JP2012059205A - Information processor, failure recovery method and failure recovery program - Google Patents

Abstract

An information processing apparatus, a failure recovery method, and a failure recovery program capable of reducing the downtime of a function that affects a failure are provided.
A BIOS 110 receives a recovery start input for recovering a failure occurring in an HDD and starting a multifunction peripheral. After receiving the recovery activation input, the NCS 144 transmits application information indicating an application included in the multifunction peripheral to the external device. The NCS 144 receives activation target application information indicating the activation target application selected by the external apparatus from the applications indicated by the application information from the external apparatus. The SCS 146 determines whether or not the activation target application indicated by the activation target application information executes processing using the HDD. If the SCS 146 determines to execute the process using the HDD, the SCS 146 initializes the storage area of the HDD used for the process of the activation target application. The OS 120 activates the activation target application when the storage area is initialized.
[Selection] Figure 4

Description

  The present invention relates to an information processing apparatus, a failure recovery method, and a failure recovery program.

  Conventionally, in an information processing apparatus such as an image forming apparatus, when a failure occurs in hardware such as a hard disk drive (HDD), even if only one function of the application affects the failure, All functions were stopped.

  For this reason, for example, Patent Literature 1 discloses a technique for detecting a failure occurring in a hardware resource when the image forming apparatus is activated and providing an application function within a range that does not affect the detected failure. .

  However, in the conventional technology as described above, although the downtime of the function that does not affect the failure can be shortened, the downtime of the function that affects the failure cannot be shortened.

  The present invention has been made in view of the above circumstances, and an object thereof is to provide an information processing apparatus, a failure recovery method, and a failure recovery program that can reduce downtime of a function that affects a failure.

  In order to solve the above-described problems and achieve the object, an information processing apparatus according to an aspect of the present invention is an information processing apparatus connected to an external device via a network, the first storage unit, An input receiving unit for receiving a recovery activation input for recovering a failure occurring in the first storage unit and starting the information processing device, and an application included in the information processing device after the recovery activation input is received Transmission control means for transmitting application information to the external device, and reception control means for receiving activation target application information indicating the activation target application selected by the external device from the applications indicated by the application information from the external device And the activation target application indicated by the activation target application information executes processing using the first storage unit Initializing to initialize the storage area of the first storage means used for processing of the activation target application when it is determined to execute processing using the determination means for determining whether or not the first storage means is used And an activation unit that activates the activation target application when the storage area is initialized.

  A failure recovery method according to another aspect of the present invention is a failure recovery method executed by an information processing apparatus connected to an external device via a network, and the input receiving unit is generated in the first storage unit. An input reception step for receiving an input of recovery start for recovering the failure and starting the information processing apparatus, and an application indicating an application of the information processing apparatus after the transmission control means receives the input of the recovery start A transmission control step for transmitting information to the external device; and a reception control means for receiving activation target application information indicating the activation target application selected by the external device from the applications indicated by the application information from the external device. A reception control step, and the determination means includes the activation target application indicated by the activation target application information A determination step for determining whether or not to execute a process using the first storage unit, and an initialization unit that determines whether or not to execute a process using the first storage unit, An initialization step for initializing a storage area of the first storage means used for processing; and an activation means for starting the application to be activated when the storage area is initialized. It is characterized by.

  A failure recovery program according to another aspect of the present invention is a failure recovery program executed by an information processing apparatus connected to an external device via a network, and recovers a failure that has occurred in the first storage means. An input receiving step for receiving an input for restoration activation for activating the information processing device, and transmission control for transmitting application information indicating an application included in the information processing device to the external device after the input for the restoration activation is accepted A reception control step of receiving, from the external device, startup target application information indicating a startup target application selected by the external device from among the applications indicated by the application information, and the startup indicated by the startup target application information Whether or not the target application executes processing using the first storage means A determination step for determining, and an initialization step for initializing a storage area of the first storage unit used for processing of the activation target application when it is determined to execute the process using the first storage unit, When the storage area is initialized, a startup step of starting the startup target application is executed by a computer.

  According to the present invention, it is possible to reduce the downtime of a function that affects a failure.

FIG. 1 is a block diagram illustrating a configuration example of a failure recovery system including a multifunction peripheral according to the first embodiment. FIG. 2 is a block diagram illustrating a hardware configuration example of the multifunction peripheral according to the first embodiment. FIG. 3 is a diagram illustrating an example of a dependency table according to the first embodiment. FIG. 4 is a block diagram illustrating a software configuration example of the CPU according to the first embodiment. FIG. 5 is a flowchart illustrating an example of failure recovery processing of the multifunction machine according to the first embodiment. FIG. 6 is a diagram illustrating an example of a start flag according to the first embodiment. FIG. 7 is a block diagram illustrating a hardware configuration example of the multifunction peripheral according to the second embodiment. FIG. 8 is a diagram illustrating an example of a normal activation flag according to the second embodiment. FIG. 9 is a block diagram illustrating a software configuration example of the CPU according to the second embodiment. FIG. 10 is a flowchart illustrating an example of failure recovery processing of the multifunction machine according to the second embodiment. FIG. 11 is a block diagram illustrating a hardware configuration example of the multifunction peripheral according to the third embodiment. FIG. 12 is a diagram illustrating an example of the number of times of initialization according to the third embodiment. FIG. 13 is a block diagram illustrating a software configuration example of the CPU of the third embodiment. FIG. 14 is a flowchart illustrating an example of failure recovery processing of the MFP according to the third embodiment.

  Hereinafter, embodiments of an information processing apparatus, a failure recovery method, and a failure recovery program according to the present invention will be described in detail with reference to the accompanying drawings. In each of the following embodiments, as an information processing apparatus, a multifunction peripheral (MFP) having at least two functions among a copy function, a printer function, a scanner function, and a facsimile function will be described as an example. However, the present invention is not limited to this. Is not to be done. The information processing apparatus may be, for example, a copier, a scanner, a printer, a facsimile, a PC (Personal Computer), or an electronic device.

(First embodiment)
First, the configuration of the MFP according to the first embodiment will be described.

  FIG. 1 is a block diagram illustrating an example of a configuration of a failure recovery system 1 including a multifunction machine 10 according to the first embodiment. As shown in FIG. 1, the failure recovery system 1 includes an external device 5 and a multifunction device 10. The external device 5 and the multifunction device 10 are connected via the network 2. The network 2 can be realized by an existing network such as a LAN (Local Area Network) or a public communication line.

  The external device 5 is a terminal used by an administrator or service person of the multifunction machine 10 and can be realized by, for example, a PC (Personal Computer).

  The multifunction machine 10 is an image forming apparatus having a copy function, a printer function, a scanner function, and a facsimile function.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of the multifunction machine 10 according to the first embodiment. As shown in FIG. 2, the multifunction machine 10 includes an operation panel 20, a power switch 25, an engine 30, and a controller 40.

  The operation panel 20 is an operation display device that inputs various operations and displays various screens. The power switch 25 is a switch for turning on or off the multifunction machine 10.

  The engine 30 includes a scanner 32 and a plotter 34. The scanner 32 is an image reading device that scans an image recorded on a recording medium such as paper and generates image data. The plotter 34 is an image output device that prints image data that has been subjected to image processing by the controller 40 on a recording medium such as paper and outputs the data.

  The controller 40 controls the entire MFP 10, and includes a network I / F 42, a DRAM (Dynamic Random Access Memory) 44, an HDD (Hard Disk Drive) 46, an image processing unit 48, and a ROM (Read Only). Memory) 50 and CPU (Central Processing Unit) 52 are provided.

  The network I / F 42 is a communication device that communicates with an external device such as the external device 5 via the network 2.

  The DRAM 44 is a volatile storage device (memory) and is used as a work area such as the CPU 52.

  The HDD 46 (an example of a first storage unit) is an external storage device that stores image data generated by the scanner 32 and subjected to image processing by an image processing unit 48 described later. The HDD 46 may store image data transmitted from an external device (not shown) and received by the network I / F 42.

  The image processing unit 48 performs image processing on the image data generated by the scanner 32, or performs image processing on the image data stored in the HDD 46 and transfers the image data to the plotter 34.

  The ROM 50 (an example of the second storage unit) is a nonvolatile read-only storage device (memory), and various programs executed by the multifunction machine 10 and data used for various processes executed by the multifunction machine 10. Remember. For example, the ROM 50 stores a BIOS (Basic Input / Output System) program, an OS (Operating System) program, a service program, an application program, and the like as various programs executed by the multifunction machine 10. Further, for example, the ROM 50 stores a dependency table that defines whether or not each application depends on the HDD 46 as data used for various processes executed by the multifunction machine 10. FIG. 3 is a diagram illustrating an example of the dependency table. In the dependency table illustrated in FIG. 3, “1” indicating that the HDD dependency relationship of the copy application, the scanner application, and the FAX application is a dependency relationship, that is, the processing is executed using the HDD 46 is set. . The HDD dependency relationship of the printer application is set to “0” indicating that there is no dependency relationship, that is, the processing is executed without using the HDD 46.

  The CPU 52 develops various programs stored in the ROM 50 on the DRAM 44 and executes them to control each unit of the multifunction machine 10 and realize various functions of the multifunction machine 10. The CPU 52 performs the following various processes using the DRAM 44 as a work area.

  FIG. 4 is a block diagram illustrating an example of a software configuration of the CPU 52 of the multifunction machine 10 according to the first embodiment. As illustrated in FIG. 4, the CPU 52 (multifunction device 10) includes a BIOS 110, an OS 120, a service 130, and an application 160. The BIOS 110, the OS 120, the service 130, and the application 160 are realized by deploying the BIOS program, OS program, service program, and application program stored in the ROM 50 on the DRAM 44 by the CPU 52 and executing them. is there.

  The BIOS 110 (an example of an input receiving unit) is software that controls peripheral devices (hardware) of the multifunction machine 10 and provides an input / output function for the peripheral devices to the OS 120. The BIOS 110 accepts an input for normally starting the multifunction device 10 from the power switch 25, or accepts an input for recovery activation for restoring a failure occurring in the HDD 46 and starting the multifunction device 10 from the power switch 25 and the operation panel 20. To do. The recovery activation input is, for example, pressing of both the power switch 25 and the copy button of the operation panel 20, and there may be an error in the pressing timing within a predetermined time.

  The OS 120 (an example of an activation unit) is basic software that controls software of the multifunction machine 10 and activates (executes) the service 130 and the application 160.

  The service 130 is software that is always activated on the OS 120, and includes a CS (control service) 140 and an SRM (system resource manager) 150.

  The CS 140 interprets a processing request from the OS 120 or the application 160 and generates a hardware resource acquisition request. The CS 140 is an operation panel control service (142), an NCS (network control service) 144, and an SCS (system control). Service) 146 and the like. Although not shown, the CS 140 controls MCS (memory control service) for acquiring and releasing memory, compressing and decompressing image data, ECS (engine control service) for controlling the engine 30, and facsimile transmission / reception. Includes FCS (fax control service).

  The OCS 142 (an example of a display control unit) controls the operation panel 20. The OCS 142 causes the operation panel 20 to display a warning display that prohibits turning off the power of the multifunction machine 10 after the recovery start input is received by the BIOS 110. However, the warning display by the OCS 142 is not essential.

  The NCS 144 (an example of a transmission control unit, a reception control unit, and an authentication unit) controls the network I / F 42. After the recovery start input is received by the BIOS 110, the NCS 144 receives the user information of the user of the external device 5 from the external device 5 via the network I / F 42, and uses the received user information to receive the user information. Authenticate. The user information is, for example, the user ID and password of the user, and the NCS 144 determines that the received user information (user ID and password) matches the authentication source user information stored in the ROM 50 or HDD 46 in advance. It is determined that authentication is successful. If the user authentication is successful, the NCS 144 transmits application information indicating an application included in the multifunction machine 10 to the external device 5 via the network I / F 42. The NCS 144 may transmit the application information to the external device 5 without performing user authentication.

  Further, the NCS 144 receives the activation target application information indicating the activation target application selected by the external device 5 from the applications indicated by the transmitted application information from the external device 5 via the network I / F 42.

  The SCS 146 (an example of a determination unit and an initialization unit) performs system control and resource management. The SCS 146 determines whether or not the activation target application indicated by the activation target application information received by the NCS 144 uses the HDD 46 to execute processing. Specifically, the SCS 146 refers to the dependency table stored in the ROM 50 and determines that the activation target application executes processing using the HDD 46 when the activation target application depends on the HDD 46. The SCS 146 initializes a storage area of the HDD 46 used for processing of the activation target application when it is determined that the activation target application executes processing using the HDD 46. Specifically, the SCS 146 logically formats the partition of the HDD 46 used for processing of the activation target application. Note that when the MFP 10 is activated by recovery activation, the activation target application is activated by the OS 120 when the storage area of the HDD 46 used for processing of the activation target application is initialized.

  The SRM 150 manages hardware resources and arbitrates hardware resource acquisition requests from the CS 140.

  The application 160 is software for providing a copy function, a printer function, a scanner function, and a facsimile function realized by the multifunction machine 10 in cooperation with the service 130, and includes a copy application 162, a printer application 164, and a scanner application 166. , And facsimile application 168 and the like.

  The copy application 162 executes copy processing, and temporarily stores image data generated by the scanner 32 and subjected to image processing by the image processing unit 48 in the HDD 46. Then, the copy application 162 reads the image data stored in the HDD 46, performs image processing by the image processing unit 48, and causes the plotter 34 to print out.

  The printer application 164 executes print processing, receives image data from an external device (not shown) via the network I / F 42, performs image processing by the image processing unit 48, and causes the plotter 34 to print out.

  The scanner application 166 executes scanner processing, and stores image data generated by the scanner 32 and subjected to image processing by the image processing unit 48 in the HDD 46.

  The facsimile application 168 executes facsimile processing, and temporarily stores image data generated by the scanner 32 and subjected to image processing by the image processing unit 48 in the HDD 46. The facsimile application 168 reads out the image data stored in the HDD 46 and transmits it to the external device (not shown) via the network I / F 42. The facsimile application 168 receives image data from an external device (not shown) via the network I / F 42, performs image processing by the image processing unit 48, and causes the plotter 34 to print out.

  Note that the storage areas of the HDDs 46 used by the copy application 162, the scanner application 166, and the facsimile application 168 are different, and the storage areas of the HDDs 46 used by each application are defined in advance in the ROM 50, for example. To do.

  Next, the operation of the multifunction machine of the first embodiment will be described.

  When a failure occurs in the HDD 46, all functions of the multifunction device 10 cannot be used, and the multifunction device 10 cannot be controlled based on input from the operation panel 20 or the network I / F 42. For this reason, in the first embodiment, the MFP 10 is restarted to recover from the failure that has occurred in the HDD 46, and the function of the MFP 10 can be used.

  FIG. 5 is a flowchart illustrating an example of a procedure flow of failure recovery processing performed in the multifunction machine 10 according to the first embodiment. Note that the flowchart shown in FIG. 5 illustrates processing after the multifunction device 10 is turned off to restart the multifunction device 10.

  First, when an input to turn on the multifunction device 10 is performed, the BIOS 110 is activated, and the BIOS 110 is turned on by the normal activation input to normally activate the multifunction device 10 or the HDD 46 has failed. In step S100, it is determined whether or not the power of the multifunction device 10 has been turned on by a recovery activation input that restores the device and activates the multifunction device 10.

  Subsequently, when the BIOS 110 determines that the power of the multifunction peripheral 10 has been turned on by inputting recovery activation (Yes in step S100), the BIOS 110 notifies the OS 120 that the input is recovery activation and activates the OS 120 (step S102). ).

  Subsequently, the OS 120 performs activation processing of the service 130 (specifically, each software included in the service 130) that is the main software of the multifunction peripheral 10, and determines whether the service 130 has been activated (step S104). . Specifically, after the activation processing of the service 130, the OS 120 determines that the service 130 has been started if there is a response within a certain time, and determines that the service 120 has not started if there is no response within the certain time.

  Subsequently, when the service 130 is activated (Yes in step S104), the NCS 144 performs network connection processing and determines whether or not the network 130 is connected (step S106). Specifically, the NCS 144 determines that it is connected to the network 2 when the connection with the external device 5 is established by the network connection process, and connects to the network 2 when the connection with the external device 5 is not established. Judge that it did not.

  Subsequently, when connected to the network 2 (Yes in step S106), the OCS 142 displays a warning display on the operation panel 20 indicating that the failure is being recovered and the multifunction device 10 is prohibited from being turned off (step S106). S108).

  Subsequently, the NCS 144 waits for transmission of a recovery command for instructing recovery from the external device 5 (No in step S110). Here, the external device 5 includes the user information of the user of the external device 5 in the recovery command and transmits it to the multifunction device 10. When the NCS 144 receives the recovery command (Yes in step S110), the NCS 144 authenticates the user of the external device 5 using the user information included in the received recovery command, and determines whether the user has been successfully authenticated. Determination is made (step S112). Specifically, the NCS 144 determines that the authentication is successful if the user information included in the received recovery command matches the authentication source user information stored in advance in the ROM 50 or the HDD 46, and the authentication source user information If it does not match, it is determined that the authentication has failed.

  Subsequently, when the NCS 144 succeeds in authenticating the user of the external device 5 (Yes in Step S112), the NCS 144 transmits application information indicating an application included in the multifunction machine 10 to the external device 5 (Step S114). Here, it is assumed that the NCS 144 transmits application information indicating the copy application 162, the printer application 164, the scanner application 166, and the facsimile application 168 to the external device 5. However, it is not limited to this.

  Subsequently, the NCS 144 waits for transmission from the external device 5 of activation target application information indicating the activation target application selected by the external device 5 from the applications indicated by the transmitted application information (No in step S116). Here, the external device 5 transmits the activation target application information indicating the copy application 162 and the printer application 164 to the multifunction peripheral 10 as the activation target applications from the applications indicated by the application information received from the multifunction peripheral 10. To do. However, it is not limited to this.

  When the activation target application information is received by the NCS 144 (Yes in step S116), the OS 120 performs activation processing of the activation target application indicated by the received activation target application information, and determines whether the activation target application has been activated. (Step S118). Here, when the activation target application is activated (Yes in step S118), the process proceeds to step S126. Note that the activation determination method of the activation target application is the same as the activation determination method of the service 130.

  Subsequently, when the activation target application has not been activated (No in step S118), the SCS 146 determines whether the activation target application performs processing using the HDD 46 (step S120). Specifically, the SCS 146 refers to the dependency table (see FIG. 3) stored in the ROM 50 and determines that the activation target application executes processing using the HDD 46 when the activation target application depends on the HDD 46. When the activation target application does not depend on the HDD 46, it is determined that the activation target application does not execute processing using the HDD 46. If it is determined that the activation target application does not execute processing using the HDD 46 (No in step S120), the process proceeds to step S126.

  Subsequently, when the SCS 146 determines that the activation target application performs processing using the HDD 46 (Yes in step S120), the SCS 146 initializes the storage area of the HDD 46 used for the processing of the activation target application (step S122). .

  Subsequently, the SCS 146 sets the activation flag of the activation target application that has initialized the storage area of the HDD 46 used for processing to ON (step S124). Here, the activation flag is a flag indicating whether or not the activation process is performed again after the initialization of the storage area of the HDD 46. In the present embodiment, the activation flag is activated on the DRAM 44 for each application that executes the process using the HDD 46. A flag is stored. FIG. 6 is a diagram illustrating an example of the activation flag. In the example shown in FIG. 6, the activation flag of the copy application is to perform the activation process again, that is, “1” indicating ON is set, and the activation flags of the scanner application and the FAX application are not subjected to the activation process again. That is, “0” indicating OFF is set. Note that the initial value of the activation flag is “0”.

  Subsequently, the OS 120 returns to step S118 if there remains an activation target application for which activation has not been confirmed (No in step S126). Thereafter, the processing of step S118 to step S124 by the OS 120 and the SCS 146 is repeated. Here, it is determined that the copy application 162 that is the activation target application has not been activated in step S118, it is determined that processing is to be performed using the HDD 46 in step S120, and in step S122, the HDD 46 used for processing of the copy application 162 is determined. It is assumed that the storage area is initialized and the activation flag of the copy application 162 is set to ON in step S124. In addition, it is determined that the printer application 164 that is the activation target application has not been activated in step S118, and it is determined in step S120 that processing is not performed using the HDD 46. For this reason, it is assumed that the activation flag of the printer application 164 is off (see FIGS. 3 and 6). However, it is not limited to these.

  When the OS 120 confirms whether or not all the activation target applications indicated by the activation target application information are activated by the OS 120 (Yes in step S126), the SCS 146 confirms whether or not there is an activation target application whose activation flag is set to ON ( Step S128). Note that if there is no application to be activated in which the activation flag is set to ON (No in step S128), the process ends.

  When there is an activation target application whose activation flag is set to ON (Yes in step S128), the SCS 146 performs activation processing on the activation target application again (step S130). The initialization of the storage area of the HDD 46 is based on the logical format of the partition of the HDD 46, and therefore it is not necessary to confirm the activation again for other activation target applications.

  Subsequently, the SCS 146 sets the activation flag of the activation target application that has performed the activation process to OFF, and returns to step S128.

  Here, since only the copy application 162 has the activation flag set to ON (see FIG. 6), the activation process of the copy application 162 is performed in step S130, and the activation flag of the copy application 162 is set to OFF in step S132. After that, the process ends.

  In step S100, when the BIOS 110 determines that the power of the multifunction peripheral 10 is turned on by a normal activation input (No in step S100), the BIOS 110 notifies the OS 120 that the input is a normal activation and activates the OS 120. (Step S134).

  Subsequently, the OS 120 performs activation processing of the service 130 (specifically, each software included in the service 130) (step S136).

  Subsequently, the OS 120 performs activation processing of the application 160 (specifically, each software included in the application 160) (step S138).

  Further, when the service 130 is not activated in step S104 (No in step S104), when not connected to the network 2 in step S106 (No in step S106), or authentication of the user of the external device 5 in step S112. If the operation fails (No in step S112), the OCS 142 displays on the operation panel 20 that the MFP 10 cannot be activated due to a failure (step S140), and ends the activation process.

  As described above, according to the first embodiment, a failure that occurred in the HDD 46 at the time of activation of the multifunction machine 10 is recovered, so that the downtime of a function (for example, an application) that affects the failure can be reduced. In particular, in the first embodiment, the administrator of the MFP 10 or a service person who is accustomed to the recovery operation, not the user of the MFP 10, selects the application to be activated from the remote location using the external device 5 and performs recovery. Therefore, it is possible to reduce the possibility that an unintended area of the HDD 46 is initialized due to an operation error or the like, and it is possible to perform a recovery process immediately.

  In addition, according to the first embodiment, a warning is displayed that prohibits turning off the power of the multi-function device 10 before the initialization of the HDD 46. You can be alerted not to turn off the power.

  Further, according to the first embodiment, since the user of the external device 5 is authenticated, it is possible to prevent the activation target application from being selected and restored by an unintended user other than the administrator of the multifunction machine 10 or the service person. .

(Second Embodiment)
In the second embodiment, an example will be described in which an application that is not selected as an activation target application at the time of recovery activation is excluded from normal activation when the MFP is normally activated. In the following, differences from the first embodiment will be mainly described, and components having the same functions as those in the first embodiment will be given the same names and symbols as those in the first embodiment, and description thereof will be given. Is omitted.

  FIG. 7 is a block diagram illustrating an example of a hardware configuration of the MFP 210 according to the second embodiment. As shown in FIG. 7, the second embodiment is different from the first embodiment in that the controller 240 of the multifunction device 210 includes an NVRAM (Non Volatile RAM) 254 and the processing content of the CPU 252.

  The NVRAM 254 (an example of a third storage unit) is a nonvolatile rewritable storage device (memory), and stores data used for various processes executed by the multifunction peripheral 210. For example, the NVRAM 254 stores a normal activation flag (an example of activation information) indicating whether or not the application is activated when the normal activation input is received by the BIOS 110 for each application. FIG. 8 is a diagram illustrating an example of the normal activation flag. In the example shown in FIG. 8, the normal activation flag of the copy application and the printer application is activated at the normal activation, that is, “1” indicating ON is set. The normal activation flag of the scanner application and the FAX application is set at the normal activation flag. “0” indicating that the system has not been started, that is, off is set. Note that the initial value of the normal activation flag is “0”.

  FIG. 9 is a block diagram illustrating an example of a software configuration of the CPU 252 of the MFP 210 according to the second embodiment. As shown in FIG. 9, in the second embodiment, the processing contents of the OS 320 of the CPU 252 and the SCS 346 of the CS 340 of the service 330 are different from the first embodiment.

  The SCS 346 (an example of setting means) sets the normal activation flag of the activation target application indicated by the activation target application information received by the NCS 144 to ON.

  When the BIOS 110 receives an input for normal activation, the OS 320 activates an application whose normal activation flag is set to ON.

  FIG. 10 is a flowchart illustrating an example of a procedure flow of failure recovery processing performed in the MFP 210 according to the second embodiment.

  First, the processing from step S200 to step S216 is the same as the processing from step S100 to step S116 in the flowchart of FIG.

  In step S217, when the activation target application information is received by the NCS 144 (Yes in step S216), the SCS 346 sets the normal activation flags of all activation target applications indicated by the received activation target application information to ON. Here, since the copy application 162 and the printer application 164 are activation target applications, the SCS 346 sets the normal activation flag of the copy application 162 and the printer application 164 to ON (see FIG. 8). However, it is not limited to this.

  The subsequent processing from step S218 to step S232 is the same as the processing from step S118 to step S132 in the flowchart of FIG.

  The processing from step S234 to step S236 is the same as the processing from step S134 to step S136 in the flowchart of FIG.

  In step S238, the OS 320 activates an application whose normal activation flag is set to ON among the applications 160 (step S238). For example, if the normal activation flags of the copy application 162 and the printer application 164 are set to ON in step S217 (see FIG. 8) and the MFP 210 is normally activated at the next activation, the OS 320 displays the application 160. Among these, the copy application 162 and the printer application 164 whose normal activation flag is set to ON are activated.

  Moreover, the process of step S240 is the same as the process of step S140 of the flowchart of FIG.

  As described above, according to the second embodiment, only the application whose normal activation flag is set to ON when the MFP 210 is normally activated is activated, so that the application in which the storage area of the HDD 46 has not been initialized can be obtained. It is possible to prevent a situation where the MFP 210 cannot be started due to the cause.

(Third embodiment)
In the third embodiment, an example will be described in which the number of initializations is stored, and an application whose initialization number is equal to or more than a specified number is excluded from restoration activation and normal activation. In the following, differences from the second embodiment will be mainly described, and components having the same functions as those of the second embodiment will be given the same names and symbols as those of the second embodiment, and the description thereof will be made. Is omitted.

  FIG. 11 is a block diagram illustrating an example of a hardware configuration of the MFP 410 according to the third embodiment. As shown in FIG. 11, in the third embodiment, the contents stored in the NVRAM 454 of the controller 440 of the multifunction peripheral 410 and the process contents of the CPU 452 are different from those in the second embodiment.

  The NVRAM 454 stores, in addition to the normal activation flag, the number of times that the storage area of the HDD 46 used for processing of the application is initialized for each application. FIG. 12 is a diagram illustrating an example of the number of times of initialization. In the example shown in FIG. 12, the copy application initialization count is set to 10 times, and the scanner application and FAX application initialization counts are set to 0. Note that the initial value of the number of initializations is 0.

  FIG. 13 is a block diagram illustrating an example of a software configuration of the CPU 452 of the MFP 410 according to the third embodiment. As shown in FIG. 13, in the third embodiment, the processing contents of the OS 520 of the CPU 452 and the NCS 544 and SCS 546 of the CS 540 of the service 530 are different from those of the second embodiment.

  The SCS 546 (an example of an updating unit and a setting unit) updates the initialization count of the startup target application when the storage area of the HDD 46 used for processing of the startup target application is initialized. Specifically, the SCS 546 increments the number of times of initialization of the activation target application.

  In addition, the SCS 546 sets the normal activation flag of the activation target application whose initialization count is equal to or greater than the specified count to OFF.

  The NCS 544 transmits to the external device 5 application information indicating applications other than the applications that the multifunction peripheral 410 has, and the number of initializations that is greater than or equal to the specified number.

  FIG. 14 is a flowchart illustrating an example of a flow of a failure recovery process performed by the multifunction peripheral 410 according to the third embodiment.

  First, the processing from step S300 to step S312 is the same as the processing from step S200 to step S212 in the flowchart of FIG.

  The process of step S314 will be described later.

  Subsequently, the processing from step S316 to step S324 is the same as the processing from step S216 to step S224 in the flowchart of FIG.

  In step S326, the SCS 546 increments the initialization count of the activation target application that has initialized the storage area of the HDD 46 used for processing. Here, it is assumed that the SCS 546 increments the initialization count of the copy application 162 that is the activation target application and sets it to 10 times (see FIG. 12). However, it is not limited to this.

  Subsequently, the SCS 546 determines whether or not the incremented number of times of initialization of the application to be activated is equal to or more than the specified number. Here, the specified number of times is 10 times, but is not limited to this. If it is determined that the number of initializations of the activation target application is less than the specified number (No in step S328), the process proceeds to step S334.

  Subsequently, when the SCS 546 determines that the number of initializations of the activation target application has reached the specified number or more (Yes in step S328), the activation flag of the activation target application is set to off (step S330), and the activation target application Is set to OFF (step S332). Here, it is assumed that the SCS 546 sets the activation flag of the copy application 162 that is the activation target application to OFF and sets the normal activation flag to OFF. However, it is not limited to this.

  The subsequent processing from step S334 to step S340 is the same as the processing from step S226 to step S232 in the flowchart of FIG.

  In step S314, if the NCS 544 succeeds in authenticating the user of the external device 5 (Yes in step S312), the NCS 544 excludes the applications that the MFP 410 has the number of initializations equal to or greater than the specified number. Is transmitted to the external device 5. For example, if the number of initializations of the copy application 162 is set to 10 in step S326 and the MFP 410 is restored and activated at the next startup, the NCS 544 copies the copy application 162 among the applications included in the MFP 410. The application information indicating the application excluding is transmitted to the external device 5.

  The processing from step S342 to step S346 is the same as the processing from step S234 to step S238 in the flowchart of FIG. For example, if the normal activation flag of the printer application 164 is set to ON in step S317, the normal activation flag of the copy application 162 is set to OFF in step S332, and the MFP 510 is normally activated at the next activation. The OS 520 activates the printer application 164 in which the normal activation flag is set to ON in the application 160.

  Moreover, the process of step S348 is the same as the process of step S240 of the flowchart of FIG.

  As described above, in the third embodiment, the number of times that the storage area of the HDD 46 used for the processing of the application is initialized is stored for each application, and the applications where the number of initializations exceeds the specified number are excluded. Application information indicating the application is transmitted to the external device 5. When the number of initializations of the storage area of the HDD 46 is equal to or greater than the specified number, failures frequently occur and there is a possibility that a failure that cannot be recovered by initialization has occurred. For this reason, according to the third embodiment, an application whose initialization count is equal to or greater than the prescribed count is not selected as a startup target application by the external device 5, so unnecessary recovery work can be prevented and other recovery work such as replacement of the HDD 46 can be prevented. Can be alerted to the user.

  According to the third embodiment, the normal activation flag of the application whose initialization count has exceeded the specified count is set to OFF and is not subject to normal startup, so the application whose initialization count has exceeded the specified count Therefore, it is possible to prevent a situation where the MFP 410 cannot be started due to the above.

(Modification)
In addition, this invention is not limited to the said embodiment, A various deformation | transformation is possible.

  For example, in each of the above embodiments, the dependency relationship with the HDD 46 is defined for each application in the dependency table. However, the present invention is not limited to this, and a dependency relationship with a storage medium other than the HDD 46 may also be defined. .

  Further, for example, in the second embodiment, the normal activation flag of each application stored in the NVRAM 254 may be initialized when the user authentication fails in step S212. If the failure of the HDD 46 is recovered by replacing the HDD 46, the normal startup flag of each application stored in the NVRAM 254 must be initialized, and the application whose normal startup flag is set to OFF at the normal startup cannot be started. End up. For this reason, if the above modification is performed, all applications can be activated if normal activation is performed after intentional authentication failure (error) at the time of user authentication in step S212.

  Further, for example, in the third embodiment, when the user authentication fails in step S312, the number of times of initialization of each application stored in the NVRAM 454 may be initialized.

  The failure recovery program executed in the MFPs of the above embodiments and modifications is a file in an installable or executable format, such as a CD-ROM, CD-R, memory card, DVD (Digital Versatile Disk), flexible The program is stored in a computer-readable storage medium such as a disk (FD).

  In addition, the failure recovery program executed by the MFPs of the above embodiments and modifications may be provided by being stored on a computer connected to a network such as the Internet and downloaded via the network. Further, the failure recovery program executed by the multifunction device of each of the above embodiments and modifications may be provided or distributed via a network such as the Internet. Further, the failure recovery program executed by the MFPs according to the above embodiments and modifications may be provided by being incorporated in advance in a ROM or the like.

  The failure recovery program executed by the MFPs according to the above-described embodiments and modifications has a module configuration for realizing the above-described units on a computer. As actual hardware, the CPU reads out a failure recovery program from the ROM onto the DRAM and executes it, whereby the above-described units are realized on the computer.

DESCRIPTION OF SYMBOLS 1 Failure recovery system 2 Network 5 External device 10, 210, 410 Multi-function machine 20 Operation panel 25 Power switch 30 Engine 32 Scanner 34 Plotter 40, 240, 440 Controller 42 Network I / F
44 DRAM
46 HDD
48 Image processor 50 ROM
52, 252, 452 CPU
110 BIOS
120, 320, 520 OS
130, 330, 530 Service 140, 340, 540 CS
142 OCS
144, 544 NCS
146, 346, 546 SCS
150 SRM
160 Application 162 Copy application 164 Printer application 166 Scanner application 168 Facsimile application 254, 454 NVRAM

JP 2003-089456 A

Claims (9)

An information processing apparatus connected to an external device via a network,
First storage means;
Input accepting means for accepting a recovery activation input for recovering a failure occurring in the first storage means and activating the information processing apparatus;
A transmission control means for transmitting application information indicating an application included in the information processing apparatus to the external apparatus after the restoration activation input is received;
Reception control means for receiving, from the external device, launch target application information indicating a launch target application selected by the external device from among the applications indicated by the app information;
Determining means for determining whether or not the activation target application indicated by the activation target application information executes processing using the first storage means;
An initialization unit that initializes a storage area of the first storage unit used for processing of the activation target application when it is determined to execute a process using the first storage unit;
An activation unit that activates the activation target application when the storage area is initialized;
An information processing apparatus comprising: A second storage unit that stores a dependency table that defines whether the application depends on the first storage unit;
The determination unit refers to the dependency table, and determines that the activation target application executes processing using the first storage unit when the activation target application depends on the first storage unit. The information processing apparatus according to claim 1. Non-volatile rewritable third storage means for storing activation information indicating whether to activate the application when an input for normal activation is accepted by the input accepting means for each application;
Setting means for setting the activation information of the activation target application to activation; and
The activation unit activates an application whose activation information indicates activation when the input reception unit receives the normal activation input after the information processing apparatus is powered off. Item 3. The information processing apparatus according to item 1 or 2. Non-volatile rewritable fourth storage means for storing the number of times of initialization of the storage area of the first storage means used for processing of the application for each application;
Update means for updating the number of times of initialization of the activation target application when a storage area of the first storage means used for processing of the activation target application is initialized;
The transmission control unit is configured such that the initialization count of the applications included in the information processing apparatus is a specified number of times when the input of the restoration activation is received by the input reception section after the information processing apparatus is powered off. The information processing apparatus according to claim 3, wherein application information indicating an application excluding the above applications is transmitted to the external apparatus.   5. The information processing apparatus according to claim 4, wherein the setting unit sets the activation information of an activation target application whose initialization count is equal to or greater than a specified count to be not activated. Further comprising display control means for displaying a warning display on the display means to prohibit the power-off of the information processing apparatus after the recovery activation input is received,
The information processing apparatus according to claim 1, wherein the transmission control unit transmits the application information to the external apparatus after the warning display is displayed. The reception control means further receives user information of a user of the external device from the external device after receiving the recovery activation input,
An authentication means for authenticating the user using the user information;
The information processing apparatus according to claim 1, wherein the transmission control unit transmits the application information to the external apparatus when the user authentication is successful. A failure recovery method executed by an information processing device connected to an external device via a network,
An input receiving step in which an input receiving means receives an input of a recovery start for recovering a failure occurring in the first storage means and starting the information processing apparatus;
A transmission control step for transmitting application information indicating an application included in the information processing apparatus to the external apparatus after the transmission control unit receives the input of the recovery activation;
A reception control step in which reception control means receives activation target application information indicating an activation target application selected by the external device from the applications indicated by the application information;
A determination step of determining whether or not the activation target application indicated by the activation target application information executes processing using the first storage unit;
An initialization step of initializing a storage area of the first storage means used for processing of the activation target application when it is determined that the initialization means executes processing using the first storage means;
A starting step of starting the application to be started when the storage area is initialized;
A failure recovery method comprising: A failure recovery program executed by an information processing device connected to an external device via a network,
An input receiving step for receiving an input of recovery start for recovering a failure occurring in the first storage means and starting the information processing apparatus;
A transmission control step of transmitting application information indicating an application included in the information processing apparatus to the external apparatus after the input of the recovery activation is received;
A reception control step of receiving, from the external device, startup target application information indicating a startup target application selected by the external device from among the applications indicated by the application information;
A determination step of determining whether or not the activation target application indicated by the activation target application information executes processing using the first storage unit;
An initialization step of initializing a storage area of the first storage means used for processing of the activation target application when it is determined to execute the process using the first storage means;
A startup step of starting the startup target application when the storage area is initialized;
Disaster recovery program to make the computer run.

Images