摘要:
In provision against an unrecoverable failure in a first OS, a second OS for undertaking failure processing is loaded onto a memory beforehand. On detecting a failure in the first OS, a gate driver saves the first OS, moves the second OS to its executable area within the memory, and starts up the second OS. After this, control is transferred to a failure-processing application program placed under the control of the second OS.
摘要:
A service AP conducting ordinary business processing is executed on a first OS. The first OS includes an operation recording controller for recording operation conducted by the first OS as operation recording information together with time when the operation is conducted, and an auxiliary driver for accepting and executing external processing. A multi-OS controller interface included in a second OS, which is higher in reliability than the first OS, operates a multi-OS controller from an AP operating on the second OS. An analysis and prediction AP operating on the second OS analyzes states of the first OS and the service AP, and detects a failure sign. Upon detecting a failure sign, degrade operation of the OS or service AP to be analyzed, preparations for switching from an active system to a stand-by system, and actual switching are conducted before the failure occurs.
摘要:
A service AP conducting ordinary business processing is executed on a first OS. The first OS includes an operation recording controller for recording operation conducted by the first OS as operation recording information together with time when the operation is conducted, and an auxiliary driver for accepting and executing external processing. A multi-OS controller interface included in a second OS, which is higher in reliability than the first OS, operates a multi-OS controller from an AP operating on the second OS. An analysis and prediction AP operating on the second OS analyzes states of the first OS and the service AP, and detects a failure sign. Upon detecting a failure sign, degrade operation of the OS or service AP to be analyzed, preparations for switching from an active system to a stand-by system, and actual switching are conducted before the failure occurs.