Multiple microprocessor single power supply system shutdown

• US 5,151,855 A
• Filed: 10/19/1989
• Issued: 09/29/1992
• Est. Priority Date: 10/19/1989
• Status: Expired due to Term

• Current Assignee: Saturn (CCL Industries Incorporated)
• Original Assignee: Saturn (CCL Industries Incorporated)
• Inventors: Gray, Charles A., Nitz, Larry T., Milunas, Rimas S.
• Primary Examiner(s): Fleming, Michael R.
• Assistant Examiner(s): AUVE, GLENN ALLEN
• Application Number:
  US07/423,918
• Time in Patent Office: 1,076 Days
• Field of Search: 364/200, 364/273, 364/273.4, 364/273.5, 364/900, 364/948.4, 364/948.5, 364/948.9, 365/226, 365/227, 365/228, 365/229, 371/66, 371/14, 307/9.1, 307/10.1, 307/10.7
• US Class Current: 713/330
• CPC Class Codes: G06F 1/30 Means for acting in the event of power-supply failure or interruption, e.g. power-supply fluctuations for resetting only G06F1/24
• CPC Class Codes: G06F 11/20 using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
• CPC Class Codes: G06F 11/2028 eliminating a faulty processor or activating a spare
• CPC Class Codes: G06F 11/2038 with a single idle spare processing component
• CPC Class Codes: G06F 11/2048 where the redundant components share neither address space nor persistent storage

Abstract

A power shutdown sequence provides for an orderly power shutdown for master and slave processors sharing a single power supply while at the same time allowing the master and slave processors to retain all the information learned regardless of failures. If the master senses a shutdown condition, it sends the slaves a power down signal confirming its intention to power down the system and commanding the slaves to initiate shutdown procedures, including the storing of variables to memory. In addition, the master also initiates shutdown procedures, and after a minimum time determined sufficient to allow the slave to complete their shutdown procedures, the master powers down the system. The slaves may also initiate their own powerdown procedures if a failure in the communications link with the master is sensed.

Claims

1. A power shutdown method for a system having a master microprocessor, a slave microprocessor having an analog-to-digital converter, and a single supply voltage source for the master and slave microprocessors, the master and the slave microprocessors communicating via a communication link therebetween, the method comprising the steps of:

sensing a power shutdown condition by the master microprocessor;

sending a shutdown command from the master microprocessor through the communication link to the slave microprocessor to initiate slave shutdown procedures including storing variables to memory when a shutdown condition is sensed by the master microprocessor;

powering down the system including the voltage source by the master microprocessor after a predetermined minimum time period after sending a shutdown command to the slave microprocessor, the minimum time period having a predetermined value that allows the slave microprocessor to complete the slave shutdown procedures;

sensing a failed condition of the communication link by the slave microprocessor;

sensing the power shutdown condition by the slave microprocessor analog-to-digital converter;

sensing a failed condition of the slave microprocessor analog-to-digital converter by the slave microprocessor;

executing shutdown procedures by the slave microprocessor (A) in response to a shutdown command received from the master microprocessor of (B) when the failed condition of the communication link is sensed by the slave microprocessor and the power shutdown condition is sensed by the slave microprocessor; and

bypassing the shutdown procedures by the slave microprocessor when (A) the failed condition of the communication link is sensed by the slave microprocessor and (B) the failed condition of the analog-to-digital converter is sensed by the slave microprocessor.

2. A power shutdown method for a system having a master microprocessor, a slave microprocessor and a single supply voltage source for the master and slave microprocessors, the master and the slave microprocessors communicating via a communication link therebetween, the method comprising the steps of:

sensing a power shutdown condition by the master microprocessor;

sending a shutdown command from the master microprocessor through the communication link to the slave microprocessor to initiate slave shutdown procedures including storing variables to memory in response to a sensed power shutdown condition;

executing predetermined shutdown procedures by the slave microprocessor in response to the shutdown command received from the master microprocessor;

powering down the system including the voltage source by the master microprocessor after a predetermined minimum time period following the sending of the shutdown command that allows the slave microprocessor to execute its predetermined shutdown procedures;

sensing a failed condition of the communication link by the slave microprocessor;

sensing the power shutdown condition by the slave microprocessor; and

executing shutdown procedures by the slave microprocessor when the failed condition is sensed and the power shutdown condition is sensed by the slave microprocessor.