JPWO2014109100A1 - Information processing apparatus, information processing method, and program - Google Patents

Abstract

Whether the first program, the second program, and the third program are selected, and the CPU (110) that performs the startup process using the selected program, and whether the second program and the third program are correct, respectively. A program determination unit (111) for determining whether the program is determined to be correct among the second program and the third program as a copy source program, and a program that is determined not to be correct is determined as a copy destination program A determination unit (112), a copy processing unit (113) that updates a copy destination program with a copy source program, an activation storage unit (131) that stores copy source information indicating the copy source program, and a first program are used. If the startup process cannot be performed by referring to the copy source information, the copy source program It includes activation control unit for instructing the CPU (110) to perform the activation process selected and the (130).

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

  In recent years, NAND flash memories, which are nonvolatile memories, have become widespread. The NAND flash memory has an advantage that the capacity is increased as compared with the NOR flash memory, and the bit unit price is low. On the other hand, the NAND flash memory has demerits that there is an upper limit in the number of data writes, a limited data retention period, and a limited number of data reads. Therefore, there is a possibility that a bit error occurs when reading data and correct data cannot be read. Therefore, when a program for starting the system is stored in the NAND flash memory, a situation where the system cannot be started due to a bit error or a situation where the system hangs up after starting may occur.

  On the other hand, in Patent Document 1, the first boot program is read from the nonvolatile memory for the system, error detection is performed on the first boot program, and the read first boot program is illegally changed. A control device is described that reads the second boot program from the non-volatile memory for backup when it is determined that it is. The control device performs error detection on the read second boot program, and outputs an error when it is determined that the second boot program is illegally changed. On the other hand, when it is determined that the boot program has not been illegally changed as a result of error detection for the boot program, the control device performs a boot process using the boot program.

  Patent Document 2 describes an information processing apparatus that, when rewriting data stored in a non-volatile memory, stores a copy of data to be rewritten as backup data prior to rewriting the data. Has been. The information processing apparatus operates after determining whether or not the rewritten data has been normally processed by using a flag indicating the rewrite execution status, and confirming the validity.

JP 2010-26650 A JP 2007-328438 A

  In the control device described in Patent Document 1, when the boot process is performed a predetermined number of times, the first boot program is overwritten with the second boot program. However, when the first boot program is rewritten with the second boot program, if the power is cut off, the first boot program is not overwritten normally, and thus the system does not start. .

  In addition, the information processing apparatus described in Patent Document 2 can recover data even if a power interruption occurs during data rewriting. However, when the data rewrite target is a boot program, there is a problem that if the power is cut off during the data rewrite, the system is not started because the data is incomplete.

  In view of the above, an object of the present invention is to enable restart with a highly reliable start program when an error is detected in the start program.

  An information processing apparatus according to an aspect of the present invention includes a storage unit that stores a first program, a second program, and a third program as a startup application program, and a first program stored in the storage unit, A process execution unit that selects one of the second program and the third program and performs a start-up process using the selected program, and the second program and the third program stored in the storage unit are respectively A program determination unit for determining whether the program is correct, and a program determined to be correct by the program determination unit among the second program and the third program stored in the storage unit is determined as a copy source program, A copy determination unit that determines a program that is not determined to be correct by the program determination unit as a copy destination program; In the storage unit, a copy processing unit that updates a copy destination program determined by the copy determination unit with a copy source program determined by the copy determination unit, and a copy source program determined by the copy determination unit A startup storage unit that stores copy source information, and a copy stored in the startup storage unit when the process execution unit cannot perform startup processing using the first program stored in the storage unit An activation control unit that refers to the original information and selects the copy source program determined by the copy determination unit to instruct the process execution unit to perform an activation process, and the process execution unit includes the activation In accordance with an instruction from the control unit, the second program or the third program stored in the storage unit is selected, and an activation process is performed using the selected program. And performing.

  An information processing method according to an aspect of the present invention selects any one of a first program, a second program, and a third program as an activation application program, and performs activation processing using the selected program. A process execution process to be performed; a program determination process for determining whether or not each of the second program and the third program is correct; and it is determined that the second program and the third program are correct in the program determination process A copy determination process for determining a copied program as a copy source program, a copy determination process for determining a program that has not been determined correct in the program determination process as a copy destination program, and a copy source program determined in the copy determination process. Copy process that updates the copy destination program determined in the determination process A process, a startup storage process for storing copy source information indicating a copy source program determined in the copy determination process, and the process execution process cannot perform a startup process using the first program, A startup control process for referring to the copy source information stored in the startup storage process and instructing the process execution process to select the copy source program determined in the copy determination process and perform the startup process. The process execution process selects the second program or the third program in accordance with an instruction from the activation control process, and performs an activation process using the selected program.

  A program according to an aspect of the present invention includes a first program, a second program, and a third program stored as an application program for starting a computer, a first program stored in the storage unit, The process execution means for selecting either the second program or the third program and performing the startup process using the selected program, and the second program and the third program stored in the storage means are correct. Program determining means for determining whether the program is determined to be correct among the second program and the third program stored in the storage means as the copy source program, and determining the program The program that is not judged correct by the means is the copy destination program. A copy determining means for determining, a copy processing means for updating the copy destination program determined by the copy determining means with the copy source program determined by the copy determining means in the storage means, determined by the copy determining means; An activation storage means for storing copy source information indicating the copy source program, and the activation storage means when the process execution means cannot perform an activation process using the first program stored in the storage means. Referring to the stored copy source information, select the copy source program determined by the copy determination unit and function as an activation control unit that instructs the process execution unit to perform an activation process, and execute the process In accordance with an instruction from the activation control means, the means stores the second program or the third program stored in the storage means. Select grams, and performing the activation process by using the selected program.

  According to one embodiment of the present invention, when an error is detected in a startup program, the startup can be performed with a highly reliable startup program.

1 is a block diagram schematically showing a configuration of an information processing device according to a first embodiment. FIG. 3 is a conceptual diagram showing a program stored in a second ROM in the first embodiment. 3 is a flowchart showing an operation of a start control unit in the first embodiment. 3 is a flowchart showing a startup operation of a CPU in the first embodiment. 4 is a flowchart illustrating processing in a program determination unit according to the first embodiment. 6 is a flowchart illustrating processing in a copy determination unit according to the first embodiment. 3 is a flowchart illustrating a start state monitoring process of a start control unit in the first embodiment. FIG. 3 is a block diagram schematically showing a configuration of an information processing device according to a second embodiment. FIG. 11 is a conceptual diagram showing a program and data stored in a second ROM in the second embodiment. 10 is a flowchart illustrating processing in a start control unit according to the second embodiment. 10 is a flowchart illustrating a startup operation of a CPU according to the second embodiment.

Embodiment 1 FIG.
FIG. 1 is a block diagram schematically showing the configuration of the information processing apparatus 100 according to the first embodiment. In FIG. 1, an information processing apparatus 100 includes a CPU (Central Processing Unit) 110, a first ROM (Read Only Memory) 120, a second ROM 121, a RAM (Random Access Memory) 122, a startup control unit 130, and a startup memory. Unit 131 and timer 132. The CPU 110, the first ROM 120, the second ROM 121, and the RAM 122 are connected by a bus 140.

  The CPU 110 is a processing execution unit that performs information processing in the information processing apparatus 100. The CPU 110 reads a program stored in the first ROM 120 or the second ROM 121 to the RAM 122 and performs various processes. For example, the CPU 110 selects any one of the first program, the second program, and the third program as the activation application program stored in the second ROM 121, and performs the activation process using the selected program. Do. The CPU 110 includes a program determination unit 111, a copy determination unit 112, and a copy processing unit 113.

The program determination unit 111 determines whether the contents of the plurality of programs stored in the second ROM 121 are correct.
The copy determination unit 112 determines a copy source program and a copy destination program for a plurality of programs stored in the second ROM 121 according to the determination result in the program determination unit 111. For example, the copy determination unit determines a program determined to be correct by the program determination unit 111 out of the second program and the third program stored in the second ROM 121 as a copy source program, and is determined to be correct by the program determination unit 111. The program that has not been determined is determined as the copy destination program.
The copy processing unit 113 performs a copy process of a plurality of programs stored in the second ROM 121 based on the determination by the copy determination unit 112. For example, the copy processing unit 113 updates the copy destination program determined by the copy determination unit 112 with the copy source program determined by the copy determination unit 112.

  The first ROM 120 is a non-volatile memory as a storage unit that stores a startup program executed after the reset of the CPU 110 is released. Here, the first ROM 120 is loaded with a minimum program for starting the CPU 110. The first ROM 120 does not have a large program size. Therefore, there is no limit on the number of readings such as a NOR flash, and a highly reliable device can be used.

The second ROM 121 is a non-volatile memory as a storage unit that stores an application program that is read and executed by execution of a startup program. Here, the program configuration stored in the second ROM 121 will be described. The second ROM 121 stores three types of programs and error detection data corresponding to each of them.
FIG. 2 is a conceptual diagram showing a program stored in the second ROM 121. Reference numeral 160 denotes a first program. Reference numeral 161 is error detection data of the first program 160. Specifically, the error detection data is a checksum or CRC (Cyclic Redundancy Check). Reference numeral 162 denotes a second program. Reference numeral 163 is error detection data of the second program 162. Reference numeral 164 denotes a third program. Reference numeral 165 is error detection data of the third program 164. The first program 160, the second program 162, and the third program 164 may have the same contents. Further, the second program 162 and the third program 164 may be configured such that the versions are the same and only the first program has a new version.
The second ROM 121 may be composed of a NAND flash memory for recording a large-scale program.

  The RAM 122 is a readable / writable memory used for the CPU 110 to execute a startup program and an application program.

  The activation control unit 130 performs activation control of the CPU 110. For example, when the CPU 110 cannot perform the activation process using the first program 160, the activation control unit 130 performs the activation process using the program determined as the copy source program by the copy determination unit 112. Instructs the CPU 110. At this time, the activation control unit 130 performs reset control and activation mode setting pin control of the CPU 110 and communicates with the CPU 110. Here, the activation control unit 130 gives the CPU 110 a reset control signal RC when controlling the reset of the CPU 110. In addition, when the activation control unit 130 sets the activation parameter in the activation mode setting pin of the CPU 110, the activation control unit 130 gives the activation mode setting pin control signal BPC to the CPU 110. Furthermore, the activation control unit 130 exchanges a communication signal CO with the CPU 110.

The activation storage unit 131 is a memory to which the activation control unit 130 writes and refers to data. For example, the activation storage unit 131 stores activation parameters and copy source information.
When the activation parameter is “A”, the first program is used at the time of activation. When the activation parameter is “B”, the second program is used at the time of activation. Further, when the activation parameter is “C”, the third program is used at the time of activation.
The copy source information indicates an application program (copy source program) used as a copy source. In this embodiment, when the copy source information is “B”, it indicates that the application program used as the copy source is the second program, and when the copy source information is “C”, it is used as the copy source. Indicates that the application program to be executed is the third program.

  The timer 132 is a time measuring unit that measures time. For example, the timer 132 measures the time after the CPU 110 starts the activation process.

  The information processing apparatus 100 starts to operate when the power supply 150 is turned on. For example, in the information processing apparatus 100, when the power 150 is turned on, the reset of the activation control unit 130 is released, and the activation control unit 130 operates. The operation at this time will be described with reference to the flowchart of FIG.

FIG. 3 is a flowchart showing the operation of the activation control unit 130.
The activation control unit 130 resets the CPU 110 (S10). For example, the activation control unit 130 gives the CPU 110 a reset control signal RC that instructs resetting. CPU110 which received such a signal will be in a reset state.

  Next, the activation control unit 130 reads the activation parameter stored in the activation storage unit 131 (S11). Then, the activation control unit 130 determines whether or not the read activation parameter is “B” (S12). If the activation parameter is “B” (S12: Yes), the process proceeds to step S13. If the activation parameter is not “B” (S12: No), the process proceeds to step S14.

In step S13, the activation control unit 130 determines the activation parameter as “B”.
On the other hand, in step S14, the activation control unit 130 determines whether or not the read activation parameter is “C”. If the activation parameter is “C” (S14: Yes), the process proceeds to step S15. If the activation parameter is not “C” (S14: No), the process proceeds to step S16.

In step S15, the activation control unit 130 determines the activation parameter as “C”.
On the other hand, in step S16, the activation control unit 130 determines the activation parameter as “A”.

  Then, the activation control unit 130 notifies the CPU 110 of the activation parameter determined in step S13, S15, or S16 (S17). For example, when the output pin 2 bit of the activation control unit 130 and the input pin 2 bit of the CPU 110 are connected and the activation control unit 130 is the activation parameter “A”, the output pin 2 bit is set to [0, 1] and the activation parameter When “B”, the output pin 2 bit is set to [1, 0], and when the activation parameter is “C”, the output pin 2 bit is set to [1, 1]. Here, “0” and “1” of the output pin 2 bits correspond to “Low” and “High” in the digital signal, respectively. As described above, the activation control unit 130 sets the activation parameter to the output pin, and transmits the activation parameter to the CPU 110.

  Then, the activation control unit 130 releases the reset state of the CPU 110 (S18). For example, the activation control unit 130 gives the CPU 110 a reset control signal RC instructing release of reset. Receiving such a signal, the CPU 110 releases the reset state and starts operating.

  After the reset is released, the CPU 110 reads and executes the program stored in the first ROM 120. The operation at this time will be described with reference to the flowchart of FIG.

FIG. 4 is a flowchart showing the startup operation of the CPU 110.
First, the CPU 110 performs initial setting (S20). This is, for example, the setting of the access timing parameter of the first ROM 120 and the setting of the access timing of the second ROM 121.

  Next, the CPU 110 performs initial setting of the RAM 122 (S21). For example, when the RAM 122 is an SDRAM (Synchronous Dynamic Random Access Memory), the CPU 110 performs memory clock setting, response speed setting, bus width setting, address pin setting, and the like. By performing such settings, the CPU 110 can access the RAM 122.

  Next, the CPU 110 refers to the state of the input pin and acquires the activation parameter designated by the activation control unit 130 (S22). Then, the CPU 110 determines whether or not the acquired activation parameter is “B” (S23). If the acquired activation parameter is “B” (S23: Yes), the process proceeds to step S24. If the acquired activation parameter is not “B” (S23: No), the process proceeds to step S24. Proceed to S25.

In step S24, the CPU 110 specifies the activation parameter as “B”.
On the other hand, in step S25, the CPU 110 determines whether or not the activation parameter is “C”. If the activation parameter is “C” (S25: Yes), the process proceeds to step S26. If the activation parameter is not “C” (S25: No), the process proceeds to step S27.

In step S <b> 26, the CPU 110 specifies the activation parameter as “C”.
On the other hand, in step S27, the CPU 110 specifies the activation parameter as “A”.

  And CPU110 reads the program corresponding to the starting parameter specified by step S24, S26, or S27 from the 2nd ROM121, and runs it (S28). For example, when the specified activation parameter is “A”, the CPU 110 reads the first program 160 from the second ROM 121. When the specified activation parameter is “B”, the CPU 110 reads the second program 162 from the second ROM 121. Further, when the specified activation parameter is “C”, the CPU 110 reads the third program 164 from the second ROM 121. At this time, the CPU 110 calculates error detection data for each program and compares it with error detection data corresponding to each program to confirm whether the program has no problem as data.

  As described above, when the activation control unit 130 designates the activation parameter, the CPU 110 can select and activate the program recorded in the second ROM 121.

  Next, backup processing of the second program 162 and the third program 164 when operating using the first program 160 stored in the second ROM 121 will be described. Since the first program 160, the second program 162, and the third program 164 are all stored in the second ROM 121, the data holding period, which is a disadvantage of the NAND flash memory, is limited, and the data If the number of times of reading is limited, the data changes, and there is a possibility that it cannot be read as correct data. The backup process is realized by the program determination unit 111, the copy determination unit 112, and the copy processing unit 113. The process flow of the program determination unit 111 will be described with reference to the flowchart of FIG.

FIG. 5 is a flowchart showing processing in the program determination unit 111.
The program determination unit 111 calculates error detection data of the second program 162 (S30).

  Next, the program determination unit 111 compares the error detection data calculated in step S30 with the second error detection data 163 stored in the second ROM 121 (S31), so that the second program is correct. Determine whether or not. For example, if the error detection data calculated in step S30 matches the second error detection data 163 (S31: Yes), the process proceeds to step S32, and the error detection data calculated in step S30 If the second error detection data 163 does not match (S31: No), the process proceeds to step S33.

  In step S32, the program determination unit 111 determines that the second program 162 is correct. On the other hand, in step S33, the program determination unit 111 determines that the second program 162 is illegal.

  Next, the program determination unit 111 calculates error detection data of the third program 164 (S34).

  Next, the program determination unit 111 compares the error detection data calculated in step S34 with the third error detection data 165 stored in the second ROM 121 (S35), so that the third program is correct. Determine whether or not. For example, if the error detection data calculated in step S34 matches the third error detection data 165 (S35: Yes), the process proceeds to step S36, and the error detection data calculated in step S34 If the third error detection data 165 does not match (S35: No), the process proceeds to step S37.

  In step S36, the program determination unit 111 determines that the third program 164 is correct. On the other hand, in step S37, the program determination unit 111 determines that the third program 164 is illegal.

Furthermore, the flow of processing in the copy determination unit 112 will be described with reference to the flowchart of FIG.
FIG. 6 is a flowchart showing processing in the copy determination unit 112.
The copy determination unit 112 determines whether the second program 162 is correct based on the determination result of the program determination unit 111 (S40). If the second program 162 is correct (S40: Yes), the process proceeds to step S41. If the second program 162 is invalid (S40: No), the process proceeds to step S42.

In step S41, the copy determination unit 112 determines “B” as the copy source.
On the other hand, in step S42, the copy determination unit 112 determines whether the third program 164 is correct based on the determination result of the program determination unit 111 (S42). If the third program 164 is correct (S42: Yes), the process proceeds to step S43. If the third program 164 is invalid (S42: No), the process proceeds to step S44.

In step S43, the copy determination unit 112 determines the copy source to be “C”.
On the other hand, in step S44, the copy determination unit 112 raises the failure flag. This failure flag is assumed to be stored in the RAM 122, for example.

  Then, based on the copy source determined by the copy determination unit 112, the CPU 110 generates copy source information. For example, when the copy source is “B”, the copy source information is “B” so as to indicate the second program 162, and when the copy source is “C”, the copy source information is third. As shown in the program 164, “C” is assumed. Then, the CPU 110 transmits the generated copy source information to the activation control unit 130, and the activation control unit 130 stores the copy source information in the activation storage unit 131.

  Next, the copy processing unit 113 performs a copy process based on the processing results of the program determination unit 111 and the copy determination unit 112. For example, if both the second program 162 and the third program 164 are correct, the copy processing unit 113 does not perform the copy process. On the other hand, when any one of the second program 162 and the third program 164 is illegal, the copy processing unit 113 performs a copy process from the program determined as the copy source to the copy destination program. For example, in the second ROM 121, the copy processing unit 113 deletes the program that is the copy destination (the program determined to be illegal), and stores the program determined as the copy source as the copy destination program. If both programs are illegal, the copy processing unit 113 does not perform copy processing.

  The backup processing performed by the program determination unit 111, the copy determination unit 112, and the copy processing unit 113 is periodically performed. However, the implementation may be based on the number of times of activation or the elapsed time after the data is written. May be based. In other words, the backup process may be performed when the predetermined number of activations has been reached, or when the predetermined elapsed time has elapsed since the first activation or the previous backup process.

Next, processing when the first program 160 stored in the second ROM 121 does not start normally will be described using the flowchart of FIG.
FIG. 7 is a flowchart showing the activation state monitoring process of the activation control unit 130. The flowchart in FIG. 7 is started after the reset state of the CPU 110 is released in step S18 of the flowchart in FIG.

  The activation control unit 130 sets a timer threshold value after canceling the reset state of the CPU 110 (S50). The timer threshold value is determined in advance. And the starting control part 130 starts the timer 132, and starts time-measurement (S51). The timer 132 is a type that starts from zero and adds.

  The activation control unit 130 compares the value of the timer 132 with the timer threshold value (S52). If the value of the timer 132 is equal to or less than the timer threshold value (S52: Yes), the process proceeds to step S53. If the value of the timer 132 exceeds the timer threshold value (S52: No), the process proceeds to step S53. Proceed to S55.

  In step S53, the activation control unit 130 notifies that the application program (here, the first program 160, the second program 162, or the third program 164) being executed by the CPU 110 has been completed up to a predetermined process. Check if it is. If the predetermined process has been completed (S53: Yes), the process proceeds to step S54. If the predetermined process has not been completed (S53: No), the process proceeds to step S54. Return to S52.

  In step S54, the activation control unit 130 determines that the activation is normal and ends the flow.

  On the other hand, if the timer value exceeds the timer threshold value in step S52 (S52: No), the process proceeds to step S55. In step S55, it is determined that the program in use (here, the first program 160, the second program 162, or the third program 164) is not operating normally, and the activation control unit 130 stores it in the activation storage unit 131. The activation parameter is set based on the copied source information (S55). Note that the activation parameter set in step S55 is “B” or “C”. And the starting control part 130 notifies CPU110 by setting a starting parameter to an output pin similarly to FIG.3 S17.

Then, the activation control unit 130 resets the CPU 110 (S56). For example, the activation control unit 130 sets the CPU 110 to the reset state, and then cancels the CPU reset state. Then, the process returns to step S50.
The CPU 110 executes processing according to the flow shown in FIG. 4 after canceling the reset, and starts using the second program 162 or the third program 164 stored in the second ROM 121.

  By configuring the first embodiment as described above, even if the information processing apparatus 100 cannot be activated by the first program 160, the application program (in this case) that is activated correctly by the restart process of the activation control unit 130 is described. , The second program 162 or the third program).

  Further, even if a power interruption occurs during the process of returning the second program 162 and the third program 164 to the correct state, specifically, the copy process in the copy processing unit 113, the copy source, that is, the correct operation The program to be executed can be specified by referring to the copy source information. For this reason, even if the first program 160 does not start correctly at that timing, the system can be started with the application program (copy source program) that starts correctly by the restart processing of the start control unit 130.

  In particular, the data capacity of application programs has increased remarkably in recent years as devices have become more sophisticated, and the copy process can take a lot of time, causing a power interruption during the copy process, and Even when the first program 160 does not start correctly at that timing, the information processing apparatus 100 according to the first embodiment can start the system.

  In the first embodiment, a configuration is described in which when the first program 160 is not started, the second program 162 or the third program 164 being backed up is used for restarting. However, it is not limited to such a configuration. For example, when the second program 162 is not started as the first program 160 and the third program 164, the group to be backed up is restarted using the copy source of the first program 160 and the third program 164. It may be configured. Further, the group to be backed up is set as the first program 160 and the second program 162, and when the third program 164 is not started, the group is restarted using the copy source of the first program 160 and the second program 162. It may be configured.

Embodiment 2. FIG.
FIG. 8 is a block diagram schematically showing the configuration of the information processing apparatus 200 according to the second embodiment. In FIG. 8, the information processing apparatus 200 includes a CPU 210, a first ROM 120, a second ROM 221, a RAM 122, a start control unit 230, a start storage unit 231, and a timer 132. The CPU 210, the first ROM 120, the second ROM 221 and the RAM 122 are connected by a bus 140. The information processing apparatus 200 according to the second embodiment is the information according to the first embodiment in terms of processing in the CPU 210 and the activation control unit 230 and information stored in the second ROM 221 and the activation storage unit 231. Different from the processing apparatus 100.

  In the first embodiment, in the backup processing of the second program 162 and the third program 164, copy source information indicating the copy source program is stored in the activation storage unit 131. In the first embodiment, the activation control unit 130 refers to the copy source information stored in the activation storage unit 131 and notifies the activation parameter to the CPU 110 when the first program 160 does not activate correctly. Thus, the CPU 110 is restarted. On the other hand, in the second embodiment, the copy source information is stored in the second ROM 221 configured with the NAND flash memory, and when the CPU 210 executes the startup program stored in the first ROM 120, the first information is stored. The application program to be used is selected with reference to the copy source information stored in the 2ROM 221. Hereinafter, the second embodiment will be described in detail.

The CPU 210 is a processing execution unit that performs information processing in the information processing apparatus 200. The CPU 210 includes a program determination unit 111, a copy determination unit 112, and a copy processing unit 113. The processing in the program determination unit 111, the copy determination unit 112, and the copy processing unit 113 in the second embodiment is the same as the processing performed by these parts in the first embodiment.
However, in the first embodiment, the CPU 110 transmits the copy source information generated according to the determination in the copy determination unit 112 to the activation control unit 130 and stores it in the activation storage unit 131. However, in the second embodiment, The CPU 210 stores the copy source information in the second ROM 221.

The second ROM 221 is a non-volatile memory that stores an application program and copy source information that are read and executed by execution of the startup program. Here, the program configuration stored in the second ROM 221 will be described. The second ROM 221 stores three types of programs, error detection data corresponding to each of the programs, and copy source information.
FIG. 9 is a conceptual diagram showing programs and data stored in the second ROM 221. Reference numeral 160 denotes a first program. Reference numeral 161 is error detection data of the first program 160. Reference numeral 162 denotes a second program. Reference numeral 163 is error detection data of the second program 162. Reference numeral 164 denotes a third program. Reference numeral 165 is error detection data of the third program 164. Reference numerals 160 to 165 are the same as reference numerals 160 to 165 in the first embodiment (see FIG. 2).
Reference numeral 266 is copy source information. The copy source information 266 indicates an application program (second program or third program) used as a copy source, as in the first embodiment.

The activation control unit 230 performs activation control of the CPU 210. The activation control of the activation control unit 230 in the second embodiment will be described in detail with reference to FIG.
The activation control unit 130 according to the first embodiment performs a process of storing the copy source information provided from the CPU 110 in the activation storage unit 131. The activation control unit 230 according to the second embodiment performs such a process. Do not do.

The activation storage unit 231 is a memory to which the activation control unit 230 writes and refers to data. For example, the activation storage unit 231 in the second embodiment stores activation parameters. Unlike the first embodiment, the activation storage unit 231 in the second embodiment does not store copy source information.
Here, in the second embodiment, the activation parameter stored in the activation storage unit 231 indicates a value of “A” or “B”. When the activation parameter is “A”, the first program 160 is used at the time of activation. When the activation parameter is “B”, the second program 162 or the third program 164 is used at the time of activation according to the copy source information.

  The information processing apparatus 200 starts to operate when the power supply 150 is turned on. First, the reset of the activation control unit 230 is released, and the activation control unit 230 operates. The operation at that time will be described with reference to the flowchart of FIG. The flow shown in FIG. 10 is an alternative to the flow shown in FIGS. 3 and 7 in the first embodiment.

FIG. 10 is a flowchart showing processing in the activation control unit 230.
The activation control unit 230 first initializes the number-of-times parameter N (S60). Here, the activation control unit 230 sets the value of the number-of-times parameter N to “0”. The number parameter N is a parameter that is linked to the number of activations. In the second embodiment, the number-of-times parameter N indicates, for example, the number of activations.

  Next, the activation control unit 230 sets the activation parameter to “A” and sets the CPU 210 to a reset state (S61). Here, as in the first embodiment, the activation control unit 230 transmits the activation parameter “A” to the CPU 210 by setting the output pin 2 bits to [0, 1]. Then, when the activation control unit 230 cancels the reset signal of the CPU 210, the reset state of the CPU 210 is canceled (S62), and the CPU 210 starts to operate. The operation of the CPU 210 will be described later with reference to FIG.

  Next, the activation control unit 230 sets a predetermined timer threshold value (S63) and operates the timer 132 (S64). The timer 132 is a type that starts from zero and adds.

  Next, the activation control unit 230 compares the value of the timer 132 with the timer threshold value (S65). If the value of the timer 132 is equal to or less than the timer threshold value (S65: Yes), the process proceeds to step S66. If the value of the timer 132 exceeds the timer threshold value (S65: No), the process is performed. Proceed to step S68.

  In step S <b> 66, the activation control unit 230 confirms whether or not the application program executed by the CPU 210 has notified that a predetermined process has been completed. If the predetermined process has been completed (S66: Yes), the process proceeds to step S67. If the predetermined process has not been completed (S66: No), the process proceeds to step S67. Return to S65.

  In step S67, the activation control unit 230 determines that the activation process in the CPU 210 is normal activation, and ends the flow.

  On the other hand, when the value of the timer 132 exceeds the timer threshold value in step S65 (S65: No), the process proceeds to step S68. In step S68, it is determined that the application program executed by the CPU 210 is not operating normally, and the activation control unit 230 adds “1” to the number-of-times parameter N. Then, the activation control unit 230 determines whether or not the number parameter N is smaller than “3” that is the first number threshold (S69). If the number parameter N is smaller than “3” (S69: Yes), the process returns to step S61. If the number parameter N is “3” or more (S69: No), the process proceeds to step S70. move on. In addition, by this step S69, a start-up trial can be performed 3 times, and in the case of a start-up failure due to a sudden factor such as a temporary decrease in noise and voltage, the start-up can be normally started by a second attempt. In other words, the startup process using the currently used application program is continued until the state in which the CPU 110 cannot execute the predetermined process by a predetermined time exceeds the predetermined number of times. Done. The value of the first number threshold value indicating the number of start attempts can be arbitrarily set.

  In step S <b> 70, the activation control unit 230 determines whether or not the number parameter N is smaller than “6” that is the second number threshold. If the number parameter N is smaller than “6” (S70: Yes), the process proceeds to step S71. If the number parameter N is “6” or more (S70: No), the process proceeds to step S72. move on.

  In step S <b> 71, the activation control unit 230 sets the activation parameter stored in the activation storage unit 231 to “B”. Then, the activation control unit 230 sets [1, 0] to the output pin according to the activation parameter stored in the activation storage unit 231, and notifies the CPU 210 of it. Furthermore, the activation control unit 230 resets the CPU 210 and returns the process to step S62.

  On the other hand, in step S72, the activation control unit 230 determines that there is a failure and sets a failure flag because the activation parameter “B” cannot be activated normally. Here, the second threshold value (here, “6”) in step S70 is a difference value (here, “3”) from the first threshold value (here, “3”) in step S69. This is the number of start attempts when the start parameter is “B”. In other words, the startup process using the currently used application program is continued until the state in which the CPU 210 cannot execute the predetermined process by a predetermined time exceeds the predetermined number of times. Done. Note that by changing this second number threshold, the number of start attempts when the start parameter is “B” can be changed.

  Next, the operation of the CPU 210 will be described. After the reset is released, the CPU 210 reads and executes the startup program stored in the first ROM 120. This operation will be described with reference to the flowchart shown in FIG.

FIG. 11 is a flowchart showing the startup operation of the CPU 210.
First, the CPU 210 performs initial setting (S80). This is, for example, the setting of the access timing parameter of the first ROM 120 and the setting of the access timing of the second ROM 221.

  Next, the CPU 210 performs initial setting of the RAM 122 (S81). For example, when the RAM 122 is an SDRAM, the CPU 210 performs memory clock setting, response speed setting, bus width setting, address pin setting, and the like. By performing such settings, the CPU 210 can access the RAM 122.

  Next, the CPU 210 refers to the state of the input pin and acquires the activation parameter designated by the activation control unit 230 (S82). Then, the CPU 210 determines whether or not the acquired activation parameter is “A” (S83). If the acquired activation parameter is “A” (S83: Yes), the process proceeds to step S84. If the acquired activation parameter is not “A” (S83: No), the process proceeds to step S84. Proceed to S85.

In step S84, the CPU 210 specifies the activation parameter as “A”.
On the other hand, in step S85, the CPU 210 reads the copy source information 266 stored in the second ROM 221.

  Next, the CPU 210 determines whether or not the copy source information 266 is “B” (S86). When the copy source information 266 is “B” (S86: Yes), the process proceeds to step S87. On the other hand, when the copy source information 266 is not “B” (S86: No), in other words, when the copy source information 266 is “C”, the process proceeds to step S88.

In step S87, the CPU 210 identifies the activation parameter as “B”.
On the other hand, in step S88, the CPU 210 specifies the activation parameter as “C”.

  And CPU210 reads the program corresponding to the starting parameter specified by step S84, S87, or S88 from the 2nd ROM221, and performs it (S89). For example, when the specified activation parameter is “A”, the CPU 210 reads the first program 160 from the second ROM 221. When the specified activation parameter is “B”, the CPU 210 reads the second program 162 from the second ROM 221. Further, when the specified activation parameter is “C”, the CPU 210 reads the third program 164 from the second ROM 221. At this time, the CPU 210 calculates error detection data of each program and compares it with error detection data corresponding to each program to confirm whether the program has no problem as data.

  As described above, by configuring the information processing apparatus 200 according to the second embodiment, the information processing apparatus 200 can restart the activation control unit 230 even when the CPU 210 cannot be activated using the first program 160. By the processing, the program can be started with a program (second program 162 or third program 164) that starts correctly.

  In addition, the process of returning the second program 162 and the third program 164 to the correct state, specifically, even when the power is cut off during the copy process, the copy source information is referred to by referring to the copy source information. The original, that is, the program that operates correctly can be identified. For this reason, even if the first program 160 does not start correctly at the timing of the copy process, the system can be started with a program that starts correctly by the restart process of the start control unit 230.

  In the second embodiment, a configuration is described in which when the first program 160 is not started, the second program 162 or the third program 164 being backed up is used for restarting. However, it is not limited to such a configuration. For example, when the second program 162 is not started as the first program 160 and the third program 164, the group to be backed up is restarted using the copy source of the first program 160 and the third program 164. It may be configured. Further, the group to be backed up is set as the first program 160 and the second program 162, and when the third program 164 is not started, the group is restarted using the copy source of the first program 160 and the second program 162. It may be configured.

Embodiment 3
In the first embodiment and the second embodiment, both programs to be backed up (in the first embodiment and the second embodiment, the second program 162 and the third program 164) are both garbled. (It may become invalid data). In such a case, if the first program 160 becomes illegal, the system will not start. For example, in FIG. 6, which is a flowchart for explaining the operation of the copy determination unit 112, if the failure flag is raised in step S44 and the first program 160 becomes invalid, the system cannot be started normally. Therefore, the information processing apparatuses 100 and 200 further include a failure warning unit (not shown) that indicates a warning when both the second program 162 and the third program 164 are illegal when the backup process is executed. It may be configured.

  For example, if both the second program 162 and the third program 164 are illegal in the backup process, and if the information processing devices 100 and 200 are network devices, the failure warning unit is a management device such as a server. Notify failure. If the information processing apparatuses 100 and 200 are displays, the failure warning unit displays a warning on a screen, for example. If the information processing devices 100 and 200 are terminal devices, the failure warning unit turns on or blinks a light emitting unit such as a lamp mounted on the terminal.

  As described above, according to the third embodiment, it is possible to notify the user that the backup application program is in an abnormal state, and to prevent the system from starting up in advance.

  When the failure flag is set in step S44 of FIG. 6 in the first embodiment or when the failure flag is set in step S72 of FIG. 10 in the second embodiment. In addition, a warning may be given.

  The information processing apparatuses 100 and 200 described in the first to third embodiments are apparatuses including a storage unit that has low reliability and may not be able to read correct data, such as a NAND flash memory. Any device may be used. For example, the information processing apparatuses 100 and 200 are optical television terminals such as IP-STB (IP-Set Top Box), multifunctional portable terminals such as Android terminals, information display devices such as navigation systems and digital signage systems, video It may be a video recording / playback device such as a recorder and a desk player, a router, a TA (Terminal Adapter), or the like.

  100, 200 Information processing device, 110, 210 CPU, 111 Program determination unit, 112 Copy determination unit, 113 Copy processing unit, 120 First ROM, 121, 221 Second ROM, 122 RAM, 130, 230 Start control unit, 131, 231 Start-up storage unit, 132 timer, 140 bus, 150 power supply.

Claims (17)

A storage unit for storing a first program, a second program, and a third program as an application program for activation;
A process execution unit that selects one of the first program, the second program, and the third program stored in the storage unit, and performs a startup process using the selected program;
A program determination unit for determining whether the second program and the third program stored in the storage unit are correct; and
Of the second program and the third program stored in the storage unit, a program determined to be correct by the program determination unit is determined as a copy source program, and a program that has not been determined correct by the program determination unit A copy determination unit that determines the copy destination program;
In the storage unit, a copy processing unit that updates the copy destination program determined by the copy determination unit with the copy source program determined by the copy determination unit;
An activation storage unit that stores copy source information indicating a copy source program determined by the copy determination unit;
When the process execution unit cannot perform startup processing using the first program stored in the storage unit, the copy determination unit refers to the copy source information stored in the startup storage unit. An activation control unit that instructs the process execution unit to perform the activation process by selecting the copy source program determined in
The process execution unit selects a second program or a third program stored in the storage unit according to an instruction from the start control unit, and performs a start process using the selected program. Information processing apparatus. The storage unit further stores copy source information indicating the copy source program determined by the copy determination unit;
The activation control unit refers to the copy source information stored in the storage unit, and instructs the process execution unit to perform a startup process by selecting the copy source program determined by the copy determination unit. The information processing apparatus according to claim 1. It further includes a timekeeping unit that measures time,
The activation control unit has not completed the predetermined process before the time from the start of the activation process measured by the timing unit exceeds a predetermined threshold. In this case, the process execution unit determines that the start process cannot be performed using the first program stored in the storage unit, and selects and starts the copy source program determined by the copy determination unit The information processing apparatus according to claim 1, wherein the processing execution unit is instructed to perform processing. It further includes a timekeeping unit that measures time,
The activation control unit is in a state where the process execution unit cannot complete the predetermined process before the time from the start of the activation process exceeds a predetermined threshold measured by the timing unit. When the predetermined number of times has occurred continuously, it is determined that the process execution unit cannot perform startup processing using the first program stored in the storage unit, and the copy The information processing apparatus according to claim 1, wherein the processing execution unit is instructed to select a copy source program determined by the determination unit and perform a startup process. When the process execution unit selects the second program or the third program stored in the storage unit according to the instruction from the start control unit, and performs the start process using the selected program The state in which the process execution unit cannot complete the predetermined process before the time from the start of the start process measured by the time measuring unit exceeds the predetermined threshold is predetermined. The activation control unit determines that there is a failure when the second occurrence occurs continuously,
The information processing apparatus according to claim 4, further comprising a failure warning unit that issues a warning when the activation control unit determines that a failure has occurred. The apparatus according to claim 1, further comprising a failure warning unit that issues a warning when the program determination unit determines that both the second program and the third program stored in the storage unit are not correct. 5. The information processing apparatus according to any one of 4. A process execution step of selecting any one of the first program, the second program, and the third program as an application program for activation, and performing an activation process using the selected program;
A program determination process for determining whether each of the second program and the third program is correct;
Of the second program and the third program, a program determined to be correct in the program determination process is determined as a copy source program, and a program that is not determined correct in the program determination process is determined as a copy destination program. Copy decision process;
A copy process for updating the copy destination program determined in the copy determination process with the copy source program determined in the copy determination process;
An activation storage step for storing copy source information indicating the copy source program determined in the copy determination step;
When the process execution process cannot perform the startup process using the first program, the copy source program determined in the copy determination process is referred to by referring to the copy source information stored in the startup storage process. A startup control process that instructs the process execution process to perform a startup process by selecting,
In the information processing method, the process execution process selects the second program or the third program in accordance with an instruction from the activation control process, and performs an activation process using the selected program. It further has a timing process for measuring time,
In the activation control process, the process execution unit has not completed the predetermined process before the time from the start of the activation process measured in the timing process exceeds a predetermined threshold. The process execution process determines that the start process cannot be performed using the first program, and selects the copy source program determined in the copy determination process to perform the start process. The information processing method according to claim 7, wherein an instruction is given to an execution process. It further has a timing process for measuring time,
In the activation control process, there is a state in which the process execution process cannot complete the predetermined process before the time from the start of the activation process exceeds a predetermined threshold measured in the timing process. When the predetermined number of times has occurred continuously, it is determined that the process execution process cannot be started using the first program, and the copy determined in the copy determination process is determined. The information processing method according to claim 7, wherein the process execution process is instructed to select an original program and perform a startup process. When the process execution unit selects the second program or the third program stored in the storage unit in accordance with an instruction from the activation control process, and performs the activation process using the selected program The state in which the process execution unit cannot complete the predetermined process before the time from the start of the start process measured by the time measuring unit exceeds the predetermined threshold is predetermined. The activation control process determines that there is a failure when the second occurrence occurs continuously,
The information processing method according to claim 9, further comprising a failure warning process for giving a warning when the activation control process is determined to be a failure. The failure determination process for performing a warning when the program determination process determines that both of the second program and the third program are not correct. 10. Information processing method described in 1. Computer
Storage means for storing the first program, the second program, and the third program as application programs for startup,
A process execution unit that selects any one of the first program, the second program, and the third program stored in the storage unit, and performs a start-up process using the selected program;
Program determination means for determining whether the second program and the third program stored in the storage means are correct,
Of the second program and the third program stored in the storage means, a program determined to be correct by the program determination means is determined as a copy source program, and a program that is not determined correct by the program determination means A copy determining means for determining a copy destination program;
In the storage unit, a copy processing unit that updates the copy destination program determined by the copy determination unit with the copy source program determined by the copy determination unit;
An activation storage unit for storing copy source information indicating a copy source program determined by the copy determination unit;
When the process execution unit cannot perform the startup process using the first program stored in the storage unit, the copy determination unit refers to the copy source information stored in the startup storage unit. Functioning as a start control means for instructing the process execution means to select and start the copy source program determined in
The process execution unit selects a second program or a third program stored in the storage unit in accordance with an instruction from the start control unit, and performs a start process using the selected program. Program. The storage means further stores copy source information indicating the copy source program determined by the copy determination means;
The activation control unit refers to the copy source information stored in the storage unit and instructs the process execution unit to select the copy source program determined by the copy determination unit and perform the activation process. The program according to claim 12, wherein: Allowing the computer to further function as a timekeeping means for measuring time;
The activation control unit has not completed the predetermined process before the time from the start of the activation process measured by the timing unit exceeds a predetermined threshold. In this case, the process execution unit determines that the start process cannot be performed using the first program stored in the storage unit, and selects and starts the copy source program determined by the copy determination unit The program according to claim 12 or 13, wherein the processing execution unit is instructed to perform processing. Allowing the computer to further function as a timekeeping means for measuring time;
The activation control means is in a state in which the process execution means cannot complete the predetermined process before the time from the start of the activation process measured by the time measuring means exceeds a predetermined threshold. When the predetermined number of times has occurred continuously, it is determined that the process execution means cannot perform start-up processing using the first program stored in the storage means, and the copy The program according to claim 12 or 13, wherein the processing execution unit is instructed to select a copy source program determined by the determination unit and perform a startup process. When the process execution unit selects the second program or the third program stored in the storage unit in accordance with an instruction from the activation control unit, and performs the activation process using the selected program The state in which the process execution unit cannot complete the predetermined process before the time from the start of the start process measured by the time measuring unit exceeds the predetermined threshold is determined in advance. If the second occurrence occurs continuously, the activation control means determines a failure,
The program according to claim 15, further causing the computer to function as a failure warning unit that issues a warning when the activation control unit determines that a failure has occurred. The computer further causes the program determination unit to function as a failure warning unit that issues a warning when it is determined that both the second program and the third program stored in the storage unit are not correct. The program according to any one of claims 12 to 15.

Images