Information processing system and recovery method

Abstract

To provide an information processing system which enables recovery of data while reducing communication load and storage capacity.SOLUTION: A storage apparatus 13 of an information processing apparatus 1 stores some-apparatuses common data 131 which is common to some information processing apparatuses 1 of other information processing apparatuses 1. A backup storage program acquires, for each of the some information processing apparatuses, first access information including information for connecting to the some information processing apparatuses and the number of pass-through apparatuses, which are other information processing apparatuses used for connecting to the some information apparatuses. When the some-apparatuses common data 131 is destroyed, a data recovery program recovers the destroyed some-apparatuses common data 131 by copying the some-apparatuses common data stored in an information processing apparatus having the least number of pass-through apparatuses, based on same data access information, to the storage apparatus 13 of the information processing apparatus.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present disclosure relates to an information processing system and a recovery method.

Background Art

[0002] In recent years, an information processing system including a plurality of information processing devices such as digital signage has attracted attention. For example, in railway vehicles, as an information processing system, a large number of information processing devices for displaying operation information, corporate advertisements, etc. for the purpose of information transmission to passengers are installed.

[0003] In the information processing system as described above, when recovering data stored in a storage device mounted on an information processing device, a technique of transmitting recovery data to the information processing device via a network and performing data recovery and the like has become widespread (see Patent Document 1). Further, in Patent Document 2, a technique is disclosed in which two information processing devices are set as a pair, backup data of the own device is written to the other information processing device, and when the data of the own device is damaged, the backup data of the other information processing device is copied to the own device to enable data recovery.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0005] When applying an information processing system with multiple information processing devices to railway vehicles or similar applications, the network communication connecting the devices requires the use of wired cables with a low number of cores, considering factors such as reliability and cost. Furthermore, due to limited space for wiring, minimizing the length of the wired cables is desirable. For this reason, daisy-chain connections, where information processing devices are connected in a series, are frequently used.

[0006] In the situation described above, if it becomes necessary to recover data stored in the storage device of one of several information processing devices, sending the recovery data from an external server device to the information processing device, as in the technology described in Patent Document 1, presents a problem in that it increases the communication load because it has to pass through other information processing devices. In particular, the longer the wiring distance between the server device that sends the recovery data and the information processing device to be recovered, the wider the area affected by the communication load becomes.

[0007] Furthermore, in the technology described in Patent Document 2, the communication load can be reduced because two information processing devices each hold backup data of the other device. However, since it is necessary to hold backup data for all the data of the other device, each information processing device requires a large capacity in its storage device.

[0008] The purpose of this disclosure is to provide an information processing system and recovery method that enable data recovery while reducing communication load and storage capacity. [Means for solving the problem]

[0009] An information processing system according to one aspect of the present disclosure is an information processing system comprising a plurality of information processing devices connected to each other in a daisy-chain configuration so as to be able to communicate with each other, wherein each information processing device includes: a storage unit for storing some common device data that is common to some of the other information processing devices; and a processing unit that, for each of the some information processing devices, acquires first access information including information for connecting to the some information processing device and the number of intermediate devices which is the number of other information processing devices through which the connection is made; and, in the event that the some common device data is corrupted, recovers the corrupted some common device data by copying the some common device data stored in a first recovery source device, which is the some information processing device with the smallest number of intermediate devices, to the storage unit of the device itself, based on the first access information. [Effects of the Invention]

[0010] According to the present invention, data recovery becomes possible while reducing communication load and storage capacity. [Brief explanation of the drawing]

[0011] [Figure 1] This figure shows the hardware configuration of the information processing system according to Embodiment 1 of this disclosure. [Figure 2] This figure shows an example of data stored in a memory device. [Figure 3] This figure shows an example of the functional configuration of the information processing device according to Embodiment 1 of this disclosure. [Figure 4] This is a diagram to explain the backup process. [Figure 5] This figure shows an example of the data structure of recovery data. [Figure 6] This figure shows an example of how recovery data is stored. [Figure 7] This is a flowchart illustrating an example of a backup process. [Figure 8] This is a diagram illustrating an example of a search process. [Figure 9]It is a flowchart for explaining an example of exploration processing. [Figure 10] It is a flowchart for explaining an example of diagnostic processing. [Figure 11] It is a diagram for explaining an example of data recovery processing. [Figure 12] It is a flowchart for explaining an example of data recovery processing. [Figure 13] It is a diagram showing an example of the functional configuration of an information processing apparatus according to Example 2 of the present disclosure. [Figure 14] It is a diagram for explaining an example of update processing. [Figure 15] It is a flowchart for explaining an example of update processing in more detail. [Figure 16] It is a diagram showing an example of update determination data.

Mode for Carrying Out the Invention

[0012] Hereinafter, examples of the present disclosure will be described with reference to the drawings. In the following description, the "program" may be used as the main body of operation for explaining the processing. However, the program is executed by a processor such as a CPU (Central Processing Unit), and performs the defined processing while appropriately using at least one of the storage unit and the interface unit. Therefore, the main body of the processing may be a processor (or an information processing apparatus having a processor).

Example

[0013] FIG. 1 is a diagram showing the hardware configuration of the information processing system according to Embodiment 1 of the present disclosure. The information processing system 100 shown in FIG. 1 includes a plurality of information processing devices 1. In this embodiment, the information processing system 100 is installed on a railway vehicle, and all the information processing devices 1 are communicably connected to each other by daisy chain connection. The information processing device 1 is a device that displays information for passengers, such as operation information and corporate advertisements, on a display screen such as a liquid crystal display. In FIG. 1, two information processing devices 1 are shown, but the number of information processing devices 1 is not limited to two.

[0014] The information processing device 1 includes a CPU 11, a memory 12, a storage device 13, and a network interface 14.

[0015] The storage device 13 is a storage unit that stores a program that defines the operation of the CPU 11 and various data used and generated by the program. The CPU 11 is an example of a processor, reads the program stored in the storage device 13, loads it into the memory 12, and executes the read program using the memory 12 as a work area, thereby executing various processes. The network interface 14 is an interface unit that is communicably connected to other information processing devices 1 via a network wiring 101.

[0016] FIG. 2 is a diagram showing an example of the data stored in the storage device 13. As shown in FIG. 2, the storage device 13 stores device-specific data 130, partially device-common data 131, and all-device-common data 132.

[0017] The device-specific data 130 is data unique to each of the plurality of information processing devices 1. The device-specific data 130 is, for example, parameters related to the brightness and color tone settings of a display screen such as a liquid crystal display corresponding to the information processing device 1 (hereinafter sometimes referred to as the self-device) having the storage device 13 that stores the data.

[0018] The partially shared device data 131 is data common to some of the multiple information processing devices 1. For example, the partially shared device data 131 may be an application program executed on an information processing device 1 of the same type as the device itself, where there are multiple types of information processing devices 1. In this embodiment, the information processing system 100 includes two or more information processing devices 1 that have the same partially shared device data 131.

[0019] The all-device common data 132 is data common to all of the multiple information processing devices 1. For example, the all-device common data 132 is the OS (Operating System).

[0020] The data common to some devices 131 and the data common to all devices 132 each include version information indicating the version of their own data.

[0021] The following mainly describes the process that occurs when a failure occurs in the storage device 13.

[0022] Figure 3 is a block diagram showing an example of the functional configuration of the information processing device 1. As shown in Figure 3, in addition to the hardware configuration shown in Figure 1, the information processing device 1 has an auxiliary storage device 17 as hardware for storing data, separate from the storage device 13.

[0023] The information processing device 1 has a functional configuration that includes an application execution unit 15 that provides services for users (passengers) and a data management unit 16 that manages the data stored in the storage device 13.

[0024] The application execution unit 15 is implemented by an application program, which is application 150. The application execution unit 15 displays, for example, operational information and guidance information to passengers.

[0025] The data management unit 16 is implemented by a backup storage program 160, a duplicate data search program 161, a storage device diagnostic program 162, and a data repair program 163. In this embodiment, the backup storage program 160 and the duplicate data search program 161 are stored in the storage device 13, while the storage device diagnostic program 162 and the data repair program 163 are stored in the auxiliary storage device 17 so that they can be executed even if a failure occurs in the storage device 13.

[0026] The backup storage program 160 is a program for performing a backup process to back up the device-specific data 130. The identical data search program 161 is a program for performing a search process to find the information processing device 1 that will be the source of some device-common data 131 for recovery. The storage device diagnostic program 162 is a program for performing a diagnostic process to diagnose the state of the storage device 13 and detect any failures related to the storage device 13. The data recovery program 163 is a program for performing a data recovery process to recover data (device-specific data 130, some device-common data 131, and all device-common data 132) stored in the storage device 13 if the data is corrupted.

[0027] Figure 4 is a diagram illustrating the backup process by the backup storage program 160. In the following explanation and diagrams, multiple information processing devices 1 may be referred to with subscripts such as information processing devices 1-0, 1-1, 1-2, etc., to distinguish them. The configuration and data of the information processing devices 1 may also be referred to with the same subscripts as the information processing devices 1. For example, device-specific data 130 of information processing device 1-0 may be referred to as device-specific data 130-0, and storage device 13 of information processing device 1-1 may be referred to as storage device 13-1. Here, the backup process by the backup storage program 160 of information processing device 1-0 will be explained as an example.

[0028] The backup process is performed as a pre-processing step for the data recovery process by the data recovery program 163, when the information processing device 1 is first started up, or when the storage device 13 is operating without failure.

[0029] In the backup process, the backup storage program 160 first searches for the nearest information processing device 1 among the other information processing devices 1, which is the information processing device 1 with the shortest network wiring 101 length connecting to its own device, information processing device 1-0, as step P1. Here, the backup storage program 160 searches for the nearest information processing device 1 that can be connected without going through other information processing devices 1 (in the example shown in the figure, information processing device 1-1). At this time, if there are multiple information processing devices 1 that can be connected without going through other information processing devices 1, for example, one of those multiple information processing devices will be searched for as the nearest information processing device 1.

[0030] The search method for finding the nearest information processing device 1 is not particularly limited. For example, one search method may involve identifying the position of each information processing device 1 from an image captured of multiple information processing devices 1, and then searching for the nearest information processing device 1 based on that position. Alternatively, if information indicating the positional relationship or connection relationship of the information processing devices 1 is pre-registered in a storage device 13 or the like, the nearest information processing device 1 may be searched using that information.

[0031] Next, as step P2, the backup storage program 160 registers the device-specific data 130-0 of its own device as recovery data 133-1 in the storage device 13 of the nearest information processing device 1-1. As a result, backup data of the device-specific data 130 is stored in the nearest information processing device 1-1.

[0032] Furthermore, as step P3, the backup storage program 160 stores information for connecting to the nearest information processing device 1-1 as recovery source access information 170-0 in the auxiliary storage device 17-0 of its own device. The information for connecting to the information processing device 1 is, for example, the IP address of that information processing device 1.

[0033] Figure 5 shows an example of the data structure of the recovery data 133.

[0034] The recovery data 133 is the device-specific data 130 of the nearest information processing device 1 (an information processing device 1 that can be connected without going through other information processing devices 1). Therefore, if there are multiple nearest information processing devices 1, the recovery data 133 may include the device-specific data 130 of each of those multiple nearest information processing devices 1. In the example in Figure 5, the recovery data 133 includes the device-specific data 130-a of information processing device 1-a and the device-specific data 130-b of information processing device 1-b. Also, the recovery data 133 may not include any device-specific data 130. In other words, the recovery data 133 of a single information processing device 1 may include zero or more device-specific data 130.

[0035] Figure 6 shows an example of how the recovery data 133 is stored in the information processing device 1.

[0036] In the example shown in Figure 6, information processing devices 1-c and 1-d form a recovery pair, with each being the nearest information processing device. The device-specific data 130 of the paired device is registered in both information processing devices 1-c and 1-d. Specifically, information processing device 1-c stores the device-specific data 130d-c of information processing device 1-d as recovery data 133-c, and information processing device 1-d stores the device-specific data 130c-d of information processing device 1-c as recovery data 133-d.

[0037] The recovery pairs described above may be established in all information processing devices 1 of the information processing system 100. In this case, the recovery data 133 of each information processing device 1 will have device-specific data 130 for one information processing device, making it possible to suppress variations in the number of recovery data 133 stored by each information processing device 1.

[0038] Figure 7 is a flowchart illustrating in more detail an example of the backup process performed by the backup storage program 160.

[0039] In the backup process, first, the backup storage program 160 determines whether or not the recovery source access information 170-0 is stored in the auxiliary storage device 17-0 of its own device (step S1600). If the recovery source access information 170-0 is stored, the backup storage program 160 terminates the process. On the other hand, if the recovery source access information 170-0 is not stored, the backup storage program 160 searches for the nearest information processing device 1 (step S1601). Then, the backup storage program 160 registers the device-specific data 130-0 stored in the storage device 13 of its own device as recovery data 133-1 in the storage device 13 of the nearest information processing device 1, which is the information processing device 1-1 (step S1602).

[0040] Next, the backup storage program 160 stores the recovery source access information 170-0, which includes information for connecting to the nearest information processing device 1-1, in the auxiliary storage device 17-0 of its own device (step S1603), and terminates the process.

[0041] Figure 8 is a diagram illustrating an example of the search process by the identical data search program 161. Here, the search process by the identical data search program 161 of the information processing device 1-0 is explained as an example.

[0042] The search process, like the backup process, is performed as a pre-processing step for the data recovery process by the data recovery program 163, when the information processing device 1 is first started up and the storage device 13 is operating without failure.

[0043] In the search process, the identical data search program 161 first searches for identical data among the partially common device data 131 stored in other information processing devices 1 that are the same as partially common device data 131-0 stored in the device's storage device 13. Here, the identical data search program 161 obtains information indicating the type of partially common device data 131 stored in each of the other information processing devices 1, and searches for partially common device data 131 of the same type as partially common device data 131-0 stored in the device's storage device 13 as identical data. The type of partially common device data 131 is, for example, the type of application program, and for example, information indicating that type is stored within the partially common device data 131.

[0044] Next, as step Q2, the identical data search program 161 stores information for connecting to each of the other information processing devices 1 that store the same data as identical data access information 171-0 in the auxiliary storage device 17-0. In the example in Figure 8, information processing devices 1-0 and 1-2 each store the same partially common device data (partially common device data A) 131-0 and 131-2. In this case, the identical data search program 161 of information processing device 1-1 stores information for connecting to information processing device 1-2 as identical data access information 171-0.

[0045] Figure 9 is a flowchart illustrating in more detail an example of the search process performed by the same data search program 161.

[0046] In the search process, first, the identical data search program 161 determines whether the same data access information 171-0 is stored in the auxiliary storage device 17-0 of its own device (step S1610). If the same data access information 171-0 is stored, the identical data search program 161 terminates the process. On the other hand, if the same data access information 171-0 is not stored, the identical data search program 161 starts a loop process (A) that repeats steps S1612 to S1614 for each information processing device 1 included in the information processing system 100 (step S1611).

[0047] In loop processing (A), the identical data search program 161 connects to a target information processing device 1, which is one of the information processing devices 1 included in the information processing system 100 (step S1612). The identical data search program 161 determines whether the type of some common device data 131 stored in the connected target information processing device 1 is the same as the type of some common device data 131 stored in its own device (step S1613).

[0048] If the types of the common data 131 for some devices are the same, the identical data search program 161 stores the access information for connecting to the target information processing device 1 as identical data access information 171-0 in the auxiliary storage device 17-0 of its own device. Then, the identical data search program 161 adds the number of other information processing devices 1 that are passed through in order to connect to the target information processing device 1 as the number of intermediary devices to the identical data access information 171-0 (step S1614). On the other hand, if the types of the common data 131 for some devices are not the same, the processing in step S1614 is skipped.

[0049] Then, when the processing in steps S1612 to S1614 is repeated for all of the information processing devices 1 included in the information processing system 100, the same data search program 161 exits the loop processing (A) (step S1615) and terminates processing.

[0050] Figure 10 is a flowchart illustrating an example of the diagnostic process performed by the storage device diagnostic program 162. The diagnostic process is initiated, for example, when the information processing device 1 is started up.

[0051] First, the storage device diagnostic program 162 determines whether or not a failure has occurred with respect to the storage device 13 (step S1620). If no failure has occurred with respect to the storage device 13, the storage device diagnostic program 162 starts up the storage device 13 (step S1626) and terminates the process.

[0052] If a failure occurs in the storage device 13, the storage device diagnostic program 162 performs a hardware diagnosis to diagnose the hardware status of the storage device 13 (step S1621). Based on the results of the hardware diagnosis, the storage device diagnostic program 162 determines whether or not the hardware of the storage device 13 is faulty (step S1622).

[0053] If the hardware fails, repairing the storage device 13 requires replacing the storage device 13. Therefore, the storage device diagnostic program 162 executes a degraded operation program (not shown) stored in the auxiliary storage device 17, causing the information processing device 1 to perform degraded operation (step S1623), and then terminates the process. In degraded operation, minimal processing is performed, such as displaying a default user screen, like a company logo.

[0054] If the hardware is not faulty, it is assumed that the data corruption is software-related. Therefore, the storage device diagnostic program 162 executes a data recovery process to recover the data by running the data repair program 163 (step S1624).

[0055] Subsequently, the storage device diagnostic program 162 determines whether the data recovery process was successful (step S1625). If the repair is successful, the storage device diagnostic program 162 starts the storage device 13 (step S1626) and terminates the process. If the repair fails, the storage device diagnostic program 162 executes the degraded operation program stored in the auxiliary storage device 17 to cause the information processing device 1 to perform degraded operation (step S1623) and terminates the process.

[0056] Figure 11 is a diagram illustrating an example of data recovery processing by the data recovery program 163. In the following, it is assumed that data stored in the storage device 13 of the information processing device 1-0 is corrupted, and the data recovery program 163 of the information processing device 1-0 performs data recovery processing.

[0057] As procedure R1, the data recovery program 163 checks the recovery source access information 170-0 stored in the auxiliary storage device 17-0 of the information processing device 1-0 and identifies the nearest information processing device 1-1 as the recovery source information processing device that stores the data for recovering the device-specific data 130-0 and the all-device common data 132-0. Then, the data recovery program 163 recovers the device-specific data 130-0 by copying the device-specific data 130 of the information processing device 1-0, which is stored in the recovery data 133-1 of the nearest information processing device 1-1, to the storage device 13-0 of its own device. In addition, the data recovery program 163 recovers the all-device common data 132-0 by copying the all-device common data 132-1 stored in the nearest information processing device 1-1 to the storage device 13-0 of its own device.

[0058] Furthermore, as step R2, the data recovery program 163 checks the identical data access information 171-0 stored in the auxiliary storage device 17-0 of the information processing device 1-0, and identifies the information processing device with the fewest number of intermediate devices, namely the information processing device 1-2, which stores the same partial device common data 131 as the partial device common data 131-0 stored in its own device. Then, the data recovery program 163 recovers the partial device common data 131-0 by copying the partial device common data 131-2 stored in the information processing device 1-2 with the fewest number of intermediate devices to the storage device 13-0 of its own device.

[0059] Figure 12 is a flowchart illustrating in more detail an example of data recovery processing by the data recovery program 163. The data recovery program 163 is started during the diagnostic process by the storage device diagnostic program 162 (specifically, step S1624 in Figure 10). In this embodiment, in order to reduce the amount of communication, the data recovery program 163 identifies corrupted data from the device-specific data 130, some device-common data 131, and all-device-common data 132, and recovers only that corrupted data. The method for determining whether or not data is corrupted is not particularly limited, but for example, hash values ​​for each data are registered in advance, and it is determined whether or not the hash value obtained at the time of determination matches the registered hash value.

[0060] First, the data recovery program 163 determines whether the all-device common data 132-0 is corrupted (step S1630). If the all-device common data 132-0 is corrupted, the data recovery program 163 connects to the nearest information processing device 1-1 based on the recovery source access information 170-0 (step S1631). The data recovery program 163 recovers the corrupted all-device common data 132-0 by copying the all-device common data 132-0 stored in the information processing device 1-1 to the storage device 13 of the information processing device 1-0 (step S1632). If the all-device common data 132-0 is not corrupted, steps S1631 and S1632 are skipped.

[0061] Next, the data recovery program 163 determines whether the device-specific data 130-0 is corrupted (step S1633). If the device-specific data 130-0 is corrupted, the data recovery program 163 connects to the nearest information processing device 1-1 based on the recovery source access information 170-0 (step S1634). The data recovery program 163 recovers the corrupted device-specific data 130-0 by copying the device-specific data in the recovery data 133-1 stored in the information processing device 1-1 to the storage device 13 of the information processing device 1-0 (step S1635). If the device-specific data 130-0 is not corrupted, steps S1634 and S1635 are skipped.

[0062] Furthermore, the data recovery program 163 determines whether or not the partial device common data 131-0 is corrupted (step S1636). If the partial device common data 131-0 is corrupted, the data recovery program 163 connects to the information processing device 1-2 via the shortest route based on the same data access information 171-0 (step S1637). Then, the data recovery program 163 recovers the corrupted partial device common data 131-0 by copying the partial device common data 131-0 stored in the information processing device 1-2 via the shortest route to the storage device 13 of the information processing device 1-0 (step S1685), and terminates the process. If the partial device common data 131-0 is not corrupted, steps S1636 and S1637 are skipped.

[0063] As described above, according to this embodiment, the storage device 13 of the information processing device 1 stores some common device data 131 that is common to some of the information processing devices 1 of other information processing devices 1. The identical data search program 161 obtains identical data access information 171 (first access information) for each of the above some information processing devices, which includes information for connecting to that some information processing device and the number of intermediate devices, which is the number of other information processing devices that are passed through when connecting to that some information processing device. If the some common device data 131 is corrupted, the data repair program 163 recovers the corrupted some common device data by copying the some common device data stored in the information processing device with the fewest intermediate devices (first recovery source device) to the storage device 13 of the device itself, based on the identical data access information 171. Therefore, the some common device data 131 that is common to some of the information processing devices 1 of other information processing devices 1 can be recovered by copying the some common device data 131 from the information processing device with the fewest intermediate devices, that is, from the information processing device 1 with the fewest intermediate devices that stores the same some common device data 131 as the device itself. Therefore, data recovery becomes possible while reducing communication load and storage capacity.

[0064] In this embodiment, the backup storage program 160 registers the device-specific data 130 of the device with the nearest information processing device 1 (second recovery source device), which is an information processing device 1 connected without going through other information processing devices 1, and acquires recovery source access information (second access information) 170, which includes information for connecting to the nearest information processing device. If the device-specific data is corrupted, the data repair program 163 recovers the corrupted device-specific data 130 by copying the device-specific data 130 registered with the nearest information processing device to the device's storage device 13 based on the recovery source access information 170. In this case, it is possible to reduce the communication load related to the recovery of the device-specific data 130.

[0065] Furthermore, in this embodiment, if the all-device common data 132 is corrupted, the data recovery program 163 recovers the corrupted all-device common data 132 by copying the all-device common data 132 stored in the nearest information processing device to the device's storage device 13 based on the recovery source access information 170. In this case, it is possible to reduce the communication load and storage capacity required for recovering the all-device common data 132.

[0066] In this embodiment, when the storage device diagnostic program 162 detects a problem with the storage device 13, it determines whether the problem is due to corruption of data stored in the storage device 13 or a hardware failure of the storage device 13. If the problem is due to data corruption, the data recovery program 163 recovers the device-specific data 130, some device-common data 131, and all device-common data 132 stored in the storage device 13. If the problem is due to a hardware failure, the storage device diagnostic program 162 causes the information processing device 1 to perform a degraded operation. This makes it possible to perform appropriate processing when a problem occurs.

[0067] Furthermore, in this embodiment, the data recovery program 163 identifies the corrupted data from among the device-specific data 130, some device-common data 131, and all-device-common data 132 in the event of data corruption, and recovers only that corrupted data. This makes it possible to reduce the load incurred during data recovery. [Examples]

[0068] This embodiment describes an update process for updating some common device data 131. Note that the common device data 132 can also be updated using the same method as in this embodiment.

[0069] Figure 13 is a block diagram showing an example of the functional configuration of the information processing device 1 according to this embodiment. The information processing device 1 shown in Figure 13 differs from the information processing device 1 of Embodiment 1 shown in Figure 3 in that an update program 164 is added to the program that implements the data management unit 16. The update process by the update program 164 will be mainly described below.

[0070] Figure 14 is a diagram illustrating an example of the update process by the update program 164. In Figure 14, information processing devices 1-0 to 1-5 are shown. Information processing devices 1-0, 1-2, 1-3, and 1-5 have some common device data 131 of the same type (type A), while information processing devices 1-1 and 1-4 have some common device data 131 of different types (type B and type C).

[0071] If the partial device common data 131 of any of the information processing devices 1-0 to 1-5 is updated, the update program 164 of the other information processing devices updates the partial device common data 131 of its own device based on the updated partial device common data 131. At this time, in order to reduce the communication load, the update program 164 updates the partial device common data 131 of its own device by copying the partial device common data 131 from the information processing device 1 with the fewest number of intermediate devices to its own device's storage device 13.

[0072] As a result, when any of the partial device common data 131 of the information processing device 1 is updated, the partial device common data 131 will be updated sequentially, starting with the information processing device 1 closest to the information processing device 1 that received the update. For example, in the example in Figure 14, if the partial device common data 131 of information processing device 1-5 is updated, (1) the partial device common data 131 of information processing device 1-5 is copied to information processing device 1-4, (2) the partial device common data 131 of information processing device 1-4 is copied to information processing device 1-2, and (3) the partial device common data 131 of information processing device 1-2 is copied to information processing device 1-1, so that the partial device common data 131 is updated sequentially in the order of information processing device 1-4, 1-2, and 1-1. However, at least one of the partial device common data 131 of the same type (in this case, information processing device 1-5) is updated directly from a server or the like, which is not shown in the figure.

[0073] Figure 15 is a flowchart illustrating an example of the update process in more detail. Here, we will use the example of updating some of the device-common data 131-0 of the information processing device 1-0 to provide a more detailed explanation of the update process.

[0074] Furthermore, when the information processing device 1-0 is first started, the same data search program 161 stores the same data access information 171-0, which includes information for connecting to information processing devices 1-2, 1-3, and 1-5 that have some common device data 131 of the same type as the information processing device 1-0, in the auxiliary storage device 17 of the device, in the same manner as in Example 1. Subsequently, during operation, the information processing device 1-1 performs update processing by periodically executing the update program 164.

[0075] In the update process, first, the update program 164 obtains version information and an update flag for the partial device common data 131 stored in the partial device common data 131 of the same type from each of the information processing devices 1 that store the partial device common data 131 of the same type, based on the same data access information 171 of the device itself. The program then creates a data table summarizing the obtained information as update determination data in the memory 12 (step S1640). The update flag is information indicating the update status and is stored, for example, in the storage device 13 of each information processing device 1. The update flag can be any of the following values: "-" indicating that an update is not necessary, "Update scheduled" indicating that an update is necessary, or "Updating in progress" indicating that an update is in progress. The initial value of the update flag is "-".

[0076] Figure 16 shows an example of update determination data. The update determination data 1600 shown in Figure 16 includes fields 1601 to 1604. Field 1601 stores the IP address, which is information for connecting to a device of the same type. Field 1602 stores the number of intermediate devices to reach the device of the same type. Field 1603 stores the version information of some device common data 131 stored in the device of the same type. Field 1604 stores the update flag of some device common data 131 stored in the device of the same type. The IP address and the number of intermediate devices can be obtained from the same data access information 171-0, and the version information and update flag are obtained by the update program 164.

[0077] Returning to the explanation of Figure 15, the update program 164 determines, based on the update determination data, whether there is a preceding update device of the same type that stores a version of the partial device common data 131 that is higher than the version of the partial device common data 131 of the current device (step S1641). If no preceding update device exists, the update program 164 terminates processing. On the other hand, if a preceding update device exists, the update flag of the current device is set to "Scheduled for update" (step S1642).

[0078] The update program 164 determines whether the partial device common data 131 of the information processing device 1 with the fewest number of intermediate devices has been updated (step S1643). For example, the update program 164 determines that the partial device common data 131 of the information processing device 1 with the fewest number of intermediate devices has been updated if the version of the partial device common data 131 of the information processing device 1 with the fewest number of intermediate devices is greater than the version of the partial device common data 131 of its own device.

[0079] If the partial device common data 131 of the minimum-transit information processing device 1 has already been updated, the update program 164 updates the partial device common data 131 of the device by copying the partial device common data 131 of the minimum-transit information processing device 1 to the device's storage device 13 (step S1644), and then terminates the process. During the update (while the process in step S1644 is being executed), the update flag of the device is set to "Updating", and when the update is complete, the update flag of the device is set to "-".

[0080] If some of the common data 131 of the minimum transit device has not been updated, the update program 164 determines whether or not there is an information processing device 1 with the update flag set to "Updating" (step S1645).

[0081] If there is an information processing device 1 with the update flag set to "Updating," the update program 164 waits for a certain period of time (step S1646). After that, the update program 164 updates the update determination data based on the same data access information 171 of its own device (step S1647), and returns to the process in step S1643.

[0082] If there is no information processing device 1 with the update flag set to "Updating," the sequential execution of updates is stopped, even if there is an information processing device 1 with the update flag set to "Scheduled for Update." This occurs, for example, when information processing devices 1-2 and 1-3 are waiting for each other to update the other's partial device common data 131. To resolve this situation, the update program 164 determines whether the partial device common data 131 of the second least transiting information processing device 1, which is the information processing device 1 with the second smallest number of transiting devices in the update determination data, has been updated (step S1648).

[0083] If the partial device common data 131 of the information processing device 1 via the second minimum has been updated, the update program 164 updates the partial device common data 131 of the information processing device 1 via the second minimum to the storage device 13 of the device itself by copying the partial device common data 131 to the device itself (step S1648), and then terminates the process. On the other hand, if the partial device common data 131 of the information processing device 1 via the second minimum has not been updated, the update program 164 waits for a certain period of time (step S1646) and then proceeds to the process in step S1647.

[0084] In addition, in steps S1643 and S1648, instead of copying the entire partial device common data 131, only the difference data before and after the update in the partial device common data 131 may be copied.

[0085] As described above, according to this embodiment, if the version of the partial device common data 131 stored in the minimum-transit information processing device 1 is greater than the version of the partial device common data 131 of the own device, the update program 164 updates the partial device common data 131 of the own device based on the partial device common data 131 stored in the minimum-transit information processing device 1. In this case, data updates can be performed while reducing communication load and storage capacity.

[0086] Furthermore, in this embodiment, even if there is an information processing device 1 with the update flag set to "Scheduled for Update," if the sequential execution of the update is stopped, the update program 164 updates the partial device common data 131 of its own device based on the partial device common data 131 of the information processing device via the second minimum. In this case, it becomes possible to perform the update appropriately while suppressing an increase in communication load.

[0087] The embodiments of the Disclosure described above are illustrative for illustrative purposes and are not intended to limit the scope of the Disclosure to those embodiments only. Those skilled in the art can implement the Disclosure in various other forms without departing from the scope of the Disclosure. [Explanation of symbols]

[0088] 1: Information Processing Unit 11: CPU 12: Memory 13: Storage Device 14: Network Interface 15: Application Execution Unit 16: Data Management Unit 17: Auxiliary Storage Device 130: Device-Specific Data 131: Data Common to Some Devices 132: Data Common to All Devices 133: Recovery Data 150: Application 160: Backup Storage Program 161: Identical Data Search Program 162: Storage Device Diagnostic Program 163: Data Repair Program 164: Update Program 170: Recovery Source Access Information 171: Identical Data Access Information

Claims

1. An information processing system comprising multiple information processing devices connected to each other via daisy-chain connection, enabling them to communicate with one another, The aforementioned information processing device is A storage unit that stores some common data shared with some other information processing devices, An information processing system comprising: for each of the aforementioned partial information processing devices, a first access information is acquired which includes information for connecting to the partial information processing device and the number of intermediate devices which is the number of other information processing devices through which the connection is made; and if the partial device common data is corrupted, a processing unit is used to recover the corrupted partial device common data by copying the partial device common data stored in a first recovery source device, which is the partial information processing device with the smallest number of intermediate devices, to the storage unit of the device itself, based on the first access information.

2. The storage unit stores device-specific data unique to each information processing device, The processing unit registers the device-specific data in a second recovery source device, which is an information processing device connected to the plurality of information processing devices without going through the other information processing devices, and obtains second access information including information for connecting to the second recovery source device. If the device-specific data is corrupted, the processing unit recovers the corrupted device-specific data by copying the device-specific data registered in the second recovery source device to the storage unit of its own device based on the second access information.

3. The storage unit stores common data for all of the information processing devices, The information processing system according to claim 2, wherein, if the common data for all devices is corrupted, the processing unit recovers the corrupted common data for all devices by copying the common data for all devices stored in the second recovery source device to the storage unit of its own device based on the second access information.

4. The information processing device includes an auxiliary storage device that stores a program for causing the information processing device to perform a predetermined degraded operation. The information processing system according to claim 3, wherein, when the processing unit detects a failure related to the storage unit, it determines whether the failure is due to corruption of data stored in the storage unit or a hardware failure of the storage unit, and in the case of data corruption, it restores the partial device common data, device-specific data, and all device common data stored in the storage unit, and in the case of a hardware failure, it executes the program to perform the degraded operation.

5. The information processing system according to claim 4, wherein, in the event of data corruption, the processing unit identifies the corrupted data from among the data common to some devices, the data specific to each device, and the data common to all devices, and restores only the corrupted data.

6. The processing unit checks the version of the partial device common data stored in each of the partial information processing devices, and if the version of the partial device common data stored in the first recovery source device is greater than the version of the partial device common data stored in the storage unit of the device itself, it updates the partial device common data stored in the storage unit of the device itself based on the partial device common data stored in the first recovery source device, the information processing system according to claim 1.

7. The information processing system according to claim 6, wherein if a certain period of time has elapsed under the following conditions, the processing unit updates the common data stored in the storage unit of the device based on the common data stored in the information processing unit with the second smallest number of intermediate devices, when there is a version of the common data stored in each of the partial information processing units that is greater than the version of the common data stored in the storage unit of the device itself, and the common data stored in each of the partial information processing units has not been updated, and the version of the common data stored in the first recovery source device is not greater than the version of the common data stored in the storage unit of the device itself.

8. A recovery method using an information processing system comprising multiple information processing devices connected to each other via daisy-chain connection, The aforementioned information processing device is It stores some common data shared with some other information processing devices, A recovery method comprising: obtaining first access information for each of the aforementioned partial information processing devices, which includes information for connecting to the partial information processing device and the number of intermediate devices, which is the number of other information processing devices through which the connection is made; and, in the event that the partial device common data is corrupted, recovering the corrupted partial device common data by copying the partial device common data stored in a first recovery source device, which is the partial information processing device with the smallest number of intermediate devices, to the device itself based on the first access information.

Images