Online program-updating system and computer-readable recording medium storing a program-updating program

[0002] 1. Field of the Invention

[0003] The present invention relates to an online program-updating system and a computer-readable recording medium storing a program-updating program, and more particularly to an online program-updating system for carrying out an update of a program without stopping operation of a system in which the program is stored and run a computer-readable recording medium storing a program-updating program for the update.

[0004] 2. Description of the Related Art

[0005] As performance of microcomputers has been enhanced, it is possible to replace devices and systems including communication systems, which are conventionally controlled by large scale computers, with small-sized devices and systems controlled by microcomputers. Further, recent development of microprocessors is amazing and the performance and capability thereof are being improved day by day, with more and more devices and systems coming to incorporate microprocessors.

[0006] In order to realize desired capabilities through incorporation of a microprocessor, a program for operating the microprocessor is required, and actually, the desired capabilities are realized for the most part through execution of such a program. If contents of various functions are written into a program, addition or modification of a specific function can be carried out simply by rewriting the program. Recently, in accordance with the development of microprocessors, upgrade of an existing function realized by the program or addition of a new function realized by the same is frequently carried out, so that there are very few programs which continue to be run without any version upgrade.

[0007] Under such circumstances, a method is employed in which a new version of a program can be downloaded from another system so as to enable frequent modification or upgrade of the program. The download of the new version of the program from one system to a plurality of other systems has made it possible to readily modify the program stored in each of the other systems providing identical functions.

[0008] In order to download a program, it is generally required to install dedicated programs (called “loaders” or the like) for use in program transfer, in a system from which the program is downloaded (i.e. a program-providing system which provides a latest version of the program) and a system to which the programs is downloaded (i.e. a program-executing system which runs the program thus provided), respectively. The dedicated program installed in the program-providing system designates the starting address of a storage area in which the program is stored and an amount of data to be transferred for the download of the program, while the dedicated program installed in the program-executing system also designates a storage area in which the program is to be stored. This activates a transfer program to start a predetermined download. In order to check on normality of the download, information on a checksum carried out when the program was created is checked against a checksum of the program executed after download. If the checksum results are identical, it is determined that the program has been normally downloaded.

[0009] Programs can be downloaded as described above. However, since it is impossible to rewrite contents of a program during execution of the program, it is required to stop or interrupt operation of a system or a device when the download is carried out for an update of the program, so that the service to be provided by the system or the device is made unavailable to users.

[0010] In order to avoid this inconvenience, conventionally, a program is stored in two storage areas, i.e. an actually used area in which a running program is stored and a spare area in which a downloaded program is stored. A new program is downloaded and stored in the spare area, and then the spare area storing the new program and the actually used area are switched in function to change the spare area into the actually used area for execution of the updated program, whereby a time period during which the services are interrupted is reduced.

[0011] However, even if the two program storage areas are employed, the services are inevitably interrupted when the actually used area and the spare area are switched to each other. Moreover, various environmental settings are required for activation of a newly downloaded program, and hence it takes a certain time period before the services start to be actually provided.

[0012] It is an object of the present invention to provide an online program-updating system which is capable of updating contents of a program without interrupting any service provided by operation of the program.

[0013] It is a further object of the present invention to provide a computer-readable recording medium storing a program-updating program for causing a computer system to execute processing for updating contents of a program without interrupting any service provided through operation of the program.

[0014] To attain the above objects, there is provided an online program-updating system for updating contents of a program by downloading a revised program on line. The online program-updating system is characterized by comprising program storage means for storing an existing program to be updated, management information storage means for storing management information including an operative status flag indicative of an operative status of the existing program, program execution means for executing the existing program as required and setting the operative status flag to a state indicative of an active status of the program during execution of the existing program, operative status determination means for monitoring the operative status flag in response to a download request for download of the revised program and permitting execution of the download only when the operative status flag is not set to the status indicative of the active status of the program, and program transfer means for downloading the revised program during a time period over which the download is permitted by the operative status determination means, to thereby replace the existing program stored in the program storage means with the revised program.

[0015] The above and other objects, features and advantages of the present invention will become apparent from the following description when taken in conjunction with the accompanying drawings which illustrate a preferred embodiment of the present invention by way of example.

[0016] FIG. 1 is a conceptual representation of construction of the present invention;

[0017] FIG. 2 is a view showing an example of changes in operative status of program modules of a program;

[0018] FIG. 3 is a flowchart showing a routine for program update;

[0019] FIG. 4 is a block diagram showing a system configuration according to an embodiment of the present invention;

[0020] FIG. 5 is a diagram showing a memory map of a service providing system;

[0021] FIG. 6 is a diagram showing a data format of management information;

[0022] FIG. 7 is a first part of a flowchart showing a routine for program download;

[0023] FIG. 8 is a second part of the flowchart showing the routine for program download;

[0024] FIG. 9 is a third part of the flowchart showing the routine for program download;

[0025] FIG. 10 is a block diagram showing an example of a hardware configuration of a communication system;

[0026] FIG. 11 is a diagram showing an address map of the communication system;

[0027] FIG. 12 is a diagram showing an example of construction of a program module group;

[0028] FIG. 13 is a flowchart showing a sequence of program download;

[0029] FIG. 14 is a block diagram which is useful in explaining a mechanism of program transfer performed by a DMAC; and

[0030] FIG. 15 is a timing chart showing an example of DMA transfer.

[0031] A preferred embodiment of the present invention will be described below with reference to the accompanying drawings.

[0032] Referring first to FIG. 1, there are shown the principles of the invention. The invention is comprised of the following component elements.

[0033] A revised program 1 includes program modules 1a,1b,1ceach corresponding to a specific function, and version number information items 1d,1e,1fare additionally provided for the respective modules. Program storage means 2 stores an existing program 2asubject to version upgrade. Similarly to the revised program 1, the existing program 2ais divided into program modules 2aa,2ab,2ac.Management information storage means 3 stores management information items 3a,3b,3cassociated with the program modules 2aa,2ab,2ac,respectively. Each of the management information items 3a,3b,3cincludes an operative status flag and a version number information item.

[0034] Program execution means 4 executes the program modules 2aa,2ab,2acof the existing program 2aas required, and updates the operative status flags of the respective management information items 3a,3b,3caccording to the respective operative statuses of the program modules 2aa,2ab,2ac.More specifically, when any one of the program modules 2aa,2ab,2acis activated, an operative status flag of a corresponding one of the management information items 3a,3b,3cis set to an “active” status, and when the program module is terminated, the flag is set to an “inactive” status.

[0035] Version number check means 5 is responsive to a download request, for performing a comparison between a version number information item associated with a desired program module in the revised program 1 and one associated with a corresponding program module in the existing program 2a.If the comparison result shows that the program module in the revised program 1 is newer, it is determined that program update is required, and otherwise, it is determined that program update is not required.

[0036] On the other hand, operative status determination means 6 is also responsive to the download request, for determining, through referring to a corresponding one of the operative status flags of the management information items 3a,3b,3c,whether or not program update is permitted. If the flag indicates that the corresponding program module is in an “inactive” status, program update is permitted, whereas if the flag indicates that the program module is in an “active” status, program update is inhibited.

[0037] When the version number check means 5 determines that program update is required, and when the operative status determination means 6 permits the program update, program transfer means 7 downloads the desired program module from the revised program 1, to thereby replace the identically named program module stored in the program storage means 2 with the downloaded program module. At the same time, the version number information item of a corresponding one of the management information items stored in the management information storage means 3 is replaced with the version number information item of the newly downloaded program module.

[0038] In the system described above, the program execution means 4 sequentially executes the program modules within the program storage means 2, to thereby provide a series of services to users.

[0039] FIG. 2 shows an example of changes, in operative status, of program modules of a program. In the illustrated example, “Program module A”, “Program module B”, and “Program module C” are executed in the mentioned order. As shown in FIG. 2, during execution of “Program module B” or “Program module C”, the operative status flag of “Program module A” indicates that the program module A is “inactive”, which means that an update of “Program module A” is permitted. Thus, the update of “Program module A” is permitted so long as “Program module B” or “Program module C” is being run.

[0040] FIG. 3 shows a routine for a program update.

[0041] (Step S1) The version number check means 5 makes a comparison between the version number information items 1d,1e,1fassociated respectively with the program modules 1a,1b,1cstored in the revised program 1 and the version number information items included in the respective management information items 3a,3b,3c.

[0042] (Step S2) The version number check means 5 determines whether or not an update is required. More specifically, if any one of the version numbers of the program modules of the revised program 1 is newer, it is determined that the update is required, and otherwise, it is determined that update is not required.

[0043] (Step S3) The operative status determination means 6 performs a check on the operative status flag of a program module which requires the update.

[0044] (Step S4) If the operative status flag indicates that the program module is “inactive”, the program proceeds to Step S5, and otherwise, the program returns to Step S3.

[0045] (Step S5) The program transfer means 7 replaces the version number information item of the program module to be updated with that of the program module to be downloaded.

[0046] (Step S6) The program transfer means 7 transfers the program module determined to require updating from the revised program 1 to the program storage means 2 to thereby replace the existing program module with the transferred program module.

[0047] As described above, an update of each program module is performed during execution of another program, so that it is possible to update the whole program without stopping or interrupting services provided by operation of the program.

[0048] Next, an embodiment of the present invention will be described in detail.

[0049] FIG. 4 shows a system configuration of the embodiment. This system is comprised of a system management system 10 and a service providing system 20.

[0050] The system management system 10 includes a download program storage section 11, a download control section 12, a data receiver section 13, and a data transmitter section 14.

[0051] The download program storage section 11 stores a program module group 11aformed of program modules for download by the service providing system 20 and version number information items 11bassociated with the respective program modules.

[0052] The download control section 12 controls processing for distributing program modules stored in the download program storage section 11 to the service providing system 20. The download control section 12 incorporates a version number comparison section 12aand a comparison result judgment section 12b.

[0053] The version number comparison section 12aperforms a comparison between a version number information item of each program module stored in the service providing system 20, which is received via the data receiver section 13, and a version number information item of a corresponding one of the program modules stored in the download program storage section 11. The comparison result judgment section 12breceives a result of the comparison performed by the version number comparison section 12aand a result of a comparison performed by a version number comparison section 23awithin the service providing system 20, and makes a judgment on the comparison results. More specifically, when it Is judged on the basis of the comparison results that any program module stored in the download program storage section 11 is newer, it is determined that the program module should be transferred for download.

[0054] When a program module to be downloaded exists within the download program storage section 11, the download control section 12 receives information on an operative status flag associated with a corresponding program module stored in the service providing system 20 via the data receiver section 13, so as to determine whether the corresponding program module is active or inactive. If the program module is inactive, the program module to be downloaded is sent to the data transmitter section 14.

[0055] The data receiver section 13 receives version number information, a version number comparison result, and operative status flag information from the service providing system 20 and transfers them to the download control section 12.

[0056] The data transmitter section 14 transmits to the service providing system 20 the version number information items of the respective program modules stored in the download program storage section 11 as well as program modules to be downloaded.

[0057] The service providing system 20 is comprised of a program storage section 21, a program execution section 22, a download control section 23, a data receiver section 24, and a data transmitter section 25.

[0058] The program storage section 21 stores a program module group 21aformed of program modules in each of which the details of processing for providing service is written, and management information 21bon the program modules. The management information 21bincludes the version number information items associated with the respective program modules and the operative status flags each of which indicates whether or not a corresponding program module is active (i.e. being executed by the program execution section 22).

[0059] The program execution section 22 provides services to users by sequentially executing the program modules stored in the program storage section 21. When a program module is activated, the operative status flag of a corresponding management information item is set to “active”. On the other hand, when the program module is terminated, the operative status flag is set to “inactive”.

[0060] The download control section 23 controls processing for downloading the program modules stored in the program storage section 21. The download control section 23 incorporates the version number comparison section 23amentioned above. The version number comparison section 23aperforms a comparison between a version number information item associated with a program module to be downloaded, which is received from the system management system 10 via the data receiver section 24, and a version number information item associated with a corresponding program module stored in the program storage section 21.

[0061] The data receiver section 24 receives version number information and a program module from the system management system 10 and transfers them to the version number comparison section 23aof the download control section 23.

[0062] The data transmitter section 25 transmits to the system management system 10 the management information 21bstored in the program storage section 21 and a result of a comparison performed by the version number comparison section 23a.

[0063] The program storage section 21 of the service providing system 20 is implemented by part of a memory area within a semiconductor memory.

[0064] FIG. 5 shows a memory map of the service providing system 20. The memory map 30 includes a work area 31, a data buffer area 32, and a program storage area 33. The work area 31 is an area for temporarily storing information or data which the program execution section 22 uses in executing a program module. The data buffer area 32 is an area for temporarily storing data after reception or before transmission of the data. The program storage area 33 is an area allocated to the program storage section 21. The program storage area 33 is divided into a management information storage area 33afor storing management information items associated with the respective program modules, and a program module storage area 33b.The management information items stored in the management information storage area 33aeach has one-to-one correspondence with a specific program module stored in the program module storage area 33b.

[0065] FIG. 6 shows the data format of a management information item. The management information item 40 includes operative status information 41, module status information 42, a module number 43, module version number information 44, and storage address area information 45.

[0066] The operative status information 41 is represented as a flag bit indicating whether a corresponding program module is active or inactive. If the flag assumes “0”, it is indicated that the program module is inactive, whereas if the flag assumes “1”, it is indicated that the program module is active.

[0067] The module status information 42 is represented as 3-bit data indicating whether the corresponding program module is overwritten, newly added, or already deleted. If the data has a value of “100”, it is indicated that the program module has been overwritten, which means that it was upgraded at least once. If the data has a value of “010”, it is indicated that the program module is a newly added one, and if the data has a value of “001”, it is indicated that the program module is a deleted one. In the last case, the program module is not actually stored in the program storage section 21 but only a management information item associated therewith still remains.

[0068] The module number 43 is a unique number assigned to the corresponding program module for identification.

[0069] The module version number information 44 indicates a version number of the corresponding program module by a revision number (Rev. No) and a level number (Lev. No). When a relatively large modification, such as an addition of a function, is effected, the revision number is updated. On the other hand, when a small modification, such as correction of a defective condition, is carried out, the level number is updated.

[0070] In the storage address area information 45, there are stored a starting address and an ending address of an area in which the corresponding program module is stored.

[0071] Next, a routine for processing carried out by the system described above will be described.

[0072] FIG. 7 is a first part of a flowchart showing a routine for program download. Now, the flowchart is explained in order of step numbers. This routine is executed when a command is input to the system management system 10 to update the program stored in the service providing system 20 under its management.

[0073] (Step S11) The download control section 12 is activated.

[0074] (Step S12) The data transmitter section 14 is set for data transmission.

[0075] (Step S13) The download control section 12 delivers a request for starting download processing to the service providing system 20 to which the program should be downloaded.

[0076] (Step S14) The download control section 23 within the service providing system 20 is activated.

[0077] (Step S15) The data receiver section 13 is set for data reception.

[0078] (Step S16) The data receiver section 24 is set for data reception. When the setting of the section 24 is completed, notification of readiness for data reception is transmitted to the system management system 10.

[0079] (Step S17) The data receiver section 13 receives the notification of readiness for data reception and notifies the download control section 12 that the service providing system 20 is ready for data reception.

[0080] (Step S18) The download control section 12 extracts management information items associated with the respective program modules from the download program storage section 11, in preparation of transmission of them.

[0081] (Step S19) The data transmitter section 14 transmits the management information items associated with the respective program modules to the service providing system 20.

[0082] (Step S20) The data receiver section 24 starts data reception.

[0083] (Step S21) The data transmitter section 14 determines whether or not the data transmission is completed. This step S21 is repeated until the data transmitter section 14 determines that the data transmission is completed.

[0084] (Step S22) The data receiver section 24 determines whether or not the data reception is completed. This step S22 is repeated until the data receiver section 24 determines that the data reception is completed.

[0085] (Step S23) The version number comparison section 23awithin the download control section 23 reads in the management information items associated with the respective program modules stored in the program storage section 21, for comparison with the management information items received from the system management system 10.

[0086] (Step S24) The download control section 23 determines based on a result of the version number comparison whether or not the received management information contains any newer version number than that of a corresponding program module stored in the program storage section 21, and notifies the system management system 10 of the version number check result.

[0087] (Step S25) The download control section 23 extracts the management information from the program storage section 21 and transmits the same to the system management system 10.

[0088] FIG. 8 is a second part of the flowchart showing the routine for program download.

[0089] (Step S26) The download control section 12 analyzes the version number check result received from the service providing system 20.

[0090] (Step S27) The download control section 12 determines whether or not the check result shows there exists any new program module to be downloaded. If the check result shows that there is a new program module to be downloaded, the program proceeds to Step S28, and otherwise, the program proceeds to Step S30.

[0091] (Step S28) The version number comparison section 12aperforms a comparison between the version number information items associated with the respective program modules in the service providing system 20, which are contained in the management information received from the service providing system 20, and the version number information items associated with the program modules, which are contained in the management information stored in the download program storage section 11.

[0092] (Step S29) The download control section 12 determines based on a result of the comparison whether or not there exists any new program module to be downloaded. If there is a new program module to be downloaded, the program proceeds to Step S31, and otherwise, the program proceeds to Step S30.

[0093] (Step S30) The download control section 12 displays on a screen of a terminal device used by the operator a message indicating that download is not required.

[0094] (Step S31) The download control section 12 selects a new program module which is not yet transmitted, and carries out setting for program transfer.

[0095] (Step S32) The download control section 12 sends a request to the service providing system 20, for sending a management information item associated with a program module corresponding to the selected program module.

[0096] (Step S33) The download control section 23 carries out setting for receiving the program module selected by the system management system 10.

[0097] (Step S34) The download control section 23 extracts from the program storage section 21 the management information item associated with the program module corresponding to the selected program module, and transmits the same to the system management system 10.

[0098] FIG. 9 is a third part of the flowchart showing the routine for program download.

[0099] (Step S35) The download control section 12 performs a check on the operative status of the existing program module corresponding to the selected program module to be downloaded based on the management information item received from the service providing system 20.

[0100] (Step S36) The download control section 12 determines whether or not the check result shows the existing program module is inactive. If the existing program module is inactive, the program proceeds to Step S37, whereas if the existing program module is active, the program proceeds to Step S40.

[0101] (Step S37) The download control section 12 executes download of the selected program module.

[0102] (Step S38) The download control section 12 notifies the service providing system 20 that transfer of the selected program module is completed.

[0103] (Step S39) The download control section 23 completes reception of the selected program module.

[0104] (Step S40) The download control section 12 determines whether or not all of new program modules have been once selected for download. If all of the new program modules have been once selected, the present program proceeds to Step S41, and otherwise, the program returns to Step S31.

[0105] (Step S41) The download control section 12 determines whether or not there is any new program module which could not be downloaded since the corresponding existing program module in the service providing system 20 was active. If such a program module is found, the present program proceeds to Step S43, and otherwise, the program proceeds to Step S42.

[0106] (Step S42) The download control section 12 displays on the screen of the terminal device used by the operator a message indicating that the download has been normally completed.

[0107] (Step S43) The download control section 12 increments a retry counter by “1”. The retry counter is set to “0” when the download control section 12 is activated. After the retry counter is incremented by “1”, only the program modules which could not be downloaded due to the active status of the corresponding program modules are treated as new program modules to be downloaded.

[0108] (Step S44) The download control section 12 determines whether or not the count of the retry counter has exceeded the maximum retry number. If the maximum retry number is exceeded, the present program proceeds to Step S45, and otherwise, the program returns to Step S31.

[0109] (Step S45) The download control section 12 notifies the service providing system 20 that the download is suspended.

[0110] (Step S46) The download control section 12 displays on the screen of the terminal device the name of the program module which could not be downloaded.

[0111] (Step S47) The download control section 12 stops its operation to thereby terminate the present processing.

[0112] (Step S48) The download control section 23 stops its operation to thereby terminate the present processing.

[0113] As described above, the present invention makes it possible to update a program divided into modules, on a module-by-module basis, without stopping or interrupting services provided to users by operation of the program stored in the system.

[0114] Next, the present invention will be described in further detail based on an exemplified case in which the invention is applied to a system for providing infocommunications services. In order to carry out download of a program in operation, on line, it is required that all program modules except one being downloaded can be run during the program download. In the following example, the transfer of a program for download is realized through a DMA (direct memory access) control function.

[0115] FIG. 10 shows an example of a hardware configuration of a communication system. In this example, a system management system 50 and a communication system 60 are connected to each other by an internal bus.

[0116] The system management system 50 is comprised of a processor unit 51 including a central processing unit (CPU) for controlling the whole system, a working memory unit (RAM: random access memory) 52 for loading a program to be executed by the processor unit 51, a program storage unit (EEPROM: electrically erasable and programmable ROM) 53 for storing a system program and so forth, an input/output (I/O) unit 54 to be connected to an external device 70, and an interface unit 55 to be connected to the internal bus. Devices used as the external device 70 include a floppy disk drive, and a newest program module is read from a floppy disk 71 mounted in the drive.

[0117] The communication system 60 is comprised of a processor unit 61 including a CPU for controlling the whole communication processing, a working memory unit (RAM) 62 for loading a program to be executed by the processor unit 61, a program storage section (EEPROM) 63 storing program modules corresponding to respective functions, a program transfer direct memory access controller (DMAC) 64 specially provided for transfer of a program, a host interface unit 65 for data transmission/reception carried out between the communication system 60 and the system management system 50 via the system bus, an input/output interface unit 66 for inputting and outputting communication data, and an input/output (I/O) unit 67 connected to external communication media.

[0118] FIG. 11 shows an address map of the communication system. In the address map of the communication system 60, an address range “00000-1FFFF” is assigned to a RAM area, “20000-2FFFF” to an I/O area, “30000-3FFFF” to a DMAC area, and “40000-4FFFF” to a program storage area.

[0119] The program storage area is further divided into an address range “40000-4FFFF” assigned to a management information storage area, an address range “50000-7FFFF” assigned to a storage area storing program modules for providing various functions, respectively, and an address range “80000-FFFFF” assigned to a storage area storing the other program modules (e.g. for initialization, DMAC, etc.).

[0120] FIG. 12 shows an example of the construction of a program module group. The program storage section 63 of the communication system 60 stores the following program modules: an initialization module 81 for executing initialization when the communication system 60 is started up; an I/O control module 82 for controlling operation of the input/output unit 67; a DMAC control module 83 for controlling operation of the program transfer DMAC 64; a function processing module 84 for controlling communication functions made available for a user (the function processing module 84 is divided into a plurality of program modules 84ato 84neach having a different function); a management information control module 85 for controlling e.g. an update of management information; and an input/output control module 86 for controlling the host interface unit 65 and the input/output interface unit 66.

[0121] In the system constructed as above, management information is exchanged between the system from which the program is downloaded (system management system 50) and the system to which the program is downloaded (communication system 60). Then, at a time point the execution of program download is decided, setting of the program transfer DMAC 64 is carried out according to the sequence described below, and then transfer of the program is carried out.

[0122] FIG. 13 shows the sequence of program download. This processing is carried out by the processor unit 61 through running a program stored in the program storage section 63 when a program transfer start notification which designates a specific program module to be downloaded Is received from the system management system 50 by the communication system 60. However, the DMA transfer (see Step S108) alone is carried out by the program transfer DMAC 64.

[0123] (Step S101) The management information control module 85 Is activated.

[0124] (Step S102) The storage addresses of a designated program module are determined by reading management information from the management information storage area within the program storage section 63.

[0125] (Step S103) The DMAC control module 83 is activated.

[0126] (Step S104) Destination addresses of a location to which the program module should be transferred and an amount of data to be transferred for the download of the program module are set to the program transfer DMAC 64.

[0127] (Step S105) Settings are effected for activation of the program transfer DMAC 64.

[0128] (Step S106) The host interface unit 65 is activated.

[0129] (Step S107) The DMA transfer of the program module from the system management system 50 via the host interface unit 65 is started.

[0130] (Step S108) The program transfer DMAC 64 transfers program data to a storage area for storing the program module, on a byte-by-byte or word-by-word basis.

[0131] FIG. 14 shows a transfer mechanism of the DMAC for transferring a program module. FIG. 14 also shows the internal construction of each component essential to the DMA transfer. The processor unit 61 includes a CPU 61aand a bus control section 61b.The working memory unit 62 is comprised of a RAM 62a.The program storage section 63 is comprised of an EEPROM 63a.The program transfer DMAC 64 includes a transfer request control section 64aand an address control section 64b.

[0132] FIG. 15 is a timing chart which is useful for explaining a DMA transfer. When program data of a program module transferred from the system management system 50 is inputted to a data reception register 65aof the host interface unit 65, the host interface unit 65 delivers a data transfer request (REQ signal) requesting transfer of the program data to the program storage section 63, to the program transfer DMAC 64 and the CPU 61a.The processor unit 61 outputs an ACK signal (i.e. a signal permitting the DMA transfer) from the bus control section 61bto the program transfer DMAC 64 at suitable timing during a time period over which the CPU 61ais executing a program module other than one for processing associated with the download. The transfer request control section 64aof the program transfer DMAC 64 is responsive to the ACK signal, for outputting a write signal (when the output (R/W signal) from the transfer control section 14ais at a high level, it is a write signal, and when the same is at a low level, it is a read signal) to an R/W signal line, and the address control section 64boutputs addresses 91a,91bof locations at which downloaded data is to be stored, only during a time period over which the ACK signal is outputted. This causes data items 92a,92bstored in the data reception register 65ato be transferred to a predetermined program module storage area without involving the CPU 61a,but directly.

[0133] The execution of the operation described above on a module-by-module basis makes it possible to download a predetermined program module on line without stopping or interrupting service operation of the system. During checking on management information at the start of a program transfer, whether or not download of the predetermined program module is permitted is checked by an operative status flag in a management information item associated with the program module. If the operative status flag indicates an “active” status of the program module, a next management information item associated with the following program module is checked on. Program transfer is started when an operative status flag associated with a program module to be updated indicates an “inactive” status of the program module.

[0134] The above system provides the following advantageous effects:

[0135] Firstly, a program can be updated without stopping or interrupting operation of a system or a device providing online services, which eliminates adverse effects of program download on the services provided to users. As a result, program update, which is conventionally executed only on a holiday or during a time period over which the minimum amount of service is required, can be carried out at any time, thereby enabling efficient maintenance of the system or the device.

[0136] Secondly, it is possible to always automatically detect the correct version number of a program module which should be downloaded to a system on which a program including a previous version of the program module is running. This prevents erroneous download of a wrong program module. As a result, it is possible to prevent recurrence of a defect which should have already been eliminated and hindrance of improvement of functions, due to download of an older version, whereby it is possible to enhance reliability of the system or the device.

[0137] Thirdly, the version number of a program is managed on a module-by-module basis, and only when the version number of an existing program module is judged to be older, a revised program module corresponding to the existing program module is downloaded, so that it is possible to minimize the volume of program modules to be downloaded, which contributes to reduction of a time period required for program download and a time period required for starting up of the system or device.

[0138] It should be noted that the system management system and the service providing system according to the above embodiment may be connected to each other by a high speed bus or by a network. When a network is utilized, it is possible to download a program from a distant location.

[0139] Further, the above processing capabilities can be implemented by a computer. In this case, details of processing which can be executed by functions of the system management system or the service providing system are written in a program stored in a computer-readable recording medium, and the processing capabilities are realized by executing the program on the computer. The computer-readable recording media include a magnetic recording medium, and a semiconductor memory. In order to make this program available on the market, it can be stored in a portable recording medium, such as a compact disk read only memory (CD-ROM) or a floppy disk. Further, the program can be stored in a storage device of a computer connected to a network, and transferred to other computers via the network. When the program is executed on a computer, the program stored in a hard disk or the like within the computer is loaded into a main memory for execution.

[0140] As described above, according to the online program-updating system of the present invention, it is possible to check on an operative status flag indicative of the operative status of an existing program module to be updated, to thereby execute program download when the existing program module is inactive or not being run. Therefore, the existing program module can be updated during execution of other program modules, without stopping or interrupting operation of the whole system.

[0141] Further, in the computer-readable recording medium storing a program-updating program, according to the present invention, it is possible to set an operative status flag indicative of the operative status of an existing program module to be updated, and cause a computer to execute program download when the existing program module is inactive or not being run. Therefore, the existing program module can be updated without stopping or interrupting operation of the whole system.

[0142] The foregoing is considered as illustrative only of the principles of the present invention. Further, since numerous modifications and changes will readily occur to those skilled in the art, it is not desired to limit the invention to the exact construction and applications shown and described, and accordingly, all suitable modifications and equivalents may be regarded as falling within the scope of the invention in the appended claims and their equivalents.