WO2016136014A1 - Monitoring recorder - Google Patents

Abstract

The present invention is provided with a recording-system program storage unit 121 having a first storage region for storing a first program and a second storage region for storing a second program, and a playback-system program storage unit 131 having a third storage region for storing a third program corresponding to the first program and a fourth recording region for storing a fourth program corresponding to the second program. A recording-system CPU 124 uses the first program or the second program to start up, and also notifies a playback-system CPU 133 of storage region information indicative of the storage region of the program needed for startup and causes the playback-system CPU 133 to start up.

Description

Surveillance recorder

The present invention relates to a monitoring recorder, and more particularly to a monitoring recorder including a plurality of processors.

In general, a surveillance recorder which is a video recording / playback apparatus in a surveillance system includes a recording system for recording video data transmitted from a camera in a large-capacity memory and a playback system for playing back video data recorded in the large-capacity memory. .

Especially, it is important for the surveillance recorder to keep recording video data transmitted from the camera. For this reason, a recording system CPU (Central Processing Unit) that is a recording system processor and a playback system CPU that is a playback system processor are provided separately and independently so that the recording system CPU is not affected by the playback system CPU. Can continue to operate.

The monitoring recorder needs to update the program for the purpose of responding to security threats that change from moment to moment, improving operability, or dealing with malfunctions. On the other hand, in order for the recording system CPU and the playback system CPU to cooperate and operate normally as a monitoring recorder, it has been verified that the version of the program executed by each of the recording system CPU and the playback system CPU operates normally. Must be a combination.

When the program update process does not end normally, or when the versions of the newly updated programs are in a combination incapable of normal operation, the recording system CPU starts up with the updated new program. And the reproduction system CPU may not operate correctly and may not function normally as a monitoring recorder. Therefore, it is necessary to perform a program update process and a start process that are a combination of programs that can operate normally.

Therefore, for example, in the software version upgrade management system described in Patent Document 1, each CPU stores a version of a program stored in a memory of a plurality of CPUs by using a single CPU and centrally managing version numbers. The program to be executed in the above is a combination that can operate normally.

Further, the multi-CPU system described in Patent Document 2 includes a main bank and a storage bank for each of the plurality of CPUs, and stores the update program in the main bank and the program before the update in the storage bank. When the system is started, each CPU notifies its own program version to other CPUs, and it is confirmed that the versions of the programs in all main banks are a combination that allows normal operation. If the combination is capable of normal operation, all the CPUs start the main bank program. If the combination is not capable of normal operation, the pre-update program and the post-update program are mixed, so each CPU is restarted, and the program in the main bank is started in the CPU before the program update. The updated CPU activates the pre-update program stored in the storage bank. As a result, a combination program capable of normal operation is executed in each CPU.

JP 2001-117760 A JP 2003-16047 A

However, in the version upgrade management system described in Patent Document 1, if the program is not updated correctly during the program update process, the system will not start, and the program update process cannot be re-executed. I fall. In such a case, it is necessary to rewrite the program at the manufacturer's factory using a dedicated program writing device.

In the multi-CPU system described in Patent Document 2, each CPU first reads its version from the memory and transmits it to the other CPU according to a specific communication protocol in order to confirm the version of the program. . Also, each CPU needs to receive the version transmitted from the other CPU and confirm that the combination is capable of normal operation. In order to perform such processing at the time of startup, a startup program or an OS (Operating System) needs to be normally started. If an error occurs during startup of the startup program or OS, each CPU cannot confirm the program version of the other CPU, and even when restarted, it is impossible to execute a combination of programs that can operate normally. .

Therefore, the present invention has been made to solve the above-described problem, and even when the program is not updated correctly, the program can be updated again, and it is not necessary to check the version of the program. It is an object of each CPU to be able to execute a combination of programs that can operate normally.

A monitoring recorder according to an aspect of the present invention includes a first processor, a first storage area that stores a first program used to start the first processor, and the first program. A first storage unit having a second storage area for storing a second program used to start up the first processor, a second processor, and the second processor And a third storage area for storing a third program corresponding to the first program, and a second storage area used for starting the second processor. And a second storage unit having a fourth storage area for storing a corresponding fourth program, wherein the first processor stores the first program or the second program. And informing the second processor of storage area information indicating a storage area of a program necessary for the activation of the third storage area and the fourth storage area. Is started using a program stored in the storage area indicated in the storage area information notified from the first processor.

According to one aspect of the present invention, even if the program is not updated correctly, the program can be updated again, and it is not necessary to check the version of the program. The program can be executed.

1 is a block diagram schematically showing a configuration of a monitoring recorder according to Embodiment 1. FIG. 4 is a schematic diagram illustrating an example of a program stored in a recording system program storage unit in Embodiment 1. FIG. 4 is a schematic diagram illustrating an example of a program management area in the first embodiment. FIG. 6 is a schematic diagram illustrating an example of a value of a write completion flag in the first embodiment. FIG. 3 is a schematic diagram showing an example of a program stored in a reproduction system program storage unit in Embodiment 1. FIG. 3 is a flowchart showing a start-up operation of a recording unit in the first embodiment. 6 is a flowchart illustrating an example of processing for selecting a management area in the first embodiment. 3 is a flowchart illustrating an example of a process for determining a startup surface in the first embodiment. 3 is a flowchart showing a start-up operation of a playback unit in the first embodiment. FIG. 3 is a schematic diagram illustrating a relationship between a start operation of a recording unit and a start operation of a reproduction unit in the first embodiment. 4 is a flowchart showing a program update process of the monitoring recorder in the first embodiment. It is the schematic which shows the timing from before the program update of the monitoring recorder in Embodiment 1 to after the update.

Embodiment 1 FIG.
Next, embodiments of the present invention will be described with reference to the drawings. In the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, the drawings are schematic and ratios of dimensions and the like are different from actual ones. Accordingly, specific dimensions and the like should be determined in consideration of the following description. Moreover, it is a matter of course that portions having different dimensional relationships or ratios are included between the drawings.

FIG. 1 is a block diagram schematically showing the configuration of the monitoring recorder 110 according to the first embodiment. In FIG. 1, a monitoring system 100 including a monitoring recorder 110 includes a plurality of cameras 150A, 150B, and 150C as monitoring cameras and a display device 160 as a video display device in addition to the monitoring recorder 110.

The surveillance camera includes a first camera 150A, a second camera 150B, and a third camera 150C, each of which is connected to the surveillance recorder 110. Note that the first camera 150 </ b> A, the second camera 150 </ b> B, and the third camera 150 </ b> C are each referred to as a camera 150 when it is not necessary to distinguish between them. The camera 150 transmits video data obtained by photographing the monitoring target to the monitoring recorder 110. For example, the camera 150 may be installed at a location away from the monitoring recorder 110.

The monitoring recorder 110 functions as a video recording / reproducing device that receives and records video data transmitted from the camera 150. The display device 160 is an output device connected to the monitoring recorder 110 and displays a recorded video based on the video data recorded on the monitoring recorder 110 or a current video based on video data generated by shooting by the camera 150. . Although the number of cameras 150 is three here, it goes without saying that the number is not limited to three. For example, it may be one, two, or four or more. The connection between the camera 150 and the monitoring recorder 110 may be either a wired or wireless connection method as long as data can be exchanged, or a mixed connection method. Moreover, the connection via a network or another relay device may be used.

As shown in FIG. 1, the monitoring recorder 110 includes a communication interface (I / F) unit 111, an output I / F unit 112, a connection I / F unit 113, and a recording system as a first system. Unit 120, a playback unit 130 that is a playback system as the second system, a program activation control unit 140, and a notification unit 145.

The communication I / F unit 111 is an interface that performs communication with the camera 150. For example, the communication I / F unit 111 receives video data transmitted from the camera 150.
The output I / F unit 112 is an interface that performs communication with the display device 160. For example, the output I / F unit 112 outputs reproduction data to the display device 160.
The connection I / F unit 113 is an interface for connecting the external storage device 170.

The recording unit 120 acquires video data from the camera 150 via the communication I / F unit 111 and performs recording. The recording unit 120 includes a recording system program storage unit 121, a recording system work memory 122, an information storage unit 123, and a recording system CPU 124 as a first processor.

The recording system program storage unit 121 is a storage unit that stores a program to be executed when the power of the monitoring recorder 110 is turned on and the recording system CPU 124 starts a startup process. The recording system program storage unit 121 can be realized by a non-volatile memory that retains stored contents even when the power is turned off. In the first embodiment, it is assumed that the program executed by the recording system CPU 124 is a boot loader, an OS, and a recording system AP (Application Program).

The boot loader is a program that executes processing for starting the OS. For example, the boot loader specifies an OS to be executed, initializes a work memory, acquires a start log, and the like. Furthermore, the boot loader has limited functions compared to the OS, and generally cannot process a plurality of processes in parallel. The OS is basic software for managing the entire recording unit 120.

The recording system AP includes, for example, a program that receives the video data transmitted from the camera 150 and records it in the information storage unit 123. The recording AP can start processing after the OS is started. Also, after the OS is started, a plurality of the same APs can be executed simultaneously, and a plurality of different APs can be executed simultaneously. In other words, the OS and the recording system AP are programs for the recording system CPU 124 to perform predetermined processing.

FIG. 2 is a schematic diagram illustrating an example of a program stored in the recording system program storage unit 121.
As illustrated, the recording system program storage unit 121 includes a recording system boot loader 121a, a program management area 121f, a first recording system program area 121g as a first storage area, and a second storage area as a second storage area. 2 recording system program areas 121h.
The first recording system program area 121g has a first recording system OS 121b and a first recording system AP 121c.
The second recording system program area 121h includes a second recording system OS 121d and a second recording system AP 121e.
When starting the monitoring recorder 110, if the first startup surface is designated, the program (first program) stored in the first recording system program area 121g is used, and the first When the second activation surface is designated, the program (second program) stored in the second recording system program area 121h is used.

FIG. 3 is a schematic diagram showing an example of the program management area 121f.
As illustrated, the program management area 121 f includes a first management area 301 and a second management area 302.
The first management area 301 and the second management area 302 have write completion flags 303a and 303b (referred to as the write completion flag 303 when there is no need to distinguish between them) and management area version numbers 304a and 304b. (When there is no particular need to distinguish each, it is referred to as a management area version number 304) and activation plane designation values 305a and 305b as storage area designation values (when there is no particular need to distinguish each, the activation plane designation value) 305), OS version numbers 306a and 306b (especially OS version number 306 when it is not necessary to distinguish each) and AP version numbers 307a and 307b (especially when it is not necessary to distinguish each other, AP Version number 307) and CRC values 308a and 308b (particularly distinguishing each) When not needed, and a called CRC value 308).
The monitoring recorder 110 provides redundancy by providing two areas, a first management area 301 and a second management area 302. Even when the contents of one area are broken, the monitoring recorder 110 is activated by the information of the other area. can do.

The recording system OS and the recording system AP used in the recording unit 120 are updated for reasons such as security measures, performance improvement, operability improvement, or defect repair. The program is updated by rewriting the recording system OS and recording system AP in a program area different from the program area in which the recording system OS and recording system AP being executed are stored. For example, when the recording system CPU 124 is executing the first recording system OS 121b and the first recording system AP 121c stored in the first recording system program area 121g, the second recording system program area 121h in the second recording system program area 121h is used. The second recording system OS 121d and the second recording system AP 121e are rewritten with new programs.
In this case, the first recording system OS 121b and the first recording system AP 121c are older versions of the programs of the second recording system OS 121d and the second recording system AP 121e. The old version of the program has already been processed, and is a program that can be stably executed and is compatible with the playback unit 130 described later. Accordingly, at the time of activation, the recording system CPU 124 is activated by the first recording system OS 121b and the first recording system AP 121c that were activated last time, or the newly updated second recording system OS 121d and second recording system AP 121e. Select whether to start with. A starting surface designation value 305 that is a basis for this selection is stored in the program management area 121f. When the program is updated, the program management area 121f is rewritten to select a newly updated OS and AP.

The contents of the program management area 121f are updated every time the program is updated. Details of the program management area 121f will be described below.

The write completion flag 303 is a flag indicating the program update status.
FIG. 4 is a schematic diagram illustrating an example of the value of the write completion flag. In the example of FIG. 4, when the write completion flag is “0xffffffff”, it indicates that the program is being updated. Further, when the write completion flag is “0x000000000000”, it indicates that the program update has been completed and the monitoring recorder 110 has already been started at least once. Furthermore, when the write completion flag is “0x80000000”, it indicates that the update of the program is completed, but the monitoring recorder 110 has not been activated yet.
In this example, the write completion flag is changed to “0xffffffff” when the program update is started, and the write completion flag is changed to “0x80000000” when the program update is completed. Next, when the monitoring recorder 110 starts up normally, the write completion flag is changed to “0x00000000”. In this way, the recording system CPU 124 can determine the program update status from the write completion flag 303.

Management area version number 304 is a version number for indicating the version of each management area (first management area 301 or second management area 302). For example, “0” is written at the first program write, and a value incremented by “1” is written at the subsequent program update. As a result, by comparing the management area version number 304a of the first management area 301 and the management area version number 304b of the second management area 302, it is possible to determine which is the latest. .

The start surface designation value 305 is a value for indicating which of the first recording system program area 121g and the second recording system program area 121h in the recording system program storage unit 121 is to be used for activation. is there. The activation surface designation value 305 indicates which of the first reproduction system program area 131g and the second reproduction system program area 131h in the reproduction system program storage unit 131, which will be described later, is used for activation. It is also a value to show.
If each of the recording system program storage unit 121 and the playback system program storage unit 131 has an activation surface designation value 305 indicating a program area used for activation, a writing error of the activation surface designation value 305 or aging deterioration is caused. Due to the change in the value of the activation surface designation value 305 due to the recording system CPU 124 and the reproduction system CPU 133, there is a possibility of using a combination program that is not supposed to be used. On the other hand, in the present embodiment, since a common activation surface designation value 305 is used by the recording unit 120 and the reproduction unit 130, inconsistency of activation surfaces between the recording system CPU 124 and the reproduction system CPU 133 does not occur. be able to.

For example, when the activation surface designation value 305 is “0xffffffff”, the recording system CPU 124 is activated using the program in the first recording system program area 121 g in the recording system program storage unit 121. Further, as will be described later, the reproduction system CPU 133 is activated using a program in the first reproduction system program area 131g in the reproduction system program storage unit 131. For the sake of convenience, here, the first recording system program area 121g and the first reproduction system program area 131g are expressed as a first startup surface.
For example, when the activation surface designation value 305 is “0x00000000”, the recording system CPU 124 is activated using the program in the second recording system program area 121 h in the recording system program storage unit 121. Further, as will be described later, the reproduction system CPU 133 is activated using a program in the second reproduction system program area 131h in the reproduction system program storage unit 131. For convenience, here, the second recording system program area 121h and the second reproduction system program area 131h are expressed as a second activation surface.
As shown in the example described here, the activation surface designation value 305 can be selected correctly even if data corruption of several bits occurs by providing redundancy as a multi-bit value. Become.

The OS version number 306 indicates the version number of the first recording system OS 121b or the second recording system OS 121d stored in the recording system program storage unit 121.
The AP version number 307 indicates the version number of the first recording system AP 121c or the second recording system AP 121e stored in the recording system program storage unit 121.
However, these OS and AP version numbers are not used when selecting a program to be activated, but are used when managing the version of the program at the AP.

The CRC value 308 is a check value for confirming that the information in the management area (the first management area 301 or the second management area 302) is normal without being broken, in other words, an error in the management area. .
In order to confirm that the information in the first management area 301 is normal, the CRC value 308a in the first management area 301 is used, and it is confirmed that the information in the second management area 302 is normal. For this purpose, the CRC value 308b in the second management area 302 is used.
The CRC value 308a in the first management area 301 includes, for example, a write completion flag 303a in the first management area 301, a management area version number 304a, a startup surface designation value 305a, an OS version number 306a, an AP The version number 307a is calculated based on the value of the area in which it is stored.
Here, for example, x ^ 16 + x ^ 12 + x ^ 5 + 1 is used as the CRC polynomial for calculating the CRC value. However, ^ represents a power. The CRC polynomial is not limited to this polynomial, and may be other polynomials.
Using this CRC value 308, it is possible to check whether the information in each of the first management area 301 and the second management area 302 is broken. Note that the CRC value 308 is at least information on the CRC calculation target area such as the write completion flag 303a, the management area version number 304a, the activation surface designation value 305a, the OS version number 306a, and the AP version number 307a in the first management area 301. Each time one or more are updated, it is calculated again and updated with a new CRC value.

Hereinafter, the information stored in the program management area 121f is referred to as program management information, and the information stored in the first management area 301 is referred to as first program management information and is stored in the second management area 302. This information may be referred to as second program management information.

Hereinafter, the first recording system OS 121b and the first recording system AP 121c are referred to as a first recording system program (first program), and the second recording system OS 121d and the second recording system AP 121e are used as a second recording system. Sometimes referred to as a system program (second program).

The program is updated by connecting the external storage device 170 to the connection I / F unit 113 of the monitoring recorder 110 and reading the data. The external storage device 170 may be a storage medium such as a USB memory, or may be an information processing device such as a computer connected to a network.

Returning to FIG. 1, the camera 150 can perform power-on control from the monitoring recorder 110, and starts activation by a control signal transmitted from the recording unit 120 during the activation processing after the power-on of the monitoring recorder 110. To do.

The recording work memory 122 is a memory used by the recording CPU 124 as a work area. The recording work memory 122 is, for example, a RAM (Random Access Memory). The recording system CPU 124 reads the OS or AP from the recording system program storage unit 121, writes it in the recording system work memory 122, executes it, and controls the operation of the recording unit 120.

The information storage unit 123 is an information storage unit that records video data of video captured by the camera 150. The information storage unit 123 is configured by a storage medium such as a flash memory or an HDD (Hard Disk Drive), for example. Note that the information storage unit 123 may be configured independently by being separated from the outside of the recording unit 120 or the outside of the monitoring recorder 110. The information storage unit 123 may be configured to be detachable from the monitoring recorder 110.

The recording system CPU 124 is a recording system processing unit that activates the first recording system program or the second recording system program stored in the recording system program storage unit 121 and controls processing in the recording unit 120. . When the power of the monitoring recorder 110 is turned on and an instruction for starting the activation process is issued from the program activation control unit 140, the recording system CPU 124 sequentially executes the activation process according to the instruction. In addition, the recording system CPU 124 has a function of controlling the activation of the camera 150, for example, in addition to its own activation process. The recording system CPU 124 has a function of outputting not only its own activation status but also information indicating the activation status of what the recording system CPU 124 performs activation control to, for example, the program activation control unit 140 or the information storage unit 123.
Further, when the monitoring recorder 110 is turned on, the recording system CPU 124 reads out the OS or AP from the recording system program storage unit 121 to the recording system work memory 122 and executes it, thereby controlling the activation operation of the recording unit 120.

The signal line 180 is a signal line for transmitting the activation surface information as the storage area information indicating the storage area of the program necessary for activation determined by the recording system CPU 124 to the reproduction system CPU 133. Since the activation surface information is information for selecting one of the two program areas and executing the program stored therein, the signal line 180 is a signal that can transmit one bit of data at a time. Is a line. Since the activation surface information is information that is updated only once per activation, the signal line 180 can be realized by a low-speed signal line. Further, since it is only necessary to transmit the activation surface information from the recording system CPU 124 to the reproduction system CPU 133, it can be realized by a unidirectional signal line. Therefore, in the recording system CPU 124 and the reproduction system CPU 133, a bidirectional port capable of transmitting and receiving is not necessary as a port to which the signal line 180 is connected. The recording CPU 124 only needs to have a transmission port, and the reproduction CPU 133 only needs to have a reception port.

The signal line 181 is a bidirectional signal line for communicating between the CPUs after both the recording system CPU 124 and the reproduction system CPU 133 have been activated. The signal line 181 includes a signal line capable of transmitting a large amount of data at a higher speed than the signal line 180. The signal line 181 can be realized by, for example, Ethernet (registered trademark).

Since high-speed communication using the signal line 181 cannot be used until the activation of the system is completed, information necessary for activation can be transmitted from the recording system CPU 124 to the reproduction system CPU 133 through the signal line 180. In addition, after the system is activated, data can be transmitted at high speed between the recording CPU 124 and the reproduction CPU 133 via the signal line 181.

When the program is updated, it is necessary to transmit a new program from the recording system CPU 124 to the reproduction system CPU 133. Further, after writing the new program received by the playback system CPU 133 into the playback system program storage unit 131, it is necessary to notify the recording system CPU 124 of the completion of writing from the playback system CPU 133. The program update is performed after both the recording system CPU 124 and the playback system CPU 133 have been activated and the inter-CPU communication via the signal line 181 is also valid. Therefore, the signal line 181 can notify the transmission of a new program and the completion of writing of the new program in the reproduction system CPU 133.

Based on the video data recorded in the information storage unit 123 in the recording unit 120, the playback unit 130 generates playback data that plays back the video, sends the playback data to the display device 160, and the video based on the video data. Is displayed on the display device 160. The playback unit 130 can also display the video based on the video data captured by the camera 150 on the display device 160 in real time. The playback unit 130 includes a playback system program storage unit 131, a playback system work memory 132, and a playback system CPU 133 as a second processor.

The reproduction system program storage unit 131 is a storage unit that stores a program that is executed when the power of the monitoring recorder 110 is turned on and the reproduction system CPU 133 starts a startup process. In the first embodiment, it is assumed that the programs executed by the reproduction system CPU 133 are a boot loader, an OS, and a reproduction system AP.

As described above, the boot loader is a program that executes processing for starting the OS. The OS is basic software for managing the entire playback unit 130.
For example, the reproduction AP is a program that reads a plurality of video data recorded in the information storage unit 123 and displays a plurality of videos side by side on the display device 160 based on the plurality of read video data. The playback AP can start processing after the OS is activated. Also, after the OS is started, a plurality of the same APs can be executed simultaneously, and a plurality of different APs can be executed simultaneously.

FIG. 5 is a schematic diagram illustrating an example of a program stored in the reproduction system program storage unit 131.
As illustrated, the reproduction system program storage unit 131 includes a reproduction system boot loader 131a, a first reproduction system program area 131g as a third storage area, and a second reproduction system program area as a fourth storage area. 131h. The first reproduction system program area 131g has a first reproduction system OS 131b and a first reproduction system AP 131c. The second playback system program area 131h includes a second playback system OS 131d and a second playback system AP 131e.

The playback system OS and playback system AP used in the playback unit 130 are updated for reasons such as security measures, performance improvement, operability improvement, or defect repair. The program is updated by rewriting the playback system OS and playback system AP in a program area different from the program area in which the playback system OS and playback system AP being executed are stored. For example, when the reproduction system CPU 133 is executing the first reproduction system OS 131b and the first reproduction system AP 131c stored in the first reproduction system program area 131g, the reproduction system CPU 133 executes the first reproduction system OS 131b and the first reproduction system AP 131c in the second reproduction system program area 131h. The second playback system OS 131d and the second playback system AP 131e are rewritten with new programs.
In this case, the first reproduction system OS 131b and the first reproduction system AP 131c are old versions of the programs of the second reproduction system OS 131d and the second reproduction system AP 131e. The old version of the program is a program that has already been processed and is compatible with the recording unit 120 and can be stably executed. Therefore, the playback system CPU 133 starts up with the first playback system OS 131b and the first playback system AP 131c that were started last time, or the newly updated second playback system OS 131d and the second playback system AP 131e. Select whether to start with. For this selection, the reproduction system CPU 133 receives and uses the activation surface information output from the recording system CPU 124.

Hereinafter, the first playback system OS 131b and the first playback system AP 131c are referred to as a first playback system program (third program), and the second playback system OS 131d and the second playback system AP 131e are used as a second playback system. Sometimes referred to as a system program (fourth program).

Since the startup surface information is transmitted from the recording system CPU 124 to the playback system CPU 133, the playback system program storage unit 131 does not need a program management area for storing information about the startup surface. Therefore, the playback system program storage unit 131 can have a smaller storage capacity than when there is a program management area. Further, when updating the program stored in the reproduction system program storage unit 131, it is not necessary to write to the program management area in the reproduction system program storage unit 131, so that the program update time can be shortened.

Returning to FIG. 1, the reproduction system work memory 132 is a memory used by the reproduction system CPU 133 as a work area. The reproduction work memory 132 is, for example, a RAM. The playback system CPU 133 reads the OS or AP from the playback system program storage unit 131, writes it in the playback system work memory 132, executes it, and controls the startup operation of the playback unit 130.

The reproduction system CPU 133 is a reproduction system processing unit that activates the first reproduction system program or the second reproduction system program stored in the reproduction system program storage unit 131 and controls processing in the reproduction unit 130. . When the power of the monitoring recorder 110 is turned on and a start command for starting processing is issued from the program start control unit 140, the playback system CPU 133 sequentially executes the start processing according to the command.

The program activation control unit 140 controls the activation process in the monitoring recorder 110, in other words, the activation process in the recording system CPU 124 and the reproduction system CPU 133. For example, when the monitoring recorder 110 is turned on, the program activation control unit 140 checks the activation status of the recording system CPU 124 and the reproduction system CPU 133. Then, the program activation control unit 140 issues an activation process start command to each. The program activation control unit 140 stores in advance information on the activation operation of the recording CPU 124 and the reproduction CPU 133, for example, the order of activation processing, and confirms the activation status so that the activation operation proceeds correctly in that order, and the activation is started. Issue processing instructions.

The program activation control unit 140 restarts the recording system CPU 124 and the reproduction system CPU 133 when an error occurs in activation of at least one of the recording system CPU 124 and the reproduction system CPU 133. For example, the program activation control unit 140 measures the elapsed time after the recording system CPU 124 and the reproduction system CPU 133 notify the activation status, and a predetermined time has elapsed until the next activation status is notified. In this case, a reset signal for restarting the recording system CPU 124 and the reproduction system CPU 133 is output.
Further, when the recording system CPU 124 and the playback system CPU 133 are restarted, the program activation control unit 140 stores the recording system CPU 124 in a different activation surface than the activation surface designated by the activation surface designation value 305. To start using a program that For example, when the monitoring starter 110 is restarted, the program start control unit 140 causes the recording system CPU 124 and the playback system CPU 133 to restart the restarting program so that the recording system CPU 124 and the playback system CPU 133 return to an old version with a track record of operation. Change the value of and output. When the recording system CPU 124 fails to start the second recording system program that is the latest version, or the playback system CPU 133 fails to start the second playback system program that is the latest version. In this case, the recording system CPU 124 is restarted to cause the recording system CPU 124 to execute the old version of the first recording system program, and the playback system CPU 133 is restarted to cause the playback system CPU 133 to restart the old version of the first playback. Run the system program. As a result, even if the program update fails and the latest program cannot be started, the old program can be started again and the program can be updated again. When the first recording system program and the first reproduction system program are the latest, the program activation control unit 140 sends the second recording system program to the recording system CPU 124 as an old version program. The CPU 133 is caused to execute the second reproduction system program.

Note that the program activation control unit 140 can also be realized by including a CPU (not shown). In addition, the program activation control unit 140 includes a memory 140a for storing information such as a flag. The memory 140a may be a volatile memory or a non-volatile memory. The program activation control unit 140 can also be realized by a programmable logic device such as CPLD (Complex Programmable Logic Device) instead of a CPU (not shown).

The notification unit 145 notifies that a startup error has occurred. For example, the notification unit 145 includes an LED (Light Emitting Diode), and notifies that a start-up error has occurred due to its lighting.

Hereinafter, the operation of the monitoring recorder 110 according to the first embodiment, that is, the activation control method of the monitoring recorder 110 will be described.

First, the starting operation of the recording unit 120 of the monitoring recorder 110 according to the first embodiment will be described.
FIG. 6 is a flowchart showing the starting operation of the recording unit 120.
First, when the power is turned on, the recording system CPU 124 starts the process written in the recording system boot loader 121a stored in the recording system program storage unit 121 (S10).

The recording system boot loader 121a causes the recording system CPU 124 to initialize the H / W circuit such as the recording system work memory 122 (S11).

Next, the recording system CPU 124 selects either the first management area 301 or the second management area 302 in the program management area 121f (S12). The processing here will be described in detail with reference to FIG.

Next, the recording system CPU 124 determines the activation surface (S13). This process will be described in detail with reference to FIG.

Next, the recording system CPU 124 outputs the activation surface determined in step S13 as activation surface information to the reproducing unit 130 via the signal line 180 (S14).

Next, the recording system CPU 124 selects one of the first recording system program area 121g and the second recording system program area 121h according to the startup surface determined in step S13, and is stored in the selected program area. The operating system is started (S15).

When the activation of the OS is completed, the recording CPU 124 outputs an OS activation completion notification (S16). The completion notification output here is notified to the reproduction system CPU 133 via, for example, the program activation control unit 140 of FIG.

Next, the recording CPU 124 activates the AP stored in the program area selected in step S15 (S17).
If the value of the write completion flag 303 in the management area used for activation is “0x80000000”, the recording CPU 124 changes the value to “0x00000000” and completes the CRC value 308 after completion of activation. Calculate and update again.

The recording unit 120 is activated according to the procedure described above. Next, the management area selection (step S12) in FIG. 6 will be described in detail.
FIG. 7 is a flowchart illustrating an example of processing contents in management area selection.

First, the recording system CPU 124 performs CRC checks on the first management area 301 and the second management area 302 in the program management area 121f, and confirms whether the CRC check results in both areas are NG (S20). ). The CRC check of the first management area 301 stores, for example, a write completion flag 303a, a management area version number 304a, a startup surface designation value 305a, an OS version number 306a, and an AP version number 307a in the first management area 301. This is performed by calculating the CRC value of the area that has been set, and comparing the CRC value obtained as a result of the calculation with the CRC value 308a in the first management area 301. If the CRC value obtained as a result of the calculation matches the CRC value 308a in the first management area 301, it is determined that the CRC check is OK, and if it does not match, it is determined that the CRC check is NG. The CRC check of the second management area 302 is performed in the same manner as the CRC check of the first management area 301. If the CRC check results in both areas are NG (YES in S20), it is determined that the program management area 121f is invalid, and the process proceeds to step S31 (management area NG). In other cases (NO in S20), the process proceeds to step S21.

In step S21, the recording CPU 124 confirms whether or not the CRC check of the first management area 301 is OK and the CRC check of the second management area 302 is NG. If the CRC check of the first management area 301 is OK and the CRC check of the second management area 302 is NG (YES in S21), the process proceeds to step S29 (uses the first management area). . In other cases (NO in S21), the process proceeds to step S22.

In step S22, the recording CPU 124 checks whether or not the CRC check of the first management area 301 is NG and the CRC check of the second management area 302 is OK. If the CRC check of the first management area 301 is NG and the CRC check of the second management area 302 is OK (YES in S22), the process proceeds to step S30 (using the second management area). In other cases (NO in S22), the process proceeds to step S23.

In step S23, the recording CPU 124 checks whether or not the management area version numbers 304 stored in the first management area 301 and the second management area 302 are both “0xffffffff”. When the recording system program storage unit 121 is configured by a nonvolatile memory such as a flash memory, when the management area version number 304 is not written in the first management area 301 and the second management area 302, the initial value “0xffffffff” ”State. If both management area version numbers 304 are initial values (YES in S23), the process proceeds to step S29 (using the first management area). In other cases (NO in S23), the process proceeds to step S24.

In step S24, the recording CPU 124 checks whether or not the write completion flag 303a in the first management area 301 is invalid. For example, during the program update, the value of the write completion flag 303 is “0xffffffff”. Further, the value of the write completion flag 303 is “0x80000000” until the first activation after the program update. Further, after the first activation after the program update, the value of the write completion flag 303 is “0x00000000”. If the write completion flag 303a in the first management area 301 is invalid in any of these values (YES in S24), the process proceeds to step S30 (uses the second management area). In other cases (NO in S24), the process proceeds to step S25.

In step S25, the recording system CPU 124 checks whether or not the second management area 302 is being updated. For example, when the value of the write completion flag 303b in the second management area 302 is “0xffffffff” and writing is in progress (YES in S25), the process proceeds to step S29 (uses the first management area). In other cases (NO in S25), the process proceeds to step S26.

In step S26, the recording CPU 124 confirms whether or not the first management area 301 is being updated. If the value of the write completion flag 303a in the first management area 301 is, for example, “0xffffffff” and writing is in progress (YES in S26), the process proceeds to step S30 (using the second management area). In other cases (NO in S26), the process proceeds to step S27.

In step S27, the recording CPU 124 checks whether or not the write completion flag 303b in the second management area 302 is invalid. As described in step S24, the write completion flag 303 is one of a plurality of predetermined values. For this reason, if the write completion flag 303b in the second management area 302 is not any of these values and is invalid (YES in S27), the process proceeds to step S29 (uses the first management area). . In other cases (NO in S27), the process proceeds to step S28.

In step S28, the recording CPU 124 compares the management area version number 304a of the first management area 301 with the management area version number 304b of the second management area 302. If management area version number 304a is smaller than management area version number 304b (YES in S28), the process proceeds to step S30 (using the second management area). In other cases (NO in S28), the process proceeds to step S29 (using the first management area).

In step S <b> 29, the recording CPU 124 determines to select and use the first management area 301 from the first management area 301 and the second management area 302.

In step S30, the recording system CPU 124 determines to select and use the second management area 302 from the first management area 301 and the second management area 302.

In step S31, the recording system CPU 124 determines that both the first management area 301 and the second management area 302 are invalid, and determines to stop and start the system. In step S31, depending on the specifications of the apparatus, instead of determining whether to start or stop the system, one of the management areas, for example, the first management area 301 may be forcibly used.

As described above, the management area is selected in the management area selection (step S12) in FIG. As described above, a CRC check is performed on the first management area 301 and the second management area 302 using the CRC value 308 to store in the first management area 301 or the second management area 302. If the information is broken, it can be started using the information in the management area that is not broken.

Further, depending on the state indicated by the write completion flag 303, the information of the area where the program update has not been completed in the first management area 301 or the second management area 302 is not used, and the area where the program update has been completed is not used. Can be activated using information.

Further, by selecting and using the area having the larger management area version number 304 out of the first management area 301 or the second management area 302, it is possible to start up with the latest management information. .

Next, the activation surface determination (step S13) in FIG. 6 will be described in detail.
FIG. 8 is a flowchart showing an example of the processing content in the activation plane determination.

In step S40, the recording system CPU 124 selects the management area selected in the management area selection (step S12) in FIG. 6 from the first management area 301 and the second management area 302 shown in FIG. The activation surface designation value 305 is read out.

In step S41, the recording system CPU 124 counts the number of bits whose value is “1” when the activation surface designation value 305 read in step S40 is expressed in binary. For example, when the activation surface designation value 305 is “0xffffffff”, it is expressed as “11111111, 11111111, 11111111, 11111111” when expressed in binary, so the number of bits having a value of “1” is “32”.

In step S42, the recording CPU 124 determines whether or not the number of bits counted in step S41 is equal to or greater than a predetermined threshold value (for example, 16). If the number of bits is equal to or greater than a predetermined threshold value (YES in S42), the process proceeds to step S43 (tentatively determined as the first activation surface). In other cases (NO in S42), the process proceeds to step S46 (tentatively determined as the second startup surface). By tentatively determining the activation plane in this way, it is possible to select the activation plane correctly even when the information of the activation plane designation value 305 is broken by several bits.

In step S43, the recording system CPU 124 provisionally determines the activation surface as the first activation surface.
In step S44, the recording CPU 124 determines whether or not the activation surface change flag input from the program activation control unit 140 is “1”. If the activation surface change flag is “1” (YES in S44), the process proceeds to step S48 (determined as the second activation surface) to invert the activation surface. In other cases (NO in S44), the process proceeds to step S45 (determined as the first activation surface).

In step S46, the recording system CPU 124 provisionally determines the activation surface as the second activation surface.
In step S47, the recording CPU 124 determines whether or not the activation surface change flag input from the program activation control unit 140 is “1”. If the activation surface change flag is “1” (YES in S47), the process proceeds to step S45 (determined as the first activation surface) in order to reverse the activation surface. In other cases (NO in S47), the process proceeds to step S48 (determined as the second activation surface).

In step S45, the recording system CPU 124 determines the activation surface as the first activation surface.
On the other hand, in step S48, the recording system CPU 124 determines the activation surface as the second activation surface.

As described above, the activation plane is determined in the activation plane determination (step S13) in FIG. By determining the activation plane in this way, it is possible to change the activation planes of the recording system CPU 124 and the reproduction system CPU 133 by the activation plane change flag output from the program activation control unit 140.

As described above, the recording unit 120 of the monitoring recorder 110 according to the first embodiment is activated.

Next, the starting operation of the playback unit 130 of the monitoring recorder 110 according to Embodiment 1 will be described.
FIG. 9 is a flowchart showing the starting operation of the playback unit 130.
First, when the power is turned on, the reproduction system CPU 133 activates the process written in the reproduction system boot loader 131a stored in the reproduction system program storage unit 131 (S50).

The reproduction system CPU 133 initializes the H / W circuit such as the reproduction system work memory 132 by the reproduction system boot loader 131a (S51).

Next, the reproduction system CPU 133 waits for the completion of OS activation in the recording system CPU 124 (S52). When the reproduction system CPU 133 is notified of the OS activation completion in the recording system CPU 124 in step S14 of the flowchart relating to the activation of the recording system CPU 124 shown in FIG. 6, the process proceeds to the next step S53.

In step S53, the reproduction system CPU 133 receives the activation surface information output from the recording system CPU 124 via the signal line 180.

Next, the playback system CPU 133 selects one of the first playback system program area 131g and the second playback system program area 131h based on the activation surface information received in step S53, and within the selected program area. The stored OS is activated (S54).

Next, the reproduction system CPU 133 activates the AP stored in the program area selected in Step S53 (S55).

As described above, the playback unit 130 of the monitoring recorder 110 according to Embodiment 1 is activated.

FIG. 10 is a diagram showing the relationship between the flowchart showing the startup operation of the recording unit 120 shown in FIG. 6 and the flowchart showing the startup operation of the playback unit 130 shown in FIG.
When the power is turned on, the recording unit 120 and the playback unit 130 start operating simultaneously. In FIG. 9, this is shown at timing T0.

The recording system CPU 124 switches the port connected to the signal line 180 for transmitting the activation surface information to the output state as one of the processes in the H / W initialization in step S11, and outputs the initial value. The initial value is “0”, for example. In FIG. 9, this is shown at timing T1.

The recording system CPU 124 outputs the activation surface information indicating the activation surface determined in step S13 from the port connected to the signal line 180 that conveys the activation surface information in the activation surface information output in step S14. In FIG. 9, this is shown at timing T2. At this time, the reproduction system CPU 133 waits for the completion of the OS activation in the recording system CPU 124 while waiting for the completion of the activation of the recording system OS in step S52.

When the OS activation is completed in step S15, the recording CPU 124 notifies the reproduction CPU 133 of the OS activation completion in step S16. In FIG. 9, this is shown at timing T3.
The reproduction system CPU 133 receives the OS activation completion notification from the recording system CPU 124, ends the recording system OS activation completion waiting in step S52, and receives the activation surface information output by the recording system CPU 124 in step S53. In FIG. 9, this is shown at timing T4.

If the reproduction system CPU 133 receives the activation surface information in step S53 without waiting for the recording system OS activation completion in step S52, there is a possibility that the activation surface information cannot be received normally. This occurs when the start-up surface reception in step S53 of the reproduction system CPU 133 is executed at an earlier timing than the start-up surface information output in step S14 of the recording system CPU 124. At this time, the playback system CPU 133 may select and execute a program stored in the playback system program storage unit 131 with incorrect startup surface reception information, and the monitoring recorder 110 may not operate normally. On the other hand, by waiting for the activation of the recording system OS in step S52, the activation surface information can be normally transmitted from the recording system CPU 124 to the reproduction system CPU 133. For this reason, the reproduction system CPU 133 can select the program stored in the reproduction system program storage unit 131 and execute it according to the transmitted activation surface information, so that the monitoring recorder 110 can be activated normally.

In such an operation of transmitting the activation surface information, the recording CPU 124 needs to continuously output the activation surface information to the signal line 180 during the period from the timing T2 to the timing T4 in FIG. However, the recording system CPU 124 outputs the activation surface information in step S14, and then starts the OS in step S15. In the OS activation process, each port of the recording system CPU 124 is initialized. As a result, the port of the CPU 124 connected to the signal line 180 is also initialized, and it becomes impossible to continue outputting the startup surface information.

Therefore, the port that outputs the startup surface information of the recording system CPU 124 is set to an operation of holding the previous state at the time of initial setting at the startup of the OS. Then, after the reproduction system CPU 133 receives the activation surface information, that is, after timing T4 in FIG. 10, the port is set. When the OS activation (step S54) of the reproduction unit 130 is completed, the OS activation is completed from the reproduction system CPU 133 to the recording system CPU 124 by a signal line (not shown) that directly connects the recording system CPU 124 and the reproduction system CPU 133. By notifying, the recording system CPU 124 can recognize that the reproduction system CPU 133 has received the activation surface information.
As a result, the activation surface information can be normally transmitted from the recording system CPU 124 to the reproduction system CPU 133, and the reproduction system CPU 133 selects and executes the program stored in the reproduction system program storage unit 131 based on the transmitted activation surface information. Thus, the monitoring recorder 110 can be started normally. Accordingly, the port for outputting the activation surface information in the recording system CPU 124 can be used for another purpose after transmitting the activation surface information. When the recording system CPU 124 does not use the port for outputting the activation surface information after transmitting the activation surface information for another use, it is possible to omit the setting of the port after the activation surface information is transmitted. .

Next, a program update method for the monitoring recorder 110 according to the first embodiment will be described.
FIG. 11 is a flowchart showing the program update process of the monitoring recorder 110.

In the monitoring recorder 110, after the start of the application is completed in both the recording unit 120 and the playback unit 130, the recording system CPU 124 and the playback system CPU 133 can communicate at high speed via the signal line 181, and then the operator of the monitoring recorder 110 However, when a program update is instructed by a user I / F not shown in FIG. 1, the monitoring recorder 110 starts updating the program.

First, in step S60, the recording CPU 124 confirms whether the first management area 301 has been selected and activated. For example, the recording system CPU 124 stores the management area used for activation in the recording system work memory 122 or the like. If the first management area is selected and activated (YES in S60), the process proceeds to step S61. If the second management area is selected and activated (NO in S60), the process proceeds to step S62.

In step S61, the recording system CPU 124 rewrites the write completion flag 303b in the second management area 302 during the program update. For example, as shown in FIG. 4, the recording system CPU 124 rewrites the value to “0xffffffff”. Then, the process proceeds to step S63.
In step S62, the recording system CPU 124 rewrites the write completion flag 303a in the first management area 301 during the program update in the same manner as in step S61. Then, the process proceeds to step S63.

In step S63, the recording system CPU 124 obtains an activation surface that indicates which of the first program area and the second program area is used for activation, and whether or not the activation is performed on the first activation surface. Judging. For example, the recording system CPU 124 stores the activation surface or program area used for activation in the recording system work memory 122 or the like.
If activated on the first activation surface, that is, activated using the first program area (YES in S63), the process proceeds to step S64. If activated on the second activation surface, that is, activated using the second program area (NO in S63), the process proceeds to step S66.

In step S64, the recording system CPU 124 transmits the new playback system OS and the new playback system AP to the playback system CPU 133 by high-speed communication through the signal line 181. The reproduction system CPU 133 rewrites the second reproduction system OS 131d and the second reproduction system AP 131e in the second reproduction system program area 131h of the reproduction system program storage unit 131 by using the received new reproduction system OS and new reproduction system AP. . When the writing of the new program is completed, the reproducing system CPU 133 notifies the recording system CPU 124 of the completion of writing via the signal line 181.

In step S65, the recording system CPU 124 uses the new recording system OS and the new recording system AP to execute the second recording system OS 121d and the second recording system AP 121e in the second recording system program area 121h of the recording system program storage unit 121. Rewrite.

In step S66, the playback system CPU 133 rewrites the first playback system program area 131g of the playback system program storage unit 131 in the same manner as in step S64. When the writing of the new program is completed, the reproducing system CPU 133 notifies the recording system CPU 124 of the completion of writing via the signal line 181.

In step S67, the recording system CPU 124 rewrites the first recording system program area 121g of the recording system program storage unit 121 in the same manner as in step S65.

In step S68, the recording CPU 124 confirms whether the first management area 301 has been selected and activated. If the first management area is selected and activated (YES in S68), the process proceeds to step S69. If the second management area is selected and activated (NO in S68), the process proceeds to step S74.

In step S69, the recording CPU 124 rewrites the management area version number 304b of the second management area 302. The recording system CPU 124 reads, for example, the management area version number 304a of the first management area 301 used for activation, increments the read value by, for example, “1”, and then the management area version of the second management area 302 Write as number 304b.

In step S <b> 70, the recording system CPU 124 rewrites the activation surface designation value 305 b in the second management area 302. The recording system CPU 124 obtains a start surface indicating which one of the first program area and the second program area is used for starting, and then uses the value indicating the opposite start surface to determine the second management area. The activation surface designation value 305b 302 is rewritten. When the recording system CPU 124 is activated by the first activation surface, for example, “0x00000000” is written as a value indicating the second activation surface. When the recording system CPU 124 is activated by the second activation surface, for example, “0xffffffff” is written as a value indicating the first activation surface.
Here, after the recording system CPU 124 and the reproduction system CPU 133 complete the writing of the new program, the recording system CPU 124 rewrites the activation surface designation value 305b.

In step S71, the recording CPU 124 rewrites the OS version number 306b and the AP version number 307b in the second management area 302. Since these values are not used for selecting a program area at the time of activation, the recording CPU 124 may select a number that is convenient for OS and application management.

In step S72, the recording system CPU 124 rewrites the CRC value 308b of the second management area 302. The CRC value 308b is based on, for example, an area in which the write completion flag 303b, the management area version number 304b, the activation surface designation value 305b, the OS version number 306b, and the AP version number 307b in the second management area 302 are stored. Calculated.

In step S73, the recording system CPU 124 rewrites the write completion flag 303b in the second management area 302 to the completion of program update (not activated). For example, as shown in FIG. 4, the recording system CPU 124 rewrites the value to “0x80000000”.

In step S74, the recording CPU 124 rewrites the management area version number 304a of the first management area 301 in the same manner as in step S69.

In step S75, similarly to step S70, the recording CPU 124 rewrites the activation surface designation value 305a of the first management area 301.

In step S76, the recording system CPU 124 rewrites the OS version number 306a and the AP version number 307a of the first management area 301 in the same manner as in step S71.

In step S77, the recording CPU 124 rewrites the CRC value 308a of the first management area 301 in the same manner as in step S72.

In step S78, in the same manner as in step S73, the recording CPU 124 rewrites the write completion flag 303a in the first management area 301 to complete program update (not activated).

The program of the monitoring recorder 110 is updated by the procedure as described above. According to the procedure described above, both the recording system CPU 124 and the reproduction system CPU 133 can be updated with the versions matched.

Next, FIG. 12 is a schematic diagram showing the timing from before the update of the program of the monitoring recorder 110 to after the update.
The program update operation shown in the flowchart of FIG. 11 is performed in the period from timing Tb to timing Tc in FIG.

First, at the timing Ta in FIG. 12, the power of the monitoring recorder 110 is turned on, and the recording system CPU 124 and the reproduction system CPU 133 are activated. At this time, the recording CPU 124 executes processing according to the flowchart shown in FIG. Further, the reproduction system CPU 133 executes processing in accordance with the flowchart shown in FIG. Here, a case is shown in which the first activation surface is used for activation. Further, here, a case is shown in which the activation surface change flag output from the program activation control unit 140 is “0 (no activation surface change)”. At this time, the activation plane is determined as the first activation plane according to the flowchart shown in FIG. 8, and activation plane information indicating the first activation plane is output. Thereby, the recording system CPU 124 executes the first startup surface program, that is, the program stored in the first recording system program area 121g of FIG. Further, the reproduction system CPU 133 also executes the first startup surface program, that is, the program stored in the first reproduction system program area 131g of FIG.

When the program update is instructed at the timing Tb in FIG. 12, the recording system CPU 124, for example, updates new programs stored in the external storage device 170 (both for the recording system CPU 124 and the playback system CPU 133. Program).
The recording system CPU 124 writes a new program for the recording system CPU 124 in the second recording system program area 121h (second startup surface) in the recording system program storage unit 121 according to the procedure shown in the flowchart of FIG. That is, since it is activated by the first activation surface, the recording CPU 124 writes it on the second activation surface that is not currently used. Further, the recording system CPU 124 transmits a new program for the reproduction system CPU 133 to the reproduction system CPU 133 at high speed using the signal line 181.
As shown in the flowchart of FIG. 11, the reproduction system CPU 133 transmits a new program for the reproduction system CPU 133 transmitted from the recording system CPU 124 to the second reproduction system program area 131h (second program) in the reproduction system program storage unit 131. Write to the starting surface). That is, since it is activated by the first activation surface, the reproduction system CPU 133 writes it on the second activation surface that is not currently used.

When the writing of the new program is completed, the reproducing system CPU 133 notifies the recording system CPU 124 of the completion of writing via the signal line 181. When the recording system CPU 124 receives the writing completion notification from the reproduction system CPU 133 and completes the new program writing of the recording system CPU 124 itself, as shown in the flowchart of FIG. 11, the first management of the program management area 121f is performed. The area 301 or the second management area 302 is rewritten. In FIG. 12, this is indicated by timing Tc. FIG. 12 shows that the activation surface designation value used at the next activation is changed from the first activation surface to the second activation surface by the program update.

At timing Td in FIG. 12, the program update is completed and the power of the monitoring recorder 110 is turned off. After the program update is completed, the process of turning off the power of the monitoring recorder 110 and turning it on again may be automatically executed by the monitoring recorder 110 or manually by the user of the monitoring recorder.

At the timing Te in FIG. 12, the power of the monitoring recorder 110 is turned on again, and the recording system CPU 124 and the reproduction system CPU 133 are activated. At this time, the recording CPU 124 executes processing according to the flowchart shown in FIG. Further, the reproduction system CPU 133 executes processing in accordance with the flowchart shown in FIG.
The activation surface designation value read by the recording system CPU 124 is switched to the second activation surface by program update. Here, the activation surface change flag output from the program activation control unit 140 remains “0 (no activation surface change)”. For this reason, according to the flowchart shown in FIG. 8, the use of the second activation plane is determined, and activation plane information indicating the second activation plane is output. Thus, the recording system CPU 124 executes the second startup surface program, that is, the updated new program stored in the second recording system program area 121h of FIG. The reproduction system CPU 133 also executes the second startup surface program, that is, the updated new program stored in the second reproduction system program area 131h of FIG.

At timing Tf in FIG. 12, either or both of the recording system CPU 124 and the reproduction system CPU 133 do not start normally, and the program activation control unit 140 detects this, and changes the activation surface change flag from “0” to “1”. The recording system CPU 124 and the reproduction system CPU 133 are restarted. The program activation control unit 140 is connected to, for example, the recording system CPU 124 and the reproduction system CPU 133 through signal lines 182 and 183, and communicates with the CPUs 124 and 133 through these signal lines 182 and 183. It shall be determined whether or not it has started normally.

At timing Tf in FIG. 12, the recording system CPU 124 and the playback system CPU 133 are restarted. At this time, the recording CPU 124 executes processing according to the flowchart shown in FIG. In the reproduction system CPU 133, processing is executed according to the flowchart shown in FIG. The activation surface designation value read by the recording system CPU 124 is switched to the second activation surface by program update. In FIG. 12, the activation surface change flag output from the program activation control unit 140 is changed to “1”. For this reason, the activation surface to be used is determined as the first activation surface, and activation surface information indicating the first activation surface is output. Thereby, the recording system CPU 124 executes the first startup surface program, that is, the program stored in the first recording system program area 121g of FIG. Further, the reproduction system CPU 133 also executes the first startup surface program, that is, the program stored in the first reproduction system program area 131g of FIG.
When the recording system CPU 124 operates normally until the application is activated (step S17 in FIG. 6) and the reproduction system CPU 133 operates normally until the application is activated (step S55 in FIG. 9), The CPUs 124 and 133 notify the program activation control unit 140 of this fact. Thereby, the program activation control unit 140 returns the activation surface change flag from “1” to “0”.

Even if the monitoring recorder 110 does not start normally with the updated new program (stored in the second startup surface) by the operation at the timing Tf in FIG. 12, the program on the first startup surface with a track record of operation is used. It is possible to start normally. Then, after the normal activation, the program update is performed again on the second activation surface, whereby the program update can be completed.

According to the first embodiment described above, since each of the recording system CPU 124 and the playback system CPU 133 has a plurality of program areas, the program is not updated correctly when the program is updated, and the new program is damaged. Even in such a case, it is possible to select the program area in which the program before the update is stored, start the system, and further execute the program update process again.

Further, since the recording system CPU 124 and the playback system CPU 133 use the common startup surface information to select a program area in which the programs to be started by the respective CPUs are selected, the programs of the multiple CPUs can be checked without checking the program versions. The version can be a combination that can operate normally.

100 monitoring system, 110 monitoring recorder, 111 communication I / F unit, 112 output I / F unit, 113 connection I / F unit, 120 recording unit, 121 recording system program storage unit, 122 recording system work memory, 123 information storage unit , 124 recording system CPU, 130 playback unit, 131 playback system program storage unit, 132 playback system work memory, 133 playback system CPU, 140 program start control unit, 145 notification unit, 150 camera, 160 display device, 170 external storage device, 180, 181, 182, 183 signal lines.

Claims (12)

1. A first processor;
   A first storage area for storing a first program used to start the first processor, and a version different from that of the first program are used to start the first processor. A first storage unit having a second storage area for storing the second program,
   A second processor;
   A third storage area for storing a third program corresponding to the first program, used for starting the second processor, and used for starting the second processor; A second storage unit having a fourth storage area for storing a fourth program corresponding to the second program,
   The first processor is activated using the first program or the second program, and a storage area for a program required for activation is selected from the third storage area and the fourth storage area. Notifying the second processor of storage area information indicating;
   The monitoring recorder, wherein the second processor is activated by using a program stored in a storage area indicated in the storage area information notified from the first processor.
2. The first storage unit stores program management information including a storage area designating value indicating either the first storage area or the second storage area as an area for storing a program used for activation. Remember,
   The monitoring recorder according to claim 1, wherein the first processor is activated using a program stored in a storage area indicated by the storage area specification value.
3. When updating the program stored in the first storage unit and the second storage unit,
   The first processor updates a program stored in a storage area different from the storage area storing the program used for activation among the first program and the second program,
   The second processor updates a program stored in a storage area different from the storage area storing the program used for activation among the third program and the fourth program,
   The first processor has a storage area for storing a program on the side where the storage area designation value is updated after updating the program stored in the first storage section and the second storage section. The monitoring recorder according to claim 2, wherein the monitoring recorder is updated as shown.
4. A program activation control unit for controlling activation of the first processor and the second processor;
   The program activation control unit restarts the first processor and the second processor when an error occurs in activation of at least one of the first processor and the second processor. , Instructing the first processor to start using a program stored in a storage area different from the storage area indicated by the storage area specification value;
   The said 1st program is restarted using the program memorize | stored in the memory area different from the memory area shown by the said memory area designation | designated value. Surveillance recorder.
5. The storage area designation value is composed of binary data having a bit width of 2 or more, and according to the number of bits whose value is “1”, one of the first storage area and the second storage area One side is shown. The surveillance recorder according to any one of claims 2 to 4 characterized by things.
6. The program management information stored in the first storage unit includes first program management information and second program management information,
   Each of the first program management information and the second program management information includes the storage area designation value,
   When the first processor starts up, the first processor stores the first storage based on the storage area designation value included in either the first program management information or the second program management information. The monitoring recorder according to any one of claims 2 to 5, wherein an activation is determined using a program stored in an area or the second storage area.
7. The first program management information and the second program management information each include a version number indicating the version of each program management information,
   The first processor refers to the version number and determines the first storage area and the second storage area based on the storage area designation value included in the newer version of the program management information. The monitoring recorder according to claim 6, wherein it is determined which program is to be used to activate the program.
8. The first program management information and the second program management information each include a check value for detecting each error,
   The first processor performs an error check on the first program management information and the second program management information using the check value, and performs the first program management information and the second program management information. If an error is detected in any one of the programs, the program stored in either the first storage area or the second storage area based on the storage area designation value included in the other The monitoring recorder according to claim 6, wherein it is determined whether or not to start using the computer.
9. The first processor and the second processor are connected by a first signal line capable of transmitting only one bit of data at a time,
   The monitoring recorder according to any one of claims 1 to 8, wherein the first processor notifies the second processor of the storage area information via the first signal line. .
10. The first processor and the second processor are further connected by a second signal line capable of transmitting data at a higher speed than the first signal line,
    The monitoring recorder according to claim 9, wherein the first processor transmits a program used for updating to the second processor via the second signal line.
11. The said 2nd processor receives the said storage area information after the said 1st processor completes starting of the said 1st program or the said 2nd program, The one of Claim 1 to 10 characterized by these. The surveillance recorder according to one item.
12. The monitoring recorder according to claim 11, wherein the first processor continues to output the storage area information until the second processor receives the storage area information.

Images