JPH10161881A - Data recording and reproducing device capable of downloading of control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a user to change a control program of a data recording/ reproducing device and also to recover the abnormality if occurred while the control program is changed. SOLUTION: When an FW download command is received from a host device, a CPU carries out the FW download processing based on a loader program 118 which is stored in a loader part 114 of a flash ROM 11. Then the CPU downloads a program to a main program part 111 with no use of a master password as long as an instruction is given for the change in the contents of the part 111 of the ROM 11 which is designated as a changeable area #1. In addition, the CPU downloads a program to a basic disk access program part 112 only with a command having a master password as long as an instruction is given for the change in the contents of the part 112 which is designated as a changeable area #2.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data recording / reproducing apparatus capable of downloading a control program.

[0002]

2. Description of the Related Art A magnetic disk drive is one of typical data recording / reproducing apparatuses for recording / reproducing information. The operation of the magnetic disk device is generally controlled by a control program (control firmware).

A control program is stored in an RO (Read Only Memory) mounted on a printed circuit board (PC) of a magnetic disk device (magnetic disk drive). Normally, the control program is determined at the time of manufacture of the drive and is not changed. However, the manufacturer may change the control program. for that reason,
The rewritable flash ROM (FRO)
M) was used, and the control program on the flash ROM could be exchanged through a dedicated tester and a special port.

On the other hand, in recent years, standardization of a program download function has been advanced. This enables a user to load a control program used for a special purpose through an interface. According to this function, for example, a maintenance program can be loaded on the buffer of the magnetic disk device, and the program can be executed in this state.

[0005]

By the way, the control program of the magnetic disk drive is upgraded by a function extension or the like. However, at present, in order to change the control program, the magnetic disk device must be removed from the host device (system), returned to the manufacturer, and the manufacturer must perform the change operation. Further, by promoting the standardization of the download function, it is possible for a user to change the control program of the magnetic disk device on the system. In such a case, the device cannot be recovered, and problems such as a fatal influence on the entire system are expected. For this reason, when developing a magnetic disk drive that allows the user to change the control program on the system, it is necessary to take measures to prevent the occurrence of various abnormalities from having a fatal effect on the entire system. Becomes

[0006] The above points are not limited to magnetic disk devices.
The present invention is common to all data recording / reproducing apparatuses for recording / reproducing information on a (non-volatile) recording medium in accordance with a control program.

The present invention has been made in consideration of the above circumstances, and has as its object to enable a user to change a control program of a data recording / reproducing apparatus (on a system) and to recover even if an abnormality occurs at that time. It is an object of the present invention to provide a possible data recording / reproducing device.

[0008]

A data recording / reproducing apparatus according to a first aspect of the present invention is defined as a changeable area in which contents can be changed, and has a control program for controlling the data recording / reproducing apparatus. Is defined as a control program area in which a loader program is stored, and a loader area in which a loader program for changing the control program is stored. A memory, a host interface serving as an interface with the host device, and a program executing means for executing the control program and the loader program. Specify the change destination area and change the specified When a program download command instructing the download of the program to the destination area is sent, the program download processing instructed by the command is performed, and the change destination area specified by the command is the control program in the rewritable nonvolatile memory. Only in the case of an area, a program download function for downloading a program specified by the command from the host device to the first program area is provided. Here, the changeable area and the change prohibition area may be defined (managed) by a loader program.

In such a configuration, the user can rewrite the control program (FW) from the host device (system). Moreover, the loader program stored in the loader area on the rewritable nonvolatile memory (for example, flash ROM) is not changed since the loader area is defined as a write-protected area, and therefore, an abnormality occurs. Even in this case, the control program can be changed (downloaded) again according to the loader program.

[0010] A data recording / reproducing apparatus according to a second aspect of the present invention includes a control program applied to the data recording / reproducing apparatus according to the first aspect described above, which is a minimum program necessary for accessing a recording medium. Divided into a second program that controls the control and a first program that controls the other control, the rewritable nonvolatile memory has a first changeable content whose contents can be changed without specifying a special password. A first program area in which the first program is stored, and a second changeable area in which the contents can be changed under the specification of a special password; A second program area in which is stored
And a loader area in which a loader program for changing the first and second programs is stored, which is defined as a change-prohibited area in which the contents are prohibited from being changed. When the program download command is sent, the program download processing instructed by the command is performed, and when the change destination area specified by the command is the first program area on the rewritable nonvolatile memory, The program designated by the command is downloaded from the host device to the first program area without a special password, and the change destination area specified by the command is stored in the second program area on the rewritable nonvolatile memory.
In the case of the program area, the program download which downloads the program specified by the command from the host device to the second program area only when the password attached to the command matches the special password. It is characterized by having functions.

In such a configuration, the contents of the second program area important for the data recording / reproducing apparatus on the rewritable nonvolatile memory (for example, flash ROM), ie, the minimum necessary for accessing the recording medium, It is possible to protect the second program, which controls the control, from being carelessly changed by a general user by applying a special password (master password).

A data recording / reproducing apparatus according to a third aspect of the present invention provides a data recording / reproducing apparatus according to the first or second aspect, wherein a recording medium for control stored in the rewritable non-volatile memory is provided. In addition to allocating a backup area where the backup data of the program is stored, the following backup function is added to the loader program,
That is, a backup function is provided for restoring the rewritable non-volatile memory to its original state based on the contents of the backup area on the recording medium when the download specified by the program download command fails.

[0013] When the download specified by the program download command is started or after the download is normally completed, the contents before or after the change of the change destination area specified by the command are stored in the backup function in the storage medium. It is good to add a function to save the data in the backup area. Further, it is preferable to secure a plurality of the backup areas (for example, when the storage medium is a disk medium such as a magnetic disk, the backup areas are secured on at least two different disk surfaces).

In such a configuration, when the program download becomes abnormal or the download is interrupted due to power cutoff during the download, that is, when the program download fails, the backup function of the loader program is used to store the program on the recording medium. By transferring the contents of the backup area to the rewritable nonvolatile memory, the contents of the nonvolatile memory can be restored to the original state, and the function of the data recording / reproducing device can be restored.

In particular, when the loader program is provided with a function of saving the contents before downloading (program change) of the download destination area (program change destination area) to the backup area at the time of downloading the program, Even if it fails, the latest program before download (change) can always be reloaded into the rewritable nonvolatile memory.

In the case where a plurality of backup areas are provided, an abnormality such as power interruption occurs during the transfer of the program for backup from the rewritable nonvolatile memory to the backup area on the storage medium. Even if the backup data in the backup area becomes abnormal, the contents of the rewritable nonvolatile memory can be restored to the original state by selectively using the normal backup data in another backup area. If only one backup area is prepared, the contents before and after the change are saved in the backup area, and a verification is performed to confirm that the contents are correctly saved. Should be guaranteed.

A data recording / reproducing apparatus according to a fourth aspect of the present invention is defined in a rewritable nonvolatile memory in the data recording / reproducing apparatus according to the third aspect, as a change-prohibited area in which a change in content is prohibited. Allocating a self-diagnosis area storing a self-diagnosis program executable by the program execution means for self-diagnosis as to whether or not the program download process has been correctly performed, and assigning the following self-diagnosis function to the loader program: A self-diagnosis control function for causing the program execution means to execute the self-diagnosis program after the program is downloaded to an area designated by the program download command.

Here, in the self-diagnosis processing according to the self-diagnosis program, the basic operation of the data recording / reproducing apparatus is performed by using the downloaded control program stored in the rewritable nonvolatile memory so that the data can be correctly downloaded. It is better to make a diagnosis (test) as to whether or not the test was successful. This basic operation includes, for example, access to a buffer memory for temporarily storing write / read data for a storage medium and write / read operation for a storage medium. Further, it is preferable to secure a dedicated test area on the storage medium for a test of the write / read operation for the storage medium.

Further, as in the data recording / reproducing apparatus according to the second aspect, the control program area on the rewritable nonvolatile memory is replaced with a first program area for storing a first program in the control program. And a second program which is a program excluding the first program in the control program.
When the program is managed separately from the second program area storing the program, the following function is added to the backup function of the loader program, that is, as a result of execution of the self-diagnosis program, If an abnormality is found in the contents of the first program area and no abnormality is found in the contents of the second program area, the backup of the control program stored in the backup area on the recording medium is performed. Transferring backup data of the first program from the data to the first program area using the second program stored in the second program area, and transferring the contents of the second program area If an abnormality is found in the data recording / reproducing device, a function to set the data recording / reproducing device to the not-ready state should be added. .

In such a configuration, the self-diagnosis program is started after the program is downloaded, and the reliability of the newly downloaded control program is checked. ) Operation can be guaranteed.

In particular, when a self-diagnosis function of checking a buffer memory access, which is a basic operation of the data recording / reproducing apparatus, and a write / read operation for a storage medium using a test area on the storage medium is applied. Since the operation of the lowest function in the newly downloaded control program can be confirmed, the operation of the system can be guaranteed by a simple self-diagnosis process.

Since the program download is performed with the data recording / reproducing apparatus incorporated in the system (host device), if the reliability check of the newly downloaded control program is not performed as described above, If there is an error in the control program after downloading, there is a risk that the entire system will become abnormal.

A data recording / reproducing apparatus according to a fifth aspect of the present invention is the data recording / reproducing apparatus according to the fourth aspect,
Set when the program download process is started, indicating that the program download process is in progress, and rewritable with a flag information setting area assigned to set flag information to be cleared when the program download process ends normally And a loader program applied to the data recording / reproducing device, not only after the program has been downloaded to the area specified by the program download command, but also the power of the data recording / reproducing device. A self-diagnosis control function for causing the program execution means to execute the self-diagnosis program even when flag information indicating that the program is being downloaded is set in the flag information setting area is set. It is characterized by the following.

In such a configuration, when an abnormality such as power shutoff occurs during program download,
Since flag information indicating that the program is being downloaded is set in the flag information setting area,
The next time the power is turned on, the self-diagnosis program is started and it is checked whether or not the program has been downloaded normally. Then, the contents of the backup area on the recording medium are transferred to the rewritable nonvolatile memory. As a result, even if an abnormality such as power interruption occurs during program download, the function of the data recording / reproducing apparatus can be restored at the next power-on, and the reliability of the system can be ensured.

A data recording / reproducing apparatus according to a sixth aspect of the present invention is the data recording / reproducing apparatus according to the fourth or fifth aspect, wherein the control program area on the rewritable nonvolatile memory is replaced by a control program. A first program area for storing the first program in the program, and a second program area other than the first program in the control program.
In a case where a configuration in which the self-diagnostic program is executed is applied to a configuration in which the program is managed separately from the second program area for storing the program, an abnormality occurs in the contents of the first program area on the rewritable nonvolatile memory. Even if it is accepted,
If no abnormality is found in the contents of the second program area, the second program stored in the second program area, that is, the second program that controls the minimum control required to access the recording medium The function of reading the backup data of the first program from the backup area on the recording medium using the second program and transferring the data to the first program area is added to the backup function.

In such a configuration, the loader program does not need to have an access function corresponding to the second program for backup. Here, if an abnormality is found in the contents of the second program area, the backup area on the recording medium cannot be accessed, so that backup processing using the backup data in the backup area cannot be performed. By setting the device in the not-ready state, it becomes possible to issue a program download command again from the host device and perform the program download process again, so that the function of the data recording / reproducing device can be restored.

[0027]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a magnetic disk drive according to one embodiment of the present invention.

In FIG. 1, reference numeral 1 denotes a disk (magnetic disk) as a medium on which data is recorded, and 2 denotes data writing (data recording) to the disk 1 and data reading (data reproduction) from the disk 1. This is the head (magnetic head) used. Here, disk 1
Are provided in layers (three in the figure), and the heads 2 are provided corresponding to the respective data surfaces of the respective disks 1.

A large number of concentric tracks are formed on both surfaces of the disk 1, and each track is used for positioning control and the like (cylinder data indicating a cylinder number and a positional error in the cylinder indicated by the cylinder data indicating a waveform error). A plurality of servo areas on which servo data (including burst data for indicating amplitude) are recorded are arranged at equal intervals.
These servo areas are radially arranged on the disk 1 over the respective tracks from the center. The area between the servo areas is a user area. A plurality of data sectors are set in the user area between the servo areas.

Each surface of each disk 1 (for example, on the inner peripheral side)
As shown in FIG. 2, a system area 101 is allocated to each of the predetermined areas. The system area 101 is set in a different area from the data area 102, and is used for storing information (defect list) of the defect on the corresponding disk surface. In addition, at least two system areas 101 among the system areas 101 provided on each surface of each disk 1 have the configuration shown in FIG.
As shown in FIG. 7, it is checked whether the backup area 103 for backing up the control program stored in the flash ROM 11 described later and whether the disk access using the basic disk access FW 116 described later can be normally performed. Test area 1 used for
04 is reserved.

Disk 1 is a spindle motor (SPM)
3. High speed rotation. The head 2 is attached to a head moving mechanism called a carriage 4, and moves in the radial direction of the disk 1 by the movement of the carriage 4. The carriage 4 is driven by a voice coil motor (VCM) 5.

The spindle motor 3 and the voice coil motor 5 are connected to a motor driver 6. The motor driver 6 drives the motor 3 by supplying a control current to the spindle motor 3 and drives the motor 5 by supplying a control current to the voice coil motor 5. The value of the control current (control amount) is determined by calculation processing of the CPU (microprocessor) 10, and is given, for example, as a digital value.

Each head 2 is connected to a head IC 7 mounted on a flexible printed circuit (FPC). The head IC 7 controls switching of the head 2 and inputs and outputs read / write signals to and from the head 2, and has a head amplifier 71 that amplifies an analog output read by the head 2.

The read / write IC 8 receives an analog output (read signal of the head 2) read from the disk 1 by the head 2 and amplified by the head amplifier 71 in the head IC 7, and receives a signal necessary for a data reproducing operation. A decoding function for performing processing, an encoding function for performing signal processing necessary for recording data on the disk 1, and a reproduction processing of servo data necessary for servo processing such as head positioning control (a processing for extracting burst data in the servo data) And a signal processing function for performing the above.

The servo processing circuit 9 includes a read / write IC
In step 8, signal processing necessary for servo processing is executed upon receiving the reproduced servo data. That is, the servo processing circuit 9 has a decoding function for extracting and decoding cylinder data (cylinder number) and the like in the servo data, and a timing generation function such as a write gate. The servo processing circuit 9 performs A / D (analog / digital) conversion of the burst data (analog signal) extracted by the read / write IC 8 and performs C / D conversion.
It also has an A / D conversion function for outputting to the PU 10.

The CPU 10 is, for example, a one-chip microprocessor. This CPU 10 has a flash R
The control program (hereinafter referred to as F
W) is controlled in accordance with each section in the magnetic disk drive. That is, the CPU 10 moves the head 2 to a target position (by controlling the driving of the voice coil motor 5 via the motor driver 6) in accordance with the servo data (cylinder data and burst data therein) extracted by the servo processing circuit 9. A well-known control such as positioning control for controlling the read / write data by controlling the HDC 14 is performed.

The CPU 10 also performs control (eg, FW download processing according to the loader program), FW backup management according to the loader program (and the basic disk access control program), and self-diagnosis processing according to the self-diagnosis program at the time of FW download. processing)
I do.

The CPU 10 has a flash ROM 11 as a rewritable non-volatile memory (rewritable ROM) storing an FW (control program, control firmware) and the like for controlling each unit in the magnetic disk device. And the work area of the CPU 10
Is connected to a RAM 12 as a rewritable volatile memory that provides a storage area for control parameters used by the controller.

As shown in FIG. 3, a main program unit 111, a basic disk access program unit 112, a self-diagnosis unit 113, and a loader unit 114 are secured in the flash ROM 11.

The main program unit 111 stores the data in the disk 1
An area (main FW area) for storing a disk control program (hereinafter, referred to as main FW) 115 for controlling general disk control except for basic operations (disk access operations) such as read / write for the basic disk. The access program unit 112 stores a basic disk access control program (hereinafter, referred to as basic disk access FW) 116 for controlling basic access operations (disk access operations) such as read / write to the disk 1 (media). (Basic disk access FW area).

The program sections 111 and 112 are defined as changeable areas # 1 and # 2 in which the contents (FW) can be changed from outside. However, although the contents of the changeable area # 1 (main program unit 111) can be changed by a general user, the changeable area # 2 can be changed.
Changing the contents of the (basic disk access program unit 112) by a general user is prohibited. To change the contents of this area # 2, a special password called a master password is required.

For example, at the beginning of the FWs 115 and 116 stored in the program units 111 and 112, the type of the magnetic disk device to which the data of the FW is applied, and the FW
A header H is set as identification information unique to the type of data (program type), and at the end, for example, a checksum CS is set as error detection information of data of the program.

The self-diagnosis section 113 is an area (self-diagnosis program area) for storing a self-diagnosis program 117 for self-diagnosis as to whether or not the FW download processing has been normally performed. This is an area (loader program area) for storing the loader program 118 for performing FW download processing. The self-diagnosis unit 113 and the loader unit 114 are defined as a change-prohibited area in which the user is prohibited from changing the contents.

Referring back to FIG. 1, the CPU 10 includes:
In addition to the flash ROM 11 and the RAM 12, an EEPROM (Elec) as a rewritable nonvolatile memory
trically Erasable and Programmable Read Only Memor
y) 13 and a disk controller (HDC) 14 are connected.

The EEPROM 13 is used for storing parameters for controlling the magnetic disk drive. This EE
The PROM 13 has an execution flag setting area 132 for storing a flag (execution flag) 131 indicating that the download is being executed.

The disk controller (HDC) 14
It controls command and data communication with a host device (not shown), and also controls data communication with the read / write IC 8 (via the disk 1). This H
The DC 14 is connected to a buffer memory (buffer RAM) 15 including, for example, a RAM or the like, in which read / write data is stored in a cache system, and a host interface 16. Host interface 16
Is an interface between the HDC 14 and the host device, and the HDC 14 communicates commands and data with the host device via the host interface 16.

Here, the storage form of the program at the time of shipment of the magnetic disk device having the configuration shown in FIG. 1 will be described. First, the main FW 115 is stored in the main program unit 111 on the flash ROM 11, and the basic disk access FW1 is stored in the basic disk access program unit 112.
16 are stored.

A backup area 103 is provided in at least two of the system areas 101 provided for each surface of each disk 1, and the backup area 103 is provided in the flash ROM 11. Backup data of the contents of the program units 111 and 112 (both FW data of the main FW 115 and the basic disk access FW 116) are stored. Here, the reason that the backup area 103 is secured in at least two system areas 101 is that even if the backup area 103 in one system area 101 becomes abnormal, the data in the backup area 103 in another system area 101 becomes abnormal. Is made available.

When the magnetic disk drive is shipped, the contents of the program units 111 and 112 on the flash ROM 11 are
The contents of the backup area 103 on the system area 101 of the disk 1 match.

The loader unit 114 on the flash ROM 11 receives the flash R from the outside (host device).
The OM 11 (the main program unit 111 and the basic disk access program unit 112 above) stores a loader program 118 which controls the download operation when downloading FW data (change data of the main FW 115 and the basic disk access FW 11). 113 stores a self-diagnosis program 117 for checking whether or not the FW has been correctly downloaded.

The self-diagnosis unit 113 and the loader unit 114 are defined as change-prohibited areas, and their contents (self-diagnosis program 117 and loader program 1) are defined by the user.
Changes in 18) are prohibited.

On the other hand, the main program section 111 is defined as a changeable area # 1, and its contents can be changed by a general user. In addition, the basic disk access program unit 112 changes the changeable area # 2.
, But to change its contents,
A special password called the master password (assigned to the manufacturer) is required. Therefore, the contents of the basic disk access program unit 112 cannot be changed by a general user. In the present embodiment, the master password is set in the loader program 118, but may be set in the EEPROM 13.

The change prohibition area (the self-diagnosis section 113 and the loader section 114), the changeable area # 1 (the main program section 111), and the changeable area # 2 (the basic disk access program section 112) are separated by a loader program. Controlled by 118.

Next, the operation of the magnetic disk drive having the configuration shown in FIG.
Change FW stored in 11 (Upgrade)
An example will be described with reference to the flowcharts of FIGS. 4 and 5 as appropriate.

First, the user selects the main program unit 11
When the user wants to change the FW stored in the storage device 1 (via the host interface 16)
By operating the connected host device, the host device issues a command for instructing FW download (FW download command). This command includes F
Information (change area information) designating an area on the flash ROM 11 (here, the changeable area # 1 to which the main program unit 111 is assigned) to be changed, and a password are added.

The FW download command issued from the host device is transmitted to the host interface 16 and the HDC 1
4 to the CPU 10. When receiving the FW download command from the host device (step S1), the CPU 10 sends the FW data to be downloaded from the host device to the host interface 16 and the HDC 14.
Through the buffer memory 15 (step S
2). The processing up to this point is based on the main F
This is performed according to W115.

Now, when step S2 is executed,
A loader program 118 stored in the loader unit 114 on the flash ROM 11 is started. Then CP
In accordance with the loader program 118, the U10 checks the FW data on the buffer memory 15, the area specified by the change area information added to the FW download command received in step S1, and the password as described below. It is determined whether or not the FW download specified by the command is valid (step S3).

First, the CPU 10 determines whether or not the password (password from the host device) added to the FW download command received in step S1 is correct (indicating that the password is a valid user of the magnetic disk device). Is checked by comparing with a password stored in a predetermined area of the EEPROM 13, for example. If the password is not correct,
U10 terminates the FW download command with an error.

In the FW data, a header H and a checksum CS are set as identification information of the FW data. Therefore, the CPU 10 determines that the header H set at (the head of) the FW data on the buffer memory 15 is
It is determined whether or not the header H is correct by checking whether the type is unique to the type of the magnetic disk device and the program type corresponding to the area specified by the change area information. Similarly, the CPU 10 calculates the checksum from the FW data in the buffer memory 15 and
It is determined whether or not the FW data is correctly transferred to the buffer memory 15 by checking whether or not the FW data matches the checksum CS set at (the end of) the data.

As described above, the CPU 10 executes the above-described step S
In step 3, by checking the header and checksum for the FW data in the buffer memory 15, it is checked whether the FW data is correct. If at least one of the header and the checksum is incorrect, the CPU 10 terminates the FW download command with an error.

The CPU 10 checks the area specified by the change area information. If the change prohibited area (such as the self-diagnosis unit 113 or the loader unit 114) is specified, the FW download command ends in an error. I do.
When the area specified by the change area information specifies the changeable area # 2 (which cannot be changed by a general user), the CPU 10 sets the password from the host device to (the loader program 118). ) Check whether the password is the master password, and if it is not the master password, terminate with an error.

The CPU 10 proceeds to step S3 described above.
As a result of the check in step 1, if it is determined that the FW download specified by the FW download command is valid, the execution flag setting area 1 in the EEPROM 13
An execution flag 131 indicating that the FW download is being executed is set to the CPU 32 (step S4).

Next, the CPU 10 sends the FW currently stored in the area on the flash ROM 11 specified by the change area information (the main FW 115 on the main program unit 111 in this example in which the changeable area # 1 is specified). If the changeable area # 2 is designated, the basic disk access FW 116 on the basic disk access program unit 112 is read), and the FW is allocated to each surface of each disk 1 (media). Of at least two system areas 101, the system area 101 is saved (for backup) in a backup area 103 secured on the system area 101 (step S5).

Next, the CPU 10 transfers the FW data in the buffer memory 15 to the flash ROM 11 and writes the FW data in the area on the flash ROM 11 specified by the change area information (step S6). As a result, the changeable area # 1 (the main program unit 1)
In this example in which 11) is specified, the main FW 115 on the main program unit 111 is changed (upgraded) to a new FW. The changeable area # 2 (the basic disk access program unit 1)
If 12) is specified, the basic disk access FW 11 on the basic disk access program unit 112
6 will be changed (upgraded) to a new FW.

Now, when the above step S6 is executed,
The self-diagnosis program 117 stored in the self-diagnosis unit 113 on the flash ROM 11 is started. Then, the CPU 10 executes the main program unit 111 and the basic disk access program unit 1 on the flash ROM 11.
The self-diagnosis processing for the FW data stored in the flash memory 12, that is, the self-diagnosis processing of the control program including the FW data downloaded from the host device to the flash ROM 11 is executed according to the self-diagnosis program 117 (step S 7).

Hereinafter, details of the self-diagnosis processing will be described with reference to the flowchart of FIG. First, the CPU 10
Main program unit 111 on flash ROM 11
(Changeable area # 1) and F stored in the basic disk access program unit 112 (changeable area # 2).
The header H and the checksum CS of the W data (control program) are checked (step S21).

Next, if the header H and the checksum CS of the FW data are correct, the CPU 10 transmits the FW data (control program), that is, the main program unit 11.
1 and the control program including the downloaded new FW data stored in the basic disk access program unit 112, using the buffer memory 15
And whether the buffer memory 15 can be normally accessed by performing a write / read operation on the test area 104 prepared in the system area 101 of the disk 1 (step S22).
A check is made as to whether the disk 1 can be written normally (step S23), and a check is made whether the disk 1 can be read normally (step S24).

Here, when the FW data of the changeable area # 1 (main program section 111) is changed, as a result of the self-diagnosis processing (step S7) according to the self-diagnosis program 117, the changed FW data ( Main F
W) is assumed to be abnormal.

In this case, if the FW data (basic disk access FW 116) of the unchangeable changeable area # 2 (basic disk access program unit 112) is normal (step S8), the CPU 10 The normal basic disk access FW
116, the system area 10 on the disk 1
The data of the main FW 115 before the change stored in the backup area 103 is read out, transferred to the flash ROM 11, and transferred to the flash ROM 1.
1 changeable area # 1 (main program unit 111)
(Step S9).

At the time of transfer to the flash ROM 11, the CPU 10 checks whether or not the contents of the main FW 115 in the backup area 103 of the system area 101 to be transferred before the change are normal, by checking the checksum CS. Check by checking and if normal, forward it. On the other hand, if the status is not normal, the main FW 115 before the change in the backup area 103 of the other system area 101 is set as a new transfer candidate.

As described above, the main FW 115 before the change whose contents are normal is transferred from the backup area 103 of the system area 101 of the disk 1 to the changeable area # 1 (main program section 111) of the flash ROM 11 so that the change ( The FW data (main FW 115) of the changeable area # 1 (main program unit 111) which has become abnormal due to (download) can be returned to the state before the change.

Then, the CPU 10 resets the execution flag 131 set in the execution flag setting area 132 of the EEPROM 13 (according to the loader program 118) (step S10), and ends the FW download command (step S11).

On the other hand, the unchangeable changeable area # 2
If not only the FW data (basic disk access FW 116) of the (basic disk access program unit 112) but also the FW data (main FW 115) of the changed changeable area # 1 (main program unit 111) are normal, the CPU 10 Proceeds from step S7 to step S10, resets the execution flag 131, and ends the FW download command (step S11).

Next, contrary to the above example, the changeable area #
2 (basic disk access program unit 112) FW
A case where data is changed will be described. If the changeable area # 2 (the basic disk access program unit 11
If the FW data (basic disk access FW 116) after the change is found to be abnormal in the self-diagnosis processing (step S7) as a result of changing the FW data of 2), the CPU 10 resets the basic disk access FW 116 It is determined that the restoration process (step S9) to the original FW used cannot be performed, and the magnetic disk device (drive) is not ready (NOT) (by the minimum communication function with the host device provided by the loader program 118). READY) (step S12), and the FW download command ends as it is (step S11). In this case, EEP
The execution flag 131 in the execution flag setting area 132 of the ROM 13 remains set.

Now, the changeable area # 2 issued from the host device (basic disk access program unit 112)
When the magnetic disk device shown in FIG. 1 executes the FW download command for the target, and the magnetic disk device becomes not-ready as described above, the host device again executes the FW download for the changeable area # 2. Issue a command. As a result, the FW download process for the changeable area # 2 is performed again, and the function (operation) of the magnetic disk device can be automatically restored. When the FW download process ends normally again, the execution flag 131 is reset.

On the other hand, the self-diagnosis processing (step S
If no abnormality is found in 7), the execution flag 1
31 is reset (step S10), and the FW download command ends (step S11).

Next, the operation of the magnetic disk drive of FIG. 1 when the power is turned on will be described with reference to the flowchart of FIG. In the magnetic disk device of FIG. 1, when the device is turned on, first, a loader program 118 stored in the loader unit 114 on the flash ROM 11 is started.

Then, the CPU 10 executes the loader program 1
According to 18, the state of the execution flag 131 on the execution flag setting area 132 of the EEPROM 13 is checked (step S31).

If an abnormality such as power shutoff occurs in the magnetic disk device of FIG. 1 during the FW download process, it is set (at step S4 in FIG. 4) at the start of the FW download process (in the EEPROM 13). The execution flag 131 (on the execution flag setting area 132) remains as it is. On the other hand, if an abnormality such as power shutoff occurs after the FW download process ends normally (or when the FW download process is not performed), the execution flag 131 is reset.

When the CPU 10 determines that the execution flag 131 remains set in the check in step S31, the self-diagnosis unit 1 in the flash ROM 11
13 is started.

Then, the CPU 10 executes the flash ROM 1
1 changeable area # 1 (main program unit 111)
The self-diagnosis program 117 performs the same self-diagnosis processing (see the flowchart in FIG. 5) as in step S7 in FIG. 4 for each FW data stored in the changeable area # 2 (basic disk access program unit 112). (Step S32).

If the self-diagnosis processing (step S3
2) As a result, the changeable area # on the flash ROM 11
If an abnormality is detected only in the main FW 115 stored in the first (main program unit 111) (step S33), the CPU 10 stores the abnormality in the changeable area # 2 (basic disk access program unit 112). Using the normal basic disk access FW 116 according to the loader program 118, the backup data of the contents of the main program unit 111 stored in the backup area 103 of the system area 101 on the disk 1 is read out, and the read out data is stored in the flash ROM 11. Transfer and changeable area # 1 on the flash ROM 11
(Main program 111) (Step S)
34).

Thus, even if the main program unit 1
Even if an abnormality such as power interruption occurs during the FW download processing to the FW 11, the FW data (main FW 115) of the main program unit 111 is restored to the state before the FW download processing by the above-described operation when the power is turned on thereafter. can do.

However, while the contents of the changeable area # 1 (main program section 111) of the flash ROM 11 (main FW 115 before change) are being transferred to the backup area 103 of the system area 101 in the process of step S5. If an abnormality such as power shutdown occurs, the contents of the backup area 103 will not be normal,
Cannot be used for backup.

Then, the CPU 10 proceeds to step S34.
The main program unit 11 on the flash ROM 11
When the backup data is transferred to the backup data in the backup area 103 of the system area 101 to be transferred (here, the backup data of the contents of the main program unit 111, That is, it is checked by checking the checksum CS whether or not the main FW 115) before the change is normal. If the checksum CS is normal, it is transferred. If it is not normal, the corresponding backup data in the backup area 103 of the other system area 101 is set as a new transfer candidate.

The CPU 10 includes a main program unit 111
When the FW data (main FW 115) is restored to the original state, the execution flag setting area 132 of the EEPROM 13 is restored.
The execution flag 131 set above is reset (according to the loader program 118) (step S3).
5) The process proceeds to a normal routine according to both FWs stored in the main program unit 111 and the basic disk access program unit 112.

On the other hand, when an abnormality is found in the basic disk access FW 116 stored in the changeable area # 2 (basic disk access program section 112) (step S33), the CPU 10 sets the change to the changeable area # 2. This magnetic disk device (drive) is not-ready (with the minimum communication function with the host device provided by the loader program 118) assuming that an abnormality such as power shutdown has occurred during the FW download process (step S3).
6). In this case, the host device issues an FW download command for the changeable area # 2, and causes the magnetic disk device of FIG. 1 to perform another FW download process for the changeable area # 2. Thus, the function of the magnetic disk device can be restored.

If no abnormality is found in either of the FWs stored in the changeable area # 1 (main program section 111) and the changeable area # 2 (basic disk access program section 112), , CPU10
Indicates that an abnormality such as power shutdown has occurred after the FW download process has been normally completed (and before the execution flag 131 is reset), and that there is no problem. In this case, the CPU 10 resets the execution flag 131 set on the execution flag setting area 132 of the EEPROM 13 (according to the loader program 118) (step S35), and stores the execution flag 131 in the main program unit 111 and the basic disk access program unit 112. Both F
The routine proceeds to a normal routine according to W.

In the above-described power-on processing, when the execution flag 131 is set, the self-diagnosis processing according to the self-diagnosis program 117 is performed, and three processing steps (in accordance with the result of the diagnosis processing) are performed. Step S3
4, S35, S36), but the present invention is not limited to this. For example, execution flag 1
When 31 is set, the magnetic disk device (drive) may be set to be not ready unconditionally. In this situation, the host device can restore the function of the magnetic disk device by causing the magnetic disk device to perform the FW download process again.

In this system, even if there is no abnormality in the basic disk access FW 116 stored in the changeable area # 2 (basic disk access program unit 112),
Since the FW download process is performed again, the backup area 10 of the system area 101 on the disk 1 is used by using the basic disk access FW 116.
3 is wasteful as compared with the method of restoring the contents of the main program unit 111 stored in the flash ROM 11 into the changeable area # 1 (main program unit 111) on the flash ROM 11. However, the self-diagnosis processing according to the self-diagnosis program 117 becomes unnecessary.

In the embodiments described above, the magnetic disk device has been described. However, the present invention is generally applied to a data recording / reproducing device for recording / reproducing information on a recording medium in accordance with a control program, such as a magneto-optical disk device. It is possible.

[0092]

As described in detail above, according to the present invention, the user can change the control program of the data recording / reproducing apparatus (on the system), and even if an abnormality occurs at that time, the data recording / reproducing apparatus can be changed. The function of the device can be restored.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a magnetic disk drive according to an embodiment of the present invention.

FIG. 2 is a system area 1 for the disk 1 in FIG.
FIG. 2 is a diagram showing an arrangement of the system area 101 and an area unique to the embodiment allocated to the system area 101.

FIG. 3 is a diagram showing an example of area allocation to a flash ROM 11 in FIG. 1 and an example of a program stored in the area.

FIG. 4 is an exemplary flowchart for explaining processing at the time of receiving a FW download command in the embodiment.

FIG. 5 is a flowchart for explaining a self-diagnosis process in S7 in FIG. 4;

FIG. 6 is an exemplary flowchart for explaining power-on processing according to the embodiment;

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Disk (recording medium), 10 ... CPU (program execution means), 11 ... Flash ROM (rewritable nonvolatile memory), 13 ... EEPROM (rewritable nonvolatile storage means), 15 ... Buffer memory, 101 ... System area Reference numeral 103: backup area 104: test area 111: main program section (first program area) 112: basic disk access program section (second program area) 113: self-diagnosis section (self-diagnosis area) 114: loader section (loader area) 115: main FW (first program) 116: basic disk access FW (second program) 117: self-diagnosis program 118: loader program 131: execution flag (flag) Information), 132 ... execution flag setting area Flag information setting area).

Claims (12)

[Claims] 1. A data recording / reproducing apparatus provided with an information recording medium, wherein a control program is defined as a changeable area whose contents can be changed, and a control program for controlling the data recording / reproducing apparatus is stored. A host device, a rewritable nonvolatile memory defined as a program area and a change prohibited area in which change of contents is prohibited, and a loader area storing a loader program for changing the control program is allocated; And a program executing means for executing the control program and the loader program. The loader program specifies a program change area from the host device to the host interface. Download the program to the specified destination area When a program download command for instructing loading is sent, a program download process instructed by the command is performed, and when a change destination area specified by the command is the control program area on the rewritable nonvolatile memory, A data recording / reproducing apparatus characterized by including a program download function of downloading a program specified by the command from the host device to the first program area. 2. A data recording / reproducing apparatus provided with an information recording medium, wherein a first content which can be changed without a special password is specified.
Of the control program for controlling the data recording / reproducing device, which controls the minimum control required to access the recording medium.
A first program area in which the remaining first programs except for the first program are stored, a second changeable area whose contents can be changed under the specification of a special password, and the second program Are assigned as a second program area in which a loader program for changing the first and second programs is stored, and a loader area in which a loader program for changing the first and second programs is stored. A rewritable nonvolatile memory; a host interface serving as an interface with a host device; and a program executing means for executing the control program including the first and second programs and the loader program. The program is transmitted from the host device to the host interface, where the program is to be changed. When a program download command with a password instructing to download the program to the designated change destination area is sent, the program download processing indicated by the command is performed, and the change destination area designated by the command is designated. Is the first program area on the rewritable nonvolatile memory, downloads the program specified by the command without the special password from the host device to the first program area, In the case where the change destination area specified by the command is the second program area on the rewritable nonvolatile memory, only when the password attached to the command matches the special password, the command The program specified in the above Data recording and reproducing apparatus which comprises a program download function of downloading the second program area. 3. The storage medium is assigned a backup area in which backup data of the control program stored in the rewritable nonvolatile memory is stored. The loader program is configured to execute the program download command. 3. A backup function for restoring the rewritable nonvolatile memory to its original state according to the contents of the backup area on the recording medium when the download indicated by the instruction is abnormal. A data recording / reproducing apparatus according to claim 1. 4. A backup function for restoring the rewritable non-volatile memory to its original state according to the contents of the backup area on the recording medium when the download indicated by the program download command is interrupted. 4. The data recording / reproducing apparatus according to claim 3, comprising: 5. A backup area for storing backup data of the control program stored in the rewritable nonvolatile memory is allocated to the recording medium. When the download indicated by the program download command is started or after the download is normally completed, the contents before or after the change of the change destination area specified by the command are stored in the backup area of the storage medium, 3. The data recording method according to claim 1, further comprising a backup function for restoring the rewritable nonvolatile memory to an original state according to the contents of the backup area at the time of a download failure. Playback device. 6. The loader program stores the contents before or after the change in the backup area,
6. The data recording / reproducing apparatus according to claim 5, further comprising a function of performing verification for confirming that the data is stored correctly. 7. A plurality of the backup areas are allocated on the recording medium, and the loader program converts a backup area whose contents are normal from among the plurality of the backup areas into the rewritable nonvolatile memory. 6. The data recording / reproducing apparatus according to claim 5, further comprising a backup area selecting function for selecting a backup source. 8. The non-volatile memory is defined as a change-prohibited area in which change of contents is prohibited, and can be executed by the program executing means for self-diagnosing whether or not the program download processing has been correctly performed. The loader program executes the self-diagnosis program by the program execution unit after the program is downloaded to the area specified by the program download command. 6. The data recording / reproducing apparatus according to claim 3, further comprising a self-diagnosis control function for causing the data recording / reproducing apparatus to perform the self-diagnosis. 9. A flag information setting for setting flag information which is set when the program download process is started to indicate that the program download process is being performed, and which is released when the program download process ends normally. In addition to a rewritable non-volatile storage unit to which an area is assigned, the non-volatile memory is defined as a change-prohibited area in which a change in the content is prohibited, and whether the program download process has been correctly performed or not. And a self-diagnosis area storing a self-diagnosis program executable by the program execution means for self-diagnosis of the loader program. The loader program is downloaded to an area specified by the program download command. After the data recording and reproducing device A self-diagnosis control function for causing the program execution means to execute the self-diagnosis program when power is turned on and flag information indicating that the program is being downloaded is set in the flag information setting area The data recording / reproducing apparatus according to claim 3 or 5, wherein 10. A backup area for storing backup data of the control program stored in the rewritable nonvolatile memory is allocated to the recording medium, and the nonvolatile memory includes: A self-diagnosis area, which is defined as a change-prohibited area in which the contents are prohibited from being changed and stores a self-diagnosis program executable by the program execution means for self-diagnosis as to whether or not the program download process has been correctly performed, The loader program has a self-diagnosis control function for causing the program execution means to execute the self-diagnosis program after a program is downloaded to an area specified by the program download command. Instruct When the download is started, the contents before the change of the change destination area specified by the command are stored in the backup area of the storage medium, and as a result of executing the self-diagnosis program, the rewritable nonvolatile memory If an abnormality is found in the contents of the first program area and no abnormality is found in the contents of the second program area, the data stored in the backup area on the recording medium is stored. The backup data of the first program among the backup data of the control program is transferred to the first program area by using the second program stored in the second program area. When the first program area is restored to its original state and an abnormality is found in the contents of the second program area The data recording and reproducing apparatus according to claim 2, characterized in that it comprises a backup function for the data recording and reproducing apparatus and not-ready condition. 11. A flag information setting for setting flag information which is set when the program download process is started to indicate that the program download process is being performed, and which is released when the program download process ends normally. A rewritable nonvolatile storage unit to which an area is assigned; a backup area for storing backup data of the control program stored in the rewritable nonvolatile memory in the recording medium; And the nonvolatile memory is defined as a change-prohibited area in which a change of the content is prohibited, and can be executed by the program executing means for self-diagnosing whether or not the program download process has been correctly performed. Self-diagnosis area where various self-diagnosis programs are stored The loader program is assigned, after the program is downloaded to the area specified by the program download command, the power of the data recording / reproducing device is turned on, and the program download is performed to the flag information setting area. When flag information indicating that processing is in progress is set, a self-diagnosis control function for causing the program execution means to execute the self-diagnosis program, and when starting download indicated by the program download command, The contents before the change of the change destination area specified by the command are stored in the backup area of the storage medium, and as a result of the execution of the self-diagnosis program, the first program area on the rewritable nonvolatile memory Abnormality was found in the contents of The second
If no abnormality is found in the contents of the program area, the backup data of the first program among the backup data of the control program stored in the backup area on the recording medium is replaced with the backup data of the first program. The first program area is restored to its original state by transferring to the first program area using the second program stored in the second program area. 3. The data recording / reproducing apparatus according to claim 2, further comprising a backup function of setting the data recording / reproducing apparatus to a not-ready state when an abnormality is found in the contents. 12. The self-diagnosis program executes a basic operation of the data recording / reproducing apparatus by providing a test area on the recording medium using the control program stored in the rewritable nonvolatile memory. 12. The data recording / reproducing apparatus according to claim 8, further comprising a self-diagnosis function for performing a self-diagnosis as to whether or not downloading has been correctly performed.