JP2002169700A - Update memory of stored-program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To write update program at any position of a stored-program. SOLUTION: In a loading control apparatus 100 at a client side having a CPU and a main memory, a stored-program memory 104, which stores a system program 10 to operate a control device, a boot loader program 11 to load the system program 10 into the main memory when booting the control apparatus 100 and an update program 12 to update the stored-program, is equipped, and an arrangement information analyzing means 14 is provided in the update program 12, then, a partial program necessary to be updated is provided with adding arrangement information so as to write the partial program at arrangement information addresses in the memory 104 based on the arrangement information written in the provided partial program.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a flash memory, which is a read-only memory capable of electrically erasing and rewriting contents, and a system program having a network communication interface and stored in the flash memory. The present invention relates to a program update method for updating a system program, a data file, and the like in a flash memory via a network communication with an external host in an embedded control device that performs a steady operation after being developed on a main memory.

[0002]

2. Description of the Related Art In a built-in control device, it is common to store a system program in a ROM (Read Only Memory), develop the program from a ROM on a main memory, and start the system. On the other hand, in recent years, flash memories that can electrically erase and rewrite contents have been installed,
Many use this as a storage medium for system programs. When a flash memory is used, the contents can be rewritten using software only by the control device itself, so that the stored system program can be updated flexibly and easily. The conventional embedded controller stores the system program and the flash memory rewrite program in the flash memory, and the flash memory rewrite program expanded on the main memory receives a new program input from the external storage device or the program creation device. Some systems update the system program in the flash memory. For example, JP-A-9-69
The microcomputer built-in control device disclosed in Japanese Patent No. 043 corresponds to this.

Next, the operation will be described. FIG. 10 shows the microcomputer built-in control device as a conventional example. According to the drawing, for example, a signal of an instruction to update the system program (P1) in the program storage means (2C) is sent from the input device (4) or the third input / output unit (8) constituting the control device (C). When input, the copy program (P21) stored in the program storage means (2C) is activated first, and the rewrite program (P2) also stored in the program storage means (2C).
A) is copied to the rewriting program area (PA) in the data storage means (3C). Then, the control operation means (1) shifts the execution of the program to the top of the rewrite program area (PA) and starts the rewrite program (P2A). The rewriting program (P2A) is stored in the program storage means (2
After erasing the contents of C), a new system program input from the external storage device (MA) via the second input / output unit (7) or a program creation device (3) via the third input / output unit (8) While the new system program input from the PS is accumulated in the data storage means (3C), the new system program is written in the area storing the system program (P1) in the program storage means (2C).

As described above, the program storage means (2
C) a rewriting program (P2A) for updating the system program (P1) in the data storage means (3C)
In order to update the system program (P1) after copying it in the
It is not necessary to secure an area for storing the rewrite program (P2A) in C), and the area in the program storage means (2C) can be used freely.

[0005]

The conventional microcomputer built-in control device is configured as described above.
When updating the system program (P1), the contents of the program storage means (2C) are erased by the rewriting program (P2A) copied in the data storage means (3C). Therefore, the program storage means (2C)
The contents of the rewriting program (P2A) and the copying program (P21) stored in the memory are not guaranteed, and there is a problem that the update processing of the system program (P1) may not be performed. Data storage means (3C)
The rewrite program (P2A) copied in the system program (P1) in the program storage means (2C)
Is written to the fixed area storing. Accordingly, the rewriting program (P2A) and the copying program (P2A) arranged in another area in the program storage means (2C).
1) There is also a problem that programs and data at fixed addresses such as data files cannot be individually updated. Thus, the program storage means (2C)
However, there is a problem that the software stored in an arbitrary arrangement area cannot be flexibly updated and the security of the program update is low.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and a program for adding arrangement address information to a new program file to be transferred to an embedded control device and rewriting a program storage area stores the information. Interpretation and writing into an arbitrary arrangement area are performed, and furthermore, a table is collated or a program save area is provided to improve the flexibility of the program update process and, if necessary, the security.

[0007]

A built-in program update memory according to the present invention is a program built-in control device having a CPU and a main memory, which stores a system program for operating the control device and a system program when the control device starts up. It has a built-in program memory that contains a boot loader program to be loaded into the program and an update program that updates the built-in program.Also, the update program is provided with a location information analysis means, and location information is added to partial programs that need to be updated. Then, based on the arrangement information described in the supplied partial program, writing is performed at the arrangement information address in the built-in program memory.

Further, the control device is provided with an arrangement information table for storing the arrangement information of the partial programs, and the arrangement information described in the provided partial program and the arrangement information of the corresponding partial program in the arrangement information table are provided. After that, writing was performed.

Further, the control device is provided with a program save area, and writes the relevant partial program into the program save area before updating the partial program. When there is a request to return to the partial program before update, the program save area is provided. Was written back to the address before the update.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 FIG. 1 is a block diagram showing an apparatus configuration according to the first embodiment, in which a program can be updated to an arbitrary position (address). In the figure, 100 is a program embedding control device, 101 is a CPU, 102 is a main memory, 103 is a network interface for communicating with the outside, 104 is a flash memory, 105 is a system bus, 106 is a DIP switch, 10 is an embedded A system program 11 for performing essential processing as the control device (100); 11 a boot loader program which is started first when the power of the embedded control device (100) is turned on or restarted; 12
Is an update program for updating an arbitrary program file or data file stored in the flash memory (104), 13 is a network reception processing unit,
Reference numeral 14 denotes an arrangement information analysis unit, and reference numeral 15 denotes a flash memory writing unit. 200 is a LAN (Local Area N)
network, 300, etc.
Is a PC (Personal Co.) that can communicate with the embedded controller (100) via the communication network (200).
mputer), 301 is an HD
D (Hard Disk Drive) or the like, a program storage device, and 302 is a system program (1
New system program when 0) is targeted for update, 3
Reference numeral 03 denotes a client program for transmitting the update target program to the embedded control device (100).
04 is an arrangement information adding unit for the new system program (302), and 305 is a network transmission processing unit. The communication network (200) and the network interface (103) are not limited to the LAN, but may be, for example, RS232C or USB (Uni).
(versal Serial Bus).

Next, the operation will be described. First, the operator operates the DIP switch (10) of the embedded controller (100).
6) is switched to a program update mode for performing a program update process on the flash memory (104). Next, when the operator turns on the power of the embedded control device (100) or presses the reset button, the boot loader program (11) stored in the flash memory (104) starts. After performing the H / W initialization process, the boot loader program (11) refers to the setting state of the DIP switch (106),
Update program (12) if in program update mode
In the normal mode, the system program (10) is downloaded to a predetermined address on the main memory (102), and the control is shifted to the start address of the program. Now that the program update mode is set, the update program (12) is started.

FIG. 2 is a flowchart of the update program (12). The process on the update program (12) side in the system program update process will be described with reference to the drawings. First, the update program (12) sets its own network address for the network interface (103) in step S1, and then executes step S1.
In step 2, the network reception processing unit (13) waits for a connection request from the client program (303). In step S3, when a connection request from the client program (303) arrives and a connection is established, the system enters a file reception waiting state for the new system program (302).
In step S4, a file reception process is performed, and the reception data is temporarily stored in a reception buffer on the main memory (102).
As will be described later when the processing on the client program (303) side is described, the file of the new system program (302) to be received is a file in which arrangement information is added to the program body, such as a file in the Motorola S format. Is assumed. Next, step S5
Then, the received data is analyzed by the arrangement information analysis unit (14), and the information of the arrangement destination address and the size is extracted from the head part. In step S6, the flash memory writing unit (1
The contents of the target area on the flash memory (104) are temporarily erased based on the information on the placement destination address and the size extracted in 5).

The subsequent portion of the received data is subjected to a received data analysis process in step S5. If the received data file is in the Motorola S format, the original C
The data is converted into a PU-specific binary format, and is once stored in a conversion buffer on the main memory (102). afterwards,
In step S7, the flash memory writing unit (15) writes data from the conversion buffer to the flash memory (104) based on the current location address information. Since the file size of the new system program (302) to be received is generally undefined, the size of the reception buffer does not secure an area that can accommodate the entire reception file. When the writing process is completed in step S7, step S7 is performed again.
Returning to the file receiving process of 4a, the process is repeated until the end of the file is reached. Finally, when the end of the file is reached, the connection is disconnected in step S8, and the process is terminated.

FIG. 3 shows a client program (30).
It is a flowchart figure of 3). The process on the client program (303) side in the system program update process will be described with reference to the drawings. Sending host (300)
Is assumed to be a PC or the like as a cross development environment, and it is assumed that the initialization of the network interface and the setting of the own network address have been completed. The client program (303) is application software that runs on the sending host (300). First, in the client program (303), step S100
Specifies the file name of the new system program (302), which is the program to be updated in the flash memory (104), and then specifies the start address and area size of its location and the network address of the embedded control device (100). specify. The file of the new system program (302) to be transmitted is assumed to be a file in which arrangement information is added to the program body, such as a file in the Motorola S format. In step S101, the arrangement information adding unit (304) adds the start address of the designated arrangement destination and the area size information to the head of the file of the new system program (302). When the transmission data file is in the Motorola S format, the entire binary file unique to the CPU is converted into the same format. In step S102, the network transmission processing unit (305) updates the update program (12).
Issues a connection connection request when the device is in a connection waiting state. When the connection with the update program (12) is established in step S103, the file transmission processing of the new system program (302) to which the arrangement information is added is started. Finally, when the file transmission processing is completed in step S104, the connection is disconnected and the processing ends.

As described above, the client program (303) adds the arrangement information to the file of the new system program (302) to be transferred to the embedded controller (100), and the update program (12) adds the arrangement information to the file. Because it is interpreted and written into the specified location area in the flash memory (104), it is necessary to update not only the system program (10) at a fixed address but also a program or data file at an arbitrary address. Can be. In addition, the transmission host (3) is connected via the network interface (103) of the embedded control device (100).
00) and the file of the program to be updated is transmitted and received, so that remote control can be performed even when the embedded control device (100) and the transmission host (300) are located at a distance.

Embodiment 2 In the first embodiment,
When designating the arrangement information on the client program (303) side, the operator needs the current flash memory (10
4) It is required that the entire arrangement information is grasped. Next, the flash memory (104) has a new table for holding the program arrangement information, and in response to an inquiry from the client program (303). An embodiment in the case where the contents of the arrangement information table can be obtained based on the information will be described. FIG. 4 is a block diagram showing a configuration inside a flash memory (104b) according to the second embodiment. In the figure, reference numeral 16 denotes an arrangement information table holding all the program arrangement information in the flash memory (104), and reference numeral 17 denotes an arrangement information table management unit in an update program (12) for accessing the arrangement information table (16). .

FIG. 5 is a diagram showing a configuration of the arrangement information table (16). In the figure, reference numeral 30 denotes the start address of the program to be arranged in the arrangement information table (16), 31 is the size of the reserved area, 32 is the file name of the program, 33 is the version number, 34 is the update date, Reference numeral 35 denotes an arrangement information table entry composed of these six sets. The arrangement information table (16) is composed of a plurality of arrangement information table entries (35). The area of the arrangement information table (16) itself is also registered in the arrangement information table entry (35) in advance to prohibit overwriting. FIG. 6 is a block diagram showing a configuration of the client program (303b) according to the second embodiment. In the figure, reference numeral 306 denotes an arrangement information table acquisition unit which receives and displays the contents of the arrangement information table (16).

FIG. 7 is a flowchart of the update program (12) according to the second embodiment. Next, the operation will be described with reference to FIG. First, as in the initial operation in the first embodiment, it is assumed that the program is set to the program update mode and the update program (12) is started. First, the update processing of the system program will be described. First, the update program (12) sets its own network address for the network interface (103) in step S1, and then in step S2 the client program (30) in the network reception processing unit (13).
Wait for a connection request from 3). In step S3, when a connection request from the client program (303) arrives and a connection is established, in step S9, the contents of the arrangement information table (16) are read by the arrangement information table management unit (17) and transmitted to the client program (303). I do.

On the side of the client program (303), the contents of the arrangement information table (16) received by the arrangement information table acquisition section (306) are shaped and displayed to the operator. After confirming the display contents, the operator specifies the program to be updated, adds the arrangement information, and transmits the file of the program to be updated. On the update program (12b) side, step S4
Performs file reception processing, and stores received data in the main memory (1).
02) and temporarily stores the data in the upper receiving buffer, and in step S5, analyzes the received data in the arrangement information analysis unit (14), and extracts the information of the arrangement destination address and the size from the head part. Next, in step S10, the arrangement information management unit (17)
, The extracted placement information, the head address (30) and the size (31) in the placement information table (16)
Inquire. If the arrangement position is illegal so as to overwrite another program area, in step S11, the client program (303) is notified of the irregularity of the arrangement information. At this time, the data reception of the subsequent update file is stopped, the connection is immediately disconnected in step S8, and the process ends. If the arrangement information is normal, step S
After erasing the contents of the flash memory (104) in 6, a series of reception processing is continued. Finally, when the end of the file is reached, the connection is disconnected in step S8,
After the arrangement information table entry (35) in the arrangement information table (16) is updated in step S12, the process ends.

As described above, the flash memory (10
4) Since the arrangement information table (16) is provided on the upper side and a list of the arrangement information is provided to the client program (303) side, the correct arrangement information is designated and the new system program (302) and others are designated. Can be transmitted. Further, the head address (30) and the size (31) are stored in the arrangement information table (16).
In addition to the information, the file name (32) and version number (3
3) Since the update date (34) information is held, it is possible to accurately manage the software installed for each installed embedded control device (100). Further, even when incorrect arrangement information is specified by mistake, the update program (12) detects an irregularity of the arrangement information by referring to the arrangement information table (16), and issues an irregularity notification without overwriting. Since it is performed, the program update process can be performed safely.

Embodiment 3 In Embodiment 2 described above, the arrangement information table (16) is managed to prevent overwriting when incorrect arrangement information is specified. In the present embodiment, however, in the flash memory (104), A case will be described in which a program save area for holding a system program (10) before a new update is provided so that it is possible to return to the previous system program (10). FIG.
Is the flash memory (104) in the third embodiment.
It is a block diagram which shows the structure in c). In the figure, 1
8 is a program save area for holding the system program (10) before updating, and 19 is a program save area (1
8) A program save area valid flag indicating whether the old system program is held, and 20 is a program save area operation unit in the update program (12) for accessing the program save area (18).

FIG. 9 is a flowchart of the update program (12) according to the third embodiment. Next, the operation will be described. First, as in the initial operation in the first embodiment, it is assumed that the program is set to the program update mode and the update program (12) is started. First, the saving process and the returning process of the system program will be described. First, the update program (12c) sets its own network address for the network interface (103) in step S1, and then, in step S2, the client program (30) in the network receiving unit (13).
Wait for a connection request from 3). When the connection request from the client program arrives in step S3 and the connection is established, it is checked in step S13 whether the old system program return request has been received. When the return request is received, the program save area operation flag is checked in the program save area operation unit in step S14. If the program save area valid flag (19) is not set, the connection is immediately disconnected in step S8, and the process ends. If the program save area valid flag (19) is not set, the old system program is restored in step S15. Thereafter, the connection is disconnected in step S8, and the process ends. On the other hand, if the old system program return request has not been received in step S13, the current system program (10) is saved in the program save area operation unit in step S16. Thereafter, the system program is updated in the same manner as described in the first embodiment.

As described above, the flash memory (10
4) Since a program save area (18) is provided on the upper side to retain the old system program (10), the new system program (302) is started by executing the program update processing, but the software failure is detected. For example, when there is a request to return to the original system program for some reason, the old system program (10) can be restored quickly and easily without receiving the old system program again.

[0024]

As described above, according to the present invention, arrangement information is provided in a program to be updated, and arrangement information analyzing means is provided, so that a partial program can be written at an arbitrary position in a built-in program, and This has the effect of increasing flexibility.

Further, since the arrangement information table or the program save area is provided, the built-in program can be updated safely.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a control device including a built-in program update memory according to Embodiment 1 of the present invention.

FIG. 2 is an operation flowchart of an update program according to the first embodiment.

FIG. 3 is an operation flowchart of a client program according to the first embodiment.

FIG. 4 is a diagram showing a configuration of a built-in program update memory according to a second embodiment of the present invention.

FIG. 5 is a diagram showing an example of an information arrangement table according to the second embodiment.

FIG. 6 is a diagram showing a configuration of a client program according to the second embodiment.

FIG. 7 is an operation flowchart of an update program according to the second embodiment.

FIG. 8 is a diagram showing a configuration of a built-in program update memory according to a third embodiment of the present invention.

FIG. 9 is an operation flowchart of an update program according to the third embodiment.

FIG. 10 is a configuration diagram of a conventional control device with a built-in program.

[Explanation of symbols]

Reference Signs List 10 system program, 11 boot loader program, 12 update program, 13 network reception processing unit, 14 arrangement information analysis unit, 15 flash memory writing unit, 16 arrangement information table, 17 arrangement information table management unit, 18 program save area, 19
Program save area valid flag, 20 program save area operation unit, 101 CPU, 102 main memory, 10
3 network interface, 104, 104b,
104c flash memory, 105 bus, 106
DIP switch, 200 communication network, 300 transmission host, 301 program storage device, 302 new system program, 303, 303b client program, 304 arrangement information addition section, 305 network transmission processing section, 306 arrangement information table acquisition section.

Claims (3)

[Claims] 1. A control device with a built-in program having a CPU and a main memory, a system program for operating the control device, a boot loader program for loading the system program into the main memory when the control device starts up, and a built-in program And a built-in program memory having a built-in update program for performing the update of the program. The update program is provided with arrangement information analyzing means. A built-in program update memory characterized in that writing is performed at the above-mentioned layout information address of the built-in program memory based on the layout information described in the received partial program. 2. The control device is provided with an arrangement information table for storing arrangement information of the partial programs, wherein the arrangement information described in the provided partial programs is provided.
2. The built-in program update memory according to claim 1, wherein the writing is performed after comparing the allocation information of the corresponding partial program in the allocation information table. 3. A program save area is provided in the control device, and the relevant partial program is written in the program save area prior to the update of the partial program. When there is a request to return to the partial program before the update, the program save area is provided. 2. The built-in program update memory according to claim 1, wherein the partial program written in the area is written back to the address before the update.