JP6194496B2 - Information processing apparatus, information processing method, and program - Google Patents

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

  For example, in Patent Document 1, after FPGA configuration is completed, fixed information that does not change except when a soft error occurs after configuration of the FPGA is read from the JTAG port of the FPGA, and the read fixed information has a soft error. An FPGA soft error correction method is disclosed, comprising the step of detecting whether an error has occurred and correcting the error using the JTAG port if an error has occurred.

  Patent Document 2 discloses a plurality of logic elements, a first memory that stores connection information that defines a connection relationship between the plurality of logic elements, a second memory that stores the connection information, and the first memory. The first arithmetic circuit formed by a plurality of first logic elements based on the connection information stored in the memory and the plurality of second logic elements formed by the connection information stored in the second memory. A second arithmetic circuit, a comparison circuit that outputs a signal indicating whether the two pieces of input data match or not, and the first data input to each of the first arithmetic circuit and the two arithmetic circuits When the signal output from the comparison circuit using the output data of the first arithmetic circuit and the output data of the second arithmetic circuit for the two as the two data indicates a mismatch, each of the first memory and the second memory A memory writing circuit for writing the connection information, output data of the third arithmetic circuit formed by the plurality of first logic elements by writing the connection information, and the plurality of second by writing the connection information. When the comparison circuit compares the output data of the fourth arithmetic circuit formed by the logic element as the two data, and the second data is input to each of the third arithmetic circuit and the fourth arithmetic circuit. And a determination circuit for determining whether or not the signal has changed from a non-matching state to a matching state.

JP 2005-235074 A JP2015-119359A

  An object is to provide a highly reliable information processing system.

  The information processing apparatus according to the present invention includes a reconfigurable resource that is a hardware resource capable of reconfiguring a predetermined function, a determination unit that determines whether the own device is an active system or a standby system, and the determination And a reconstructing unit that reconstructs the predetermined function for the reconfigurable resource at a predetermined timing when the unit determines that the system is a standby system.

  Preferably, the reconfiguration unit periodically causes the reconfigurable resource in which a predetermined function is configured to reconstruct the same function.

  Preferably, the apparatus further includes a sign detection unit that detects a sign that the own device is switched from the standby system to the active system, and the reconstruction unit detects that the sign detection unit detects a sign that the standby system is switched from the standby system to the active system. , Causing the reconfigurable resource in which a predetermined function is constructed to reconstruct the same function.

  Preferably, the rebuilding unit prohibits periodic rebuilding when the determination unit determines that the own device is an active system.

  Preferably, when the reconfiguration of the function for the reconfigurable resource by the reconfigurable unit fails, the apparatus further includes an abnormality notifying unit for notifying an abnormality of the hardware device including the reconfigurable resource.

  Preferably, the reconfigurable resource is a reprogrammable circuit, and the reconfigurable unit reconfigures the predetermined function on the reprogrammable circuit.

  Preferably, the reconfigurable resource is an encryption card in which an encryption processing function is constructed, and the reconstruction unit constructs an encryption processing function for a reprogrammable circuit of the encryption card. Reload the code for

  The information processing method according to the present invention includes a determination step for determining whether the own apparatus is an active system or a standby system, and a predetermined timing at a predetermined timing when it is determined in the determination step that the apparatus is a standby system. A restructuring step of restructuring the predetermined function for a reconfigurable resource that is a hardware resource capable of reconfiguring the function.

  The program according to the present invention has a determination step for determining whether the own device is an active system or a standby system, and a predetermined function at a predetermined timing when it is determined in the determination step that the system is a standby system. The computer is caused to execute a restructuring step of reconfiguring the predetermined function on a reconfigurable resource that is a hardware resource that can be reconfigured.

  A highly reliable information processing system can be provided.

1 is a diagram illustrating a hardware configuration of a network communication system 1 including a network device 10. FIG. 2 is a diagram illustrating a hardware configuration of a network device 10. FIG. 2 is a diagram illustrating an example of a part of functional blocks of a network device 10. FIG. 3 is a diagram illustrating an example of management of duplex information of a network device 10. FIG. It is a flowchart explaining an encryption card recovery process (S10). It is a figure which illustrates the hardware constitutions of the network communication system 1 in the modification 1. It is a figure which illustrates a part of functional block of network device 10 in modification 1. It is a flowchart explaining the encryption card recovery process (S20) in the modification 1.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a diagram illustrating a hardware configuration of a network communication system 1 including a network device 10.
As illustrated in FIG. 1, the network communication system 1 includes a plurality of network devices 10 and a network switch 20 that connects the network devices 10.
The network device 10 is a network device used by connecting to a network. The network device 10 is an example of an information processing device according to the present invention.
For example, the network device 10 is connected to a LAN via a LAN cable and a network switch 20 and has a bandwidth control function, a firewall function, and the like, and is redundant with other network devices 10 to provide fault tolerance through a redundant configuration. It is increasing.
The network device 10A of this example switches to the standby network device 10B when an abnormality occurs in the network device 10A during operation. Further, the network device 10A of this example may be switched to the standby network device 10B during communication.

FIG. 2 is a diagram illustrating a hardware configuration of the network device 10.
As illustrated in FIG. 2, the network device 10 includes a CPU 100, a memory 102, a plurality of slots 104, a south bridge 106, a hard disk drive 108, a CF 110, and a DVD drive 112.
The CPU 100 is a central processing unit. For example, the CPU 100 is a multi-core processor including a plurality of cores. The CPU 100 in this example has 8 cores.
The memory 102 is, for example, a semiconductor memory, is connected to the CPU 100, and functions as a main storage device.
The slot 104 is an expansion slot, and the encryption card 120 or the like is inserted into the slot 104 of this example.
The south bridge 106 is an IC chip that connects, for example, a SATA bus. In this example, a hard disk drive 108, a CF 110, and a DVD drive 112 are connected to the south bridge 106. For example, the CF 110 is connected to a memory.
In addition, the network device 10 has hardware resources that can reconstruct a predetermined function. For example, the reconfigurable resource is a reprogrammable circuit. In this example, a mode in which the reconfigurable resource is the encryption card 120 in which the encryption processing function is configured will be described as a specific example. The encryption card 120 may be realized by an FPGA (Field-Programmable Gate Array).

FIG. 3 is a diagram illustrating a part of functional blocks of the network device 10.
As illustrated in FIG. 3, an operation management program 30 is installed in each of the active network device 10A and the standby network device 10B of this example. In this example, the operation management program 30 installed in the network device 10B will be described as a specific example.
The operation management program 30 includes a duplex management unit 350, a determination unit 360, a reconstruction unit 370, and a hardware abnormality notification unit 380 as part of the functional blocks of the encryption card 120.
Part or all of the operation management program 30 may be realized by hardware such as an FPGA, or may be realized by partially borrowing an OS (Operating System) function.

  In the operation management program 30, the duplex management unit 350 manages duplex information of the network measure 10B. For example, the duplex management unit 350 manages information on whether the network device 10B is an active system or a standby system in cooperation with the network device 10A. The duplex management unit 350 of this example manages information that the network device 10B is switched from the standby system to the active system when the network device 10A receives a notification of switching the network device 10A from the active system to the standby system.

  The determination unit 360 determines whether the own device is an active system or a standby system. The determination unit 360 of this example determines whether the own device is an active system or a standby system based on the information acquired from the duplex management unit 350.

When the determination unit 360 determines that the reconfiguration unit 370 is a standby system, the reconfiguration unit 370 reconstructs a predetermined function for a reconfigurable resource at a predetermined timing.
For example, when the determination unit 360 determines that the reconfiguration unit 370 is a standby system, the reconfiguration unit 370 periodically causes the reconfigurable resource in which a predetermined function is configured to reconfigure the same function. More specifically, the reconfigurable resource is a reprogrammable circuit, and the reconfiguration unit 370 reconstructs a predetermined function on the reprogrammable circuit. In addition, the rebuilding unit 370 prohibits periodic rebuilding when the determining unit 360 determines that the own device is an active system.
The reconstruction unit 370 of this example causes the encryption card to rebuild the same encryption processing function once a day. The reconstructed function may be the entire encryption processing function or a part thereof. The reconstruction unit 370 also resets the encryption card and reloads the microcode as the reconstruction process. Here, the microcode is a program for realizing an encryption processing function. The microcode reloaded in the standby network device 10B may be the same as the program used in the active system or may be a program having the same function as the program used in the active system or the standby system. . The microcode is reloaded via the CF 110.

In the standby system, the hardware abnormality notification unit 380 notifies the abnormality of the hardware device including the reconfigurable resource when the reconfiguration of the function for the reconfigurable resource by the reconfiguration unit 370 fails.
For example, the hardware abnormality notification unit 380 outputs a warning (log, alarm LED display, LED panel display, etc.) indicating a hardware failure when the periodic recovery process has failed in the standby system. Here, the recovery process is, for example, encryption card reset and microcode reload by the reconstruction unit 370.
As a result, a hardware failure can be detected in advance and maintenance replacement can be performed systematically.

FIG. 4 is a diagram illustrating management of duplex information of the network device 10.
As illustrated in FIG. 4, the active network device 10 </ b> A and the standby network device 10 </ b> B respectively determine “device duplication management component” and “standby system”, and if the standby system, the encryption card reset processing call application is “Calling script”, “encryption card reset process calling application”, and “encryption card reset & microcode reload thread”. In this example, a “device duplication management component” of the standby network device 10B will be described as a specific example. Here, the “device duplication management component” includes at least information indicating whether the network device 10B is an active system or a standby system. The duplex management unit 350 stores information on whether the network device 10B is an active system or a standby system in the device duplex management component in cooperation with the network device 10A. For example, when receiving a notification from the network device 10A that the network device 10A is switched from the active system to the standby system, the duplex management unit 350 sends information indicating that the network device 10B is switched from the standby system to the active system to the device duplex management component. Store. The determination unit 360 acquires information about whether the network device 10B is a standby system or an active system from the apparatus duplication management component.

FIG. 5 is a flowchart for explaining the encryption card recovery process (S10).
As illustrated in FIG. 5, in step 100 (S100), the operation management program 30 executes “a script that determines whether or not it is a standby system and calls a“ encryption card reset process calling application ”if it is a standby system”. The determination unit 360 executes a command for acquiring the status of the network management device 10 from the device duplication management component every day, and checks whether 1 (standby system) is returned in the return code, so that the own device waits. Determine whether the system is active or active If it is not the standby system (S100: No), the determination unit 360 waits until it becomes the standby system. If it is the standby system (S100: Yes), the determination unit 360 proceeds to S105. Further, when the operation management program 30 is a standby system, it creates a backup of the internal log.

  In step 105 (S105), the operation management program 30 executes the “encryption card reset process call application” that instructs the encryption driver to reset the encryption card. The “encryption card reset processing call application” executes ioctl that performs encryption driver reset processing. Here, the cryptographic driver is a program for controlling the cryptographic card 120. Further, the operation management program 30 outputs the execution result to an internal log.

  In step 110 (S110), the reconstruction unit 370 sets the reload flag to 1, and wakes up “encryption card reset & microcode reload thread”.

  In step 115 (S115), the reconstruction unit 370 proceeds to the processing of S130 when the reload flag is 0 (step 115: No), and when the reload flag is 1 (step 115: Yes), Transition to processing.

  In step 120 (S120), the reconstruction unit 370 performs “encryption card reset & microcode reload process”.

  In step 125 (S125), the reconstruction unit 370 sets the reload flag to 0.

  In step 130 (S130), the restructuring unit 370 passes the execution right to another thread or process, and the standby network device 10 enters the sleep state (Schedule ()).

As described above, the network device 10 of the present embodiment can provide a highly reliable information processing device that recovers an abnormality in advance.
Conventionally, in a configuration in which the network device 10 is duplicated, when a hardware abnormality occurs in the operational system, the network apparatus 10 is switched to the standby system. At that time, an abnormality (microcode parity error) occurred in the encryption card 120 in the network device 10 that was the standby system, and the system stopped and both systems went down, which could affect the operation of the network device 10. In addition, microcode parity errors are generally considered to be caused by the fact that bits such as memory are inverted due to the influence of alpha rays generated from cosmic rays and device packaging materials. As time passes, the probability of occurrence increases. Therefore, it is necessary to avoid the abnormality of the encryption card in the standby system in advance and periodically.
However, since encryption communication is not performed in the standby system, even if there is an abnormality in the encryption card 120, it cannot be detected in advance. It is also possible to detect anomalies by performing several types of cryptographic communication on a trial basis, but it is difficult to test all communication patterns, and the memory on the cryptographic card 120 that has a microcode parity error is stored in the memory. Since it cannot be detected unless it is accessed, its effectiveness is questionable. In addition, the encryption card 120 itself may not have a function of periodically self-diagnosis or self-repair for a microcode parity error or an encryption card abnormality.
Therefore, in this example, the encryption card 120 is periodically reset in the standby system, and the microcode is reloaded (recovery process). As a result, if a temporary error of the encryption card 120 such as a microcode parity error (microcode breakage) has occurred in the standby system, the encryption card must be switched to the active system before switching to the active system by switching to redundant system. By recovering only, it is possible to reduce the standby time of the standby system and reduce the possibility of both systems going down. In addition, it is possible to carry out without affecting the business by carrying out in the standby system instead of the active system. Furthermore, when the cryptographic card 120 is configured with an FPGA, the self-diagnostic tool provided by the FPGA manufacturer may be only a partial check, but in this example, all programs can be read by reading the program. Is updated to the appropriate state. In addition, the operability of the network device 10 can be ensured even if there is no self-diagnosis tool in FPGA or SDK (Software Development Kit). Further, the FPGA may not have a function of referring to data that has been read once. Even in this case, the operability of the network device 10 can be ensured. For example, the operability of the network device 10 can be ensured even with a device (FPGA) whose normality such as a checksum of the program cannot be confirmed. In addition, there is no guarantee that the operation of all circuits can be verified with a check that performs several types of cryptographic communication on a trial basis, and there is a possibility that it will become abnormal in a specific process. Therefore, it is possible to guarantee the data.

[Modification 1]
In the above embodiment, when the standby network device 10 determines that the own device is the standby system, the reconfigurable resource in which the predetermined function is constructed is reconstructed at the specified timing. However, in the first modification, when the standby network apparatus 10 detects a sign of switching from the standby system to the active system, a mode in which the same function is reconfigured in the reconfigurable resource will be described.

FIG. 6 is a diagram illustrating a network communication system 1 in a modified example.
As illustrated in FIG. 6, the network communication system 1 includes a plurality of network devices 10 and a network switch 20 that connects the network devices 10.
The network device 10 is a network device used by connecting to a network. The network device 10 is an example of an information processing device according to the present invention. The network device of this example is connected to the LAN via the LAN cable and the network switch 20 and has a bandwidth control function, a firewall function, etc., and is redundant with other network devices 10 to provide fault tolerance through a redundant configuration. It is increasing. Specifically, when a survival monitoring packet is transmitted / received between the active network device 10A and the standby network device 10B and the survival monitoring packet is not transmitted / received for a predetermined period of time, an indication of switching from the standby system to the active system The standby network apparatus 10B causes the reconfigurable resource in which the predetermined function is constructed to reconstruct the same function.

  For example, in the network communication system 1 of this example, a survival monitoring packet is transmitted between two network devices 10 at intervals of 1 second, and if the survival monitoring packet is transmitted for 3 seconds or more, an error is detected by duplex monitoring. The operation / standby network device 10 is set to be switched. In this case, if the transmission of the survival monitoring packet is delayed for 2 seconds, it is determined as a sign that the standby system is switched to the active system, and the standby network apparatus 10B has the same function as the encryption card having the encryption processing function built therein. To rebuild.

FIG. 7 is a diagram illustrating a part of functional blocks of the network device 10 according to the first modification.
As illustrated in FIG. 7, an operation management program 40 is installed in each of the active network device 10A and the standby network device 10B of this example. In this example, the operation management program 40 installed in the network device 10B will be described as a specific example.
The operation management program 40 includes a duplex management unit 450, a determination unit 460, a reconstruction unit 470, and a sign detection unit 480 as functional blocks of the encryption card.
Part or all of the operation management program 40 may be realized by hardware such as FPGA, or may be realized by borrowing a part of the function of the OS.

  In the operation management program 40, the duplex management unit 450, the determination unit 460, and the reconstruction unit 470 are the same as the duplex management unit 350, the determination unit 360, and the reconstruction unit 370 in the operation management program 30 of the above embodiment. is there.

The sign detection unit 480 detects a sign that the own device switches from the standby system to the active system.
The sign detection unit 480 of the present example determines that the sign of switching from the standby system to the active system when the transmission of the survival monitoring packet is delayed for 2 seconds. When the sign detection unit 480 detects a sign of switching from the standby system to the active system, the reconstruction unit 470 performs reset of the encryption card and reload of the microcode. The microcode reloaded in the standby network device 10B may be the same as the program used in the active system or may be a program having the same function as the program used in the active system or the standby system. .
Further, the sign detection unit 480 may determine that the sign detection unit 480 is a sign of switching from the standby system to the active system when a notification of hardware performance degradation or the like is received from another device.

FIG. 8 is a flowchart for explaining the encryption card recovery process (S20).
As illustrated in FIG. 8, in step 200 (S200), the operation management program 40 determines whether or not the system is a standby system, and if it is a standby system, executes a script that calls an “encryption card reset process calling application”. The determination unit 460 executes a command for acquiring the state of the network management device 10 from the device duplication management component, and checks whether 1 (standby system) is returned in the return code, so that the own device is the standby system or the active system. To determine. If it is not the standby system (S200: No), the determination unit 460 waits until it becomes the standby system. If it is the standby system (S200: Yes), the determination unit 460 proceeds to S205. Further, when the operation management program 40 is a standby system, it creates a backup of the internal log.

  In step 205 (S205), when the sign detection unit 480 does not detect a sign that the own apparatus switches from the standby system to the active system (S205: No), the sign detection unit 480 waits until the sign is detected, and the own apparatus detects from the standby system to the active system. When a sign of switching to is detected (S205: Yes), the process proceeds to S210.

  In step 210 (S210), the operation management program 40 executes an “encryption card reset process calling application” that instructs the encryption driver to reset the encryption card. The “encryption card reset processing call application” executes ioctl that performs encryption driver reset processing. Here, the cryptographic driver is a program for controlling the cryptographic card 120. Further, the operation management program 40 outputs the execution result to an internal log.

  In step 215 (S215), the reconstruction unit 470 sets the reload flag to 1, and wakes up “encryption card reset & microcode reload thread”.

  In step 220 (S220), the reconstruction unit 470 proceeds to the process of S235 when the reload flag is 0 (step 220: No), and when the reload flag is 1 (step 220: Yes), the reconstruction unit 470 Transition to processing.

  In step 225 (S225), the reconstruction unit 470 performs “encryption card reset & microcode reload process”.

  In step 230 (S230), the reconstruction unit 470 sets the reload flag to 0.

  In step 235 (S235), the restructuring unit 470 passes the execution right to another thread or process, and the standby network device 10 enters the sleep state (Schedule ()).

  As described above, the network device 10 of the first modification is less wasteful in that recovery processing is performed when a sign is detected with respect to the periodic recovery processing of the above embodiment, and the standby system is switched to the active system. When the network device 10 is down, the possibility of going down can be reduced.

DESCRIPTION OF SYMBOLS 1 ... Network communication system 10 ... Network apparatus 20 ... Network switch 20
100 ... CPU
DESCRIPTION OF SYMBOLS 102 ... Memory 104 ... Slot 120 ... Encryption card 350 ... Duplex management part 360 ... Determination part 370 ... Reconstruction part 380 ... Hardware abnormality notification part 450 ... Duplex management part 460 ... Determination part 470 ... Reconstruction part 480 ... Predictive detection Part

Claims (8)

A reconfigurable resource that is a hardware resource capable of reconfiguring a predetermined function;
A determination unit for determining whether the own machine is an active system or a standby system;
Wherein when it is determined that the standby system by the determination unit, the default timing, to the reconfigurable resources, possess a reconstruction unit for reconstructing the predetermined function,
The information reconstructing unit that causes the reconfigurable resource in which a predetermined function is constructed to reconstruct the same function periodically . A reconfigurable resource that is a hardware resource capable of reconfiguring a predetermined function;
A determination unit for determining whether the own machine is an active system or a standby system;
A reconstruction unit that reconstructs the predetermined function with respect to the reconfigurable resource at a predetermined timing when the determination unit determines that the system is a standby system;
A sign detection unit that detects a sign that the machine switches from the standby system to the active system ;
Have
The reconstructing unit causes the reconfigurable resource in which a predetermined function is constructed to reconstruct the same function when the sign detecting unit detects a sign that the standby system is switched to the active system. The information processing apparatus according to claim 1 , wherein the reconfiguration unit prohibits periodic reconfiguration when the determination unit determines that the own device is an active system. The abnormality notification unit according to claim 1, further comprising: an abnormality notification unit configured to notify an abnormality of a hardware device including the reconfigurable resource when the reconfiguration of the function for the reconfigurable resource by the reconfiguration unit fails. Information processing device. The reconfigurable resource is a reprogrammable circuit;
The information processing apparatus according to claim 1, wherein the reconfiguration unit reconfigures the predetermined function on a reprogrammable circuit. The reconfigurable resource is an encryption card with an encryption processing function constructed,
The information processing apparatus according to claim 5 , wherein the reconstructing unit reloads a code for constructing an encryption processing function in a reprogrammable circuit of the encryption card. A determination step for determining whether the own machine is an active system or a standby system;
A restructuring step of periodically restructuring the same function with respect to a reconfigurable resource that is a hardware resource capable of reconfiguring a predetermined function when it is determined as a standby system in the determination step; An information processing method comprising: A determination step for determining whether the own machine is an active system or a standby system;
A restructuring step of periodically restructuring the same function with respect to a reconfigurable resource that is a hardware resource capable of reconfiguring a predetermined function when it is determined as a standby system in the determination step; A program that runs a computer.

Images