JP2000330779A - System and method for remotely updating firmware program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a download time, to improve reliability, to reduce memory capacity and to independently restore a system even though the start of the system fails. SOLUTION: This firmware program remote updating system for performing download from a base station to a remote device to update a firmware program is provided with a nonvolatile memory 31 which stores the firmware program of a new version by updating the old part of a stored firmware program of an old version to the new part of the firmware program of a new version and has a save area 31A for saving the old part of the firmware program of the old version and fault processing parts 33 and 33A which rewrite the new part of the firmware program of the new version of the old part of the firmware of the old version in the save area and for performing start with the firmware of the old version when the start of the firmware program of the new version stored in the nonvolatile memory fails.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for remotely updating a firmware program. In particular, the present invention relates to a firmware program remote update system and method capable of shortening download time, improving reliability associated with the download time, reducing memory capacity, and autonomously recovering even if download fails. .

[0002]

2. Description of the Related Art In a remote device connected to a base station via a wireless line, a change in a firmware program written in a ROM (Read Only Memory) of a non-volatile memory occurs due to addition of a program function or bug handling. There is. In such a case, in the conventional firmware program remote update system, a new version of the firmware program has been downloaded from the base station to the remote device via a wireless line. The new version of the firmware program is a volatile memory RAM (Random A
access memory).
Then it was written to ROM.

[0003]

However, the above-mentioned conventional firmware program remote updating system has a first problem that when a new version of the firmware program is large, it takes time to download the firmware program. Therefore, if there is a download while the remote device is online, operation control of the remote device is hindered. When the new version of the firmware program is large, there is a second problem that it is necessary to secure a RAM capacity equal to or greater than that of the firmware program when downloading the new version.

[0004] When writing from the RAM to the ROM without noticing the download failure when downloading the new version of the firmware program, the new version of the firmware program itself is broken. There is a third problem that startup cannot be performed by itself. Since the firmware program itself is broken, it is impossible to request the download of the firmware program again from the base station. Accordingly, the present invention has been made in view of the above-described problems, thereby shortening the download time, improving the reliability associated therewith, reducing the memory capacity, and being able to recover independently even if the startup due to the download failure fails. It is an object of the present invention to provide a firmware program remote update system and method.

[0005]

SUMMARY OF THE INVENTION In order to solve the above problems, the present invention is provided in a firmware program remote update system for updating a firmware program by downloading from a base station to a remote device. Update the old part of the old version firmware program to the new part of the downloaded new version firmware program to store the new version firmware program and save the old part of the old version firmware program. A non-volatile memory having an area, and, when the launch of the new version of the firmware program stored in the non-volatile memory fails, a new part of the new version of the firmware program is replaced with the old version of the firmware in the save area. Replace old version with old version Providing firmware program remote updating system characterized by comprising a fault recovery processing unit for causing the rise in air program.

By this means, only the new part of the new version of the firmware program is downloaded, so that the download time can be reduced. Therefore, reliability can be improved. Since the old part of the old version of the firmware program is used as a backup, even if the startup of the new version of the firmware program fails, it can be restored independently. Preferably, the evacuation area of the old firmware program is saved in the save area of the nonvolatile memory based on address information on the new part of the new firmware program transmitted from the base station. Will be By this means, the old part of the old version of the firmware program is specified by the address information.

[0007] Preferably, the base station requests information on the version number of the old version of the firmware program from the remote device, and transmits the address information to the remote device based on the request. By this means, it is possible to obtain information for specifying the new part of the new version of the firmware program and the old part of the old version of the firmware program. Preferably, the base station splits the new part of the new version of the firmware program and sends it to the remote device. By this means, when there is much data to be downloaded, it does not hinder online control.

Preferably, the old part of the old version of the firmware program is temporarily transferred to a volatile memory, and after the transfer, the old part is saved from the volatile memory to the save area of the nonvolatile memory. By this means, only the old part is saved, so that the volatile memory capacity can be reduced. Preferably, the new part of the new version of the firmware program is temporarily downloaded to a volatile memory, and the old part of the old version of the firmware program in the non-volatile memory is rewritten by the downloaded new part, thereby obtaining a new version. The firmware program is updated. By this means, only the new part is downloaded, so that the volatile memory capacity can be reduced.

Preferably, the old part of the old version firmware in the save area is temporarily transferred to a volatile memory, and the new part of the new version firmware program in the nonvolatile memory is transferred by the transferred old part. Is rewritten, and a process of returning to the old version of the firmware program is performed. By this means, since only the old part is transferred, the reduction of the volatile memory capacity can be realized. Preferably, temporary transfer to the volatile memory,
Alternatively, at the time of temporary downloading, interrupt prohibition is performed. By this means, it is possible to prevent malfunction due to other processing.

[0010] Preferably, a program change flag is set before the new part of the new version of the firmware program is downloaded, and the failure processing unit is configured to execute when the startup of the new version of the firmware program fails and When the program change flag is set, the new part of the new version of the firmware program is rewritten with the old part of the old version of the firmware. By this means, useless rewriting can be prevented when startup has failed except at the time of downloading.

Further, according to the present invention, in a firmware program remote updating method for updating a firmware program by downloading from a base station to a remote device, an old part of the stored old version of the firmware program is downloaded. Storing the new version of the firmware program in a non-volatile memory by updating the new version of the firmware program to a new portion, and saving the old portion of the old version of the firmware program to a save area of the non-volatile memory; When the launch of the new version of the firmware program stored in the non-volatile memory fails, the new version of the new version of the firmware program is replaced with the old version of the old version of the firmware in the save area, and the old version of the firmware is rewritten. Start with a wear program Providing firmware program remote update method characterized by comprising the step of causing the. By this means, as in the above-described invention, the download time can be reduced, the reliability associated with the download time can be improved, the memory capacity can be reduced, and even if startup fails, restoration can be performed independently.

[0012]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram illustrating a firmware program remote update system according to the present invention. As shown in the figure, a base station 1 and a remote device 3 are connected to a firmware program remote update system via a wireless line 2. The base station 1 includes a base station device 10, a maintenance center 11, and an external storage device 12. The base station device 10 performs remote control of the remote device 3, and the maintenance center 11 controls and monitors operation of the system.

The external storage device 12 is a medium for storing non-volatile data, and stores a new firmware program for updating. The maintenance center 11 is a base station device 1
0, the firmware program of the remote device 3 is instructed to be updated to a new version of the firmware program stored in the external storage device 12. Base station device 10
Is provided with a wireless control unit 110, and the wireless control unit 110 controls wireless communication as communication means with the remote device 3.
Further, the base station apparatus 10 is provided with a control unit 113. The control unit 113 controls the entire base station apparatus 10, and when receiving a firmware program update command from the maintenance center 11, the remote unit 3 Perform control.

The base station apparatus 10 has a nonvolatile memory ROM (Read Only Memory) 11.
1. Volatile RAM (Random Accesses)
s Memory) 112, the ROM 111 stores control programs for the wireless control unit 110 and the control unit 113, and the RAM 112 stores the wireless control unit 110 and the control unit 113.
Form a work area. Further, the control unit 113 is provided with an update unit 113A, and the update unit 113A instructs the remote device 3 to take a backup of the old part of the old version of the firmware program when updating the firmware program of the remote device 3. I do. The update unit 113A manages address information of the old firmware program.

Further, the control unit 113 includes the division instructing unit 11
3B, the division instructing unit 113B divides data to be transmitted when transmitting a new part of the new version of the firmware program stored in the external storage device 12 to the remote device 3. The divisional transmission is performed so as not to hinder online control of the remote apparatus 3 when transmitting. The remote device 3 is provided with a wireless control unit 30, and the wireless control unit 30 performs wireless control as communication control with the base station device 10. Further, the remote unit 3 is provided with a control unit 33, and the control unit 33 performs overall control of the remote unit 3 and control based on a command from the base station 1.

Further, the remote device 3 is provided with a non-volatile memory ROM 31.
A control program of the control unit 33 is stored, and a part of the control program is stored as a firmware program. This firmware program is changed due to addition of a program function, handling of a bug, and the like. The remote device 3 has a volatile R
An AM 32 is provided, and the RAM 32 forms a work area for the wireless control unit 30 and the control unit 33. Furthermore, RAM3
2, a change work area 32A is provided.
An area 2A does not affect the control of the own apparatus and is not affected by the control of the own apparatus. The old part of the old version of the firmware program specified by the base station 1 is temporarily transferred as a backup. As described above, since the old part of the old version firmware program is only temporarily transferred, the capacity of the change work area 32A does not increase even if the new version firmware program is large.

A save area 31A is provided in the ROM 31. The save area 31A is an area which does not affect the control of the apparatus itself and is not affected by the online control of the apparatus, and is transferred from the change work area 32A of the RAM 32. The old part of the old firmware program is stored for backup. The control unit 33 is provided with an update flag 33A. The update flag 33A is set when a new part in the new version of the firmware program is downloaded. Is performed. The setting of the flag is intended to prevent erroneous restoration due to a failure in startup other than during download.

Further, the control unit 33 includes a failure processing unit 33B.
When the failure processing unit 33B fails to start the updated firmware program in the ROM 31, the failure processing unit 33B does not normally download the firmware program to the RAM 32,
It is determined that transfer and writing to the ROM 31 have not been performed normally. Then, the failure processing unit 33B
The old part of the old version of the firmware program stored in the save area 31A of the
Transfer to A temporarily. Further, the failure processing unit 33B writes a firmware program whose writing to the ROM 31 has not been performed normally due to the old part of the old version of the firmware program temporarily transferred to the changed work area.

FIG. 2 is a view for explaining the save area 31A of the ROM 31. It is assumed that an old version of the firmware program (ABC) is stored in the ROM 31 at addresses x1 to x4 as shown in FIG. The save area 31A is provided in a range of addresses x5 to x6 different from the range in which the old version firmware program is stored. Assuming that the entire firmware program of the old version is ABC and the B portion in the range of addresses x2 to x3 is the old portion, as shown in FIG.
Is saved in the save area 31A. In other words, the difference between the new version and the old version of the firmware program is stored in the device as a backup.

When the new part B 'of the new version of the firmware program is downloaded, it is stored in the ROM 31 instead of the old part B, as shown in FIG. Since only the difference between the new version of the firmware program and the old version is stored, the memory capacity used is small and the storage time is short. If the startup of the new version of the firmware program fails, the new part B ′ of the new version of the firmware program is stored in the save area 31A as shown in FIG.
Is rewritten to the original part B stored in. For this reason, the old version of the firmware program is restored in the ROM 31, and the start of the old version of the firmware program can be resumed. Note that the new part B ′ and the old part B
The present invention is not limited to this, and there may be a plurality of new parts and old parts. Next, based on an instruction from the maintenance center 11, the base station 1 sends a command to the remote device 3 via the wireless line 2 as follows:
Send and receive.

FIG. 3 is a view for explaining an example of a transmission / reception procedure for performing a firmware update between the base station 1 and the remote device 3 in FIG. As shown in the figure, a data read request for confirming the firmware version is transmitted from the base station device 10 of the base station 1 to the remote device 3. The remote device 3 reads out the data of the firmware version number from the ROM 31. From the remote device 3 to the base station device 10
Next, data transmission of the version number of the old firmware program is performed.

In the base station apparatus 10, the version number (version confirmation) of the firmware program of the remote apparatus 3 is confirmed. The remote device 3 is transmitted from the base station device 10 to the remote device 3.
If the version number of the old version does not match the new version, the ROM
A request is made to temporarily transfer the old part of the old firmware program 31 to the RAM 32. Further, the address information of the old ROM 31 is transmitted to the remote device 3. As a result, it is possible to obtain information for specifying the new part of the new version of the firmware program and the old part of the old version of the firmware program. ROM in remote device 3
The old part (old Version data) of the old version 31 of the firmware program is temporarily transferred to the change work area 32A of the RAM 32.

The remote device 3 sends a response to the base station device 10 indicating that the transfer has been normally performed. In the base station device 10, the result from the remote device 3 is confirmed. The new part of the new version of the firmware program transferred from the base station device 10 to the remote
A download request is made to store the data in the OM 31. When the firmware program is large, only the part to be updated is downloaded instead of downloading the entire firmware program, so that the download time is shortened, the frequency of failure occurrence can be reduced, and the reliability is improved.

In the remote device 3, the downloaded RA
The old part of the old version of the firmware program is stored from the change work area 32A of the M32 to the save area 31A of the ROM 31. The remote device 3 sends a response to the base station device 10 indicating that the storage has been normally performed. Base station device 1
At 0, the result from the remote device 3 is confirmed. The new part of the new version of the firmware program is downloaded from the base station apparatus 10 to the remote apparatus 3 to the RAM 32. The division instructing unit 113B of the control unit 113 repeatedly executes the divisional data of the new part in the new version of the firmware program until the download is completed, while confirming the normal response.

At the same time, the remote device 3
Next, a request is made to store the new part of the new version of the firmware program transferred to the RAM 32 in the ROM 31. In the remote device 3, a new part of the new version firmware program temporarily transferred from the base station device 10 to the change work area 32 A of the RAM 32 is stored in the old version firmware program stored in the ROM 31. The remote device 3 sends a response to the base station device 10 indicating that the storage has been normally performed.

In the base station device 10, the result from the remote device 3 is confirmed. From the base station device 10 to the remote device 3,
A request to start up the ROM 31 is made. R in remote unit 3
The new firmware program stored in the OM 31 is started. In the case where the remote device 3 fails to start (NG), the old part of the old firmware program stored in the save area 31A of the ROM 31 is transferred to the change work area of the RAM 32. The old part of the old firmware program transferred to the change work area 32A is RO
The new version of the firmware program that failed to start M31 is written and stored, and the ROM 31 returns to the state before the update.

In the remote device 3, the old firmware program in the ROM 31 before the update is started. The remote device 3 notifies the base station device 10 of the old version (old Version). In the base station device 10, the result from the remote device 3 is confirmed. 4 to 6 are flowcharts illustrating a series of operation examples of the control unit 33 in FIG. In this figure; in step S1, the control unit 33 performs an initial setting process.

In step S2, the remote device 3 notifies the base station device 10 of the start of the operation of the firmware program and the operation version number. Upon receiving this notification, various requests are made from the base station device 10. Step S3
In, the control unit 33 performs an event analysis on the request from the base station device 10. In step S4, the control unit 33 determines whether there is a version number read request by the above event analysis.

In step S5, if there is the above request, the control unit 33 performs a process of reading the version number from the ROM 31. In step S6, the control unit 33 executes step S6.
The data read in step 5 is stored in step S8 or step S9.
Is transferred to the RAM 32 which responds. In step S7, the control unit 33 checks data on whether the control has been completed normally.

In steps S8 and S9, the control unit 33
Causes the base station apparatus 10 to transmit a response with a normal result or a response with an inappropriate (NG) result. Step S after sending
Return to 3. In step S10, if the request processing in step S4 has been completed, the control unit 33 determines whether there is a request to store old version backup data.

In step S11, if there is the above request, the control unit 33 receives the range of the ROM 31 to be changed and the address information indicating the range to be changed,
Disable interrupts. The purpose of disabling the interrupt is to prevent a malfunction due to other processing during the following transfer processing. In step S12, the control unit 33 stores the old part of the ROM 31 in the RA based on the received address information.
M32 is transferred to the change work area 32A. Step S1
In 3, the control unit 33 stores the old part transferred to the change work area 32A in the save area 31A and saves it.
Thereafter, the process proceeds to step S7.

In step S14, the control unit 33 permits interruption. In step S15, the control unit 3
3 is R if the request processing in step S10 has been completed.
It is determined whether there is a request to download a new version of the firmware program to the AM32. In step S16, if there is the above request, the data format of the download request from the base station 10 is checked. If the data format is not correct, go to step S9.

In step S17, if the download has been completed normally, the control unit 33 prohibits interruption. The purpose of disabling the interrupt is to prevent a malfunction due to other processing during the following transfer processing. In step S18, the control unit 33 transfers the new part of the new version of the firmware program to the change work area 32A.
In step S19, the control unit 33 permits interruption. In step S20, the control unit 33 checks the write data, and proceeds to step S7.

In step S21, the control unit 33
If the request processing in step S15 has been completed, the ROM 3
It is determined whether or not there is a storage request for No. 1. Step S22
In this case, if there is the above request, the update flag 33A of the control unit 33 sets a program change flag. In step S23, the control unit 33 disables the interrupt.
The purpose of disabling the interrupt is to prevent a malfunction due to other processing during the following transfer processing. In step S24, the control unit 33 sends the ROM 3
1 is transferred to the changed part of the new version firmware program and rewritten.

In step S25, the control unit 33 permits interruption. Thereafter, the process proceeds to step S20. In step S26, the control unit 33 executes step S21.
Is completed, it is determined whether there is a start-up request from the base station apparatus 10. In response to a start-up request, start up with a new version of the firmware program. If there is no start-up request, the process returns to step S3 and waits for a start-up request.

In step S27, the failure processing unit 33B of the control unit 33 monitors whether the start-up has failed. In step S28, if the startup has failed, the control unit 33 determines whether the program change flag has been set. If the program change flag has not been set, the control unit 33 returns to step S3 and returns to step S3.
22 is performed. If the flag has been set in step S29, the control unit 33 disables the interrupt. The purpose of disabling the interrupt is to prevent a malfunction due to other processing during the following transfer processing.

At step S30, the control unit 33 sets R
The old part of the old firmware program is transferred from the save area 31A of the OM 31 to the change work area 32A of the RAM 32. In step S31, the change section of the old firmware program is transferred from the change work area 32A of the RAM 32 to the change section of the new firmware program in the ROM 31 and rewritten. In this way, the restoration is performed to the old version of the firmware program. For this reason, restoration can be performed without the intervention of the base station 1, which is a higher-level device. In step S32, the control unit 33 permits interruption. Thereafter, the process proceeds to step S20.

In step S33, step S26
If the startup is successful, the failure processing unit 33 of the control unit 33
B resets the program update flag and ends the process.

[0039]

As described above, according to the present invention,
When changing the firmware program of a remote device that is running online, back up the changes in the old firmware program and download the changes in the firmware program to reduce the download time of the firmware program. And reliability is improved accordingly.

Further, even if the firmware program becomes large, the capacity of the volatile memory to be used can be reduced, and the cost can be reduced. In addition, even if the firmware program is not updated properly due to data download, firmware program data writing error, etc. Since the difference is used as a backup, it is possible to restore the old version of the firmware program in a short time without going through a host device.

[Brief description of the drawings]

FIG. 1 is a schematic block diagram illustrating a firmware program remote update system according to the present invention.

FIG. 2 is a diagram illustrating a save area 31A of a ROM 31.

FIG. 3 is a diagram illustrating an example of a transmission / reception procedure for performing a firmware update between the base station 1 and the remote device 3 in FIG.

FIG. 4 is a flowchart illustrating a series of operation examples of a control unit 33 in FIG. 1;

FIG. 5 is a flowchart illustrating a series of operation examples of a control unit 33 in FIG. 1;

FIG. 6 is a flowchart illustrating a series of operation examples of a control unit 33 in FIG. 1;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Base station 2 ... Wireless line 3 ... Remote device 10 ... Base station device 11 ... Maintenance center 12 ... External storage device 30 ... Wireless control unit 31 ... ROM 31A ... Evacuation area 32 ... RAM 32A ... Change work area 33 ... Control unit 33A Update flag 33B Failure processing unit 110 Wireless control unit 111 ROM 112 RAM 113 Control unit 113A Update unit 113B Division instruction unit

Claims (10)

[Claims] 1. A firmware program remote updating system for updating a firmware program by downloading from a base station to a remote device, wherein a stored old version of the firmware program is replaced with a downloaded new version of the firmware. A non-volatile memory storing a new version of the firmware program by updating to a new part of the firmware program, and having a save area for saving the old part of the old version of the firmware program; and When the launch of the new version of the firmware program fails, the new portion of the new version of the firmware program is replaced with the old portion of the old version of the firmware in the save area, and the launch of the old version of the firmware program is performed. Failure handling for Firmware program remote updating system characterized in that it comprises and. 2. An evacuation area of the old version of the firmware program is stored in the save area of the nonvolatile memory based on address information on the new part of the new version of the firmware program transmitted from the base station. 2. The firmware program remote update system according to claim 1, wherein: 3. The method according to claim 1, wherein the base station requests the remote device for information on the version number of the old firmware program, and transmits the address information to the remote device based on the request. Item 3. A firmware program remote update system according to Item 2. 4. The firmware program remote updating system according to claim 1, wherein the base station divides the new part of the new version of the firmware program and transmits the new part to the remote device. 5. An old part of the old version of the firmware program is temporarily transferred to a volatile memory, and after the transfer, the old part is saved from the volatile memory to the save area of the nonvolatile memory. Claim 1
The remote update system of the firmware program according to 1. 6. The new part of the new version of the firmware program is temporarily downloaded to a volatile memory, and the old part of the old version of the firmware program in the non-volatile memory is rewritten by the downloaded new part. The firmware program remote update system according to claim 1, wherein the firmware program is updated to a new version. 7. The old part of the old version firmware in the save area is temporarily transferred to a volatile memory,
2. The process according to claim 1, wherein the new part of the new version of the firmware program in the nonvolatile memory is rewritten by the transferred old part, and a process of returning to the old version of the firmware program is performed. Firmware program remote update system. 8. The firmware program according to claim 5, wherein interrupts are disabled during temporary transfer to the volatile memory or temporary download. Remote update system. 9. A program change flag is set before the new part of the new version of the firmware program is downloaded, and the failure processing unit is configured to execute the program when the startup of the new version of the firmware program fails and 2. The firmware program remote updating system according to claim 1, wherein when the change flag is set, the new part of the new version of the firmware program is rewritten with the old part of the old version of the firmware. 10. A firmware program remote updating method for updating a firmware program by downloading from a base station to a remote device, wherein the stored old version of the firmware program is replaced with the downloaded new version of the firmware. Storing a new version of the firmware program in a non-volatile memory by updating to a new part of the firmware program, and saving the old part of the old version of the firmware program to a save area of the non-volatile memory; When the launch of the new version of the firmware program stored in the firmware fails, the new portion of the new version of the firmware program is replaced with the old portion of the old version of the firmware in the save area, and the old version of the firmware program is started. Work to raise Firmware program remote update method characterized by comprising and.