JP2000066913A - Uninterrupted update system for program / data of any processor - Google Patents

Abstract

(57) [Summary] A program executed by an arbitrary central processing unit and data referred to by the program can be changed to a new one while the system is operating. SOLUTION: A central processing unit A1 notifies a data processing unit B4 of a transfer of a new program / new data, and switches the central processing unit B4 to a standby system. The central processing unit B4 serving as the standby system selectively receives the new program / new data from the central processing unit A1, and resumes operation with the new program 46 / new data 47. During this time, the central processing unit
B3 continues operation with the current system. Central processing unit B4
If the operation is successful, the central processing units B3 and B4 switch between the active system and the standby system, update the program data of the central processing unit B3, and return to the redundant configuration of synchronous operation. If the operation of the central processing unit B4 fails, the operation of the central processing unit B3 is continued with the old program and old data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication / information processing system having a plurality of central processing units each of which has a duplicated configuration.
The present invention relates to a program / data non-interrupt update system for an arbitrary processor which realizes replacement of a program and data of an arbitrary central processing unit with a new one while being operated.

[0002]

2. Description of the Related Art In a conventional communication / information processing system having a plurality of central processing units, when a processing program or data of an arbitrary central processing unit is replaced with a new one, the central processing unit to be replaced is replaced by a new central processing unit. Communication between processors was performed for the active system of the device, and changes were made to new programs and new data. Changing to a new program or new data starts the operation for the first time, so the old program and old data are transferred to the standby system (a standby system is a logical Is a state in which communication is not normally possible with other central processing units in its own isolated operation, which is temporarily disconnected), and in the event of a failure, this standby system is used as the active system. Switching to restore operation.

[0003] In addition, it is difficult to execute an operation using a new program and new data for a standby system of a central processing unit to be changed to a new program and new data.
Since the change target is the standby system, inter-processor communication with another central processing unit that is preparing the new program / new data cannot be established, and this method cannot be realized.

As described above, in a conventional communication / information processing multiprocessor system having a plurality of central processing units, updating of programs and data can be performed directly to a standby system of any central processing unit. If the replacement with the new program and new data fails, the operation of the central processing unit is temporarily stopped, and the spare system holding the old program file and old data file is switched to the active system. Therefore, it was necessary to restore operation.

Hereinafter, the prior art will be described with reference to FIGS. 3 and 4. FIG.

FIG. 3 is a view for explaining an example of the configuration of a conventional multiprocessor system and program data updating, and FIG. 4 is a flowchart for conventional program data updating.

A multiprocessor system often includes three or more central processing units. Here, of the plurality of central processing units, any two of the different central processing units will be described. Things.

In FIG. 3, reference numeral 91 (same for 92) denotes a central processing unit (hereinafter referred to as central processing unit A).
And 93 and 94 are central processing units A91
Represents a central processing unit (hereinafter, referred to as a central processing unit B) for replacing a program file and data with a new one. The two central processing units A and B are connected by an inter-processor connection bus 98.

The main storage units 95, 96, 9 of the central processing unit A91 and the central processing units B93, 94, respectively.
7 has software 910, 930, 94, respectively.
0 exists. Software 910, 930, 940
Is composed of a plurality of function programs, but here, only programs related to the related art described below are shown.

The software 910 has a new program / new data 913 for another central processing unit, that is, the central processing units B 93 and B 94, and has a program change control program 911 and a data change control / management program 9.
12, the central processing units B93, B94
This program controls updating of programs and data.

The flow of processing for updating data or a program and data of the central processing unit B will be described with reference to FIG.

While the central processing units B93 and B94 are both in the normal operation with the old program and old data as the active system (step S11), when the central processing unit A91 prepares for the new program and new data (step S12). ), One system of the central processing unit B (central processing unit B94) is changed to a standby system, the standby system of the central processing unit B94 is separated and operated independently, and only the other central processing unit B93 is set as the active system. It is determined that the vehicle is in operation (steps S13, S1
4).

Next, to the central processing unit B93 working system,
New data or a new program / new data is transferred from the central processing unit A91 working system (step S15). These are incorporated into the central processing unit B93 working system, and operation is started with new data or new program / new data (step S16). If the operation is successful, a copy of the new data or the new program / new data of the active system is delivered to the central processing unit B94 standby system (step S17), and the central processing unit B94 standby system is also incorporated into the active system. Then, the synchronous operation of the duplexer is started (step S18).

If the operation based on the new data or the new program / new data fails, the central processing unit B93
The operation of the active system is stopped, the operation using the old program and the old data held by the central processing unit B94 standby system is switched to the active system, and the recovery operation is started (step S1).
9), the new program and new data are reviewed (step S20).

As described above, in order to update the data or the program and the data of the central processing unit B, simply sending the necessary file does not switch to processing with a new program or new data. If such processing is forcibly executed, the central processing unit A
There is a problem that synchronous processing cannot be performed in communication between the processor and the central processing unit B, and there is a risk that the entire system will be adversely affected.

For this reason, first, the central processing unit B94 operating with the old program and old data is used as a standby system, and the operation of the central processing unit B94 standby system is temporarily disconnected.
The central processing unit B93 needs to receive the delivery of new data or a new program / new data from the central processing unit A91 in the active system. After that, restart with the new program and new data and incorporate it into the whole system. If the operation resumed with the received new program and new data fails, the operation of the central processing unit B93 is stopped, and the operation using the old program and old data held as the standby system is stopped. Switch to the active system and restore operation.

As described above, in the prior art, in order to update the data and program of an arbitrary central processing unit, the program in operation in the central processing unit must be once separated as a standby system operation and failed. In such a case, the operation must be temporarily stopped and the operation must be restarted with the old data and the old program in the standby system.

[0018]

As described above, in the prior art, in order to replace the operation program file and data of an arbitrary central processing unit with a new one, one system of the central processing unit is reserved. The system was disconnected and the new program file and data were received by the active system. If the operation with the new program file and data fails, the problem is that the new operating program must be temporarily stopped and switched back to the operation restoration by the old program.

Further, it is possible to replace a program file or the like with a spare system of the central processing unit and replace the program file or the like with the spare system.
Since the target is a standby system, inter-program communication from another central processing unit cannot operate correctly, and a problem occurs in an operation program when file transfer is forcibly attempted.

[0020]

The present invention has means as shown in FIG. 1 for solving the above-mentioned problems. FIG.
FIG. 3 is a diagram illustrating a configuration example of a multiprocessor system and program / data updating according to the present invention. Although the multiprocessor system may have three or more central processing units, any two of the plurality of central processing units will be described here.

In FIG. 1, reference numeral 1 denotes a central processing unit A, which is an active system. As the central processing unit A, there is also another working or standby central processing unit A2, but since this unit A2 has the same function as the unit A1, only the unit A1 will be described below. explain. The central processing unit B also has a duplex configuration of a working system (central processing unit B3) and a standby system (central processing unit B4), all of which are provided with a program change control program and data change control as necessary. -The function of the management program allows switching between the active system and the standby system. The central processing unit A and the central processing unit B are connected by an interprocessor connection bus 5.

Software 11, 31, and 41 exist on the main storage devices 10, 30, and 40 of the central processing units 1, 3, and 4, respectively. These softwares 11, 31, 41 are composed of a plurality of functional programs, but here, only the programs related to the present invention are shown.

The software 11 has a new program / new data 15 for the central processing units B3 and B4, which are other central processing units. It controls updating of programs and data used by the arithmetic processing units B3 and B4. The central processing unit B3
4, the program change control programs 32, 42 and the data change control / management program 33,
43.

The program change control program 12 and the data change control / management program 13 have a data selection transmission / reception unit 14. Program change control programs 32, 4
2 and the data change control / management programs 33 and 43 also have data selection transmission / reception units 34 and 44, respectively.

The data selection transmission / reception unit 14 is a processor for inter-processor data between the active system of its own central processing unit (central processing unit A1 active system) and the active system of another central processing unit (central processing unit B3 active system). The selective transfer / selection reception function and the current system of the central processing unit (central processing unit A
(1 active system) and a standby system of another central processing unit (other central processing unit B4 standby system), and has a function of transferring data between processors. It has a function that can be used by switching between the system and the standby system. The data selection transmission / reception units 34 and 44 are the central processing units B3 and
In step 4, the function of selective reception can be exercised.

Normally, the standby system of the central processing unit is a stand-alone operation of itself separated from the system so as not to adversely affect the system, and the inter-processor communication with other central processing units is performed. Is not possible, but only when updating to a new program / new data is realized by running a program process that activates the function of selectively receiving the new program / new data.

This procedure is as follows. First, it is assumed that both the central processing units B3 and B4 are operating normally as active systems.

The central processing unit A1 for selectively transmitting the new program / new data notifies the central processing unit B4 for receiving the transmission of the new program / new data before switching to the standby system. I do.

The central processing unit B 4 that has received the notification
Is switched to the standby system after running the program processing for activating the data selection transmission / reception unit 44. At this point, the standby system can selectively receive new programs and new data only when they are updated.

When the selection and reception of the new program / new data is completed in the central processing unit B4, the data selection transmission / reception unit 44 stops, and returns to the normal standby system (own operation of the system itself separated from the system).

When the programs and data of the central processing units B3 and B4 are changed to new ones by the above procedure, for example, the central processing unit B3 is operated only in one system (active system). And the other central processing unit B4 is used as a standby system, and the data selection transmission / reception units 14, 44
By replacing the standby central processing unit B4 with a new program / new data and returning to synchronous operation again, the operation of the central processing unit B is not stopped and adversely affects the operation of the entire system. No central processing unit B4, then central processing unit B3
Operating program and data can be sequentially updated to new ones without interruption.

In addition, when the operation of the new program / new data does not work properly, the central processing unit B3 continues to operate as the active system by the old program / old data, so it is necessary to temporarily stop the operation as in the prior art. It just needs to review the failed new file immediately.

As described above, the present invention has a dual configuration of the active system unit and the standby system unit of the central processing unit, and switches between the active system and the standby system to execute the file selection transmission / reception function between processors. As described above, even if the start of the operation with the new program and new data fails, the program file and data operating on any central processing unit can be updated while the system is operating. It is possible to replace it with something. In other words, there is an effect that the operation with the new program / new data can be tried without affecting the system that actually provides the service.

[0034]

FIG. 1 is a block diagram showing an embodiment of the present invention.
This will be described with reference to FIG. FIG. 1 shows that the new program / new data is selectively transferred to the standby system by another processor and between the active system and the standby system by inter-processor communication, and is selectively received. When the restart operation is completed normally in the standby system to which the new program / new data is updated, the standby system and the active system are switched, the new standby system is also updated to the new program / new data, and then the standby system is replaced. Incorporation into the working system will cause the operation of new programs and new data to be normal operation, which is redundant synchronous operation.

The processing until the program and data of the central processing unit B are updated to new ones without interruption will be described with reference to the processing flowchart of FIG.

To change the programs and data of the central processing units B3 and B4 to new ones during the normal operation of the central processing units B3 and B4 as the active system using the old program and old data (step S1). First, FIG.
In the central processing unit A1, a new program / new data 15 for another central processing unit (central processing units B3, 4) is prepared in the active system by the program change control program 12 and the data change control / management program 13 ( Step S2).

The transmission of the new program / new data is notified to the central processing unit B4 (step S3). Only one system of the central processing unit B, that is, the central processing unit B3 is in operation (active system), and the other central processing unit B4 activates the data selection transmission / reception unit 44 and then switches to the standby system. Change (step S4).

From the central processing unit A1 (both systems may be the active system or one system may be the active system), the data selection transmitting / receiving unit 14 selectively transfers the new program 46 and the new data 47 from the central processing unit A1. The central processing unit B4 standby system selectively receives this as the new program 46 / new data 47 and stops the data selection transmission / reception unit 44 (step S4).
5).

Next, the software 41 of the standby system of the central processing unit B4 is restarted (tested) with the new program and new data (step S6). When the restart operation is completed normally, the central processing unit B4 is switched to the working system and the central processing unit B3 is switched to the working system (step S7). At this point, the central processing unit B4 starts operating as an active system based on the new program 46 and the new data 47. Similarly, the old program 36 and old data 37 of the central processing unit B3 which has become the standby system are
By the transfer from the central processing unit B4 or the selective transfer from the central processing unit A1, it is replaced with a new program / new data 15 for another central processing unit, and thereafter, the standby system of the central processing unit B3 is changed to the active system again. (Step S8), the central processing units B3 and B4 are returned to the synchronous operation of the duplexer.

If the restart operation of the central processing unit B4 standby system fails due to the new program / new data, the new program 46 / new data 47 are reviewed (step S5).
9), the part causing the cause is corrected, and a new new program / new data is prepared again (step S2).

As is apparent from the above processing, even if the operation of the central processing unit B4 in the standby system with the new program / new data fails, it is not necessary to stop the active system of the central processing unit B3. This is the central processing unit B3
This is because the active system continuously provides the service by the operation using the old program 36 and the old data 37.
After confirming that the operation by the new program 46 and the new data 47 in the central processing unit B4 standby system is operating normally, this central processing unit B4 standby system is switched to the active system. is there.

Therefore, during the replacement with the new program / new data, even if the start of the operation with the new program 46 / new data 47 fails in the central processing unit B4 standby system, the central processing unit B3 active system Without stopping the operation, the new program and new data are reviewed, and the operation program and data of the central processing unit B can be finally updated to a new one without interruption.

In the above description of the embodiment, an example was described in which each of the central processing units A and B having a dual configuration can operate as a working system. However, the present invention can be similarly applied to a system in which the working / spare of both systems is exclusive such that the system is always a spare system.

[0044]

As described above, in the present invention, each central processing unit is duplicated, and is connected to the standby side of any central processing unit to be replaced with a new program and data. Each central processing unit of the communication and information processing system is in operation by realizing the selected data transmission / selection data reception of the inter-processor communication with the working side of another central processing unit that supplies the new program and data. As it is, there is an effect that replacement with a new program and data operating on an arbitrary central processing unit can be realized.

Since the operation with the new program and new data can be started by the separate central processing unit of the standby system, the operation with the new program and new data can be confirmed before starting the service with the new file. Operational services are uninterrupted and have the effect of increasing their reliability. Also,
Even if operation with the new program and new data fails,
The service in operation is not affected, and the active central processing unit is also uninterrupted, so that the occurrence of service abnormality can be detected in advance.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a configuration example of a multiprocessor system and program / data updating according to the present invention.

FIG. 2 is a processing flowchart for updating program data without interruption in the present invention.

FIG. 3 is a diagram illustrating a configuration example of a conventional multiprocessor system and program / data update.

FIG. 4 is a processing flowchart of a conventional program / data update.

[Explanation of symbols]

 1, 2 Central processing unit A 3, 4 Central processing unit B 5 Inter-processor connection bus 10, 30, 40 Main storage unit 11, 31, 41 Software 12, 32, 42 Program change control program 13, 33, 43 Data Change control / management program 14 Data selection transmission / reception unit 15 New programs / new data for other central processing units 36 Old program 37 Old data 46 New program 47 New data

Claims (1)

[Claims] 1. A communication / information processing system having a plurality of central processing units each having a duplex configuration,
When a processing program to be executed on each central processing unit and data referred to by the program are changed to a new program and data while the system is in operation, the active program of any central processing unit is changed. Means for freely switching between the active system and the standby system of another arbitrary central processing unit, a new program to be replaced, and the new program from the active system of any central processing unit having prepared new data. A means for selecting and transmitting new data, and a backup system for another arbitrary central processing unit to be updated to a new program / new data.
Means for selectively receiving the transmitted new program / new data only at the time of data update.