JPH02196341A - Fault restoring system for information processor - Google Patents

Abstract

PURPOSE:To minimize the intervention of an operator without switching on and off a power supply and to shorten the restoring time by detecting automatically the occurrence of a fault and reloading and restarting the task that caused the fault. CONSTITUTION:When an error is displayed during the execution of a process to inhibit the input/output operations and the normal working is impossible, a task monitor means 13 detects the occurrence of a fault. Then a protection violation processing means 14 checks the task that had a protection violation in the case an interruption is applied due to the destruction of an area and the execution of an improper instruction. In this case, a reloading/restarting means 15 is started by the means 14 or the means 13 to reload or restart the task that caused the fault. Thus it is possible to minimize the intervention of an operator without switching on and off a power supply and to shorten the restoring time.

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial Field of Application] The present invention is applied to an information processing device. The present invention is a general-purpose terminal (
personal computers, office computers, etc.)
The present invention relates to a method for recovering from failures that occur during the operation of information processing equipment such as terminals and dedicated terminals (PO3 terminals, financial terminals, etc.).

〔overview〕

The present invention provides a fault recovery method for an information processing device having multiple tasks connected to a central processing unit, by automatically detecting the occurrence of a fault, and reloading and restarting the task that caused the fault. This eliminates the need to turn the power off and on, minimizing operator intervention and shortening recovery time.

[Conventional technology]

There are many possible causes of failures in information processing equipment, such as memory corruption due to noise and malfunctions, but conventionally, when such failures occur, operators can confirm the failure by displaying an error message or by not being able to operate. and was undergoing recovery processing.

However, the current situation is that users do not want to intervene as much as possible, and automatic recovery is desirable.

An example of a conventional recovery method when a failure occurs is shown in FIG. 7, and will be explained below with reference to the same figure.

With conventional failure recovery methods, if memory corruption or malfunction due to noise occurs during normal business operations (step 71), or if an error is displayed (step 73), subsequent operations are not guaranteed. Therefore, it is necessary to turn off the transformer power (step 74).
), and then turned on the power again (step 75) and performed manual work such as running a recovery utility (step 76), thereby making it usable and operating it.

[Problem that the invention seeks to solve]

The conventional failure recovery method described above is to turn off the power.

It is accompanied by ON, requires operator intervention for recovery work, and has the disadvantage that recovery time is required due to the operator's intervention.

The present invention eliminates such drawbacks, and
The present invention aims to provide a failure recovery method that can avoid F,ON, minimize operator intervention, and shorten recovery time.

[Means for solving problems]

The present invention provides a failure recovery method for an information processing device connected to a central processing unit equipped with a basic operating system means and controlling a plurality of tasks, in which an error is displayed on the basic operating system means during processing. a task monitoring means for detecting the occurrence of a failure when input/output is disabled and normal operation is no longer possible; a protection violation processing means for checking a task that has caused a protection violation when an interrupt occurs due to area destruction or execution of an illegal instruction;
The present invention is characterized in that it includes reload/restart means for reloading and restarting the task that is activated by the protection violation processing means or the task monitoring means and causes the failure.

[Effect]

When an error is displayed during processing, input/output is disabled, and normal operation is no longer possible, the task monitoring means detects the occurrence of a failure, and when an interrupt occurs due to area destruction or illegal instruction execution, the protection violation handling means is activated. Check the task that caused the protection violation. At this time, the reload/restart means is activated by the protection violation processing means or the task monitoring means to reload or restart the task that caused the failure. As a result, the operator's intervention can be minimized and the recovery time can be shortened without turning the power off and on.

〔Example〕

Next, embodiments of the present invention will be described based on the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention, and FIG. 2 is a flow chart showing the flow of operation of the embodiment of the present invention.

The information processing device 11 according to the embodiment of the present invention performs tasks 16-1 to 16-1.
6-0 and a basic operating system means 12, the basic operating system means 12 has a task of detecting the occurrence of a failure when an error is displayed during processing execution and input/output is disabled and normal operation is no longer possible. A monitoring means 13, a protection violation processing means 14 that checks a task that caused a protection violation when an interrupt occurs due to area destruction or illegal instruction execution, and a protection violation processing means 14 that is activated by the protection violation processing means 14 or the task monitoring means 13 to detect a failure. reload/restart means 15 for reloading or restarting the task that caused the problem.

As shown in FIG. 3, each task 16-1 to 16-n performs one of processes 33-1 to 33-n for each process, and if there is no normal process, each task 16-1 to 16-
n is in a waiting state for processing, and when some processing request occurs, it exits from this state and performs processing 33-1 to 33-n.

At this time, when a task investigation command is issued by the task monitoring means 13, the process is transferred to the normal operation response processing 36, and a message indicating that the task is operating normally is sent back.

If the task cannot be operated due to a failure or the like, the task cannot be returned, and the task monitoring means 13 detects the occurrence of the failure.

As shown in FIG. 4, the task monitoring means 13 issues a monitoring command to certain tasks 16-1 to 16-n (step 42), and receives a normal operation response 3 from the issued task.
6, it is assumed that the task is operating normally, and the monitoring timer setting (step 41) is cleared (step 46), and a monitoring command is issued to the next task (step 46).
Step 42). If the task is stalled, the monitoring timer set earlier will time out because a normal operation response cannot be returned. At this time, it is determined that it is stalled, and the status is logged for later investigation (step 43), and information to be used by the reload/restart means 15 is set (step 44), the reload/restart means 15 (step 45).

The protection violation processing means 14 is as shown in FIG. 5, and is part of the interrupt processing function of the basic operating system means 12, and control is passed to this function when an interrupt occurs due to area destruction or illegal instruction execution. . Here, the task that caused the protection violation is checked (step 51), logging (step 52), failure task information setting (step 53), and reload/restart means 15 are activated (step 54). .

Further, as shown in FIG. 6, the reloading/restarting means 15 is normally in a startup waiting state (step 61), but if it is activated by the task monitoring means 13 or the protection violation processing means 14, a failure occurs. The tasks are checked (step 62), and then the failed task is deleted (step 63) and reloaded (step 64). After the reloading is completed, the task is restarted (step 65), and affected locations such as files are checked and recovery processing is performed (step 66).

〔Effect of the invention〕

As described above, according to the present invention, it is possible to avoid turning off the power and turning off the power at the time of failure recovery, to minimize operator intervention, and to shorten the recovery time.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention. FIG. 2 is a flow chart of the operation of the embodiment of the present invention. FIG. 3 is a diagram showing the flow of operations of each task in the embodiment of the present invention. FIG. 4 is a diagram showing the flow of operation of the task monitoring means according to the embodiment of the present invention. FIG. 5 is a diagram showing the flow of operation of the protection violation processing means according to the embodiment of the present invention. FIG. 6 is a diagram showing the flow of operation of the reload/restart means according to the embodiment of the present invention. FIG. 7 is a flowchart showing the operation flow of the conventional example. 11... Information processing device, 12... Basic operating system means, 13... Task monitoring means, 14.
... protection violation processing means, 15 ... reload/restart means, 16-1 to 16-n... tasks.

Claims (1)

[Scope of Claims] 1. In a failure recovery method for an information processing device that is connected to a central processing unit equipped with basic operating system means and controls a plurality of tasks, the basic operating system means has error recovery during processing. A task monitoring method that detects the occurrence of a failure when a message is displayed and input/output is disabled and normal operation is no longer possible, and a protection violation that checks for a task that caused a protection violation when an interrupt occurs due to area destruction or illegal instruction execution. Information processing characterized by comprising: a processing means; and a reloading/restarting means for reloading and restarting the task that is started by the protection violation processing means or the task monitoring means and causes the failure. Equipment failure recovery method.