Error signal handling unit, device and method for outputting an error condition signal

• US 9,218,236 B2
• Filed: 10/29/2012
• Issued: 12/22/2015
• Est. Priority Date: 10/29/2012
• Status: Active Grant

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: Vilela, Antonio, Roger, Andre
• Primary Examiner(s): TRUONG, LOAN
• Application Number:
  US13/662,846
• Publication Number:
  US 20140122942A1
• Time in Patent Office: 1,149 Days
• Field of Search: 714/48, 701/31.4, 340/501
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40

Abstract

An error signal handling unit includes an error handler configured to receive an error signal indicating an error condition. The error handler is further configured to receive a recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition is possible. Furthermore, the error handler is further configured to output an error condition signal based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal, the error handler does not receive the recovery signal, and otherwise omit outputting the error condition signal.

Claims

1. An error signal handling unit, comprising:

an error handler comprising at least partially hardware configured to receive an error signal indicating an error condition;

wherein the error handler is further configured to receive a recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition is possible; and

wherein the error handler is further configured to output an error condition signal based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal, the error handler does not receive the recovery signal, and otherwise omit outputting the error condition signal.

2. The error signal handling unit according to claim 1, wherein the error handler is further configured to forward the error signal as the error condition signal if within the given delay time the error handler does not receive the recovery signal.

3. The error signal handling unit according to claim 1, wherein the error handler is further configured to decode the error signal and generate the error condition signal based on the decoded error signal.

4. The error signal handling unit according to claim 1, wherein the error handler is further configured to decode the recovery signal according to a given communication protocol decoding rule.

5. The error signal handling unit according to claim 4, wherein the error handler is further configured to decode the error signal according to a further communication protocol decoding rule which is different than the communication protocol decoding rule.

6. The error signal handling unit according to claim 1, wherein the error handler comprises:

a first input terminal configured to connect to an external device providing the error signal and the recovery signal and receive the error signal; and

a second input terminal configured to connect to the external device and receive the recovery signal.

7. The error signal handling unit according to claim 1, wherein the error handler is further configured to generate a fail safe mode request signal based on the error signal indicating a request to an external device or a further external device to enter a fail safe mode and output the fail safe mode request signal as the error condition signal.

8. The error signal handling unit according to claim 1, wherein the error handler is further configured to vary the given delay time based on a delay time adjust signal.

9. The error signal handling unit according to claim 1, wherein the given delay time comprises a fixed part which is not adjustable and an adjustable part which is adjustable by a received delay time adjust signal.

10. The error signal handling unit according to claim 1,

wherein the error handler is further configured to receive a further error signal indicating a further error condition and receive a further recovery signal indicating a mitigation of the further error condition or indicating that a mitigation of the further error condition is possible;

and

wherein the error handler is further configured to output a further error condition signal based on the further error signal in response to a reception of the further error signal if within a further given delay time from the reception of the further error signal, the error handler does not receive the further recovery signal.

11. The error signal handling unit according to claim 10, wherein the further given delay time is different from the given delay time.

12. The error signal handling unit according to claim 10, wherein the error handler is configured to generate the error condition signal and the further error condition signal such that the error condition signal is equal to the further error condition signal.

13. The error signal handling unit according to claim 1, wherein the error handler comprises:

an error signal decoding stage configured to decode the error signal and generate a decoded error signal in response thereto;

a recovery signal protocol detection stage configured to decode the recovery signal according to a given communication protocol decoding rule and generate a decoded recovery signal; and

an error condition signal generation stage configured to generate the error condition signal based on the decoded error signal and output the error condition signal if within the given delay time, the error condition signal generation stage does not receive the decoded recovery signal, and otherwise omit outputting the error condition signal.

14. The error signal handling system according to claim 1, wherein the error handler comprises circuitry.

15. The error signal handling system according to claim 1,

wherein the error handler is configured to receive the error signal from an external device, wherein the error signal indicates an error condition in the external device;

and

wherein the error handler is further configured to receive the recovery signal from the external device, wherein the recovery signal indicates a mitigation of the error condition in the external device or indicates that a mitigation of the error condition is possible in the external device.

16. The error signal handling unit according to claim 1,

wherein the error handler is a process running on a processor;

and

wherein the error signal and the recovery signal are provided by a further process running on the same processor or a different processor as the error handler process.

17. The error signal handling unit according to claim 16,

wherein the error signal indicates an error condition in the further process;

and

wherein the recovery signal indicates a mitigation of the error condition in the further process or indicates that a mitigation of the error condition is possible in the further process.

18. The error signal handling unit according to claim 16, wherein the process and the further process run on the same processor core.

19. A device configured to output, in response to an error condition in the device, an error signal indicating the error condition, and output, in response to a mitigation of the error condition or if a mitigation of the error condition is possible, a recovery signal indicating the mitigation or the possibility of mitigation of the error condition.

20. The device according to claim 19, further configured to output the error signal according to a first communication protocol and the recovery signal according to a second communication protocol, wherein the first communication protocol and the second communication protocol are different.

21. The device according to claim 19,

wherein the device comprises a plurality of process handlers and a safety monitor;

wherein the safety monitor is configured to propagate the error condition to the plurality of process handlers; and

wherein each process handler is configured to perform an error routine in response to the received error condition; and

wherein the safety monitor is configured to output the recovery signal based on results of the error routines performed by the process handlers.

22. The device according to claim 21, wherein the safety monitor is configured to output the recovery signal if at least a predetermined number of the process handlers results of the error routines performed by this given number of process handlers correspond to expected results and otherwise omit outputting the recovery signal.

23. The device according to claim 21, wherein the safety monitor is configured to output the recovery signal if at least a result of one of the error routines performed by the process handlers corresponds to an expected result and otherwise omit outputting the recovery signal.

24. The device according to claim 21, wherein the process handlers are configured such that error routines performed by different process handlers of the plurality of process handlers are different from each other.

25. The device according to claim 21, wherein the process handlers are software processes running on different processor cores.

26. The device according to claim 21, further comprising:

a recovery handler configured to perform a recovery routine on the process handlers for which a result of the error routine performed by these process handlers does not correspond to an expected result.

27. An error signal handling system, comprising:

a device configured to output, in response to an error condition in the device, an error signal indicating the error condition, and output, in response to a mitigation of the error condition or if a mitigation of the error condition is possible, a recovery signal indicating the mitigation or the possibility of mitigation of the error condition; and

an error signal handling unit comprising an error handler configured to receive the error signal and the recovery signal from the device;

wherein the error handler is further configured to output an error condition signal based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal, the error handler does not receive the recovery signal and otherwise omit outputting the error condition signal.

28. The error signal handling system according to claim 27, wherein the device comprises a first substrate which is spaced apart from a second substrate of the error signal handling unit.

29. An error signal handling unit comprising:

a first input terminal;

a second input terminal;

an output terminal; and

an error signal delay stage coupled between the first input terminal, the second input terminal and the output terminal;

wherein the error signal delay stage is configured to provide, in response to a reception of an error signal from an external device at the first input terminal indicating an error condition in the external device, an error condition signal based on the error signal at the output terminal if within a given delay time, the error signal delay stage does not receive a recovery signal from the external device at the second input terminal indicating a mitigation of the error condition in the external device or indicating that a mitigation of the error condition in the external device is possible, and otherwise omit outputting the error condition signal.

30. A system, comprising:

means for outputting an error condition signal;

means for receiving an error signal indicating an error condition; and

means for receiving a recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition is possible,

wherein the means for outputting the error condition signal is further configured to output an error condition signal based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal, the means does not receive the recovery signal and otherwise omit outputting the error condition signal,

wherein at least one of the error condition signal outputting means, the error signal receiving means, and the recovery signal receiving means comprises at least partially hardware.

31. An error signal handling unit, comprising:

an error signal decoding stage configured to receive an error signal indicating an error condition, decode the error signal, and generate a decoded error signal in response thereto;

a recovery signal protocol detection stage configured to receive a recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition is possible, decode the recovery signal according to a given communication protocol decoding rule, and generate a decoded recovery signal; and

an error condition signal generation stage configured to generate a fail safe mode request signal based on the decoded error signal, wherein the fail safe mode request signal indicates a request to an external device to enter a fail safe mode, and output the fail safe mode request signal as an error condition signal if within a given delay time from a reception of the decoded error signal, the error condition signal generation stage does not receive the decoded recovery signal, and otherwise omit outputting the fail safe mode request signal,

wherein at least one of the error signal decoding stage, the recovery signal protocol detection stage, and the error condition signal generation stage comprises at least partially hardware.

32. A method for outputting an error condition signal, the method comprising:

receiving an error signal indicating an error condition at an error handler component; and

outputting an error condition signal at the error handler component based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal no recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition is possible is received, and otherwise omitting outputting the error condition signal.

33. A non-transitory storage medium having stored thereon a computer program having a program code for performing, when running on a computer, a method for outputting an error condition signal, the method comprising:

receiving an error signal indicating an error condition at an error handler component; and

outputting an error condition signal at the error handler component based on the error signal in response to a reception of the error signal if within a given delay time from the reception of the error signal no recovery signal indicating a mitigation of the error condition or indicating that a mitigation of the error condition possible is received and otherwise omitting outputting the error condition signal.