Router system and multiple verification and recovery method thereof

Abstract

The invention provides a router system and a multi-check and recovery method thereof, and relates to the technical field of router system management. The router system comprises a CPU processor used for routing operation and forwarding of a data packet; and a memory; wherein the memory comprises a backup firmware partitioning device; the backup firmware partition device at least comprises three firmware partitions and is used for storing system data; firmware partitions in the backup firmware partition device are backed up for each other in pairs, and bidirectional parameter verification is executed periodically; and if the verification result is different, triggering an election mechanism, selecting the most correct partition as a standard, and carrying out data recovery to ensure that the parameters of the backup firmware partitions are consistent. The backup firmware partitions are mutually backed up in pairs, bidirectional verification is periodically carried out, once differences are found, an election mechanism is triggered, and the newest and most correct firmware partition is selected for recovery, so that the parameters of the firmware partitions are kept consistent, and stable operation of a router system is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of router system management, and in particular to a router system and a multiple verification and recovery method thereof. Background Art

[0002] With the rapid development of the Industrial Internet of Things, the market for industrial routers is huge, especially in some unattended and inconveniently maintained environments, such as towers, bridges, high-rise buildings, traffic lights, etc., where industrial routers are used for data transmission, data collection, intelligent control and other application scenarios, which puts extremely high demands on the operational stability of industrial routers. The safety and accuracy of system parameters are important prerequisites for the stable operation of embedded devices such as routers. Therefore, an active parameter management method that can provide multiple redundancy, self-checking, and self-recovery of router system parameters is needed to ensure the stable operation of the router system.

[0003] The existing router parameter backup consists of two simple partitions, the primary partition and the backup partition. The backup partition backs up the data. When an abnormality is found, the backup partition copies the data to the primary partition. This is a one-way backup and one-way recovery, that is, a one-way backup from the primary partition to the backup partition, and a one-way recovery from the backup partition to the primary partition. This traditional data backup method cannot achieve two-way backup and two-way verification. Once the backup partition fails, it will cause a systemic disaster. In addition, the existing parameter backup mechanism is to passively verify the correctness of the partition. Once the parameter is abnormal, it cannot trigger the alarm and self-recovery program in time, which will affect the reliability and security of the system.

[0004] In view of this, the applicant filed this application after studying the existing technology. Summary of the invention

[0005] The present invention aims to provide a router system and a multiple verification and recovery method thereof, so as to solve the problems that the existing router system lacks a mechanism for mutual backup between primary and backup partitions, lacks a parameter monitoring mechanism, and does not perform regular verification, error correction and recovery on parameters.

[0006] In order to solve the above technical problems, the present invention is implemented through the following technical solutions:

[0007] A router system, characterized by comprising:

[0008] CPU processor, used for routing calculations and data packet forwarding;

[0009] and a memory; wherein the memory includes a backup firmware partition device;

[0010] The backup firmware partition device includes at least three firmware partitions for storing system data. The firmware partitions in the backup firmware partition device back up each other in pairs and periodically perform bidirectional parameter verification.

[0011] Preferably, it also includes an interface circuit; wherein the interface circuit includes: a local area network interface, a wide area network interface, a console port and an auxiliary port.

[0012] Preferably, the bidirectional parameter verification is performed periodically, that is, the firmware partitions within the backup firmware partition device actively initiate parameter verification with other firmware partitions in turn; if a difference in parameter verification is found, an election mechanism is triggered, and the most correct firmware partition is selected as the standard among the firmware partitions within the backup firmware partition device, and the data is restored to other abnormal firmware partitions to ensure the parameter consistency of each firmware partition within the backup firmware partition device.

[0013] Preferably, the criteria of the election mechanism are: the MD5 check of the firmware partition is normal, the firmware partition has the largest number of parameters, the firmware partition's parameter update time is the latest, and the firmware partition can provide the main parameters.

[0014] Preferably, when the backup firmware partition device is 3 firmware partitions, the backup firmware partition device includes a main partition, a first backup partition and a second backup partition; the parameters of the three firmware partitions are checked in pairs, and 6 verification operations are performed in each cycle; that is, the main partition is taken as the main one, and parameter verification is performed with the first backup partition and the second backup partition respectively; similarly, the first backup partition and the second backup partition are taken as the main ones, and parameter verification is performed with the other two partitions respectively.

[0015] The present invention also provides a multiple verification and recovery method for the router system as described above, characterized in that it includes:

[0016] Read the firmware information of the primary partition of the backup firmware partition device, and perform MD5 verification on the primary parameters of the primary partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is normal in the verification;

[0017] Read the firmware information of the first backup partition of the backup firmware partition device, and perform MD5 verification on the main parameters of the first backup partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is normal in the verification;

[0018] Read the firmware information of the second backup partition of the backup firmware partition device, and perform MD5 value verification on the main parameters of the second backup partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition with normal verification, until the verification of all firmware partitions in the backup firmware partition device is completed.

[0019] Preferably, if the verification of all firmware partitions in the backup firmware partition device is abnormal, the default main parameter file set by the system is read to restore the data in the backup firmware partition device.

[0020] Preferably, the firmware information includes: manufacturer name, MD5 value, size, firmware type, MCU firmware, firmware kernel kernel and root file system rootfs; the main parameter is the key data of the firmware information; wherein, the MD5 value is the MD5 value of the firmware kernel and the root file system; the size is the length of the firmware kernel and the root file system.

[0021] In summary, compared with the prior art, the present invention has the following beneficial effects:

[0022] The router system of the present invention physically adds backup firmware partitions, and each firmware partition forms a "mutual verification" device that "backs up each other". This device is a two-way verification device. Not only can the backup partition restore the main partition, but the main partition can also actively restore the backup partition data, which solves the traditional backup method of one-way backup and one-way recovery in the prior art.

[0023] Secondly, the router system of the present invention will regularly trigger the firmware partitions in the backup firmware partition device to perform parameter legitimacy self-check and mutual verification. Once the parameters of a firmware partition differ from those of other partitions, the "election" mechanism will be triggered to select the most correct firmware partition, and based on the parameters of this firmware partition, the parameters of other firmware partitions will be restored to keep the parameters of the firmware partitions consistent, thereby ensuring the stable operation of the router system. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0025] Figure 1 This is a schematic diagram of the structure of the triangulation calibration provided in Example 1.

[0026] Figure 2 This is a flowchart of the periodic parameter verification provided in Example 1.

[0027] Figure 3 This is a flowchart of the three firmware partitions provided in Example 2 backing up each other.

[0028] Figure 4 This is a schematic diagram of the structure of the firmware partition provided in Example 2.

[0029] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. DETAILED DESCRIPTION

[0030] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention. Therefore, the following detailed description of the embodiments of the present invention provided in the drawings is not intended to limit the scope of the invention claimed for protection, but merely represents the selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0031] Embodiment 1

[0032] Embodiment 1 of the present invention provides a router system, including the following components:

[0033] CPU (Central Processing Unit): Responsible for the router's routing operations and data packet forwarding. Specifically, the CPU executes routing protocols, exchanges information with other routers, maintains and updates routing tables, searches routing tables, and forwards data packets.

[0034] Interface circuit: including LAN interface, WAN interface (i.e. serial port), console port, auxiliary port, etc.

[0035] Memory: Contains various types of memory to meet different storage needs.

[0036] For example, RAM / DRAM (Random Access Memory / Dynamic Random Access Memory) is used to temporarily store data during system operation. When the router is started or the power is lost, the contents of RAM will be lost.

[0037] For example, NVRAM (non-volatile memory) does not lose its contents after the router loses power or restarts. Therefore, NVRAM is mainly used to save router configuration files and has a small storage capacity.

[0038] Such as Flash memory, erasable and programmable ROM, the content will not be lost after power failure and restart, which is equivalent to the hard disk of a computer. The flash of a router usually stores the image of uboot, kernel and file system, as well as user data, wireless calibration information, etc.

[0039] For example, ROM (read-only memory) is mainly used for system initialization and stores the router system power-on self-test code, which is used to detect whether each hardware part is intact.

[0040] The router system provided in this embodiment physically increases the number of backup areas and adds a backup firmware partition device to the memory of the router to store system data, thereby achieving parameter backup redundancy and stacking, and physically reducing the probability of parameter errors. The firmware partitions in the backup firmware partition device back up each other in pairs, periodically perform bidirectional parameter verification, check the parameters of each partition, and trigger the "election mechanism" in time to achieve self-recovery of abnormal data and prevent "unburned".

[0041] The backup firmware partition device includes at least three firmware partitions, such as Figure 1 As shown, if the backup firmware partition device is set to 3 firmware partitions, including a main partition, a first backup partition, and a second backup partition, other numbers of firmware partitions can also be set as needed, which is not limited here. The three firmware partitions back up each other in pairs, forming a "triangle check" model, and periodically bidirectionally checking.

[0042] Specifically, taking three firmware partitions as an example, when bidirectional verification is performed periodically, the parameters of the three firmware partitions are verified in pairs in each verification cycle, and 6 verification operations are performed in each cycle; that is, the primary partition is taken as the main one, and parameter verification is performed with the first backup partition and the second backup partition respectively; similarly, the first backup partition and the second backup partition are taken as the main ones, and parameter verification is performed with the other two partitions respectively.

[0043] Furthermore, if Figure 2 As shown, the bidirectional parameter check is performed periodically, that is, each firmware partition in the backup firmware partition device actively initiates parameter check with other firmware partitions. If a difference in parameter check is found, an election mechanism is triggered to select the most correct firmware partition in the firmware partitions in the backup firmware partition device as a standard, and restore data to other abnormal firmware partitions to ensure parameter consistency of each firmware partition in the backup firmware partition device.

[0044] Furthermore, the criteria of the election mechanism are: the MD5 check of the partition is normal, the partition has the largest number of parameters, the parameter update time of the partition is the latest, and the partition can provide the main parameters.

[0045] According to the standard of the election mechanism, a firmware partition with the lowest error probability is selected, and the parameters of the firmware partition are used as a basis to restore the parameters of other firmware partitions.

[0046] In summary, compared with the prior art, the present invention has the following beneficial effects:

[0047] The firmware partitions in the backup firmware partition device provided by the present invention constitute a "mutual verification" device that "backs up each other in pairs". This device is a two-way verification device. Not only can the backup partition restore the main partition, but the main partition can also actively restore the backup partition data, solving the traditional backup method of one-way backup and one-way recovery in the prior art.

[0048] Secondly, the backup mechanism of the present invention will regularly trigger the partitions in the backup firmware partition device to perform parameter legitimacy self-check and mutual verification. Once the parameters of a firmware partition differ from those of other partitions, the "election" mechanism will be triggered to select the firmware partition with the lowest error probability. Based on the parameters of this firmware partition, the parameters of other firmware partitions will be restored to keep the parameters of the firmware partitions in the backup firmware partition device consistent.

[0049] Embodiment 2

[0050] A second embodiment of the present invention provides a multiple verification and recovery method for a router system, which can be implemented by a router system as described above, and in particular, executed by one or more processors in the router system.

[0051] A multiple verification and recovery method for a router system comprises the following steps:

[0052] Read the firmware information of the primary partition of the backup firmware partition device, and perform MD5 verification on the primary parameters of the primary partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is normal in the verification;

[0053] Read the firmware information of the first backup partition of the backup firmware partition device, and perform MD5 verification on the main parameters of the first backup partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is normal in the verification;

[0054] Read the firmware information of the second backup partition of the backup firmware partition device, and perform MD5 value verification on the main parameters of the second backup partition; if the verification is normal, load the file of the current firmware partition; if it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition with normal verification, until the verification of all firmware partitions in the backup firmware partition device is completed.

[0055] Furthermore, if the verification of all firmware partitions in the backup firmware partition device is abnormal, the default main parameter file set by the system is read to restore the data in the backup firmware partition device.

[0056] Specifically, Figure 3 As shown, the firmware information of the main partition is read, and the main parameters (NVRAM.bin file) of the main partition are checked by MD5; if the MD5 check is normal, the file of the current firmware partition is loaded; if it is abnormal, the first backup partition is checked; if the first backup partition check is normal, the data is restored from the first backup partition and the main parameters are updated; if the first backup partition check is abnormal, the second backup partition is checked; if the second backup partition check is normal, the data is restored from the second backup partition and the main parameters are updated; if the second backup partition check is abnormal, the default main parameter file set by the system is read, and the data of the three firmware partitions are restored.

[0057] Next, read the firmware information of the first backup partition, and perform an MD5 check on the main parameters of the first backup partition (NVRAM_bkup.bin file); if the check is normal, load the file of the current firmware partition; if it is abnormal, check the main firmware partition; if the main partition check is normal, restore data from the main partition and update the backup parameters; if the main backup firmware partition check is abnormal, check the second backup partition; if the second backup partition check is normal, restore data from the second backup partition and update the backup parameters; if the second backup partition check is abnormal, read the default main parameter file set by the system and restore the data of the three firmware partitions.

[0058] Read the firmware information of the second backup partition, and perform an MD5 value check on the main parameters of the second backup partition (NVRAM_bkup2.bin file); if the check is normal, load the file of the current firmware partition; if it is abnormal, check the main firmware partition; if the main partition check is normal, restore data from the main partition and update the backup parameters; if the main backup firmware partition check is abnormal, check the first backup partition; if the first backup partition check is normal, restore data from the first backup partition and update the backup parameters; if the first backup partition check is abnormal, read the default main parameter file set by the system and restore the data of the three firmware partitions.

[0059] In this embodiment, the NVRAM.bin file is usually used to save the startup configuration data of the router. These data include the network settings, security settings, user account information, etc. of the router. When the router starts, it reads these configuration data from the NVRAM and performs initialization settings based on these data. Since NVRAM is non-volatile, the configuration data stored in the NVRAM.bin file will not be lost even if the router is powered off or restarted. This ensures the configuration persistence and stability of the router.

[0060] Of course, when recovering data from a firmware partition that has been verified to be normal, you can set a priority order, such as the primary partition first, then the first backup partition, the second backup partition, and so on.

[0061] like Figure 4 As shown, the configuration structure of each firmware partition includes: manufacturer name (for example, the manufacturer name is set to FOURFAITH-FIRMWARE or RUUIE-FIRMWARE), MD5 value (kernel+rootfs, i.e., MD5 value of kernel+file system), size (kernel+rootfs, i.e., length of kernel+file system), firmware type (such as IDU_UIMAGE), MCU firmware, kernel (firmware kernel) and rootfs (firmware file system).

[0062] In this embodiment, the main parameter of the MD5 check refers to the data or information used when performing the MD5 hash operation. The main parameter of the MD5 check is usually the key data or parameters extracted from the firmware information, which are essential for verifying the integrity and authenticity of the firmware. Such as key configuration parameters, check information (such as CRC check) or digital signatures extracted from the firmware information.

[0063] In this embodiment, after a series of modifications are made to the NVRAM, in order to permanently save these modifications and prevent them from being lost after the router is reset, the nvramcommit command needs to be executed. The nvramcommit command will save all changes currently made in the NVRAM to ensure that these settings are still valid after the device is restarted or powered off.

[0064] In summary, compared with the prior art, the present invention has the following beneficial effects:

[0065] The firmware partitions in the backup firmware partition device provided in the present invention constitute a "mutual verification" device that "backs up each other in pairs". This device is a two-way verification device. Not only can the backup partition restore the main partition, but the main partition can also actively restore the backup partition data.

[0066] In several embodiments provided in the embodiments of the present invention, it should be understood that the disclosed apparatus and method can also be implemented in other ways. The apparatus and method embodiments described above are merely schematic. For example, the flowcharts in the accompanying drawings show the possible architecture, functions and operations of the apparatus, method and computer program product according to multiple embodiments of the present invention. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, program segment or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0067] In addition, the functional modules in the various embodiments of the present invention may be integrated together to form an independent part, or each module may exist independently, or two or more modules may be integrated to form an independent part.

[0068] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention is essentially or partly contributed to the prior art or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions to enable a computer device (which can be a personal computer, an electronic device, or a network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk. It should be noted that, in this article, the terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements that are not explicitly listed, or also includes elements inherent to such a process, method, article or device. Without more constraints, an element defined by the phrase "comprising a..." does not exclude the existence of other identical elements in the process, method, article or apparatus comprising the element.

[0069] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0070] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0071] The word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0072] The "first\second" mentioned in the embodiments is only to distinguish similar objects, and does not represent a specific order for the objects. It is understandable that the "first\second" can be interchanged with the specific order or sequence where permitted. It should be understood that the objects distinguished by "first\second" can be interchanged where appropriate, so that the embodiments described herein can be implemented in an order other than those illustrated or described herein.

[0073] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A router system, characterized in that: include: CPU processor, used for routing calculations and data packet forwarding; and a memory; wherein the memory includes a backup firmware partition device; The backup firmware partition device includes at least three firmware partitions for storing system data; the firmware partitions in the backup firmware partition device back up each other in pairs, and periodically perform bidirectional parameter verification.

2. A router system according to claim 1, characterized in that , also includes an interface circuit; wherein the interface circuit includes: a local area network interface, a wide area network interface, a console port and an auxiliary port.

3. A router system according to claim 1, characterized in that ,The periodic execution of bidirectional parameter verification means that the firmware partition in the backup firmware partition device actively initiates parameter verification with other firmware partitions in turn; If a difference in parameter verification is found, an election mechanism is triggered to select the most correct firmware partition in the firmware partitions in the backup firmware partition device as a standard, and restore data to other abnormal firmware partitions to ensure parameter consistency of each firmware partition in the backup firmware partition device.

4. A router system according to claim 3, characterized in that ,The criteria of the election mechanism are as follows: the MD5 check of the firmware partition is normal, the firmware partition has the largest ,number of parameters, the parameter update time of the firmware ,partition is the latest, and the firmware partition can provide the ,main parameters.

5. A router system according to claim 3, characterized in that When the backup firmware partition device is composed of three firmware partitions, the backup firmware partition device includes a main partition, a first backup partition and a second backup partition; the parameters of the three firmware partitions are checked in pairs, and 6 verification operations are performed in each cycle; that is, the main partition is taken as the main one, and parameter verification is performed with the first backup partition and the second backup partition respectively; similarly, the first backup partition and the second backup partition are taken as the main ones, and parameter verification is performed with the other two partitions respectively.

6. A multiple verification and recovery method for a router system according to any one of claims 1 to 5, characterized in that: include: Reading firmware information of the primary partition of the backup firmware partition device, and performing MD5 verification on primary parameters of the primary partition; If the verification is normal, the file of the current firmware partition is loaded; If it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is verified to be normal; Reading firmware information of a first backup partition of the backup firmware partition device, and performing MD5 verification on main parameters of the first backup partition; If the verification is normal, the file of the current firmware partition is loaded; If it is abnormal, perform MD5 verification on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is verified to be normal; Reading firmware information of a second backup partition of the backup firmware partition device, and performing MD5 value verification on main parameters of the second backup partition; If the verification is normal, the file of the current firmware partition is loaded; If it is abnormal, perform MD5 check on at least one of the other firmware partitions in the backup firmware partition device, and restore data from a firmware partition that is checked normally, until the check of all firmware partitions in the backup firmware partition device is completed.

7. The multiple verification and recovery method of the router system according to claim 6, characterized in that If the verification of all firmware partitions in the backup firmware partition device is abnormal, the default main parameter file set by the system is read to restore the data in the backup firmware partition device.

8. The multiple verification and recovery method of the router system according to claim 6, characterized in that The firmware information includes: manufacturer name, MD5 value, size, firmware type, MCU firmware, firmware kernel kernel and root file system rootfs; the main parameter is the key data of the firmware information; wherein, the MD5 value is the MD5 value of the firmware kernel and the root file system; the size is the length of the firmware kernel and the root file system.

Images