Multiple data processing system with a diagnostic function

• US 5,029,071 A
• Filed: 12/07/1987
• Issued: 07/02/1991
• Est. Priority Date: 06/17/1982
• Status: Expired due to Fees

• Current Assignee: Tokyo Shibaura Denki Kabushiki Kaisha
• Original Assignee: Tokyo Shibaura Denki Kabushiki Kaisha
• Inventors: Kinoshita, Tsuneo
• Primary Examiner(s): Eng, David Y.
• Assistant Examiner(s): Chan, Emily Y.
• Application Number:
  US07/129,909
• Time in Patent Office: 1,303 Days
• Field of Search: 364/900 MS File, 364/200 MS File, 371/68.3, 371/68.1, 371/36, 371/3, 371/4, 371/9, 371/11-13, 371/16-17, 371/19-20, 371/24, 371/9.1
• US Class Current: 714/11
• CPC Class Codes: G06F 11/1608 Error detection by comparing the output signals of redundant hardware G06F11/1629, G06F11/1666 take precedence; error detection or correction in information storage based on relative movement between record carrier and transducer G11B20/18; checking static stores for correct operation G11C29/00; for logic circuits H03K19/003, H03K19/007; for pulse counters or frequency dividers H03K21/40
• CPC Class Codes: G06F 11/1641 where the comparison is not performed by the redundant processing components
• CPC Class Codes: G06F 11/165 with continued operation after detection of the error
• CPC Class Codes: G06F 11/1654 where the output of only one of the redundant processing components can drive the attached hardware, e.g. memory or I/O
• CPC Class Codes: G06F 11/20 using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
• CPC Class Codes: G06F 11/202 where processing functionality is redundant redundant communication control functionality G06F11/2005, redundant storage control functionality G06F11/2089

Abstract

A multiple data processing system includes first and second microprocessors for executing the same data processing in parallel fashion. A selector selectively delivers one of the output data of the microprocessors to an external I/O device. A comparator detects an off normal data processing state by comparing the output data of the first microprocessor with the output data of the second microprocessor. An operation monitor evaluates the operation state of the microprocessors in response to a signal from the comparator and instructs the selector to deliver output data sent from a normal channel to the external I/O device.

Claims

1. A data processing system for controlling an input/output device, comprising:

first and second processing means for simultaneously generating control data in accordance with conditions concerning control of said input/output device;

first and second input/output buses respectively connected to said first and second processing means, for transferring data input to, and output from, said first and second processing means;

detecting means connected to said first and second input/output buses, for periodically comparing items of data transferred through said first and second input/output buses to detect a noncoincidence therebetween;

input/output means connected to said first and second input/output buses and said input/output device, for supplying actual data indicative of said conditions to both said first and second input/output buses, and supplying control data generated from a preselected one of said first and second processing means to the input/output device; and

operating means connected to said detecting means and said first and second input/output buses for performing, in response to the detecting of noncoincidence by said detecting means, a diagnostic processing on said first and second processing means during which the output data of each processing means is compared with reference data, which is data from the group consisting of data stored internally or data supplied from outside, and selecting the other of said first and second processing means to be a new selected processing means in place of said preselected processing means, to supply the control data from said new selected processing means to be supplied to the input/output device in place of the control data generated from the preselected processing means when it is detected from the comparison result that the preselected processing means is not functioning correctly and the other processing means is functioning correctly, said operating means comprising;

diagnosis means connected to said detecting means, and including means for instructing said first and second processing means to perform a test processing in response to said detection of noncoincidence, means for comparing each output data of said first and second processing means with reference data identical to the output data produced as a result of said test processing performed when each processing means is in a normal state, and means for generating an output signal corresponding to the comparison result, and

selecting means connected to said first and second input/output buses and said diagnosis means, for selecting one of said first and second processing means as said preselected processing means, the selection of said one processing means being switched to the other processing means when it is detected from the output signal of said diagnosis means that the preselected processing means is not functioning correctly and the other processing means is functioning correctly.

2. A data processing system according to claim 1, wherein said diagnosis means comprises means for initially instructing the selected processing means to perform said test processing.

3. A data processing system according to claim 2, wherein said first and second processing means each comprise a main memory for storing a program containing a routine for said test processing.

4. A data processing system according to claim 3, wherein said input/output device is a fuel injection system comprising a fuel injector for an engine and a sensor for sensing conditions concerning control of said fuel injector.

5. A data processing system for controlling an input/output device, comprising:

first and second processing means for simultaneously generating control data in accordance with conditions concerning control of said input/output device;

first and second input/output buses respectively connected to said first and second processing means, for transferring data input to, and output from, said first and second processing means;

detecting means connected to said first and second input/output buses, for periodically comparing items of data transferred through said first and second input/output buses to detect a noncoincidence therebetween;

input/output means connected to said first and second input/output buses and said input/output device, for supplying actual data indicative of said conditions to both said first and second input/output buses, and supplying control data generated from a preselected one of said first and second processing means to the input/output device; and

operating means connected to said detecting means and said first and second input/output buses for performing, in response to the detection of noncoincidence by said detecting means, a diagnostic processing on said first and second processing means during which the output data of each processing means is compared with reference data, which is data from the group consisting of data stored internally or data supplied from outside, and selecting the other of said first and second processing means to be a new selected processing means in place of said preselected processing means, to supply the control data from said new selected processing means to be supplied to the input/output device in place of the control data generated from the preselected processing means when it is detected from the comparison result that the preselected processing means is not functioning correctly and the other processing means is functioning correctly, said operating means comprising;

selecting means connected to said first and second input/output buses, for selecting one of said first and second processing means as said preselected processing means, the selection of said one processing means being switched to the new selected processing means in response to a switching signal, and

diagnosing means connected to said detecting means and said selecting means, including means for instructing said first and second processing means to perform a test processing in response to said detection of noncoincidence, means for comparing each output data of said first and second processing means with reference data identical to the output data produced as a result of said test processing performed when each processing means is in a normal state, and means for generating said switching signal when it is detected from the comparison result that the preselected processing means is not functioning correctly and the other processing means is functioning correctly.

6. A data processing system according to claim 5, wherein said first and second processing means each comprise a main memory for storing a program containing a routine for said test processing.

7. A data processing system according to claim 6, wherein said input/output device is a fuel injection system comprising a fuel injector for an engine and a sensor for sensing conditions concerning control of said fuel injector.