JP7320415B2 - Processing device and start-up method - Google Patents

Description

TECHNICAL FIELD Embodiments of the present invention relate to a processing apparatus and a start-up method.

A technology that stores backup data of software such as system software related to the operation of a device in advance, and writes back the data using the backup data if there is an error such as tampering or damage to the software data when the device is started. There is However, if there are many data errors, writing back the data takes time and it takes time before the device is ready for use.

JP 2012-252701 A

The problem to be solved by the embodiments of the present invention is to provide a processing device and a start-up method that can shorten the time until the software becomes ready for use when there is an error in software data.

A processing device according to an embodiment includes a first storage area, a second storage area, and a processing unit. The first storage area stores one or more pieces of software including first system software. A second storage area stores one or more pieces of software including second system software that is a copy of the first system software. The processing unit, when detecting an error in the data of the software in the first storage area, obtains an expected time required to correct the error. If the estimated time is less than a threshold, the processing unit corrects the error before activating the first system software. The processing unit activates the second system software instead of the first system software if the estimated time is equal to or greater than the threshold.

FIG. 2 is a block diagram showing an example of the main circuit configuration of the processing apparatus according to the first embodiment and the second embodiment; FIG. 2 is a flowchart showing an example of processing according to the first embodiment by a processor 11 in FIG. 1; FIG. 4 is a flowchart showing an example of processing according to the second embodiment by a processor 11 in FIG. 1; FIG. 11 is a block diagram showing an example of a processing system according to a third embodiment and an example of a main circuit configuration of each component included in the processing system; FIG. 5 is a flowchart showing an example of processing according to the third embodiment by a processor 11 of the processing device shown in FIG. 4; FIG. FIG. 5 is a flowchart showing an example of processing according to the third embodiment by the processor 11 of the server device shown in FIG. 4; FIG.

Hereinafter, processing apparatuses according to some embodiments will be described with reference to the drawings. In addition, each drawing used for description of the following embodiment may abbreviate|omit a structure for description. Further, in each drawing and the following description, the same reference numerals denote similar elements [First Embodiment]
FIG. 1 is a block diagram showing an example of the main circuit configuration of a processing device 10 according to the first embodiment.
The processing device 10 is a device operated by a program. The processing device 10 is, for example, a PC (personal computer), a server, a POS (point of sale) terminal, office equipment, an industrial computer, an embedded device, an IoT device, or the like. The processing device 10 includes, as an example, a processor 11 , a ROM (read-only memory) 12 , a RAM (random-access memory) 13 , an auxiliary storage device 14 , a communication interface 15 , an input device 16 and an output device 17 . A bus 18 or the like connects these units.

The processor 11 corresponds to the central portion of a computer that performs processing such as calculations and control necessary for the operation of the processing device 10 . The processor 11 controls each part to implement various functions of the processing device 10 based on programs such as firmware, system software, and application software stored in the ROM 12 or the auxiliary storage device 14 . Note that part or all of the program may be incorporated in the circuit of the processor 11 . The processor 11 includes, for example, a CPU (central processing unit), MPU (micro processing unit), SoC (system on a chip), DSP (digital signal processor), GPU (graphics processing unit), ASIC (application specific integrated circuit), Examples include PLDs (programmable logic devices) and FPGAs (field-programmable gate arrays). Alternatively, processor 11 is a combination of several of these.

The ROM 12 corresponds to the main memory of a computer with the processor 11 as its core. The ROM 12 is a non-volatile memory exclusively used for reading data. The ROM 12 stores, for example, firmware among the above programs. The firmware is, for example, BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface). In addition, the ROM 12 stores data or various setting values used by the processor 11 to perform various processes.

The RAM 13 corresponds to the main memory of a computer having the processor 11 as its core. The RAM 13 is a memory used for reading and writing data. The RAM 13 is used as a so-called work area for storing data temporarily used when the processor 11 performs various processes. RAM 13 is typically a volatile memory.

The auxiliary storage device 14 corresponds to an auxiliary storage device of a computer in which the processor 11 is central. The auxiliary storage device 14 is, for example, an EEPROM (electric erasable programmable read-only memory), HDD (hard disk drive), flash memory, or the like. The auxiliary storage device 14 stores system software such as an OS (operating system) and application software among the above programs. In addition, the auxiliary storage device 14 stores data used by the processor 11 to perform various processes, data generated by the processes performed by the processor 11, various setting values, and the like.

The auxiliary storage device 14 is, for example, a self-encrypting drive (SED) conforming to the Opal specification. Therefore, the auxiliary storage device 14 stores encrypted data.

Storage areas of the auxiliary storage device 14 include a first area 141 , a second area 142 and a third area 143 . Note that the first area 141, the second area 142, and the third area 143 are separated by ranges, for example.

The first area 141 is a storage area for storing first data. The first data includes, for example, first system software, first application software, and first various data. The first system software is system software data including an OS installed in the processing device 10 . The first application software is data of application software installed in the processing device 10 . Note that the first data includes 0, 1, or a plurality of first application software. The first various data includes other data used in the processing device 10 and the like.
Therefore, the first area 141 is an example of a first storage area that stores one or more pieces of software including the first system software.

In the first area 141, for example, the first encryption key for encrypting and decrypting the first data is not encrypted. Therefore, the data stored in the first area 141 can be freely read.

A second area 142 is a storage area for storing second data. The second data is data obtained by copying the first data, and is backup data. The second data includes, for example, second system software, second application software, and second various data. The second system software is data obtained by copying the first system software. Therefore, the second system software is system software including the OS installed in the processing device 10 . The second application software is data obtained by copying the first application software. Therefore, the second application software is data of application software installed in the processing device 10 . The second various data are data obtained by copying the first various data.
Thus, second area 142 is an example of a second storage area that stores one or more pieces of software, including second system software that is a copy of first system software.

Note that the processor 11 periodically copies the first data to the second area 142, for example. Also, the processor 11 copies the first data to the second area 142 based on, for example, the details of the operation by the operator of the processing device 10 . Also, the processor 11 copies the first data to the second area 142 in response to new software being installed in the first area 141, for example. Also, the processor 11 copies the first data to the second area 142, for example, when the software installed in the first area 141 is updated.
The second area 142 is encrypted with, for example, a second encryption key for encrypting and decrypting the second data. Therefore, the data stored in the second area 142 cannot be read or written unless the second encryption key can be decrypted. That is, the second area 142 is in a state where data reading and writing is restricted to authorized users only. Note that the processing device 10 can decrypt the second encryption key. For example, the processing device 10 stores a password for decrypting the second encryption key.

A third area 143 is a storage area for storing repair data. Repair data is data for repairing data such as the first system software and the first application software.
Therefore, the third area 143 is an example of a third storage area that stores repair data.

In the third area 143, for example, a third encryption key for encrypting and decrypting third data is encrypted. Therefore, the data stored in the third area 143 cannot be read or written unless the third encryption key can be decrypted. That is, the third area 143 is in a state where data reading and writing is restricted to authorized users only. Note that the processing device 10 can decrypt the third encryption key. For example, the processing device 10 stores a password for decrypting the third encryption key.
Note that the third encryption key and the second encryption key may be common. Also, the second area 142 and the third area 143 may be encrypted by other methods. Also, the first encryption key may be encrypted in the first area 141 as well as in the second area 142 and the third area 143 . Also, the first to third areas 141 to 143 do not have to be encrypted.

Programs stored in the ROM 12 or the auxiliary storage device 14 include programs for executing processes described later. As an example, the processing device 10 is transferred to an administrator or the like of the processing device 10 with the program stored in the ROM 12 or the auxiliary storage device 14 . However, the processing device 10 may be transferred to the administrator or the like without the program stored in the ROM 12 or the auxiliary storage device 14 . Also, the processing device 10 may be transferred to the administrator or the like in a state in which a program other than the program is stored in the ROM 12 or the auxiliary storage device 14 . Then, a program for executing the processing described later may be separately transferred to the administrator or the like, and written to the ROM 12 or the auxiliary storage device 14 under the operation of the administrator or the serviceman. Transfer of the program at this time can be realized by recording it on a removable storage medium such as a magnetic disk, magneto-optical disk, optical disk, or semiconductor memory, or by downloading it via a network or the like.

The communication interface 15 is an interface for the processing device 10 to communicate via a network or the like.

The input device 16 receives an operation by an operator of the processing device 10 . The input device 16 is, for example, a keyboard, keypad, touchpad or mouse.

The output device 17 displays a screen for notifying the operator of the processing device 10 of various information. The output device 17 is, for example, a display such as a liquid crystal display or an organic EL (electro-luminescence) display. A touch panel can also be used as the input device 16 and the output device 17 . That is, the display panel provided with the touch panel can be used as the output device 17 and the touch pad provided with the touch panel can be used as the input device 16 .

The bus 18 includes a control bus, an address bus, a data bus, etc., and transmits signals sent and received by each part of the processing device 10 .

The operation of the processing device 10 according to the first embodiment will be described below with reference to FIG. It should be noted that the contents of the processing in the following description of the operation are examples, and various processing that can obtain similar results can be used as appropriate. FIG. 2 is a flowchart showing an example of processing by the processor 11 of the processing device 10. As shown in FIG. The processor 11 executes this processing based on a program stored in the ROM 12, the auxiliary storage device 14, or the like, for example.

The processor 11 of the processing device 10 starts the processing shown in FIG. 2 when the power of the processing device 10 is turned on, for example.
In ACT 11 of FIG. 2, the processor 11 starts executing the firmware. In the first embodiment, the processor 11 executes the processing of ACT12 to ACT21 described below, for example, by firmware or software operating on firmware.

In ACT 12, the processor 11 checks whether the data of the first system software and the first application software stored in the first area 141 are correct. Data errors are caused by, for example, falsification or damage of data.

In ACT 13, the processor 11 determines whether or not an error has been detected in the data of at least one of the first system software and the first application software. If the processor 11 detects an error in the data, it determines Yes in ACT13 and proceeds to ACT14.

In ACT 14, the processor 11 obtains the expected time required for data restoration to eliminate the data error.
As described above, the processor 11 performs the processing of ACT13 and ACT14, and functions as a processing unit that, when an error is detected in the software data in the first area 141, obtains the estimated time required to correct the error.

In ACT 15, processor 11 determines whether or not to perform data restoration. For example, if the estimated time obtained in ACT14 is less than the threshold T, the processor 11 determines to execute data recovery. Then, if the estimated time is equal to or greater than the threshold T, the processor 11 does not determine to execute data recovery. If processor 11 determines to perform data restoration, it determines Yes in ACT15 and proceeds to ACT16.

In ACT 16 processor 11 performs data repair using the repair data stored in third area 143 . A well-known method can be used for the repair method.

After processing ACT16, processor 11 proceeds to ACT17. If the processor 11 detects no error in the data, it determines No in ACT13 and proceeds to ACT17.
In ACT 17 processor 11 boots the first system software stored in first area 141 . After the processing of ACT17, the processor 11 ends the processing shown in FIG. Then, the processor 11 performs start-up processing of the booted first system software.
As described above, the processor 11 performs the processing of ACT15 to ACT17, and functions as a processing unit that, if the estimated time is less than the threshold T, corrects the error and then activates the first system software.

On the other hand, if the processor 11 does not determine to execute data restoration, it determines No in ACT15 and proceeds to ACT18.

In ACT 18, the processor 11 generates an image corresponding to the selection screen. Processor 11 then instructs output device 17 to display this generated image. In response to the display instruction, the output device 17 displays the selection screen.
The selection screen is a screen for allowing the operator of the processing device 10 to select whether to execute data restoration or start using the second data stored in the second area 142 . The selection screen includes the time obtained in ACT 14, an image for asking the operator whether to restore or start from backup, a restore button, and a backup start button. The repair button is a button that the operator scans when instructing the processing device 10 to perform data repair. The backup activation button is operated by the operator when instructing the processing device 10 to activate the system software using the second data, that is, the backup data. A character string is also a kind of image.

In ACT 19, the processor 11 determines whether or not an operation instructing data restoration has been performed. That is, the processor 11 determines whether or not a predetermined operation such as operating the repair button has been performed. The processor 11 determines No in ACT19 and proceeds to ACT20 if an operation instructing data restoration is not performed.

In ACT 20, the processor 11 determines whether or not an operation instructing activation using the backup data has been performed. That is, the processor 11 determines whether or not a predetermined operation such as operating backup startup has been performed. The processor 11 determines No in ACT 20 and returns to ACT 19 unless an operation instructing activation using the backup data is performed. Thus, the processor 11 repeats ACT 19 and ACT 20 until an operation instructing it to restore the data or an operation instructing it to start using backup data is performed.

The processor 11 determines Yes in ACT19 and advances to ACT16 if an operation instructing restoration of data is performed while in the standby state of ACT19 and ACT20.

The processor 11 determines Yes in ACT20 and proceeds to ACT21 if an operation instructing activation using backup data is performed while in the standby state of ACT19 and ACT20.

In ACT 21 processor 11 boots the second system software stored in second area 142 . After the processing of ACT21, the processor 11 ends the processing shown in FIG. Then, the processor 11 performs start-up processing of the booted second system software.
As described above, the processor 11 performs the processing of ACT15 and ACT21, and functions as a processing unit that activates the second system software instead of the first system software when the estimated time is equal to or greater than the threshold T.

If the data recorded in the first area 141 has an error, the processing device 10 of the first embodiment obtains the time required to restore the data. Then, if the time is equal to or greater than the threshold T, the processing device 10 of the first embodiment uses the data recorded in the second area 142 to activate the processing device 10 . Therefore, if the data recorded in the first area 141 has an error, the processor 10 of the first embodiment does not have enough time to recover the data because the processor 10 must be used immediately. Even if there is no such case, it can be started safely in a usable state.

When the data recorded in the first area 141 has an error, the processing device 10 of the first embodiment uses the repair data recorded in the third area 143 to restore the data. As a result, even if there is an error in the data recorded in the first area 141, the processing device 10 can be safely started by restoring the data.

In the processing device 10 of the first embodiment, the second area 142 and the third area 143 are encrypted. Therefore, the data recorded in the second area 142 and the third area 143 cannot be read or written from anything other than the processing device 10 . Therefore, the possibility that the data recorded in the second area 142 and the third area 143 will be falsified is low. Therefore, even if an error occurs in the data in the first area 141, the data stored in the second area 142 or the third area 143 can be used to start backup or restore the data. can be safely started.

[Second embodiment]
The processing apparatus 10 of the second embodiment will be described below. Since the configuration of the processing apparatus 10 of the second embodiment is the same as that of the first embodiment, description of the configuration is omitted.

The operation of the processing device 10 according to the second embodiment will be described below with reference to FIG. It should be noted that the contents of the processing in the following description of the operation are examples, and various processing that can obtain similar results can be used as appropriate. FIG. 3 is a flowchart showing an example of processing by the processor 11 of the processing device 10. As shown in FIG. The processor 11 executes this processing based on a program stored in the ROM 12, the auxiliary storage device 14, or the like, for example.

The processor 11 of the processing device 10 of the second embodiment executes the process shown in FIG. 3 instead of the process shown in FIG. 2 of the first embodiment.
The processor 11 of the processing device 10 starts the processing shown in FIG. 3 when the power of the processing device 10 is turned on, for example.
In the second embodiment, the processor 11 proceeds to ACT31 after processing ACT11 in FIG.
In ACT31, the processor 11 determines whether or not to start normally. If the boot setting is set to boot the first system software, the processor 11 determines to start normally. Then, if the boot setting is set to boot the second system software, the processor 11 determines that the backup boot is to be performed instead of the normal boot. Note that the boot setting is set to boot the first system software by default. If the processor 11 determines to start normally, it determines Yes in ACT31 and proceeds to ACT32.

In ACT 32 processor 11 boots normally. That is, processor 11 boots the first system software. Then, the processor 11 starts up the booted first system software up to an intermediate stage. Here, the processor 11 activates the first system software at least until the data error check is possible. After processing ACT32, processor 11 proceeds to ACT12. In the second embodiment, the processor 11 executes the processes of ACT12 to ACT20, ACT33 and ACT34 by the first system software or software operating on the first system software. Note that the processing may be performed by the first application software.

In the second embodiment, processor 11 proceeds to ACT33 after processing ACT16.
In ACT 33, the processor 11 restarts the activation of the first system software that has been activated partway through and completes the activation. After the processing of ACT33, the processor 11 ends the processing shown in FIG.
As described above, the processor 11 performs the processes of ACT16 and ACT33, and if the estimated time is less than the threshold T, it functions as a processing unit that corrects the error and then activates the first system software.

Further, in the second embodiment, the processor 11 advances to ACT34 if ACT20 determines Yes.
In ACT 34, the processor 11 sets the boot setting to boot the second system software.

In ACT 35 processor 11 restarts the processing unit. Along with this, the processor 11 terminates the processing shown in FIG. Then, the processor 11 starts executing the processing shown in FIG. 3 again.

Since the boot setting of the processor 11 is set to boot the second system software, the processor 11 performs backup startup. If the processor 11 determines to start backup, it determines No in ACT31 and proceeds to ACT36.
In ACT 36, the processor 11 is backed up. That is, processor 11 boots the second system software. The processor 11 then activates the booted second system software. Note that the processor 11 restores the boot setting to the setting for booting the first system software. After the processing of ACT36, the processor 11 ends the processing shown in FIG.
As described above, the processor 11 performs the processing of ACT15 and ACT34 to ACT36, and functions as a processing unit that activates the second system software instead of the first system software when the estimated time is equal to or greater than the threshold T. .

The processing apparatus 10 of the second embodiment can obtain the same effect as the processing apparatus 10 of the first embodiment.
Further, the processing device 10 of the second embodiment can cause an existing processing device to execute the processing shown in FIG. 3 by changing system software, installing application software, or the like.

[Third embodiment]
The processing system 1 of the third embodiment will be described below.
FIG. 4 is a block diagram showing an example of the main circuit configuration of the processing system 1 and the components included in the processing system 1. As shown in FIG.
The processing system 1 includes a processing device 10 and a server device 20 . Note that FIG. 4 shows one processing device 10 and one server device 20 . However, there may be a plurality of processing devices 10 and a plurality of server devices 20, respectively. However, in the following description, one processing device 10 and one server device 20 will be focused on.

The processing device 10 and the server device 20 are connected to the network NW. Network NW is a communication network typically including the Internet. The network NW is typically a communication network including a WAN (wide area network). The network NW may be a communication network including a private network such as an intranet. The network NW may be a communication network including a LAN (local area network).

Since the processing apparatus 10 of the third embodiment has the same configuration as the processing apparatuses 10 of the first and second embodiments, the description thereof is omitted.
However, in the third embodiment, the storage area of the auxiliary storage device 14 of the processing device 10 includes the first area 141 and the second area 142 and does not include the third area 143 .

The server device 20 includes a processor 21, a ROM 22, a RAM 23, an auxiliary storage device 24 and a communication interface 25, for example. A bus 26 or the like connects these units.

The processor 21 corresponds to a central portion of a computer that performs processing such as calculation and control required for the operation of the server device 20 . The processor 21 controls each part to realize various functions of the server device 20 based on programs such as firmware, system software, and application software stored in the ROM 22 or the auxiliary storage device 24 . Part or all of the program may be incorporated in the circuit of the processor 21. The processor 21 is, for example, CPU, MPU, SoC, DSP, GPU, ASIC, PLD, FPGA, or the like. Alternatively, processor 21 is a combination of several of these.

The ROM 22 corresponds to a main storage device of a computer having the processor 21 as its core. The ROM 22 is a non-volatile memory exclusively used for reading data. The ROM 22 stores, for example, firmware among the above programs. In addition, the ROM 22 stores data or various setting values used by the processor 21 to perform various processes.

The RAM 23 corresponds to a main memory device of a computer having the processor 21 as its core. The RAM 23 is a memory used for reading and writing data. The RAM 23 is used as a so-called work area for storing data temporarily used when the processor 21 performs various processes. RAM 23 is typically a volatile memory.

The auxiliary storage device 24 corresponds to an auxiliary storage device of a computer in which the processor 21 is central. The auxiliary storage device 24 is, for example, EEPROM, HDD, or flash memory. The auxiliary storage device 24 stores, for example, system software and application software among the above programs. In addition, the auxiliary storage device 24 stores data used by the processor 21 to perform various processes, data generated by the processes performed by the processor 21, various setting values, and the like.

The auxiliary storage device 14 also stores repair data. The repair data is the same data as the repair data stored in the third area 143 in the first and second embodiments.

Programs stored in the ROM 22 or the auxiliary storage device 24 include programs for executing processes described later. As an example, the server device 20 is transferred to an administrator of the server device 20 with the program stored in the ROM 22 or the auxiliary storage device 24 . However, the server device 20 may be transferred to the administrator or the like without the program stored in the ROM 22 or the auxiliary storage device 24 . Also, the server device 20 may be transferred to the administrator or the like in a state in which a program other than the program is stored in the ROM 22 or the auxiliary storage device 24 . Then, a program for executing the processing described later may be separately transferred to the administrator or the like, and written to the ROM 22 or the auxiliary storage device 24 under the operation of the administrator or the serviceman. Transfer of the program at this time can be realized by recording it on a removable storage medium such as a magnetic disk, magneto-optical disk, optical disk, or semiconductor memory, or by downloading it via a network NW or the like.

The communication interface 25 is an interface for the server device 20 to communicate via the network NW or the like.

The bus 26 includes a control bus, an address bus, a data bus, etc., and transmits signals exchanged with each part of the server device 20 .

The operation of the processing system 1 according to the embodiment will be described below with reference to FIGS. 5 and 6 and the like. It should be noted that the contents of the processing in the following description of the operation are examples, and various processing that can obtain similar results can be used as appropriate. FIG. 5 is a flowchart showing an example of processing by the processor 11 of the processing device 10. As shown in FIG. The processor 11 executes this processing based on a program stored in the ROM 12, the auxiliary storage device 14, or the like, for example. FIG. 6 is a flowchart showing an example of processing by the processor 21 of the server device 20. As shown in FIG. The processor 21 executes this process based on a program stored in the ROM 22, the auxiliary storage device 24, or the like, for example.

The processor 11 of the processing device 10 of the third embodiment executes the process shown in FIG. 5 instead of the process shown in FIG. 3 of the second embodiment.
In the third embodiment, the processor 11 advances to ACT41 if it determines Yes in ACT13 of FIG.
In ACT 41, the processor 11 obtains the expected time required for data restoration. It should be noted that the processor 11 obtains the expected time by taking into consideration the communication time required for communication with the server device 20, for example. That is, the processor 11 obtains the estimated time by adding the time required for data recovery processing and the time required for downloading recovery data used for data recovery. In the third embodiment, the processing device 10 acquires repair data from the server device 20 . The communication time is the time related to the acquisition. The processor 11, for example, measures the communication speed with the server device 20 and obtains the time required to acquire the repair data from the communication speed. After processing ACT 41, processor 11 proceeds to ACT 15. FIG.
As described above, the processor 11 performs the processing of ACT13 and ACT41, and functions as a processing unit that, when detecting an error in the software installed in the first area 141, obtains the estimated time required to correct the error.

Note that the processor 11 uses the estimated time obtained in ACT41 instead of ACT14 in ACT15 of the third embodiment. Also, if the processor 11 determines Yes in the processing of ACT15, it proceeds to ACT42.

In ACT 42 processor 11 generates error information. The error information notifies the server device 20 that the data in the processing device 10 has an error. The error information also requests the server device 20 to send repair data necessary to repair the error. After generating the error information, the processor 11 instructs the communication interface 15 to transmit the error information to the server device 20 . Upon receiving this transmission instruction, the communication interface 15 transmits the error information to the server device 20 . The transmitted error information is received by the communication interface 25 of the server device 20 .

On the other hand, in ACT 51 of FIG. 6, the processor 21 of the server device 20 waits for error information to be received by the communication interface 25 . If the error information is received, the processor 21 determines Yes in ACT51 and proceeds to ACT52.

In ACT 52 processor 21 generates repair information. The repair information includes repair data required for repair. The repair data is the repair data requested by the error information received in ACT51. After generating the repair information, the processor 21 instructs the communication interface 15 to send the repair information to the server device 20 . Upon receiving this transmission instruction, the communication interface 15 transmits the restoration information to the server device 20 . The transmitted repair information is received by the communication interface 25 of the server device 20 .

Meanwhile, in ACT 43 of FIG. If the repair information is received, the processor 11 determines Yes in ACT 43 and proceeds to ACT 44 .

In ACT 44 the processor 11 uses the repair data included in the repair information received in ACT 43 to repair the data error. After processing ACT 44, processor 11 proceeds to ACT 33.

According to the processing system 1 of the third embodiment, the processing device 10 calculates the expected time required for data recovery, taking into account the time required for downloading the recovery data. Therefore, the processing device 10 can more accurately determine the time required for data restoration.

The following modifications are also possible for the first to third embodiments.

In the first to third embodiments, the processing device 10 displays the selection screen when the restoration time is equal to or longer than the threshold T, and allows the operator to select whether or not to execute data restoration. However, the processing device 10 may automatically start the second system software without displaying the selection screen. That is, if the processor 11 of the processing device 10 of the first embodiment determines No in ACT15 of FIG. 2, it proceeds to ACT21. If the processor 11 of the processing device 10 of the second embodiment determines No in ACT15 of FIG. 3, it proceeds to ACT34. If the processor 11 of the processing device 10 of the third embodiment determines No in ACT15 of FIG. 5, it proceeds to ACT34.

Processor 11 of processing unit 10 may perform data error checking in ACT 16 of FIG. 2, FIG. 3 or FIG. 5 when processing unit 10 is shut down. In this case, the processor 11 performs the processing of ACT12 to ACT14, for example, when the processing device 10 is shut down. However, if the processor 11 determines No in ACT 13, it performs shutdown as usual. Then, the processor 11 skips the processing of ACT12 to ACT14 and proceeds to ACT15 when it is started next time. At this time, the processor 11 performs the processing after ACT15 using the processing results of ACT12 to ACT14 at the time of the previous shutdown.
In this way, by performing the processing of ACT12 to ACT14 at the time of the previous shutdown, it is possible to shorten the time required to start up the processing device 10 .

The processor 11 of the processing device 10 may perform the processing performed on the system software in the third embodiment by firmware or software operating on the firmware.

In the second embodiment and the third embodiment, the processor 11 of the processing device 10 activates the system software up to an intermediate stage in the processing of ACT32. Then, the processor 11 performs the processing after ACT12 in this state. However, the processor 11 may perform the processing after ACT 12 after completing activation.

In the first to third embodiments, the second data are all copies of the first data. However, the second data may be a copy of part of the first data. In this case, the second data does not include, for example, the insignificant part of the first data. Which data in the first data is to be copied as the second data is determined by setting, for example. The setting is determined, for example, by an operator of the processing device 10 or the like.

Two or more of the first area 141, the second area 142 and the third area 143 may be within the same range.

The first area 141, the second area 142 and the third area 143 may be separated by a method other than ranges. For example, the first area 141, the second area 142 and the third area 143 may be partitioned.

The processor 11 or processor 21 may implement a part or all of the processing implemented by the program in the above embodiment by means of a circuit hardware configuration.

While several embodiments of the invention have been described, these embodiments have been presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and modifications can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the scope of the invention described in the claims and equivalents thereof.

1... processing system, 10... processor, 11, 21... processor, 12, 22... ROM, 13, 23... RAM, 14, 24... auxiliary storage device, 15, 25... communication interface, 16... input device, 17... output device, 18, 26... bus, 20... server apparatus, 141... first area, 142... second area, 143... third area

Claims (5)

a first storage area for storing one or more pieces of software including first system software;
a second storage area for storing one or more pieces of software, including second system software that is a copy of the first system software;
When an error is detected in the data of the software in the first storage area, an estimated time required for repairing the error is obtained, and if the estimated time is less than a threshold, the first system software is activated. a processing unit that starts after correcting the error if the error is corrected, and starts the second system software instead of the first system software if the estimated time is equal to or greater than the threshold value. Device. further comprising a third storage area for storing repair data for repairing the error;
2. The processing device according to claim 1, wherein said processing unit uses said repair data to repair said error. 2. The processing device according to claim 1, wherein said expected time includes time to download repair data for repairing said error from a server. 4. The processing device according to any one of claims 1 to 3, wherein said second storage area is encrypted so that reading and writing of data is restricted. when an error is detected in the data of the software in a first storage area storing one or more pieces of software including the first system software, obtaining an expected time required to correct the error, the expected time being less than a threshold , when starting the first system software, start after correcting the error, and if the expected time is equal to or greater than the threshold, one or more pieces of software including the second system software is installed, and the second system software stored in the second storage area is started instead of the first system software.