Controller and image forming device

Abstract

To provide a controller which can detect a sign in which a device becomes defective to recover from a failure.SOLUTION: A controller comprises: a first storage unit which stores a first firmware; a second storage unit which stores a second firmware; a processor unit which reads the firmware from the first storage unit and executes the firmware; a temperature measurement unit which measures the temperature of the processor unit; and a recovery unit which determines whether or not the temperature indicates that the processor unit has normally started. The recovery unit, after the processor unit executes the first firmware stored in the first storage unit, when determining that the temperature indicates that the processor unit has not normally started, stores the second firmware in the first storage unit.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a control device and an image forming apparatus. [Background technology]

[0002] Patent document 1 discloses a technology for creating an operation history of an information processing device from after the operating system is shut down until the operating system is started up, storing information including the created operation history, and detecting unauthorized use and improper use based on the stored operation history. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2014-075118 Summary of the Invention [Problem to be solved by the invention]

[0004] The technology disclosed in Patent Document 1 only detects unauthorized use and improper use, but cannot recover from failures caused by unauthorized or improper use. Furthermore, the technology disclosed in Patent Document 1 cannot detect signs that an information processing device will become defective before unauthorized or improper use occurs. Therefore, one aspect of the present disclosure aims to provide a control device and an image forming device that can detect signs that an device will become defective and recover from a failure. [Means for solving the problem]

[0005] A control device according to one embodiment of the present disclosure includes a first memory unit that stores first firmware, a second memory unit that stores second firmware, a processor unit that reads and executes firmware from the first memory unit, a temperature measurement unit that measures the temperature of the processor unit, and a recovery unit that determines whether the temperature indicates that the processor unit has started up normally, and if the recovery unit determines that the temperature indicates that the processor unit has not started up normally after the processor unit executes the first firmware stored in the first memory unit, the recovery unit stores the second firmware in the first memory unit.

[0006] An image forming apparatus according to one embodiment of the present disclosure is equipped with a control device, the control device including a first memory unit that stores first firmware, a second memory unit that stores second firmware, a processor unit that reads and executes firmware from the first memory unit, a temperature measurement unit that measures the temperature of the processor unit, and a recovery unit that determines whether the temperature indicates that the processor unit has started up normally, and the recovery unit stores the second firmware in the first memory unit if it determines that the temperature indicates that the processor unit has not started up normally after the processor unit executes the first firmware stored in the first memory unit. [Brief explanation of the drawings]

[0007] [Figure 1] FIG. 2 is a block diagram showing an example of the configuration of a control device according to the first embodiment. [Figure 2] 4 is a flowchart showing an example of an operation of the control device according to the first embodiment. [Figure 3] 3 is a flowchart showing an example of the operation of the control device according to the first embodiment, following FIG. 2. [Figure 4] 4 is a block diagram showing an example of a state in which a processor unit and a first storage unit are electrically connected. FIG. [Figure 5] FIG. 10 is a block diagram showing an example of a state in which the processor unit and the first storage unit are not electrically connected. [Figure 6A]10 is a diagram illustrating an example of the arrangement of the restoration unit and the switches in a case where the restoration unit is arranged so that the second wiring is longer than the first wiring. FIG. [Figure 6B] 10 is a graph showing an example of a signal output from a processor unit. [Figure 6C] FIG. 2 is a diagram schematically illustrating the flow of a signal propagating through a first wiring and a signal propagating through a second wiring. [Figure 6D] 10 is a graph showing an example of a signal input to a first storage unit. [Figure 7A] 10 is a diagram illustrating an example of the arrangement of the restoration unit and the switch in a case where the restoration unit is arranged so that the second wiring is shorter than the first wiring. FIG. [Figure 7B] 10 is a graph showing an example of a signal output from a processor unit. [Figure 7C] FIG. 2 is a diagram schematically illustrating the flow of a signal propagating through a first wiring and a signal propagating through a second wiring. [Figure 7D] 10 is a graph showing an example of a signal input to a first storage unit. [Figure 8] FIG. 10 is a block diagram showing an example of an image forming apparatus according to a second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0008] (First embodiment) The first embodiment will be described with reference to Figures 1 to 7. In the drawings, the same or equivalent elements are given the same reference numerals, and redundant explanations will be omitted.

[0009] 1 is a block diagram showing an example of the configuration of a control device 100 according to this embodiment. The control device 100 includes a first storage unit 101, a second storage unit 102, a third storage unit 103, a processor unit 104, a temperature measurement unit 105, a recovery unit 106, a switch 107, and a power supply control unit 108. The first storage unit 101, the second storage unit 102, the third storage unit 103, the processor unit 104, the temperature measurement unit 105, the recovery unit 106, the switch 107, and the power supply control unit 108 are each realized by separate hardware.

[0010] The first storage unit 101 stores the first firmware 111. The first storage unit 101 is a non-volatile memory. For example, the first storage unit 101 is realized by a Flash ROM. The first firmware 111 is realized by a processor constituting the processor unit 104 reading and running a program constituting the first firmware 111. For example, the first firmware 111 constitutes a BIOS (Basic Input Output System).

[0011] The second storage unit 102 stores the second firmware 112. The second storage unit 102 is a non-volatile memory. For example, the second storage unit 102 is realized by a Flash ROM. The second firmware 112 is firmware that replaces the first firmware 111. For example, the second firmware constitutes a BIOS that replaces the first firmware.

[0012] The third storage unit 103 stores the operating system 113. The third storage unit 103 is a non-volatile memory. For example, the third storage unit 103 is realized by an HDD (Hard Disk Drive).

[0013] The processor unit 104 is configured from a plurality of processors. For example, the processor unit 104 includes a CPU (Central Processing Unit) and is configured as an SoC (System on a Chip). The plurality of processors that make up the processor unit 104 are, for example, the plurality of processors that make up a CPU.

[0014] The processor unit 104 reads and executes firmware from the first storage unit 101. Specifically, after the processor unit 104 is started, one of the multiple processors in the processor unit 104 starts operating. Then, the processor that has started operating reads the first firmware 111 from the first storage unit 101 and executes the processing specified by the read first firmware 111.

[0015] The temperature measuring unit 105 measures the temperature 114 of the processor unit 104. The temperature measuring unit 105 is configured by a temperature sensor. For example, the temperature measuring unit 105 is disposed in contact with the processor unit 104. Alternatively, the temperature measuring unit 105 may be disposed at a distance from the processor unit 104.

[0016] When the processor unit 104 has not started up normally, the recovery unit 106 recovers firmware stored in the first storage unit 101 that is to be read into the processor unit 104 so that the processor unit 104 starts up normally. The recovery unit 106 includes a processor and a memory, and is realized by an MCU (Micro Controller Unit). In the present disclosure, a state in which the processor unit 104 has not started up normally refers to a state in which the multiple processors that make up the processor unit 104 are not operating.

[0017] The recovery unit 106 determines whether the temperature 114 indicates that the processor unit 104 has started up normally. If the recovery unit 106 determines that the temperature 114 indicates that the processor unit 104 has not started up normally, the recovery unit 106 stores the second firmware 112 in the first storage unit 101 and causes the processor unit 104 to execute the second firmware 112 stored in the first storage unit 101.

[0018] The switch 107 connects the processor unit 104 and the first storage unit 101. If it is determined that the temperature 114 indicates that the processor unit 104 has started up normally, the switch 107 maintains the electrical connection between the processor unit 104 and the first storage unit 101. On the other hand, if it is determined that the temperature 114 indicates that the processor unit 104 has not started up normally, the switch 107 is switched to electrically disconnect the processor unit 104 and the first storage unit 101.

[0019] The power supply control unit 108 performs general control related to the power supply, such as turning the power supply on and off, adjusting the voltage of the power supply, and adjusting the current of the power supply.

[0020] 2 and 3 are flowcharts showing an example of the operation of the control device 100.

[0021] In step S201, the power supply control unit 108 turns on the power supply (not shown) of the control device 100. When the power supply of the control device 100 is turned on, the switch 107 switches so that the processor unit 104 and the first storage unit 101 are electrically connected (see FIG. 4).

[0022] In step S202, one of the processors constituting the processor unit 104 starts operating.

[0023] In step S203, the processor unit 104 reads the first firmware 111 from the first storage unit 101 and executes the read first firmware 111. Specifically, one processor that started operation in step S202 reads the first firmware 111 from the first storage unit 101 and executes the processing specified by the read first firmware 111.

[0024] In step S204, the processor unit 104 determines whether or not the operating system 113 stored in the third storage unit 103 can be started. Specifically, if the firmware executed by the processor unit 104 operates normally and the processor unit 104 starts up normally, the processor unit 104 determines that the operating system 113 can be started. On the other hand, if the firmware executed by the processor unit 104 does not operate normally and the processor unit 104 does not start up normally, the processor unit 104 determines that the operating system 113 cannot be started.

[0025] If the processor unit 104 determines in step S204 that the operating system 113 cannot be started, then in step S205, one of the multiple processors constituting the processor unit 104 remains in operation. In other words, if the processor unit 104 determines that the operating system 113 cannot be started, then only the processor that started operation in step S202 remains in operation. On the other hand, if the processor unit 104 determines in step S204 that the operating system 113 can be started, then in step S206, the multiple processors constituting the processor unit 104 begin operation.

[0026] The operation of the control device 100 will be further described with reference to FIG.

[0027] In step S301, the temperature measurement unit 105 measures the temperature 114 of the processor unit 104. The temperature measurement unit 105 outputs a signal indicating the measured temperature 114 to the recovery unit .

[0028] In step S302, the recovery unit 106 determines whether the temperature 114 measured in step S301 indicates that the processor unit 104 has started up normally.

[0029] 2, when multiple processors constituting the processor unit 104 are operating, the temperature of the processor unit 104 is higher than when only one processor is operating. In other words, the temperature 114 when the processor unit 104 has started up normally is higher than the temperature 114 when the processor unit 104 has not started up normally.

[0030] Therefore, if the temperature 114 exceeds the threshold value, the recovery unit 106 determines that the temperature 114 indicates that the processor unit 104 has started up normally. On the other hand, if the temperature 114 is equal to or less than the threshold value, the recovery unit 106 determines that the temperature 114 indicates that the processor unit 104 has started up normally.

[0031] 2, a predetermined time is required for the operating system 113 to transition to an executable state. Therefore, for example, after the first firmware 111 is executed in step S203 illustrated in FIG. 2, the recovery unit 106 determines whether the temperature 114 exceeds a threshold value after a predetermined time has elapsed.

[0032] 2, the temperature measurement unit 105 may continuously output a signal indicating the temperature 114 to the recovery unit 106. Then, when the transition of the temperature 114 reaches a steady state, the recovery unit 106 may determine whether or not the temperature 114 measured in step S301 indicates that the processor unit 104 has started up normally. In other words, when the transition of the temperature 114 reaches a steady state after the first firmware 111 is executed in step S203 illustrated in FIG. 2, the recovery unit 106 may determine whether or not the temperature 114 exceeds a threshold value.

[0033] In step S302, if the temperature 114 indicates that the processor unit 104 has started up normally, in step S303, the processor unit 104 starts up the operating system 113. Here, the recovery unit 106 maintains the state of the switch 107 so as to electrically connect the processor unit 104 and the first storage unit 101 (see FIG. 4).

[0034] On the other hand, if the temperature 114 indicates that the processor unit 104 has not started up normally in step S302, then in step S304 the recovery unit 106 electrically disconnects the processor unit 104 from the first storage unit 101. Specifically, the recovery unit 106 switches the switch 107 so as to electrically disconnect the processor unit 104 from the first storage unit 101 (see FIG. 5).

[0035] In step S305, the recovery unit 106 stores the second firmware 112 in the first storage unit 101. This allows the recovery unit 106 to recover the firmware read by the processor unit 104. In other words, the control device 100 according to this embodiment can automatically recover firmware when malfunctioning firmware is stored in the first storage unit 101. Therefore, in the control device 100 according to this embodiment, no manual operation is required to recover the firmware, and therefore no action by an expert is required. Furthermore, when firmware is recovered manually, the recovery work may take time. However, the control device 100 according to this embodiment can automatically recover firmware, thereby reducing the time required for recovery.

[0036] In step S306, the recovery unit 106 electrically connects the processor unit 104 and the first storage unit 101. Specifically, the recovery unit 106 switches the switch 107 so as to electrically connect the processor unit 104 and the first storage unit 101. In other words, the recovery unit 106 stores the second firmware 112 in the first storage unit 101, and then switches the switch 107 to electrically connect the processor unit 104 and the first storage unit 101.

[0037] In step S307, the recovery unit 106 restarts the control device 100. Specifically, the recovery unit 106 outputs a reset signal to the power supply control unit 108 to restart the control device 100. In response to the reset signal, the power supply control unit 108 turns off the power supply to the control device 100 and then performs processing to turn on the power supply to the control device.

[0038] In step S308, one of the processors constituting the processor unit 104 starts operating.

[0039] In step S309, the processor unit 104 reads the second firmware 112 stored in step S305 from the first storage unit 101 and executes the read second firmware 112. That is, if it is determined in step S302 that the temperature 114 indicates that the processor unit 104 has not started up normally, in step S308 the recovery unit 106 causes the processor unit 104 to execute the second firmware 112 stored in the first storage unit 101. Therefore, the control device 100 according to this embodiment detects signs of a malfunction in the control device 100 based on the temperature 114, and when a sign of a malfunction in the control device 100 is detected, the control device 100 can recover from the failure by recovering the firmware read by the processor unit 104. Then, the processor unit 104 proceeds to step S204 illustrated in FIG. 2.

[0040] Fig. 4 is a block diagram showing an example of a state in which the processor unit 104 is electrically connected to the first storage unit 101. As shown in Fig. 4, in step S306 shown in Fig. 3, the switch 107 is switched so that the processor unit 104 is electrically connected to the first storage unit 101, the second storage unit 102, and the recovery unit 106.

[0041] 5 is a block diagram showing an example of a state in which the processor unit 104 is not electrically connected to the first storage unit 101. As shown in the example of FIG. 5, when the switch 107 is switched so that the processor unit 104 is electrically disconnected from the first storage unit 101, the second storage unit 102, and the recovery unit 106, the processor unit 104 is not electrically connected to the first storage unit 101, the second storage unit 102, and the recovery unit 106.

[0042] 3, in a state in which the recovery unit 106 electrically disconnects the processor unit 104 and the first storage unit 101, the recovery unit 106 stores the second firmware 112 in the first storage unit 101 in step S305 illustrated in FIG. 3. Therefore, the firmware to be loaded into the processor unit 104 can be recovered without the processor unit 104 being electrically connected to the first storage unit 101, the second storage unit 102, and the recovery unit 106. Furthermore, because the recovery unit 106 is independent of the third storage unit 103, the recovery unit 106 can recover the firmware to be loaded into the processor unit 104, separated from the operating system 113.

[0043] Furthermore, in the control device 100 according to this embodiment, in order to restore firmware to be loaded into the processor unit 104, there is no need to load dedicated software for restoration processing into the processor unit 104. Furthermore, the control device 100 according to this embodiment can restore firmware to be loaded into the processor unit 104 without limiting the processor that constitutes the processor unit 104.

[0044] Next, the arrangement of the recovery unit 106 and the switch 107 will be described with reference to FIGS. 6A to 7D.

[0045] 6A is a diagram showing an example of the arrangement of the restoration unit 106 and the switch 107 when the restoration unit 106 is arranged so that the second wiring 602 is longer than the first wiring 601. The control device 100 illustrated in FIG. 6A includes a first wiring 601 and a second wiring 602. The first wiring 601 connects the switch 107 and the first storage unit 101. The second wiring 602 branches from the switch 107 of the first wiring 601 and reaches the restoration unit 106.

[0046] FIG. 6B is a graph showing an example of a signal E10 output from the processor unit 104. In FIG. 6B, the horizontal axis represents time and the vertical axis represents signal values. FIG. 6C is a diagram schematically showing the flow of a signal propagating through the first wiring 601 and a signal propagating through the second wiring 602. Specifically, FIG. 6C schematically shows the flow of signal E10, signal E11 branching from signal E10 and propagating through the second wiring 602 toward the first wiring 601, and signal E12 branching from signal E10 and propagating toward the first wiring 601 without propagating to the second wiring 602. FIG. 6D is a graph showing an example of a signal E13 input to the first storage unit 101. In FIG. 6D, the horizontal axis represents time and the vertical axis represents signal values.

[0047] As illustrated in FIG. 6C , the first wiring 601 propagates a signal E11 that reaches the first wiring 601 after propagating through the second wiring 602, and a signal E12 that reaches the first wiring 601 without propagating through the second wiring 602. Here, as illustrated in FIG. 6A , if the restoration unit 106 is arranged so that the second wiring 602 is longer than the first wiring 601, the phase of the signal E11 when it reaches the first storage unit 101 may differ from the phase of the signal E12 when it reaches the first storage unit 101. In that case, as illustrated in FIG. 6D , the waveform of the signal E13 may differ from the waveform of the signal E10. As a result, if the restoration unit 106 is arranged so that the second wiring 602 is longer than the first wiring 601, a signal different from the signal output from the processor unit 104 may be input to the first storage unit 101. As a result, the first storage unit 101 may not be able to correctly recognize the signal output from the processor unit 104.

[0048] 7A is a diagram showing an example of the arrangement of the restoration unit 106 and the switch 107 when the restoration unit 106 is arranged so that the second wiring 702 is shorter than the first wiring 701. The control device 100 illustrated in FIG. 7A includes a first wiring 701 and a second wiring 702. The first wiring 701 connects the switch 107 and the first storage unit 101. The second wiring 702 branches from the switch 107 of the first wiring 701 and reaches the restoration unit 106.

[0049] FIG. 7B is a graph showing an example of a signal E20 output from the processor unit 104. In FIG. 7A, the horizontal axis represents time and the vertical axis represents signal values. FIG. 7C is a diagram schematically showing the flow of a signal propagating through the first wiring 701 and the second wiring 702. Specifically, FIG. 7C schematically shows the flow of signal E20, signal E21 branching from signal E20 and propagating through the second wiring 702 toward the first wiring 701, and signal E22 branching from signal E20 and propagating toward the first wiring 701 without propagating to the second wiring 602. FIG. 7D is a graph showing an example of a signal E23 input to the first storage unit 101. In FIG. 7D, the horizontal axis represents time and the vertical axis represents signal values.

[0050] As illustrated in FIG. 7A, when the restoration unit 106 is arranged so that the second wiring 702 is shorter than the first wiring 701, the signal E21 reaches the first storage unit 101 without a phase change from the signal E20. In this case, as illustrated in FIG. 7D, the waveform of the signal E23 is the same as the waveform of the signal E20. Therefore, by arranging the restoration unit 106 so that the second wiring 702 is shorter than the first wiring 601, a signal identical to the signal output from the processor unit 104 is input to the first storage unit 101. This allows the first storage unit 101 to correctly recognize the signal output from the processor unit 104.

[0051] Second Embodiment The second embodiment will be described with reference to Fig. 8. In the drawings, the same or equivalent elements are denoted by the same reference numerals, and redundant explanations will be omitted.

[0052] 8 is a block diagram showing an example of an image forming apparatus 800 according to this embodiment. The image forming apparatus 800 is equipped with a control device 100, and includes an image input unit 801, an image forming unit 802, a paper conveying unit 803, and an image output unit 804. The control device 100 according to this embodiment is similar to the control device 100 according to the first embodiment, and therefore a detailed description thereof will be omitted.

[0053] The image input unit 801 reads an original document and generates image data representing the read original document. Alternatively, the image input unit 801 may obtain image data from a terminal device (not shown) connected to the image forming apparatus 800 via a network.

[0054] The image forming unit 802 forms an image on paper based on the image data generated or acquired by the image input unit 801. Specifically, the image forming unit 802 attaches coloring material to a recording medium to form an image on paper based on the image data generated by the image input unit 801. For example, the image forming unit 802 can be configured as a laser printer using an electrophotographic method, or an inkjet printer using an inkjet method.

[0055] The paper transport unit 803 transports the paper on which the image has been formed by the image forming unit 802 .

[0056] The image output unit 804 outputs the paper on which the image has been formed by the image forming unit 802 from a paper discharge outlet (not shown).

[0057] The operating system 113 according to this embodiment is a program that controls the processing executed by the image input unit 801, the image forming unit 802, the paper conveying unit 803, and the image output unit 804. The first firmware 111 and the second firmware 112 according to this embodiment are programs that execute the lowest level processing related to input / output between the operating system 113 and the hardware that constitutes the image input unit 801, the image forming unit 802, the paper conveying unit 803, and the image output unit 804.

[0058] The image forming apparatus 800 includes the control device 100. When the first firmware 111 does not operate normally and the processor unit 104 does not start up normally, the recovery unit 106 stores the second firmware 112 in the first storage unit 101 instead of the first firmware 111. This allows the recovery unit 106 to recover the firmware loaded by the processor unit 104. As a result, in the image forming apparatus 800 according to this embodiment, the processor unit 104 can execute the firmware normally and start up the operating system 113 normally. This allows the image forming apparatus 800 according to this embodiment to automatically recover the firmware and allow the image input unit 801, the image forming unit 802, the paper conveying unit 803, and the image output unit 804 to function normally, even if malfunctioning firmware is stored in the first storage unit 101.

[0059] The present disclosure is not limited to the above-described embodiments, and may be replaced with a configuration that is substantially the same as the configuration shown in the above-described embodiments, a configuration that achieves the same effect, or a configuration that can achieve the same purpose. The present disclosure also includes within its technical scope embodiments obtained by appropriately combining the technical means disclosed in different embodiments. Furthermore, new technical features can be formed by combining the technical means disclosed in each embodiment. [Explanation of symbols]

[0060] 100 control device, 101 first memory unit, 102 second memory unit, 103 third memory unit, 104 processor unit, 105 temperature measurement unit, 106 recovery unit, 107 switch, 108 power supply control unit, 111 first firmware, 112 second firmware, 113 operating system, 114 temperature, 601 first wiring, 602 second wiring, 701 first wiring, 702 second wiring, 800 image forming device, 801 image input unit, 802 image forming unit, 803 paper transport unit, 804 image output unit

Claims

1. a first storage unit that stores the first firmware; a second storage unit that stores the second firmware; a processor unit that reads and executes firmware from the first storage unit; a temperature measuring unit for measuring the temperature of the processor unit; a recovery unit that determines whether the temperature indicates that the processor unit has started up normally; Equipped with When the recovery unit determines that the temperature indicates that the processor unit has not started up normally after the processor unit executes the first firmware stored in the first storage unit, the recovery unit stores the second firmware in the first storage unit. Control device.

2. the recovery unit, when determining that the temperature indicates that the processor unit has not started up normally, causes the processor unit to execute the second firmware stored in the first storage unit; The control device according to claim 1 .

3. The temperature indicating that the processor unit has started up normally indicates that the temperature exceeds a threshold value, The temperature indicating that the processor unit is not operating normally is the temperature indicating the threshold value or lower. The control device according to claim 1 or 2.

4. a switch connecting the processor unit and the first storage unit Furthermore, When the recovery unit determines that the temperature indicates that the processor unit has started up normally, it switches the switch to electrically connect the processor unit and the first storage unit, and when it determines that the temperature indicates that the processor unit has not started up normally, it switches the switch to electrically disconnect the processor unit and the first storage unit. The control device according to claim 1 or 2.

5. The recovery unit stores the second firmware in the first storage unit, and then switches the switch to electrically connect the processor unit and the first storage unit. The control device according to claim 4.

6. The temperature measurement unit is separate from the processor unit. The control device according to claim 1 or 2.

7. a first wiring that connects the switch and the first storage unit; a second wiring branching from the switch of the first wiring and leading to the recovery unit; Equipped with The restoration portion is disposed so that the second wiring is shorter than the first wiring. The control device according to claim 1 or 2.

8. The control device according to claim 1 or 2 is installed. Image forming device.

Images