Active Firmware Replacement in Storage Controllers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

During active firmware replacement in a storage system, the disconnection of redundant paths between storage devices can lead to system downtime due to abnormal communication states, causing loss of connecting information and system instability.

Innovation Solution

Implementing a mechanism where the first storage controller confirms the communication state with the second storage controller before disconnecting to prevent active program replacement if an abnormality is detected, ensuring that the active firmware replacement process only proceeds if the communication state is normal, thereby maintaining system stability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Duration of action of stationary object

If active firmware replacement is performed during system operation, then system availability is maintained, but system stability deteriorates due to path disconnection risks

Engineering Contradiction:

Improvesystem availabilityVSAvoidsystem stability

Core Design Contradiction:

Duration of action of stationary objectVSReliability

Solution Approach 1:

The system performs preliminary confirmation of communication states between storage controllers before initiating firmware replacement. This preliminary action ensures that redundant paths are verified as functional, preventing system instability during the firmware update process while maintaining system availability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system continuously monitors communication states between storage controllers during firmware replacement and provides feedback to control the replacement process. If communication abnormalities are detected, the system adjusts the replacement process accordingly, resolving the contradiction between maintaining availability and ensuring stability.

Inventive Principle:

Principle #23Feedback

2Productivity

If firmware replacement proceeds without communication state confirmation, then replacement speed increases, but system reliability decreases due to undetected abnormalities

Engineering Contradiction:

Improvereplacement speedVSAvoidsystem reliability

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs quick communication state confirmation as a preliminary step before firmware replacement. This preliminary check is designed to be fast yet effective, allowing the system to maintain high replacement speed while ensuring reliability by detecting communication abnormalities before they cause system failures.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If communication state confirmation is performed before firmware replacement, then system reliability is improved, but replacement time increases

Engineering Contradiction:

Improvesystem reliabilityVSAvoidreplacement time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs communication state confirmation in a streamlined manner, skipping unnecessary verification steps while focusing on critical path checks. This allows the system to maintain high reliability through essential communication verification while minimizing the time added to the firmware replacement process.

Inventive Principle:

Principle #21Skipping (Rushing through)

Data Source

PatentUS11074144B2Active firmware replacement in storage system and in storage controller, and computer-readable recording medium having stored therein program for active firmware replacement in controlling storage

Publication Date: 2021.07.27 FUJITSU LTD

AI summary

Before an active program replacement is carried out, a storage controller confirms a communication state between a redundant storage controller having a redundant configuration with the storage controller and the second storage device, and prohibits, in a case where an abnormality is detected in the communication state between the redundant storage controller and the second storage device, the active program replacement of the first storage controller. This inhibits occurrence of system down when active firmware replacement process is to be carried out in a storage system including multiple storage devices connected to one another.