apply to software development including application evaluation (debugging) and the like.

Furthermore, the present embodiment may be applied to a database application that handles long records.
In a database system, generally, as the number of records increases, it takes time to access the database, and the impact on resources and the system increases accordingly. This potentially increases the possibility of system failure and increases the risk of failure. Also, if the system status changes after introduction, there is still a possibility of causing problems in the future even if the application repeats the same operation pattern.
In such a case, by introducing the failure prevention method and program of the present invention, it is possible to collect the improvement information by the log function or the like and prevent the influence on the entire system from being affected and not to impair the productivity.

  The present invention can be suitably used for an information processing apparatus in which an OS that provides an API is incorporated.

1 is a block diagram showing an overall configuration of an MFP according to an embodiment of the present invention. 1 is a block diagram showing a configuration of an MFP service unit 1 that is a main component unit of an MFP according to an embodiment of the present invention. FIG. 6 is a flowchart showing an operation procedure related to error learning in the MFP according to the embodiment of the present invention. 6 is a flowchart illustrating a protection operation procedure based on a learning result in the MFP according to an embodiment of the present invention. 6 is a description example showing pattern data on an actual program in the MFP according to the embodiment of the present invention. It is a block diagram which shows the structure of the MFP service part 1 which is the main structure part of MFP which concerns on other embodiment of this invention. FIG. 10 is an explanatory diagram for explaining a problem of a conventional MFP.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 MFP service part 2 MFP main part 3 Application part 10 Pattern detection mechanism 11 Pattern confirmation mechanism 12 Pattern storage mechanism 13 Pattern storage part 14 "Provided function" mechanism 15 Error response formation mechanism 16 Application management mechanism 17 Application identification mechanism

Claims (5)

A function providing means for providing a corresponding function in response to a call request from an application;
Pattern detection means for detecting a call pattern constituting a call request from an application;
An error detection means for detecting a malfunction related to the provided function;
Call request storage means for storing the call pattern related to a call request for a function in which a malfunction is detected;
Collation means for collating the call pattern detected by the pattern detection means with the call pattern stored by the call request storage means;
If the collation matches, a function providing restriction unit that does not provide the corresponding function to the calling application;
Equipped with a,
The call request storage means includes
When installation of a new application occurs, all the pattern data constituting the call request related to the new application is stored for a predetermined period, and the process related to each pattern data does not cause a problem. electrical equipment which is characterized that you erase the record. Wherein when the verification by the verification means matches the electrical apparatus according to claim 1, wherein the relative calling application includes a dummy signal returning means for returning a predetermined dummy signal. The function providing means is:
In response to a call request from an application, a predetermined function is provided via a corresponding application program interface.
The function provision limiting means is
The electric device according to claim 1 or 2, wherein when the collation in the collating unit is coincident, a predetermined function is not provided via a corresponding application program interface. A failure prevention method for preventing a failure caused by misuse of a function,
Providing a corresponding function in response to a call request from an application;
Detecting a call pattern that constitutes a call request from an application;
Detecting a malfunction related to the provided function;
Storing the call pattern related to a call request for a function in which a defect is detected;
Matching the call pattern detected in the step of detecting the pattern with the stored call pattern ;
When said collation is matched, possess a step that does not provide corresponding functions to the calling application, and
Storing the calling pattern comprises:
When installation of a new application occurs, all the pattern data constituting the call request related to the new application is stored for a predetermined period, and the process related to each pattern data does not cause a problem. A failure prevention method comprising the step of erasing a record . In an electrical device that executes an application using a predetermined function, a failure prevention program for preventing a failure caused by misuse of the function,
A computer constituting the electrical device;
Function providing means for providing a corresponding function in response to a call request from an application,
Pattern detection means for detecting a call pattern constituting a call request from an application;
An error detection means for detecting a malfunction related to the provided function;
Call request storage means for storing the call pattern related to a call request for a function in which a failure is detected;
Collation means for collating the call pattern detected by the pattern detection means with the call pattern stored by the call request storage means;
When the collation matches, the corresponding function is not provided to the calling application, and the function providing restriction means is not provided ,
The call request storage means;
When installation of a new application occurs, all the pattern data constituting the call request related to the new application is stored for a predetermined period, and the process related to each pattern data does not cause a problem. A failure prevention program for functioning as a means for erasing records .

Images