JPH05158703A - Remote down loading system for software - Google Patents

Abstract

PURPOSE:To perform a remote down loading operation of software in an on-line state without stopping the device functions when the software of plural devices forming a network are updated. CONSTITUTION:A network forming device 20 contains a working program memory EEPROM 103 and a stand-by EEPROM 104 so that a broadcast type communication and a 1-1 type communication are available in a control network 200, and carries out the simultaneous software down loading operations in the broadcast communication from a network controller 10 to plural devices and a confirming operation in the 1-1 communication method. Furthermore a state set before the switching to the EEPROM 103 is reset in an abnormal state with the rise processing of a ROM 107. Thus the communicating function of the network 2 is assured.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a software download method, and more particularly to a remote software download method using a remote communication means.

[0002]

2. Description of the Related Art A conventional apparatus has a structure in which a CPU operates by using a ROM in which program data is written, and when a program needs to be changed or modified,
The main method was to replace the ROM in which new program data was written. Alternatively, even when the program data is downloaded from the outside, the system is in a non-operational state and the program data is updated.

[0003]

In this conventional program data update method, it is necessary to temporarily stop the function provided by the device during the update, and the problem that the stop of the device function affects the network. was there. Further, when there are many devices in the network, when software is downloaded to each device, it takes a long time to complete the download of all devices.

The present invention is intended to solve the above-mentioned problems, and remote software capable of simultaneously performing software download processing collectively while a plurality of devices are in an online state without stopping the function of each device. It is intended to provide a download method.

[0005]

A remote software download system of the present invention has a network composed of a plurality of devices, a plurality of devices constituting the network and a communication means, and has network management for monitoring and controlling each device. In a management network composed of devices, point-to-point type communication for performing bidirectional communication by designating individual devices from the network management device and broadcast for performing unidirectional communication with a plurality of devices at the same time
A management network that provides ast type communication, and each device that constitutes the network serve as a control unit internally with a CPU that can electrically erase and write data.
Br from the network management device, having a type of EEPROM and a ROM with a program written for booting
A first means for writing program data to a spare EEPROM of the plurality of devices using the oadcast type communication means, and a point-to-point type communication means for the individual devices by the first means. A second means for confirming that the program data written in the spare EEPROM is normal;
Third means for starting up by specifying the EEPROM for working or protection to a plurality of devices by using the st type communication means, and an abnormality after starting up by the third means in each device Detected automatically from EEPR to spare
A fourth means for restarting after switching to the OM, and an EEPR currently in operation for each device as with the second means.
It has a fifth means of confirming the OM.

[0006]

According to the above construction, the program data from the network management device is broadcast to the spare EEPROMs of the plurality of devices of the network by the first means.
By using the point-to-point communication means, it is confirmed whether the program data written by the first means by the second means is normal and written by using the ast type communication means. By means bro
By using the adcast type communication means, the EEPROM of the working or the spare is designated for a plurality of devices to start up in the ROM, and by the fourth means, when an abnormality is detected in each device after the start-up, it is automatically From spare to current EEP
Since the program is switched to the ROM and restarted, the program data can be simultaneously downloaded in a batch while a plurality of devices remain online.

[0007]

An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 is a system configuration diagram of a remote software download system according to an embodiment of the present invention.

In FIG. 1, reference numeral 10 denotes a network management device, which is a broadcast device via a management network 200.
Numeral 20 indicates each device constituting the network for performing ast and point-to-point communication, and receives program data from the network management device 10. Reference numeral 100 denotes an in-device control unit of the device 20, and the in-device control unit 100 includes a CPU 101 and a management network 20.
0, a management network interface 102 for connecting the device 20 and the device 20, a working EEPROM 103, a spare EEPR
An OM 104, a CPU operation monitoring circuit 105 for monitoring a program, a toggle type register 106 for ON / OFF toggle operation, and a boot ROM 107 for startup.

Next, the operation will be described.

In the present embodiment, only one device 20 is shown as a device constituting the network, but even if there are a plurality of devices, the plurality of devices perform the same operation. An example of a single device will be described.

It is assumed that the device 20 forming the network is operating in the internal control unit 100 according to the program of the working EEPROM 103. When updating the program here, the network management device 10 uses the management network 200 used for transfer of the management information,
A spare EEPROM 104 for the CPU 101 using the device 20 and the management network interface 102.
To write the program data to the normal CP
Under the U operation, the program data transferred from the network management device 10 is written in the spare EEPROM 104. After the writing is completed, the network management device 10
The CPU 101 instructs the CPU 101 to verify the data of the spare EEPROM 104, and notifies, for example, the CRC calculation result or the checksum calculation result.
At 0, it confirms the normal end of the program data transfer.

Thereafter, the network management device 10 sets data in the toggle type register 106 and gives a reset instruction to the CPU 101. After the reset, the CPU 101 starts up with the boot ROM 107. The boot ROM 107 reads the data of the toggle type register 106, and the current EEPROM 1 is used as a program area.
03 or the spare EEPROM 104 is programmed so as to be selected. Here, the toggle register has a configuration in which the output is alternately switched on or off for each data setting.

Therefore, if the toggle register is turned ON while the program of the current EEPROM 103 is operating before the CPU is reset, it will be turned OFF after data is set in the toggle register 106 from the network management device 10. Spare EEPROM 104
Will be selected.

If an abnormal state occurs during operation with the newly downloaded program, the CPU operation monitoring circuit 1
05, the toggle type register 106 is set with data, and the state of the CPU 10 is changed from OFF to ON.
By resetting 1 and starting the boot ROM 107 again, the operating state of the working EEPROM 103 can be restored, and communication with the network management apparatus 10 can be continued. Since communication with the network management device 10 is ensured both when the program switching operation ends normally and when it ends abnormally, it becomes possible for all the devices to return a response upon receiving the operation mode confirmation request. ing.

FIG. 2 is a block diagram showing an example of an applicable network configuration in the remote software download system of the present invention.
And a plurality of network constituent devices 20, 21, ..., 2n
Are connected via a management network 200 that transfers management information. Since the management network 200 is configured by also using the communication functions of the network constituent devices 20, 21, ..., 2n, even when a failure occurs in the operation after the program switching as described in the present invention. ,
The communication function of the management network 200 is guaranteed by switching back to the operating state before switching.

FIG. 3 is a diagram showing a communication procedure at the time of software download between the network management device of the present invention and a plurality of network constituent devices. The network management device 10 spreads to a plurality of devices 20 ... 2n.
Simultaneous software download is performed by ast type communication, and normality of download data is confirmed for each device by point-to-point type communication. After that, a switch-up request is made again to a plurality of devices by the broadcast-type communication, and the point-to-po is requested.
The sequence which inquires the operating state of each apparatus by int type communication is shown.

[0018]

As described above, according to the present invention, the program is registered in the duplicated EEPROM so as to perform the CPU operation. Program data can be downloaded simultaneously. Also, if the downloaded program becomes abnormal, the program before the download is restarted, so even if there is an error in the new program, communication with the network management device will not be restored. Has the effect of not.

[Brief description of drawings]

FIG. 1 is a block diagram of a remote software download system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration example of an applicable network in the remote software download method of the present invention.

FIG. 3 is a diagram showing a communication procedure between a network management device of the present invention and a plurality of devices forming a network.

[Explanation of symbols]

 10 Network management device 20, 21, ..., 2n Network configuration device 100 In-device control unit 101 CPU 102 Management network interface 103 Current EEPROM 104 Spare EEPROM 105 CPU operation monitoring circuit 106 Toggle type register 107 Boot ROM 200 Management network

Claims (1)

[Claims] 1. A management network comprising a network composed of a plurality of devices, a plurality of devices constituting the network, and a network management device having a communication means for monitoring and controlling each device. Poi for two-way communication by specifying individual devices from
A management network that provides nt-to-point type communication and broadcast type communication that performs one-way communication to the plurality of devices at the same time, and each device that constitutes the network electrically serves as a control unit internally with a CPU Two types of EEP for data erasing and writing, one for current use and one for backup
It has a ROM and a ROM in which a program for booting has been written, and the broadcasts from the network management device.
EE for backup of said plurality of devices using t-type communication means
A first means for writing program data in the PROM;
Spare EEPROM for individual devices by said first means using point-to-point type communication means
A second means for confirming that the program data written in is normal, and an EEP for use in the plurality of devices by using the broadcast-type communication means.
Third means for starting the ROM by designating it, and when an abnormality is detected in each device after the third means is started, the backup is automatically switched from the spare EEPROM to the current EEPROM and restarted. And a fifth means for confirming the currently operating EEPROM in each device, similarly to the second means.