Method for computer-aided detection of errors during the execution of one or more software-based programs in a system of components

• US 8,943,368 B2
• Filed: 12/22/2011
• Issued: 01/27/2015
• Est. Priority Date: 06/27/2009
• Status: Active Grant

• Current Assignee: Bayerische Motoren Werke AG
• Original Assignee: Bayerische Motoren Werke AG
• Inventors: Kaiser, Dietmar, Haneberg, Michael, Bechler, Marc
• Primary Examiner(s): Baderman, Scott
• Assistant Examiner(s): KUDIRKA, JOSEPH R
• Application Number:
  US13/334,909
• Publication Number:
  US 20120096318A1
• Time in Patent Office: 1,132 Days
• Field of Search: 714/26, 714/38.1, 714/48, 714/49, 717/124, 717/126, 717/128, 717/132, 717/133, 701/29.1
• US Class Current: 714/38.1
• CPC Class Codes: G06F 11/0718 in an object-oriented system
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/0787 Storage of error reports, e.g. persistent data storage, storage using memory protection

Abstract

A method detects errors during execution of software based programs in a system of motor vehicle components. During execution a component executes its assigned program, and the components call each other interactively. When a component is called, a program identity and an error parameter are transmitted from the other component to the component. If a component identifies an error during execution, it stores an active error entry that contains the program identity, the component identification and an error status. If a component, which has called another component, receives the component identification, it stores a passive error entry that contains the program identity, its component identification and the identification of the other component. A component, which stores one or more active or passive error entries, returns the program identity and the component identification of the component, at least once during program execution, to the component that has called it.

Claims

1. A method for computer aided detection of errors during execution of one or more software based programs in a system of components, wherein each component of the system is a control device configured with an error memory, wherein the control device executes an assigned portion of the one or more software based programs, and wherein each component of the system is assigned an identification and a program identity for a respective running program of one or more software based programs, and further wherein during execution of a program, of the one or more software based programs, the components call each other interactively, at least to some extent, the method comprising the acts of:

when a called component, of the system of components, is called by a calling component, of the system of components, transmitting a program identity of the program and an error parameter from the calling component to the called component via a bus system of a motor vehicle, said error parameter indicating whether an error has been identified beforehand during execution of the program;

if either the called component or the calling component identifies an error during execution of its respective assigned program portion, storing in a first predefined memory location in the error memory of such component an active error entry that contains the program identity, the identification of such component,. and an error status that indicates whether the identified error is a first error during execution of the program; and

if the calling component receives the identification of the called component from the called component, storing in a second predefined memory location in the error memory of the calling component a passive error entry that contains the program identity, the identification of the calling component and the identification of the called component,

wherein the called component, having one or more active or passive error entries stored during execution of the program in the error memory of such called component, returns the program identity, and the identification of the called component, at least once during execution of the program, to the calling component.

2. The method according to claim 1, wherein the program identity comprises:

an identification of an initiating component, at which the program is started; and

a start time.

3. The method according to claim 1, further comprising the acts of:

when, following execution of a program portion by the called component, no errors occur in subsequently executed program portions, returning the program identity and a parameter to the calling component from the called component, said parameter indicating that the subsequently executed program portions are error free; and

upon receipt of the parameter in the calling component, not storing a passive error entry in the calling component.

4. The method according to claim 1, wherein a call entry is stored in the called component at least temporarily during execution of the program.

5. The method according to claim 3, wherein a call entry is stored in the called component at least temporarily during execution of the program.

6. The method according to claim 5, wherein during an entire program run or only after an occurrence of the first error during execution of the program, call entries are stored in the respective components.

7. The method according to claim 1, wherein the active error entry and passive error entry are each described by a field comprising a plurality of values, wherein the program identity is specified in the field, and

further wherein the field includes:

a first value that specifies the identification of the component in which such active error entry and passive error entry are respectively stored;

a second value that specifies the component in which the error has occurred; and

a third value that indicates the passive error entry as being passive or the active error entry as being active, wherein in the case of the active error entry the third value also indicates whether the active error entry corresponds to the first error during execution of the program.

8. The method according to claim 2, wherein the active error entry and passive error entry are each described by a field comprising a plurality of values, wherein the program identity is specified in the field, and

further wherein the field includes:

a first value that specifies the identification of the component in which such active error entry and passive error entry are respectively stored;

a second value that specifies the component in which the error has occurred; and

a third value that indicates the passive error entry as being passive or the active error entry as being active, wherein in the case of the active error entry the third value also indicates whether the active error entry corresponds to the first error during execution of the program.

9. The method according to claim 8, wherein the field has two values for specifying the program identity, wherein one of the two values represents the identification of the initiating component, and the other of the two values represents the start time.

10. The method according to claim 1, wherein for processing detected errors, the method further comprises the acts of:

reading out the stored active and passive error entries; and

for each program identity, generating a fault tree from the active and passive error entries; and

transmitting said fault tree containing at least call chains of the components and contain at least one component with an active error entry,

wherein in the fault tree the components are characterized as to whether no error, the first error, or a later error has occurred with respect to each such component during execution of the program.

11. The method according to claim 7, wherein for processing detected errors, the method further comprises the acts of:

reading out the stored active and passive error entries; and

for each program identity, generating a fault tree from the associated active and passive error entries; and

transmitting said fault tree containing at least call chains of the components and contain at least one component with an active error entry,

wherein in the fault tree the components are characterized as to whether no error, the first error, or a later error has occurred with respect to each such component during execution of the program.

12. The method according to claim 11, wherein the fault tree is generated such that proceeding from each component with an active error entry, the respective call chains of the components are produced step-by-step via the first value and the second value of the field.

13. The method according to claim 1, wherein the system of components comprises a system of motor vehicle components.

16. A device, comprising:

a diagnostic unit operatively configured for processing errors detected in accordance with the method of claim 12.

14. A system, comprising:

a plurality of motor vehicle control devices each having an interface to a bus system of a motor vehicle and being configured to communicate with each other via said bus system and being operatively configured to detect errors during execution of one or more software based programs in the system, wherein each control device of the system is configured with an error memory and is assigned an identification and a program identity for a respective running program, and further wherein during execution of a program a control device executes an assigned portion of the program, and the control devices call each other interactively, at least to some extent, the system being operatively configured such that;

when a called control device, of the plurality of motor vehicle control devices, is called by a calling control device, of the plurality of motor vehicle control devices, the program identity and an error parameter are transmitted from the calling control device to the called control device via the bus system of a motor vehicle, said error parameter indicating whether an error has been identified beforehand during execution of the program;

if either the called control device or the calling control device identifies an error during execution of its respectively assigned program portion, such control device stores, in a first predefined memory location in the error memory, an active error entry that contains the program identity, the identification of such control device, and an error status that indicates whether the identified error is a first error during execution of the program; and

if the calling control device receives the identification of the called control device from the called control device, the calling control device stores, in a second predefined memory location in the error memory, a passive error entry that contains the program identity, the identification of the calling control device, and the identification of the called control device,

wherein the called control device, having one or more active or passive error entries stored during execution of the program in the error memory of such called control device, returns the program identity and the identification of the called control device, at least once during execution of the program, to the calling control device.

15. The system according to claim 14, further comprising a motor vehicle in which the system is operatively configured.