Power up/power down controller and power fail detector for processor

• US 5,283,792 A
• Filed: 10/19/1990
• Issued: 02/01/1994
• Est. Priority Date: 10/19/1990
• Status: Expired due to Term

• Current Assignee: Benchmarq Controls Incorporated
• Original Assignee: Benchmarq Microelectronics, Inc. (Texas Instruments, Inc.)
• Inventors: Davies, William F. Jr., Taylor, Ronald T.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): HUA, LY
• Application Number:
  US07/601,248
• Time in Patent Office: 1,201 Days
• Field of Search: 371/66, 371/57.1, 307/269 R, 364/273.4, 364/273.5, 364/268.5, 364/268.2, 364/285.1, 395/575
• US Class Current: 714/22
• CPC Class Codes: G06F 1/30 Means for acting in the event of power-supply failure or interruption, e.g. power-supply fluctuations for resetting only G06F1/24
• CPC Class Codes: G06F 11/0754 by exceeding limits
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/2015 Redundant power supplies power supply failure G06F1/30

Abstract

A power fail control system for a CPU (10) and external memory (16) utilizes a controller (18). The controller (18) is operable to detect an early power fail situation and output an interrupt to the CPU (10). The CPU (10) then goes into a power down sequence and stores critical instructions in an internal memory array (30) constituting a hidden memory during the power down sequence. An out of tolerance detector detects when the power supply voltage has fallen below a predetermined threshold and then generates reset signal. The reset signal is input to the CPU (10) to indicate that no further instructions are executable. In addition, a Chip Enable switch (46) is operated to inhibit memory control signals from being transferred from the CPU (10) to the memory (16). The internal hidden memory (30) is also inhibited from having data written thereto in the presence of the reset signal. A backup battery (22) is provided which is connected to one side of a switch. The other side of the switch is connected to the power supply voltage. When the power supply voltage falls below the battery voltage, the battery is connected to supply a current to the external memory (16).

Claims

1. A power fail controller for detecting early failure of a power supply for providing power to a system having a processor and a volatile memory, comprising:

an early power fail detection circuit for detecting a potential power supply failure in the power supply and generating a power fail signal for output to the processor;

an out of tolerance detection circuit for detecting when the power supply is out of tolerance in accordance with predetermined tolerance parameters and generating an out of tolerance signal for output to the processor;

a non-volatile memory accessible by the processor for storage of information therein, said information including executable instructions that are directly executable by the processor; and

an inhibit circuit for inhibiting the processor from accessing said non-volatile memory when said out of tolerance signal is generated.

2. The controller of claim 1 wherein said out of tolerance signal is input to the processor.

3. The controller of claim 1 wherein said out of tolerance detection circuit detects the voltage of the power supply and generates said out of tolerance signal when the voltage of the power supply falls below a first predetermined voltage, and said early power fail detection circuit detects the voltage of the power supply and generates said power fail signal when the voltage of the power supply falls below a second predetermined voltage, the voltage below which said out of tolerance detection circuit generates said out of tolerance signal being less than the voltage below which said early power fail detection circuit generates said power fail signal.

4. The controller of claim 3 and further comprising:

a write protect circuit for write protecting the volatile memory in response to generation of said out of tolerance signal;

a backup battery; and

a backup circuit for connecting the battery to supply power to at least the volatile memory when the power supply to at least the volatile memory is less than a predetermined backup voltage.

5. The controller of claim 4 wherein said predetermined backup voltage is less than the voltage at which said out of tolerance detection circuit generates said out of tolerance signal.

6. The controller of claim 4 wherein the voltage of the power supply at which said write protect circuit write protects the volatile memory is substantially equal to said first predetermined voltage below which said out of tolerance detection circuit generates said out of tolerance signal voltage.

7. The controller of claim 4 wherein said backup circuit comprises:

a comparator for determining when the voltage of the power supply to at least the volatile memory is less than said predetermined backup voltage;

a first terminal connected to said backup battery;

a second terminal connected to the power supply;

an output terminal connected to the power supply; and

a switch for connecting said first terminal to said output terminal when the voltage on said first terminal is above said backup voltage and for connecting said first terminal to said output terminal when the voltage on said first terminal is less than said backup voltage.

8. The controller of claim 4 wherein said early power fail detection circuit comprises:

a first reference voltage; and

a comparator for comparing said first reference voltage to a voltage representative of the power supply voltage, said comparator operable to generate said power fail signal for output to the processor when the voltage representative of the power supply voltage to the processor and the volatile memory is less than said first reference voltage.

9. The controller of claim 8 wherein said out of tolerance detection circuit comprises:

a reference voltage;

a comparator for comparing a voltage representative of the voltage power supply of the processor and volatile memory to said reference voltage and generating said out of tolerance signal when the voltage of the power supply is less than said reference voltage.

10. The controller of claim 4 wherein said write protect circuit comprises:

a chip enable switch for receiving memory control signals from the processor that are directed toward the volatile memory for controlling writing of data thereto; and

a switch control circuit for controlling said switch to route the memory control signals through to the volatile memory in the absence of said write protect signal, and for inhibiting the memory control signals from being transferred from the processor to the volatile memory when said write protection signal is present.

11. The controller of claim 1 wherein the processor operates within a predetermined address space and said non-volatile memory comprises:

a hidden memory for storing said executable instructions as critical information utilized by the processor during execution of a program; and

access circuitry for allowing the processor to access said hidden memory within the predetermined address space associated with the processor in response to access signals received from the processor.

12. The controller of claim 1 and further comprising a non-volatile status/control register for storing control information utilized by said power fail detection circuit and out of tolerance detection circuit during the operation thereof and operating in response thereto, and status information relative thereto, said status/control register accessible by the processor to receive control information and output status information.

13. A processor control system, comprising:

a central processing unit for executing instructions within a predetermined address space;

an external memory controlled by said central processing unit in response to memory control signals received from said central processing unit for access of data from said external memory by said central processing unit in a read mode and for transfer of data to said external memory from said central processing unit in a write mode;

said central processing unit and said external memory each having a power supply associated therewith; and

a power fail controller, including;

a power fail detector for determining when said power supply associated with at least said central processing unit falls below a first threshold voltage, said power fail detector operable to generate a power fail signal in response to said power supply voltage associated with said central processing unit falling below said first threshold voltage, said power fail detector outputting said power fail signal to said central processing unit,

said central processing unit operable to go into a power down sequence in response to receiving said power fail signal and continuing to execute instructions in said power down sequence,

a non-volatile memory accessible by said central processing unit for storage of information including executable instructions therein in association with a predetermined portion of the predetermined address space associated with said central processing unit when said power fail signal is generated, and

a mapping circuit for mapping said stored information in said non-volatile memory to said predetermined portion of said predetermined address space when said non-volatile memory is accessed.

14. The processor control system of claim 13, and further comprising:

an out of tolerance detector for detecting when said power supply associated with at least said external memory falls below a second threshold and generating an out of tolerance signal in response thereto, said second threshold being lower than said first threshold; and

a write protect circuit for inhibiting the writing of data to said external memory from said central processing unit in response to generation of said out of tolerance signal.

15. The processor control system of claim 14 wherein said external processing unit and said external memory have a common power supply.

16. The processor control system of claim 14 wherein said out of tolerance detector transmits said out of tolerance signal to said central processing unit.

17. The processor control system of claim 14 wherein said external memory is a volatile memory and further comprising:

a backup power supply;

a detector for detecting when the voltage of said power supply associated with said external memory falls below a third threshold voltage; and

a switch having a first input terminal connected to said power supply associated with said external memory, a second input terminal connected to said backup power supply and an output terminal connected to a power supply input to at least said external memory, said switch operable to connect said first input terminal to said output terminal when the voltage of said power supply associated with said external memory is above said third threshold voltage and operable to connect said second input terminal to said output terminal when the voltage of said power supply associated with said external memory is less than said third threshold voltage.

18. The processor control system of claim 17 wherein said third threshold voltage substantially equals said backup power supply voltage.

19. The processor control system of claim 17 wherein said third threshold is less than said second threshold.

20. The processor control system of claim 14 wherein said write protect circuitry comprises an enable switch for being interposed between the memory control signals transferred from said central processing unit to said external memory, said enable switch operable to prevent transfer of the memory control signals from said central processing unit to said external memory for writing of data thereto when said out of tolerance signal is generated by said out of tolerance detector, said enable switch operable to generate control signals for input to said external memory indicating that writing thereto is inhibited.

21. The processor control system of claim 20 wherein writing of data to said non-volatile memory is inhibited by said write protect circuit when said out of tolerance signal is generated by said out of tolerance detector.

22. The processor control system of claim 13 wherein said mapping circuit operates in response to predetermined signals received from said central processing unit to map said non-volatile memory to said predetermined portion of said address space.

23. A power fail controller for detecting early failure of a power supply for a central processing unit and an associated external memory, the central processing unit operable to execute instructions within a predetermined address space, comprising:

an early power fail detection circuit for detecting a potential power supply failure in the power supply and generating a power fail signal for output to the central processing unit;

the central processing unit operable to go into a power down sequence in response to receiving said power fail signal and continuing to execute instructions in said power down sequence;

a non-volatile hidden memory for storing critical instructions including executable instructions;

an access circuit for allowing the central processing unit to access said hidden memory when the central processing unit is in said power down sequence in response to generation of said power fail signal by said power fail detector; and

said hidden memory occupying a predetermined portion of the address space associated with the central processing unit, said access circuitry operable to map said hidden memory in said predetermined portion of the address space associated with the central processing unit during said power down sequence of the central processing unit.

24. The power fail controller of claim 23 and further comprising:

an out of tolerance detection circuit for detecting when the power supply is out of tolerance and generating an out of tolerance signal;

a write protect circuit for write protecting the external memory, the external memory being a volatile memory, said write protect circuit operating in response to the presence of said out of tolerance signal;

a backup battery; and

a backup circuit for connecting said backup battery to supply power to at least the external memory when the voltage of the power supply is less than a predetermined backup voltage.

25. The power fail controller of claim 24 wherein writing of data to said hidden memory is inhibited by said write protect circuit when said out of tolerance signal is generated by said out of tolerance detector.

26. The power fail controller of claim 24 wherein said access circuitry operates in response to predetermined signals received from the central processing unit to access said hidden memory.

27. A method for controlling operation of a central processing unit and an associated volatile external memory during power failure of an associated power supply, the central processing unit operable to execute instructions within a predetermined address space, comprising the steps of:

detecting a potential power supply failure in the power supply and generating a power fail signal for output to the central processing unit in response to detecting the potential power supply failure;

detecting when the power supply to at least the volatile external memory is out of tolerance relative to predetermined operating parameters of the volatile external memory and generating an out of tolerance signal in response to detecting when the power supply is out of tolerance;

operating the central processing unit in a power down sequence when the power fail signal is generated and the out of tolerance signal is not generated;

providing a non-volatile memory for storing critical information therein including executable instructions; and

mapping the non-volatile memory to a predetermined portion of the predetermined address space during the power down sequence such that the executable instructions associated with the non-volatile memory are accessible by the central processing unit.

28. The method of claim 27, and further comprising:

write protecting the volatile external memory in response to generation of the out of tolerance signal;

providing a backup battery; and

connecting the backup battery to supply power to at least the external volatile memory when the voltage of the power supply is less than a predetermined backup voltage.

29. The method of claim 28 and further comprising inputting the out of tolerance signal to the central processing unit.

30. The method of claim 28 wherein the voltage of the power supply at which the out of tolerance signal is generated is less than the voltage of the power supply at which the power fail signal is generated.

31. The method of claim 28 wherein the predetermined backup voltage of the power supply is less than the voltage at which the out of tolerance signal is generated.

32. The method of claim 28 wherein the step of write protecting the volatile external memory comprises:

providing a chip enable switch;

receiving memory control signals generated by the central processing unit on an input, which memory control signals are output by the central processing unit to control access to the external memory;

connecting the output of the chip enable switch to the control input of the volatile external memory; and

controlling the chip enable switch to route the memory control signals from the central processing unit to the external memory in the absence of the out of tolerance signal and for inhibiting the memory control signals from being transferred to the volatile external memory when the out of tolerance signals are generated.

33. A method for controlling operation of a central processing unit and an associated external memory that is controlled by the central processing unit in response to memory control signals received from the central processing unit, the central processing unit operable to execute instructions in a predetermined address space, the central processing unit and the associated external memory having a power supply associated therewith, comprising the steps of:

determining when the voltage of the power supply associated with at least the central processing unit falls below a first threshold voltage and generating a power fail signal in response thereto for output to the central processing unit;

the central processing unit operable to go into a power down sequence in response to receiving the power fail signal and continuing to execute instructions in the power down sequence;

detecting when the voltage of the power supply associated with at least the external memory falls below a second threshold voltage and generating an out of tolerance signal in response thereto, the second threshold voltage being lower than the first threshold voltage; and

inhibiting the writing of data to the external memory from the central processing unit in response to generation of the out of tolerance signal;

providing a nonvolatile hidden memory for storing critical instructions including executable instructions utilized by the central processing unit; and

mapping the nonvolatile hidden memory to a predetermined portion of the predetermined address space when the central processing unit is in the power down sequence in response to generation of the power fail signal such that the executable instructions stored in the nonvolatile memory are accessible by the central processing unit.

34. The method of claim 33 and further comprising transferring the out of tolerance signal to the central processing unit.

35. The method of claim 33 and further comprising:

providing a backup power supply;

detecting when the power supply to at least the external memory falls below a third threshold; and

connecting the backup power supply to the external memory when the power supply falls below the third threshold.

36. The method of claim 35 wherein the third threshold voltage substantially equals the backup power supply voltage.

37. The method of claim 35 wherein the third threshold voltage is less than the second threshold voltage.

38. The method of claim 33 wherein the step of inhibiting the writing of data to the memory comprises:

interposing an enable switch between the memory control signals transferred from the central processing unit to the external memory; and

controlling the enable switch to prevent the transfer of the memory control signals from the central processing unit to the external memory for writing of data thereto when the out of tolerance signal is generated.

39. The method of claim 33 and further comprising inhibiting writing of data to the hidden memory when the out of tolerance signal is generated.

40. The method of claim 39 wherein the step of mapping operates in response to predetermined signals received from the central processing unit.