摘要:
The invention relates to a method for protecting a program counter structure (102) of a processor system (104) in the case of an interrupt request (106). The processor system (104) comprises at least the program counter structure (102), an interrupt control device (108) and a memory (110). The interrupt control device (108) is designed to respond to the interrupt request (106) by providing the program counter structure (102) with an address (112) associated with the interrupt request (106). The program counter structure (102) is designed to output an address (352) to the memory (110) via a memory interface (114). The method (400) has a read-in step, a comparison step and a provision step. In the read-in step, the address (352) is read in from the memory interface (104). In the comparison step (404), this address (352) is compared with a desired address (120) associated with the interrupt request (106) in order to obtain a comparison result (126). In the provision step, a match signal (124) is provided using the comparison result (126). The latter can also be used for monitoring the handling of interrupt requests. For example, it can be used for monitoring observance of the priority of these interrupt requests or as part of monitoring of the correct execution of the interrupt routine associated with the interrupt request (interrupt service routine).
摘要:
In a data processing device including two sets of circuit pairs which are respectively duplicated in two clock domains which are asynchronous to each other, an asynchronous transfer circuit that transfers a payload signal is provided between the two sets of circuit pairs. The asynchronous transfer circuit includes two sets of a pair of bridge circuits which are respectively connected to the two sets of circuit pairs, and asynchronously transfers the payload signal and a control signal indicating a timing at which the payload signal is stable on a reception side. The two sets of a pair of bridge circuits and the payload signals can be duplicated, but the control signal is not duplicated, and the received payload signal is used for timing control to supply an expected same time difference, to the pair of duplicated circuits. This enables asynchronous transfer between circuits duplicated in the asynchronous clock domains.
摘要:
The invention concerns a fail-safe device for a data output system, the device comprising at least one memory unit (4a, 4b) for storing a set of first telegrams and a set of second telegrams, at least one input processor (1a, 1b) for selecting one of the stored first telegrams and one of the stored second telegrams; and an XOR-device (5) with a first input channel (A) for transmitting the selected first telegram, a second input channel (B) for transmitting the selected second telegram, and with an output channel (O) for transmitting a third telegram, the third telegram being the result of an XOR-operation of the first and the second telegram. Thus a composite fail safe system for Data Output Systems is provided with a simple structure.
摘要:
Verfahren zur Überprüfung einer Datenverarbeitungseinrichtung auf die Eignung zur Durchführung fehlersicherer Automatisierungsabläufe Die vorliegende Erfindung betrifft ein Verfahren zur Überprüfung einer Datenverarbeitungseinrichtung (100), insbesondere einer Automatisierungseinrichtung (100) oder eines Computers (100), auf die Eignung zur Durchführung fehlersicherer Automatisierungs-Abläufe, wobei die Datenverarbeitungseinrichtung (100) eine erste (138) und eine zweite Zeitbasis (136) aufweist, und wobei das Verfahren die folgenden Schritte umfasst: - Ermittlung eines ersten Zeitwerts der ersten Zeitbasis (138) nach dem Ablauf einer Zeitspanne der Länge T, - Ermittlung eines zweiten Zeitwerts der zweiten Zeitbasis (136) nach dem Ablauf einer Zeitspanne der Länge T, - Bestimmung einer Abweichung zwischen dem ersten und dem zweiten Zeitwert, - Auslösen einer Störungsmaßnahme, wenn die Abweichung einen vorgegebenen oder vorgebbaren Grenzwert unterschreitet, insbesondere unterschreitet oder erreicht.
摘要:
In a communications channel coupled to multiple duplicated subsystems, a method, interposer and program product are provided for verifying integrity of subsystem responses. Within the communications channel, a first checksum is calculated with receipt of a first response from a first subsystem responsive to a common request, and a second checksum is calculated for a second response of a second subsystem received responsive to the common request. The first checksum and the second checksum are compared, and if matching, only one of the first response and the second response is forwarded from the communications channel as the response to the common request, with the other of the first response and the second response being discarded by the communications channel.
摘要:
An integrated circuit includes a plurality of processing stages each including processing logic (1014), a non-delayed signal-capture element (1016), a delayed signal-capture element (1018) and a comparator (1024). The non-delayed signal-capture element (1016) captures an output from the processing logic (1014) at a non-delayed capture time. At a later delayed capture time, the delayed signal-capture element (1018) also captures a value from the processing logic (1014). An error detection circuit (1026) and error correction circuit (1028) detect and correct random errors in the delayed value and supplies an error-checked delayed value to the comparator (1024). The comparator (1024) compares the error-checked delayed value and the non-delayed value and if they are not equal this indicates that the non-delayed value was captured too soon and should be replaced by the error-checked delayed value. The non-delayed value is passed to the subsequent processing stage immediately following its capture and accordingly error recovery mechanisms are used to suppress the erroneous processing which has occurred by the subsequent processing stages, such as gating the clock and allowing the correct signal values to propagate through the subsequent processing logic before restarting the clock. The operating parameters of the integrated circuit, such as the clock frequency, the operating voltage, the body biased voltage, temperature and the like are adjusted so as to maintain a finite non-zero error rate in a manner that increases overall performance.
摘要:
The circuit is designed for easy testing by supplying an input test pattern to a common input terminal (5), selectively coupled to the input of each of the identical circuit blocks (1,2). An evaluation stage (10) compares the output test patterns received from each of the identical circuit blocks, to provide an external fault signal when the compared output test patterns differ from one another. Pref. the circuit is supplied with an external clock signal, used for triggering a sampling control signal with a shorter pulse duration used by a sampling stage (14) supplying the fault signal provided by the evaluation stage to a circuit output terminal (7).
摘要:
The present invention relates to a self-checking circuit and a method of its configuration. More particularly, it concerns a self-checking circuit useful for highly reliable system configuration. As for a logic circuit having error detection function that has function blocks of feeding out a plurality of signals at least duplexed, compares the output signals of the function blocks, and detects an error on the basis of results of the comparison, it comprises synthesizing means provided to superimpose inherent waveforms assigned in advance to the respective output signals of the function blocks onto the output signals of one of the function blocks. The inherent waveforms are orthogonal waveforms generated by orthogonal waveform generator circuit. The logic circuit also comprises comparison means for comparing a signal output of the synthesizing means with the signal output of the other function block to detect the error. The whole circuit including the function blocks are judged normal only if the waveforms inherent to the both output signals exist.
摘要:
Eine zweikanalige, federtolerante Taktgeberanordnung enthält zwei Taktgeber (TG1, TG2), die je einen Oszillator (Q1, Q2) enthalten. Die Frequenz des Oszillators des einen Taktgebers (TG1) ist niedriger als die des anderen, synchronisierten Taktgebers (TG2). Dieser vergleicht die Phasendifferenz zwischen seinem Ausgangssignal und dem des anderen. Überschreitet die Phasendifferenz einen vorgegebenen Betrag, wird ein Impuls aus dem Ausgangssignal des Oszillators (Q2) ausgeblendet. Die Erfindung wird angewandt bei redundante Prozeßsteuer- und -leitsystemen.