JP5658200B2 - Communication device and activation program code selection method - Google Patents

Description

  The present invention relates to a communication apparatus having a plurality of activation program codes and an activation program code selection method.

  In recent years, many communication devices having a communication function have made it possible to download a program code from an external server or the like in order to upgrade a program code for operating the communication device. Here, the communication device refers to a mobile communication terminal such as a mobile phone, a PHS (Personal Handyphone System) terminal, or a smartphone. Alternatively, the communication device may be a tablet terminal having a communication function, a personal computer having a communication function, or the like.

  In order to ensure that the program code is upgraded, there are many communication devices that are provided with two memories for storing the program code (see, for example, Patent Document 1).

  The following description is made in Patent Document 1 “Software update method and mobile terminal device” described above.

  That is, two memory areas for holding the main body program codes # 1 and # 2 are provided in the mobile terminal device. When updating the program code for upgrading the main body program code or the like, the program code updating process is executed with the main body program code as one update target. When this update fails, the mobile terminal device can be operated using the main body program code on the other side. Also, the program code update can be executed again with the main body program code on the other side as the update target. Thus, the program code update process can be performed without saving the main body program code outside the mobile terminal device. Even when the program code update process fails, the operation of the mobile terminal device can be performed using the main body program code on the other side, so that the use of the mobile terminal device is not restricted for a long time. , And.

JP 2007-189332 A (pages 7 to 11, FIGS. 1 to 10)

  In the method described in Patent Document 1 described above, when the update of the program code fails, the operation of the mobile terminal device can be performed using the main body program code of the other side that is not updated. . However, there is a problem that when the update of the program code fails and the update failure cannot be detected, the operation is as follows. That is, since the failure has not been detected even though the update has failed, the program code is considered to have been updated normally, and the program code is used to start the mobile terminal device. , Has the problem of. In other words, there is a problem that the mobile terminal device operates to start up using an abnormal program code and cannot be started up normally, resulting in repeated start-up.

  The case where the update of the program code has failed and the case where the update failure cannot be detected can occur in the following situation. That is, normally, the validity of the updated program code uses error detection data such as a checksum that is a value calculated to check the reliability of data and CRC (Cyclic Redundancy Check). To check. However, even if an incorrect code is included in the updated program code, the error detection data may be the same as the data calculated in the normal program code. In such a case, it cannot be detected that the malicious program code is mixed in. Then, the program code in which the illegal program code is mixed is regarded as a normal program code, and as a result, the activation failure is repeated.

  The present invention has been made to solve the above-described problems. Accordingly, an object of the present invention is to detect that the program code is not normal even when trying to start the apparatus using an abnormal program code, and to start the apparatus with the original normal program code. The present invention provides a communication device and a method for selecting a startup program code.

  The communication device of the present invention includes a first nonvolatile memory having a plurality of memory areas for storing program codes. In addition, a second nonvolatile memory having a plurality of counters for storing the number of activation failures in the program codes of the plurality of memory areas corresponding to each of the memory areas is provided. Furthermore, an operation memory for expanding any one of the plurality of memory areas and a control unit are provided. The control unit selects any program code in the plurality of memory areas as a program code for operation. Next, the program code for the operation is expanded in the operation memory and operated to start up the apparatus. Here, when the activation with the program code for the operation fails, the number of failures is stored in any one of the plurality of counters corresponding to the memory area in which the program code for the operation is stored. When the number of failures stored in any of the counters exceeds a threshold value, the program code for operating the program code in any memory area other than the memory area storing the program code for the operation Select as code. Furthermore, a communication unit is provided that transmits data received from the outside to the control unit and transmits data output from the control unit to the outside.

  According to the activation program code selection method of the present invention, a program code in any one of a plurality of memory areas is selected as a program code for operation, and the program code for operation is expanded and operated in an operation memory. Start the device. If the activation with the program code for the operation fails, the number of failures is stored in any one of a plurality of counters corresponding to the memory area in which the program code for the operation is stored. Here, when the number of failures stored in any one of the counters exceeds a threshold, the program code in any memory area other than the memory area storing the program code for the operation is used for the operation. Select as program code.

  According to the present invention, even when an attempt is made to start the apparatus using an abnormal program code, it is possible to detect that the program code is not normal and to start the apparatus using the original normal program code. It becomes.

It is a block diagram which shows 1st Embodiment of the communication apparatus of this invention. It is a flowchart explaining the operation | movement of 1st Embodiment. It is a block diagram which shows 2nd Embodiment of the communication apparatus of this invention. It is a 1st flowchart explaining the operation | movement of 2nd Embodiment. It is a 2nd flowchart explaining operation | movement of 2nd Embodiment. It is a block diagram which shows 3rd Embodiment of the communication apparatus of this invention. It is a flowchart explaining the operation | movement of 3rd Embodiment. It is a block diagram which shows 4th Embodiment of the communication apparatus of this invention. It is a flowchart explaining the operation | movement of 4th Embodiment.

Next, embodiments of the present invention will be described with reference to the drawings.
[First embodiment]
FIG. 1 is a block diagram showing a first embodiment of a communication apparatus according to the present invention.

  In addition, the communication apparatus in this embodiment shall point out mobile communication terminals, such as a mobile telephone, a PHS terminal, or a smart phone. Alternatively, the communication device may be a tablet terminal having a communication function, a personal computer having a communication function, or the like.

  A communication apparatus 100 illustrated in FIG. 1 includes a communication unit 10, a nonvolatile memory 20, a nonvolatile memory 30, an operation memory 40, and a control unit 50.

  The communication unit 10 is a part that communicates with the outside of the communication device 100, transmits data such as voice, text, or video output from the control unit 50 to the outside, and receives data received from the outside to the control unit 50. Send it out. The communication unit 10 may perform communication with the outside wirelessly or may perform communication with the outside by wire.

  The nonvolatile memory 20 is a memory that stores program codes for operating the communication device 100. The nonvolatile memory 20 has two memory areas, that is, a # 1 memory area 21 and a # 2 memory area 22. In the # 1 memory area 21, a first program code for operating the communication apparatus 100, that is, a # 1 program code is stored. The # 2 memory area 22 stores a second program code for operating the communication apparatus 100, that is, a # 2 program code. It is assumed that the nonvolatile memory 20 also stores a boot loader (not shown). As is well known, the boot loader is a program for reading the program code of either the # 1 memory area 21 or the # 2 memory area 22 into the operation memory 40 after the communication apparatus 100 is powered on.

  The nonvolatile memory 20 may be constituted by a flash memory that is a semiconductor memory that can rewrite the contents of the memory and that does not lose the data in the memory even when the power is turned off.

  In the present embodiment, it is assumed that the # 1 memory area 21 storing the # 1 program code is an operation side, and the # 2 memory area 22 storing the # 2 program code is a saving side. The operational program code is preferentially expanded in the operation memory 40 when the communication apparatus 100 is activated. When the activation with the operation-side program code fails, the communication apparatus 100 is activated with the saving-side program code. That is, after the communication device 100 is turned on, the communication device 100 is preferentially activated with the operational program code, and if the activation with the operational program code fails, the communication is performed with the evacuation program code. The apparatus 100 is activated.

  The nonvolatile memory 30 is a memory that stores two counters that count and store the number of times, that is, a # 1 counter 31 and a # 2 counter 32. The # 1 counter 31 activates the communication apparatus 100 with the # 1 program code in the # 1 memory area 21 and stores the number of failures when the activation fails. Further, the # 2 counter 32 activates the communication device 100 with the # 2 program code in the # 2 memory area 22 and stores the number of failures when the activation fails.

  The operation memory 40 is a memory that stores a program code for operating the communication apparatus 100. Then, by executing the program code stored in the operation memory 40, the operation of the communication device 100 is performed. Note that the program code stored in the operation memory 40 is either the # 1 program code in the # 1 memory area 21 or the # 2 program code in the # 2 memory area 22. The operation memory 40 is composed of a RAM (random access memory) that can rewrite the contents of the memory, but loses the data in the memory when the power is turned off.

  The control unit 50 controls the operation of the entire communication apparatus 100 and includes a CPU (central processing unit). In particular, when the communication device 100 is powered on, the control unit 50 develops and stores the # 1 program code stored on the operation side in the nonvolatile memory 20 in the operation memory 40. Then, the communication device 100 is activated by operating the program code stored in the operation memory 40. If the communication device 100 is successfully activated, the operation of the communication device 100 is continued as it is. When activation of the communication device 100 fails, the number of failures is stored in the # 1 counter 31 of the nonvolatile memory 30. Next, the # 1 program code stored in the operation side is expanded and stored in the operation memory 40 again, and the communication apparatus 100 is activated. Again, if the activation of the communication device 100 fails, the number of failures is stored in the # 1 counter 31 of the nonvolatile memory 30. When the number of failures stored in the # 1 counter 31 exceeds a predetermined threshold, the # 2 program code stored on the save surface in the nonvolatile memory 20 is stored in the operation memory 40. Operates to expand and store.

  Next, the operation of the present embodiment will be described with reference to FIG.

  FIG. 2 is a flowchart for explaining the operation of the first embodiment.

  In the present embodiment, as described above, the # 1 memory area 21 storing the # 1 program code is used as an operation side, and the # 2 memory area 22 storing the # 2 program code is used as a save side. And In the # 1 memory area 21, it is assumed that a program code downloaded from a server external to the communication apparatus 100 is stored as a # 1 program code. Also, in the # 2 memory area 22, an emergency program code that can surely start the communication device 100 when the communication device 100 fails to start with the # 1 program code is stored as the # 2 program code. It shall be. Further, the contents of the # 1 counter 31 for storing the number of activation failures with the # 1 program code and the # 2 counter 32 for storing the number of activation failures with the # 2 program code are both “0”. Shall.

  2, when the communication apparatus 100 shown in FIG. 1 is turned on (step S1 in FIG. 2), the control unit 50 of the communication apparatus 100 operates as follows.

  That is, the control unit 50 checks the number of startup failures stored in the nonvolatile memory 30 from the operational aspect. That is, it is determined whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold (for example, “2”) (step S2).

  When the number of activation failures does not exceed the threshold (No in step S2), the content of the # 1 counter 31 is incremented by “1” (step S3). Then, the operational # 1 program code is expanded and stored in the operation memory 40 (step S4). Next, it is determined whether or not the # 1 program code has been successfully developed into the operation memory 40 (step S5). The determination of whether or not the expansion has succeeded is determined to be successful when the boot loader of the nonvolatile memory 20 ends normally, and is determined to be unsuccessful when the boot loader does not end normally.

  If the deployment is unsuccessful (No in step S5), the process returns to step S2, and it is determined whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold. It works to do it again.

  When the expansion is successful (Yes in step S5), the communication device 100 is activated with the program code expanded in the operation memory 40 (step S6). Then, it is determined whether or not the communication device 100 has been successfully activated (step S7). The determination as to whether or not the activation has succeeded may be made such that the communication device 100 determines that the activation has been successful when the operation to be performed first after the activation is started. The operation to be performed first after activation is, for example, an operation in which the communication device 100 displays a menu screen.

  If the activation is not successful (No in step S7), the process returns to step S2, and it is determined again whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold value. Operates to do.

  If the activation is successful (Yes in step S7), the content of the # 1 counter 31 is returned to "0" (step S8), and the communication device 100 is provided with a communication function by continuing the operation of the communication device 100 as it is. (Step S9).

  In the present embodiment, as described above, if the deployment is unsuccessful (No in step S5) or the activation is not successful (No in step S7), the process returns to step S2. ing. This indicates that the # 1 program code is an illegal program code for some reason, and indicates that the communication apparatus 100 cannot be started normally. Then, by repeating the operations after step S2, the value of the # 1 counter 31 sometime exceeds the threshold value. When the value of the # 1 counter 31 exceeds the threshold value, the control unit 50 operates so as to consider that the normal activation of the communication apparatus 100 by the operational # 1 program code has failed. Then, as described later, the control unit 50 operates to switch to the activation of the communication device 100 by the # 2 program code on the save surface.

  Returning to FIG. 2, when the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold (Yes in step S2), # 2 indicates the number of activation failures on the save surface. The counter 32 is checked. That is, it is determined whether or not the number of activation failures stored in the # 2 counter exceeds a predetermined threshold (step S12).

  If the number of activation failures exceeds the threshold (Yes in step S12), the control unit 50 ends the operation and does not activate the communication device 100. In this case, it is indicated that both the operation side and the save side program codes are illegal program codes.

  If the number of activation failures does not exceed the threshold (No in step S12), the contents of the # 2 counter 32 are incremented by “1” (step S13). Then, the # 2 program code on the saving surface is developed and stored in the operation memory 40 (step S14). Next, it is determined whether or not the # 2 program code has been successfully developed into the operation memory 40 (step S15).

  If the deployment is unsuccessful (No in step S15), the process returns to step S12 to determine whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold value. It works to do it again.

  If the expansion is successful (Yes in step S15), the communication device 100 is activated with the program code expanded in the operation memory 40 (step S16). Then, it is determined whether or not the communication device 100 has been successfully activated (step S17).

  If the activation is not successful (No in step S17), the process returns to step S12, and it is determined again whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold value. Works to do.

  If the activation is successful (Yes in step S17), the content of the # 2 counter 32 is returned to “0” (step S18), and the communication device 100 is provided with a communication function by continuing the operation of the communication device 100 as it is. (Step S19).

  As described above, in the first embodiment, the control unit 50 monitors whether or not the communication device 100 is activated with an operational # 1 program code. When the communication device 100 fails to start with the # 1 program code, the communication device 100 is switched to start with the # 2 program code on the save surface. Therefore, storing the emergency program code on the evacuation surface makes it possible to reliably start the communication device 100.

  The operation of the first embodiment of the present invention has been described above.

  In the above-described embodiment, the non-volatile memory 20 of the communication device 100 has been described as having two memory areas (# 1 memory area 21 and # 2 memory area 22). It may be changed.

  That is, the nonvolatile memory 20 has a plurality of memory areas, that is, a # 1 memory area, a # 2 memory area,. In each of the plurality of memory areas, program codes for operating the communication device 100, that is, # 1 program code, # 2 program code,..., #N program code are stored. Here, the # 1 memory area for storing the # 1 program code is defined as an operational aspect. The # 2 memory area for storing the # 2 program code is defined as the first priority saving plane, and the # 3 memory area for storing the # 3 program code is defined as the second priority saving plane (the same applies hereinafter).

  Along with this change, the nonvolatile memory 30 is changed to store a plurality of counters, that is, a # 1 counter, a # 2 counter,. Here, each of the plurality of counters (# 1 counter, # 2 counter,..., #N counter) includes a plurality of memory areas (# 1 memory area, # 2 memory area,..., #N memory area). ).

  And the control part 50 of the communication apparatus 100 operate | moves as follows, when starting the communication apparatus 100. FIG.

  That is, the control unit 50 monitors whether or not the communication device 100 is activated with the operational # 1 program code. Then, when the activation of the communication device 100 with the # 1 program code fails, the communication device 100 is switched to be activated with the # 2 program code of the first priority saving surface. At this time, the control unit 50 further monitors whether or not the communication device 100 is activated with the # 2 program code of the first priority saving surface. Then, when the activation of the communication device 100 with the # 2 program code fails, the communication device 100 is switched to be activated with the # 3 program code of the second priority saving surface. Thereafter, the same operation is performed.

  Here, the first emergency program code is stored in the first priority saving plane, and the second emergency program code is stored in the second priority saving plane (the same applies hereinafter). In this way, since the communication device 100 can be activated with a plurality of emergency program codes, the communication device 100 can be activated more reliably.

  As described above, the communication apparatus 100 according to the present embodiment includes the first nonvolatile memory (# 1 memory area 21, # 2 memory area 22,...) Having a plurality of memory areas for storing program codes. Non-volatile memory 20) is provided. A second counter having a plurality of counters (# 1 counter 31, # 2 counter 32,...) That store the number of activation failures in the program codes of the plurality of memory areas corresponding to each of the memory areas; Non-volatile memory (non-volatile memory 30). Furthermore, an operation memory (operation memory 40) for expanding a program code in any of the plurality of memory areas and a control unit (control unit 50) are provided. The control unit selects one of the program codes in the plurality of memory areas as a program code for operation, expands the program code for operation in the operation memory, and operates the device code. Start up. Here, when the activation with the program code for the operation fails, the number of failures is stored in any one of the plurality of counters corresponding to the program code for the operation. Then, when the number of failures stored in any one of the counters exceeds a threshold, a program code in a memory area other than the memory area that stores the program code for the operation is selected as a program code for the operation To do. Furthermore, a communication unit is provided that transmits data received from the outside to the control unit and transmits data output from the control unit to the outside.

Therefore, according to the present embodiment, even when an attempt is made to start the apparatus using an abnormal program code, it can be detected that the program code is not normal, and the original normal program code is used for starting. It becomes possible.
[Second Embodiment]
Next, a second embodiment according to the present invention will be described as a modification of the first embodiment shown in FIG.

  The communication apparatus according to the second embodiment can select the operation aspect that is fixed in the # 1 memory area 21 as the # 1 memory area 21 or the # 2 memory area 22 in the first embodiment. This is different from the first embodiment only in the way described above.

  FIG. 3 is a block diagram showing a second embodiment of the communication apparatus of the present invention. FIG. 3 is different from the first embodiment in that an operational information storage unit 33 is added to the nonvolatile memory 30 of the communication device 100 shown in FIG. Therefore, in FIG. 3, the same reference numerals or symbols are assigned to the components corresponding to those in FIG. 1, and the description thereof is omitted as much as possible.

  The communication device 100-2 illustrated in FIG. 3 includes the communication unit 10, the nonvolatile memory 20, the nonvolatile memory 30-2, the operation memory 40, and the control unit 50-2, as in FIG.

  Since the communication unit 10, the non-volatile memory 20, and the operation memory 40 are the same as those in the first embodiment, description thereof is omitted.

  In addition to the # 1 counter 31 and the # 2 counter 32, the nonvolatile memory 30-2 stores an operation surface information storage unit 33.

  Since the # 1 counter 31 and the # 2 counter 32 are the same as those in the first embodiment, the description thereof is omitted.

  The operational surface information storage unit 33 stores information that determines which of the # 1 memory area 21 and the # 2 memory area 22 of the nonvolatile memory 20 is the operational surface. For example, when the # 1 memory area 21 is used as an operation surface, the operation surface information storage unit 33 stores the # 1 memory area 21. In addition, when the # 2 memory area 22 is used as an operation surface, the operation surface information storage unit 33 stores the # 2 memory area 22. A memory area that is not stored in the operation surface information storage unit 33 is treated as a retreat surface.

  The control unit 50-2 controls the operation of the entire communication device 100-2 and includes a CPU. In particular, the control unit 50-2 refers to the operation surface information storage unit 33 when the communication device 100-2 is turned on in addition to the operation of the control unit 50 of the first embodiment, and the operation surface is # 1 memory. Whether the area 21 or the # 2 memory area 22 is determined. Then, the program code stored on the operation side operates to be expanded and stored in the operation memory 40.

  Next, the operation of the second embodiment will be described with reference to FIGS.

  FIG. 4 is a first flowchart for explaining the operation of the second embodiment.

  In FIG. 4, the communication apparatus 100-2 according to the second embodiment downloads a program code for upgrading from an external server and stores it in either the # 1 memory area 21 or the # 2 memory area 22. It shows the operation when doing. Here, it is assumed that information for determining which of the # 1 memory area 21 and the # 2 memory area 22 is to be used as the operation surface is stored in the operation surface information storage unit 33 of the nonvolatile memory 30-2.

  In FIG. 4, it is assumed that the communication apparatus 100-2 is in operation and has started downloading program code for upgrading from an external server. First, the control unit 50-2 of the communication device 100-2 refers to the operation surface information storage unit 33 and determines whether or not the operation surface is the # 1 memory area 21 (step S21 in FIG. 4). .

  If the operation side is the # 1 memory area 21 (Yes in step S21), the control unit 50-2 downloads the program code for upgrading from an external server and saves the non-operation side (# 2 memory) It is stored in area 22) (step S22). Then, the operation side is changed to the # 2 memory area 22 (step S23). That is, the control unit 50-2 stores the # 2 memory area 22 in the operation surface information storage unit 33. Then, the download process ends.

  On the other hand, when the operation side is not the # 1 memory area 21 (No in step S21), the operation side is the # 2 memory area 22. Therefore, the control unit 50-2 downloads the program code for upgrading from an external server and stores it in the save surface (# 1 memory area 21) that is not the operation surface (step S25). Then, the operation side is changed to the # 1 memory area 21 (step S26). That is, the control unit 50-2 stores the # 1 memory area 21 in the operation side information storage unit 33. Then, the download process ends.

  Next, with reference to FIG. 5, the process at the time of starting of the communication apparatus 100-2 will be described.

  FIG. 5 is a second flowchart for explaining the operation of the second embodiment.

  In FIG. 5, when the communication device 100-2 shown in FIG. 3 is powered on (step S31 in FIG. 5), the control unit 50-2 of the communication device 100-2 operates as follows.

  That is, the control unit 50-2 refers to the operation surface information storage unit 33 and determines whether or not the operation surface is the # 1 memory area 21 (step S31-1 in FIG. 5).

  When the operation side is the # 1 memory area 21 (Yes in step S31-1), the control unit 50-2 determines that the number of activation failures stored in the # 1 counter 31 is a predetermined threshold value. It is determined whether or not it exceeds (step S32).

  When the number of activation failures does not exceed the threshold (No in step S32), the control unit 50-2 operates in the same manner as in the first embodiment. That is, the control unit 50-2 increments the content of the # 1 counter 31 by “1” (step S33). Then, the operational # 1 program code is expanded and stored in the operation memory 40 (step S34). Next, it is determined whether or not the # 1 program code has been successfully developed into the operation memory 40 (step S35).

  If the deployment is unsuccessful (No in step S35), the process returns to step S32 to determine whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold value. It works to do it again.

  If the expansion is successful (Yes in step S35), the communication device 100-2 is activated with the program code expanded in the operation memory 40 (step S36). Then, it is determined whether or not the communication device 100-2 has been successfully activated (step S37).

  If the activation is not successful (No in step S37), the process returns to step S32, and it is determined again whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold value. Works to do.

  When the activation is successful (Yes in step S37), the content of the # 1 counter 31 is returned to “0” (step S38), and the operation of the communication device 100-2 is continued as it is to communicate with the communication device 100-2. The operation is performed to provide the function (step S39).

  When the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold (Yes in step S32), the control unit 50-2 changes the operation side to the # 2 memory area. (Step S40). That is, the control unit 50-2 stores the # 2 memory area 22 in the operation surface information storage unit 33. And it progresses to step S53 mentioned later.

  If the operation side is not the # 1 memory area 21 (No in step S31-1), the operation side is the # 2 memory area 22, and therefore the control unit 50-2 is stored in the # 2 counter 32. It is determined whether or not the number of activation failures exceeds a predetermined threshold value (step S52).

  If the number of activation failures does not exceed the threshold (No in step S52), the control unit 50-2 operates in the same manner as in the first embodiment. That is, the control unit 50-2 increments the content of the # 2 counter 32 by “1” (step S53). Then, the operational # 2 program code is expanded and stored in the operation memory 40 (step S54). Next, it is determined whether or not the # 2 program code has been successfully developed into the operation memory 40 (step S55).

  If the deployment is unsuccessful (No in step S55), the process returns to step S52 to determine whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold. It works to do it again.

  If the expansion is successful (Yes in step S55), the communication device 100-2 is activated with the program code expanded in the operation memory 40 (step S56). Then, it is determined whether or not the communication device 100-2 has been successfully activated (step S57).

  If the activation is not successful (No in step S57), the process returns to step S52, and it is determined again whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold value. Operates to do.

  If the activation is successful (Yes in step S57), the contents of the # 2 counter 32 are returned to “0” (step S58), and the communication device 100-2 is continued to operate to communicate with the communication device 100-2. The operation is performed to provide the function (step S59).

  When the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold (Yes in step S52), the control unit 50-2 changes the operation side to the # 1 memory area. (Step S60). That is, the control unit 50-2 stores the # 1 memory area 21 in the operation surface information storage unit 33. Then, the process proceeds to step S33.

  As described above, in the second embodiment, the control unit 50-2 monitors whether or not the communication device 100-2 is activated with the operational program code. When the activation of the communication device 100-2 with the operational program code fails, the operational surface is switched to the previous evacuation surface. Therefore, by storing the program code that has been operating normally before the version upgrade on the save surface, the communication device 100-2 can be reliably started.

  The operation of the second embodiment of the present invention has been described above.

  As described above, the second embodiment of the present invention is different only in that an operational information storage unit 33 is added to the nonvolatile memory 30 of the communication device 100 of the first embodiment shown in FIG. It is. Therefore, only the parts peculiar to the second embodiment will be described below.

  As described above, the communication device 100-2 of the present embodiment includes the communication unit (communication unit 10) that performs communication with the outside. Further, a first nonvolatile memory (nonvolatile memory 20) having first and second memory areas (# 1 memory area 21 and # 2 memory area 22) for storing program codes is provided. Further, first and second counters (# 1 counter 31 and # 2 counter 32) for storing the number of activation failures in the program codes of the first and second memory areas corresponding to the respective memory areas. A second non-volatile memory (non-volatile memory 30-2). Furthermore, an operation memory (operation memory 40) that expands the program code of either the first or second memory area and a control unit (control unit 50-2) are provided. Furthermore, the second non-volatile memory further includes an operation surface information storage unit that determines which program code in the first or second memory area is the program code for operation.

  Then, the control unit activates the apparatus by expanding and operating the program code for operation from the memory area stored in the operation surface information storage unit in the operation memory. Here, if the activation with the program code for the operation fails, the number of failures is stored in either the first or the second counter corresponding to the program code for the operation. Then, when the number of failures stored in one of the counters exceeds a threshold value, the program code in the other memory area is selected as a program code for operation.

  As a result, the program code for operation can be selected from either the first or second memory area and expanded in the operation memory, and the memory area having the program code for operation Can be changed. Then, the memory area having the program code that has been operating normally until immediately before the upgrade can be used as a save plane, and the new upgraded program code can be stored in the memory area on the operation side. In other words, even if a new upgraded program code is stored in the memory area on the operational side, the program code that was operating normally until immediately before the upgrade can be stored in the memory area on the save side. it can.

Therefore, according to the present embodiment, even when a new upgraded program code does not operate normally, the communication device can be started with the program code that has been operating normally until immediately before the upgrade. Become.
[Third embodiment]
Next, a third embodiment according to the present invention will be described as a modification of the first embodiment shown in FIG.

  FIG. 6 is a block diagram showing a third embodiment of the communication apparatus of the present invention. FIG. 6 is different from the first embodiment only in that a timer 60 is added to the control unit 50 of the communication apparatus 100 shown in FIG. Therefore, in FIG. 6, the same reference numerals or symbols are assigned to the components corresponding to those in FIG. 1, and the description thereof is omitted as much as possible.

  A communication device 100-3 illustrated in FIG. 6 includes a communication unit 10, a nonvolatile memory 20, a nonvolatile memory 30, an operation memory 40, a control unit 50-3, and a timer 60.

  Since the communication unit 10, the non-volatile memory 20, the non-volatile memory 30, and the operation memory 40 are the same as those in the first embodiment, description thereof is omitted.

  The timer 60 measures the elapsed time from the start of measurement.

  The control unit 50-3 controls the operation of the entire communication device 100-3 and includes a CPU. In particular, in addition to the operation of the control unit 50 of the first embodiment, the control unit 50-3 measures an elapsed time from when the communication device 100-3 is turned on using the timer 60. Then, it is determined whether the measured elapsed time exceeds a designated value designated in advance. When the specified value is exceeded, the program code developed in the operation memory 40 operates to switch from the operation side to the save side.

  Next, the operation of the third embodiment will be described.

  FIG. 7 is a flowchart for explaining the operation of the third embodiment.

  As described above, in the third embodiment, the control unit 50-3 uses the timer 60 to measure the elapsed time from when the communication device 100-3 is powered on. Then, it is determined whether the measured elapsed time exceeds a designated value designated in advance. When the specified value is exceeded, it is different from the first embodiment only in that it operates so as to switch the program code developed in the operation memory 40 from the operation side to the saving side. Therefore, in FIG. 7, the same reference numerals or symbols are assigned to the components corresponding to the components in FIG. 2 of the operation of the first embodiment, and the description thereof is omitted as much as possible.

  In FIG. 7, when the power of the communication device 100-3 is turned on (step S1 in FIG. 7), the control unit 50-3 of the communication device 100-3 operates as follows.

  That is, the control unit 50-3 starts measurement by the timer 60 (step S1-2). Then, it is determined whether or not the value of the timer 60 has exceeded a specified value specified in advance (for example, “60 seconds”) (step S1-3).

  When the value of the timer 60 does not exceed the specified value specified in advance (No in step S1-3), the control unit 50-3, as described in the first embodiment, The number of activation failures stored in 30 is checked from the operational aspect. That is, it is determined whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold (step S2). Thereafter, the same operation as in the first embodiment is performed. Therefore, the operation from step S3 to step S9 in FIG. 7 is simplified as follows.

  That is, the operation from step S3 to step S7 in FIG. 7 is performed, the # 1 program code is successfully expanded to the operation memory 40 (Yes in step S5), and the activation of the operation memory 40 with the program code is successful. If so (Yes in step S7), the operation is as follows. That is, as in the first embodiment, the control unit 50-3 causes the communication device 100-3 to provide a communication function by continuing the operation of the communication device 100-3 as it is (step S9). .

  On the other hand, if the development of the # 1 program code to the operation memory 40 is unsuccessful during the operation from step S3 to step S7 (No in step S5), or the program code in the operation memory 40 If the activation is unsuccessful (No in step S7), the process returns to step S1-3. Then, the timer 60 operates to determine again whether or not the value of the timer 60 has exceeded a specified value specified in advance.

  When the value of the timer 60 exceeds the specified value specified in advance (Yes in step S1-3), the control unit 50-3, as described in the first embodiment, The number of activation failures stored in 30 is checked on the save side. That is, it is determined whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold (step S12). Thereafter, the same operation as in the first embodiment is performed. Accordingly, the description of the operations from step S13 to step S19 in FIG. 7 will be omitted.

  In FIG. 7, the operation is described while checking the number of activation failures stored in the # 1 counter 31 and the # 2 counter 32 of the nonvolatile memory 30. However, the number of activation failures may not be checked. In this way, the program code to be expanded in the operation memory 40 only when the elapsed time since the power-on of the communication device 100-3 exceeds a specified value specified in advance is obtained from the operation side. Switch to the retreat surface.

  As described above, in the present embodiment, when the value of the timer 60 exceeds the specified value specified in advance, the operation surface is switched to the retreat surface and the revocation surface is activated with the program code. Operate.

  Therefore, according to the present embodiment, when the value of the timer 60 exceeds a specified value specified in advance, the operation surface is switched to the save surface and the save surface is activated by the program code. .

  The operation of the third embodiment of the present invention has been described above.

  As described above, the control unit 50-3 of the communication device 100-3 according to the third embodiment of the present invention measures the elapsed time from when the communication device 100-3 is turned on by the timer 60. Then, it is determined whether the measured elapsed time exceeds a designated value designated in advance. When the specified value is exceeded, it is different from the first embodiment only in that it operates so as to switch the program code developed in the operation memory 40 from the operation side to the saving side. Therefore, only the parts specific to the third embodiment will be described below.

  As described above, the communication device 100-3 according to the present embodiment includes the communication unit (communication unit 10) that performs communication with the outside. Further, a first nonvolatile memory (nonvolatile memory 20) having first and second memory areas (# 1 memory area 21 and # 2 memory area 22) for storing program codes is provided. Further, first and second counters (# 1 counter 31 and # 2 counter 32) for storing the number of activation failures in the program codes of the first and second memory areas corresponding to the respective memory areas. A second non-volatile memory (non-volatile memory 30-2). Furthermore, an operation memory (operation memory 40) for expanding the program code of either the first or second memory area, a control unit (control unit 50-3), and a timer (timer 60) are provided. I have.

  The control unit selects one of the program codes in the first or second memory area as a program code for operation, and uses the timer to set an elapsed time from when the communication device is turned on. measure. Next, it is determined whether or not the elapsed time exceeds a specified value specified in advance, and when the specified value is exceeded, the program code in the other memory area is selected as a program code for operation.

Therefore, according to this embodiment, when the activation of the program code in one memory area becomes impossible for a certain time indicated by the specified value, the apparatus is activated by the program code in the other memory area. Is possible.
[Fourth Embodiment]
Next, a description will be given of a fourth embodiment according to the present invention as a modification of the first embodiment shown in FIG.

  FIG. 8 is a block diagram showing a fourth embodiment of the communication apparatus of the present invention. In FIG. 8, an RTC (Real-Time Clock) 70 is added to the control unit 50 of the communication apparatus 100 shown in FIG. In addition, an upgrade time storage unit 34 is added to the nonvolatile memory 30. The fourth embodiment is different from the first embodiment only in the points described above. Therefore, in FIG. 8, the same reference numerals or symbols are assigned to the components corresponding to those in FIG. 1, and the description thereof is omitted as much as possible.

  A communication device 100-4 illustrated in FIG. 8 includes a communication unit 10, a nonvolatile memory 20, a nonvolatile memory 30-4, an operation memory 40, a control unit 50-4, and an RTC 70.

  Since the communication unit 10, the non-volatile memory 20, and the operation memory 40 are the same as those in the first embodiment, description thereof is omitted.

  The nonvolatile memory 30-4 stores a version upgrade time storage unit 34 in addition to the # 1 counter 31 and the # 2 counter 32.

  Since the # 1 counter 31 and the # 2 counter 32 are the same as those in the first embodiment, the description thereof is omitted.

  The upgrade time storage unit 34 stores the time when the program code in the # 1 memory area 21 or the # 2 memory area 22 is upgraded with the program code downloaded from an external server or the like.

  The RTC 70 is a clock of the communication device 100-4, and keeps the current time even when the power of the communication device 100-4 is turned off.

  The control unit 50-4 controls the operation of the entire communication device 100-4 and includes a CPU. In particular, the control unit 50-4 stores the time when the program code of the communication device 100-4 is upgraded in the upgrade time storage unit 34 in addition to the operation of the control unit 50 of the first embodiment. Then, the communication device 100-4 is activated with an operational program code. Here, when the activation of the communication device 100-4 with the operational program code is unsuccessful, the current time of the RTC 70 is referred to. When the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34, the control unit 50-4 determines the communication device 100-4 based on the program code on the save surface. Operates to switch to startup.

  Next, the operation of the fourth embodiment will be described.

  It is assumed that the program code for upgrading is downloaded from an external server to the operation side of the nonvolatile memory 20 of the communication device 100-4 (assuming that it is the # 1 memory area 21). . The upgrade time storage unit 34 of the nonvolatile memory 30 stores the time when the program code for upgrading is downloaded.

  FIG. 9 is a flowchart for explaining the operation of the fourth embodiment.

  As described above, in the fourth embodiment, the control unit 50-4 activates the communication device 100-4 with an operational program code. Here, when the activation of the communication device 100-4 with the operational program code is unsuccessful, the current time of the RTC 70 is referred to. When the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34, the control unit 50-4 determines the communication device 100-4 based on the program code on the save surface. It differs from the first embodiment only in that it operates to switch to activation. Therefore, in FIG. 9, the same reference numerals or symbols are assigned to the components corresponding to the components in FIG. 2 of the operation of the first embodiment, and the description thereof is omitted as much as possible.

  In FIG. 9, when the communication device 100-4 is powered on (step S1 in FIG. 9), the control unit 50-4 of the communication device 100-4 operates as follows.

  That is, the control unit 50-4 refers to the current time of the RTC 70. It is determined whether the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34 (for example, “24 hours”) (step S1-5). ).

  When the pre-designated time has not elapsed (No in step S1-5), the control unit 50-4 fails in the activation stored in the nonvolatile memory 30 as described in the first embodiment. Check the number of operations from the operational aspect. That is, it is determined whether or not the number of activation failures stored in the # 1 counter 31 exceeds a predetermined threshold (step S2). Thereafter, the same operation as in the first embodiment is performed. Accordingly, the operation from step S3 to step S9 in FIG. 9 is simplified as follows.

  That is, the operation from step S3 to step S7 of FIG. 9 is performed, the # 1 program code is successfully expanded to the operation memory 40 (Yes in step S5), and the activation of the operation memory 40 with the program code is successful If so (Yes in step S7), the operation is as follows. That is, as in the first embodiment, the control unit 50-4 causes the communication device 100-4 to provide a communication function by continuing the operation of the communication device 100-4 as it is (step S9). .

  On the other hand, if the development of the # 1 program code to the operation memory 40 is unsuccessful during the operation from step S3 to step S7 (No in step S5), or the program code in the operation memory 40 If the activation is unsuccessful (No in step S7), the process returns to step S1-5. Then, the current time of the RTC 70 operates to determine again whether or not a predetermined time has elapsed from the time stored in the upgrade time storage unit 34. When the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34 (Yes in step S1-5), the control unit 50-4 performs the first implementation. The same operation as described in the embodiment is performed. That is, the control unit 50-4 performs a check on the save surface with respect to the number of activation failures stored in the nonvolatile memory 30. That is, it is determined whether or not the number of activation failures stored in the # 2 counter 32 exceeds a predetermined threshold (step S12). Thereafter, the same operation as in the first embodiment is performed. Accordingly, the description of the operations from step S13 to step S19 in FIG. 9 will be omitted.

  In FIG. 9, the operation is described while checking the number of activation failures stored in the # 1 counter 31 and the # 2 counter 32 of the nonvolatile memory 30. However, the number of activation failures may not be checked. In this way, the current time of the communication device 100-4 is expanded in the operation memory 40 only when a predesignated time has elapsed from the time stored in the upgrade time storage unit 34. The program code is switched from the operation side to the saving side.

  As described above, in the present embodiment, when the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34, the operation surface is switched to the retraction surface, Operates to start with the program code on the save side.

  Therefore, according to the present embodiment, when the current time of the RTC 70 has elapsed in advance from the time stored in the upgrade time storage unit 34, the operation surface is switched to the retraction surface, and the retraction surface It will be started with the program code.

  The operation of the fourth embodiment of the present invention has been described above.

  As described above, the control unit 50-4 of the communication device 100-4 according to the fourth embodiment of the present invention designates the current time of the RTC 70 in advance from the time stored in the upgrade time storage unit 34. Determine if the time has passed. When the predesignated time has elapsed, the control unit 50-4 operates to switch the program code developed in the operation memory 40 from the operation surface to the retreat surface and to start the program code on the retreat surface. Only in the point, it differs from 1st Embodiment. Therefore, only the parts peculiar to the fourth embodiment will be described below.

  As described above, the communication device 100-4 of the present embodiment includes the communication unit (communication unit 10) that performs communication with the outside. Further, a first nonvolatile memory (nonvolatile memory 20) having first and second memory areas (# 1 memory area 21 and # 2 memory area 22) for storing program codes is provided. Further, first and second counters (# 1 counter 31 and # 2 counter 32) for storing the number of activation failures in the program codes of the first and second memory areas corresponding to the respective memory areas. A second non-volatile memory (non-volatile memory 30-2). Still further, an operation memory (operation memory 40) for expanding the program code of either the first or second memory area, a control unit (control unit 50-4), and a real-time clock (RTC 70) are provided. I have.

  Then, the control unit selects one of the program codes in the first or second memory area as a program code for operation, and refers to the current time of the real-time clock. Then, it is determined whether or not the current time of the real time clock has elapsed in advance from the upgrade time. If the specified time has elapsed, the program code in the other memory area is selected as the program code for operation.

  Therefore, according to the present embodiment, when the activation with the program code in one memory area becomes impossible for a predetermined time from the upgrade time, the apparatus can be activated with the program code in the other memory area. It becomes possible.

DESCRIPTION OF SYMBOLS 10 Communication part 20 Non-volatile memory 21 # 1 memory area 22 # 2 memory area 30 Non-volatile memory 31 # 1 counter 32 # 2 counter 33 Operation side information storage part 34 Version upgrade time storage part 40 Operation memory 50 Control part 60 Timer 70 RTC
100 Communication device

Claims (4)

A first non-volatile memory having a plurality of memory areas for storing program codes;
A second non-volatile memory having a plurality of counters for storing the number of activation failures in the program codes of the plurality of memory areas corresponding to each of the memory areas;
An operation memory for developing a program code in any of the plurality of memory areas;
The program code in one of the plurality of memory areas is selected as a program code for operation, the program code for operation is expanded and operated in the operation memory, and the apparatus is started up. When the activation with the program code for the operation fails, the number of failures is stored in any one of the plurality of counters corresponding to the memory area in which the program code for the operation is stored. A control unit that selects a program code in any memory area other than the memory area storing the program code for the operation as the program code for the operation when the number of failures stored in the memory exceeds a threshold; ,
A communication unit for sending data received from the outside to the control unit, and transmitting data output from the control unit to the outside,
With timer
With
The control unit selects any one of the plurality of memory areas as a program code for operation, and measures an elapsed time from power-on of the communication device with the timer, and the elapsed time It is determined whether or not the specified value specified in advance is exceeded, and if the specified value is exceeded, the program code in any memory area other than the memory area that stores the program code for the operation is operated. Select as program code,
A communication device. A first non-volatile memory having a plurality of memory areas for storing program codes;
A second non-volatile memory having a plurality of counters for storing the number of activation failures in the program codes of the plurality of memory areas corresponding to each of the memory areas;
An operation memory for developing a program code in any of the plurality of memory areas;
The program code in one of the plurality of memory areas is selected as a program code for operation, the program code for operation is expanded and operated in the operation memory, and the apparatus is started up. When the activation with the program code for the operation fails, the number of failures is stored in any one of the plurality of counters corresponding to the memory area in which the program code for the operation is stored. A control unit that selects a program code in any memory area other than the memory area storing the program code for the operation as the program code for the operation when the number of failures stored in the memory exceeds a threshold; ,
A communication unit for sending data received from the outside to the control unit, and transmitting data output from the control unit to the outside,
Real time clock and
With
The control unit selects a program code of any one of the plurality of memory areas as a program code for operation, refers to the current time of the real-time clock, and the current time of the real-time clock It is determined whether a predetermined time has elapsed from the time when the program code for upgrading has been upgraded, and if the specified time has elapsed, any one other than the memory area storing the program code for the operation Select the program code of the memory area as the program code for operation,
Communication device you wherein a. Select one of the program codes in multiple memory areas as the program code for operation,
The apparatus is activated by expanding and operating the program code for the operation in the operation memory,
When activation with the program code for the operation fails, the number of failures is stored in any one of a plurality of counters corresponding to the memory area in which the program code for the operation was stored,
When the number of failures stored in any one of the counters exceeds a threshold, the program code in any memory area other than the memory area that stores the program code for the operation is used as the program code for the operation. selected,
Selecting any one of the plurality of memory areas as a program code for operation, and measuring an elapsed time from power-on of the device;
It is determined whether the elapsed time exceeds a specified value specified in advance,
When a specified value is exceeded, select a program code in any memory area other than the memory area that stores the program code for the operation as a program code for the operation.
A method for selecting a startup program code. Select one of the program codes in multiple memory areas as the program code for operation,
The apparatus is activated by expanding and operating the program code for the operation in the operation memory,
When activation with the program code for the operation fails, the number of failures is stored in any one of a plurality of counters corresponding to the memory area in which the program code for the operation was stored,
When the number of failures stored in any one of the counters exceeds a threshold, the program code in any memory area other than the memory area that stores the program code for the operation is used as the program code for the operation. Selected,
Selecting one of the plurality of memory areas as a program code for operation, and referring to the current time of the device;
The current time is determined whether a predetermined time has elapsed from the time when the program code for the operation is upgraded,
If the specified time has elapsed, select a program code in one of the memory areas other than the memory area that stores the program code for the operation as a program code for the operation.
Start program code selection how to characterized in that.

Images