| 摘要 |
In a method for equipping a microprocessor-controlled device with new software code via a communication network, the device has a non-volatile program memory, with two memory areas, a first memory area and a second memory area. The first memory area (boot sector) is provided for a basic program, which provides a first operating system and first functionalities of the device, and the second memory area (update sector) is provided for the software code to be transferred. The first memory area is protected by hardware means against overwriting. The following method steps are performed. First, there is a system boot with the basic program from the first memory area. In such case, a system variable UPDATE is read. In case this has the value "perform update", an invocation of a function "perform firmware update" occurs. Then this variable is set to the value "invalid firmware". Next, a connection is established to a superordinated unit and the new software code is transferred into the device. Following storage of the new software code in the second memory area, a test of the new software code for bit error is performed. In case bit errors have occurred during the transfer, a new system boot is performed. If no bit errors have occurred, the new software code is executed from the second memory area and the system variable UPDATE is written with the value "valid firmware". Through this method, a safe equipping of microprocessor-controlled devices with new software code via a communication network is possible.
|
