CN103257903B - Error signal processing unit, apparatus and method for outputting error condition signals - Google Patents
Error signal processing unit, apparatus and method for outputting error condition signals Download PDFInfo
- Publication number
- CN103257903B CN103257903B CN201310123959.XA CN201310123959A CN103257903B CN 103257903 B CN103257903 B CN 103257903B CN 201310123959 A CN201310123959 A CN 201310123959A CN 103257903 B CN103257903 B CN 103257903B
- Authority
- CN
- China
- Prior art keywords
- rub
- signal
- error
- out signal
- error condition
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0766—Error or fault reporting or storing
- G06F11/0781—Error filtering or prioritizing based on a policy defined by the user or on a policy defined by a hardware/software module, e.g. according to a severity level
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0706—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment
- G06F11/0736—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment in functional embedded systems, i.e. in a data processing system designed as a combination of hardware and software dedicated to performing a certain function
- G06F11/0739—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment in functional embedded systems, i.e. in a data processing system designed as a combination of hardware and software dedicated to performing a certain function in a data processing system embedded in automotive or aircraft systems
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Automation & Control Theory (AREA)
- Debugging And Monitoring (AREA)
- Human Computer Interaction (AREA)
- Transportation (AREA)
- Mechanical Engineering (AREA)
- Maintenance And Management Of Digital Transmission (AREA)
- Hardware Redundancy (AREA)
Abstract
The invention relates to an error signal processing unit, apparatus and method for outputting error condition signals. The apparatus has an error processing device receiving an error signal that displays an error condition. The processing device is configured such that the error processing device receives a regeneration signal that displays attenuation of the error condition such that attenuation of the error condition is displayed. The processing device outputs an error condition signal in response to reception of the error signal if the error signal is received within a given delay time, and otherwise omits outputting of the error condition signal.
Description
Technical field
Embodiments of the invention are related to rub-out signal processing unit.The additional embodiment of the present invention be related to be configured in response to
Error condition in equipment and the equipment of output error signal.The additional embodiment of the present invention is related to believe for output error condition
Number method.
Background technology
The ECU (ECU- electronic control units) of Hyundai Motor is by integrated increasing function.This trend is by enabling height
The unilateral zoom technology of integrated horizontal drives, and by the high cost of the auto industry for forcing the ECU total amounts for reducing each car
Driving attribute drives.In senior deck assistant's function is provided and particularly danger is prevented reduce mortal injury number of times
In, electronic equipment plays increasing effect.
Integrated being concentrated mainly on by master control important computations and control function of function inside the ECU and play an important role
Around multi -CPU microcontroller.Such microcontroller can be considered the cluster with task that is defined and having encapsulated and calculate
Node.Under such hypothesis Fault Isolation be it is to be solved be primarily upon, it affect security architecture all structure blocks.
Key issue with regard to the ever-increasing complexity of automobile ECU and with regard to concentrating on ISO26262 is that automobile ECU should
Continual service can be provided, not only to it is less mistake and also in order to be listed in important mistake now.
The content of the invention
Embodiments of the invention are related to comprising the error handler for being configured to the rub-out signal for receiving instruction error condition
Rub-out signal processing unit.Additionally, error handler is further configured to receive indicates that alleviating error condition or instruction may delay
The recovery signal of solution error condition.Additionally, error handler is further configured to：If given from rub-out signal is received
In time delay, error handler is not received by recovering signal, then in response to receiving rub-out signal based on the rub-out signal
Output error conditioned signal；Otherwise ignore output error conditioned signal.
The additional embodiment of the present invention is related to following equipment：It is configured in response to the error condition in equipment and output indication
The rub-out signal of error condition, and in response to alleviating error condition or if possible alleviating error condition and output indication alleviation
The recovery signal of error condition or alleviation error condition probability.
The additional embodiment of the present invention is related to the mistake letter comprising such equipment and such rub-out signal processing unit
Number processing system.
Description of the drawings
Embodiments of the invention will be described using accompanying drawing, wherein：
Fig. 1 a illustrate the block diagram of rub-out signal processing unit according to an embodiment of the invention；
Fig. 1 b illustrate the block diagram of rub-out signal processing unit according to another embodiment of the present invention；
Fig. 2 a illustrate the block diagram of equipment according to an embodiment of the invention；
Fig. 2 b illustrate the exemplary realization of the equipment of the rub-out signal processing unit and Fig. 2 a of Fig. 1 a；
Fig. 3 a illustrate the block diagram of rub-out signal processing system according to an embodiment of the invention；
Fig. 3 b illustrate the block diagram of rub-out signal processing system according to another embodiment of the present invention；With
The flow chart that Fig. 4 illustrates method according to an embodiment of the invention.
Specific embodiment
Before using accompanying drawing embodiment of the present invention will be described in more detail, the element pointed out by identical or functional equivalent
It is provided to identical Ref. No. and ignores the repeated description of the element for being provided to identical reference numerals.Therefore, it is tool
The description provided by the element for having identical reference numerals can be exchanged with each other.
Fig. 1 a illustrate the block diagram of rub-out signal processing unit 100 according to an embodiment of the invention.Rub-out signal
Processing unit 100 includes error handler 101 (such as circuit 101), and which is configured to receive rub-out signal 103 (such as from outside
Not shown in equipment or software process-Fig. 1 a), rub-out signal 103 indicates error condition (such as in external equipment or software process
In).
Additionally, error handler 101 (circuit 101) is configured to receive recovers signal 105, recover signal 105 and indicate to alleviate
Error condition (in external equipment or software process) indicates that alleviating error condition (in external equipment or software process) is
It is possible.
Additionally, error handler 101 (circuit 101) is further configured to：If from the given of reception rub-out signal 103
In time delay, error handler 101 (circuit 101) is not received by recovering signal 105 (from external equipment or software process
In), then the 103 output error conditioned signal 107 of rub-out signal is based in response to receiving rub-out signal 103；Otherwise ignore output
Error condition signal 107.
Error handler 101 (circuit 101) is configured to：Rub-out signal 103 is received, and waits at least given time delay
Until which provides error condition signal 107；And only do not recover signal 105 within given time delay (to indicate in outside
Alleviate error condition in equipment or software process or indicate that it is possible to alleviate error condition) received, error condition is just provided
Signal 107.
The core concept of embodiments of the invention is if mistake or error condition are safely managed can to improve system
Availability, because this is only not recover signal 105 within given time delay by rub-out signal processing unit 100 to be received
Ability output error conditioned signal 107 and realize.Thus, when may be implemented in generation error signal 103, error condition can be received
(another) external equipment or another software process (not shown in Fig. 1 a) of signal 107 will not immediately enter automatic anti-fault mould
Formula, although the error condition that external equipment or software process generation error condition 103 are based on can be alleviated or be alleviated.
As an example, external equipment in addition can be ECU, and by having mistake between ECU and external equipment or software process
Error signal processing unit 100, can safely avoid ECU from entering the automatic anti-fault pattern for being used for significant errors, as long as allowing
Given time delay in alleviate these mistakes.
It is contrasted with this, typically automobile ECU is in the way of significant errors always cause into automatic anti-fault pattern
It is fabricated, even if when alleviating these in the equipment with such mistake and be wrong.In this case, such
After ECU entrance may even result in the automatic anti-fault pattern of the situation that ECU services are stopped, Fault recovery is only may
's.Especially when the electronic control of heavy vehicle is considered, such ECU automatic anti-faults can improve the pass to vehicle controllable
Note.
Therefore, embodiments of the invention are enabled and ECU not immediately enter automatic anti-fault mould in generation error signal 103
Formula, because if do not recover within given time delay signal 105 received then error condition signal 107 only from mistake
Reason machine 101 (circuit 101) is output.In other words, embodiments of the invention allow it is this alleviate be possible in the case of
Alleviate error condition in external equipment or software process, and prevented when error condition can alleviate or be alleviated
ECU immediately enters automatic anti-fault pattern.
In other words, notify that the external equipment or software process of significant errors (such as rub-out signal 103) have using transmission
Recover signal 105 forbidding the option of significant errors to error handler 101 (circuit 101).
As an example, error handler 101 (circuit 101) can be configured to：If giving fault processing in time delay
Machine 101 (circuit 101) is not received by recovering signal 105, then forward rub-out signal 103 (such as such as error condition signal 107).
If additionally, from receive rub-out signal 103 given time delay in its be not received by recover signal 105, mistake
Datatron 101 (circuit 101) can not forward rub-out signal 103.In other words, error condition signal 107 not only can include sending out
The information of raw mistake, and can include equipment or software process with regard to generation error signal information and also including with regard to
The information of the type of error occurred in external equipment or software process.
According to another embodiment, after alleviating error condition only in external equipment or software process, external equipment or soft
Part process can generate recovery signal.Therefore, in some embodiments of the invention, error handler 101 (circuit 101) can configure
Indicate to alleviate error condition in external equipment or software process to receive, or in other words, indicate the report in rub-out signal 103
The error condition of announcement no longer significantly recovers signal 105.
It is assumed hereinafter that error handler is arranged to receive rub-out signal from external equipment and recovers the circuit of signal.So
And, in the optional realization of rub-out signal processing unit, error handler is to run (software) process on the processor core,
And rub-out signal and recovery signal are provided by another process, and another process operates in identical with the process of error handler
On processor (core) or operate on different processor (core).Therefore, embodiments of the invention also cover only software and realize,
Wherein rub-out signal datatron is to receive rub-out signal and recover signal and provide error condition signal (software) process, and
Wherein rub-out signal and recovery signal are provided by another (software) process.In such an implementation, rub-out signal indicate it is another enter
Error condition in journey, and during recovering the error condition in another process of signal designation alleviation or indicating that alleviation is another
Error condition is possible.Therefore, the following description for being provided based on circuit and external equipment is also applied for described above only soft
Part is realized, wherein electric routing daemon is substituted and external equipment is substituted by another process.
Fig. 1 b illustrate the block diagram of rub-out signal processing unit 150 according to another embodiment of the present invention.Mistake
Signal processing unit 150 different from the rub-out signal processing unit 100 that illustrates in Fig. 1 a because when and Fig. 1 a in circuit 101
When making comparisons, rub-out signal processing unit 150 includes more complicated circuit 151.The circuit 151 can be the electricity illustrated in Fig. 1 a
The possibility on road 101 is realized.
When making comparisons with circuit 101, the additional embodiment of the present invention may include some or all additional spies of circuit 151
Levy.
Circuit 151 includes rub-out signal decoder stage 153, recovers signaling protocol detection level 155 and error condition signal is generated
Level 157.
According to other embodiments of the present invention, rub-out signal processing unit 150 may include for receive rub-out signal 103 or
The first terminal 159 of multiple rub-out signals 103, recovers signal 105 or multiple second terminals for recovering signal 105 for receiving
161 and for exporting or providing the third terminal 163 of error condition signal 107 or multiple error condition signals 107.
In the example for illustrating in Figure 1b, rub-out signal processing unit 150 is configured at two different terminals 159,161
(such as using the first communication protocol and/or communication line for rub-out signal 103 and using being used to recover the of signal 105
Two communication protocols and/or communication line) receive rub-out signal 103 and recover signal 105.However, other reality of the invention
Example is applied, rub-out signal processing unit is may include for receiving rub-out signal 103 and recovering signal 105 (such as using for receiving
Rub-out signal 103 and recover the same communication protocol and/or communication line of signal 105) a terminal.
As an example, (which can be for receiving rub-out signal 103 and recovering signal 105 to simply use a position wherein
This end received) come the very simple embodiment that signals rub-out signal 103 and recover signal 105
In, rub-out signal 103 can correspond to this first state (such as high state or low state) in this terminal, and extensive
Complex signal 105 can correspond to this second state different from first state in this terminal (for example low state or
High state).Under normal operation, the position will indicate do not have wrong appearance with the second state.If not having, an error has occurred,
External equipment will make this state from the second state change to the first state corresponding to rub-out signal 103.Circuit 151 can be matched somebody with somebody
It is set to：It is if not being changed back to the second state (which corresponds to recovery signal 105) the position in time delay is given, defeated
The conditioned signal that makes mistake 107；Otherwise (if the position is changed back to the second state in time delay is given) ignores output mistake
Miss conditioned signal 107.
The use of the advantage for rub-out signal 103 and two different terminals 159,161 for recovering signal 105 is different
Communication protocol can be used for rub-out signal 103 and recover signal 105, such as the not so complicated of rub-out signal 103
But the communication protocol of stalwartness and the more complicated communication protocol for recovering signal 105 (but can be not so healthy and strong
Communication protocol).It is thereby achieved that：It is particularly capable of rub-out signal 103 being set from outside in stalwartness and quick mode
Standby to report to rub-out signal processing unit 150, while recovering signal 105, (which can not as rub-out signal 103, the time be heavy
Will) more complicated communication protocol can be used, this enables the larger amount of information of transmission.In other words, it is different by using two kinds
Terminal 159,161, under conditions of may be implemented in even worst, is processed in rub-out signal by the rub-out signal that external equipment is generated
Received at unit 150 and another external equipment can be transmitted to as error condition signal 107, while in these worsts
Under the conditions of it is corresponding recovery signal 105 may not find the passage from external equipment to rub-out signal processing unit 150.Therefore,
Although the event of the worst that may occur is the error condition in external equipment having alleviated, another external equipment is entered
Automatic anti-fault pattern.However, the entrance of automatic anti-fault pattern is still better than does not enter into automatic anti-fault pattern at all,
For example when rub-out signal 103 does not find passage towards rub-out signal processing unit 150 (such as when using not so healthy and strong
During communication protocol) when.
As an example, first terminal 103 can be a single bit line, first state (such as " height " shape of its neutrality line
State) error condition is indicated, and no error condition is bright during second state (such as " low " state) of bit line indicates external equipment
Aobvious.According to further embodiment, second terminal 161 can be so-called SPI terminals (SPI- serial peripheral interface), for example, exist
There is between rub-out signal processing unit 150 and external equipment at least three communication lines or communication wire.
Therefore, for rub-out signal 103 and to recover the communication protocol of signal 105 can be different, and or even it is used for
The terminal 159,161 for receiving rub-out signal 103 and recovering signal 105 can be mutually different.
Rub-out signal decoder stage 153 can be configured to decoding error signal 103 (receiving at first terminal 159) and generate
The rub-out signal 165 of decoding.Additionally, rub-out signal decoder stage 153 is can be configured to error condition signal generation level 157 providing
The rub-out signal 165 of decoding.
During rub-out signal 103 is only the embodiments of the invention of a signal wherein, rub-out signal decoder stage 163 can
It is configured to only forward this state as decoded rub-out signal 165.Wherein according to more complicated communication protocols
The present invention's of view (such as according to SPI communication agreement, CAN communication agreement or FlexRay communication protocols) transmission rub-out signal 103
The communication protocol of rub-out signal 103, rub-out signal decoder stage 153 in more complicated embodiment, is depended on to can be configured to decoding error
Signal 103.
Recover signaling protocol detection level 155 and can be configured to according to given communication protocol decoding rule that (which may differ from using
In the communication protocol decoding rule of decoding error signal 103) decode and recover signal 105 to generate decoded recovery signal 167.
Especially 103 (such as each different mistake in indicating external equipment of multiple rub-out signals is received in can be configured to for the present invention
By mistake condition) embodiment in, the different signals 105 that recover received for different signals 103 are probably benefit, each recovery
Signal 105 indicates to alleviate the particular error conditions in external equipment.Therefore, set outside 165 definable of decoded rub-out signal
Particular error conditions (such as from the middle of multiple possible error conditions) and decoded recovery 167 definable of signal in standby
Alleviate the particular error conditions (such as in the middle of the multiple possible error condition from external equipment) in external equipment.
Error condition signal generation level 157 can be configured to and receive decoded mistake in decoded recovery signal 167
Signal 165, and can be configured to：Based on 165 generation error conditioned signal 107 of decoded error signal (such as automatically
Fail-safe mode request signal is 107)；And if given in time delay, error condition signal generates level 157 without reception
Recover signal 167 (for example indicating that the particular error conditions indicated by decoded rub-out signal 165 are alleviated) to decoded, then
Output error conditioned signal 107；Otherwise ignore output error conditioned signal 107.
Error condition signal generates level 157 and is also referred to as the erroneous path that (continual) has postponed, because defeated at which
Before the conditioned signal that makes mistake 107, which delays decoded rub-out signal 165 (to greatest extent up to given time delay).
Rub-out signal processing unit 150 can process multiple rub-out signals (such as the multiple different error condition of external equipment)
In the case of, error condition signal generates level 157 and can be configured to based on the first decoded error condition signal 165 (outside indicating
The first error condition in portion's equipment) ignore the first error condition signal 107 of output, if which is from the first decoded mistake
First is received in the given time delay that signal 165 has been received and decodes recovery signal 167 --- indicate to alleviate external equipment
In first error condition (being not any other error condition in external equipment) or indicate to alleviate the first wrong bar
Part (being not any other error condition in external equipment) is possible.
As already mentioned above, error condition signal generates level 157 and can be configured to generation as automatic anti-fault pattern
The error condition signal 107 of request signal 107.Such automatic anti-fault mode request signal 107 can be based on mistake letter
Numbers 103 and request can be indicated into automatic anti-fault pattern to other external equipment (such as being connected to third terminal 163).
If will be, it is noted once again that the automatic anti-fault mode request signal 107 can be generated the error condition being based in given delay
Alleviated in time, or if the wrong bar can be alleviated to the report of rub-out signal processing unit 150 within given time delay
Part, then prevent into automatic anti-fault pattern using rub-out signal processing unit 150.
Additionally, such as from Fig. 1 b, circuit 151 (for example rub-out signal condition generates level 157) can be configured such that to
Determining time delay can be by user configuring.For this purpose, rub-out signal processing unit 150 may include the 4th terminal 169, in the 4th terminal
169 its reception adjust signal 171 time delay.Error condition signal generation level 157 can be configured to be adjusted the time delay in reception
Given time delay is adjusted during entire signal 171.
According to further embodiment, include the standing part that can not be adjusted by user given time delay and can be adjusted by user
Whole adjustable part is also possible.In other words, circuit 151 (for example error condition signal generates level 157) can be configured to
Before its output error condition 107, waited at least standing part of given time delay (to adjust signal independently of time delay
171), because adjusting the adjustable part that signal 171 adjusts only for given time delay the time delay.
In other words, the standing part definable for giving time delay is receiving rub-out signal 103 and generation error condition
Minimum latency between signal 107, which can be extended based on the adjustable part of given time delay by user.
It is configured to process the further embodiment of different rub-out signals 103 according to wherein rub-out signal processing unit 150, electricity
Road 151 (for example error condition generates level 157) can have the different time delay for different rub-out signals 103.As example
Compared with son, the prior error condition in for external equipment, for wrong bar not so important in external equipment
Part, given time delay can be with longer.
As an example, circuit 151 can be configured to and receive the first rub-out signal for indicating the first error condition in external equipment
And receive the first recovery letter for indicating to alleviate the first error condition or the first error condition in the possible alleviation external equipment of instruction
Number, and circuit 151 can be configured to：If in the first given internal circuit time delay 151 from the first rub-out signal is received
The first recovery signal is not received by, then the first mistake is exported based on the first rub-out signal in response to receiving the first rub-out signal
Conditioned signal.Additionally, circuit 151 can be configured to and receive the second error condition for indicating in external equipment (which can be differently configured from the
One error condition) the second rub-out signal and receive instruction alleviate the second error condition or indicate may alleviate external equipment in
Second recovery signal of the second error condition.Circuit 151 can be further configured to：If from the second rub-out signal is received
Second given internal circuit time delay 151 is not received by the second recovery signal, then be based in response to receiving the second rub-out signal
Second rub-out signal and export the second error condition signal.
First time delay and the second time delay can be with mutually different.As an example, compared to the second error condition, the
One error condition can be prior error condition, and therefore compared to the second given time delay, first is given when postponing
Between can be with shorter.
Type according to other embodiments of the present invention, independently of the rub-out signal 103 for being received (or it is in other words independent
Error condition in external equipment), circuit 151 (for example error condition generates level 157) can be configured to generation error condition letter
Numbers 107.As an example, circuit 151 can be generated for the first rub-out signal and the same error condition for the second rub-out signal
Signal 107.As an example, error condition signal 107 can use very healthy and strong communication protocol (a such as bit line), wherein
High RST indicates to indicate error condition do not occur and therefore need not for the low signal into the request of automatic anti-fault pattern
Automatic anti-fault pattern.In other words, circuit 151 can be configured to the first error condition signal of generation and the second error condition, make
Obtain the first error condition signal to be equal to the second error condition signal.
Certainly, according to other embodiments of the present invention, the first error condition signal and the second error condition signal are mutual not
With being also possible, for example, the first error condition signal may include the information and the second wrong bar with regard to the first error condition
Part signal may include the information with regard to the second error condition.
Circuit 151 can also be designated as rub-out signal delay-level 151, and which is coupling in first terminal 159, second terminal
Between 161 and third terminal 163.First terminal 159 can also be designated as the first input terminal, and second terminal 161 can also
It is designated as the second input terminal and third terminal 163 can also be designated as outlet terminal.
Rub-out signal delay-level 151 is configured to：If within given time delay, rub-out signal delay-level 151 does not exist
Second input terminal 161 is received from external equipment and recovers the 105 (error condition or instruction in instruction alleviation external equipment of signal
The error condition alleviated in external equipment is possible), then in response to receiving mistake from external equipment in the first input terminal 159
Signal 103 (indicating the error condition in external equipment), provides error condition based on the rub-out signal 103 in outlet terminal 107
Signal 107；Otherwise ignore output error conditioned signal 107.
Fig. 2 a illustrate the block diagram of equipment 200 according to an embodiment of the invention.For example, equipment 200 can be outer
The rub-out signal illustrated in portion's equipment, rub-out signal processing unit 100 which is illustrated in being configured for connection to Fig. 1 a and/or Fig. 1 b
Processing unit 150.
As an example, external equipment 200 can be so-called MCU (MCU- microcontroller), and which is in the equipment that detects 200
If error condition when generation error signal 103 and the error condition that is further configured in equipment 200 alleviated or such as
Error condition in fruit equipment 200 can be alleviated then to generate recovers signal 105.
In other words, equipment 200 is configured to：In response to the error condition in equipment 200, the mistake of output indication error condition
Error signal 103；And in response to alleviating error condition or if it is possible, then output indication alleviation or mistake to alleviate error condition
Condition alleviates the recovery signal 105 of probability.
Therefore, whether the error condition that equipment 200 is can be configured in testing equipment 200 is it will be evident that and can be in inspection
Output error signal 103 during error condition as surveying.Additionally, equipment 200 can be configured to：Determine whether the mistake in equipment 200
Condition is alleviated or is corrected by mistake；And if error condition is alleviated or is corrected, or if equipment 200 detects mistake
Condition can be alleviated or is corrected, then output recovers signal 105.
According to other embodiments of the present invention, equipment 200 is may include for providing the first terminal 201 of rub-out signal 103
With the second terminal 203 for recovering signal 105 for offer.As an example, equipment 200 can be configured to defeated according to the first communication protocol
Error error signal 103 (in first terminal 201) and according to the second communication protocol output recover signal 105 (in second terminal
203), wherein the first communication protocol and the second communication protocol can be different.
As already mentioned above together with rub-out signal processing unit 150, compared to for recovering the second communication protocols of signal 105
View, can be more healthy and stronger communication protocol for the first communication protocols of rub-out signal 103, view, such as so that or even in worst
Under conditions of, compared to the loss for recovering signal 105, the loss of rub-out signal 103 is less likely to.
As an example, the compatible first terminal 159 in rub-out signal processing unit 150 of first terminal 201, and second
The compatible second terminal 161 in rub-out signal processing unit 150 of terminal 203.As an example, first terminal 201 can be single
Individual pin (if transmitting rub-out signal 103 for example using only one signal line), and second terminal 203 can be more multiple
Miscellaneous terminal (including multiple different pins or contact), such as such as SPI terminals, CAN terminals or FlexRay terminals.
According to further embodiment, first terminal 103 can also be more complicated terminal (such as including more than one pin
Or contact), such as such as SPI terminals, CAN terminals or FlexRay terminals.
According to other embodiments of the present invention, equipment is can be configured to for example using for rub-out signal 103 and recovery signal
105 same communication protocol provides rub-out signal 103 in a common terminal (such as SPI terminals) and recovers signal 105.
According to other embodiments of the present invention, equipment 200 can be configured to the multiple different wrong bar in testing equipment 200
Part, and each error condition that can be configured to as multiple different error conditions generates the mistake of oneself for indicating the error condition
Error signal 103.Additionally, equipment 200 can be configured to each the possible error condition generation for multiple different error conditions
The alleviation of the error condition in instruction equipment 200 or the recovery signal 105 of oneself of alleviation probability.
According to other embodiments of the present invention, the equipment 200 can be configured to the qualified Fault recovery signal of output so that
Equipment 200 has two group informations that notification error condition or fault condition disappear or alleviate：Recover signal 105 and rub-out signal
103.As an example, after being resumed (or alleviate error condition after), if it is expected that (recovery) event occur, mistake letter
Numbers 103 under hardware controls can be released or reset, and recover signal 105 and can be considered the additional confirmation from software.Change
Sentence is talked about, and rub-out signal 103 can be designated as qualified recovery signal together with signal 105 is recovered, and wherein external equipment 200 can be matched somebody with somebody
It is set to：Rub-out signal 103 is reset after error condition is alleviated, no error condition is obvious again in indicating external equipment 200
's；And confirmation alleviation error condition is additionally provided by recovering signal 105.
Rub-out signal processing unit (such as error handling unit 100 or 150) can be configured to only its from receive mistake
The qualified recovery signal is received in the given time delay of signal 103, and (which is based on replacement rub-out signal 103 and based on logical
Cross additional recovery signal 105 to confirm to alleviate error condition) just ignore output error conditioned signal 107.
In contrast to this and according to further embodiment, as has been described, equipment 200 can be configured to offer rub-out signal
103 and recover signal 105 so that by reset rub-out signal 103 formed recover signal.In this case, equipment 200 can be matched somebody with somebody
Be set to rub-out signal 103 is provided in same terminal and recover signal 105.
Fig. 2 b illustrate equipment 200 and rub-out signal processing unit 100 (which can also be designated as external security monitor)
Exemplary realization.Equipment 200 includes multiple process datatron 201a to 201n and internal security monitor 203.Internal peace
Full monitor 203 is configured to multiple process datatron 201a to 201n transmission error condition (such as conduct inside detected
205) error event broadcasts.Additionally, each in process datatron 201a to 201n is configured to respond to received mistake
Condition 205 performs error routine by mistake.Internal security monitor 203 is configured to depend on by entering when error condition 205 is received
Journey datatron 201a to 201n perform error routine result and export recovery signal 105.
In order to summarize above content, the external error event (rub-out signal of rub-out signal processing unit 100 is transmitted to
103) all process datatron 201a to 201n are also broadcast to.As an example, such process datatron 201a to 201n can
Being (software) process 201a to 201n.The difference of such software process can be in different processor cores (for example not even
Same (embedded) processor) but also (the same processor core of device can be managed for example or even in this place in same processor
On) be performed.
When internal error event broadcast 205 is received, each process datatron (such as each software process or processor)
201a to 201n is statically programmed to carry out dedicated action (software program or software routines-error routine).This enables realizes
N-Variant fault processing.
At least one of process datatron 201a to 201n (or processor) statically can be programmed with other processes
Ballot is performed in the middle of the result of reason machine 201a to 201n (or processor).The processor can be (typically more by special purpose interface
Individual pin) control safe condition and for example by provide recover may signal 207 to internal security monitor 203 (its then
Generate and recover signal 105) the safe and reliable recovery of enable.
Such scheme is enabled reduces the responsiveness of rub-out signal processing unit 100 with only when affecting all processors or enter
Control safe condition (generation error conditioned signal 107) when the global fault of journey datatron 201a to 201n occurs.At other
Under situation, recover to be possible (such as using recovery datatron 215) by the SW of error event triggers.Run multiple recovery routines
Ability and carry out voting and enable the detection M wherein in the middle of the N number of processor or process datatron 201a to 201n and be
The situation that may not operate.
Same principle can be applicable to multiple threads.The thread of quantity is given in multiple processors (N, wherein N=＜ T)
(T) it is activated.
Additionally, equipment 200 includes safe condition control interface 209, internal error event broadcast 205 is also forwarded to safety
State control interface 209 and safe condition control interface 209 automatically indicates that malfunction.
Therefore what is illustrated in figure 2b is related in safe system, exists and can control safe condition (such as generation error
Conditioned signal two methods 107) or two kinds of approach.
One method is using independent and managed by specialized hardware and software element automatically.This is monitored by internal security
Device 203 and rub-out signal processing unit 100 are realized.
Another method is that, using related safe condition control, wherein applying detection has obstruction security purpose potentiality
Situation.Such as external sensor delivery error information：Using or the second method of equipment 200 monitor the sensor, and such as
The really mispairing between the two sensors is observed, then application or equipment 200 can determine into Special safety state (to generate wrong
Miss conditioned signal 107).This is performed via safe condition control interface 209.In this case, internal security monitor 203
Mistake is not reported, because there is no hardware fault in microcontroller or (safety) equipment 200.
Additionally, equipment 200 may include multiple hardware or software monitors 210, which is configured to monitoring process datatron 201a
To 201n and it is configured to generation error message 211, in response to the error message 211, internal security monitor generation error letter
Numbers 103.In the other examples of equipment 200 are realized, these hardware or software monitors 210 can be ignored and internal security
Monitor 203 itself performs monitoring process datatron 201a to 201n.Additionally, these hardware or software monitors 210 are configurable
To monitor other nextport hardware component NextPort 213 (which can even outside equipment 200).
Additionally, internal security monitor 203 is configured to：If at least for given quantity process datatron 201a extremely
201n, the result of the error routine performed by the process datatron 201a to 201n of the given quantity correspond to desired result,
Then output recovers signal 105；Otherwise ignore output and recover signal 105.In other words, perform internal security monitor 203 to generate
Recover the ballot that signal 105 is based on.As has been described, the ballot can be by one of process datatron (such as process datatron
201a) or or even by internal security monitor 203 itself execution.
As an example, ballot can be software program, the N that the software program is performed from process datatron 201a to 201n
Individual standalone software programs (or error routine) are it is contemplated that N number of central at least M (M ＜ N) same result.This N number of software program
It is responsible for evaluating error situations and differentiating whether they receive recovery.Typically, each in N number of software program will be used " no
With " algorithm to be obtaining the estimation of themselves of failure situations.Therefore, process datatron 201a to 201n is configured such that
The error routine performed by the different process datatron 201a to 201n of multiple process datatron 201a to 201n is mutually different.
In another exemplary is realized, internal security monitor 203 is configured to：If by process datatron 201a to 201n
At least one result of one of the error routine of execution corresponds to expected result, then output recovers signal 105；Otherwise ignore defeated
Go out to recover signal 105.
As already mentioned above, process datatron 201a to 201n can operate in the software in different disposal core
Process.
Additionally, equipment 200 includes recovering datatron 215.Recover datatron 215 to be configured in process datatron 201a extremely
Perform on 201n and recover routine, for the mistake that process datatron 201a to 201n is performed by these process datatrons 201a to 201n
Miss the result of routine and do not correspond to expected result.Therefore equipment 200 can perform self- recoverage.Self- recoverage is possible wherein
Or be successfully executed in this case, internal security monitor 203 is generated and recovers signal 105.
Fig. 3 a show the block diagram of rub-out signal processing system 300 according to another embodiment of the present invention.
External equipment 200 that rub-out signal processing system 300 is illustrated in including Fig. 2 a or Fig. 2 b and the mistake illustrated in Fig. 1 a
Error signal processing unit 100.Therefore, it is that the explanation that rub-out signal processing unit 100 and external equipment 200 are provided is also applied for mistake
Error signal processing system 300.
As can be seen, (outside) equipment 200 is connected to rub-out signal processing unit 100.
In other words, rub-out signal processing unit 100 is configured to：Receive 103 He of rub-out signal from external equipment 200
Recover signal 105, and set from outside if which was not received within the given time delay from rub-out signal 103 is received
Standby 200 recovery signal 105, then based on the rub-out signal 103 received from external equipment 200, output error conditioned signal
107。
In order to summarize, Fig. 3 a show the error processing system 300 including equipment 200, and which is configured in response to equipment 200
In error condition and the rub-out signal 103 of output indication error condition and in response to alleviating error condition or if alleviating wrong
Condition is alleviation or the recovery signal 105 of alleviation probability of possible then output indication error condition by mistake.Additionally, error condition
Processing system 300 includes the rub-out signal processing unit 100 with circuit 101, and the circuit 101 is configured to receive from equipment
200 rub-out signal 103 and recovery signal 105.Circuit 101 is configured to：If in given prolonging from rub-out signal 103 is received
Time internal circuit 101 is not received by recovering signal 105 late, then be based on the rub-out signal 103 in response to receiving rub-out signal 103
Output error conditioned signal 107；Otherwise ignore output error conditioned signal 107.
Equipment 200 can be outside error processing system 100.
As an example, equipment 200 may include the first substrate (or may be arranged in the first substrate), its away from rub-out signal at
Second substrate (such as wherein configuration errors signal processing unit 100) of reason unit 100 is placed.
Equipment 200 can for example by being used to transmit rub-out signal 103 and/or recovering one or more lines of signal 105
Road and be connected to rub-out signal processing unit 100.
Fig. 3 b illustrate the block diagram of rub-out signal processing system 350 according to another embodiment of the present invention.
The rub-out signal processing system 300 that rub-out signal processing system 350 is illustrated in being different from Fig. 3 a, because rub-out signal
The rub-out signal processing unit 150 that processing system 350 is illustrated in including Fig. 1 b for substitute rub-out signal processing unit 100.Additionally,
Fig. 3 b illustrate the block diagram of other external equipment 352, and which can be in the outside of rub-out signal processing system 350 and special
Not, can be not as the part of rub-out signal processing system 350 or component.(which can be in rub-out signal processing unit for equipment 200
150 outside) rub-out signal processing unit 150 is coupled to, the first terminal 201 of such as equipment 200 may be coupled to first eventually
159 are held for rub-out signal 103 to be sent to the first end of rub-out signal processing unit 150 from the first terminal 201 of equipment 200
End 159.Additionally, the second terminal 161 that the second terminal 203 of equipment 200 may be coupled to rub-out signal processing unit 150 is used for
Recovery signal 105 is sent to into the second terminal 161 of rub-out signal processing unit 150 from the second terminal 203 of equipment 200.It is wrong
Error signal processing system 350 is configurable to for example provide the error condition signal 107 or automatic anti-fault as output signal
Mode request signal 107 gives other external equipment 352.If other external equipment 352 receives the error condition signal 107
Or automatic anti-fault mode request signal 107, then other external equipment 352 (which can be ECU) can enter automatic anti-fault
Pattern.
As already mentioned, if if by postponing forwarding rub-out signal 103 and can pass through in given delay
The interior signal 105 that recovers is received, and ignores output automatic anti-fault mode request signal 107, the error condition in equipment 200
Alleviate or can have been alleviated, then can prevent this from entering automatic anti-fault pattern using rub-out signal processing system 350.
The flow chart that Fig. 4 illustrates the method 500 for being used for output error conditioned signal according to an embodiment of the invention.
Method 500 includes receiving the rub-out signal (example for indicating error condition (such as in external equipment or software process)
Such as from external equipment or software process) the step of 501.
Additionally, method 500 includes step 503：If do not connect within the given time delay from rub-out signal is received
Receive and indicate to alleviate error condition (such as in external equipment or software process) or indicate to alleviate the mistake in external equipment
The recovery signal of condition, then be based on the rub-out signal output error conditioned signal in response to receiving rub-out signal by mistake；Otherwise ignore
Output error conditioned signal.
In terms of some of embodiments of the invention below will be summarized.
The embodiment provides a kind of wrong to improve the new method of system availability for safely managing.
As in (given) time delay for allowing, the mistake is alleviated, the additional embodiment of the present invention allows ECU safely to keep away
Exempt from into the automatic anti-fault for significant errors.
Typically, automatic ECU is fabricated in the way of always being caused into automatic anti-fault pattern by significant errors so that
Only Fault recovery is possible after this.Therefore, ECU services are only stopped and remain a problem.But can connect in the past
That what is received is no longer subjected to now, and for example, electronic control touches oversize vehicle now, and wherein ECU automatic anti-faults can improve right
The care of vehicle controllable.
Therefore, safely prevent from once detecting mechanism/method that mistake is put into automatic anti-fault pattern by offer,
Embodiments of the invention solve the problem.
Such as from Fig. 3 a and 3b, such rub-out signal treatment mechanism can be based on two kinds of passages：To have reported mistake
By the detected error channel of external module (such as by external equipment 200, such as MCU) (such as one or two signal)
And the recovery passage to forbid automatic anti-fault pattern to enter.
Some embodiments of the present invention have following characteristics：
Circuit (such as circuit 101 or 151), its be implemented as detecting new error condition by external circuit (for example by
External equipment is 200) notified.
User's configurable delay unit (for example error condition signal generates level 157), which is configured to postpone the wrong bar
Part (or rub-out signal 103) so which can not be forced into automatic anti-fault, as long as (giving) is time delay not out of date.
Fault recovery passage (is for example generated inside level 157 in error condition signal), as long as which is configured to user determining
Adopted (giving) completed to recover at the end of time delay, or in other words, as long as outside before given time delay terminates set
Error condition in standby 200 is alleviated, then prevent the error propagation in delay cell.
As has been described, embodiments of the invention are designed to the mistake for supporting the repetition from external circuit.
In the illustrative example (such as shown in Fig. 3 b) of embodiments of the invention, rub-out signal 103 can be included in
Outside one or two signal, wherein mistake is reported during known time.Recover signal 105 and can use healthy and strong agreement,
Such as SPI protocol with particular command.Circuit 151 can be realized in the external equipment of MCU (such as equipment 200).
Embodiments of the invention postpone important rub-out signal to allow the thing using unlike signal (recovering signal 105)
Business is postponed error pattern and is entered.This is different from known embedded system, wherein important mistake always causes into automatic to prevent
Failure.Therefore, the delay of significant errors is the example broken by embodiments of the invention.
According to some embodiments (such as according to the embodiment illustrated in 3b), (such as in 200 He of equipment between two equipment
Between rub-out signal processing unit 150) agreement can be defined so that notify significant errors (such as with rub-out signal 103
Form) equipment (equipment 200) then there is the healthy and strong order for using miscellaneous equipment (to rub-out signal processing unit 150)
The option that (for example recovering signal 105) is forbidden to which.
Method 500 can be supplemented by any function for describing herein in regard to device and feature, and can use device
Nextport hardware component NextPort realizing.
Although being described in terms of some in the context of device, it is clear that also representing in terms of these corresponding
The description of method, wherein square frame or equipment correspond to the feature of method and step or method and step.Similarly, in the upper of method and step
Aspect described in hereafter also represents the description of the project or feature of corresponding square frame or corresponding device.Some of method and step
Or it is all can be performed by (or use) hardware unit, as such as microprocessor, programmable calculator or electronic circuit.In some realities
Apply in example, in most important method and step some or multiple can be performed by such device.
Depend on specific enforcement demand, embodiments of the invention that hardware or software can be used to implement.Stored digital can be used
Medium performing the enforcement, such as floppy disk, DVD, blue light, CD, ROM, PROM, EPROM, EEPROM or FLASH memory,
Electronically readable control signal is stored thereon with, which is cooperated with programmable computer system (or can cooperate) so that perform corresponding
Method.Therefore, digital storage media can be computer-readable.
Some embodiments of the invention include the data medium with electronically readable control signal, its can with can compile
Journey computer system cooperates so that one of method described herein is performed.
Generally, embodiments of the invention are capable of achieving to be the computer program with program code, work as computer program
When product runs on computers, described program code can be used to one of execution method.Program code can for example be stored in
In machine-readable carrier.
Other embodiments include：For performing the computer program of one of method described herein, machine readable is stored in
On carrier.
Therefore the embodiment of the method for the present invention is in other words,：Computer program, with for when computer program fortune
The program code of one of method described herein is performed when row is on computer.
Therefore another embodiment of the method for the present invention is that (or digital storage media or computer-readable are situated between data medium
Matter), including computer program record thereon, for performing one of method described herein.Data medium, stored digital are situated between
Matter or the medium for having recorded be can typically touch and/or non-momentary.
Therefore another embodiment of the method for the present invention is to represent the computer for being used to performing one of method described herein
The data flow or signal sequence of program.Data flow or signal sequence can for example be configured to via data communication connect for example via
Transmitted the Internet.
Another embodiment includes：Processing meanss, such as computer or programmable logic device, are configured or adapted to perform this
One of method of place's description.
Another embodiment includes being provided with based on the computer program by performing one of method described herein thereon
Calculation machine.
Include that being configured to (such as electronically or optically) transmits for performing herein according to another embodiment of the present invention
Device or system of the computer program of one of the method for description to receptor.Receptor can for example be computer, movement set
Standby, storage device etc..Device or system can for example include the file server for transmitting computer program to receptor.
In certain embodiments, programmable logic device (such as field programmable gate array) can be used to perform and retouch herein
The some or all of functions of the method stated.In certain embodiments, field programmable gate array can with microprocessor cooperate so as to
Perform one of method described herein.Generally, method is performed preferably by any hardware unit.
Embodiments described above is only the example of the principle of the invention.It is understood by, configuration described herein and details
Modifications and variations will be apparent for others skilled in the art.Therefore, it is intended that only by patent co-pending
The scope of claim is defined, rather than the specific detail presented by the description and interpretation of embodiment herein is carried out
Limit.
Although each claim only relates to a single right, the disclosure also covers any of claim and thinks
The merging arrived.
Claims (33)
1. rub-out signal processing unit, including：
Error handler, is configured to receive the rub-out signal for indicating error condition；
Wherein error handler is further configured to receive and indicates to alleviate error condition or indicate to alleviate the extensive of error condition
Complex signal；And
Wherein error handler is further configured to：If from receive rub-out signal given time delay in fault processing
Machine is not received by recovering signal, then be based on the rub-out signal and output error conditioned signal in response to receiving rub-out signal；It is no
Then ignore output error conditioned signal.
2. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured to：If being not received by recovering letter error handler in time delay is given
Number, then forward rub-out signal.
3. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured to decoding error signal and based on decoded rub-out signal generation error bar
Part signal.
4. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured to decode rule to decode recovery signal according to given communication protocol.
5. rub-out signal processing unit according to claim 4,
Wherein error handler is further configured to according to the other communication protocol decoding for being different from communication protocol decoding rule
Rule carrys out decoding error signal.
6. rub-out signal processing unit according to claim 1,
Wherein error handler includes：
First input terminal, for being connected to the external equipment for providing rub-out signal and recovering signal, and for receiving wrong letter
Number；With
Second input terminal, for being connected to the external equipment, and recovers signal for receiving.
7. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured to：Based on to the external equipment for being configured for connection to rub-out signal processing unit or
Another external equipment indicate request into the rub-out signal of automatic anti-fault pattern generating automatic anti-fault mode request signal,
And export the automatic anti-fault mode request signal as error condition signal.
8. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured such that given time delay can be by user configuring.
9. rub-out signal processing unit according to claim 1,
The variable partition that include uncontrollable standing part time delay and can be adjusted by user is given wherein.
10. rub-out signal processing unit according to claim 1,
Wherein error handler is further configured to：Another rub-out signal for indicating another error condition is received, and reception refers to
Show and alleviate another error condition or indicate to alleviate another recovery signal of another error condition；And
Wherein error handler is further configured to：If within another given time delay from another rub-out signal is received
Error handler is not received by another recovery signal, then defeated based on another rub-out signal in response to receiving another rub-out signal
Go out another error condition signal.
11. rub-out signal processing units according to claim 10,
It is different from given time delay wherein another given time delay.
12. rub-out signal processing units according to claim 10,
Wherein error handler is configured to generation error conditioned signal and another error condition signal so that error condition signal etc.
It is same as another error condition signal.
13. rub-out signal processing units according to claim 1,
Wherein error handler includes：
Rub-out signal decoder stage, to decoding error signal and generates decoded rub-out signal；
Recover signaling protocol detection level, be configured to rule be decoded according to given communication protocol to decode recovery signal and generate
The recovery signal of decoding；
Error condition signal generates level, is configured to：Based on decoded rub-out signal generation error conditioned signal；And if
In given time delay, error condition signal generates level and is not received by decoded recovery signal, then output error condition letter
Number；Otherwise ignore output error conditioned signal.
14. rub-out signal processing units according to claim 1,
Wherein error handler is circuit.
15. rub-out signal processing units according to claim 1,
Wherein error handler is configured to receive rub-out signal from external equipment, and the rub-out signal indicates the mistake in external equipment
The condition of mistake；And
Wherein error handler is further configured to from external equipment receive and recovers signal, and the recovery signal designation is alleviated outside
The error condition or instruction alleviation of error condition in external equipment in equipment is possible.
16. rub-out signal processing units according to claim 1,
Wherein error handler is to run process on a processor；And
Wherein rub-out signal and recover signal by operate in from error handler identical processor or different processors
Another process is provided.
17. rub-out signal processing units according to claim 16,
Wherein rub-out signal indicates the error condition in another process；And
Wherein recover the signal designation error condition alleviated in another process or the alleviation for indicating the error condition in another process
It is possible.
18. rub-out signal processing units according to claim 16,
Wherein process and another process operate in identical processor core in the heart.
19. rub-out signal processing equipments, are configured to：If from receive rub-out signal given time delay in fault processing
Equipment is not received by recovering signal, then the rub-out signal of output indication error condition in response to the error condition in equipment；
And in response to alleviation error condition or if it is possible to alleviate error condition, output indication is alleviated or may alleviate mistake
The recovery signal of condition.
20. rub-out signal processing equipments according to claim 19,
It is further configured to recover signal according to the first communication protocol output error signal and according to the output of the second communication protocol, its
In the first communication protocol and the second communication protocol be different.
21. rub-out signal processing equipments according to claim 19,
Wherein equipment includes multiple process datatrons and safe monitor；
Wherein safe monitor is configured to transmit error condition to multiple process datatrons；And
Each of which process datatron is configured to the error condition in response to being received and performs error routine；And
Wherein safe monitor is configured to depend on the result of the error routine performed by process datatron and export recovery signal.
22. rub-out signal processing equipments according to claim 21,
Wherein safe monitor is configured to：If at least for the process datatron of given quantity, by the process of the given quantity
The result of the error routine that datatron is performed corresponds to expected result, then output recovers signal；Otherwise ignore output and recover letter
Number.
23. rub-out signal processing equipments according to claim 21,
Wherein safe monitor is configured to：If at least one result correspondence of one of the error routine performed by process datatron
In expected result, then output recovers signal；Otherwise ignore output and recover signal.
24. rub-out signal processing equipments according to claim 21,
Wherein process datatron is configured so that the wrong example performed by the different process datatrons of the plurality of process datatron
Journey is mutually different.
25. rub-out signal processing equipments according to claim 21,
Wherein process datatron is to operate in the software process in different processor core.
26. rub-out signal processing equipments according to claim 21, further include：
Recover datatron, the recovery routine being configured on executive process datatron, the wrong example performed by these process datatrons
The result of journey does not correspond to expected result.
27. rub-out signal processing systems, including：
Equipment, is configured to：The rub-out signal of output indication error condition in response to the error condition in equipment；And in response to
Alleviate error condition or if it is possible to alleviate error condition, the recovery letter of error condition is alleviated or may be alleviated in output indication
Number；With
Rub-out signal processing unit, including the error handler for being configured to from equipment reception rub-out signal and recovering signal；And
Wherein error handler is further configured to：If from receive rub-out signal given time delay in fault processing
Machine is not received by recovering signal, then be based on the rub-out signal output error conditioned signal in response to receiving rub-out signal；Otherwise
Ignore output error conditioned signal.
28. rub-out signal processing systems according to claim 27,
Wherein equipment includes the first substrate that the second substrate separation with rub-out signal processing unit is opened.
29. rub-out signal processing units, including：
First input terminal；
Second input terminal；
Outlet terminal；With
Rub-out signal delay-level, is coupling between the first input terminal, the second input terminal and outlet terminal；And
Wherein rub-out signal delay-level is configured to：If no in the second input rub-out signal delay-level in time delay is given
Terminal receives from external equipment and indicates to alleviate the error condition or the possible mistake alleviated in external equipment of instruction in external equipment
The recovery signal of the condition of mistake, then in response to receiving the error condition that indicate in external equipment from external equipment in the first input terminal
Rub-out signal based on rub-out signal outlet terminal provide error condition signal；Otherwise ignore output error conditioned signal.
30. devices for being used for output error conditioned signal, wherein device are configured to receive the rub-out signal for indicating error condition；And
And
Wherein device is further configured to receive and indicates to alleviate error condition or indicate to alleviate the recovery signal of error condition；
And
Wherein device is further configured to：If from receive rub-out signal given time delay in device be not received by
Recover signal, then the rub-out signal output error conditioned signal is based in response to receiving rub-out signal；Otherwise ignore output error
Conditioned signal.
31. rub-out signal processing units, including：
Rub-out signal decoder stage, be configured to receive indicate error condition rub-out signal, decoding error signal and generation solve
The rub-out signal of code；
Recover signaling protocol detection level, be configured to receive instruction alleviation error condition or indicate to alleviate the recovery of error condition
Signal, decodes rule and recovers signal and generate decoded recovery signal to decode according to given communication protocol；With
Error condition signal generates level, is configured to：Automatic anti-fault mode request signal is generated based on decoded rub-out signal,
The automatic anti-fault mode request signal indicates request into automatic anti-fault pattern to external equipment；And if from connecing
Receive error condition signal generation level in the given time delay that decoded rub-out signal rises and be not received by decoded recovery
Signal, then export the automatic anti-fault mode request signal as error condition signal；Otherwise ignore output automatic anti-fault mould
Formula request signal.
32. methods for being used for output error conditioned signal, methods described include：
Receive the rub-out signal for indicating error condition；With
If being not received by indicating that alleviation error condition or instruction can within the given time delay from rub-out signal is received
The recovery signal of error condition can be alleviated, then the rub-out signal output error conditioned signal is based in response to receiving rub-out signal；
Otherwise ignore output error conditioned signal.
33. devices for being used for output error conditioned signal, described device include：
For receiving the unit of the rub-out signal for indicating error condition；With
If indicating to alleviate error condition or referring to for being not received by within the given time delay from rub-out signal is received
Show the recovery signal that may alleviate error condition, then the rub-out signal and output error condition are based in response to receiving rub-out signal
Signal；Otherwise ignore the unit of output error conditioned signal.
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US13/397,035 US8786424B2 (en) | 2012-02-15 | 2012-02-15 | Error signal handling unit, device and method for outputting an error condition signal |
| US13/397035 | 2012-02-15 | ||
| US13/662846 | 2012-10-29 | ||
| US13/662,846 US9218236B2 (en) | 2012-10-29 | 2012-10-29 | Error signal handling unit, device and method for outputting an error condition signal |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103257903A CN103257903A (en) | 2013-08-21 |
| CN103257903B true CN103257903B (en) | 2017-04-12 |
Family
ID=48915408
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310123959.XA Active CN103257903B (en) | 2012-02-15 | 2013-02-08 | Error signal processing unit, apparatus and method for outputting error condition signals |
Country Status (3)
| Country | Link |
|---|---|
| KR (2) | KR20130094263A (en) |
| CN (1) | CN103257903B (en) |
| DE (1) | DE102013202482A1 (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104149787B (en) * | 2014-06-12 | 2017-10-24 | 盛瑞传动股份有限公司 | A kind of Trouble Match method and system of automatic catch automobile |
| WO2016033629A2 (en) * | 2014-09-05 | 2016-03-10 | Fts Computertechnik Gmbh | Computer system and method for safety-critical applications |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JPS61106657U (en) * | 1984-12-18 | 1986-07-07 | ||
| CN1109985A (en) * | 1994-07-21 | 1995-10-11 | 张立平 | Anti-interference method for stabilizing output state of computer system |
| US6085132A (en) * | 1992-08-06 | 2000-07-04 | Hitachi, Ltd. | Control method and apparatus for diagnosing vehicles |
| CN101779193A (en) * | 2007-08-17 | 2010-07-14 | Nxp股份有限公司 | System for providing fault tolerance for at least one micro controller unit |
| CN101853192A (en) * | 2010-05-31 | 2010-10-06 | 华为技术有限公司 | Exception handling method and system, off-chip logic device and chip |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2002250248A (en) * | 2001-12-25 | 2002-09-06 | Hitachi Ltd | Method of vehicle diagnosis control |
-
2013
- 2013-02-08 CN CN201310123959.XA patent/CN103257903B/en active Active
- 2013-02-15 KR KR1020130016608A patent/KR20130094263A/en active Search and Examination
- 2013-02-15 DE DE201310202482 patent/DE102013202482A1/en active Pending
-
2015
- 2015-07-06 KR KR1020150096183A patent/KR101576848B1/en active IP Right Grant
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JPS61106657U (en) * | 1984-12-18 | 1986-07-07 | ||
| US6085132A (en) * | 1992-08-06 | 2000-07-04 | Hitachi, Ltd. | Control method and apparatus for diagnosing vehicles |
| CN1109985A (en) * | 1994-07-21 | 1995-10-11 | 张立平 | Anti-interference method for stabilizing output state of computer system |
| CN101779193A (en) * | 2007-08-17 | 2010-07-14 | Nxp股份有限公司 | System for providing fault tolerance for at least one micro controller unit |
| CN101853192A (en) * | 2010-05-31 | 2010-10-06 | 华为技术有限公司 | Exception handling method and system, off-chip logic device and chip |
Also Published As
| Publication number | Publication date |
|---|---|
| KR20130094263A (en) | 2013-08-23 |
| DE102013202482A1 (en) | 2013-08-22 |
| KR101576848B1 (en) | 2015-12-14 |
| KR20150086215A (en) | 2015-07-27 |
| CN103257903A (en) | 2013-08-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20080046603A1 (en) | Line Diagnostic Device, Bus System, Line Diagnostic Method, Bus System Control Method, and Line Diagnostic Program | |
| US10120772B2 (en) | Operation of I/O in a safe system | |
| US9645898B2 (en) | Storage control device and control device for detecting abnormality of signal line | |
| US8861370B2 (en) | System and method for testing a communications network having a central bus guardian (CBG) to detect a faulty condition associated with the CBG | |
| CN104977907B (en) | Fault-tolerance crash protection system and method | |
| JP2011043957A (en) | Fault monitoring circuit, semiconductor integrated circuit, and faulty part locating method | |
| CN104035536A (en) | Monitoring and reset control method of embedded system | |
| CN103257903B (en) | Error signal processing unit, apparatus and method for outputting error condition signals | |
| JP2006215938A (en) | Computer system, computer, io extension device, and connection recognition method for it | |
| US20170116066A1 (en) | Fault detecting system and method for server | |
| US5905875A (en) | Multiprocessor system connected by a duplicated system bus having a bus status notification line | |
| US7076588B2 (en) | High speed multiple ported bus interface control | |
| US9218236B2 (en) | Error signal handling unit, device and method for outputting an error condition signal | |
| EP3321814B1 (en) | Method and apparatus for handling outstanding interconnect transactions | |
| CN109491842B (en) | Signal pairing for module extension of fail-safe computing systems | |
| CN103137227A (en) | Software common mode failure detection system of nuclear power station security level DCS and control method thereof | |
| JP2009217435A (en) | Control method, information processing apparatus, and storage system | |
| US10515039B2 (en) | Vehicle USB hub system | |
| KR102290796B1 (en) | Method of automatically restarting ecu upon occurrence of lin communicatin errors | |
| CN107659413A (en) | Small communication devices | |
| US10303485B2 (en) | Control method for controlling a server system by means of a set of reset signals and a set of notification signals | |
| JP2009003729A (en) | Data processing system | |
| JP2806799B2 (en) | Information processing system | |
| JPS60110073A (en) | Data transmitter of multi-computer system | |
| JPH0454747A (en) | Data transfer system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |