Method for operating an error protected multiprocessor central control unit in a switching system

• US 4,914,572 A
• Filed: 03/11/1987
• Issued: 04/03/1990
• Est. Priority Date: 03/12/1986
• Status: Expired due to Fees

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Bitzinger, Rudolf, Engl, Walter, Humml, Siegfried, Schreier, Klaus
• Primary Examiner(s): Zache, Raulfe B.
• Assistant Examiner(s): Chan, Emily Y.
• Application Number:
  US07/024,759
• Time in Patent Office: 1,119 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 379/10, 379/269, 379/279
• US Class Current: 714/10
• CPC Class Codes: G06F 11/10 Adding special bits or symbols to the coded information, e.g. parity check, casting out 9's or 11's
• CPC Class Codes: G06F 11/1641 where the comparison is not performed by the redundant processing components
• CPC Class Codes: G06F 11/165 with continued operation after detection of the error
• CPC Class Codes: G06F 11/22 Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
• CPC Class Codes: H04M 3/241 for stored program controlled exchanges
• CPC Class Codes: H04Q 3/5455 Multi-processor, parallelism, distributed systems
• CPC Class Codes: H04Q 3/54591 Supervision, e.g. fault localisation, traffic measurements, avoiding errors, failure recovery, monitoring, statistical analysis

Abstract

A method provides error protection in a multiprocessor central control unit of a switching system wherein a number of central processors (CP, IOC) as well as a central memory (CMY) are connected in parallel to a central bus system (B:CMY0/B:CMY1). The processors include dual highly-synchronous parallel driven processor units (PU) --apart from a possible tolerable positive timing slip--and integral error detection circuits (V), as well as an integral local memory (LMY), in the ROM-area of which test program sections are stored for testing the respective processors (CP, IOC). Upon the detection of an error by at least one of the error detection circuits (V) of a processor (for example CPx), in the respective processor (CPx), at least if the error is not immediately correctable, the error detection circuit (V in CPx) starts isolating the respective processor (CPx) from the bus system (B:CMY). The respective processor (CPx) starts the read-out of the test program sections, stored in its own local memory (LMY), for localizing and identifying the error source and/or the defect causing such errors.

Claims

1. A method of operating an error protected high availability multiprocessor serving as a central controller of a switching system providing inter-connections to subscribers, particularly a telephone switching system, the central controller comprising:

(a) a plurality of central processors (CP, IOC), each central processor including dual, apart from a possible tolerable timing slip, parallel synchronously driven processor units (PU) for carrying out the inter-connections to subscribers connected to said switching system, including at least one integral error detection circuit (V) for immediately checking instructions processed by both of the dual processor units (PU) of the respective processor, and including a local memory (LMY, LMY;

10) having a ROM-section, storing test program sections for self testing of the respective processor (CP, IOC), and storing switching program sections required most frequently and most quickly by the respective processor (CP, IOC),

(b) a central main memory (CMY) including a ROM-area storing at least seldom and not immediately required (CP, IOC) switching program sections, and including a memory-area storing at least temporarily data accessible for a number of or for all processors (CP, IOC), whereby such data concern inter-connections between subscribers and concern peripheral system elements, and

(c) a central bus system (B;

CMY) to which are connected in parallel the processors (CP, IOC) and the main memory (CMY), after detecting an error by at least one of the error detection circuits (V) or a processor (CPx, for example), at least if this error is not immediately correctable, the method comprising the steps;

(a) isolating the respective processor (CPx) from the bus system (B;

CMY);

(b) starting to read-out test program sections stored in ROM-section of its own local memory (LMY, LMY;

IO) by the respective processor (CPx); and

(c) processing this test program for localization and identification of the error and a defect causing such errors by the respective processor (CPx).

2. A method in accordance with claim 1, further comprising the step:

(d) reconnecting the respective processor (CPx) to the bus system (B;

CMY) if no indication of an error and/or defect is detected during the processing of the test program.

3. A method in accordance with claim 1, further comprising the step:

(d) storing an error code obtained from its own local memory corresponding to this error/defect in an integral diagnostic register (REG) of the respective processor (CPx) if an indication of an error and/or defect is detected during processing of the test program.

4. A method in accordance with claim 3, said error code indicative of an address of that test program command or of those test program commands, at which the respective error defect was localized and identified.

5. A method in accordance with claim 3, further comprising the step:

(e) interrupting the processing of the test program by the respective processor (CPx) after the error code is stored.

6. A method in accordance with claim 3, further comprising the step:

(f) maintaining isolation of the respective processor (CPx) after the error code is stored.

7. A method in accordance with claim 6, further comprising accessing each processor (CPx) isolated from the bus system (B:

CMY) via a special code by a particular processor and interrogating the contents of the diagnostic register (REG) of this isolated processor (CPx) to diagnose the processor being isolated.

8. A method in accordance with claim 1, further comprising the step:

directly monitoring each of the dual processor units (PU) by each error detection circuit and directly indicating an error or a defect in a respective one of the dual processor units (PU isolating the respective processor unit (PU) alone, whereby the normal processor operations are maintained via the other processor unit (PU) along within this respective processor.

9. A method in accordance with claim 8, further comprising storing an indication of this isolated one of the processor units (PU) in a diagnostic register of the respective processor.

10. A method in accordance with claim 5, wherein a special processor accesses each processor (CPx) isolated from the bus system (B:

CMY0/B;

CMY1) via a special code, and interrogates the contents of the diagnostic register (REG) to diagnose the processor being isolated.