Information processing system, information processing method, and information processing program

Abstract

The aim is to improve the availability of equipment when a failure occurs in equipment with multiple modules, compared to not considering the operating mode at the time of the failure. [Solution] The information processing system comprises a processor and a memory device. When a failure occurs in a device equipped with multiple modules, the processor obtains failure information from the memory device and uses the failure information to execute processing corresponding to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred.

Description

Technical Field

[0001] This disclosure relates to an information processing system, an information processing method, and an information processing program.

Background Art

[0002] In Patent Document 1, it is described that "in the image forming apparatus 101, the scanner apparatus 102 optically reads an image from a document and converts it into a digital image. The printer apparatus 104 outputs the digital image to a paper device called paper. The operation unit 105 includes a touch panel and hard keys for receiving settings for this apparatus from the user and displaying the processing state. The hard disk (HDD) 106 stores digital images, control programs, etc. The HDD 106 is a non-volatile storage device and may also be an SSD (Solid State Drive), eMMC (embedded Multi Media Card), etc. The FAX apparatus 107 transmits and receives digital images via a telephone line or the like. The controller 103 is connected to the scanner apparatus 102, the printer apparatus 104, the operation unit 105, the hard disk 106, and the FAX apparatus 107, and executes a job on the image forming apparatus 101 by issuing instructions to each module."

[0003] In Patent Document 2, it is described that "the present invention relates to a computer system having a checkpoint rollback method for realizing fault tolerance by re-executing data processing from the state before a failure occurs when a failure occurs in the system, and particularly relates to a computer system having a failure recovery function for software failures caused by software bugs or the like."

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Patent Document 2

[0005] Devices that provide multiple functions through multiple modules are known (see, for example, Patent Document 1). When a failure occurs in such a device, it is desirable to prevent the recurrence of the failure by performing some kind of processing so that the device can continue to operate. Here, it has been found through many years of analysis that the operating mode is involved in the occurrence of failures in such devices.

[0006] Therefore, the present disclosure aims to provide a system, method, and program that can improve the availability of equipment when a failure occurs in equipment equipped with multiple modules, compared to a system that does not consider the operating mode at the time of the failure. [Means for solving the problem]

[0007] To achieve the above objective, the information processing system according to the first embodiment comprises a processor and a storage device, wherein the processor acquires failure information from the storage device when a failure occurs in a device comprising multiple modules, and uses the failure information to execute processing according to the faulty module among the multiple modules in which the failure occurred, and the operating mode of the device at the time the failure occurred.

[0008] In the information processing system according to the second embodiment, the processor performs different processing depending on whether the operating mode is in a predetermined transition state or not.

[0009] The information processing system according to the third embodiment is an information processing system according to the second embodiment in which the predetermined transition state includes at least one of a transition state in which the system transitions to a power saving mode and a recovery state in which the system returns from the power saving mode.

[0010] In the information processing system according to the fourth embodiment, the processor executes processing according to the content of dealing with the fault, in accordance with the fault module and the operating mode, in the information processing system according to the first embodiment.

[0011] The information processing system according to the fifth embodiment is an information processing system according to the fourth embodiment in which the countermeasures include at least one of the following: a first countermeasure of replacing a component corresponding to the faulty module; a second countermeasure of stopping a predetermined operating mode of the equipment; and a third countermeasure of stopping a function corresponding to the faulty module.

[0012] The information processing system according to the sixth embodiment is an information processing system according to the fifth embodiment, wherein the storage device stores a management table indicating whether each of the plurality of modules can be handled by the first action, the second action, and the third action, respectively, and the processor uses the management table to execute processing according to the first action, the second action, or the third action.

[0013] The information processing system according to the seventh embodiment is an information processing system according to the first embodiment in which the processor stores the failure information in the storage device when the failure occurs, and retrieves the failure information from the storage device after a reset.

[0014] In the information processing system according to the eighth aspect, the processor stores in the storage device at least one of the information of the program that the processor was executing and the information of the internal state of the processor as the fault information.

[0015] The information processing system according to the ninth aspect is an information processing system according to any one of the first to eighth aspects, in which the processor notifies the user of a message corresponding to the processing via a user interface.

[0016] The information processing system according to the tenth embodiment is an information processing system according to any one of the first to eighth embodiments, wherein the processor transmits at least one of the following to the maintenance monitoring server via a communication interface: a message corresponding to the processing and information regarding the fault.

[0017] The information processing system according to the 11th embodiment is an information processing system according to any one of the first to eighth embodiments, wherein the failure includes at least one of a hang-up and a crash in the software that controls the device.

[0018] The information processing method according to the 12th aspect includes a computer acquiring failure information from a storage device when a failure occurs in a device equipped with multiple modules, and using the failure information to execute processing according to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred.

[0019] The information processing program according to the 13th embodiment causes a computer to obtain failure information from a storage device when a failure occurs in a device equipped with multiple modules, and to use the failure information to execute processing according to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred. [Effects of the Invention]

[0020] According to the information processing system of the first embodiment, when a failure occurs in equipment equipped with multiple modules, it is possible to provide a system that can improve the availability of the equipment compared to a system that does not consider the operating mode at the time of the failure.

[0021] According to the information processing system of the second embodiment, if the operating mode of the equipment at the time of the failure is in a specific transition state, special processing can be performed that is different from when the equipment is not in a specific transition state.

[0022] According to the information processing system according to the third aspect, special processing can be performed by focusing on cases where failures are likely to occur.

[0023] According to the information processing system according to the fourth aspect, the content of the countermeasure can be mapped by limiting it to two features: what the module in which the failure occurred was, and what operation mode the device was in when the failure occurred.

[0024] According to the information processing system according to the fifth aspect, it can be dealt with by a wide range of recurrence prevention measures from provisional measures to permanent measures.

[0025] According to the information processing system according to the sixth aspect, by simply preparing a table in which possible countermeasures are defined in advance for each module, it is possible to easily determine which of the first countermeasure, the second countermeasure, or the third countermeasure should be taken.

[0026] According to the information processing system according to the seventh aspect, there is no need to introduce a new mechanism for storing other information different from the information stored by general interrupt processing in a computer.

[0027] According to the information processing system according to the eighth aspect, by tracing the call history of functions of the operating system, it is possible to identify the failed module in which the failure occurred and the operation mode of the device at the time of the failure. [[ID=..]]

[0028] According to the information processing system according to the ninth aspect, it is possible to prevent changes such as setting changes and component replacements from being made without the user's knowledge.

[0029] According to the information processing system according to the tenth aspect, it is possible to share failures and processing with the server side.

[0030] According to the information processing system according to the eleventh aspect, it is possible to target failures that are likely to fall into a situation where operation cannot be continued without automatically recovering over time.

[0031] According to the information processing method of the 12th embodiment, when a failure occurs in a device equipped with multiple modules, it is possible to provide a method that can improve the availability of the device compared to not considering the operating mode at the time of the failure.

[0032] According to the information processing program of the 13th embodiment, it is possible to provide a program that can improve the availability of equipment when a failure occurs in equipment equipped with multiple modules, compared to a program that does not consider the operating mode at the time of the failure. [Brief explanation of the drawing]

[0033] [Figure 1] This figure shows an example of the hardware configuration of the information processing system 100 according to this embodiment, along with the communication means 30 and the maintenance monitoring server 50. [Figure 2] This figure shows an example of the software configuration of the information processing system 100 according to this embodiment. [Figure 3] This figure shows an example of a management table that may be used by the information processing system 100 according to this embodiment. [Figure 4] This figure shows an example of a flowchart of the information processing method executed by the information processing system 100 according to this embodiment. [Modes for carrying out the invention]

[0034] Hereinafter, an example of an embodiment of this disclosure will be described with reference to the drawings. In each drawing, the same or equivalent components and parts are given the same reference numerals. Also, the dimensional ratios in the drawings are exaggerated for illustrative purposes and may differ from the actual ratios.

[0035] Figure 1 shows an example of the hardware configuration of the information processing system 100 according to this embodiment, along with the communication means 30 and the maintenance monitoring server 50. Hang-ups (also called hangs) and crashes may occur under the control of the equipment. Here, a hang-up refers to a state in which the software or system becomes unresponsive and does not accept any operations. A crash, on the other hand, refers to a phenomenon in which the software or system terminates abnormally and is forcibly stopped.

[0036] Unlike freezes, hang-ups and crashes do not automatically recover over time. Therefore, when such failures occur in equipment, it becomes impossible to continue operation. The failures to be addressed in this disclosure may include at least one of hang-ups and crashes in the software that controls the equipment.

[0037] When such a failure occurs, recovery is performed by an automatic reset using a Watch Dog Timer (WDT), etc. However, if the settings, functions, or hardware that caused the failure remain unchanged, the failure may recur even after recovery. To prevent such recurrence, it is necessary to take preventative measures such as changing settings, updating software, or replacing hardware.

[0038] Traditionally, customer engineers have collected logs, developers have analyzed them to formulate preventative measures, and customer engineers have then taken action according to those measures. However, this traditional approach had problems such as being time-consuming and incurring costs for customer engineers and developers.

[0039] To address such problems, it is conceivable to improve equipment availability by automating the process of autonomously analyzing the cause and determining preventative measures. Here, availability refers to the degree or capacity to which a system can continue to operate. Patent document 2 discloses a computer system with a fault recovery mechanism. However, the technology in patent document 2 does not take into account the operating mode of the equipment when a failure occurs, and therefore cannot perform special processing according to the operating mode. For this reason, conventional technology has not been able to sufficiently improve the availability of equipment.

[0040] Therefore, in the case of a failure in a device equipped with multiple modules, the information processing system 100 in this embodiment uses failure information to execute processing according to the failed module and the operating mode of the device at the time of the failure. As a result, the information processing system 100 in this embodiment can improve the availability of the device compared to a system that does not consider the operating mode at the time of the failure. This information processing system 100 will be described in detail.

[0041] The information processing system 100 may be connected to the maintenance monitoring server 50 via a communication means 30. The communication means 30 connects multiple computers in a communicative manner. In this figure, one example is shown where the communication means 30 interconnects the information processing system 100 and the maintenance monitoring server 50. The communication means 30 may be the Internet, for example. However, it is not limited to this. The communication means 30 may be any means that can connect multiple computers in a communicative manner, such as a LAN (Local Area Network), WAN (Wide Area Network), or intranet.

[0042] The maintenance monitoring server 50 collects and stores information about failures and processing from the information processing system 100. The maintenance monitoring server 50 may also be configured to receive requests from the information processing system 100 and send information and execution results corresponding to those requests back to the information processing system 100. The maintenance monitoring server 50 may, for example, be implemented using cloud computing. While this diagram shows the maintenance monitoring server 50 as a single device, the maintenance monitoring server 50 may store information in a distributed manner across multiple devices, or execute processing in a distributed manner.

[0043] The information processing system 100 is a controller that controls equipment. The equipment to be controlled is equipment that provides multiple functions through multiple modules. Examples of such equipment include a multifunction printer capable of providing functions such as copying, scanning, and faxing.

[0044] The information processing system 100 may be a computer and may include a processor 101, main memory 102, storage device 103, user interface 104, and communication interface 105. These components may be connected to each other via a bus so as to be able to communicate with each other.

[0045] The processor 101 executes various programs and controls each component. The processor 101 may be, for example, a CPU (Central Processing Unit).

[0046] Main memory 102 temporarily stores programs or data as a working area. Main memory 102 may be, for example, DRAM (Dynamic Random Access Memory).

[0047] The storage device 103 is a non-volatile storage device that can retain data even when the power is turned off, and stores various programs, including the operating system, and various data. The storage device 103 may be an SSD (Solid State Drive) as an example.

[0048] The user interface 104 is an input / output interface for the information processing system 100 to exchange information with a user (including a customer engineer). The user interface 104 may include a touch panel, keyboard, mouse, and microphone as input means, and a monitor and speakers as output means.

[0049] The communication interface 105 is an interface for the information processing system 100 to communicate with other devices. In this figure, only the maintenance monitoring server 50 is shown as an example of other devices, but it is not limited to this.

[0050] During program execution, the internal registers in processor 101 may not have enough capacity, so information is sometimes temporarily stored in main memory 102. This type of information is called stack information.

[0051] Here, a program is a set of instructions that sequentially describe the processes that a computer should perform. In such a situation, if a failure occurs and the processes cannot be executed in the order described in the program, the processor 101 generates an interrupt and terminates the program. This causes the processor 101 to stably shut down the system. In response to this interrupt, the processor 101 saves the stack information from the main memory 102 to the storage device 103.

[0052] This stack information includes the value of the program counter in the original program that processor 101 was executing before the interrupt, as well as information about the internal state of processor 101. Therefore, this stack information can be used for analysis as fault information when a failure occurs.

[0053] In other words, the processor 101 may store failure information in the storage device 103 when a failure occurs. At this time, the processor 101 may store at least one of the following as failure information in the storage device 103: information about the program that the processor 101 was executing, and information about the internal state of the processor 101. Then, the processor 101 may retrieve the failure information from the storage device 103 after a reset. The processor 101 may use the failure information obtained in this way, for example, to execute processing according to the faulty module that has failed and the operating mode of the device at the time the failure occurred.

[0054] Figure 2 shows an example of the software configuration of the information processing system 100 according to this embodiment. The information processing system 100 comprises an operating system 110, a multi-function application 120, a fault information recording module 130, and a fault analysis and response module 140.

[0055] Operating System 110 is system software that controls the operation of a computer.

[0056] The multi-function application 120 is an application that enables the device to provide multiple functions. For example, the multi-function application 120 may be an MFP (Multi-Function Peripheral) application. Since the operating system 110 and the multi-function application 120 may be the same as existing ones, a detailed explanation will be omitted here.

[0057] The failure information recording module 130 is a handler that can operate independently of the main processing of the operating system 110. The failure information recording module 130 is called when a hang or crash occurs in the operating system 110, and it saves stack information from main memory 102. Then, the failure information recording module 130 saves the stack information to storage device 103 and resets the system.

[0058] The fault analysis and response module 140 is software that runs on the operating system 110. After a reset, the fault analysis and response module 140 reads stack information from the storage device 103 as fault information. Then, using the fault information, the fault analysis and response module 140 traces the function call history of the operating system 110 to identify the faulty module where the failure occurred and the operating mode of the device at the time the failure occurred.

[0059] The fault analysis and response module 140 may then determine how to respond to the fault based on the identified faulty module and operating mode. The main responses may include, for example, changing settings, displaying information on the user interface 104, and sending information to the maintenance monitoring server 50. The fault analysis and response module 140 may then instruct the multi-function application 120 according to the determined response. In this embodiment, the fault analysis and response module 140 may use a management table that defines the response methods for each module when determining the response.

[0060] Figure 3 shows an example of a management table that may be used by the information processing system 100 according to this embodiment. In this figure, for the sake of explanation, the case in which the device provides functions X, Y, and Z through modules A, B, and C is shown as an example. However, the number of modules and functions is not limited to this.

[0061] Items that can be addressed by turning off power saving indicate the priority between the relevant function and the power saving function. If the item is marked with "○", it means that the power saving function has a lower priority than the relevant function. If the item is marked with "×", it means that the power saving function has a higher priority than the relevant function. Therefore, in this diagram, an example is shown where the power saving function has a lower priority than functions X and Z, but a higher priority than function Y.

[0062] Items marked "Can be handled by turning off the function" indicate whether the function can be disabled. If the item is marked "○", it means that the function can be disabled individually. If the item is marked "×", it means that the function cannot be disabled individually. Therefore, in this diagram, functions X and Y can be disabled individually, while function Z cannot be disabled individually, as an example.

[0063] Items marked "Can be addressed by parts replacement" indicate whether the relevant parts can be replaced. A "○" indicates that the relevant parts are replaceable. A "×" indicates that the relevant parts are not replaceable. Therefore, this diagram illustrates an example where the parts related to module A are replaceable, while the parts related to modules B and C are not.

[0064] Here, addressing the issue by replacing parts may involve replacing the faulty module with a working one, i.e., hardware component. For example, suppose the faulty module is a device driver that provides Wi-Fi® functionality. In this case, addressing the issue by replacing parts may involve replacing the Wi-Fi adapter or Wi-Fi card with a working one. By taking such measures to replace the faulty part, the cause of the failure is eliminated, thus preventing recurrence. Therefore, addressing the issue by replacing parts can be considered a permanent measure to prevent recurrence.

[0065] On the other hand, turning off power saving mode disables the device's predetermined operating mode, i.e., power saving mode. Similarly, turning off a function disables the function corresponding to the faulty module. For example, suppose the faulty module is a device driver that provides the fax function. In this case, turning off the function would mean disabling the fax function. Thus, turning off power saving mode and turning off a function disable do not eliminate the cause of the failure itself, and can therefore be considered temporary measures to prevent recurrence.

[0066] Here, we define the first action as replacing a component, the second action as stopping a predetermined operating mode of the equipment, and the third action as stopping the function corresponding to the faulty module. Accordingly, the storage device 103 may have a management table pre-stored in it that indicates whether each of the multiple modules can be addressed by the first action, the second action, and the third action, respectively. The processor 101 may then use such a management table to decide how to address the fault and execute processing according to the first action, the second action, or the third action. The information processing method executed by the information processing system 100 according to this embodiment will be explained in detail using a flowchart.

[0067] Figure 4 shows an example of a flowchart of the information processing method executed by the information processing system 100 according to this embodiment. This flowchart may be executed by the processor 101 reading an information processing program (not shown) from the storage device 103 and loading it into the main memory 102 as a working area. This flowchart may also be started when the device is powered on.

[0068] In step S201, the processor 101 determines whether a predetermined failure occurred during the previous operation. For example, the processor 101 may check the information left by the failure information recording module 130 during the previous operation. Based on this information, the processor 101 may determine whether a hang or crash occurred. If no hang or crash occurred, the processor 101 may determine "No" and terminate this flow. On the other hand, if a hang or crash occurred, the processor 101 may determine "Yes" and proceed to step S202.

[0069] Furthermore, if a failure occurred during the previous operation, as described above, the processor 101 may have already saved the failure information to the storage device 103 at the time the failure occurred. In this case, the processor 101 may save stack information, which includes at least one of the information of the program that the processor 101 was executing and the information of the internal state of the processor 101, as failure information to the storage device 103.

[0070] In step S202, the processor 101 acquires fault information. For example, the processor 101 may read stack information that was saved from main memory 102 before the reset from the storage device 103 as fault information after the reset. In this way, for example, the processor 101 can acquire fault information from the storage device 103 after a reset if a failure occurs in a device equipped with multiple modules.

[0071] In step S203, the processor 101 identifies the faulty module among the multiple modules that has experienced a failure, and the operating mode of the device at the time of the failure. The processor 101 may, for example, identify the faulty module and operating mode by tracing the function call history of the operating system 110 using the failure information acquired in step S202.

[0072] In step S204, the processor 101 determines whether the faulty module is registered in the management table. For example, the processor 101 may determine whether the faulty module identified in step S203 is registered in the management table shown in Figure 3. If the faulty module is not registered in the management table, the processor 101 may determine "No" and proceed to step S212. On the other hand, if the faulty module is registered in the management table, the processor 101 may determine "Yes" and proceed to step S205.

[0073] In step S205, the processor 101 determines whether the faulty module can be fixed by replacing the parts. For example, the processor 101 may refer to the item in the management table shown in Figure 3 that indicates whether the faulty module can be fixed by replacing the parts. If the item is "×", the processor 101 may determine it as No and proceed to step S207. On the other hand, if the item is "〇", the processor 101 may determine it as Yes and proceed to step S206.

[0074] In step S206, the processor 101 notifies the user that a part needs to be replaced and sends the replacement information to the maintenance monitoring server 50. The processor 101 may display a message on the monitor, for example, such as, "Part a related to module A needs to be replaced. We will order part a, so please replace it." The processor 101 can notify the user of a message corresponding to the process via the user interface 104 in this way, for example.

[0075] Furthermore, the processor 101 may send a message to the maintenance monitoring server 50 such as "Request for parts, target part = a, target equipment = XX, installation location = XX." The processor 101 can send a message corresponding to the processing to the maintenance monitoring server 50 via the communication interface 105 in this manner, for example.

[0076] In step S207, the processor 101 determines whether the operating mode of the device at the time of the failure was in a predetermined transition state. For example, the processor 101 may determine whether the operating mode identified in step S203 was a transition state to power saving mode or a recovery state to recover from power saving mode. If it was not a transition state or a recovery state, the processor 101 may determine No and proceed to step S210. On the other hand, if it was a transition state or a recovery state, the processor 101 may determine Yes and proceed to step S208.

[0077] In step S208, the processor 101 determines whether the faulty module can be dealt with by turning off the power saving function. For example, the processor 101 may refer to the item in the management table shown in Figure 3 that indicates whether the faulty module can be dealt with by turning off the power saving function. If the item is "×", the processor 101 may determine it as No and proceed to step S210. On the other hand, if the item is "〇", the processor 101 may determine it as Yes and proceed to step S209.

[0078] In step S209, the processor 101 turns off the power saving mode and notifies the user of this fact. The processor 101 may, for example, temporarily remove the power saving mode from the operating modes of the device. The processor 101 may then display a message on the monitor such as, "A failure has occurred, so transitioning to power saving mode is currently prohibited." The processor 101 can also notify the user of a message corresponding to the process via the user interface 104 in this manner, for example.

[0079] In step S210, the processor 101 determines whether the faulty module can be dealt with by turning off its function. For example, the processor 101 may refer to the item in the management table shown in Figure 3 that indicates whether the faulty module can be dealt with by turning off its function. If the item is "×", the processor 101 may determine it as No and proceed to step S212. On the other hand, if the item is "〇", the processor 101 may determine it as Yes and proceed to step S211.

[0080] In step S211, the processor 101 turns OFF the function corresponding to the faulty module and notifies the user of this fact. The processor 101 may, for example, temporarily remove the function corresponding to the faulty module from the device's functions. The processor 101 may then display a message on the monitor such as, "A failure has occurred, so function Y is currently unavailable." The processor 101 can also notify the user of a message corresponding to the processing via the user interface 104 in this manner, for example.

[0081] In step S212, the processor 101 transmits fault information to the maintenance monitoring server 50. For example, the processor 101 may transmit the fault information acquired in step S202 to the maintenance monitoring server 50. Alternatively, or in addition to this, the processor 101 may transmit information on the identified faulty module and operating mode to the maintenance monitoring server 50 in step S203. In the case of a hardware failure, the problem can be solved by replacing the parts procured in step S206. On the other hand, in the case of a software failure, the problem can be solved by the developer analyzing the information transmitted in step S212.

[0082] As described above, the information processing system 100 according to this embodiment includes a processor 101 and a storage device 103. When a failure occurs in a device equipped with multiple modules, the processor 101 acquires failure information from the storage device and uses the failure information to execute processing according to the failed module among the multiple modules and the operating mode of the device at the time of the failure. As a result, the information processing system 100 according to this embodiment can improve the availability of a device equipped with multiple modules when a failure occurs, compared to not considering the operating mode at the time of the failure.

[0083] In this case, the processor 101 may execute different processing depending on whether the operating mode is in a predetermined transition state or not. As a result, according to the information processing system 100 of this embodiment, if the operating mode of the device at the time of failure is in a specific transition state, special processing can be performed that is different from when it is not in a specific transition state.

[0084] Here, the predetermined transition states may include at least one of a transition state for transitioning to power-saving mode and a recovery state for returning from power-saving mode. When the controlled object is a device that provides multiple functions through multiple modules, it has been found that failures that make it impossible to continue operation occur particularly frequently when transitioning the device to a low-power consumption state and when returning from low-power consumption. Therefore, according to the information processing system 100 of this embodiment, special processing can be applied focusing on cases where failures are likely to occur.

[0085] Furthermore, the processor 101 executes processing according to the appropriate action to take in response to the failure, based on the faulty module and operating mode. However, it is not practical to map the appropriate action to every single process of the operating system 110. In contrast, the information processing system 100 according to this embodiment allows for mapping the appropriate action to only two characteristics: which module experienced the failure, and what operating mode the device was in when the failure occurred.

[0086] In this case, the countermeasures may include at least one of the following: a first countermeasure of replacing the component corresponding to the faulty module; a second countermeasure of stopping a predetermined operating mode of the equipment; and a third countermeasure of stopping the function corresponding to the faulty module. As a result, the information processing system 100 according to this embodiment can address the issue with a wide range of recurrence prevention measures, from temporary to permanent.

[0087] In this case, the storage device 103 stores a management table indicating whether each of the multiple modules can be handled by the first, second, and third handling methods, and the processor 101 may use this management table to execute processing according to the first, second, or third handling method. Thus, according to the information processing system 100 of this embodiment, by simply preparing a table that pre-defines the possible handling methods for each module, it is possible to easily determine which of the first, second, or third handling methods should be used.

[0088] Furthermore, the processor 101 may store failure information in the storage device 103 when a failure occurs, and retrieve the failure information from the storage device 103 after a reset. As a result, according to the information processing system 100 of this embodiment, there is no need to introduce a new mechanism for storing information other than the information stored by general interrupt processing in a computer.

[0089] In this case, the processor 101 stores at least one of the following as failure information in the storage device 103: information about the program that the processor 101 was executing and information about the internal state of the processor 101. As a result, according to the information processing system 100 of this embodiment, the faulty module where the failure occurred and the operating mode of the device at the time the failure occurred can be identified by tracing the function call history of the operating system 110.

[0090] Furthermore, the processor 101 may notify the user of a message corresponding to the processing via the user interface 104. This makes it possible to prevent changes such as setting changes or component replacements from being made without the user's knowledge, according to the information processing system 100 of this embodiment.

[0091] Furthermore, the processor 101 may send at least one of the following to the maintenance monitoring server 50 via the communication interface 105: a message corresponding to the processing and information regarding the failure. This allows the information processing system 100 to share information about failures and processing with the server.

[0092] Furthermore, the failure may include at least one of a hang-up or crash in the software that controls the device. This allows the information processing system 100 according to this embodiment to target failures that tend to result in situations where operation cannot continue without automatically recovering over time.

[0093] In this embodiment, each process is executed on any computer. Furthermore, any computer may execute these processes using a processor as hardware, a program as software, or a combination thereof. In that case, the processor is configured to work in cooperation with the program to execute the various processes in this embodiment, and can function as a unit or means in this embodiment. Also, the execution order of the processes by the processor is not limited to the order described and may be changed as appropriate. Any computer may be a general-purpose computer, a computer designed for a specific purpose, a workstation, or any other system capable of executing each process.

[0094] A processor may consist of one or more hardware components, and the type of hardware is not limited. For example, a processor may consist of a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a programmable logic device such as an FPGA (Field Programmable Gate Array), a dedicated circuit for executing a specific process such as an ASIC (Application Specific Integrated Circuit), a GPU (Graphic Processing Unit), or an NPU (Neural Processing Unit). Furthermore, the type of hardware may be a combination of different types of hardware. When multiple hardware components are configured to execute one or more processes of a processor, these components may reside in physically separate devices or in the same device. Also, in any embodiment, the order of each process performed by the processor is not limited to the order described above and may be changed as appropriate. Hardware is composed of electrical circuits (circuitry) that combine circuit elements such as semiconductor elements.

[0095] Furthermore, the program may be firmware or software such as microcode. Alternatively, the program may be, for example, a group of program modules, each function of which may be implemented by a processor configured to perform its respective function. The program may be program code or multiple code segments stored on one or more non-temporary computer-readable media (e.g., storage media or other storage). The program may be divided and stored on multiple non-temporary computer-readable media located on physically separate devices. The program code or code segments may represent any combination of procedures, functions, subprograms, routines, subroutines, modules, software packages, classes, or instructions, data structures, or program statements. The program code or code segments may be connected to other code segments or hardware circuits by sending and receiving information, data, arguments, parameters, or memory contents. The program of this application may also be provided as a program product.

[0096] Furthermore, this disclosure is not limited to the foregoing, and it is of course possible to implement it in various modified forms without departing from its intent.

[0097] The following additional information is disclosed regarding the embodiments described above. (((1))) An information processing system comprising a processor and a memory device, wherein the processor obtains failure information from the memory device when a failure occurs in a device comprising multiple modules, and uses the failure information to execute processing according to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred.

[0098] (((2))) The information processing system according to (((1))), wherein the processor performs different processing depending on whether the operating mode is a predetermined transition state or not.

[0099] (((3))) The information processing system according to (((2))), wherein the predetermined transition states include at least one of a transition state for transitioning to a power saving mode and a recovery state for returning from the power saving mode.

[0100] (((4))) The information processing system according to any one of (((1))) to (((3))), wherein the processor executes processing according to the content of dealing with the fault according to the fault module and the operating mode.

[0101] (((5))) The information processing system according to (((4))) wherein the countermeasures include at least one of the following: a first countermeasure of replacing a component corresponding to the faulty module; a second countermeasure of stopping a predetermined operating mode of the equipment; and a third countermeasure of stopping a function corresponding to the faulty module.

[0102] (((6))) The information processing system according to (((5))), wherein the storage device stores a management table indicating whether each of the plurality of modules is capable of being handled by the first handling, the second handling, and the third handling, and the processor uses the management table to execute processing according to the first handling, the second handling, or the third handling.

[0103] (((7))) The information processing system according to any one of (((1))) to (((6))), wherein the processor stores the failure information in the storage device when the failure occurs and retrieves the failure information from the storage device after a reset.

[0104] (((8))) The information processing system according to (((7))), wherein the processor stores at least one of the information of the program that the processor was executing and the information of the internal state of the processor as the failure information in the storage device.

[0105] (((9))) The information processing system according to any one of (((1))) to (((8))), wherein the processor notifies the user of a message corresponding to the processing via a user interface.

[0106] (((10))) The information processing system according to any one of (((1))) to (((9))), wherein the processor transmits at least one of the following to the maintenance monitoring server via a communication interface: a message corresponding to the processing and information regarding the fault.

[0107] (((11))) The information processing system according to any one of (((1))) to (((10))), wherein the failure includes at least one of a hang-up and a crash in the software that controls the device.

[0108] (((12))) An information processing method comprising: a computer obtaining failure information from a storage device when a failure occurs in a device equipped with multiple modules; and using the failure information to execute processing according to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred.

[0109] (((13))) An information processing program that causes a computer to obtain failure information from a storage device when a failure occurs in a device equipped with multiple modules, and to use the failure information to execute processing according to the faulty module among the multiple modules that has experienced the failure, and the operating mode of the device at the time the failure occurred.

[0110] According to (((1))), when a failure occurs in equipment equipped with multiple modules, it is possible to provide a system that can increase the availability of the equipment compared to not considering the operating mode at the time of the failure.

[0111] According to (((2))), if the operating mode of the equipment at the time of the failure is in a specific transition state, special processing can be applied that differs from the case where the equipment is not in a specific transition state.

[0112] According to (((3))), special processing can be applied to cases where failures are likely to occur.

[0113] According to (((4))), the countermeasures can be mapped based on two characteristics: which module experienced the failure, and what operating mode the equipment was in when the failure occurred.

[0114] According to (((5))), the issue can be addressed through a wide range of preventative measures, from temporary to permanent.

[0115] According to (((6))), by simply preparing a table that pre-defines possible solutions for each module, it is easy to determine which of the first, second, or third solutions should be used.

[0116] According to (((7))), there is no need to introduce a new mechanism for storing information other than the information stored by general interrupt handling in computers.

[0117] According to (((8))), by tracing the call history of functions of the operating system 110, the faulty module that caused the failure and the operating mode of the device at the time the failure occurred can be identified.

[0118] According to (((9))), it is possible to prevent changes such as setting changes or parts replacements from being made without the user's knowledge.

[0119] According to (((10))), information about failures and processing can be shared with the server side.

[0120] According to (((11))), this can target failures that do not automatically recover over time and tend to lead to situations where continued operation is impossible.

[0121] According to (((12))), a method can be provided that can improve the availability of equipment when a failure occurs in equipment equipped with multiple modules, compared to not considering the operating mode at the time of the failure.

[0122] According to (((13))), it is possible to provide a program that can improve the availability of equipment when a failure occurs in equipment equipped with multiple modules, compared to not considering the operating mode at the time of the failure. [Explanation of Symbols]

[0123] 30 Communication methods 50 Maintenance and monitoring servers 100 Information Processing Systems 101 Processors 102 Main Memory 103 Storage device 104 User Interface 105 Communication Interface 110 Operating Systems 120 Multifunctional Applications 130 Failure Information Recording Module 140 Fault Analysis and Response Modules

Claims

1. The processor comprises a processor and a memory device, When a failure occurs in a device equipped with multiple modules, failure information is obtained from the storage device. Using the aforementioned failure information, the system executes processing corresponding to the faulty module among the plurality of modules in which the failure occurred, and the operating mode of the equipment at the time the failure occurred. Information processing system.

2. The processor performs different processes depending on whether the operating mode is a predetermined transition state or not. The information processing system according to claim 1.

3. The predetermined transition states include at least one of a transition state to power saving mode and a recovery state to return from power saving mode. The information processing system according to claim 2.

4. The processor executes processing according to the fault module and the operating mode, in accordance with the method of dealing with the fault. The information processing system according to claim 1.

5. The aforementioned countermeasures include at least one of the following: a first countermeasure of replacing the component corresponding to the faulty module; a second countermeasure of stopping a predetermined operating mode of the equipment; and a third countermeasure of stopping the function corresponding to the faulty module. The information processing system according to claim 4.

6. The storage device stores a management table indicating whether each of the plurality of modules is capable of being handled by the first, second, and third actions, respectively. The processor uses the management table to execute processing corresponding to the first action, the second action, or the third action. The information processing system according to claim 5.

7. The aforementioned processor, When the aforementioned failure occurs, the failure information is stored in the storage device. After reset, the fault information is obtained from the storage device. The information processing system according to claim 1.

8. The processor stores at least one of the following as failure information: information about the program the processor was executing and information about the internal state of the processor. The information processing system according to claim 7.

9. The processor notifies the user of a message corresponding to the processing via the user interface. The information processing system according to any one of claims 1 to 8.

10. The processor transmits, via a communication interface, at least one of a message corresponding to the processing and information regarding the fault to the maintenance monitoring server. The information processing system according to any one of claims 1 to 8.

11. The failure includes at least one of a hang-up and a crash in the software that controls the device. The information processing system according to any one of claims 1 to 8.

12. Computers When a failure occurs in a device equipped with multiple modules, the device retrieves failure information from the storage device, This includes using the aforementioned failure information to execute processing corresponding to the faulty module among the plurality of modules in which the failure occurred, and the operating mode of the device at the time the failure occurred. Information processing methods.

13. On the computer, When a failure occurs in a device with multiple modules, the device retrieves failure information from its storage device. Using the aforementioned failure information, the system executes a process corresponding to the faulty module among the plurality of modules in which the failure occurred, and the operating mode of the device at the time the failure occurred. Information processing program.

Images