JPH05204770A - Method for recovering memory error - Google Patents

Abstract

PURPOSE:To attain the reliable control circuit or controller capable of high- speed error recovery in a microprogram storage area. CONSTITUTION:A microprogram control means 11 allows a load/write control means 18 to load the microprogram for microprogram storage areas 12 and 13 from an external storage device 19 after the initializing. The reading and writing of data is performed at the same position on the microprogram storage areas 12 and 13. When the occurrence of an error is informed from an error detection means 14, the error information is stored in an error information storage area 16 and the data read from an error-free microprogram storage area is selected by a microprogram selection means 15.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a microprogram control method for an information processing device, and more particularly to a memory error recovery method.

[0002]

2. Description of the Related Art In conventional microprogram control methods, there are some which do not correct an error occurring in a microprogram storage area, but none of them have a plurality of microprogram storage areas.

[0003]

Among the above-mentioned conventional microprogram control methods, the one that does not correct the error that has occurred in the microprogram storage area does not correct the microprogram storage area when an error occurs in the microprogram storage area. There is a problem that the execution of the microprogram is stopped because there are no more than one, or the execution of the microprogram is continued in an abnormal state.

Similarly to the case of correcting an error and the case of not correcting an error, when an uncorrectable error occurs in the microprogram storage area, the execution of the microprogram is stopped because there is no plural microprogram storage area. Or, there is a problem that the microprogram continues to be executed in an abnormal state.

[0005]

A memory error recovery method of the present invention performs load control of a micro program from an external storage device to a plurality of micro program storage areas and data write control to the plurality of micro program storage areas. Load / write control means,
Error detection means for detecting an error occurring in the microprogram storage area, error information storage area for storing the error information notified from the load / write control means and the error detection means, and the plurality of microprogram storage areas A memory error recovery method for executing microprogram selection means for selecting data read from a memory, and microprogram control means for executing microprogram execution control and error processing control, the load / write control means A load of the same microprogram from the external storage device into each of the plurality of microprogram storage areas and a writing of the same data into each of the plurality of microprogram storage areas according to a request from the microprogram control means. And load When an error occurs in the micro program control means, an error notification is given to the micro program control means, and when the error detection means detects an error in the micro program storage area, an error notification is given to the micro program control means. The error storage area stores the error information notified from the load / write control means and the error detection means in response to a request from the microprogram control means, and the microprogram selection means is the microprogram control means. The data read from the designated microprogram storage area is selected by the request from the microprogram control means, and the control signal generation means converts the data selected by the microprogram selection means into the data selected by the microprogram control means. Generate a control signal based on The microprogram control means requests load / write to the load / write control means, reads data from the plurality of microprogram storage areas, and receives an error notification from the load / write control means. Stores error information in the error storage area, stores error information in the error storage area when an error notification from the error detection means is accepted, and does not cause an error based on the error information It is characterized in that the data read from the storage area is selected.

[0006]

Next, the present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing a first embodiment of the present invention. In this embodiment, the micro program control means 11, the micro program storage area 12, the micro program storage area 13, the error detection means 14, the micro program selection means 15, the error information storage area 16, the control signal generation means 17, the load / write control. It comprises means 18 and an external storage device 19.

FIG. 4 shows a processing flow of the embodiment shown in FIG.
9 shows a processing flow of the load / write control means 18, and FIG. 11 shows a processing flow of the error detection means 14.

Next, the operation of this embodiment will be described with reference to FIGS. 1, 4, 9, and 11.

The microprogram control means 11 first performs initialization processing in response to power-on or a start request from the outside (step 401) and issues a microprogram load request to the load / write control means 18 (step 402). ..

Next, the micro program control means 11 determines the end notification from the load / write control means 18 (step 403).

If the end notification is a normal end notification, the micro program selecting means 15 is notified to select a predetermined one of the micro program storage area 12 and the micro program storage area 13 (step 404). , Starts reading / execution of the microprogram.

On the contrary, when the end notification is an abnormal end notification, first, error information such as which side of the microprogram storage area 12 and the microprogram storage area 13 the load error occurred is displayed in the error information storage area. 16 (step 412) and notifies the control signal generation means 17 to generate an external control signal for abnormal end of load (step 413). Next, it is determined whether the abnormal termination of the micro program load is on both sides or one side of the micro program storage area 12 and the micro program storage area 13 (step 414). Is stopped (step 415). In the case of abnormal termination of loading on one side, the microprogram selecting means 1 is selected so as to select the side that has terminated normally.
After notifying 5 (step 404), reading / execution of the microprogram is started.

After the loading of the microprogram is completed and the selection is notified, the microprogram is read (step 405).

The reading of the microprogram is performed simultaneously from the same address in the microprogram storage area 12 and the microprogram storage area 13 regardless of whether the microprogram loading is normally completed or abnormally completed, and the microprogram selection means 15 controls the microprogram. The microinstruction on the side selected by the control signal from the means 11 is passed to the control signal generation means 17.

After reading the microprogram, it is determined whether or not there is an error notification from the error detecting means 14 (step 406).

When there is an error notification, the microprogram control means 11 firstly, the microprogram storage area 1
It is stored in the error information storage area 16 which microprogram storage area 2 or the microprogram storage area 13 has the error, and the control signal generation means 17 is caused to generate an external control signal (step 409).
Next, it is determined whether or not an error has occurred on both sides of the microprogram storage area 12 and the microprogram storage area 13 (step 410), and if there is a double-sided error, execution of the microprogram is stopped (step 41).
5). In the case of a one-sided error, it is determined whether or not the error is the currently selected side (step 411), and if it is the currently selected side, the micro program storage area on the opposite side is selected. Program selection means 16
To the control signal generating means 17 to generate the external control signal and the internal control signal (step 407) and obtain the address of the microinstruction to be read next. (Step 40
8).

When there is no error notification from the error detection means 14, the micro program control means 11 detects an external control signal based on the micro instruction passed from the micro program selection means 15 and the control signal from the micro program control means 11. The control signal generation means 17 is notified to generate the internal control signal (step 407), and the address of the microinstruction to be read next is obtained (step 40).
8).

After that, while there is no error notification from the error detecting means 14, the micro instruction reading (step 40
5), error notification determination (step 406), control signal generation (step 407), and read address generation (step 408) are repeated.

The operation of the load / write control means 18 will be described with reference to FIGS.

The load / write control means 18 first
It is determined whether or not the notification from the micro program control means 11 is a micro program load request (step 901).

When the notification from the micro program control means 11 is a micro program load request, the micro program is read from the external storage device 19 (step 902) and a read abnormality determination is performed (step 90).
3). If there is no read abnormality, the data is transferred to the micro program storage area 12 and the micro program storage area 13 (step 904), and the transfer abnormality determination is performed (step 905). The load / write control means 19 gives a normal end notification to the microprogram control means 11 when the microprogram loading on both sides of the microprogram storage area 12 and the microprogram storage area 13 is completed normally (step 906), If an abnormality occurs in reading the micro program from the external storage device 19 and if the transfer of the micro program to either or both of the micro program storage area 12 and the micro program storage area 13 ends abnormally, an abnormal end notification is issued. Perform (step 907).

When the notification from the micro program control means 11 is a write request, data is written to both sides of the micro program storage area 12 and the micro program storage area 13 (step 908).

The operation of the error detecting means 14 will be described with reference to FIGS.

The error detecting means 14 determines whether or not an error has occurred based on the micro instruction read from the same address in the micro program storage area 12 and the micro program storage area 13 (step 110).
1) If an error occurs in any of the microprogram storage areas, the microprogram control means 11 is notified (step 1102).

As described above, in the first embodiment of the present invention, the same microprogram is stored in a plurality of microprogram storage areas, and if an error occurs in any of them, an error occurs. Selects the microprogram read from the empty microprogram storage area. Therefore, there is an effect that high reliability can be maintained without using error correction means and error recovery can be performed at high speed.

Further, if the reliability is desired to be high, it is sufficient to increase the microprogram storage area, and even if the microprogram storage area is increased, the execution speed does not decrease.

The second embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing a second embodiment of the present invention, in which a micro program control means 11, a micro program storage area 12, a micro program storage area 13,
Error detection means 14 and microprogram selection means 1
5, error information storage area 16, control signal generation means 17, load / write control means 18, and external storage device 19.

FIG. 5 shows the control flow of this embodiment, FIG. 9 shows the processing flow of the load / write control means 18, and FIG. 11 shows the processing flow of the error detection means 14.

Next, the operation of this embodiment will be described with reference to FIGS. 1, 5, 9 and 11.

The micro program control means 11 first performs initialization processing in response to power-on or a start request from the outside (step 501) and issues a micro program load request to the load / write control means 18 (step 502). ..

Next, the micro program control means 11 judges the end notification from the load / write control means 18 (step 503).

If the end notification is a normal end notification, the micro program selecting means 15 is notified to select a predetermined one of the micro program storage area 12 and the micro program storage area 13 (step 504). , Starts reading / execution of the microprogram.

On the contrary, when the end notification is an abnormal end notification, first, error information such as which side of the microprogram storage area 12 and the microprogram storage area 13 the load error has occurred is stored in the error information storage area. 16 (step 512) and notifies the control signal generation means 17 to generate an external control signal for abnormal end of load (step 513). Next, it is determined whether the abnormal termination of the microprogram load is on both sides or one side of the microprogram storage area 12 and the microprogram storage area 13 (step 514). Is stopped (step 515). In the case of abnormal termination of loading on one side, the microprogram selecting means 1 is selected so as to select the side that has terminated normally.
5 is notified (step 504), the reading / execution of the microprogram is started.

After the loading of the microprogram is completed and the selection is notified, the microprogram is read (step 505).

Reading of the microprogram is performed simultaneously from the same address in the microprogram storage area 12 and the microprogram storage area 13 regardless of whether the microprogram loading is normally ended or abnormally ended, and the microprogram selection means 15 controls the microprogram. The microinstruction on the side selected by the control signal from the means 11 is passed to the control signal generation means 17.

After reading the microprogram, it is judged whether or not there is an error notification from the error detecting means 14 (step 506).

When there is an error notification, the microprogram control means 11 firstly, the microprogram storage area 1
2 and the position of the microprogram storage area of the microprogram storage area 13 where the error occurred is stored in the error information storage area 16, and the control signal generation means 17 is caused to generate the external control signal (step 509). ). Next, the error is microprogram storage area 1.
2 and the microprogram storage area 13, it is determined whether or not all the load error-free ones occur at the same position (step 510), and all the load error-free ones occur at the same position. If so, the execution of the microprogram is stopped (step 51).
5). On the contrary, if it occurs at a different position, it is judged whether or not the error is on the currently selected side (step 511). If it is on the currently selected side, it is not a load error and an error has occurred. Notifies the microprogram selecting means 16 to select a microprogram storage area that has not occurred at the same position (step 504), and generates an external control signal and an internal control signal if it is not the currently selected side. Notify the control signal generation means 17 (step 5
07), and obtains the address of the next microinstruction to be read (step 508).

When there is no error notification from the error detection means 14, the micro program control means 11 detects the external control signal based on the micro instruction passed from the micro program selection means 15 and the control signal from the micro program control means 11. The control signal generating means 17 is notified to generate the internal control signal (step 507), and the address of the microinstruction to be read next is obtained (step 50).
8).

Thereafter, while there is no error notification from the error detecting means 14, the micro instruction reading (step 50
5), error notification determination (step 506), control signal generation (step 507), and read address generation (step 508) are repeated.

The operation of the load / write control means 18 will be described with reference to FIGS.

The load / write control means 18 first
It is determined whether or not the notification from the micro program control means 11 is a micro program load request (step 901). If the notification from the micro program control means 11 is a micro program load request, the micro program is read from the external storage device 19 (step 902) and a read abnormality determination is performed (step 90).
3). If there is no read abnormality, the data is transferred to the micro program storage area 12 and the micro program storage area 13 (step 904), and the transfer abnormality determination is performed (step 905). The load / write control means 19 gives a normal end notification to the microprogram control means 11 when the microprogram loading on both sides of the microprogram storage area 12 and the microprogram storage area 13 is completed normally (step 906), If an abnormality occurs in reading the micro program from the external storage device 19 and if the transfer of the micro program to either or both of the micro program storage area 12 and the micro program storage area 13 ends abnormally, an abnormal end notification is issued. Perform (step 907).

If the notification from the micro program control means 11 is a write request, data is written to both sides of the micro program storage area 12 and the micro program storage area 13 (step 908).

The operation of the error detecting means 14 will be described with reference to FIGS.

The error detecting means 14 determines whether or not an error has occurred based on the micro instruction read from the same address in the micro program storage area 12 and the micro program storage area 13 (step 110).
1) If an error occurs in any of the microprogram storage areas, the microprogram control means 11 is notified (step 1102).

As described above, in the second embodiment of the present invention, the same microprogram is stored in a plurality of microprogram storage areas, and if an error occurs in any of them, the error is generated at the same position. Select the microprogram read from the microprogram storage area that has not occurred.

Normally, it is extremely rare for an error to occur at the same position in a plurality of different storage areas, so high reliability can be maintained without using error correction means, and error recovery can be performed at high speed. There is.

Further, if the reliability is desired to be increased, it is sufficient to increase the microprogram storage area, and even if the microprogram storage area is increased, the execution speed does not decrease.

The third embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing a third embodiment of the present invention, in which a micro program control means 11, a micro program storage area 12, a micro program storage area 13,
Error detection means 14 and microprogram selection means 1
5, error information storage area 16, control signal generation means 17, load / write control means 18, and external storage device 19.

FIG. 6 shows the control flow of this embodiment, FIG. 10 shows the processing flow of the load / write control means 18, and FIG. 11 shows the processing flow of the error detection means 14.

Next, the operation of this embodiment will be described with reference to FIGS. 1, 6, 10, and 11.

The micro program control means 11 first performs initialization processing in response to power-on or a start request from the outside (step 601), and issues a micro program load request to the load / write control means 18 (step 602). ..

Next, the micro program control means 11 judges the end notification from the load / write control means 18 (step 603).

If the end notification is a normal end notification, the error information of the microprogram storage area in which the loading is normally completed is cleared (step 604), and one of the microprogram storage area 12 and the microprogram storage area 13 is set in advance. After notifying the microprogram selecting means 15 to select the selected one (step 605), reading / execution of the microprogram is started.

On the contrary, if the end notification is an abnormal end notification, first, error information such as which side of the microprogram storage area 12 and the microprogram storage area 13 the load error occurred is displayed in the error information storage area. 16 (step 614) and notifies the control signal generation means 17 to generate an external control signal for abnormal end of load (step 615). Next, it is determined whether the abnormal termination of the microprogram load is on both sides or one side of the microprogram storage area 12 and the microprogram storage area 13 (step 616). Is stopped (step 617). If the load on one side ends abnormally, clear the error information on the side that ended normally (step 604),
After notifying the microprogram selecting means 15 to select the data on the normally completed side (step 605), reading / execution of the microprogram is started.

After the loading of the microprogram is completed and the selection is notified, the microprogram is read (step 606).

Reading of the microprogram is performed simultaneously from the same address in the microprogram storage area 12 and the microprogram storage area 13 regardless of whether the microprogram loading is normally completed or abnormally completed, and the microprogram selection means 15 controls the microprogram. The microinstruction on the side selected by the control signal from the means 11 is passed to the control signal generation means 17.

After reading the microprogram, it is judged whether or not there is an error notification from the error detecting means 14 (step 607).

When there is an error notification, the micro program control means 11 firstly, the micro program storage area 1
It is stored in the error information storage area 16 which of the microprogram storage area 2 and the microprogram storage area 13 the error has occurred, and the control signal generation means 17 is caused to generate an external control signal (step 610).
Next, it is judged whether or not an error has occurred on both sides of the microprogram storage area 12 and the microprogram storage area 13 (step 611), and if there is an error on both sides, execution of the microprogram is stopped (step 61).
7). In the case of a one-sided error, a microprogram load request for the microprogram storage area in which the error occurred is issued to the load / write control means 18 (step 61).
2) After that, it is judged whether or not the error is on the currently selected side (step 613), and if it is on the currently selected side, the load / write control means 18 sends a microprogram load end notification. Judgment processing (step 60
Return to 3). The control signal generating means 17 generates the external control signal and the internal control signal if the selected side is not currently selected.
(Step 608), and the address of the next microinstruction to be read is obtained (step 609).

When there is no error notification from the error detection means 14, the micro program control means 11 detects the external control signal based on the micro instruction passed from the micro program selection means 15 and the control signal from the micro program control means 11. The control signal generating means 17 is notified to generate the internal control signal (step 608), and the address of the microinstruction to be read next is obtained (step 60).
9).

Thereafter, while there is no error notification from the error detecting means 14, the micro instruction reading (step 60
6), error notification determination (step 607), control signal generation (step 608), and read address generation (step 609) are repeated.

The operation of the load / write control means 18 will be described with reference to FIGS.

The load / write control means 18 first
It is determined whether or not the notification from the micro program control means 11 is a micro program load request (step 1001).

When the notification from the micro program control means 11 is a micro program load request, the micro program is read from the external storage device 19 (step 1002) and the read abnormality is judged (step 1).
003). If there is no read abnormality, the data is transferred to the designated microprogram storage area (step 1004) and the transfer abnormality is determined (step 1005).

The load / write control means 19 gives a normal termination notice to the microprogram control means 11 when the microprogram loading to the designated microprogram storage area is normally terminated (step 100).
6) If an abnormality occurs in reading the microprogram from the external storage device 19, and if any or all of the microprogram storage areas in the designated microprogram storage area are abnormally terminated, an abnormal termination notification is issued. Perform (step 1007).

When the notification from the micro program control means 11 is a write request, data is written to the designated micro program storage area (step 100).
8).

The operation of the error detecting means 14 will be described with reference to FIGS.

The error detecting means 14 determines whether or not an error has occurred based on the micro instruction read from the same address in the micro program storage area 12 and the micro program storage area 13 (step 110).
1) If an error occurs in any of the microprogram storage areas, the microprogram control means 11 is notified (step 1102).

As described above, in the third embodiment of the present invention, the same microprogram is stored in a plurality of microprogram storage areas, and if an error occurs in any of them, the error occurs. Select the microprogram read from the non-existing microprogram storage area and load the microprogram into the microprogram storage area where the error occurred. For this reason, even if an intermittent error occurs in all microprogram storage areas that have not caused a microprogram load error, the microprogram execution can be continued and high reliability can be maintained without using error correction means. The effect is that error recovery can be performed at high speed.

Further, if the reliability is desired to be increased, it is sufficient to increase the microprogram storage area, and even if the microprogram storage area is increased, the execution speed does not decrease.

The fourth embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 2 is a block diagram showing a fourth embodiment of the present invention, in which a micro program control means 21, a micro program storage area 22, a micro program storage area 23,
Error detection / correction means 24, microprogram selection means 25, error information storage area 26, control signal generation means 27,
It comprises a load / write control means 28 and an external storage device 29.

FIG. 7 shows the control flow of this embodiment, FIG. 9 shows the processing flow of the load / write control means 28, and FIG. 12 shows the processing flow of the error detection / correction means 24.

Next, the operation of this embodiment will be described with reference to FIGS. 2, 7, 9 and 12.

The micro program control means 21 first performs initialization processing in response to power-on or a start request from the outside (step 701), and issues a micro program load request to the load / write control means 28 (step 702). ..

Next, the micro program control means 21 determines the end notification from the load / write control means 28 (step 703). If the end notification is a normal end notification, the micro program selecting means 25 is notified to select a predetermined one of the micro program storage area 22 and the micro program storage area 23 (step 704), and then the micro program. Start reading / execution of.

On the contrary, if the end notification is an abnormal end notification, first, error information such as which side of the microprogram storage area 22 and the microprogram storage area 23 the load error occurred is displayed in the error information storage area. 26 (step 713) and notifies the control signal generating means 27 to generate an external control signal for abnormal end of load (step 714). Next, it is determined whether the abnormal end of the micro program load is on both sides or one side of the micro program storage area 22 and the micro program storage area 23 (step 715). Is stopped (step 716). In the case of abnormal end of loading on one side, the microprogram selecting means 2 is selected so as to select the side that has ended normally.
5 is notified (step 704), the reading / execution of the microprogram is started.

After the loading of the microprogram is completed and the selection is notified, the microprogram is read (step 705).

Reading of the microprogram is performed simultaneously from the same address in the microprogram storage area 22 and the microprogram storage area 23 regardless of whether the microprogram loading is normally completed or abnormally completed, and the microprogram selection means 25 controls the microprogram. The microinstruction on the side selected by the control signal from the means 21 is passed to the control signal generation means 27.

After reading the microprogram, it is determined whether or not there is an error notification from the error detection / correction means 24 (step 706).

If there is an error notification, the microprogram control means 21 firstly sends the microprogram storage area 2
The error information storage area 26 stores which microprogram storage area 2 or the microprogram storage area 23 the error occurred in, and causes the control signal generation means 27 to generate an external control signal (step 709).
Next, it is judged whether or not the uncorrectable error has occurred in all the micro program storage areas in which the micro program load error has not occurred (step 710), and all the micro program storage areas in which the micro program load error has not occurred. If an uncorrectable error has occurred in step 7, the execution of the microprogram is stopped (step 7).
15). If not, the load / write control means 28 is caused to write the correct data or the error correction data from the error detection / correction means 24 to the error position, and the microprogram selection means 25 is caused to write the data from the error detection / correction means 24. Is selected (step 711), and it is determined whether the generated uncorrectable error is the currently selected side (step 712). When an uncorrectable error occurs on the currently selected side, the microprogram selecting means 25 is notified to select the microprogram storage area on the opposite side (step 70).
4) If it is not the currently selected side, it notifies the control signal generation means 27 to generate the external control signal and the internal control signal (step 707), and obtains the address of the microinstruction to be read next (step 708).

When there is no error notification from the error detection / correction means 24, the micro program control means 21 uses the external control signal based on the micro instruction passed from the micro program selection means 25 and the control signal from the micro program control means 21. Then, the control signal generating means 27 is notified to generate the internal control signal (step 707), and the address of the microinstruction to be read next is obtained (step 708).

Thereafter, while there is no error notification from the error detection / correction means 24, the micro instruction is read (step 70).
5), error notification determination (step 706), control signal generation (step 707), and read address generation (step 708) are repeated.

The operation of the load / write control means 28 will be described with reference to FIGS.

The load / write control means 28 first
It is determined whether the notification from the micro program control means 21 is a micro program load request (step 901).

When the notification from the micro program control means 21 is a micro program load request, the micro program is read from the external storage device 29 (step 902) and the read abnormality is judged (step 90).
3). If there is no read abnormality, the data is transferred to the microprogram storage area 22 and the microprogram storage area 23 (step 904), and the transfer abnormality is determined (step 905). The load / write control means 29 gives a normal end notification to the micro program control means 21 when the micro program loading on both sides of the micro program storage area 22 and the micro program storage area 23 is completed normally (step 906), If an abnormality occurs in reading the microprogram from the external storage device 29, and if the microprogram transfer of one or both of the microprogram storage area 22 and the microprogram storage area 23 ends abnormally, an abnormal end notification is issued. Perform (step 907).

If the notification from the micro program control means 21 is a write request, data is written to both sides of the micro program storage area 22 and the micro program storage area 23 (step 908).

Regarding the operation of the error detection / correction means 24,
This will be described with reference to FIGS. 2 and 12.

The error detection / correction means 24 judges whether or not an error has occurred based on the microinstruction read from the same address in all the microprogram storage areas (step 1201), and the entire microprogram storage areas. Is normal, the microprogram control means 2
No notification to 1

Next, it is judged whether or not an uncorrectable error has occurred in all microprogram storage areas (step 1
202), if an uncorrectable error has occurred in all microprogram storage areas, the microprogram control means 21 determines that all microprogram storage area uncorrectable errors have occurred.
(Step 1205). If no uncorrectable error has occurred in all microprogram storage areas, correct data or error-corrected data is output to the microprogram selection means 25 (step 1203) to determine in which microprogram storage area the error has occurred. Notify the micro program control means 41 (step 1)
204).

As described above, in the fourth embodiment of the present invention, the same microprogram is stored in a plurality of microprogram storage areas, and if a correctable error occurs in any of them, the correct data or The error correction data is written, and when an uncorrectable error occurs, the microprogram read from the error-free microprogram storage area or the error-corrected microprogram storage area is selected. Therefore, even if a correctable error occurs in the entire microprogram storage area, execution of the microprogram can be continued, high reliability can be maintained without reloading the microprogram, and error recovery can be performed at high speed. There is an effect.

Further, if the reliability is desired to be increased, it is sufficient to increase the microprogram storage area, and even if the microprogram storage area is increased, the execution speed does not decrease.

The fifth embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 3 is a block diagram showing a fifth embodiment of the present invention, in which a micro program control means 31, a micro program storage area 32, a micro program storage area 33,
Error detection / correction means 34, microprogram selection means 35, error information storage area 36, control signal generation means 37,
It comprises a load / write control means 38, an external storage device 39, and a fixed error determination means 3A.

FIG. 8 shows the control flow of this embodiment, FIG. 10 shows the processing flow of the load / write control means 38, FIG. 12 shows the processing flow of the error detection / correction means 34, and FIG. 13 shows the processing flow of the fixed error determination means 3A. Show.

Next, the operation of this embodiment will be described with reference to FIGS. 3, 8, 10, 12, and 13.

The micro program control means 31 first performs initialization processing in response to power-on or a start request from the outside (step 801) and issues a micro program load request to the load / write control means 38 (step 802). ..

Next, the micro program control means 31 determines the end notification from the load / write control means 38 (step 803).

If the end notification is a normal end notification, the error information of the microprogram storage area in which the loading is normally completed is cleared (step 804), and one of the microprogram storage area 32 and the microprogram storage area 33 is set in advance. After notifying the microprogram selecting means 35 to select the selected one (step 805), the reading / execution of the microprogram is started.

On the other hand, if the end notification is an abnormal end notification, first, error information such as which side of the micro program storage area 32 and the micro program storage area 33 the load error occurred is displayed in the error information storage area. 36 (step 815) and notifies the control signal generation means 37 to generate an external control signal for abnormal load termination (step 816). Next, abnormal termination of microprogram load is stored in the microprogram storage area 32 and the microprogram. Whether the storage area 33 is on both sides or on one side is determined (step 817), and if the load is abnormally terminated on both sides, control of the microprogram is stopped (step 818). In the case of one-sided load end abnormally, the error information of the normally completed side is cleared (step 804), and the micro program selection means 35 is notified to select the data of the normally completed side (step 805). Start read / execute.

After the loading of the microprogram is completed and the selection is notified, the microprogram is read (step 806).

Reading of the microprogram is performed simultaneously from the same address in the microprogram storage area 32 and the microprogram storage area 33 regardless of whether the microprogram loading is normally completed or abnormally completed, and the microprogram selection means 35 controls the microprogram. The microinstruction on the side selected by the control signal from the means 31 is passed to the control signal generation means 37.

After reading the microprogram, it is determined whether or not there is an error notification from the error detection / correction means 34 (step 807).

When there is an error notification, the micro program control means 31 firstly, the micro program storage area 3
The error information storage area 36 stores which microprogram storage area 2 or the microprogram storage area 33 in which the error has occurred, and causes the control signal generation means 37 to generate an external control signal (step 810).
Next, if an uncorrectable error has occurred, the fixed error determination means 3A determines whether or not the error is fixed, and the uncorrectable error is fixed in all the microprogram storage areas in which no microprogram load error has occurred. It is determined whether an error has occurred (step 811). If an uncorrectable fixed error has occurred in all the microprogram storage areas that are not in the microprogram load error, the execution of the microprogram is stopped (step 818). Otherwise, for the microprogram storage area in which a correctable error has occurred, the load / write control means 38 is executed to write the correct data from the error detection / correction means 34 or the error correction data to the error position. Then, the microprogram selecting means 35 is requested to select the data from the error detecting and correcting means 34 (step 812). Further, the micro program is loaded into the micro program storage area in which the uncorrectable intermittent error has occurred (step 8).
13). Next, it is determined whether or not an uncorrectable error has occurred in the currently selected microprogram storage area (step 814). If it occurs in the currently selected microprogram storage area, load / load is executed. The process returns to the microprogram load end notification determination process (step 803) from the write control unit 38. On the contrary, if the uncorrectable error has not occurred in the currently selected microprogram storage area, the control signal generating means 37 is notified to generate the external control signal and the internal control signal (step 808),
Next, the address of the microinstruction to be read is obtained (step 809).

When there is no error notification from the error detection / correction means 34, the micro program control means 31 uses an external control signal based on the micro instruction passed from the micro program selection means 35 and the control signal from the micro program control means 31. Then, the control signal generating means 37 is notified to generate the internal control signal (step 808) and the address of the microinstruction to be read next is obtained (step 809).

Thereafter, while there is no error notification from the error detection / correction means 34, the micro instruction is read (step 80
6), error notification determination (step 807), control signal generation (step 808), and read address generation (step 809) are repeated.

The operation of the load / write control means 38 will be described with reference to FIGS.

The load / write control means 38 first
It is determined whether or not the notification from the micro program control means 31 is a micro program load request (step 1001).

When the notification from the micro program control means 31 is a micro program load request, the micro program is read from the external storage device 39 (step 1002) and the read abnormality is judged (step 1).
003). If there is no read abnormality, the data is transferred to the designated microprogram storage area (step 1004) and the transfer abnormality is determined (step 1005). The load / write control means 39 notifies the microprogram control means 31 of normal termination when the microprogram loading to all the designated microprogram storage areas is normally terminated (step 1006), and the external storage device 39 If an error occurs in the reading of the micro program from, and if the transfer of any or all of the specified micro program storage areas ends abnormally, an abnormal end notification is issued (step 1007).

When the notification from the micro program control means 31 is a write request, data is written in the designated micro program storage area (step 100).
8).

Regarding the operation of the error detection / correction means 34,
This will be described with reference to FIGS. 3 and 12.

The error detection / correction means 34 determines whether or not an error has occurred based on the microinstruction read from the same address of all the microprogram storage areas (step 1201), and the entire microprogram storage areas. Is normal, the microprogram control means 3
No notification to 1

Next, it is judged whether or not an uncorrectable error has occurred in all microprogram storage areas (step 1
202), if the uncorrectable error has occurred in all microprogram storage areas, the microprogram control means 31 indicates that all microprogram storage area uncorrectable errors have occurred.
(Step 1205). If the uncorrectable error has not occurred in all microprogram storage areas, correct data or error-corrected data is output to the microprogram selection means 35 (step 1203) to determine in which microprogram storage area the error occurred. Notify the micro program control means 41 (step 1)
204).

The operation of the fixed intermittent error determining means 3A will be described with reference to FIGS.

The fixed intermittent error judging means 3A first writes the test data to the designated address in response to the fixed error judging request from the microprogram controlling means 31 (step 1301). Next, data is read from the specified address (step 1302), and it is determined whether the read data is equal to the written data (step 1303). If the written test data and the read data are the same, it is determined that there is an intermittent failure and the micro program control means 31 is notified (step 13).
04).

On the contrary, if the written test data and the read data are different, it is determined that there is a fixed fault and the micro program control means 31 is notified (step 13).
05).

As described above, in the fifth embodiment of the present invention, the same microprogram is stored in a plurality of microprogram storage areas, and if a correctable error occurs in any of them, the correct data or The error correction data is written, and when an uncorrectable error occurs, the microprogram read from the error-free microprogram storage area or the error-corrected microprogram storage area is selected. Further, it is determined whether or not a fixed error has occurred in the microprogram storage area in which the uncorrectable error has occurred, and if it is not a fixed error, the microprogram is loaded. Therefore, even if an uncorrectable intermittent error or a correctable fixed error occurs in the entire microprogram storage area, the microprogram can continue to be executed, and the error recovery can be performed at high speed.

Further, if the reliability is desired to be increased, it is sufficient to increase the microprogram storage area, and the execution speed does not decrease even if the microprogram storage area is increased.

[0121]

As described above, the present invention has the effect of rapidly performing error recovery of the microprogram storage area and making the control circuit or control device highly reliable.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing first, second and third embodiments of the present invention.

FIG. 2 is a configuration diagram showing a fourth embodiment of the present invention.

FIG. 3 is a configuration diagram showing a fifth embodiment of the present invention.

FIG. 4 is a flowchart showing an execution process of the first embodiment of the present invention.

FIG. 5 is a flowchart showing an execution process of the second embodiment of the present invention.

FIG. 6 is a flowchart showing an execution process of the third embodiment of the present invention.

FIG. 7 is a flowchart showing an execution process of the fourth embodiment of the present invention.

FIG. 8 is a flowchart showing an execution process of the fifth embodiment of the present invention.

FIG. 9: Loads / loads of first, second and fourth embodiments of the present invention
6 is a flowchart showing the operation of the write control means.

FIG. 10 is a flow chart showing the operation of the load / write control means of the third and fifth embodiments of the present invention.

FIG. 11 is a flowchart showing the operation of the error detection / correction means of the first, second and third embodiments of the present invention.

FIG. 12 is a flow chart showing the operation of the error detection and correction means of the fourth and fifth embodiments of the present invention.

FIG. 13 is a flowchart showing the operation of the fixed error determination means of the fifth exemplary embodiment of the present invention.

[Explanation of symbols]

 11,21,301 Micro program control means 12,22,302 Micro program storage area 13,23,303,14 Error detection means 24,304 Error detection and correction means 15,25,305 Micro program selection means 16,26,306 Error Information storage area 17, 27, 307 Control signal generation means 18, 28, 308 Load / write control means 19, 29, 309 External storage device 3A Fixed error determination means

Claims (5)

[Claims] 1. A load / write control means for performing load control of a microprogram from an external storage device to a plurality of microprogram storage areas and data writing control to the plurality of microprogram storage areas, and to the microprogram storage area. Error detection means for detecting an error that has occurred, error information storage area for storing error information notified from the load / write control means and the error detection means, and data read from the plurality of microprogram storage areas A memory error recovery method for executing a micro-program selection unit for selecting, and a micro-program control unit for performing micro-program execution control and error processing control, wherein the load / write control unit is the micro-program control unit. From means If an error occurs during the loading of the same microprogram from the external storage device to each of the plurality of microprogram storage areas, and the writing of the same data to each of the plurality of microprogram storage areas, and at the time of loading, Error notification to the micro program control means, the error detection means, when detecting an error in the micro program storage area, error notification to the micro program control means, the error storage area, The error information notified from the load / write control means and the error detection means is stored according to a request from the micro program control means, and the micro program selection means is designated by a request from the micro program control means. Tamai (B) selecting the data read from the program storage area, the control signal generating means generates a control signal based on the data selected by the microprogram selecting means in response to a request from the microprogram controlling means, The microprogram control means requests load / write to the load / write control means, reads data from the plurality of microprogram storage areas, and receives an error notification from the load / write control means. Stores error information in the error storage area, stores error information in the error storage area when an error notification from the error detection means is accepted, and does not cause an error based on the error information Characterized by selecting the data read from the storage area Memory error recovery how to. 2. The micro program control means requests load / write to the load / write control means, reads data from the plurality of micro program storage areas, and notifies an error from the load / write control means. When the error notification is received, the error information is stored in the error storage area, and when the error notification from the error detection unit is received, the error information and the error occurrence position are stored in the error storage area, and the error information is stored. The data read from the microprogram storage area in which no error has occurred at the current access position is selected from the data read from the plurality of microprogram storage areas based on the above. Memory error recovery method described. 3. The load / write control means, in response to a request from the microprogram control means, the same microprogram from the external storage device for a designated microprogram storage area among the plurality of microprogram storage areas. Of the plurality of microprogram storage areas, the same data is written to a designated microprogram storage area, and if an error occurs during loading, an error notification is sent to the microprogram control means. The microprogram control means requests load / write to the load / write control means, reads data from the plurality of microprogram storage areas, and receives an error notification from the load / write control means. Error storage area The error information is stored, and when the error notification from the error detecting means is accepted, the error information is stored in the error storage area and read out from the plurality of microprogram storage areas based on the error information. The microprogram selecting means is requested to select the data read out from the microprogram storage area in which the error information is not set, and the load / write control means has an error-causing microprogram. 7. After making a microprogram load request for a program storage area, of the error information stored in the error storage area, the error information relating to the microprogram storage area in which the microprogram load has ended normally is cleared. The memory error recovery method described in 1. 4. Detection of an error occurring in said plurality of microprogram storage areas and correction of a correctable data error occurring in place of said error detecting means for detecting an error occurring in said plurality of microprogram storage areas. When the error detection / correction means detects an error in the plurality of microprogram storage areas, the error detection / correction means that can correct the data error occurred in the plurality of microprogram storage areas. In addition to making a correction, an error notification is sent to the microprogram control means, the microprogram control means requests load / write to the load / write control means, and reads data from the plurality of microprogram storage areas. Error notification from the load / write control means. If the error notification is received, the error information is stored in the error storage area, and when the error notification from the error detection and correction means is received, the error information is stored in the error storage area, and based on the error information. Requesting the microprogram selection means to select the data read from the microprogram storage area in which an uncorrectable error has not occurred among the data read from the plurality of microprogram storage areas, Further, after making a request for writing the corrected data to the microprogram storage area in which the correctable error has occurred to the load / write control means, data correction writing is performed among the error information stored in the error storage area. 2. The error information relating to the microprogram storage area is cleared, wherein the error information is cleared. Memory error recovery methods. 5. A fixed error determination means for determining whether or not a fixed error has occurred in the plurality of microprogram storage areas, wherein the fixed error determination means is designated by a request of the microprogram control means. It is determined whether or not a fixed error has occurred in the microprogram storage area, and the determination result is notified to the microprogram control means, and the load / write control means is responsive to a request from the microprogram control means. Of the microprogram storage areas, the same microprogram is loaded from the external storage device to the designated microprogram storage area, and the same data for the designated microprogram storage area of the plurality of microprogram storage areas is loaded. Error occurred when loading In this case, an error notification is sent to the micro program control means, the micro program control means requests load / write to the load / write control means, data is read from the plurality of micro program storage areas, and the load is executed. / When the error notification from the write control means is accepted, the error information is stored in the error storage area, and when the error notification from the error detection and correction means is accepted, the error information is stored in the error storage area. At the same time, the microprogram is configured to select data read from the microprogram storage area in which an uncorrectable error has not occurred, out of the data read from the plurality of microprogram storage areas based on the error information. Make a request to the selection means, and load / To write the corrected data to the microprogram storage area in which the correctable error has occurred, and to the fixed error determination means to issue a fixed error determination request to the determination result notification from the fixed error determination means. Based on this, a microprogram load request for a microprogram storage area in which a non-fixed error has occurred is issued to the load / write control means, and error data stored in the error storage area is written after correction of the error data. 2. The memory error recovery method according to claim 1, further comprising: clearing error information regarding a microprogram storage area in which microprogram loading is normally completed.