Abstract:
The invention relates to a method and device for switching over in a computer system having at least two execution units. According to the invention, switching occurs between at least two operating modes, a first operating mode corresponding to a comparison mode and a second operating mode corresponding to a performance mode. The invention is characterized in that the execution units can be connected to an internal bus of the computer system. In the performance mode, at least two execution units are connected to the internal bus and when switching between the performance mode and the comparison mode, at least one execution unit is disconnected from the internal bus by a switch controlled by the changeover switch.
Abstract:
A processor includes first and second execution cores that operate in a redundant (FRC) mode, an FRC check unit to compare results from the first and second execution cores, and an error check unit to detect recoverable errors in the first and second cores. The error detector disables the FRC checker, responsive to detection of a recoverable error. A multi-mode embodiment of the processor implements a multi-core mode in addition to the FRC mode. An arbitration unit regulates access to resources shared by the first and second execution cores in multi-core mode. The FRC checker is located proximate to the arbitration unit in the multi-mode embodiment.
Abstract:
In order to validate data manipulation results in a CPU which incorporates duplicate basic processing units (60, 61) for integrity, which BPUs (60, 61) are typically each implemented on a single VLSI circuit chip, and which is capable of performing single and double precision data manipulation to obtain first and second data manipulation results, which should be identical, and a cache unit (70) for receiving data manipulation results from both BPUs (60, 61) and for transferring specified information words simultaneously to both BPUs (60, 61) upon request. In each BPU (60, 61), parity is generated for control groups, which are made up of cache interface control signals generated by each BPU (60, 61). Parity for the groups sent to the cache unit (70) and the other respective BPU (60, 61) are checked for errors in both the cache unit (70) and the respective BPU (60, 61), and in the event that an error is sensed, an error signal is issued to institute appropriate remedial action.
Abstract:
A safety communication scheme for a safety-critical system which includes two or more higher level units that have voting capabilities and one or two sets of lower level units that do not have voting capabilities, involves using one channel between the high and low level units for safety and two channels for redundancy.
Abstract:
본 발명에 따른 듀얼 컨트롤러 시스템의 오류 검출 장치는 제1 컨트롤러, 캔 트랜시버, 제2 컨트롤러를 포함한다. 상기 제1 컨트롤러는 센서로부터 감지 데이터를 입력받아 연산하여 제1 데이터를 산출하며, 상기 제1 데이터 및 제2 컨트롤러로부터 전송된 제2 데이터를 비교하여 오류가 검출되지 않은 경우 최종 데이터를 출력한다. 상기 캔 트랜시버는 제1 컨트롤러로부터 최종 데이터를 수신받아 캔(CAN) 버스를 통해 전송한다. 상기 제2 컨트롤러 센서로부터 감지 데이터를 입력받아 연산하여 제2 데이터를 산출하며, 상기 제2 데이터 및 캔 트랜시버로부터 피드백된 최종 데이터를 비교하여 오류가 검출될 경우, 제1 컨트롤러에 최종 데이터의 출력을 중지하는 인터럽트 신호를 전송한다. 이에 의해, 각 영역 별 오류 발생시 차량으로의 송신 출력을 제어하며, 오류로 인해 발생되는 위험 요소를 중복 검증하여 오류를 가진 위험한 데이터의 출력을 차단함으로써, 출력 데이터의 안정성과 신뢰성을 향상시킬 수 있다.
Abstract:
The invention relates to a device and a method for switching in a computer system comprising at least two execution units, switching means being provided for switching between at least two operating modes, a first operating mode corresponding to a comparison mode and a second operating mode corresponding to a performance mode. The invention is characterised in that a programmable interruption controller is associated with each execution unit, and the inventive device is provided with a memory element in which information describing at least parts of a configuration of at least one of the interruption controllers is stored.
Abstract:
Verfahren zur Steuerung eines Rechnersystems mit wenigstens zwei Ausführungseinheiten und einer Vergleichseinheit, das im Lock-Step betrieben wird und bei dem die Ergebnisse der wenigstens zwei Ausführungseinheiten verglichen werden, dadurch gekennzeichnet, dass bei oder nach Erkennung eines Fehlers durch die Vergleichseinheit auf wenigstens einer Ausführungseinheit ein Fehlererkennungsmechanismus für diese Ausführungseinheit abgearbeitet wird.
Abstract:
An information processing device includes a first device and a second device executing the same process independently of each other. The information processing device includes transmission means for transmitting data generated in the second (first) device from the second (first) device to the first (second) device, data matching means for matching the data transmitted from the transmission means with the data generated in the first (second) device and judging that a failure exists if the data do not coincide, and processing stop means for terminating the processing of the first device if the matching means judges that a failure exists. Moreover, the information processing device includes acquisition means for acquiring the data generated in the first device and the data generated in the second device in real time, data matching means for matching the data acquired by the acquisition means and judging that a failure exists if the data do not coincide, and processing stop means for terminating the processing of the first device if the matching means judges that a failure exists.
Abstract:
Bei einem Verfahren zur Überwachung des Programmlaufs in einem Mikrocomputer eines elektronischen Gerätes, insbesondere einer Sensorschaltung für Kraftfahrzeuge, wobei das Programm Eingangsdaten verarbeitet und Ausgangsdaten erzeugt, läuft zusätzlich zu dem Lauf des Programms eine Kopie des Programms, die in einem anderen Adressenbereich als das Programm im Mikrocomputer gespeichert ist, mit den für das Programm vorgesehenen Eingangsdaten ab. Die Ausgangsdaten der Kopie werden mit denen des Programms verglichen und bei Nichtüber einstimmung wird eine Fehlermeldung erzeugt.
Abstract:
A system and method for avoiding a single point of failure in the broadcast of streaming data. The system uses multiple redundant servers (10, 12) streaming the exactly same data to a failover device (16). The failover device buffers (20P, 20S) the streams into a primary and secondary data stream and automatically switches from the primary to the secondary data stream if it detects a corruption in the primary data stream. Since the buffered data packets of the two streams are identical and are synchronized, there is not outage for multicast receivers when the primary data source fails since there is a switch to exactly the same data in the next packet of the secondary data stream.