Process for reconfiguring an information processing system upon detection of a component failure

• US 6,789,214 B1
• Filed: 05/31/2000
• Issued: 09/07/2004
• Est. Priority Date: 06/10/1999
• Status: Active Grant

• Current Assignee: Bull Sas (Atos SE)
• Original Assignee: Bull Sas (Atos SE)
• Inventors: Menyhart, Zoltan, Sorace, Jean-Dominique, De Bonis-Hamelin, Marie-Antoinette
• Primary Examiner(s): LE, DIEU MINH T
• Application Number:
  US09/583,984
• Time in Patent Office: 1,560 Days
• Field of Search: 714/15, 714/2, 714/3, 714/7, 714/9, 714/16, 714/20
• US Class Current: 714/15
• CPC Class Codes: G06F 11/143 with loss of software functionality
• CPC Class Codes: G06F 11/1438 Restarting or rejuvenating
• CPC Class Codes: G06F 11/1482 by means of middleware or OS functionality
• CPC Class Codes: G06F 11/2028 eliminating a faulty processor or activating a spare
• CPC Class Codes: G06F 11/2035 without idle spare hardware
• CPC Class Codes: G06F 11/2043 where the redundant components share a common memory address space
• CPC Class Codes: G06F 2201/81 Threshold

Abstract

The invention relates to a process for dynamically reconfiguring an information processing system (1), particularly a so-called “SMP” symmetric multiprocessor system. The process comprises a preliminary step for detecting a failure risk of one of the components of the system (CPU3). Following this detection, the system (1) is placed in a coherent, so-called “frozen” state in a first step with the aid of programs (J1-J4) executing specific tasks. A second step consists of reconfiguring the system by reallocating/de-allocating all or some of the components (CPU1-CPU4). In a third step, the component (CPU3) that presents a failure risk is isolated. The pending interruptions (4) are processed and the current tasks (6) are executed prior to the “freeze.” Likewise, the queues of tasks to be executed are purged prior to the “freeze.” Then, the subsequent tasks and interrupts are inhibited until a final step that consists of releasing the system (1).

Claims

1. A process for reconfiguring an information processing system comprising a plurality of components forming hardware and software resources, and running under the control of a given operating system, in which at least one user application is being run comprising:

detecting a pre-established failure risk in at least one of said components in a preliminary step;

after said detection of a failure risk, a first step of activating at least one specific program for executing a specific job, under the control of said operating system, in a non-preemptive mode, in order to place said information processing system in a predetermined coherent frozen state, in which each user application currently running is halted in an orderly fashion and no other application is allowed to be run;

executing in a second step said specific job for reconfiguring said information processing system by performing operations for reallocating and/or de-allocating all or some of said components of the system, in order to prepare for isolation of each of said components for which said pre-established failure risk has been detected;

isolating each of said components for which said failure risk has been detected in a third step, so that said isolated component is no longer recognized by said information processing system and no longer constitutes one of said resources; and

releasing said information processing system in a final step, to allow operation of said information processing system and the running of at least one of said user applications.

2. A process according to claim 1, wherein said component for which said failure risk has been detected is a hardware component.

3. A process according to claim 2, wherein said second step comprises activation of several specific jobs, each associated with a component of said system, and in that one of said specific jobs is designated a master job, in order to synchronize the other specific jobs, the latter designated as slave jobs.

4. A process according to claim 3, wherein said system is a multiprocessor system comprising n processors, and said hardware component for which said failure risk has been detected is one of said processors.

5. A process according to claim 4, wherein said multiprocessor system comprises a storage device with a data structure of a private type in a sharable mode, and said synchronization of the specific jobs is obtained by means of a communication protocol, through said shared data structure.

6. A process according to claim 2, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

7. A process according to claim 2, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

8. A process according to claim 1, wherein said component for which said failure risk has been detected is a software component.

9. A process according to claim 8, wherein said second step comprises activation of several specific jobs, each associated with a component of said system, and in that one of said specific jobs is designated a master job, in order to synchronize the other specific jobs, the latter being designated as slave jobs.

10. A process according to claim 9, wherein said system is a multiprocessor system comprising n processors, and said hardware component for which said failure risk has been detected is one of said processors.

11. A process according to claim 10, wherein said multiprocessor system comprises a storage device with a data structure of a private type in a sharable mode, and said synchronization of the specific jobs is obtained by means of a communication protocol, through said shared data structure.

12. A process according to claim 8, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

13. A process according to claim 8, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

14. A process according to claim 1, wherein said second step comprises activation of several specific jobs, each associated with a component of said system, and in that one of said specific jobs is designated a master job, in order to synchronize the other specific jobs, the latter designated as slave jobs.

15. A process according to claim 14, wherein said system is a multiprocessor system comprising n processors, and said hardware component for which said failure risk has been detected is one of said processors.

16. A process according to claim 15, wherein said multiprocessor system comprises a storage device with a data structure of a private type in a sharable mode, and said synchronization of the specific jobs is obtained by means of a communication protocol, through said shared data structure.

17. A process according to claim 16, wherein said information processing system comprises external interrupt sources and at least one controller of said interrupts, and further comprises executing current interruptions before placing said information processing system in said frozen state, and of acting on each of said interrupt controllers in order to prevent subsequent interrupts from being transmitted to said processors and being handled prior to said final step for releasing the information processing system.

18. A process according to claim 16, wherein said information processing system comprises at least one queue storing tasks to be executed in any of said processors, and further comprises executing the tasks stored in each queue before placing said information processing system in said frozen state, and of inhibiting the storing of subsequent tasks prior to said final step for releasing the information processing system.

19. A process according to claim 16, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

20. A process according to claim 16, wherein said preliminary step monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

21. A process according to claim 14, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

22. A process according to claim 14, wherein said information processing system comprises external interrupt sources and at least one controller of said interrupts, and further comprises executing current interruptions before placing said information processing system in said frozen state, and of acting on each of said interrupt controllers in order to prevent subsequent interrupts from being transmitted to said processors and being handled prior to said final step for releasing the information processing system.

23. A process according to claim 22, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

24. A process according to claim 22, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

25. A process according to claim 14, wherein said information processing system comprises at least one queue storing tasks to be executed in any of said processors, and further comprises executing the tasks stored in each queue before placing said information processing system in said frozen state, and of inhibiting the storing of subsequent tasks prior to said final step for releasing the information processing system.

26. A process according to claim 25, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

27. A process according to claim 25, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

28. A process according to claim 14, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

29. A process according to claim 15, wherein said information processing system comprises external interrupt sources and at least one controller of said interrupts, and further comprises executing current interruptions before placing said information processing system in said frozen state, and of acting on each of said interrupt controllers in order to prevent subsequent interrupts from being transmitted to said processors and being handled prior to said final step for releasing the information processing system.

30. A process according to claim 15, wherein said information processing system comprises at least one queue storing tasks to be executed in any of said processors, and further comprises executing the tasks stored in each queue before placing said information processing system in said frozen state, and of inhibiting the storing of subsequent tasks prior to said final step for releasing the information processing system.

31. A process according to claim 15, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

32. A process according to claim 15, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

33. A process according to claim 1, further comprising the step of generating a signal representing a predetermined maximum time interval, the measurement of the time starting from said first step and the continuous comparison of said elapsed time to said predetermined maximum time interval, in order to unconditionally release said information processing system if said elapsed time becomes greater than said predetermined maximum time interval.

34. A process according to claim 33, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.

35. A process according to claim 1, wherein said preliminary step comprises monitoring the evolution of predetermined parameters associated with each of said components of said information processing system and of detecting the passing of predetermined threshold values, said passing indicating said pre-established risk and triggering said first step.