Abstract:
The invention relates to a method for monitoring the execution of a program in a microcomputer of an electronic device, especially a sensor circuit for motor vehicles. According to the inventive method, the program processes input data and produces output data, copies a program in addition to the program which is executed, said copy being stored in an address area in the micro-computer other than the program, using the input data provided for the program. The output data of the copy is compared to the data of the program and an error message is produced if the programs are not consistent.
Abstract:
Certain embodiments may relate to providing increased storage capacity. For instance, a memory storage device may include a motherboard with an external communication interface. The memory storage device may also include a multiple solid-state drives coupled to the motherboard in communication with the external communication interface. Each of the plurality of solid-state drives may include a respective storage controller to manage the distribution of data during a write or read operation to a combination of a primary storage allocation and a redundant storage allocation. The redundant storage allocation may be included in the combination in response to detecting an error condition associated with at least a portion of the primary storage allocation.
Abstract:
Data is sent from a memory buffer device to a host device over a link. An error in the data is determined. A read response cancellation signal is sent to the host device to indicate the error to the host device, where the read response cancellation signal is to be sent subsequent to the data being sent from the memory buffer device to the host device.
Abstract:
A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.
Abstract:
The present invention relates to a coupling device for connection of one of two servers (6a, 6b) at a time to a data transmission network (1) as well as to a data transmission network (1) comprising such a coupling device (3). This device comprises a first and a second terminal (5a, 5b) for connecting a first (6a) and a second server (6b), respectively, as well as a third terminal (4) for connection to the data transmission network (1). Further, it comprises a switch device (7) having a first switching state, in which the third terminal (4) is connected to the first terminal (5a) and disconnected from the second terminal (5b), and a second switching state, in which the third terminal (4) is connected to the second terminal (5b) and disconnected from the first terminal (5a). Finally, it comprises a power supply means (8; 14, 15) electrically connected to the switch device (7) for supplying energy to the switch device (7), which is or can be connected either to the first server (6a) or to the second server (6b) and is adapted to then obtain energy from the respective server (6a, 6b) and to provide an energy signal to the switch device (7). The switch device (7) is adapted to assume one of the first and second switching states, when it is provided with the energy signal by the power supply means (8; 14, 15), and to assume the other of the first and second switching states, when it is not provided with the energy signal by the power supply means (8; 14, 15).
Abstract:
The invention relates to a system (10) having at least two physically redundant controllers (22, 24, 48, 50) which is provided for applications that need to be continuously operable in spite of hardware faults, maintenance or replacement achieving high availability and/or functional safety and having at least one control unit (22) which is actively participating in the control loop and n redundant units (24) that are kept synchronized in stand-by, whereas • the execution of the software is replicated among the controllers (22, 24, 48, 50); • the controllers (22, 24, 48, 50) referred herein are any kind of stored pro¬ gram control computer used for discrete automation and motion, process and power systems automation inter alia; and • the controllers (22, 24, 48, 50) are being equipped with central processing units (CPUs) (38) featuring a plurality of cores (40, 42) organized within a single piece of silicon, being already known as multi-/manycore processors (36). Furthermore the invention relates to a method for operating the system appropriately.
Abstract:
Die Erfindung betrifft ein Verfahren zum Betreiben einer Recheneinheit (2), die mindestens zwei Rechenkerne (4, 6) aufweist, wobei mindestens zwei der mindestens zwei Rechenkerne (4, 6) jeweils ein Signaturregister (18, 20), das mehrere Eingänge aufweist, zugeordnet ist, bei dem von den mindestens zwei der mindestens zwei Rechenkerne (4, 6) zumindest eine Aufgabe (12, 14) durchgeführt wird, wobei mit jeder Aufgabe (8, 10) ein Algorithmus berechnet wird, wobei von jedem Rechenkern (4, 6) berechnete Ergebnisse (12, 14) in das zugeordnete Signaturregister (18, 20) geschrieben und die in die Signaturregister (18, 20) geschriebenen Ergebnisse (12, 14) verglichen werden.
Abstract:
An information processing device includes a first device and a second device which executes a processing independently of each other. The information device includes first status acquisition means for acquiring a status of the first device, second status acquisition means for acquiring a status of the second device, status comparison means for comparing the first status acquired by the first status acquisition means to the second status acquired by the second status acquisition means, status selection means for selecting the first status or the second status if the compared statuses are different, and even generation means for generating a common event in accordance with the acquired status in the first device and the second device.
Abstract:
Vorrichtung und Verfahren zur Umschaltung bei einem Rechnersystem mit wenigstens zwei Ausführungseinheiten, wobei Umschaltmittel enthalten sind, die derart ausgestaltet sind, dass diese zwischen wenigstens zwei Betriebsmodi umschalten, wobei ein erster Betriebsmodus einem Vergleichsmodus und ein zweiter Betriebsmodus einem Performanzmodus entspricht dadurch gekennzeichnet, dass jeder Ausführungseinheit ein programmierbarer Interruptcontroller zugeordnet ist und dass ein Speicherelement enthalten ist, in dem Informationen, welche wenigstens Teile einer Konfiguration wenigstens eines dieser Interruptcontroller beschreibt, abgespeichert sind.
Abstract:
Verfahren und Vorrichtung zur Erzeugung eines Signals bei einem Rechnersystem mit mehreren Komponenten, wobei wenigstens zwei Ausführungseinheiten als zwei Komponenten vorgesehen sind und als weitere Komponente ein Umschaltmittel vorgesehen ist, wobei bei dem Rechnersystem zwischen wenigstens zwei Betriebsmodi umgeschaltet wird und ein erster Betriebsmodus einem Vergleichsmodus und ein zweiter Betriebsmodus einem Performanzmodus entspricht dadurch gekennzeichnet, dass in einer Komponente des Rechnersystems ein Modussignal, das den gerade vorliegenden Betriebsmodus anzeigt und/oder Änderungen eines Modussignals erzeugt werden und dass wenigstens die Änderungen des Modussignals und/oder das Modussignal selbst außerhalb der Komponente zur Verfügung gestellt wird.