Method and apparatus for a computer system to detect program faults and permit recovery from such faults
First Claim
1. A circuit for monitoring the programmed flow of operation of a computerized system including a programmable controller for at desired times operating said system in one of a plurality of different programmed modes of operation, respectively, and within each mode of operation, in programmed sequences of operation, relative to a main program, comprising:
- assignment means for assigning a unique mode toggle address from a plurality of programmable addresses for each predetermined mode of operation of said system being monitored only at the beginning of the associated mode of operation, which toggle mode address remains assigned to said mode, and to its associated said plurality of programmed sequences, respectively, so long as said mode is active;
matching means controlled only by software for both matching said predetermined mode toggle address preloaded into said monitoring circuit for the computerized system a system reset signal is generated substantially immediately after the error is detected for resetting said controller, if the error was transitory or has been removed, to reinitiate the desired mode of operation.
2 Assignments
0 Petitions
Accused Products
Abstract
A circuit for monitoring the program flow of a computerized or microprocessed system, includes a comparator for matching a uniquely assigned address for entering a given mode of operation, with an address presented by the system controller for entering the operating mode. If the addresses do not match, in response to the detected illegal mode entry attempt, a reset signal is generated for resetting the controller to reinitiate the programmed flow of operation.
-
Citations
16 Claims
-
1. A circuit for monitoring the programmed flow of operation of a computerized system including a programmable controller for at desired times operating said system in one of a plurality of different programmed modes of operation, respectively, and within each mode of operation, in programmed sequences of operation, relative to a main program, comprising:
-
assignment means for assigning a unique mode toggle address from a plurality of programmable addresses for each predetermined mode of operation of said system being monitored only at the beginning of the associated mode of operation, which toggle mode address remains assigned to said mode, and to its associated said plurality of programmed sequences, respectively, so long as said mode is active; matching means controlled only by software for both matching said predetermined mode toggle address preloaded into said monitoring circuit for the computerized system a system reset signal is generated substantially immediately after the error is detected for resetting said controller, if the error was transitory or has been removed, to reinitiate the desired mode of operation. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A circuit for monitoring the programmed flow of operation of a computerized system including a programmable controller, said controller being programmable for selectively operating said system in one of a plurality of different modes of operation at a given time, and through a plurality of programmed sequences uniquely associated with said modes of operation, respectively, said monitoring circuit comprising:
-
comparator means controlled only by software for comparing a predetermined toggle address selected from a plurality of programmable addresses loaded into said circuit only at the beginning of and representing both a desired mode of operation, and the desired mode'"'"'s associated plurality of programmed sequences, respectively, for the period of time the system remains in the desired mode of operation, with an address generated by said controller in attempting to cause said system to enter said desired mode of operation, both for generating a STROBE signal if the addresses match indicating a legal entry into said desired mode of operation, and generating an error signal if the addresses do not match indicating an illegal mode entry, said comparator means also including means for comparing said predetermined address representing said desired mode with addresses generated by said controller at predetermined single or multiple points within selected ones of a plurality of said programmed sequences of said mode, for generating said STROBE signal for address match, and said error signal for address mismatches; and timer means responsive to the occurrence of an error signal in a period of time in which a STROBE signal does not occur, for substantially immediately generating a system reset signal, for resetting said controller to restart a main program of operation. - View Dependent Claims (7, 8, 9, 10)
-
-
11. A method for monitoring the programmed flow of operation of a computerized system including a programmable controller, said controller being programmed for selectively operating said system in a desired one of a plurality of different modes of operation at a given time, and through a plurality of programmed sequences uniquely associated with said modes of operation, respectively, said method comprising the steps of:
-
A) assigning from amongst a plurality of programmable addresses a unique address for each selected mode of operation, and for use within a plurality of said programmed sequences associated with the selected mode of operation, only at the beginning of each mode of operation, which address remains unchanged as long as said system remains in a given mode of operation, and which address must be entered by said controller for accessing the associated mode of operation; B) matching controller generated access addresses to begin and continue operating in a particular mode of operation with the assigned access address for the desired mode, to determine if the addresses match for a legal access, or do not match indicating an illegal access, and for determining if at single or multiple points within selected ones of said plurality of programmed sequences, respectively, within a given mode of operation the aforesaid addresses match; and C) generating a system reset signal to reset said controller substantially immediately upon the event of determining an illegal access request by said controller for a given mode of operation. - View Dependent Claims (12, 13, 14, 15)
-
-
16. A method for monitoring the programmed flow of operation of a computerized system including a programmable controller, said controller being programmed for selectively operating said system in a desired one of a plurality of different modes of operation at a given time, and through a plurality of programmed sequences uniquely associated with said modes of operation, respectively, said method comprising the steps of:
-
A) assigning from amongst a plurality of programmable addresses, a unique address for each mode of operation of said system at the beginning of each mode of operation, which address must be entered by said controller for accessing the associated mode of operation; B) matching a controller generated access address to begin and continue operating in a particular mode of operation with the predetermined access address for the desired mode, to determine if the addresses match for a legal access, or do not match indicating an illegal access; C) generating a system reset signal to reset said controller in the event of an illegal access request for a given mode of operation; D) counting subsequent to the indication of an illegal access, the number of system reset signals occurring within a predetermined period of time; E) turning on an alarm in the event more than a predetermined number of system reset signals are counted within the predetermined period of time; F) sensing the voltage level of an operating voltage for said system; G) generating said system reset signal whenever said operating voltage falls below a given voltage level; H) assigning a unique toggle address for at least one toggle point within a programmed sequence of selected ones of said plurality of different modes of operation; I) reading the toggle address at each toggle point during said system operating in a given mode of operation; J) comparing each said toggle address to legal toggle addresses for identifying sequences associated with a present mode of operation; K) generating said system reset signal if an illegal sequence has been entered relative to a present mode of operation; L) periodically generating a STROBE signal for indicating proper program flow in said controller; M) turning on a timer at the termination of each STROBE signal; N) resetting said timer upon the occurrence of each STROBE signal; and O) generating said system reset signal if a STROBE signal does not occur within a predetermined period of time as measured by said timer.
-
Specification