METHOD FOR SECURE IN-SERVICE SOFTWARE UPGRADES

摘要

A method for upgrading software without vulnerability to faults includes having a first node with a first component having a first version of a software program in an active mode and a second node with a second component having a first version of the software program in a standby mode. To upgrade the components, a third component with a second version of the software program is installed in a standby mode on the second node, synchronizes with the first component, and switches modes with the first component. The second component is deleted. A fourth component with a second version of the software is installed on the first node in a standby mode, synchronizes states with the third component. The first component is then deleted.