JP2006260158A - Information processing apparatus, information processing method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To streamline data protection with respect to the interruption of data writing. <P>SOLUTION: A medium is provided with three first to third writing areas as areas where data to be protected should be recorded, and writing is performed to the areas sequentially. Before the data to be protected are read and used, the contents of the data to be protected stored in the first to third writing areas are compared to identify effective data to be protected, according to the consistency/inconsistency of the contents, and data to be used actually is selected from the effective data to be protected. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus capable of recording (writing) / reading data on a recording medium and a method thereof. The present invention also relates to a program executed by such an information processing apparatus.

In recent years, various recording media for storing digital information in a rewritable format have become widespread.
For such a recording medium, for example, when a data recording (writing) process is being performed for data update or the like, for example, the power is cut off or the recording medium is a removable recording medium from the drive. It is assumed that the data recording process may be interrupted due to removal of the data. When such data recording is interrupted, the contents of the data recorded at the time of interruption are not normal, which may hinder subsequent data writing / reading, data management, and the like. For example, if the content of data as a file becomes abnormal due to the interruption of recording, the data of the file cannot be read out and reproduced and output in a normal state thereafter. In addition, if management information for data management in the recording medium is not normal, data management cannot be properly executed for the recording medium thereafter.

  Against this background, there has been proposed a technical configuration in which the contents of the recorded data can be protected even if data recording on the recording medium is interrupted as in Patent Document 1 or the like. .

JP 2004-157997 A

  Another object of the present invention is to protect data against interruption of data recording on a recording medium. On top of that, make this kind of data protection more efficient than ever.

  Therefore, in consideration of the above-described problems, the present invention provides a recording means for recording data on a recording medium as an information processing apparatus, and three or more set in the recording area of the recording medium when recording data to be protected on the recording medium. The recording apparatus includes a recording control unit that controls the recording unit so that the recording of the same protection target data for each protection target data recording area is sequentially performed according to a predetermined order.

  Further, when the reading means for reading data from the recording medium and the reading of the protection target data from the recording medium, the same protection target data is set to be sequentially written in the recording area of the recording medium. Read control means for controlling the reading means so that the protection target data recorded in the required protection target data recording area is read out of the protection target data recording area, and the control of the read control means The comparison means for performing the content comparison of the protection target data read from the different protection target data recording areas, and recorded in each of the three or more protection target data recording areas based on the comparison result of the comparison means. Decision to determine the protected data to be adopted as a target for subsequent processing It was possible to configure the information processing apparatus and a stage.

According to each of the above configurations, the same contents of the protection target data to be protected are recorded in three or more protection target data recording areas set in the recording medium. Thereby, for example, when data to be protected is recorded in any of a plurality of three or more protection target data recording areas, data writing is interrupted, and data recorded in this protection target data recording area is recorded. Even if it is no longer normal, the other protected data recording area has recorded the protected data recorded before the interruption or the previously recorded protected data in a normal state. It will be. That is, regardless of the interruption of data writing, normal protection target data is secured in any of the plurality of protection target data recording areas, and data protection is achieved in this respect.
Further, for example, when there are two protection target data recording areas, it is impossible to determine which one is normal by comparing the data contents recorded in these areas and only with a mismatch result. There is no data protection. On the other hand, if three or more protection target data recording areas are set as in the present invention, it is possible to compare the contents of three or more protection target data. Thus, it is possible to recognize which protection target data recorded in which protection target data recording area is normal.

  In this way, the present invention records the protection target data having the same contents three or more times sequentially, and determines whether the data is normal or illegal by comparing the contents of the three or more protection target data. Data protection is realized by processing and configuration.

  Hereinafter, the best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described. As an example of the present embodiment, the configuration of the information processing apparatus according to the present invention is applied to a digital still camera.

FIG. 1 is a block diagram illustrating a configuration example of a digital still camera 1 according to the present embodiment.
In the digital still camera 1 shown in this figure, the optical system unit 2 includes an imaging lens, a diaphragm, and the like, and forms incident light on the photoelectric conversion unit 3 as imaging light. Further, the optical system unit 2 includes a focus adjustment mechanism for focus adjustment, a diaphragm variable mechanism that varies the diaphragm according to the diaphragm value, and the like. Is performed by a drive signal output from the camera function unit 6. The camera function unit 6 is configured to output a required drive signal so as to obtain an appropriate focus state, aperture state, and the like, under the control of the CPU 10.
For example, when an optical zoom function is to be provided, a zoom mechanism for moving the zoom lens is provided in the optical system unit 2 and driving for moving the zoom mechanism in accordance with the control of the CPU 10 in the same manner as described above. What is necessary is just to provide a part. Further, the camera function unit 6 may be configured to provide an illumination function by providing an illumination unit such as a so-called strobe.

  The photoelectric conversion unit 3 includes, for example, a CCD (Charge Coupled Device) that is a photoelectric conversion element, and performs imaging conversion by photoelectrically converting imaging light incident from the optical system unit 2 and imaged on the light receiving surface. Is output to the image signal processing unit 4. At the time of shooting, for example, an instruction of the shutter speed determined according to the exposure setting result is notified from the CPU 10 to the image signal processing unit 4. The image signal processing unit 4 outputs a scanning timing signal corresponding to the notified shutter speed to the photoelectric conversion unit 3. The photoelectric conversion unit 3 performs scanning according to the scanning timing signal, executes photoelectric conversion processing, and outputs a video signal. In addition to the CCD, a CMOS sensor or the like may be employed.

The image signal processing unit 4 performs waveform shaping on the analog video signal input from the photoelectric conversion unit 3 by, for example, gain adjustment and sample hold processing, and then performs A / D conversion to perform digital conversion. Is converted into image signal data. Then, for the digital image signal obtained by this conversion processing, image signal processing for displaying on the display unit 7 is performed, including, for example, display luminance data generation processing. Accordingly, the image signal processing unit 4 can execute signal processing for a so-called on-screen display so that a character image or the like can be displayed superimposed on the captured image under the control of the CPU 10.
The actual display device employed as the display unit 7 is not particularly limited, but currently, liquid crystal display panels are widely employed.

  Further, the image signal processing unit 4 performs, for example, image data compression processing by a predetermined method on the digital image signal obtained by digital conversion of the analog signal input from the photoelectric conversion unit 3 to generate compressed image data. It is also possible. The compressed image data can be transferred as recording data to the semiconductor medium (recording medium) 20 loaded in the media slot 13 under the control of the CPU 10, for example.

  The image signal processing unit 4 converts an image (video) signal input from the photoelectric conversion unit 3 or still image data read from a medium described later into an analog image signal or a digital image signal of a predetermined method. Thus, it can be output to an external device or the like via the image input / output unit 5.

In addition, the image input / output unit 5 can input an image signal of a predetermined method from the outside, and the input image signal can be displayed on the display unit 7 through the processing of the image signal processing unit 4. Is done. The image signal processing unit 4 converts the image signal input by the image input / output unit 5 into recording data and transfers the image signal to the semiconductor medium 20 in the same manner as the analog image signal input from the photoelectric conversion unit 3. You can also.
Correspondingly, the image input / output unit 5 includes, for example, a video (image) signal output terminal / video signal input terminal according to a predetermined method.

The media slot 13 is provided in the main body of the digital still camera 1 so that the semiconductor media 20 according to a predetermined standard can be attached and detached. When the semiconductor medium 20 is properly loaded into the media slot 13, the pin terminal of the semiconductor medium 20 is connected to the electrode at the connector part of the slot, so that the semiconductor medium 20 can communicate with the CPU 10 side. Will be connected.
Here, the actual semiconductor medium 20 is a storage device including a semiconductor memory element (or an HDD (hard disk drive) or the like) called a non-volatile memory such as a flash memory. Conceivable. Actually, such a storage device with a built-in flash memory is in a situation where several types according to different standards are widely used corresponding to digital still cameras.

The CPU 10 is configured to be able to execute control processing related to data processing for the semiconductor media 20 loaded in the media slot 13 in accordance with a program. Data processing for the media here refers to data to be stored in the media, such as media format processing and file write / read processing for file management information (file management information). Any related process.
For example, as described above, the CPU 10 further transfers the compressed image data to the semiconductor medium 20 in response to the transfer of the compressed image data as recording data, and stores the compressed image data in the storage area ( Data is written in the recording area and stored (recorded). Thus, the compressed image data stored in the medium is stored and managed as a so-called still image file of a photographic image. Management of still image files stored in the semiconductor medium 20 is performed by a predetermined file system.

For example, when playing back a still image file stored in the semiconductor medium 20, the CPU 10 accesses and reads the designated still image file and transfers it to the image signal processing unit 4.
When the still image file is transferred in this way, the image signal processing unit 4 performs image signal processing so that the image of the still image file is reproduced and displayed on the display unit 7.

In addition, the digital still camera 1 according to the present embodiment includes an audio processing unit 8 and an audio input / output unit 9 so that audio signals can be input / output.
As for voice input, a microphone or the like is provided as the voice input / output unit 9, and external voice is collected and converted into a voice signal to input voice. Alternatively, an audio signal is input from an external audio device provided with an audio signal input terminal or the like. The audio signal input in this manner is output to the audio processing unit 8. The audio processing unit 8 performs audio signal processing such as conversion into digital audio data encoded in a predetermined format. The digital audio data can be stored on the medium as described above, for example, as recording data such as audio data in a predetermined format accompanying audio data files or audio data files in a predetermined format, under the control of the CPU 10. It is said.
Further, the audio data stored in the medium as described above can be reproduced and output as audio by the audio processing unit 8 and the audio input / output unit 9. For example, the CPU 10 reads audio data from the medium and transfers it to the audio processing unit 8. The audio processing unit 8 performs necessary audio signal processing such as decoding processing according to the format of the transferred audio data, and outputs it to the audio input / output unit 9 as an analog audio signal. The audio input / output unit 9 includes a speaker or a headphone terminal, and amplifies the audio signal input from the audio processing unit 8, for example, and outputs the amplified audio signal from the speaker. Or it supplies to a headphone terminal. Further, for example, audio data reproduced from a medium may be output to the outside as audio signals and audio data in a predetermined format via the audio input / output unit 9 after undergoing audio signal processing of the audio processing unit 8 It is possible. In this case, the audio input / output unit 9 includes an audio output terminal corresponding to the format of the audio signal and audio data output from the audio processing unit 8.

A CPU (Central Processing Unit) 10 executes various control processes for the digital still camera 1 by executing a program. Various data processing for the semiconductor medium 20 described above is also realized by the CPU 10 executing a program. The ROM 11 stores various setting information used for the CPU 10 to execute processing in addition to various programs executed by the CPU 10. The RAM 12 is used as a work area when the CPU 10 executes processing according to a program, and holds data such as various arithmetic processing results.
The non-volatile memory 12a is formed of a memory element such as a flash memory that does not erase the stored contents even when the power supply is stopped, and data writing / reading is executed under the control of the CPU 10. The The data (information) to be stored in the nonvolatile memory 12a is generally setting information whose contents are appropriately changed, but is not particularly limited, and the actual specifications of the digital still camera 1 are not limited. It is sufficient to store various necessary information according to the above.

  In this case, the operation input unit 15 collectively indicates various controls provided in the digital still camera 1. For example, the operators in the operation input unit 15 include a shutter button operated at the time of taking a picture, an operator for selecting a shooting mode, an operator for increasing / decreasing parameters, and the like. Further, as the operation input unit 15, for example, a configuration for realizing an input operation as a GUI using the display screen of the display unit 7 may be provided.

  The communication unit 16 is a part configured by mounting hardware and software for communicating with an external device by a predetermined data communication method according to the control of the CPU 10. The data communication system supported by the communication unit 16 is not particularly limited regardless of whether it is wired or wireless, and the number of corresponding data communication systems should not be limited. At present, examples of data communication methods include a network such as Ethernet (trademark), a data bus standard such as USB (Universal Serial Bus), IEEE1394, and the like. In the case of wireless, short-range wireless communication between devices such as Bluetooth (trademark) and wireless LAN (Local Area Network) standards such as IEEE802.11a / b / g can be cited.

  The power supply unit 17 supplies operating power to various hardware devices in the digital still camera 1, and includes, for example, a power supply circuit that operates by receiving power supply from a battery or a power adapter.

As described above, the digital still camera 1 of the present embodiment can write and store (record) data on the semiconductor medium 20. In the case of a configuration in which data is recorded on the medium in this way, the possibility that the data writing is interrupted cannot be completely eliminated by shutting off the power supply during the execution of the data writing to the medium. . For example, when the battery capacity of the digital still camera 1 is below a certain level, or the AC adapter is unexpectedly disconnected or a power failure occurs when the digital still camera 1 is powered from the AC adapter. In addition, the power supply to the semiconductor medium 20 is also interrupted. Some digital still cameras have a structure in which the slot of the media and the storage position of the battery are exposed when the same housing cover is opened. In such a structure, generally, the power supply from the battery is stopped when the casing cover is opened. In this case, for example, if the user opens the housing cover unexpectedly even though data is being written to the medium, the power supply from the battery is interrupted. Data writing to the medium is also interrupted.
If data writing is interrupted in this way, the data will be stored on the medium with incorrect contents, and can be used normally even if the data is subsequently read from the medium. Disappear.
Therefore, in an apparatus or system that records on a medium, protection of the contents of the written data (interruptible data protection) should be achieved against interruption of data writing to the medium. Is preferable. Therefore, in the digital still camera 1 according to the present embodiment, as described below, the interruption-corresponding data protection for the semiconductor medium 20 is achieved.

  FIG. 2 schematically shows a storage area setting example of the semiconductor medium 20 corresponding to the interruption-protection data protection according to the present embodiment. In this figure, the entire logical storage area of the semiconductor medium 20 is shown. In addition, in the present embodiment, three areas of the first write area AR1, the second write area AR2, and the third write area AR3 are set in the storage area of the semiconductor medium 20. Each of these areas has a capacity sufficient to guarantee that the data to be protected, which will be described next, is completely stored. The first write area AR1, the second write area AR2, and the third write area AR3 need only have the same capacity, and if they are the same, the area management can be facilitated.

  The protection target data is specific data that is to be subject to protection against interruption among data to be stored in the semiconductor medium 20. The type of data that can be protected data may be a file, management information other than a file, some attached information, setting information, or the like. Further, the protection target data may be a group of a plurality of files and information included in a category with a predetermined significance.

Then, when this protection target data is to be written to the semiconductor medium 20, the procedure of steps S101 to S103 in the flowchart shown in FIG. 3 is executed.
In the first step S101, the protection target data is written and stored in the first write area AR1. When the writing of the protection target data to the first write area AR1 is completed, the protection target data is similarly written and stored in the second write area AR2 in the subsequent step S102. Further, when the writing of the protection target data to the second writing area AR2 is completed, the same protection target data is written and stored in the third writing area AR3 in the subsequent step S103. In other words, in the present embodiment, the same contents of the protection target data to be written to the medium are stored in the first writing area AR1, the second writing area AR2, and the third writing area AR3. It is made to write sequentially. With the procedure so far, it is considered that the writing of the protection target data to the semiconductor medium 20 is completed.
In the following description, the protection target data written in the first write area AR1 is Data1, the protection target data written in the second write area AR2 is Data2, and the protection target data written in the third write area AR3 is Also called Data3.

As described with reference to FIGS. 2 and 3, the protection target data is sequentially written in the first write area AR1, the second write area AR2, and the third write area AR3, thereby protecting the protection target data. Is protected against write interruption as follows.
FIG. 4A shows the procedure for writing the data to be protected described with reference to FIGS. 2 and 3 divided into periods corresponding to the progress of time. First, Data1 writing from time t1 to time t2 is shown. Has started from the period. This Data1 writing period is a period for writing the protection target data (Data1) to the first writing area AR1. When this Data1 write period t1 to t2 ends, the data to be protected (Data2) is written to the second write area AR2, followed by the Data2 write period t2 to t3, and further, the third write area AR3 is protected. The Data3 writing period t3 to t4 for writing the target data (Data3) continues. In this way, the write period of the protection target data to the first write area AR1, the write period of the protection target data to the second write area AR2, and the write period of the protection target data to the third write area AR3 are time periods, respectively. Will be different.

FIG. 4B shows the Data1 write period t0 to t1, the Data2 write period t2 to t3, the Data3 write period t3 to t4, and the periods before and after time t0 and after time t4 shown in FIG. As content states of Data1, Data2, and Data3 when interruption of writing of data to be protected occurs, the content match / mismatch state is shown. Further, FIG. 4C shows, for example, that data 1, Data 2, and Data 3 are normally read out and used according to the content match / mismatch state between Data 1, Data 2, and Data 3 shown in FIG. 4B. This is a list of data (valid data) that can be (valid).
In the following description, it is assumed that the writing of the protection target data in this case is rewriting (updating) of the protection target data already stored in the semiconductor medium 20. Further, it is assumed that the previous writing of the protection target data to the semiconductor medium 20 (the first data writing area AR1, the second data writing area AR2, and the third data writing area AR3) is normally completed.

First, in the period before time t0, new data to be protected is not written to the storage area of the semiconductor medium 20. Therefore, Data1, Data2, and Data3 have the same contents, and the contents at the previous writing are maintained. Therefore, as the state of content match / mismatch between Data1, Data2, and Data3 corresponding to this case, as shown in the leftmost column of FIG.
Data1 = Data2 = Data3
Can be represented by That is, “=” indicates that the contents of Data shown on both sides match. If “≠”, it indicates that the contents of Data shown on both sides do not match.
In this case, Data1, Data2, and Data3 are all contents before update. However, writing of Data1, Data2, and Data3 has been completed normally. Therefore, although there is no content that has been changed or added by updating, it can be read and used normally if it is in the state before updating. Therefore, in this case, as shown in FIG. 4C, all of Data1, Data2, and Data3 can be handled as valid data.

Next, it is assumed that an interruption occurs in the Data1 writing period t1 to t2. As a result, the updated data to be protected is written in an incomplete (unauthorized) state in the first write area AR1, whereas the second data write area AR2, the third data write area In AR3, the contents at the time of the previous writing are maintained.
Therefore, the content match / mismatch status between Data1, Data2 and Data3 in this case is
Data1 ≠ Data2 = Data3
It will be represented by
In this case, Data1 has incomplete (illegal) contents because writing is interrupted. Therefore, Data1 cannot be used normally even if it is read. In other words, it should be handled as invalid data. On the other hand, the remaining Data2 and Data3 are the contents before the update, but have been normally written, and can be normally read and used as the state before the update. Therefore, in this case, as shown in FIG. 4C, Data2 and Data3 can be handled as valid data.

Further, it is assumed that an interruption occurs in the Data2 writing period t2 to t3. The result in this case is that the updated protection target data is normally written in the first writing area AR1, but the updated protection target data is in an illegal state in the second data writing area AR2. It will be written. In addition, the content at the previous writing is maintained in the third data writing area AR3. Therefore, the content match / mismatch status between Data1, Data2 and Data3 in this case is
Data1 ≠ Data2 ≠ Data3
It is represented by
Further, according to the above, Data2 is invalid data and can be handled as invalid data. On the other hand, Data1 and Data3 are common in that both are normal data obtained by normally recording the data to be protected. However, in this case, the contents of Data1 and Data3 also have a difference that Data1 is the contents after the update and Data3 is the contents before the update. When pre-update information and post-update information exist, the new post-update information is more effective. Therefore, in this case, only Data1 having the updated contents is handled as valid data (FIG. 4C).

Further, it is assumed that an interruption occurs in the Data3 writing period t3 to t4. As a result, the updated protection target data is normally written in the first write area AR1, and the same updated protection target data is normally written in the second data write area AR2. Become. On the other hand, the updated protection target data is written in an illegal state in the third data writing area AR3. Therefore, the content match / mismatch status between Data1, Data2 and Data3 in this case is
Data1 ＝ Data2 ≠ Data3
It is represented by
In this case, Data1 and Data2 are data whose protection target data after the update is obtained normally. On the other hand, Data3 is invalid data. Therefore, valid data in this case is Data1 and Data2 (FIG. 4C).

If an interruption occurs after the period t4, in this case, the actual update of the protection target data is written in the first write area AR1, the second write area AR2, and the third write area AR3. All of them are normally terminated, and the updated data to be protected is held in each of the first write area AR1, the second write area AR2, and the third write area AR3.
Therefore, the content match / mismatch status between Data1, Data2 and Data3 in this case is
Data1 = Data2 = Data3
It will be represented by In this case, since the updated contents are normally obtained for all of Data1, Data2, and Data3, all of Data1, Data2, and Data3 can be handled as valid data.

  In this way, the content match / mismatch status between Data1, Data2, and Data3 depends on whether or not there was an interruption during data writing, and when there was an interruption. It can be seen that one of the four patterns shown in FIG. 4B is taken depending on which of Data1, Data2 and Data3 is being written. Further, as shown in FIG. 4 (c), it is handled as valid data from Data1, Data2, and Data3 according to the matching / mismatching state pattern of the contents of Data1, Data2, and Data3 thus obtained. You can also see that the list of things to do is determined.

Based on the contents shown in FIG. 4 above, in order to execute the predetermined processing in the present embodiment, when the protection target data is read and actually used, a procedure example as shown in the flowchart of FIG. can do.
First, in step S201, the first write area AR1 of the semiconductor medium 20 is accessed to read Data1, the second write area AR2 is accessed to read Data2, and in the next step S202, the read Data1, Compare the contents of Data2 to determine whether the contents of Data1 and Data2 match. That is, it is determined whether or not Data1 = Data2 is established.

According to FIG. 4, the positive determination result is obtained when Data1 = Data2 is established in the above step S202. According to FIG. 4, the writing (updating) of the protection target data to the corresponding semiconductor medium 20 before time t0 is still executed. This is the case when Data1 = Data2 = Data3, either when the data has not been written, or after the write of the protection target data to the semiconductor medium 20 corresponding to the time t4 and after has ended normally. Or, the interruption occurs in the Data3 writing period t3 to t4, and Data1 = Data2 ≠ Data3.
In these cases, in the former case, the valid data may be any one of Data1, Data2, and Data3, and in the latter case, the valid data is any one of Data1 and Data2. In the former and the latter, the common effective data is two, Data1 and Data2, but any one of the data actually used for processing may be sufficient. Therefore, in this case, Data1 is adopted as data used for actual processing among Data1 and Data2. Thus, in response to the affirmative determination result obtained in step S202, the process of setting to adopt Data1 as the data (usage data) actually used for the process is the process of step S205. Become. As can be seen from the above description, in Step S205, there is no particular reason to prevent the use of Data2 as the data to be used.

If a negative determination result is obtained in step S202, Data1 ≠ Data2. According to FIG. 4, this is true when data1 write period t1 to t2 is interrupted and Data1 ≠ Data2 = Data3, or data2 write period t2 to t3 is interrupted and Data1 ≠ Data2 ≠ Data3, which is one of the cases. In order to identify which of these cases, it is necessary to read Data3 and determine whether the contents of Data2 and Data3 match or do not match.
Therefore, in this case, the process proceeds to step S203 to access the third write area AR3 and execute the reading of Data3. In step S204, the contents of the read Data3 and Data2 are compared, and Data2 = It is determined whether or not Data3 is established.

If an affirmative determination result is obtained in step S204 that Data2 = Data3 is established, data2 is set to be used as data to be used in step S206. Thus, when a positive determination result is obtained in step S204, the content states of Data1, Data2, and Data3 are Data1 ≠ Data2 = Data3. The valid data corresponding to this is Data2 and Data3. Therefore, in step S206, Data2 is used as Data to be used from Data2 and Data3. In step S206, Data3 may be adopted as the used data.
On the other hand, if a negative determination result is obtained because Data2 = Data3 does not hold in step S204, the contents of Data1, Data2, and Data3 are Data1 ≠ Data2 = Data3, and the corresponding valid data is Data1. It becomes only. Therefore, in this case, the data 1 is set to be used as the data to be used in step S205.
Although not shown here, when processing is performed using the protection target data thereafter, the first writing area AR1 and the second writing area are used in accordance with the adoption results of the used data in steps S205 and S206. Data is read out by accessing either AR2 or the third write area AR3, and is stored in the RAM 12, for example. Then, using the data held in the RAM 12, the CPU 10 executes a required process. Since the data used by the CPU 10 at this time has normal contents as can be seen from the above description, a proper and normal result can be obtained even when processing using this data.

In addition to the procedure shown in FIG. 5, for example, first of all, Data1, Data2, and Data3 are read and the contents for these Data1, Data2, and Data3 are taken as processing for adopting the used Data from Data1, Data2, and Data3. A procedure may be used in which comparison is made and adoption of data to be used is determined based on the result.
However, as shown in FIG. 5, even if only Data1 and Data2 are first read and compared, if a result that Data1 = Data2 is obtained at this stage, the process goes from step S202 to step S205, for example. Data used can be determined like a processing sequence. In other words, as a procedure to determine the adoption of the data used based on the correspondence between the match / mismatch pattern of Data1, Data2, and Data3 determined according to the timing of interruption and the list of valid data corresponding to this pattern As a result, the data write interruption result can be obtained without specifying the timing of data write interruption (that is, which of the first to third write areas was interrupted when writing was performed). Appropriate protection target data can be selected from Data1, Data2, and Data3. In such a procedure of FIG. 5, there is a case where the used data can be appropriately adopted without reading Data3. In this case, the process of reading Data3 is omitted, and the number of times of accessing the semiconductor medium 20 is reduced correspondingly, which is advantageous in terms of speed, processing burden, etc. relating to media access, for example.

As described above, the interrupt-protection data protection configuration according to the present embodiment includes three areas (first to third write areas) for writing and storing data to be protected in the storage area of the semiconductor medium 20. Set. When the protection target data is written to the semiconductor medium 20, the protection target data is sequentially written to the first to third write areas.
First, writing is executed to any one of the first to third writing areas by sequentially taking the same data in a plurality of writing areas in this way. Even if the interruption sometimes occurs and the data in the area becomes invalid, the data stored in other writing areas is stored as normal data (including the contents before update). You can be assured. As a result, an effect of protecting data against interruption of data writing at a basic place is obtained.
In addition, in the present embodiment, the contents of the protection target data (Data1, Data2, and Data3) stored in the first to third write areas are compared to determine a match / mismatch state, and this determination result Based on the above, data to be used for actual processing is determined from those specified as valid data. That is, it is possible to discriminate between illegal data and normal data by a simple process called data content comparison, and to execute the actual process using this data normally.
For confirmation, even if there are two areas for writing data to be protected, basic data protection is achieved because normal data is secured in either one of the areas. However, in this case, only by comparing the data contents as described above, if the data contents do not match, it can be understood that one of the data is normal and the other is illegal. However, it is not possible to specify which data is normal or illegal.

By the way, as another method for protecting the data corresponding to the writing interruption, for example, a flag is generated according to the data writing result, and for example, this flag is referred to for specifying normal / invalid of data. It is also possible to adopt the following configuration. However, in this case, it is necessary to newly configure information (for example, table information) for managing flag data so that the table information can be managed. Such a configuration is correspondingly complicated in processing and burdens the processing.
On the other hand, in the present embodiment, as described above, normal data is secured with a simple configuration in which data to be protected having the same contents is written to different areas three times in succession, and Whether the data is normal / invalid is also a simple process of reading the data stored in these areas and comparing the content matches / mismatches. Further, there is no need for separate table information for flag management.

By the way, as described with reference to FIG. 1, the digital still camera 1 according to the present embodiment can store a still image file obtained by imaging in the semiconductor medium 20 loaded in the media slot 13. ing. The file stored in the medium in this way is normally managed by a file system having a predetermined format. Further, when media file management is performed by the file system in this way, the media is initialized (formatted) corresponding to the file system, and management information for file management in the media in the initialized data structure An area for storing various data (system data) for the file system including (file management information) is secured.
The present embodiment can also be configured such that the file recorded by the file system is performed on the file recorded on the semiconductor medium 20. In such a configuration, as described above, as a general rule, the storage area of the semiconductor medium 20 is initialized in accordance with a predetermined file system, and there is an area for recording system data in the structure. Will be provided.

As is well known, the above-described system data is information for properly executing various processes such as media activation and file access, for example, by the host, and when the system data is destroyed for some reason and becomes abnormal. , The processing for the media cannot be properly executed. For example, if the file management information is destroyed, the files stored in the medium so far may not be managed if they have been stored, or may not be read properly. It can be said that it is preferable that system data having such a property be protected as strongly as possible.
In addition, as a current way of thinking about file protection, if an interruption occurs while writing a file, the loss of the file being written is acceptable, but existing files other than the file being written are also accepted. The common belief that disappearance needs to be prevented is common. For this reason, devices that support various media are often required to prevent the loss of stored files. File management information in system data is updated as appropriate according to file recording (deletion, update), etc. Actually, it is updated (rewritten) on the media at a predetermined timing associated with file data writing. ) Is done. For example, even if an interruption occurs when writing system data to the medium due to writing of file data, etc., if the contents of the system data before the update are secured, Preventing the loss of existing files other than the existing file can be realized.
This will be compared with the interruption handling data protection of the present embodiment. Then, if the system data stored in the semiconductor medium 20 is the data to be protected, the files stored in the semiconductor medium 20 can be protected at the same time, which can be said to be effective.

Therefore, hereinafter, a description will be given of a configuration in the case where the data to be protected in the interruption handling data protection of the present embodiment is system data stored in the semiconductor medium 20.
It is assumed that the file stored in the semiconductor medium 20 is managed by a FAT (File Allocation Table) file system, which is one of the currently known file system formats. As is well known, the FAT file system manages files by a tree-type directory structure, and data writing / reading is performed by a logical minimum data management unit called a cluster. It is said that. A cluster is a unit obtained by collecting sectors, which are the minimum units of physical data writing / reading on a medium, into a predetermined number (generally, a number represented by a power of 2).

  First, in the semiconductor medium 20, a directory configuration example defined based on the FAT file system is as shown in FIG. In the directory structure shown in FIG. 6, one directory with the directory name SUB_DIR1 is placed immediately below ROOT. Then, an arbitrary number of files (FILE_1 FILE_2... FILE_N) are placed in the directory position immediately under SUB_DIR1 (in SUB_DIR1). These files are, for example, still image files as photographic images. Here, it is assumed that a new directory other than SUB_DIR1 is not created (FILE_N may be newly created).

  FIG. 7A shows a format (initialization) structure for the storage area of the semiconductor medium 20 based on the directory structure described with reference to FIG. The structure shown in this figure is logical according to LBA (Logical Block Addressing). In other words, the top sector is the top sector (LBA = 0), and the block (sector) number advances downward thereafter.

The format structure shown in FIG. 7A is roughly divided into a general format area and a spare area. The general format area is a storage area in which data management is performed by the FAT file system which the semiconductor medium 20 of the present embodiment originally corresponds. For example, when the media format is normally executed according to the FAT file system, it can be considered that the entire storage area of the media is formed as this general format area.
On the other hand, the spare area (non-general area) is an area that is not managed by the FAT file system. Therefore, the existence of this spare area is not particularly indicated depending on the system data of the FAT file system. For example, the file management information such as FAT and directory entry, which is file management information in the FAT file system, is referred to. However, the spare area cannot be accessed.
As described above, in order to form a spare area that is not managed by the FAT file system, the block range managed by the file management information of the FAT file system is set to be larger than the entire recording area range of the actual semiconductor medium 20. Set to the reduced predetermined range. In this case, the physical address range handled by the logical-physical address conversion table may correspond to the block range managed by the file management information.

The general area is further divided into a system area and a data area. In the system area, first, a boot area called MBR (Master Boot Record) is arranged. This MBR normally uses the first sector.
A PBR (Partition Boot Record) following the MBR is an area used for booting (starting) in units of partitions.

  Following the PBR, FAT areas are arranged in order. Normally, two FAT areas, FAT1 and FAT2, are formed, and one of these FAT areas is used as the main FAT area. The other FAT area is generally used as a spare area or backup area of the main FAT area, for example, as a mirror area obtained by copying the contents of the main FAT area.

  The information (FAT) stored in these FAT areas has a table information structure in which FAT entries are arranged in order of cluster numbers in the data area. There is a one-to-one correspondence between a FAT entry and a cluster in the data area. In the FAT entry, as information on the cluster, for example, unused or in the corresponding file, according to the directory and file storage results. Information indicating any one of a cluster number to be chained after the current cluster, a defective cluster, EOF (End Of File) is stored.

In this case, the area of the root directory entry (ROOT) is arranged after the FAT area. The root directory entry stores directory entries for directories and files in the root directory. According to FIG. 6, a directory entry for SUB_DIR1 is stored.
Following the root directory entry, a directory entry area corresponding to SUB_DIR1 is arranged. According to FIG. 6, a directory entry for a file (FILE_1 FILE_2... FILE_N) is stored.
The system data in this case is assumed to be an information unit composed of information (MBR, PBR, FAT, root directory entry, directory entry corresponding to SUB_DIR1) stored in the system area as described above.

  In this case, the area below the directory entry corresponding to SUB_DIR1 is the data area. Data as the substance of the file (FILE_1 FILE_2... FILE_N) is stored in this data area, and writing / reading of file data to / from the data area consists of the above FAT area information and directory entries. Managed by managed file management information.

  In the spare area, a first system data copy area and a second system data copy area are provided. The first system data copy area and the second system data copy area have a size capable of storing the system data stored in the general format area. The sizes of the first system data copy area and the second system data copy area may be the same.

  As described above, system data is treated as data to be protected here. According to FIG. 2, three areas of the first writing area AR1, the second writing area AR2, and the second writing area AR3 are provided in the medium in correspondence with the protection target data. FIG. 7B shows the correspondence relationship between the first write area AR1, the second write area AR2, and the second write area AR3 with respect to the format structure shown in FIG. As shown in this figure, the system area in the general format area corresponds to the first writing area AR1. The second system area AR2 corresponds to the first system data copy area in the spare area. The third writing area AR3 corresponds to the second system data copy area in the spare area. Therefore, the system data written in the system area is handled as Data1, the system data written in the first system data copy area as Data2, and the system data written in the second system data copy area as Data3.

FIG. 8 shows a program configuration for memory control for the semiconductor medium 20 implemented by the digital still camera 1 of the present embodiment as a hierarchical model in units of functional blocks. This block structure of memory control corresponds to the FAT file system. In the description here, it is assumed that the semiconductor memory element actually provided in the semiconductor medium 20 is a flash memory.
As is well known, the flash memory has a characteristic that data cannot be overwritten and should be written from an erased state. In addition, data is erased using a physical storage area unit called a block obtained by dividing a storage area as a flash memory into a predetermined size, and data writing is referred to as a page obtained by further dividing a block into a predetermined size. The storage unit is a minimum unit. It is also known that flash memory has a lifetime in the number of repetitions of erasure. For this purpose, data writing is performed as follows.

For example, when updating as data writing, data is read from a block in which data to be updated has already been written, and updated data using the read data and additional data for updating is used. Generate. Then, the updated data is written to another specific block that has been erased at this stage. In addition, the data is erased for the block in which the update target data has been written.
In other words, when data is updated, data is not written again to the block in which the data before update was written, but is written by selecting a block in another erased state (block replacement process). . As a result, it is possible to extend the lifetime of the entire flash memory by avoiding concentration of data erasing / writing on one block.
Then, in order to efficiently perform data management in response to the data update described above, the concept of logical address and physical address is introduced for block management, and this logical address and physical address are used. The writing / reading of data in the block unit with respect to the storage device is executed. For this purpose, a table (logical-physical address conversion table) indicating correspondence between the logical address and the physical address is provided as management information for managing writing / reading of data to / from the flash memory. By referring to this logical-physical address conversion table, for example, in a higher-level FAT (File Allocation Table) file system, it becomes possible to access the flash memory by the same mechanism as before.

In FIG. 8, a file management control block 101 provides a function for controlling directories and files in accordance with the format of the FAT file system, and the FAT file system manages the lower physical memory area management control block 102. The cluster to be converted is converted into a logical address, and a data write / read request is executed by designating the logical address.
The physical memory area management control block 102 converts a write / read request based on a logical address from the file management control block 101 into a physical address using the logical-physical address conversion table described above. Then, a physical address obtained by this conversion is designated, and a data write / read request is executed to the lower memory control block 103.
The memory control block 103 is a block corresponding to a so-called device driver, and accesses the block of the semiconductor medium 20 indicated by the physical address specified by the access request from the physical memory area management control block 102 to execute data writing / reading. To do.

  When the memory control block 103 reads data from the semiconductor medium 20, the read data is returned to the physical memory area management control block 102. That is, an access response is executed. When the physical memory area management control block 102 receives the data returned as the access response of the memory control block 103, it returns it to the file management control block 101 as the data of the requested logical address. When the memory control block 103 writes data to the semiconductor medium 20, the memory control block 103 notifies the physical memory area management control block 102 that the requested physical block has been written. And return the request. For example, in response to this, the physical memory area management control block 102 updates the logical-physical address conversion table and then writes the requested logical block data to the file control management block 101. The request is returned so as to notify that the execution has been executed.

By the file management control block 101, physical memory area management control block 102, and memory control block 103 described above, access to the general format area in the storage area of the semiconductor medium 20 shown in FIG.
In addition, in this embodiment, a program function for enabling access to the spare area is provided for the physical memory area management control block 102.
The program configuration shown in FIG. 8 is a program executed by the CPU in a device that is stored in, for example, the ROM 11 or the nonvolatile memory 12a and is a host (the digital still camera 1 in the embodiment) with respect to the semiconductor medium 20. And software processing realized by various firmware, middleware, and the like. In the case of the digital still camera 1 of the present embodiment, the program for each functional block shown in FIG. 8 is stored and retained in the ROM 11 or the nonvolatile memory 12a. The program is realized by developing the program in the RAM 12 and the CPU 10 executing the program.

  FIG. 9 is a flowchart showing a data writing process to the semiconductor memory 20 when the system data is the protection target data. The processing shown in this figure can be considered to be realized by the CPU 10 executing the program as the physical memory area management control block 102 in correspondence with FIG. The same applies to the flowcharts of FIGS. 10 and 11 described below.

  In the process shown in FIG. 9, the process waits for a data write request from the higher-level file management control block 101 to be received in step S301. If obtained, the process proceeds to step S302 and subsequent steps.

  In step S302, it is determined whether or not the data write request received in step S301 is for system data. In the present embodiment, it is assumed that writing of system data to the semiconductor medium 20 is performed each time when at least part of information elements forming the system data is changed. That is, the system data is updated. For example, according to FIG. 7A, the system data includes table information of the FAT area and file management information consisting of directory entries (ROOT, SUB_DIR1). Depending on new creation, deletion, modification, etc. of the file If the contents of the file management information are changed, writing as update of the system data is executed. In addition, for the convenience of explanation, the writing process as the update of the system data here rewrites the entire system data even if it is substantially a partial change (in the flash memory, the entire system data is erased). To write). In practice, the entire system data may be treated as being updated by rewriting only a partial area including the changed portion in the entire system data.

  For example, system data that has been adopted as use data as described later is read from the semiconductor medium 20 and expanded in the RAM 12 at the time of startup. The CPU 11 uses the system data developed in the RAM 12 to execute processing related to required file system operations such as file management. Here, as processing related to the file system, for example, it is assumed that file management information developed in the RAM 12 is changed according to some file operation. For example, when a change occurs in a part of the system data on the RAM 12 in this way, the write for updating the system data of the semiconductor medium 20 is reflected so that the change of the contents is reflected in the system data on the semiconductor medium 20. Will be executed. In this way, the contents of the system data on the RAM 12 and the system data stored in the semiconductor medium 20 are matched. At this time, the file management control block 101 issues a system data write request to the physical memory area management control block 102 by designating a logical address. When the physical memory area management control block 102 recognizes that this logical address corresponds to system data, a positive determination result is obtained in step S302.

If a positive determination result is obtained in step S302, the process proceeds to step S303. In step S303, a system data writing process is executed.
In this case, since the system data is data to be protected, the processing in step S302 executes processing corresponding to steps S101, S012, and S103 in FIG. That is, as step S101, the system area (first write area AR1) in the general format area is accessed, and the system data (Data1) developed in the RAM 12 is written. Next, in step S102, the first system data copy area (second write area AR2) in the spare area is accessed, and the system data (Data2) that is also expanded in the RAM 12 is executed. Next, in step S103, the second system data copy area (third write area AR3) in the spare area is accessed, and the system data (Data3) that is also expanded in the RAM 12 is executed.

Here, when the file management control block 101 requests writing of system data, a logical address associated with the system data is designated. In step S 101, the physical memory area management control block 102 normally refers to the logical-physical address conversion table and converts it into a physical address, and executes a data write request to the memory control block 103. As a result, the memory control block 103 accesses the system area in the general format area and executes data writing. That is, the system data stored in the system area is updated.
On the other hand, in step S102, the physical memory area management control block 102 designates the physical address of the first system data copy area held in advance, for example, without using the logical-physical address conversion table. Then, a data write request is executed to the memory control block 103. The memory control block 103 executes data writing to the designated physical copy. As a result, in step S102, the system data (Data2) is written to the first system data copy area.
Similarly, in step S103, the physical memory area management control block 102 designates the physical address of the second system data copy area, executes a data write request to the memory control block 103, and executes the memory control block 103. Performs data writing to the designated physical copy. As a result, in step S103, the system data (Data3) is written to the second system data copy area.

  On the other hand, if a negative determination result is obtained in step S302 that the current write request is not for system data, the process proceeds to step S304, where the file management control block stores the data requested for writing. A process for normal writing is executed according to the specified logical address. That is, the specified logical address is converted into a physical address with reference to the logical-physical address conversion table. Then, a data write request is made to the memory control block 103 using this physical address.

FIG. 10 shows a process for determining system data to be developed in the RAM 12 and actually used in accordance with the mounting process of the semiconductor medium 20. The mounting process is executed by the CPU 10 as the host in response to, for example, the semiconductor medium 20 being loaded in the media slot 13 and being supplied with power and activated. Alternatively, in a state where the semiconductor medium 20 is still loaded in the media slot 13, the digital still camera 1 is switched from the power-off state to the on state, and in response thereto, the host device is activated in response to the activation of the semiconductor medium 20. As a result, the CPU 10 executes.
In the process shown in this figure, first, the process waits for the mount process for the semiconductor medium 20 to be executed in step S401. If the mount process is executed, the process proceeds to step S402.

The processing in step S402 is used data determination processing. In other words, the system data (Data1, Data2, Data3) stored in the system area, the first system data copy area, and the second system data copy area are expanded in the RAM 12 and actually used. It is a process to decide.
In step S402, the process shown in FIG. 5 is executed. That is, as step S201, the physical memory area management control block 102 executes reading of system data in the system area that is Data1 and reading of system data in the first system data copy area that is Data2. At this time, when reading the system data of the system area, the physical memory area management control block 102 refers to the logical-physical address conversion table, converts the logical address associated with the system data into a physical address, A data read request is executed to the memory control block 103 by designating this physical address.
On the other hand, the system data in the first system data copy area is read by designating the physical address of the first system data copy area previously held in the physical memory area management control block 102 and requesting the memory control block 103 to read the data. Execute.

In step S202, the determination processing as to whether or not Data1 = Data2 is satisfied is compared with the contents of the system data in the system area and the system data in the first system data copy area read out by the processing in step S201. By doing. If a negative determination result is obtained in step S202, the process proceeds to step S205, and system data in the system area that is Data1 is adopted as use data.
On the other hand, if a negative determination result is obtained in step S202, the process proceeds to step S203, and reading of the system data in the second system data copy area which is Data3 is executed. Also at this time, the physical memory area management control block 102 executes a data read request to the memory control block 103 by designating the physical address of the second system data copy area held in advance, for example.

  In step S204, it is determined whether or not Data2 = Data3 is satisfied by comparing the contents of the system data in the first system data copy area read in step S201 and the system data in the second system data copy area. To do. If a positive determination result is obtained in step S204, the process proceeds to step S206, and the system data in the first system data copy area, which is Data2, is adopted as use data. On the other hand, if a negative determination result is obtained in step S204, the process proceeds to step S205, and system data in the system area that is Data1 is adopted as use data.

Returning to FIG.
After the system data as the use data is decided to be adopted by the process of step S402 executed as described above, the identification number of the system data decided as the use data is held in the RAM 12, for example, at step S403. Here, the identification number is 1 for system data (Data 1) in the system area, 2 for system data (Data 2) in the first system data copy area, and 3 for system data (Data 3) in the second system data copy area. Suppose that

By the way, in the description of FIG. 4 and FIG. 5, when there are a plurality of valid data determined in accordance with the result of the write interruption of the protection target data, any valid data is selected from the plurality of valid data. It is supposed to be adopted as use data.
Also in step S402 of FIG. 10 described above, any valid data may be determined to be used as use data in the same manner. However, in accordance with step S205 shown in FIG. In the case of FIG. 10, the following advantages are obtained by giving priority to Data1.
That is, the system data that is data to be protected here is Data1 that is stored in the system area in the general format area. This system data is stored in an area for regular system data in accordance with a normal FAT file system format.
On the other hand, the system data as Data2 and Data3 is stored in a spare area outside the general format area. Considering the processing efficiency and stability related to the file system, it is preferable to use the system data in the general format area as a storage area for regular system data as much as possible. In the present embodiment, by adopting the processing shown in FIG. 5 as step S402, the system data in the general format area can be set as use data as much as possible. Therefore, the efficiency of the processing related to the above file system , Stability, etc. will be maintained.

In addition, when the system data is the protection target data, the second write area AR2 and the third write area are excluded from the general format area and set for the spare area. This is a result of considering the efficiency and stability of the processing related to. For example, it is also conceivable to store a plurality of system data having the same contents in a single system area. However, as a practical matter, the system data is not generally overwritten in one system area, and the algorithm configuration for system data processing can be constructed on the premise of this. Many. Therefore, when multiple system data are written in one system area, it is necessary to change to an algorithm corresponding to this. As a result, the processing efficiency and stability described above may be lacking because the processing algorithm is slightly complicated.
The same applies to the case where data other than system data such as a file is to be protected. For example, when a file is set as data to be protected and all areas of the first writing area, the second writing area, and the third writing area are formed in the data area in the general format area, 1 from the application side In response to a write request for one file, it is necessary to change the structure of the file management information and the file management process so that data can be written and managed in these three areas. That is, even when data other than system data is protected, it is effective to set a write area for a spare area.

  In this embodiment, the physical memory area management control block 102 is used to write system data to the first system data copy area and the second system data copy area in addition to the system area. However, if the program corresponding to such area setting is compared with the table information for flag management as described above, the burden of the change is light. In addition, the processing sequence can be kept simple and simple.

The flowchart of FIG. 11 shows processing that is executed by the physical memory area management control block 102 in response to a data read request from the file management control block 101.
Here, in step S501, the process waits for a data read request from the file management control block 101 to be received. When a data read request is received, the process proceeds to step S502 and subsequent steps.

  In step S502, it is determined whether or not the read request received corresponding to step S501 is a system data read request. If a positive determination result is obtained, the process proceeds to step S503.

  In step S503, the system data identification number determined as data to be used, which is held by the process in step S403 in FIG. 10, is referred to. In step S504, the subsequent processing sequence is determined according to the identification number referred to in step S503.

Step S504 determines that the process of step S505 should be executed if the identification number = 1.
In step S505, Data1 is read. For this purpose, the memory control block 103 is requested to read data by specifying the physical address of the system area in the general format area. As a result, the system data (Data 1) stored in the system area is read out and held in the RAM 12 so as to be expanded.

In step S504, if the identification number = 2, it is determined that the process in step S506 should be executed.
In step S506, Data2 is read. For this purpose, the memory control block 103 is requested to read data by designating the physical address of the first system data copy area in the spare area. As a result, the system data (Data 2) stored in the first system data copy area is read out and stored in the RAM 12 so as to be developed.

In step S504, if the identification number is 3, it is determined that the process in step S507 should be executed.
In step S507, in order to read Data3, the memory control block 103 is requested to read data by specifying the physical address of the second system data copy area in the spare area. As a result, the system data (Data 3) stored in the second system data copy area is read out and held in the RAM 12 so as to be expanded.

  Thereafter, the CPU 10 (such as the file management control block 101) appropriately executes the required processing using the system data developed in the RAM 12 by any one of the above steps S505, S506, and S507. As can be understood from the above description, the system data expanded in the RAM 12 by the processes of steps S505, S506, and S507 normally have contents at the time of the last update or before the last update. Therefore, the process using the stem data is normally executed.

  If a negative determination result is obtained in step S502 that it is not a system data read request, the process of step S508 is executed. In step S508, normal data reading processing other than system data (protection target data) is executed. That is, the logical address specified together with the read request by the file management control block 101 is converted into a physical address, and this physical address is specified, and a data read request is made to the memory control block 103.

  By the way, as described so far, the semiconductor medium 20 of the present embodiment has a flash memory as a semiconductor memory element, for example, and a logical-physical address conversion table is constructed for data write / read management. The information of the logical-physical address conversion table is stored and held. When the information in the logical-physical address conversion table is destroyed and becomes abnormal, for example, the correspondence between the logical address and the physical address for the data stored in the semiconductor medium 20 cannot be taken, and normal data management is performed. become unable. Therefore, in practice, this embodiment preferably protects not only the above-described system data but also the logical-physical address conversion table.

Therefore, a configuration for protecting the logical-physical address conversion table together with the system data as the protection target data will be described with reference to FIG.
FIG. 12A shows a semiconductor media storage area similar to that of FIG. The structure of the storage area shown in FIG. 12A is according to the logical address, and schematically shows the logical address space. Here, the logical address space is assumed to be a range from logical addresses 0 to N. On the other hand, FIG. 12B schematically shows the physical address space of the semiconductor medium 20. The physical address space here is assumed to be in the range of physical addresses 0 to M.

In this case, the physical address space in FIG. 12B includes, for example, an address conversion target area by an upper continuous physical address area and an address conversion non-target area by a lower continuous physical address area. Broadly divided.
The address conversion target area is an area managed by the logical-physical address conversion table. In this case, as can be seen from the correspondence between FIG. 12A and FIG. 12B, the entire area shown in FIG. 12A corresponds to the address conversion target area. That is, in this case, not only the general format area (system area and data area) but also the spare area (first system data copy area and second system data copy area) are included.

  In the address translation target area in the physical address space, the system area, the file (FILE) stored in the data area, the first system data copy area, and the second system data according to the contents of the actual logical-physical address translation table Each data in the copy area is stored in the order of physical addresses. For confirmation, the data arrangement in the address conversion target area is changed in accordance with the physical replacement process of the data write block according to the data update or the like. To get.

In addition, the address conversion non-target areas in the same physical address space include three areas of the first conversion table writing area, the second conversion table writing area, and the third conversion table writing area as areas including successive physical addresses. Set one area. In this example, the entire area as the address conversion non-target area is divided into three equal parts by the first to third conversion table writing areas, but a part of the address conversion non-target area is a first predetermined area. ˜Used for the third conversion table writing area, the remaining area in the address conversion non-target area may be a free area or an area used for other predetermined purposes. .
Each of the first to third conversion table write areas is an area for writing and storing information of the same logical-physical address conversion table, and a first write area AR1 for the logical-physical address conversion table. The second write area AR2 and the third write area AR3. That is, as data of the logical-physical address conversion table, data to be written to the first conversion table writing area is Data1, data to be written to the second conversion table writing area is Data2, and the third conversion table is written. Data to be written to the area is Data3.
In addition, as processing for protecting the logical-physical address conversion table, data writing (FIG. 9) and logical-physical address conversion as used data are performed in accordance with the procedure described above with reference to FIGS. The determination of the table (FIG. 10) and the processing (FIG. 11) according to the read request of the logical-physical address conversion table may be executed. Further, the processing in this case may also be handled as being realized by the CPU 10 executing a program as the physical memory area management control block 102.

In addition, this invention is not limited to the structure as embodiment described so far. First, for confirmation, the protection target data may be set to an appropriate type and content according to actual use. For example, in the system data shown in FIG. 7A, the update frequency is high in file management information including FAT area table information and directory entries (ROOT, SUB_DIR1). Considering this, it is also conceivable to set only the file management information from the system data as the protection target data.
In this embodiment, three areas of the first to third writing areas are used as areas for recording the protection target data. However, four or more areas for recording the protection target data may be set. Even if four or more areas for recording data to be protected are set, data protection against writing interruption and identification of effective data to be protected can be performed in accordance with the description and configuration described above.
In the above embodiment, a digital still camera is taken as an example. However, as an apparatus having the information processing configuration of the present invention, data writing / reading is executed corresponding to a predetermined recording medium (storage medium). If possible, there should be no particular limitation. Also, the type of recording medium (storage medium) is not limited to the one provided with the semiconductor memory element (nonvolatile memory), and various types are conceivable including hard disks, optical disk-shaped recording media, magnetic recording media, and the like.
It is also conceivable to provide and distribute the program as the present invention by storing it in various storage media and recording media, for example. Various predetermined devices having an information processing function such as a personal computer can obtain the functional operation described in the embodiment, for example, by executing a program read from a recording medium.

It is a block diagram which shows the structural example of the digital still camera of embodiment of this invention. It is a figure which shows the concept of the storage area setting of the semiconductor media corresponding to interruption corresponding | compatible data protection of this Embodiment. It is a flowchart which shows the write-in procedure of the protection target data in this Embodiment. In this Embodiment, it is a figure which shows the concept of the data protection with respect to the write interruption about protection object data. In this Embodiment, it is a flowchart which shows the example of a procedure for determining the protection object data (use data) used for a process. It is a figure which shows the example of a directory structure of a semiconductor medium in case system data is made into protection object data as embodiment. It is a figure which shows the format structure of a semiconductor medium in case system data is made into protection object data as embodiment. In an embodiment, it is a figure showing a control block structure for controlling semiconductor media. 6 is a flowchart showing a data writing process when system data is to be protected as an embodiment. It is a flowchart which shows the process for determining the use data in the case of making system data into protection object data as embodiment. It is a flowchart which shows the process for reading use data in the case of making system data into protection object data as embodiment. It is a figure which shows the format structure of a semiconductor medium in case system data and a logical-physical address conversion table are made into protection object data as embodiment.

Explanation of symbols

  1 digital still camera, 2 optical system unit, 3 photoelectric conversion unit, 4 image signal processing unit, 5 image input / output unit, 6 camera function unit, 7 display unit, 8 audio processing unit, 9 audio input / output unit, 10 CPU, 11 ROM, 12 RAM, 12a Non-volatile memory, 13 Media slot, 15 Operation input section, 16 Communication section, 17 Power supply section, 20 Semiconductor media, 101 File management control block, 102 Physical memory area management control block, 103 Memory control block

Claims (7)

Recording means for recording data on a recording medium;
When recording the protection target data on the recording medium, recording of the same protection target data for each of the three or more protection target data recording areas set in the recording area of the recording medium is sequentially performed in a predetermined order. Recording control means for controlling the recording means;
An information processing apparatus comprising: The recording control means includes
One or more first type protection target data recording areas set in a general area, which is a recording area where data management is performed under a predetermined initialization structure that the recording medium originally corresponds to, and the first type protection target data A protection target data recording area other than the recording area, and a second type protection target data recording area set as a non-general area which is a recording area where data management is not performed under the initialization structure. , Record the protected data,
The information processing apparatus according to claim 1. When recording the protection target data on the recording medium by the recording means for recording data on the recording medium, the same protection target data is recorded for each of the three or more protection target data recording areas set in the recording area of the recording medium. A recording control procedure for controlling the recording means to be sequentially executed according to a predetermined order;
The information processing method characterized by performing. When recording the protection target data on the recording medium by the recording means for recording data on the recording medium, the same protection target data is recorded for each of the three or more protection target data recording areas set in the recording area of the recording medium. A recording control procedure for controlling the recording means to be sequentially executed according to a predetermined order;
For causing an information processing apparatus to execute the program. Reading means for reading data from the recording medium;
When reading the protection target data from the recording medium, from among three or more protection target data recording areas that are set so that writing of the same protection target data is sequentially performed in the recording area of the recording medium, Reading control means for controlling the reading means so that reading of the protection target data recorded in the required protection target data recording area is executed;
Comparison means for performing content comparison on the protection target data read from different protection target data recording areas under the control of the read control means,
Determining means for determining protection target data to be adopted as a processing target thereafter from among the protection target data recorded in each of the three or more protection target data recording areas based on the comparison result of the comparison means; ,
An information processing apparatus comprising: When reading data to be protected from the recording medium by reading means for reading data from the recording medium, the same data to be protected is set to be sequentially written in the recording area of the recording medium. A reading control procedure for controlling the reading means so that reading of the protection target data recorded in the required protection target data recording area from among the three or more protection target data recording areas;
A comparison procedure for performing a content comparison on the protection target data read from the different protection target data recording areas by the read control procedure;
A determination procedure for determining protection target data to be adopted as a processing target in the following from the protection target data recorded in each of the three or more protection target data recording areas based on the comparison result of the comparison procedure; ,
The information processing method characterized by performing. When reading data to be protected from the recording medium by reading means for reading data from the recording medium, the same data to be protected is set to be sequentially written in the recording area of the recording medium. A reading control procedure for controlling the reading means so that reading of the protection target data recorded in the required protection target data recording area from among the three or more protection target data recording areas;
A comparison procedure for performing a content comparison on the protection target data read from the different protection target data recording areas by the read control procedure;
A determination procedure for determining protection target data to be adopted as a processing target in the following from the protection target data recorded in each of the three or more protection target data recording areas based on the comparison result of the comparison procedure; ,
For causing an information processing apparatus to execute the program.

Images