Automatic Software Recovery via Watchdog Timer and Storage Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded systems face fatal errors due to incorrect or damaged software images, making system recovery difficult and requiring manual switch manipulation, which is cumbersome for users.
Innovation Solution
A method and apparatus for automatic system recovery through dynamic image loading, where multiple software images of different versions are stored across physically or logically multiplexed storage media, and a watchdog timer determines loading failures, allowing the system to switch to a previous software image if the current one fails during booting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an original software image is separately stored in internal storage for recovery, then system reliability is improved, but device complexity increases due to multiple storage areas and manual switch manipulation
Solution Approach 1:
The internal storage is divided into multiple storage areas, with at least two areas capable of storing software images. This segmentation allows the system to store both original and updated software images separately, enabling automatic recovery by switching between areas without requiring complex manual intervention or a single dedicated recovery storage location.
Solution Approach 2:
The system performs self-diagnosis and self-recovery by automatically detecting boot failures and switching to a different storage area containing a valid software image. The recovery process is automated through the watchdog timer and boot loader, eliminating the need for manual switch manipulation and reducing the complexity of user intervention while maintaining high reliability.
2Device complexity
If manual switch manipulation is required for system recovery, then device complexity is reduced, but ease of operation deteriorates due to user burden
Solution Approach 1:
The system automatically detects boot failures through the watchdog timer and initiates recovery by switching to a different storage area without requiring manual user intervention. This self-service mechanism maintains simple device architecture while dramatically improving ease of operation, as users no longer need to manually manipulate switches or perform recovery procedures.
Solution Approach 2:
The watchdog timer continuously monitors system boot status and provides feedback about loading failures. Based on this feedback, the boot loader automatically switches to a different storage area if the current boot fails. This feedback mechanism enables automatic recovery while keeping the device structure simple, eliminating the need for complex manual recovery procedures.
3Adaptability or versatility
If multiple software images are stored in internally multiplexed storage areas, then adaptability is improved for version selection, but device complexity increases
Solution Approach 1:
Multiple storage areas are designed to universally store software images of different versions, with each area capable of holding a complete software image. This multi-functionality allows the system to adapt to different software versions and recovery scenarios without requiring complex specialized storage structures or management mechanisms.
Solution Approach 2:
The storage system is segmented into multiple independent areas, each capable of storing a complete software image. This segmentation provides flexibility for storing different versions while maintaining simple management through the boot loader's ability to select between areas. The segmentation approach balances adaptability with simplicity by avoiding complex multiplexing while enabling version selection.
Data Source
AI summary
A system recovery method and an apparatus supporting the same are disclosed. A software image is downloaded, and a system is loaded with the downloaded software image, and the system is recovered by a software image used before the updating, if the system loading fails.