WO2008041337A1

WO2008041337A1 - Information processing device, information processing method, information processing program and computer readable recording medium

Info

Publication number: WO2008041337A1
Application number: PCT/JP2006/319881
Authority: WO
Inventors: Junji Okuda
Original assignee: Pioneer Corporation
Priority date: 2006-10-04
Filing date: 2006-10-04
Publication date: 2008-04-10
Also published as: JP5016604B2; JPWO2008041337A1

Abstract

In an information processing device (200), which executes an execution subject program stored at a program execution area, an updating program input unit (201) receives an input of an updating program for the execution subject program. A temporary saving unit (202) temporarily stores the input updating program at a temporary saving area. A judging unit (203) judges whether the temporarily saved updating program is excessive or insufficient and a generating unit (204) generates updating information indicative of completion of an updating preparation for the execution subject program saved at the program execution area in the case that the judged result shows that the updating program is neither excessive nor insufficient. Further, an updating information saving unit (205) saves the generated updating information at an updating information saving area.

Description

Information processing apparatus, information processing method, information processing program, and computer-readable recording medium

Technical field

The present invention relates to an information processing apparatus capable of executing and updating a program to be executed, an information processing method, an information processing program, and a computer-readable recording medium. However, the use of the present invention is not limited to the information processing apparatus, the information processing method, the information processing program, and the computer-readable recording medium described above. Background art

Conventionally, when updating a control program in one microcomputer (microcomputer), data is updated using an external device such as a data setting device. In recent years, there has been a proposal to prohibit interrupt processing from other microcomputers during control program update in order to prevent other microcomputers from causing update errors due to interrupt processing when the control program is updated. (For example, see Patent Document 1 below.) O

[0003] Here, an outline of program update in a program execution microcomputer (microcomputer) in which a program to be executed is stored so as to be executable will be described with reference to FIG. Fig. 1 is an explanatory diagram showing the outline of program update in the program execution microcomputer.

In FIG. 1, a program update system 100 includes a program execution microcomputer 101, an update program transmission side microcomputer 102, a flash memory 103, and power.

The program execution microcomputer 101 includes a buffer area 110, a program area 111, an IPL (Initial Program Loader) area 112, and a Vector area 113.

[0006] The noffer area 110 temporarily stores an update program transmitted from an update program transmission side microcomputer 102 described later. The update program is, for example, a program for updating a program to be executed by the program execution microcomputer 101 that is transmitted from the update program transmission side microcomputer 102 to the buffer area 110 by communication between microcomputers. [0007] The update program temporarily stored in the buffer area 110 is copied (copied) to the program area 111 by referring to a CPU (Central Processing Unit) power (not shown), which will be described later. In other words, the programs a, b, and c stored in the program area 111 to be described later are configured to be updated by being copied to the program area 111 of the update program.

[0008] The program area 111 stores programs a, b, and c to be executed by the program execution microcomputer 101. Specifically, for example, the program area 111 includes an A area 121 that stores the program a, a B area 122 that stores the program b, and a C area 123 that stores the program c.

[0009] Each program a, b, c may be configured to be read and executed by a CPU (not shown), for example. Specifically, for example, the programs a, b, and c are executed by a CPU (not shown) referring to the addresses of the programs a, b, and c stored in the Vector area 113 described later. In the description of FIG. 1, three areas (A area 121, B area 122, and C area 123) have been described. However, the number of areas and the number of programs to be executed are not limited to this.

[0010] The IPL area 112 is an area for storing a program that is first executed by a CPU (not shown) at the time of reset start. Specifically, for example, the IPL area 112 copies the update program temporarily stored in the buffer area 110 to the program area 111 or executes each program a, b, c stored in the program area 111. Save the program that determines whether to do it.

[0011] The Vector area 113 stores an address of a program to be executed by the program execution microcomputer 101 when an event occurs. Specifically, for example, a CPU (not shown) reads the address of the program stored in the IPL area 112 with reference to the Vector area 113 at the time of reset start. In addition, for example, during normal startup, a CPU (not shown) reads the addresses of the programs a, b, and c stored in the program area 111 with reference to the Vector area 113.

[0012] The update program transmission side microcomputer 102 sends an update program for programs a, b, and c to be executed by the program execution microcomputer 101 to the program execution microcomputer 101. Send. Specifically, for example, the update program transmission side microcomputer 102 reads the update program stored in the flash memory 103 and transmits the read update program to the program execution microcomputer 101.

The flash memory 103 is a recording medium that can store various data. In FIG. 1, the flash memory 103 stores update programs for programs a, b, and c to be executed by the program execution microcomputer 101. Specifically, for example, the flash memory 103 outputs the stored update program to the update program transmission side microcomputer 102.

Patent Document 1: Japanese Patent Application Laid-Open No. 2004-118369

Disclosure of the invention

Problems to be solved by the invention

[0015] However, in the above-described conventional technology, when updating the control program in the microcomputer, an external device dedicated for updating is required, and therefore the user of the microcomputer is burdened with preparing an external device dedicated for updating. The problem that it occurs is an example.

[0016] In addition, when updating a control program at a manufacturer of a microcomputer having an external device dedicated for updating, the user of the microcomputer is not only troublesome about sending and receiving the microcomputer to the manufacturer, but also updating. An example is the problem of wasting the time required for this.

[0017] On the other hand, when a program to be executed is updated by an update program received by communication between microcomputers without using an external device dedicated to update, due to a power failure or the like during rewriting (duplication) An example is the problem that if the update operation is interrupted, the microcomputer will not start.

[0018] In particular, when rewriting the address of the program to be executed, which is stored in the Vector area, if the update operation is interrupted during the rewriting, the Vector area cannot be referenced at startup after recovery from interruption. An example is the problem of being unable to start up.

[0019] When only the program to be executed is updated without rewriting the address of the program to be executed stored in the Vector area, the address of the program to be executed stored in the Vector area is Program placement by default setting As an example, V ヽ cannot be changed, lacks versatility, and cannot efficiently use the capacity of the program area.

Means for solving the problem

In order to solve the above-described problems and achieve the object, an information processing apparatus according to claim 1 is an information processing apparatus that executes an execution target program stored in a program execution area. Update program input means for receiving an input of an update program for the execution target program, temporary storage means for temporarily storing the update program input by the update program input means in a temporary storage area, and the temporary storage A determination means for determining whether or not the update program temporarily stored by the means is excessive or deficient; and, as a result of the determination by the determination means, if the update program is insufficient, the program execution area Generating means for generating update information indicating that the preparation for updating the execution target program stored in is completed, and Update information storage means for storing update information generated Te Niyotsu the update information storage area, and wherein the obtaining Bei a.

[0021] Further, an information processing method according to the invention of claim 8 is an information processing method for executing an execution target program stored in a program execution area, and inputs an update program to the execution target program. The update program input process to be received, the temporary storage process for temporarily storing the update program input in the update program input process in the temporary storage area, and the update program temporarily stored in the temporary storage process If there is no excess or deficiency in the update program as a result of the determination in the determination step for determining whether or not there is an excess or deficiency, and the determination result in the determination step, an update preparation for the execution target program stored in the program execution area A generation process for generating update information indicating completion, and update information generated by the generation process Update information storing step of storing the presence area, characterized in that it comprises a.

[0022] Further, an information processing program according to claim 9 causes a computer to execute the information processing method according to claim 8.

[0023] A computer-readable recording medium according to the invention of claim 10 records the information processing program according to claim 9. Brief Description of Drawings

FIG. 1 is an explanatory diagram showing an outline of program update in a program execution microcomputer.

FIG. 2 is a block diagram showing an example of a functional configuration of the information processing apparatus according to the present embodiment.

FIG. 3 is a flowchart showing the contents of processing of the information processing apparatus according to the present embodiment.

[FIG. 4] FIG. 4 is a block diagram showing an example of a hardware configuration of a one-chip microcomputer that works on the present embodiment.

[FIG. 5] FIG. 5 is an explanatory diagram showing an outline of updating the execution target program in the one-chip microcomputer which is helpful in the present embodiment.

[FIG. 6] FIG. 6 is an explanatory diagram showing a program stored in an effective program area that is helpful in the present embodiment.

[FIG. 7] FIG. 7 is a flowchart showing a procedure for accepting an update program in the one-chip microcomputer, which is useful in this embodiment.

[FIG. 8] FIG. 8 is a flowchart showing a start-up process procedure of the one-chip microcomputer which is useful in the present embodiment.

[FIG. 9] FIG. 9 is a flowchart showing a procedure of interrupt processing (step S812 in FIG. 8) in the one-chip microcomputer that works on the present embodiment.

Explanation of symbols

[0025] 200 Information processing apparatus

201 Program input part for update

202 Temporary storage

203 Judgment part

204 generator

205 Update information storage

206 Re-operation information input section

207 Judgment part 208 Update Department

209 execution unit

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, preferred embodiments of an information processing apparatus, an information processing method, an information processing program, and a computer-readable recording medium according to the present invention will be described in detail with reference to the accompanying drawings.

[Embodiment]

(Functional configuration of information processing device)

The functional configuration of the information processing apparatus according to the present embodiment will be described with reference to FIG. FIG. 2 is a block diagram showing an example of a functional configuration of the information processing apparatus that works according to the present embodiment.

In FIG. 2, an information processing apparatus 200 that executes an execution target program stored in a program execution area includes an update program input unit 201, a temporary storage unit 202, a determination unit 203, and a generation unit 204. The update information storage unit 205, the restart information input unit 206, the determination unit 207, the update unit 208, and the execution unit 209 are also configured.

The update program input unit 201 receives an input of an update program for the execution target program. Specifically, for example, the input of the update program may be an external device force input that can be transmitted by an update program (not shown).

The update program is copied (copied) to a program execution area assigned to a memory area (not shown) in the information processing apparatus 200, for example, and becomes an execution target program. Further, the update program may include a virtual initial startup program executed by the initial startup program when executed as the execution target program. Specifically, for example, the virtual initial startup program is stored in a virtual program area included in the program execution area and executed by the initial startup program. Here, the initial activation program is, for example, a program that is activated when the information processing apparatus 100 is restarted.

[0031] Further, when the update program input unit 201 determines that the update program is excessive or insufficient as a result of determination by the determination unit 203 described later, the update program input unit 201 takes the update program output source. It is also possible to accept the input of the update program by making an acquisition request.

Temporary storage unit 202 temporarily stores the update program input by update program input unit 201 in the temporary storage area. Specifically, for example, the temporary storage unit 202 temporarily stores the update program in an area where data can be temporarily stored, such as a buffer area allocated to a memory area (not shown) in the information processing apparatus 200. A little.

The determination unit 203 determines whether or not the update program temporarily stored by the temporary storage unit 202 is sufficient. Specifically, for example, the determination unit 203 may determine whether or not all of the update programs that are divided and input multiple times are temporarily stored in the temporary storage area.

[0034] As a result of the determination by the determination unit 203, the generation unit 204, when there is no excess or deficiency in the update program, displays update information indicating that preparation for updating the execution target program stored in the program execution area has been completed. Generate. For example, the update information may be information indicating that the update preparation is completed, instead of indicating that the update preparation of the execution target program is completed.

The update information storage unit 205 stores the update information generated by the generation unit 204 in the update information storage area. Specifically, for example, the update information storage unit 205 stores the update information in an update information storage area allocated to a memory area (not shown) in the information processing apparatus 200. Note that the update information storage unit 205 may store information indicating that the update preparation is completed, instead of the update information indicating that the generation unit 204 has completed the update preparation.

[0036] The restart information input unit 206 receives input of restart information related to restart of the own device. The restart information may be input, for example, a reset start processing request.

[0037] When the restart information is input by the restart information input unit 206, the determination unit 207 updates the update program by starting the initial startup program stored in the initial startup program storage area and referring to the update information. Determine if preparation is complete. Specifically, for example, the determination unit 207 allocates a memory area (not shown) in the information processing apparatus 200. The configuration is such that the initial startup program saved in the assigned initial startup program storage area is started.

[0038] When the determination by the determination unit 207 indicates that update preparation is complete, the update unit 208 updates the execution target program by copying the update program to the program execution area. Specifically, for example, the update of the execution target program may be configured to overwrite the execution target program with the update program stored by the temporary storage unit 202 when the update preparation is completed.

[0039] Further, for example, when the update unit 208 overwrites the execution target program with the update program, the update unit 208 uses the virtual initial activation program included in the update program to store the virtual program storage area included in the program execution area. The virtual initial startup program will also be overwritten.

[0040] The update unit 208 may update the execution target program into an executable format by verifying the update program copied to the program execution area. Specifically, for example, the verification of the update program may be configured to confirm whether or not the update program has been copied without excess or deficiency as the execution target program.

The execution unit 209 executes the execution target program stored in the program execution area when the update preparation is not completed as a result of the determination by the determination unit 207. Specifically, for example, the execution unit 209 executes the execution target program stored in the program execution area in accordance with the execution of the virtual initial activation program. That is, the execution unit 209 executes the program to be executed by the virtual initial startup program executed by the startup of the initial startup program stored in the initial startup program storage area if the update preparation is completed. Can do.

In other words, the initial activation program is activated when the re-operation information is input, and determines whether or not the power to complete the update preparation is complete. When the initial startup program is determined to be ready for update as a result of the determination, the program to be executed is updated using the update program. On the other hand, as a result of the determination, the initial startup program has been prepared for update. In this case, the initial startup program is stored in the virtual program storage area and executed by executing the virtual initial startup program. Will be allowed to. As described above, when updating the execution target program, the information processing apparatus 200 is configured to update the virtual initial activation program stored in the virtual program storage area together with the execution target program. In addition, the information processing apparatus 200 can execute the execution target program by causing the virtual initial startup program to be executed by the initial startup program.

[0044] Therefore, the information processing apparatus 200 stores the virtual initial startup program in the virtual program storage area, thereby updating the execution target program without updating the initial startup program. Can be updated or executed reliably. In other words, even if a failure occurs in the update process due to a power failure or the like during the update of the execution target program, the execution target program is updated or re-executed by executing the initial startup program again when the power is restored. Can be done.

[0045] (Contents of processing of information processing device 200)

Next, the contents of the processing of the information processing apparatus 200 that is useful for the present embodiment will be described with reference to FIG. FIG. 3 is a flowchart showing the contents of the processing of the information processing apparatus that is relevant to the present embodiment. In the flowchart of FIG. 3, first, the update program input unit 201 determines whether or not the input of the update program has been accepted (step S30 Do)

[0046] When input of the update program is accepted in step S301 (step S301: Yes), the temporary storage unit 202 temporarily saves the update program input in step S301 in the temporary storage area. (Step S302).

[0047] If the input of the update program is not accepted in step S301 (step S301: No), the process proceeds to step S306 and the reactivation information input unit 206 performs the reactivation information. It is determined whether or not an input is accepted (step S306).

Next, the determination unit 203 determines whether or not the update program temporarily stored in step S302 is excessive or insufficient (step S303).

[0049] Then, the generation unit 204 generates update information based on the result determined in step S303 (step S304). For example, if there is no excess or deficiency in the update program as a result of the determination in step S303, the update information is stored in the program execution area. This is information indicating that preparation for updating the stored execution target program has been completed. In addition, the update information may be information indicating that the update preparation is completed and that the update preparation is complete when the update program is determined to be excessive or insufficient as a result of the determination in step S303, for example.

Subsequently, the update information storage unit 205 stores the update information generated in step S304 in the update information storage area (step S305).

[0051] Next, the restart information input unit 206 determines whether or not the input of restart information is accepted (step S306). The restart information may be, for example, a reset start processing request.

[0052] If the restart information input is accepted in step S306 (step S306: Yes), the determination unit 207 activates the initial startup program stored in the initial startup program storage area. By referring to the update information, it is determined whether or not update preparation is completed (step S307).

[0053] If the restart information is not accepted in step S306 (step S306: No), the process returns to step S301 and the process is repeated.

In step S307, when the update preparation is completed (step S307: Yes), the update unit 208 updates the execution target program by copying the update program to the program execution area ( Step S308). Then, the execution unit 209 executes the updated execution target program in step S308 (step S309), and ends the series of processes.

[0055] If the update preparation is not completed in step S307 (step S307: No), the process proceeds to step S309, where the execution unit 209 saves the execution target stored in the program execution area. Run the program (step S309). Then, a series of processing ends.

In other words, in steps S307 to S309, if the update preparation is completed, the updated execution target program is executed after updating the execution target program. If the update preparation is not completed, the execution target program stored in the program execution area is executed without updating the execution target program.

[0057] As described above, according to the present embodiment, the update program stored in the temporary storage unit. Since the execution target program is updated by the program, it is possible to update the execution target program without preparing a dedicated external device.

[0058] Further, according to the present embodiment, since the execution target program is updated after the update program is prepared for update, even if a power failure occurs during the input of the update program, It is possible to prevent harmful effects on the execution target program.

[0059] Further, according to the present embodiment, since the execution target program is updated by the update program including the virtual initial startup program, the initial startup program need not be updated. Therefore, even if a power failure occurs during the update, the device can be started up by the initial startup program after recovery.

That is, according to the present embodiment, the execution target program can be updated or executed by the initial startup program even after the power failure is recovered. Specifically, for example, according to the present embodiment, when restart information is input after recovery from a power failure, the update is in progress due to a power failure, so the update can be continued or re-executed by the initial startup program. it can. Further, according to the present embodiment, if the update is completed even if there is a power failure, the virtual target startup program can be executed by the initial startup program, and the execution target program can be executed.

[0061] In addition, since the execution target program is executed by the virtual initial startup program, it is possible to design a highly versatile execution target program arrangement and to improve the efficiency of using the program execution area. Can do. In other words, instead of the initial startup program, the execution target program is executed by the virtual initial startup program that is updated together with the execution target program. Therefore, the virtual initial startup program is not limited to the arrangement limited by the initial startup program. An arrangement with a set degree of freedom can be realized.

[0062] Further, according to the present embodiment, the execution target program is updated to an executable format by verifying the update program, so that the execution target program can be accurately updated.

Example

[0063] Examples of the present invention will be described below. In this embodiment, for example, a one-chip microcomputer with a built-in flash ROM (Read Only Memorv) An example when the processing apparatus is implemented will be described.

[0064] (Hardware configuration of one-chip microcomputer)

First, the hardware configuration of the one-chip microcomputer that works on this embodiment will be described with reference to FIG. FIG. 4 is a block diagram showing an example of a hardware configuration of a one-chip microcomputer that is useful in this embodiment.

In FIG. 4, the one-chip microcomputer 400 includes a CPU 401, a flash ROM 402, RA

M (Random Access Memory) 403 and input / output iZF (interface) 404 are provided. Each component 401 to 404 is connected by a bus 410.

First, the CPU 401 controls the entire one-chip microcomputer 400. Specifically, for example, the CPU 401 may be configured to read a program recorded in the flash ROM 402 and execute the program read using the RAM 403 as a work area.

The flash ROM 402 records various programs such as a boot program and an execution target program to be executed. The details will be described with reference to FIG. 5. The flash RAM 402 is, for example, a nonvolatile semiconductor memory in which various programs are recorded in a rewritable manner and data is not lost even when the power is turned off.

The RAM 403 is used as a work area for the CPU 401. Specifically, for example, the RAM 403 is a work area for executing a program read by the CPU 401, which may be a semiconductor memory capable of writing and reading data at any time.

The input / output IZF 404 is connected to an external device (not shown) and functions as an interface between the one-chip microcomputer 400 and the CPU 401. The input / output I / F 404 is further connected to a communication network such as the Internet via wired or wireless communication, and also functions as an interface between the communication network and the CPU 401.

[0070] Although details will be described later with reference to FIG. 5, the input / output IZF 404 is used for updating the execution target program recorded in the flash ROM 402 by means of communication between microcomputers from a microcomputer connected to the outside of the one-chip microcomputer 400. It is also possible to accept program input.

Note that the power omitted in FIG. 4 is explained. In addition to PU401, flash ROM402, RAM403, input / output I / F404, timer, LCD (Liquid Crystal Display), MMU (Memory Management Unit), DMAC (Direct Memory Access Controller), Α / Ό (Analog / Digital) ) Peripheral functions such as a converter are also available.

Of the functional configuration of the information processing apparatus 200 according to the embodiment, the update program input unit 201 and the restart information input unit 206 are temporarily stored in the storage unit 202 and the determination unit 203 by the input / output IZF 404. The generation unit 204, the update information storage unit 205, the determination unit 207, the update unit 208, and the execution unit 209 realize their functions by the CPU 401 executing various programs recorded in the flash ROM 402 and RAM 403.

[0073] (Overview of update of execution target program in one-chip microcomputer 400)

Next, the outline of the update of the execution target program in the one-chip microcomputer 400, which is useful in the present embodiment, will be described with reference to FIG. FIG. 5 is an explanatory diagram showing an outline of updating the execution target program in the one-chip microcomputer that works on the present embodiment.

In FIG. 5, the program update system 500 includes a one-chip microcomputer 400, an update program transmission side microcomputer 502, a flash memory 503, and power.

[0075] The flash ROM 402 shown in FIG. 4 in the one-chip microcomputer 400 has an effective program information storage area 510, an empty area 511, an update program storage area 512, an effective program area 513, and a 0 ^ area 514. The Vector area 515 is composed of force.

The effective program information storage area 510 is an area for storing update information indicating that the execution target program update preparation recorded in the effective program area 513 to be described later has been completed. Specifically, for example, the update information is updated when there is no excess or deficiency in the update program that is divided and input multiple times from the update program transmission side microcomputer 502 in the update program storage area 512 described later. Information indicating that preparation has been completed may be used.

Further, the update information may be information indicating that the update preparation is completed instead of indicating that the preparation for update of the execution target program is completed, for example.

The free area 511 is an unused area of the flash ROM 402 in the present embodiment, and can be changed according to the initial setting.

The update program storage area 512 is an update program transmission side microcomputer 502 described later. This is an area for temporarily storing the update program to be transmitted. The update program is, for example, a program for updating the execution target program that is input from the update program transmission-side microcomputer 502 via the input / output IZF 404 (not shown) through the communication between the microcomputers and is the execution target of the one-chip microcomputer 400.

[0080] The update program is copied to the effective program area 513 when the update information stored in the effective program information storage area 510 is referred to by the CPU 401 (not shown) and the update preparation is completed (for example, Copied). In other words, the update program is overwritten and saved on the execution target program by the CPU 401, for example, and the execution target program is updated.

As described above, if the configuration is such that the execution target program is updated with reference to the update information, it is possible to prevent the execution target program from being updated while the update program is incomplete and causing a malfunction. it can. In other words, if the temporary storage of the update program is stopped due to some failure, such as a power failure, the program to be executed in the halfway state is not updated by the update program at the time when it was stopped by the reset start. You can return to the previous step and start temporarily saving the update program.

[0082] The update program may include a virtual initial startup program executed by the initial startup program when executed as the execution target program. The initial startup program is, for example, a program that is started when restarting (reset start)

The effective program area 513 is an area for storing an execution target program to be executed by the one-chip microcomputer 400. Details will be described with reference to FIG. 6, but a plurality of execution target programs stored in the effective program area 513 may be read and executed by the CPU 401 (not shown)! /.

[0084] When the update program is copied to the valid program area 513, the CPU 401 may update the execution target program into an executable format by verifying the copied update program. . Specifically, for example, the verification of the update program is performed by checking whether the update program has been copied as an execution target program without excess or deficiency. The structure to confirm may be sufficient.

[0085] The IPL area 514 is an area for storing an initial startup program that is first executed by the CPU 401 (not shown) at the start of reset. Specifically, for example, the IPL area 514 copies the update program temporarily stored in the update program storage area 512 to the valid program area 513, or each execution target program stored in the valid program area 513. Save the program that determines whether to run.

[0086] The Vector area 515 stores the address of a program to be executed by the one-chip microcomputer 400 when an event occurs. Specifically, for example, the CPU 401 (not shown) reads the program address stored in the IPL area 514 with reference to the Vector area 515 at the time of reset start. For example, the CPU 401 may read the address of each execution target program stored in the effective program area 513 with reference to the Vector area 515 at normal startup.

[0087] As described above, the data stored in the IPL area 514 and the Vector area 515 is not rewritten by the update program. Therefore, a failure occurs during the temporary storage of the update program or the update of the execution target program. Even if this occurs, if the CPU 401 refers to the data stored in the IPL area 514 and the Vector area 515 by reset start, the operation of the one-chip microcomputer 400 can be resumed normally.

The update program transmission side microcomputer 502 transmits an update program for the execution target program to be executed by the one-chip microcomputer 400 to the one-chip microcomputer 400. Specifically, for example, the update program transmission side microcomputer 502 reads the update program stored in the flash memory 5003 and transmits the read update program to the on-chip microcomputer 400.

The flash memory 503 is a recording medium that can store various data. In FIG. 5, the flash memory 503 stores an update program for an execution target program to be executed by the one-chip microcomputer 400. Specifically, for example, the flash memory 503 outputs the stored update program to the update program transmission side microcomputer 502.

Here, the program stored in the effective program area 513 will be described with reference to FIG. Fig. 6 shows the programs stored in the effective program area that is useful in this embodiment. It is explanatory drawing shown.

In FIG. 6, an effective program area 513 includes a virtual vector area 601 for storing a virtual initial startup program, an execution target program area 602 for storing execution target programs a, b, and c to be executed, Power is also composed.

The virtual initial activation program stored in the virtual vector area 601 is read by the CPU 401 (not shown) when the normal activation is performed at the reset start. The virtual initial startup program is, for example, a program that executes the execution target programs a, b, and c that are executed at normal startup. The execution target programs a, b stored in the execution target program area 602 for the CPU 401 are executed. , c address may be specified.

Specifically, for example, when reset is started, the CPU 401 refers to the Vector area 515 and reads the address of the program stored in the IPL area 514, thereby copying the update program (update the execution target program). ) Or, execute the execution target program.

[0094] More specifically, for example, the CPU 401 selects copy of the update program or execution of the execution target program based on the update information stored in the valid program information storage area 510, and executes the execution target. When executing the program, the address of the virtual vector area 601 is read with reference to the vector area 515.

Then, the CPU 401 may execute the execution target programs a, b, and c whose addresses are specified by the virtual initial activation program stored in the virtual vector area 601.

In this way, by updating the virtual vector area 601 and the execution target program area 602 for storing the virtual initial activation program in the effective program area 513 without updating the IPL area 514 and the vector area 515, Limitations on the placement of the execution target programs a, b, and c can be minimized.

In other words, for example, as shown in FIG. 1, if there is no virtual initial activation program, if the vector area 113 is not updated, there is a surplus in the area for storing each execution target program a, b, c. Must be arranged with On the other hand, when the vector area 113 is updated by the update program, if a power failure occurs during the program update, Ve A malfunction occurs in the ctor area 113, and the program execution microcomputer 101 does not operate.

[0098] (Processing content of one-chip microcomputer 400)

Next, the processing contents of the one-chip microcomputer 400 according to the present embodiment will be described with reference to FIGS. FIG. 7 is a flowchart showing a procedure for accepting an update program in the one-chip microcomputer, which is useful in this embodiment. In the flowchart of FIG. 7, first, it is determined by the input / output IZF 404 whether or not the program update preparation completion notification has been received from the update program transmission side microcomputer 502 (step S701). The program update preparation completion notification is sent from the update program transmission side microcomputer 502 to the one-chip microcomputer 400 when the update program transmission side microcomputer 502 acquires the update program from the flash memory 503 or other external device, for example. May be

[0099] In step S701, after waiting for acceptance of the program update preparation completion notice (step S701: Yes), the one-chip microcomputer 400 shifts to the program update mode (step S702), and the CPU 401 Then, the update program storage area 512 is initialized (step S703). The update program storage area 512 can be initialized by, for example, making the update program storage area 512 free, that is, if there is halfway data in the update program storage area 512 It is good to do.

[0100] Next, when the update program storage area 512 is initialized in step S703 by the input / output IZF404, an acceptance notification is output to the update program transmission side microcomputer 502 (step S704). .

[0101] Then, the input / output IZF 404 receives the update program data output from the update program transmission side microcomputer 502 in response to the acceptance notification output in step S704 (step S705). ).

Next, the input / output IZF 404 outputs a packet reception completion notification to the update program transmitting side microcomputer 502 for the update program data received in step S705 (step S706). [0103] Next, it is determined whether or not all the update programs have been received by the input / output IZF 404 (step S707). For example, if it is determined whether or not all the update programs have been received, the flag added to the last update program data received in step S705 is determined to have been received. The configuration to do, too.

[0104] If all the update programs are received in step S707 (step S707: Yes), the CPU 401 confirms the checksum of the update program temporarily stored in the update program storage area 512. (Step S708). The checksum can be, for example, to determine whether all update programs received in packets divided into multiple times have been temporarily stored in the update program storage area 512! /.

[0105] If all the update programs are not received in step S707 (step S707: No), the process returns to step S705 and the process is repeated.

Next, when the checksum is confirmed in step S708, the CPU 401 writes that the update program is ready in the valid program information storage area 510 (step S709). The update program preparation completion state is written, for example, by storing update information indicating that preparation for update of the execution target program is completed in the valid program information storage area 510.

[0107] It should be noted that if the checksum cannot be confirmed in step S708, it is assumed that an error is requested again from the update program transmission side microcomputer 502 as an error. Moyo! /

Then, a shutdown request is output to the update program transmission side microcomputer 502 by the input / output IZF 404 (step S710). Thereafter, the input / output I / F 404 receives a shutdown completion notification in response to the shutdown request in step S710 from the update program transmission side microcomputer 502 (step S711), and ends a series of update program acceptance processing.

[0109] Next, the startup processing procedure of the one-chip microcomputer 400, which is useful for the present embodiment, will be described with reference to FIG. FIG. 8 is a flowchart showing the start-up processing procedure of the one-chip microcomputer which is useful for this embodiment. In the flowchart of FIG. 8, first, a reset start is accepted by the input / output IZF 404 (step S801). [0110] When a reset start is accepted in step S801, the CPU 401 activates the IPL stored in the IPL area 514 (step S802) and refers to the valid program information storage area 510 (step S803).

Then, the CPU 401 determines from the update information in the valid program information storage area 510 referred to in step S803 whether or not the update program preparation has been completed (step S804). In the update program preparation, for example, it is written that the update program preparation completion state is written in the effective program information storage area 510 (for example, step S709 shown in FIG. 7). Good.

In step S804, when the update program preparation is completed (step S80 4: Yes), the CPU 401 starts the copy program (step S805). The copy program may be, for example, a program that overwrites and saves an update program temporarily stored in the update program storage area 512 with various programs such as an execution target program stored in the effective program area 513.

[0113] Then, after waiting for the copy by the copy program activated in step S805 to end (step S806: No), if it ends (step S806: Yes), the CPU 401 writes the effective program area 513. The copied program is verified (step S807). The verification of the program may be, for example, a configuration in which it is confirmed whether or not the update program has been copied as an execution target program without excess or deficiency.

[0114] Then, after verifying the program in step S807, the CPU 401 writes that the program is in a normal activation state in the valid program information storage area 510 (step S808), and returns to step S801. Repeat the process.

[0115] It should be noted that the description omitted in the flowchart of FIG. 8 As a result of verifying the program in step S807, the program to be executed is copied without excess or deficiency. You can copy it from again.

[0116] If the update program preparation is not completed in step S804 (step S804: No), the CPU 401 normally writes to the valid program information storage area 510 referenced in step S803. Determine whether or not it is running Tape S809).

[0117] In step S809, if it is in the normal activation state (step S809: Yes), the CPU 401 activates the program in the valid program area 513 (step S810).

Specifically, for example, when the program in the effective program area 513 is activated, the CPU 401 reads the address of the virtual vector area 601 with reference to the vector area 515. Then, the CPU 401 executes the execution target programs a, b, and c whose addresses are specified by the virtual initial activation program stored in the virtual vector area 601.

[0119] Further, in step S809, when it is not in the normal activation state (step S809: No), the process returns to step S801 and is repeated.

[0120] Next, it is determined by the input / output IZF 404 whether or not the interrupt process has been accepted (step S811). If interrupt processing is accepted in step S811 (step S811: Yes), the CPU 401 performs interrupt processing (step S812) and determines whether or not the program has ended (step S813). Details of the interrupt processing will be described later in FIG.

[0121] If interrupt processing is not accepted in step S811 (step S811: No), the process proceeds to step S813 to determine whether or not the program has ended (step S813).

[0122] If the program ends in step S813 (step S813: Yes), the process returns to step S801 to repeat the process. If the program does not end in step S813 (step S813: No), the process returns to step S810 to repeat the process.

Next, the procedure of interrupt processing (step S812 in FIG. 8) in the one-chip microcomputer 400, which is useful in the present embodiment, will be described with reference to FIG. FIG. 9 is a flowchart showing the procedure of interrupt processing (step S812 in FIG. 8) in the one-chip microcomputer, which is useful for this embodiment. In the flowchart of FIG. 9, first, the CPU 401 refers to the virtual vector area 601 (step S901).

[0124] Next, the CPU 401 activates the virtual initial activation program stored in the virtual vector area 601 referred to in step S901, and executes the program area 60 to be executed. Refer to 2 (step S902).

Then, the CPU 401 activates the program to be executed from the programs stored in the execution target program area 602 referred to in step S902 (step S903), and the series of interrupt processing ends.

[0126] As described above, according to the one-chip microcomputer that works with the present embodiment, the execution target program is updated by the update program stored in the update program storage area. It is possible to update the execution target program appropriately without preparing it.

[0127] In addition, since the program to be executed is updated after the update program ready state is written in the valid program information storage area, a power failure occurs before the update program ready state is entered. Even if this occurs, the one-chip microcomputer can start up normally after recovery.

[0128] Furthermore, since the effective program area including the virtual vector area is updated without rewriting the vector area, even if a power failure occurs during the update, the one-chip microcomputer will not Can be started normally, and the effective program area can be used efficiently.

Note that the information processing method described in the present embodiment can be realized by executing a prepared program on a computer such as a personal computer or a workstation. This program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed when the recording medium force is also read by the computer. The program may be a transmission medium that can be distributed through a network such as the Internet.

Claims

The scope of the claims

[1] In an information processing apparatus that executes an execution target program stored in a program execution area,

An update program input means for receiving an input of an update program for the execution target program;

Temporary storage means for temporarily storing the update program input by the update program input means in a temporary storage area;

Determining means for determining whether or not the update program temporarily stored by the temporary storage means is excessive or deficient;

As a result of the determination by the determination means, if there is no excess or deficiency in the update program, generation that generates update information indicating that preparation for updating the execution target program stored in the program execution area is completed Means,

Update information storage means for storing the update information generated by the generation means in an update information storage area;

An information processing apparatus comprising:

[2] The update program input means includes:

Further, when the update program is determined to be excessive or deficient as a result of the determination, the update program accepts an input by making an acquisition request to the output source of the update program. The information processing apparatus according to claim 1.

[3] Reactivation information input means for accepting input of reactivation information related to the restart of the own device, and when the reactivation information is input by the reactivation information input means, the initial activation stored in the initial activation program storage area A determination unit that determines whether or not the update preparation is completed by starting a program and referring to the update information; and when the update preparation is completed as a result of the determination by the determination unit Updating means for updating the execution target program by copying the update program to the program execution area; The information processing apparatus according to claim 1, further comprising:

[4] The updating means includes:

4. The information processing apparatus according to claim 3, wherein the update target program is updated to an executable format by verifying the update program copied to the program execution area.

[5] The execution means for executing the execution target program stored in the program execution area when the update preparation is not completed as a result of the determination by the determination means. The information processing apparatus described in 1.

[6] The update program includes a virtual initial startup program executed by the initial startup program when executed as the execution target program,

The execution means includes

4. The information processing apparatus according to claim 3, wherein the execution target program stored in the program execution area is executed in accordance with the execution of the virtual initial activation program.

[7] The program execution area includes a virtual program storage area for storing the virtual initial startup program,

The updating means includes

7. The information processing apparatus according to claim 6, wherein the execution target program is updated by copying the virtual initial activation program to the virtual program storage area.

[8] In an information processing method for executing an execution target program stored in a program execution area,

An update program input step for receiving an input of an update program for the execution target program;

A temporary storage step of temporarily storing the update program input in the update program input step in the temporary storage area;

A determination step of determining whether or not the update program temporarily stored in the temporary storage step is excessive or deficient; As a result of the determination in the determination step, if there is no excess or deficiency in the update program, generation that generates update information indicating that preparation for updating the execution target program stored in the program execution area is completed Process,

An update information storage step for storing the update information generated by the generation step in an update information storage area;

An information processing method comprising:

[9] An information processing program causing a computer to execute the information processing method according to claim 8.

[10] A computer-readable recording medium in which the information processing program according to claim 9 is recorded.