TW201207731A - Embedded system with plural firmware and firmware updating method thereof - Google Patents

Abstract

An embedded system with plural firmware and firmware updating method thereof are disclosed. The system includes a processor, a main memory, and plural system firmware stored in plural storage block. The method includes: receiving an update firmware; searching for the address of the storage blocks and determining a working firmware and a non-working firmware among the system firmware in the blocks; replacing the non-working firmware with the update firmware; comparing the version data of the update firmware and the working firmware, to determine whether the update firmware is an upgrade version or a downgrade version; setting up an update flag to indicate the upgrade or the downgrade version; and reboot the embedded system and select one of the system firmware stored in the storage blocks according to the update flag.

Description

201207731 VI. Description of the invention: [Technical field of invention] n θ 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋 疋A method of updating between its multiple firmwares. [Prior Art] The functions of electronic products, with the rapid development of technology and often more nuclear expansion, especially for consumer electronic products embedded in the system, often through (four) updated way, the new version _ body replaced electricity Γ Originally applied to _ body, modify Wei's Gu, or increase and strengthen its functions to enhance the use of products.

However, the most common problem encountered by users in performing in-app update for embedded systems is to update the flow of money to make mistakes in the line, or to update the process to be difficult to understand, which leads to the failure of the body update. When the Bo Bo body is lost, the user will not be able to enjoy the benefits of improving the product's use efficiency. It is possible that even the original function will be damaged due to the damage of the original (4) body during the update process. Such frustration not only causes users to produce maintenance costs due to the failure of electronic products, but also allows manufacturers to witness the time and cost of products, which hinders the speed of technological development. Therefore, how to enable electronic products to provide services with the updated Weishang body, and even to maintain the operation of electronic products after the failure of the update, is an issue of inquiry. '', value 4/24 201207731 SUMMARY OF THE INVENTION The present invention provides an embedded system with a plurality of system firmware, and the embedded system firmware update method to ensure that the embedded system can be loaded after the update The system firmware, and avoids the embarrassment of the update process and crashes the embedded system. s / / For the above purpose, one aspect of the present invention provides an embedded system firmware update method, the embedded system includes a processing unit, a main memory unit, and a plurality of system firmware, the system firmware respectively - The spoon is stored in a plurality of storage blocks of a storage unit. One method embodiment package f: the embedded system receives an initial update of the version data in the user environment; searches for the address of the storage block; and identifies the object in the blade body - the object and the # use the body, Among them, each system has its own version of the corresponding version of the data; it will be updated by the secret writers; the storage block will replace the non-used blade as the embedded system (4)_ Body; comparison to make the version of the annihilation and the version of the secret to be updated is the upgrade version of the use of the squadron or the retrograde version Γ 设置 — — 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 更新 湖 湖 湖 湖 湖 湖 湖 湖 湖 湖 湖The human system, and from the storage area = data corresponds to the updated parameters of the system - system. The entry system, the present invention _ another - transfer provides - the recording of the embedded memory unit and the application of the "including: - storage unit, a main parameter (four) early 疋. Storage material and financial complex storage block and a system object ^ 1, the mother-storage block is used to store the system-body, each out-upgrade version corresponds to the version data of the Gom, and the parameter record block record indicates that the storage version is newer. The main memory unit is used for 4 halls. One of the system models is the medium body, so that 5/24

C 201207731 t = two. The processing unit receives the to-be-more body including the version data, and will wait for the storage block of the Kawasaki in use: = body, = inversion_update_version_, to set the update parameter for embedding When the system is restarted, the system is mounted according to the instructions of the update parameters. For the content and implementation, please refer to the following drawings and examples. [Embodiment] The first figure is an embedded system according to the embodiment of an embedded system embodiment provided by the present invention! The storage unit 1G' is a main unit 12, the processing unit 14, and the network control unit 16. The storage unit 10 further includes a boot management module 100 having a fine selection module 2, a parameter recording block 102, and a plurality of storage blocks. The parent-storage block mapping-system collet; in other words, the embedded system 1 of the present embodiment includes a plurality of system-like blades. The storage unit 70 10 described in this embodiment may be a flash memory, and the storage block may be a silk analog block device (mbek's memory technology device partition (mtdbbek), The _ body can be a root file system (deleting file system). This embodiment is illustrated by two storage blocks: a first storage block 1〇4 and a second material block 106. The first storage block just Mapping the first body, the first storage block maps the second body. The storage block, the system of the system is the image, when the embedded system j is started, the processing unit] According to the control of the boot management module 1 , 6/24 201207731 = image miscellaneous (_nt) of the residual body to the main memory unit 12 to provide a user environment for user operation. The header of the image slot (heade〇 records the version number of the file, which can be used to identify the order in which different systems are developed or released. - As stated, the larger the version number represents the release of _ ^ The later the time, the newer the program content. In this embodiment, 'the first firmware and the first The versions of the two firmwares are different. First, the figure provides an embodiment of a method for updating the embedded system. The monthly reference block diagram of the embedded system is shown in the figure to facilitate the understanding of the line-by-line implementation. The components of the financial __ and its use, as well as the process of firmware update. The field, the input system 1 has been mounted with the first blade or the second blade to the main memory and entered the user environment, the user 対 update ( uPdate) The demand can be processed by the processing unit 14 through the network control unit 16 or the website, and the UI to be updated is also updated to be compatible with the embedded system! The received standby body is verified by the qualification (S2〇3), for example, by verifying the body of the blade, or by using the cyclic redundancy check (such as CRC32) method to ensure the embedding. The system and system 1 received the #新#blade and the supplier provided the same body. ', 4 brother-^' and the first storage block mapped by the system _ body just 7/24 201207731 and The location of the second storage block 106 is to identify the remaining body (S2G5) to be replaced. $Update Lecher Processing The element 14 can determine the current number according to the second number of the main memory unit 12, or the (-) body of the second (4) and the second (4) of the second storage body corresponding to the storage unit 丨. In use (4), the same day; the same day ^ = different embedded systems 1 to the storage unit 1G block design search t system _ body in the storage WG mapped to the storage block where the current time (four), you can also know The storage block of the non-❹ (four) body μ = (for example, in the order of the opening age group (10) after the number block 102.) ^ For example, for example, in the Linux system platform, the storage unit 1 is virtualized as a block. When the device is used, the first memory technology device partition can be a smart table of other blocks, and the second memory technology partition may place relevant parameters, and the next third and fourth = device partitions may The first and second _ are stored in sequence; when: the location and order of the partitions will be different with the system used. If it is reduced to the first body in use, the non-use object is a body. Thereby, the processing unit Μ can decide to write the _authenticated body to the second storage block corresponding to the second secret, instead of the original second welcoming body. This embodiment updates the "non-use order" system chapter blade body. One advantage is that even if an unexpected accident occurs during the process of updating the blade, for example, the user is not properly operated, and the object to be updated cannot be correctly = The storage block, the first firmware is still intact and valid, and it can ensure that at least the first-learning body can be normally opened after the restart of the embedded system 1, and the body that receives the to-be-updated firmware and the updated firmware again is provided by using 8/24 201207731. The body, the second (four)' and find the second knowledge to be replaced == the second storage block 1〇6, before starting the update; the version of the same f can be the first to the first - H body and to be more The version of (10) 7) 'the system is the same as the system of the system, and the version of the system is the same (S209).

The purpose of step S209 is to avoid the waste of system resources, when: ^14 is the version number of the listener's version - and the second thin body = number 'discovery and the version number of the first or second Wei blade When they are the same, the update ^ and the first and second t-blade are the same ones, and the other is necessary to update again. At this time, the processing unit 14 terminates the update of the initial work (S211), and can prompt the user with this message. If the version of the to-be-renewed Leo is different from the version of the first and second Bo-body, the processing unit 14 continues to write the to-be-updated Bosch into the second storage block (S213) to complete the replacement of the second Wei-knife. Program that makes the replacement complete,

After entering the user environment, the storage block 104 maps the first lemma, and the second storage block 106 maps the firmware to be updated. In general, the user mostly updates the chapter blade when upgrading the embedded system 1 θ. That is, the to-be-updated version is an upgraded version to provide the first or second service. The function, or the correction of the first, second mobile program error; however, 'sometimes in order to be compatible with the old type of equipment, the material may need to backtrack (d_gmde) embedded system 1 to an earlier version Therefore, the downloaded or received firmware to be updated may also be a backtracking version. To this end, when the processing unit 14 writes the firmware to be updated to the second storage block 1〇6 9/24 201207731, it also determines the version number of the firmware to be updated and the first firmware that is not updated, and sets the parameters. An update parameter (^215)' recorded in the block 102 is, for example, a flag, as a basis for selecting the system tool body after the embedded system 1 is started. In this example, the update parameter identifies the version of the Lexon to be updated as an upgraded version or a backtracked version compared to the first Leaster in use. For example, when the firmware to be updated is an upgraded version, the update parameter is recorded as 丨; when the version is backtracked, the update parameter is recorded as 〇. At the same time, the processing unit 14 also sets a count value in the parameter record block 1〇2 to an initial value after the firmware to be updated is written, so as to facilitate the subsequent restart of the embedded system. The initial value may be 〇, and the relevant description of the count value will be described later. When the embedded system 1 is restarted after the early blade update is completed (S217), the boot management module 100 (e.g., the LIL of the Linux system) begins to prepare to load the core system firmware. In this embodiment, the boot management module includes: the body selection module is responsible for searching for the number (4) remaining body (10) 9) stored in the storage unit, and selecting one of the searched system bodies. Go to main memory unit 12. In the above-mentioned _ body update process, at this time, the storage unit in the first storage block 1〇4 and the block 106 is continued as the first__ and the dynamic to be updated. The processing unit 14 selects the module, and records the updated parameter (coffee) recorded by the block 102 to identify that the version of the system to be selected is an upgraded version or a corresponding system, _ body. For the boot and the main _ yuan _), the end::: will move ^ (five) 们 们 纽 所以 所以 所以 待 待 10 10 10 10 10 10 10 10 10 10 077 077 077 077 077 2012 2012 2012 2012 2012 2012 2012 2012 077 077 2012 2012 2012 2012 2012 2012 2012 2012 2012 077 Loaded into the fine body to be mounted, handed over to the start-up management mode to make Ziyi Zao 70 12 ' _ the first out of each system setting, write the program into the embedded embedded system 1. If the parameter is updated, the option 2 is selected. The system 1 is a retrospective version. The blade selection module deletes the version of the system that is earlier than the version, and is connected to the boot management, and five. When the intrusion system is activated, the embedded system is selected as the figure = body == flow chart. Please also the number of leaves 'parameter record block 102 in addition to the record update parameter and °, such as 1 also includes the start position of the system body in the storage unit 1G - the storage block 104 and the second storage block 106 The start bit (4) is fine, and the open government module 1〇0 accesses the corresponding record block 102 according to the start address, and also records the number of each system body, and the number ' is used to indicate that the system is verified. After the result. Before the embedded system i has not performed the sorting update, the parameter is updated: preset parameter (such as factory preset value), for example, preset to i, to indicate that the first and second _ are selected. The newer version; and the 5 t value can also be preset to the initial value when the embedded system i is shipped from the factory. i After updating the system t-blade in the user environment, whether the system is upgraded or backtracked, the update parameters and the count value will be modified and recorded in the parameter record block 102. Therefore, when the system i is activated (please, the processing unit 14 is turned on, the root, the command of the boot management module 100 is ready to be tested, and the system is mounted on the blade body. Before the hanging body can be selected according to (4) The command and parameter of the group 11/24 201207731 record the system firmware start address in block 1〇2, and the corresponding address in the storage unit 10 detects whether there is a complex system firmware (S303). In this example, it is detected whether there are two system firmwares; and the legality and integrity of the system firmware in the storage unit 10 can be detected. If the detection result, the rabbit has only one system firmware 'firm body selection module. 1〇〇2 directly specifies the unique system firmware stored in the storage unit 10 to the main memory unit 12 (S305). Or although two system firmwares are detected, only one of the system firmware passes the legality and Integrity test when confirmed as a valid system firmware

The firmware selection module 1〇〇2 specifies that the valid system firmware is mounted to the main memory unit 12. °

The right detection result shows that the two system firmwares are stored in the storage unit 1 〇 white effective system firmware, then read the count value further, to determine whether the count seven 已 has reached or exceeded a threshold (S3〇7 ). If the corpse value has not been reached or exceeded, the processing unit 14 continues to read the update parameter (S3〇9) according to the instruction of the firmware selection module 1〇〇2, to determine that the update parameter indicates an upgrade version or a backtrack version. . Further, based on the version number recorded by the header of the two system firmware files, the version order of the second (10) system (4) is judged to be 6 (S319). Then, according to the indication of the update parameter and the version relationship between the system and the body, the system firmware corresponding to the update parameter is specified to be mounted (s32i). After the system firmware to be mounted is specified, the processing unit 14 adds the count 僧 ( S323): capture the count value in the parameter record block 1〇2, add 1 to write the parameter record block 102, and then judge the designated system firmware day to be turned on (S325), that is, judge the designated system.疋No successful mount to the main memory single magic 2 'and successfully unpack the image slot into the core initialization, so that the embedded system 1 enters the user's production μ t, the mounted system firmware is normally turned on' then the update is Mounting system 12/24 201207731 Corresponding verification parameter 'Set its verification parameter to indicate that the system is normal S329) 'For example, set the verification parameter to Bu to represent the system minus normal P to make the system write to the human storage unit丨〇 Before the storage block is verified by integrity and legality, it is still possible for the system to be properly executed due to various reasons. Therefore, if the helmet method specified to be mounted is normally started, the number of alcohol checks of the purely mechanical device is set to indicate a system out error (S327), for example, set to Q;

Enter the system, 'charge 1, and try to load the system firmware again (return to the execution step magic (1) and below). a further, according to step S307, it is judged whether the count value of the parameter recording block 1〇2 reaches or exceeds the threshold value, and if the current count value has indeed reached or exceeded the threshold value, the parameter recording block 1〇2 is further determined. Whether each verification parameter indicates that each system firmware is normal (S3i); in other words, it is judged according to the verification parameters whether each system firmware has been successfully loaded and started in the previous startup program. If yes, it continues to select the corresponding system firmware to be mounted according to the indication of the update parameter (step S309 and below). a, but if not every verification parameter indicates that the corresponding system firmware is normal, then it is judged whether each verification parameter indicates that the corresponding system firmware is an error (S313) 'If yes, it means that the previous execution has been embedded several times. System 1, and specifying that mounting a particular system firmware is unsuccessful according to the indication of the update parameter. At this time, the parameter content is updated and the value is redesigned (S317). For example, the update parameter is switched from the originally indicated upgrade version 1 to the 0 indicating the mount backtrack version, so that the firmware selection module 1002 continues to perform the step of reading the update parameter (S309), according to the switched update. Parameters, choose the 13/24 201207731 version of the earlier system, try to mount the earlier version of the system to the main memory unit 12; also reset the count value to 〇, so that the building selection module 1002 Before the number of restarts reaches the threshold, the system firmware with the earlier mounted version is specified by the number of updates after the switch. If it is determined according to the verification parameter that the system entities in the storage unit 1 are all displayed as normal (the result of step S311 is NO), and not all of them are displayed as errors (NO in step S313), then the storage unit is stored. Among the two lines of the _ body, only one line _ body is positive f. In this case, the blade body selection module 1002 no longer selects according to the indication of the update parameter. The direct specified authentication parameter is indicated as a normal specific system $(S3i5 _ )' for mounting. And after specifying the mounting of the remaining body that can be normally opened, the count value is added (S323). In the above process, after each startup of the embedded system i, regardless of whether the system is successfully turned on, the count value will be accumulated; and because of the backward input system! After updating the firmware to be updated to the storage unit 1 in the user environment, the count value will be reset to 0' so the count value represents the number of times the embedded system i restarts after the firmware update. In step S307, it is determined whether the count value reaches or exceeds the threshold value, and according to the judgment result, the method of different processing is performed, in addition to providing the embedded system, according to the instruction of the update parameter, the updated system is selected, and the system is also provided. A correction mechanism, so that when the embedded system i cannot open the updated system tool in accordance with the update parameter, there is still a chance to open the untouched system to prevent the embedded system from collapsing ( Erash). / For example, suppose the threshold is 2, if the count is less than 2, that is, after the system fcj has been updated, the embedded system! It is the first or second startup, regardless of whether the system firmware in the storage unit 10 can be normally opened. 14/24 201207731 The firmware selection module 1002 will specify the system firmware corresponding to the update parameter. For example, if the update parameter is 1 indicating the upgraded version, the Lexmark selection module 1002 will specify that the system firmware with the later version is mounted to the main memory unit 12' and according to whether the system is successfully turned on after the mounting. Record the corresponding verification parameters. When the count value of the embedded system 1 reaches or exceeds the threshold value, that is, when the second time or more is started, the 'body selection module 1〇〇2' will judge each verification parameter recorded in the parameter record block 102, if each verification The parameters indicate that the corresponding Siweiwei blade body is normal (for example, the parameter value is 1), which means that the system firmware of the previous embedded system 1 is normal, then the original boot process can be maintained. When the embedded system 1 is started, the updated system blade is selected according to the record of the update parameters. If the count value reaches or exceeds the threshold value, and it is found that only one system initial body can be normally turned on according to the verification parameter, then the openable system firmware is the previously written firmware to be updated or the original first. The firmware and firmware selection module 1002 will directly specify the system firmware with the verification parameter 丨 to ensure that the embedded system 1 can successfully open the normal system firmware and enter the user environment to avoid the embedded system. Try to open the wrong system firmware. Even if it is found that each system firmware is recorded as an error (ie, the verification parameter is 0), the firmware selection module 1002 will continue to try to load different system early blade bodies to provide the intrusion system 1 into the user environment. chance. In the case that the system firmware cannot be normally opened, before the count value of the embedded system i reaches the threshold, the firmware selection module 1002 still selects the corresponding system firmware according to the content of the update parameter until the count value has reached the threshold. When the value is due to the originally specified system firmware (for example, the firmware to be updated) 15/24 201207731 == On 'At this time, the contents of the update parameters, such as knife, ', ', are enabled, so that the embedded system 1 is When selecting the system firmware, try to open the update parameter corresponding to the library. Another rib (for example, paragraph -

In addition to the update parameter of the π knife, the count value is also reset to 〇, so that the newly selected 糸_body (that is, the first secret in this example) is also J (if the capital is twice) is mounted. To the main memory single magic 2. When the degree reaches the threshold value 'If it still fails to start successfully, then the content of the update parameter is changed again, try to load the other one - the system is to be updated with this repeated switching === memory unit 12. The designer can set a switch 2 / is switched to reach a predetermined number of handovers, then stop continuing to try to load the system 1 can be carried out by other detection or repair procedures / the embedded system disclosed in the above embodiments and Boss update ^ users can not only (four) version of the newer line (four) for the embedded system

It is possible to update the embedded system with an earlier version of the system to make the entry system back to an earlier state to meet the needs of the user for testing or other operations. In addition to the optional upgrade of the embedded system or back to the lake, the embedded system selects the system object to be loaded according to the content of the update parameters set after the replacement system and the _ body, so that the embedded system Whether it is upgraded or backtracked to accurately select the updated system, that is, the system that the user wants to use, after reading the message to the main memory unit, the image can be read by the lion. The user environment of the operation. 16/24 201207731 Even if the user's updated system firmware cannot be turned on normally, the present invention can ensure that the embedded system can utilize the normal openable system firmware as long as a normal openable system firmware is recorded in the storage unit. Boot, allowing users to continue operating the embedded system. The method of the invention can avoid the occurrence of errors in the process of replacing the firmware of the system or the improper operation of the user, thereby causing the embedded system to be completely damaged and unable to be opened, and ensuring the stability of the embedded system. However, the items and elements of the above-described embodiments are merely illustrative of the invention and are not intended to limit the scope of the claimed invention. It is also within the scope of the present invention to modify or modify the micro-frames in accordance with the spirit of the present invention and the technical means disclosed herein. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram of an embodiment of an embedded system provided by the present invention; FIG. 1 is a flow chart of an embodiment of an embedded system firmware update method provided by the present invention; and ' • 帛FIG. 2 is a flow chart of an embodiment of a method for updating a ribbed body according to the present invention. ' [Main component symbol description] 1 embedded system 10 storage unit 100 boot management module 1002 firmware selection module 102 parameter recording block 104 first storage block 17/24

C 201207731 106 second storage block 12 main memory unit 14 processing unit 16 network control unit S201-S223 process steps S301-S329 process steps

18/24

Claims (1)

201207731 VII. Application Patent Range·· 1. An embedded system update method, the embedded system includes a processing unit, a main memory unit, and a plurality of system firmware, and the system firmware is stored one-to-one In a plurality of storage blocks of a storage unit, the method includes: the embedded system receiving a to-be-updated firmware including version data in a user environment; searching for addresses of the storage blocks; and identifying the system firmware One of the in-use firmware and one non-used medium-blade body each of which includes a corresponding version data, and the firmware to be updated is written to the non-in-use firmware corresponding to the Storing a block to replace the non-in-use firmware as one of the system firmware of the embedded system; comparing the firmware of the in-use firmware and the firmware to be updated to determine whether the firmware to be updated is An upgraded version or a backtracking version of the firmware in use; setting an update parameter according to the comparison result, the update parameter is used to indicate the upgraded version or the backtracked version; Start the embedded system, and choose the version information from such storage blocks corresponding to the updated parameter of one such system firmware. 2. The embedded system firmware update method of claim 1, wherein after receiving the to-be-updated firmware, the method further comprises: verifying the integrity and legality of the received firmware to be updated. 3. The method for updating an embedded system firmware according to claim 1, wherein the to-be-updated firmware is written before the storage block corresponding to the non-used firmware 19/24 201207731, and further includes : comparing the firmware of the to-be-updated firmware and the firmware of the system to whether the firmware to be updated is the same as the version of the firmware of any of the system firmware; and when the firmware to be updated and the system If the version data of the firmware is different, the step of writing the firmware to be updated is performed. 4. The method for updating an embedded system (4) according to claim 3, wherein the version of the to-be-updated firmware and the firmware of the system is to be updated (four) and the version of the recorded body. The same as 'Beibei' terminates the update of the embedded system. The method for updating the embedded system (4) as described in claim 1 of the patent application scope is as follows: after the non-use of the non-use of the corpus, the storage block is further included: The block should be more _ body legal. 6. For example, please refer to the embedded system dynamic update method described in item i of the patent scope that the user wants to update (4) after writing the storage block corresponding to the non-use _, and further includes: The count value is an initial value; and a verification parameter of the to-be-updated Leo is set, and the verification parameter is used to indicate that the corresponding system firmware is normal or incorrect. • The method for updating the embedded system described in item 6 of the patent scope continues to Μ 'Starting the embedded system and selecting one of the system firmware steps includes: detecting the storage blocks respectively Store _ and other system models; read the update parameters; 20/24 201207731 body version data to determine the order relationship of the 祀H body, and the version of the root _ to == corresponding to - Wait for the cafe to mount I such as: ^:==_body_method to the main memory unit: after = corresponding system (four) mount judgment = hanging ❹ m main memory unit _ system is successfully opened right again, when When the system is successfully turned on, the system dynamics of the corresponding verification parameter are set to be normal; and when the disconnection cannot be successfully opened, the corresponding verification parameter is set to be the wrong firmware of the system to be mounted.曰 9. The embedded system (4) update according to item 8 of the patent application scope, wherein 'the corresponding verification parameter is set to indicate that the system firmware is an error, and the following includes: Qiuhai 糸 return to restart the Step execution of the embedded system. 10. The embedded system f-blade updating method according to claim 9, wherein the system firmware corresponding to the update parameter is specified after the main memory unit, and the method further comprises: adding the meter Value. The embedded system firmware update method of claim 10, wherein before the reading the update parameter, the method further comprises: determining whether the count value has reached or exceeded a threshold; when the count value has not reached the Threshold value, performing the step of reading the update parameter 21/24 201207731; and when the count value has reached or exceeded the threshold value, determining that the verification number corresponding to the firmware refers to _ is normal or incorrect, If the verification == : the body is normal, then read the more = 12. If the scope of the patent application is 〗 〖1', where 'the judgment of the verification parameter means that the firmware of the firmware update is normal. Or the wrong steps, including: ^, if the verification parameters indicate the (4) change, the new parameter and reset the count value to the beginning: the second step is to perform the step of purchasing the update parameter. 13: Shen 2 Scope Range, the embedded _ update party described in the item is a normal or erroneous step, including: H Hai Temple 若 If the verification parameters indicate that only the right is normal, then 俨 将 _ /, - The system firmware is the main memory = 示 is shown as normal, the system _ mount to the step of performing the addition of the count value. 14. As described in item 7 of the patent scope: package: measuring the storage of the blocks, respectively: =::: ^ disconnecting the storage unit depends on the storage unit if the storage unit includes the plurality of valid ones, ο Taking the step of updating the parameters; and if the limbs are, the execution phase storage unit includes only one valid system blade body, which means 201207731 15. A multi-firm body 2" is cut to the main body 1 : plural storage Block firmware, each > Hai special error storage area souls; and mother 1 system (four) including relative: save 1, -4 version of the remaining: two recorded block 'record - update parameters,, - main Memory list!^ version or __ version; 4%% parameter refers to - the i system: know:: mount the storage area machine to store "into-user ring use (four)' to make d order - handle strict - brother, And the system ^ 70 'receive includes the version of the ancestral ancestor and will wait for -, with the " knife body: into the far-moving system in the moving body - non-object, and ratio = save block, Replace the non-use of this order off # ^ use the middle body and the version of the body to be updated _ body 6. If ΐ ^ set the update parameters. The multi-tool body embedded system described in the single item, wherein the storage device reads and compares the version order of the system body of the system stored in the root block when the embedded system is started Relationship, and; 忒 update parameters and version order relationship, select one of the system firmware corresponding to the version data corresponding to the update parameter to be mounted to the main memory early element. 17. The multi-firm embedded system of claim 16, wherein the storage unit further comprises: a booting module, comprising a firmware selection module, the processing unit selecting a mode according to the firmware Group instructions, in the embedded system start 23/24 201207731: etc. = new parameters and version order relationship, select - 18. = = the multi_embedded system described in item 16, wherein the parameter record block is more Including: >, A complex parameters, respectively - for - indicates that the storage block::: raw, etc. = body is mounted to the main unit after the unit is normal -:=:=::=:7 In the _ ▲, the processing is based on the instruction of the module selection module of the chapter, and when the count 2 reaches or exceeds the gated value, the check is verified = the _ the main memory unit is determined Among them - these systems 19. For example: please refer to the multi-tool body embedded system described in item 18 of the patent scope. The value reaches or exceeds the threshold, and the verification parameters are two: when the firmware is wrong, the processing unit switches the content of the update parameter according to the firmware 2=:: and resets the meter. The multi (four) embedded system according to item 18 of the scope, when the count value reaches or exceeds the threshold value, and the verification parameters refer to the second only, and the early blade of the system such as the towel β Hai is normal. The processing unit specifies to mount the system firmware indicated as normal. 24/24