Method and device for monitoring a device equipped with a microprocessor

• US 9,343,894 B2
• Filed: 12/06/2011
• Issued: 05/17/2016
• Est. Priority Date: 12/14/2010
• Status: Active Grant

• Current Assignee: Schneider Electric Industries SAS (Schneider Electric SE)
• Original Assignee: Schneider Electric Industries SAS (Schneider Electric SE)
• Inventors: Gruffaz, Franck
• Primary Examiner(s): TSAI, CAROL S W
• Application Number:
  US13/312,091
• Publication Number:
  US 20120150492A1
• Time in Patent Office: 1,624 Days
• Field of Search: 702/186, 702/86, 706/47, 712/202, 712/225, 714/777, 714/727, 714/736
• US Class Current: 1/1
• CPC Class Codes: G06F 11/27 Built-in tests
• CPC Class Codes: H02H 1/0007 concerning the detecting means in general G01R or other subclasses of G01; reed switches H01H71/2445
• CPC Class Codes: H02H 3/044 Checking correct functioning of protective arrangements, e.g. by simulating a fault for differential current circuit breakers H02H3/335
• CPC Class Codes: H02H 3/05 with means for increasing reliability, e.g. redundancy arrangements for logic circuits H03K19/003
• CPC Class Codes: H02H 3/0935 the timing being determined by numerical means
• CPC Class Codes: H02H 7/263 involving transmissions of measured values comparison of currents or voltages using pilot wires H02H3/30

Abstract

A method of monitoring a device which is equipped with a microprocessor, which method includes computation in the microprocessor on input data; performing a logic operation by logic gates in an external monitoring device on the same input data; comparing the results of the computation and the logic operation, and deriving from the compared results a diagnostic of the microprocessor, and optionally then switching the microprocessor to a backup safety mode. A device for carrying out such monitoring is also described.

Claims

1. A method of monitoring an electrical system which is equipped with a microprocessor, said method comprising:

performing in the microprocessor at least one computation on input data received at an input terminal of the microprocessor;

performing in a monitoring device, which is distinct and physically separate from the microprocessor, at least one logic operation by logic gates on the identical input data;

the microprocessor and the monitoring device performing, in parallel, said computation and/or logic operations on the identical input data;

comparing the results of said at least one computation performed on said input data in the microprocessor, with the results of said at least one logic operation performed on the identical input data in the monitoring device, and deducing from the compared results diagnostic result information about the functioning of the microprocessor; and

transmitting a feedback signal to the electrical system from an output terminal of the monitoring device, wherein the feedback signal represents said diagnostic result information about the microprocessor.

2. The monitoring method according to claim 1, further comprising:

transforming in the microprocessor the input data into the form of variable values corresponding to a certain number of predefined values; and

transmitting the transformed values to the monitoring device by communication means.

3. The monitoring method according to claim 2, wherein transforming the input data comprises randomly generating variable values, and/or extraction of, and/or combination of variable values, from input data bits received by the microprocessor.

4. The monitoring method according to claim 2, wherein transforming the input data comprises transforming the value of several numbers at least one bit of which is variable, into a value equal to one of the variable values.

5. The monitoring method according to claim 4, wherein performing at least one computation in the microprocessor comprises using said numbers in one or more calculations selected from the group consisting of divisions, multiplications, square roots, and raising to the square.

6. The monitoring method according to claim 5, comprising transforming at least one bit representing the results of the at least one computation performed by the microprocessor, and transmitting said at least one bit to the monitoring device.

7. The monitoring method according to claim 1, wherein performing at least one computation in the microprocessor is performed by software of a diagnostic unit of the microprocessor.

8. The monitoring method according to claim 2, wherein performance of at least one logic operation in the monitoring device comprises operations on the variable values.

9. The monitoring method according to claim 8, comprising making a comparison of the variable values from at least one XOR gate in the monitoring device to obtain results on a single bit dependent on the equality or the difference of compared variable values.

10. The monitoring method according to claim 1, wherein comparing the results comprises generation of a Boolean first value which represents a normal state of the microprocessor, and a second value which represents a malfunctioning state of said microprocessor.

11. The monitoring method according to claim 1, comprising actuating the electrical system to place it in a backup safety state when its microprocessor is in a malfunctioning state.

15. The monitoring method according to claim 1, wherein the feedback signal represents a command to switch the electrical system to a backup safety position.

12. A monitoring device for an electrical system equipped with a microprocessor to be monitored, said monitoring device comprising:

at least one input terminal for receiving input data supplied to a microprocessor, which monitoring device is distinct and physically separate from, and in parallel with, microprocessor,

a hardwired logic unit for independently performing in the monitoring device logic operations by logic gates on the identical input data,

a comparator unit for producing comparative diagnostic information by comparing the results of an independent computation performed, in parallel, on said input data by the microprocessor with results obtained by the hardwired logic unit on the identical input data, and deducing from the comparison of said results diagnostic result information about the functioning of the microprocessor, and

an output terminal of the monitoring device for transmitting to the electrical system a feedback signal representing the diagnostic result information about the microprocessor.

13. The monitoring device according to claim 12, wherein its hardwired logic unit and its comparator unit comprise logic gates of OR, NOR, AND, NAND, XOR and/or XNOR type.

14. An electrical system comprising a microprocessor and a separate monitoring device according to claim 12, which monitoring device is detectable by the microprocessor through at least one communication means.

16. The monitoring device according to claim 12, wherein the comparitor unit is also for producing diagnostic result information in the form of a command to switch the electrical system to a backup safety position.