Electronic fault detection unit

• US 9,823,983 B2
• Filed: 09/25/2014
• Issued: 11/21/2017
• Est. Priority Date: 09/25/2014
• Status: Active Grant

• Current Assignee: NXP USA, Inc. (NXP Semiconductors NV)
• Original Assignee: NXP USA, Inc. (NXP Semiconductors NV)
• Inventors: Baca, David
• Primary Examiner(s): Kim, Matt
• Assistant Examiner(s): LIN, KATHERINE Y
• Application Number:
  US14/496,552
• Publication Number:
  US 20160092320A1
• Time in Patent Office: 1,153 Days
• CPC Class Codes: G06F 11/0721 within a central processing unit [CPU]
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/1497 Details of time redundant execution on a single processing unit
• CPC Class Codes: G06F 11/1641 where the comparison is not performed by the redundant processing components
• CPC Class Codes: G06F 11/1645 and the comparison itself uses redundant hardware

Abstract

An electronic fault detection unit is provided that has a first register, a second register, a comparator circuit, and a timer circuit. The first and second register can be written from a first software portion, and a second software portion, respectively. The comparator circuit is arranged to detect that both the first and second register have been written, verify a relationship between first data written to the first register and second data written to the second register, and signal a fault upon said verification failing. The timer circuit is arranged to signal a fault if said verification of the comparator circuit does not occur within a time limit.

Claims

1. An electronic fault detection unit comprising

a first register arranged to be written from a first software portion,

a second register arranged to be written from a second software portion,

a comparator circuit arranged to

detect that both the first and second register have been written,

verify a relationship between first data written to the first register and second data written to the second register, and

signal a fault upon said verification failing, and

a timer circuit arranged to

signal a fault if said verification of the comparator circuit does not occur within a time limit

wherein the timer circuit is arranged to start timing an interval upon writing of the first or second register, the time limit is reached upon the interval expiring, so that the timer signals the fault if the other one of the first register or the second register is not written within the interval.

2. An electronic fault detection unit as in claim 1, wherein the relationship between the first data and the second data is any one of the following group:

an equality relationship, wherein the comparator circuit is arranged to verify that the first data equals the second data,

an inequality relationship, wherein the comparator circuit is arranged to verify that the first data is less than the second data,

an inequality relationship, wherein the comparator circuit is arranged to verify that the first data is more than the second data,

a closeness relationship, wherein the comparator circuit is arranged to verify that the absolute value of the first data minus the second data is less than a threshold.

6. An electronic fault detection unit as in claim 1, wherein the comparator circuit is arranged to

upon successful verification of the relationship resetting the timer circuit and return to detecting that both the first and second register have been written.

7. An electronic fault detection unit as in claim 1, wherein the comparator circuit comprises

a first electronic flag coupled to the first register, the first electronic flag being arranged to be set upon writing of the first register, and

a second electronic flag coupled to the second register, the second electronic flag being arranged to be set upon writing of the second register,

the comparator circuit being arranged to detect that both the first and second flag are set, and to reset said first flag and second flag at least upon successful verification of the relationship.

8. An electronic fault detection unit as in claim 1, wherein the electronic fault detection unit comprises a status register,

the status register being arranged to indicate at least one of a result of a previous verification of the comparator circuit, or

that one of the first and second register have been written, but not the other.

9. A data processing device comprising

a first electronic fault detection unit as in claim 1,

at least one memory storing a first and second software portion,

at least one processor arranged to execute the first software portion and the second software portion, the data processing device being arranged so that the first and second register of the fault detection unit is writeable from the first and second software portion.

10. A data processing device as in claim 9, comprising a fault collection and control unit arranged to receive the signal from the first electronic fault detection unit.

11. A data processing device as in claim 9, wherein

the first software portion comprising

one or more instructions arranged to perform a first computation resulting in a first computation result, and

one or more instructions arranged to write the first computation result to the first register of the first fault detection unit of the data processing device,

the second software portion comprising

one or more instructions arranged to perform a second computation resulting in a second computation result, and

one or more instructions arranged to write the second computation result to the second register of the first fault detection unit.

12. A data processing device as in claim 9, wherein

the first software portion comprising

one or more instructions arranged to perform a first computation resulting in a first computation result, and

one or more instructions arranged to write the first computation result to the first register of the first fault detection unit of the data processing device, the first fault detection unit being configured for a first inequality relationship, wherein a comparator circuit of the first fault detection unit is arranged to verify that a first data written to the first register of the first fault detection unit is less than a second data written to the second register of the first fault detection unit,

one or more instructions arranged to add a threshold value to the first computation result, and to write the result to the first register of a second fault detection unit of the data processing device, the second fault detection unit being configured for a second inequality relationship, wherein a comparator circuit of the second fault detection unit is arranged to verify that a first data written to the first register of the second fault detection unit is more than a second data written to the second register of the second fault detection unit,

the second software portion comprising

one or more instructions arranged to perform a second computation resulting in a second computation result, and

one or more instructions arranged to add a threshold value to the second computation result, and to write the result to the second register of the first fault detection unit of the data processing device,

one or more instructions arranged to write the second computation result to the second register of the second fault detection unit of the data processing device,

wherein

the first fault detection unit and the second fault detection unit are the same fault detection unit, or

the first fault detection unit is different from the second fault detection unit.

13. An integrated circuit comprising a multiple electronic fault detection units as in claim 1 distributed over two lakes.

3. An electronic fault detection unit, comprising

a first register arranged to be written from a first software portion,

a second register arranged to be written from a second software portion,

a comparator circuit arranged to

detect that both the first and second register have been written,

verify a relationship between first data written to the first register and second data written to the second register, and

signal a fault upon said verification failing, and

a timer circuit arranged to

signal a fault if said verification of the comparator circuit does not occur within a time limit

a configuration register arranged to configure the comparator circuit for one of multiple relationships in dependence upon configuration data written to the configuration register, the multiple relationships including at least:

an equality relationship, wherein the comparator circuit is arranged to verify that the first data equals the second data,

a first inequality relationship, wherein the comparator circuit is arranged to verify that the first data is less than the second data.

4. An electronic fault detection unit as in claim 3, wherein the timer circuit is arranged to start timing an interval upon at least one of configuration of the electronic fault detection unit or successful verification of the relationship, the time limit being reached upon the interval expiring.

5. An electronic fault detection unit as in claim 3, wherein the relationship between the first data and the second data is any one of the following:

an equality relationship, wherein the comparator circuit is arranged to verify that the first data equals the second data,

an inequality relationship, wherein the comparator circuit is arranged to verify that the first data is less than the second data,

an inequality relationship, wherein the comparator circuit is arranged to verify that the first data is more than the second data,

a closeness relationship, wherein the comparator circuit is arranged to verify that the absolute value of the first data minus the second data is less than a threshold.

16. An electronic fault detection unit as in claim 3, wherein the comparator circuit is arranged to

upon successful verification of the relationship resetting the timer circuit and return to detecting that both the first and second register have been written.

17. An electronic fault detection unit as in claim 3, wherein the comparator circuit comprises

a first electronic flag coupled to the first register, the first electronic flag being arranged to be set upon writing of the first register, and

a second electronic flag coupled to the second register, the second electronic flag being arranged to be set upon writing of the second register,

the comparator circuit being arranged to detect that both the first and second flag are set, and to reset said first flag and second flag at least upon successful verification of the relationship.

18. An electronic fault detection unit as in claim 3, wherein the electronic fault detection unit comprises a status register,

the status register being arranged to indicate at least one of a result of a previous verification of the comparator circuit, or that one of the first and second register have been written, but not the other.

19. A data processing device comprising

a first electronic fault detection unit as in claim 3,

at least one memory storing a first and second software portion,

at least one processor arranged to execute the first software portion and the second software portion, the data processing device being arranged so that the first and second register of the fault detection unit is writeable from the first and second software portion.

20. A data processing device as in claim 19, wherein

the first software portion comprising

one or more instructions arranged to perform a first computation resulting in a first computation result, and

one or more instructions arranged to write the first computation result to the first register of the first electronic fault detection unit of the data processing device, the first fault detection unit being configured for a first inequality relationship, wherein a comparator circuit of the first fault detection unit is arranged to verify that a first data written to the first register is less than a second data written to the second register,

one or more instructions arranged to add a threshold value to the first computation result, and to write the result to the first register of a second fault detection unit of the data processing device, the second fault detection unit being configured for a second inequality relationship, wherein a comparator circuit of the second fault detection unit is arranged to verify that a first data written to the first register is more than a second data written to the second register,

the second software portion comprising

one or more instructions arranged to perform a second computation resulting in a second computation result, and

one or more instructions arranged to add a threshold value to the second computation result, and to write the result to the second register of the first electronic fault detection unit of the data processing device,

one or more instructions arranged to write the second computation result to the second register of the second fault detection unit of the data processing device,

wherein

the first fault detection unit and the second fault detection unit are the same fault detection unit, or

the first fault detection unit is different from the second fault detection unit.

14. A computer implemented fault detection method for use with a data processing device comprising a first fault detection unit and a second fault detection unit,

in a first software portion:

performing a first computation resulting in a first computation result, and

writing the first computation result to a first register of a first fault detection unit of the data processing device, the first fault detection unit being configured for a first inequality relationship, wherein a comparator circuit of the first fault detection unit is arranged to verify that a first data written to the first register of the first fault detection unit is less than a second data written to a second register of the first fault detection unit

adding a threshold value to the first computation result, and to write the result to a first register of a second fault detection unit of the data processing device, the second fault detection unit being configured for a second inequality relationship, wherein a comparator circuit of the second fault detection unit is arranged to verify that a first data written to the first register of the second fault detection unit is more than a second data written to a second register of the second fault detection unit

in a second software portion;

performing a second computation resulting in a second computation result, and

adding a threshold value to the second computation result, and to write the result to the second register of the first fault detection unit of the data processing device,

writing the second computation result to the second register of the second fault detection unit of the data processing device.

15. A non-transitory tangible computer readable storage medium comprising data loadable in a programmable data processing device, the data representing instructions executable by the programmable data processing device, said instructions comprising a first software portion and a second software portion,

the first software portion comprising

one or more instructions arranged to perform a first computation resulting in a first computation result, and

one or more instructions arranged to write the first computation result to a first register of a first fault detection unit of the data processing device, the first fault detection unit being configured for a first inequality relationship, wherein a comparator circuit of the first fault detection unit is arranged to verify that a first data written to the first register of the first fault detection unit is less than a second data written to the second register of the first fault detection unit

one or more instructions arranged to add a threshold value to the first computation result, and to write the result to a first register of a second fault detection unit of the data processing device, the second fault detection unit being configured for a second inequality relationship, wherein a comparator circuit of the second fault detection unit is arranged to verify that a first data written to the first register of the second fault detection unit is more than a second data written to the second register of the second fault detection unit

the second software portion comprising

one or more instructions arranged to perform a second computation resulting in a second computation result, and

one or more instructions arranged to add a threshold value to the second computation result, and to write the result to the second register of the first fault detection unit of the data processing device,

one or more instructions arranged to write the second computation result to the second register of the second fault detection unit of the data processing device.