System and method for intelligent and reliable booting

• US 6,061,788 A
• Filed: 10/02/1997
• Issued: 05/09/2000
• Est. Priority Date: 10/02/1997
• Status: Expired due to Term

• Current Assignee: Unify Inc. (Atos SE)
• Original Assignee: Siemens Information And Communication Networks, Inc.
• Inventors: Kuwano, Tad, Worsham, James M., Beyda, Wiliam J., Reynaud, Alan, Nielson, Joe, Han, Randy
• Primary Examiner(s): Sheikh, Ayaz R.
• Assistant Examiner(s): VO, TIM T
• Application Number:
  US08/944,628
• Time in Patent Office: 950 Days
• Field of Search: 395/652, 395/180-184, 395/182.05, 395/182.11, 395/182.12, 395/182.2, 713/1, 713/2, 713/100, 714/1, 714/2, 714/7, 714/13, 714/14, 714/22
• US Class Current: 713/2
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 11/0754 by exceeding limits
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/1008 in individual solid state devices G06F11/1004 takes precedence
• CPC Class Codes: G06F 11/1417 Boot up procedures
• CPC Class Codes: G06F 11/1612 where the redundant component is persistent storage
• CPC Class Codes: G06F 11/167 Error detection by comparing the memory output
• CPC Class Codes: G06F 11/3024 where the computing system component is a central processing unit [CPU]
• CPC Class Codes: G06F 11/3037 where the computing system component is a memory, e.g. virtual memory, cache accessing, addressing or allocating within memory systems or architectures G06F12/00; checking stores for correct operation G11C29/00
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 11/3093 Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
• CPC Class Codes: G06F 9/4406 Loading of operating system

Abstract

A system and method for intelligent and reliable booting of a PBX-supporting computer includes a system bus coupled to at least one central processor. Multiple booting devices are connected to the system bus including a hard disk drive, a removable media device, and at least one of RAM, NVRAM, and FLASHROM. Multiple monitoring devices are connected to the system bus to provide reliability data regarding each of the booting devices. A hierarchy of the booting devices is established, the order of which, in the absence of any system errors, is RAM, one of NVRAM and FLASHROM, the hard disk drive, and the removable media device. A power fail sensor detects power failures which have affected the system, and provides data regarding the reliability of RAM and the hard disk drive. A watchdog timer sensor detects errors in the operation of a central processor, and a memory status sensor detects memory checksum errors. Both the watchdog timer sensor and the memory status sensor provide reliability data regarding RAM, NVRAM and FLASHROM. A removable media error sensor provides reliability data regarding the removable media device. Based upon the data provided by the monitoring devices, the system selects the most reliable booting device from which to load an operating system program in to the main memory.

Claims

1. A system for intelligent and reliable booting comprising:

a system bus;

at least three alternative booting devices connected to said system bus, each of said booting devices being configured and connected to receive and store booting files, said alternative booting devices having an initialization hierarchy such that high speed booting devices have a higher priority than low speed booting devices, said high speed booting devices including a hard disk drive and said low speed booting devices including a removable media device;

a plurality of monitoring devices connected to said system bus for determining reliability of said booting files stored in each of said booting devices, said reliability determination being based upon detection of specific system operational errors;

means, communicatively connected and responsive to said monitoring devices, for preferentially selecting high priority booting devices based at least partially upon said initialization hierarchy and upon said detection of said specific system operation errors; and

means, responsive to said selecting means, for accessing said booting files in said booting devices.

2. The system of claim 1 wherein said plurality of booting devices includes said hard disk drive, said removable media device and at least one of random access memory (RAM), non-volatile random access memory (NVRAM), and flash erasable read-only-memory (FLASHROM).

3. The system of claim 1 wherein said system bus, said booting devices, said monitoring devices, said selecting means, and said accessing means are each located in one of a private branch exchange (PBX), a telecommunications system, a general-purpose computing system, a messaging system, and a server.

4. The system of claim 2 wherein said plurality of monitoring devices includes a power fail sensor coupled to said system bus to detect power failures, said power fail sensor having an output of data to said selecting means relating to reliability of said booting files in said RAM and said hard disk drive, a watchdog timer sensor coupled to said system bus to detect malfunctions in said at least one central processor and a memory status sensor coupled to said system bus to detect memory checksum errors, said watchdog timer sensor and said memory status sensor each having an output of data to said selecting means relating to reliability of said at least one of said RAM, said NVRAM, and said FLASHROM, said monitoring devices further including a removable media error sensor to detect errors in an operation of said removable media device, said removable media error sensor having an output of data to said selecting means for determining reliability of said removable media device.

5. The system of claim 4 further comprising a service modem coupled to said system bus to enable access to booting files stored at a remote site, said selecting means being enabled to compare checksums of said booting files accessible to said service modem and checksums of said booting files stored on said hard disk drive and said removable media device to checksums of booting files stored in said at least one of RAM, NVRAM, and FLASHROM.

6. A method for intelligent and reliable booting of a system comprising the steps of:

establishing a priority hierarchy of at least three alternative booting devices in each of which are stored booting files, said priority hierarchy being based upon relative speed of said alternative booting devices such that high speed booting devices are assigned a higher priority than low speed booting devices, said priority hierarchy of said booting devices having a descending order of (a) RAM, (b) one of NVRAM and FLASHROM, (c) a hard disk drive, and (d) a removable media device;

monitoring said system by a plurality of monitoring devices to detect specific operational errors;

determining a reliability of each of said alternative booting devices based upon operational error data of said system from said plurality of monitoring devices, said reliability being related to integrity of booting files stored in said alternative booting devices;

selecting from said alternative booting devices a booting device highest in said hierarchy that is determined by at least one of said monitoring devices to be reliable; and

booting said system with said selected booting device.

7. The method of claim 6 wherein said determining step utilizes said plurality of monitoring devices comprising a power fail sensor to detect power failures during operation of said system, said detection of said power failure in said system since a last successful booting cycle indicating unreliability of said RAM and said hard disk drive as booting devices, a watchdog timer sensor that detects central processor malfunctions in an operation of said central processor since said last successful booting cycle, and a memory status sensor that detects memory checksum errors which have occurred since said last successful booting cycle, said central processor malfunctions and said checksum errors indicating unreliability of said RAM, said one of NVRAM and FLASHROM, said plurality of monitoring devices further comprising a removable media error sensor that detects errors in an operation of said removable media device since said last successful booting cycle, said removable media device operational errors indicating unreliability of said removable media device.

8. The method of claim 6 wherein said determining step comprises the further steps of:

ascertaining whether a power failure has occurred in an operation of said system since a last successful booting cycle; and

if said power failure has occurred, ascertaining whether one of a central processor error and a memory checksum error has occurred in said operation of said system since said last successful booting cycle.

9. The method of claim 6 comprising the further steps of:

creating a booting log describing at what time and with what specific steps said booting was completed; and

if a reboot occurs within a predetermined time period, consulting said booting log to avoid repetition of said specific steps which failed at said time said booting was completed.

10. The method of claim 8 wherein said booting step includes:

if no power failure has occurred, booting from said RAM;

if said power failure has occurred and neither said central processor error nor said memory checksum error has occurred, booting from said one of NVRAM and FLASHROM; and

if said power failure has occurred and said one of said central processor error and said memory checksum error has occurred, booting from said hard disk drive.

11. The method of claim 10 comprising the further steps of:

determining whether an error has occurred in an operation of said removable media device since said last successful booting cycle;

if no removable media device error has occurred, initiating a check utilizing said removable media device to verify checksums of said booting files in said hard disk drive used in booting said system; and

if, in verifying said checksums of said booting files in said hard disk drive, differences between said hard disk drive checksums and said removable media device checksums are found, booting from said removable media device.

12. The method of claim 10 further comprising the steps of:

after booting from one of said RAM, said one of said NVRAM and said FLASHROM, initiating a check by comparing checksums of said booting files stored on said hard disk drive to corresponding checksums of said booting files in said one of said RAM and said one of NVRAM and FLASHROM used in booting said system; and

if differences exist between said checksums of said booting files stored in said one of said RAM and said one of NVRAM and FLASHROM and said checksums of said booting files of said hard disk drive, and no error in said operation of said removable media device has occurred since said last successful booting cycle, initiating a check with said removable media device by comparing checksums of said booting files stored on said removable media device to said corresponding checksums of said booting files in said one of said RAM and said one of NVRAM and FLASHROM used in booting said system and to said corresponding checksums of said booting files stored in said hard disk drive.

13. The method of claim 11 comprising the further steps of:

if said error has occurred in said operation of said removable media device since said last successful booting cycle, initiating a check utilizing a service modem to verify checksums of said booting files on said hard disk drive used booting said system; and

if, in verifying said checksums of said booting files in said hard disk drive, differences between said hard disk drive checksums and said service modem checksums are found, booting from said service modem.

14. The method of claim 12 comprising the further steps of:

selecting from a set of booting devices consisting of one of said RAM and said one of NVRAM and FLASHROM, said hard disk drive, and said removable media device, a booting device which is highest in said hierarchy and which has booting files with checksums that match checksums of booting files of one other booting device in said set; and

if said hard disk drive is selected, rebooting said system from said hard disk drive.

15. A system for intelligent and reliable system booting comprising:

a system bus connected to at least one central processor;

at least four of booting devices coupled to said system bus comprising a hard disk drive, a removable media device, RAM, and at least one of NVRAM and FLASHROM;

a power fail sensor to detect power failures in said system, said detection of power failures during an operation of said system since a last successful booting indicating unreliability of said RAM and said hard disk drive as booting devices, said power fail sensor thereby being a first indicator of reliability of boot files available to said system;

a watchdog timer sensor to detect malfunctions in said at least one central processor, said detection of central processor malfunctions during an operation of said system since said last successful booting cycle indicating unreliability of said RAM and said one of NVRAM and FLASHROM as booting devices, said watchdog timer sensor thereby being a second indicator of reliability of boot files available to said system;

a memory status sensor to detect memory checksum errors, said detection of memory checksum errors during operation of said system since said last successful booting cycle indicating unreliability of said RAM and said one of NVRAM and FLASHROM, said memory status sensor thereby being a third indicator of reliability of boot files available to said system;

a removable media error sensor to detect errors in an operation of said removable media device, said errors in an operation of said removable media device during an operation of said system since said last successful booting cycle indicating unreliability of said removable media device as a booting source, said removable media error sensor thereby being a fourth indicator of reliability of boot files available to said system;

means connected to said system bus and responsive to all of said power fail sensor, said watchdog timer sensor, said memory status sensor, and said removable media error sensor for selecting which one of said at least four booting devices to utilize for each system booting process based at least partially on detection of specific system operational error, said means for selecting being configured to access said first, second, third and fourth indicators of reliability in selecting among said at least four booting devices; and

means, responsive to selection from among said at least four booting devices by said selecting means, for accessing said selected one of said booting devices to load an operating system program into a main memory.

16. The system of claim 15 wherein said selecting means is enabled to compare checksums of booting files stored on said hard disk, booting files stored on said removable media, and booting files accessible to a service modem to checksums of corresponding booting files stored in said RAM, said one of NVRAM and FLASHROM, one of said RAM and said one of NVRAM and FLASHROM having been utilized to boot said system.

17. The system of claim 15 wherein said system bus, said plurality of booting devices, said power fail sensor, said watchdog timer sensor, said removable media sensor, said memory status sensor, said selecting means, and said accessing means are located in one of a PBX, a general-purpose computing system, a server, and a messaging system.

18. The system of claim 16 wherein said selecting means is enabled to compare checksums of files stored on said removable media device and files accessible to said service modem with checksums of corresponding files stored on said hard disk, said hard disk having been utilized to boot said system.