DE1549475A1 - Information protection device in electronic data processing systems - Google Patents

Description

Information sharing facility in electronic data processing systems.

i ·

The invention relates to a device for protecting the information in electronic data processing systems against loss or destruction in the event of errors in the power supply

1 »

ß orgung.

Devices that supply power to certain electrical Monitor loads and in the event of a failure of the normal power supply certain measures, for example switching to make a certain Notatromqucllc or the like known per se. There are already in this context Proposals have been made aimed at certain components and when certain supply voltages fail

Assemblies to protect against destruction, also measures to

BATH ORIGINAL

-2-

009886/1666

Protection of information against destruction in the event of a supply voltage failure has already been specified. It This is partly about transistorized flip-flop circuits stored information. In these circuits, by inserting energy-independent storage elements, for example magnetic cores! Return of the supply voltage to the flip-flop memory elements again accept the information value assumed before the shutdown (DBP 1 134 710).

It has also been proposed to use the output signals of monitoring circuits in power supplies of data processing systems are built in, measures to be taken against the fact that, as long as the error persists, further Instructions are called up from the computer system (DAS 1 221 817),

All these known circuits and measures for the protection of components and information in the event of a complete failure or the Failure of certain supply voltages are not sufficient about the important information in a data processing system in the event of errors in the power supply device to protect that with a high probability of failure the cause of the error, i.e. after normal power supply conditions have been established, these systems are more accurate Interruption point can resume operations.

BATH ORIGINAL

0ocke.CE 056 009886/1668.,.

The object of the invention is therefore to provide a device in which, in almost all cases, complete protection of the information can be achieved. But in those cases where Full information protection is no longer possible for physical reasons, but partial protection is still achieved. which in many cases greatly reduces the difficulties arising from the destruction of information.

For a device for the protection of electronic data processing systems existing information against loss or destruction in the event of errors in the power supply the Inventive in that in a power supply device additional circuits are provided which are error-specific Generate control signals that are dependent on the time in which a supply voltage remains after an error has occurred can be kept within usable limits and the error-specific Initiate protective operations by eTneTTnfol · - " mation protection unit and at the end of its operation or at the same time switch on a shutdown sequence control with this.

This device has particular advantages in that the error detection circuits are combined into two groups are, of which the output signals of one set a first bistable switch, deosen output signal turns on the information protection device, whose operation end signal then the Shutdown sequence control starts and that the fault detection circuits of the other group have such a structure that they only

• 0 09886/1666 Docket GE 056 · 'BAD ORIGINAL _4_

Detect sudden voltage breakdowns and signals generate, which set a second bistable switch, whose Auegangesignal also immediately the shutdown sequence control turns on. Finally, the information protection device is advantageously designed in such a way that it consists of a control unit which generates timing signals that use a set of gate circuits to interconnect the important registers of the Central unit with the main memory for the protective storage of the director's content control, which also controls the setting address control and transfer of address information and undertake the protection storage of the information about the end state of the protection operation and that finally the control unit da8 operation end signal is generated, which causes the shutdown sequence control to be switched on.

An advantageous further development of the device according to the invention is characterized in that for the protection storage of the register information and the operation end status fixed, these individually assigned memory areas are assigned in the main memory, which have a fixed address generator, which the address of the first range and a counter that counts the

The addresses of the other areas and which of the Control unit is switched to be addressed.

Special advantages are also achieved through the protective storage dee Operation end states achieved, which by the information

_D ._ ",, 009886/1666 ^BA ° ° ^R ' ^G ' ^NAL

Docket GE 056 -5-

.jr.

an error indicator circuit, which applies the type of error, v H / and the counter reading of the counter is formed.

Based on an electronic circuit for monitoring the mains voltage and the supplied supply voltages, with a certain time sequence in the normal input and Shutdown and emergency shutdown of supply and Control voltages is observed, so the device of the invention is based on a device for processing error-specific Control signals derived from the power supply device. The processing of these control signals is carried out with the aim of storing the information in a data processing system that is sensitive to interference Ensure that the system fails in the event of a fault.

The invention can also be used successfully where certain parts of the control program, for example the microprogram, is kept in a certain place of the system's main memory, which is designed as a magnetic core memory. Machines using such a technique are particularly sensitive to faults in the power supply section, as any incorrect back storage of the microinstructions in the main memory would mean a loss of important tax information. That The same also applies in the case of normal switching on and off of the machine, since here a certain chronological sequence of switching on and from β maintaining »certain stresses must be taken into account.

■ ORIGINAL BATHROOM

Dpcket GE 056 -6-

009886/1666

The device of the invention therefore has particular advantages wherever it applies, in electronic data processing systems Information available against changes in supply voltages in normal switch-on and switch-off cases and in the event of irregularities in the power supply against loss protection.

The invention is described in more detail below with reference to an exemplary embodiment illustrated by drawings.

Show it:

Fig. 1 is the block diagram of a regulated and error

- 'monitored power supply device, - -

2 shows the block diagram of an arrangement for connection

the monitoring circuit s according to the invention ^;

3a-3b Circuits for reducing the voltage level in the event of a sudden Increase in output voltage and

4 shows the block diagram of a device for protection

of information according to the invention.

Principle of the invention;

Electronic data processing systems generally exist

from a central unit with a main memory, several _c

009886/1666 ^ _{0 0RIG} , _NAL

Docket GE 056 '-7-

local work memories, so-called registers, command control units and various arithmetic units, such a system also includes a number of peripheral devices, the so-called input / output devices, additional storage devices and devices for remote data transmission. The central unit controls all operations that are carried out in the system on the basis of the program instructions stored in the main memory.

Basically, all operations at a particular point in time are controlled exclusively by a few important registers in the central processing unit itself, whereas the main memory only contains the results of certain previous ones Operations, as well as instructions and data for already performed, current and future operations. Therefore it is essential for the error-free operation of a data processing system It is essential that both the content of the main memory and the important registers are protected against loss.

In the event of an unintended interruption of operation of the system due to a fault in the power supply, a broader protection of this system, represented on the basis of three points, is required:

Docket GE 056 -8-

0 0 98 86/1666 BAO original

1. Protection of the components and assemblies against destruction or damage (this point is not the subject of the invention but was only mentioned for the sake of completeness).

2. Protection of the information stored in the energy-independent main memory against loss or incorrect overwriting.

3. Protection (not possible in all cases) of the essential information (commands and data) in the important registers the central unit. In this context, essential information is understood to mean that information that is necessary for a later Continuation of the operations exactly at the point of interruption are essential if it is required that the Resumption of operations Repetitions of operations carried out before the interruption should be avoided as far as possible.

The protection of the information mentioned under 3 is more advantageous In the event of a partial or total voltage breakdown in the system in the event of a partial or total voltage breakdown, this is done in the energy-independent main memory can be transferred.

While by establishing a suitable sequential control for the Switching the voltages supplied by the power supply on and off a protection of the components against destruction or damage as well as the information stored in the main memory can be managed against loss or incorrect overwriting, depends the implementation of the protection of register contents in the central unit

Docket GE 056 ÖAD ORIGINAL ^ ₉ .

009886/1666

essentially depends on whether there is still enough time for the Perform certain transfer operations is in place. The period in question here extends from the time at which there was a fault in the power supply device has been recognized until the point in time at which one of the supply voltages emitted by the device has dropped so far, that it can no longer be used. Protection of information is therefore only possible if this time interval is large enough to cover the required number of memory cycles for storing away the essential register contents still to be carried out in the central unit.

A systematic investigation of possible errors and its causes shows that there are essentially 11 different cases there, of which in 9 cases a full protection of the information is possible is. In one case only partial protection is possible and in another case the protection is uncertain, so here im In the worst case, a loss of the register content must be expected.

The table below is intended to provide a brief overview give about these proportions.

.... BATH

Docket GE 056 -10-

009886/1686

J case
No. failure possible root cause TAB ELLE Explanation I. Yes information
in the main spei
cher safe. Registrar
hold
saved ι AC line voltage Recognition · reachable
Protection-
scope Components
safe It 1 rise Dehler in the control loop ti Yes Yes - 2 Gradual decline. Generator or lei
malfunction early fully Yes uncertain ti It 3 Waste suddenly
* Line interruption early fully • I ti Il critical tension early fully M. 4th Increase suddenly Actuator is short
closed Yes Yes it WUW 5 Increase gradually. Actuator developed
Short circuit immediately fully Yes ti dd Λ 6th Gradual decline. Actuator dev.
Idle operation immediately fully dd • I I * ft
Q 7th Waste suddenly Kurzechlues a. Output 8 of place fully ti It no non-critical tension immediately partly 8th rise Actuator is short
closed Yes Yes 9 Increase gradually Actuator dev. Short
Enough immediately fully ti "cn 10 Fall off gradually Actuator dev.
Idle operation immediately fully dd ti JV ^ 11 Waste suddenly Short circuit on
exit immediately fully uncertain Ο »
no immediately unge
know

The table shows that in the case of 11 in the event of a sudden fall non-critical voltage due to a short circuit in the output line, ζ. B. a destruction of the components and a loss of information in the main memory and in the important Registers can occur even if an immediate detection of the error is possible. .

By "critical stresses" are meant those tensions that if they are only applied to the circuits to be supplied, they can lead to the destruction or damage of certain components. On the other hand, "non-critical stresses" are the stresses whose Concern is necessary to prevent this possible destruction or damage. With an amplifier circuit ζ. B. is the bias or the voltage setting the operating point is the non-critical one, the voltage feeding the output power is the critical one Tension.

As the table further shows, there is only one in case no partial protection possible even if the power supply failure, in this case the sudden drop of a critical voltage, e.g. B. by a short circuit at the line output, is recognized immediately. A partial protection (i.e. only protection for the components and the Information in the main memory, but no storage of the important register contents), the result is that a critical tension collapses too quickly and therefore does not

■ · ■■ '· ■ _8AD

009886/1666

Docked GE 056 '-U-

enough time to relocate the important register contents is available in the main memory. In such a case, the aforementioned control sequence for the shutdown must be immediate be initiated, so that in this way at least the information located in the main memory is protected against loss will.

In the remaining nine cases, full protection can be provided for both the information in the important registers and in the main memory as well as for the components of the circuits.

The first three cases of the errors listed in * in the table concern those that are related to the AC mains voltage. Here, in particular, full protection is easily possible, there one mains-side fault on the power supply unit does not immediately result in a considerable collapse of the output equal voltages. The effect of the stabilization circuits and the filter and charging capacitors, which only cause a relatively slow drop in voltage allows, lasts long enough to cover the period from the early detection of the error to the uselessness of the Voltage to allow all protective operations to be carried out.

For the remaining six cases, the feasibility of protective operations which grant full protection, can be seen from the following:

BAD ORiGiNAL

Docket GE 056 .13-

009886/1666

1.) In all of these six cases, the error can occur

Monitoring circuits for overvoltage or undervoltage conditions be recognized. The decisive factor here are given limit values, whether they are exceeded or fallen below is used to detect the error.

2) As in these cases it is not a fast discharging one If there is a short circuit on the output capacitors, when the voltage level drops, the result is finite values the large time constants when discharging these capacitors.

3) By suitably dimensioning the capacitors and, if necessary, by overdimensioning the limit values for error detection in comparison to the real tolerance limits, it should be possible within certain predetermined limits that also under conditions imposed by the monitoring circuit The important registers of the central processing unit are regarded as overvoltage or undervoltage not lose their information content and the ways for the transfer of this information to the main memory still work reliably. A simple solution to this could be, for example, that the circuits of the registers and the transmission paths to the main memory are dimensioned in such a way that they are really able to cover a wide area Range of variation of the operating voltages to work reliably.

- · BAD ORIGINAL

Docket ge 056 00 9886/166 6 - ¹⁴ -

Since this would only affect the circuits mentioned, a general restriction of the voltage tolerances for the entire system can be avoided. An alternative solution could, for example, also consist in the important registers and their transmission paths to the main memory are swell with the aid of voltage are supplied. This can be done by removing these circuits from the rest of the system when an error is detected insulated and kept in their normal operating condition for a little longer. The special equipment for this could either consist of additional Energy storage devices such as capacitors or batteries exist, which are decoupled from the rest of the system by some diodes »·

A) In cases no. 4, 5, 8 and 9, the circumstances for the protective measures are somewhat more favorable than in cases no. 6 and 10. The reason for this is that in cases no. 4, 5, 8 and the amplitude of the faulty voltage is only in its rise phase, so that it falls during the shutdown and thus passes through the usable range again. This allows a little more time to complete the protection operations. In cases no. 4 and 8, however, the shutdown cannot be carried out with the aid of the actuators in the supply lines, since, as was assumed, they are affected by a short circuit «. In this case, however, it should be assumed that by lowering the voltage, the usable range of this voltage is passed through again, so that a sufficient Docket GE 056. 009886/1666 8ADORIG.NAL _ml i _m

long time interval can be provided for carrying out the protection operations. One solution to this problem would be for example, it is possible to have a relatively slow short-circuit path for discharging the energy storage devices Output capacitors is provided (Fig. 3a and b).

5) The essential information that is in the important registers of the central processing unit and are to be saved from loss by restoring them to the main memory can be divided into three categories, which are described below in the an-. increasing order of importance for the resumption and continuation of the operations after the fault has been eliminated are:

a) Information relating to the data material to be processed: original data, intermediate and final results processing and the like.

b) Information relating to addressing: » Addresses of the data sources and destinations, indices for the address modification, specifications of the input / Output and other peripheral devices and the like.

c) Information relating to the state of processing in the central unit: The local address of the current in instruction currently being executed, information on how far the instruction has been executed, contents of step

BAD ORIGINAL • Docket GE 056 00988 6/1688 .16-

'counters of all kinds that determine the state of time and

Register sequential control in the central unit and the like.

The protection operation of the register contents of the central processing unit should preferably start with the most important, in the order of category c) to category a). The one for protection The memory requirement required for such register contents in the main memory can be achieved with about 10 to 20 memory locations estimate roughly. With a suitable organization and control and with a storage cycle time of 2h 1 microsecond is generally sufficient less than 20 microseconds for the entire protective operation to save the registrants. The output energy storage (output encoders) for all voltages should therefore be chosen so that an effective time constant is achieved that the Drop in output voltage in the event of an error from the time of Alarm signaling (reaching a limit level) until it is actually unusable (reaching the no longer usable level) timed so that a time interval for the protective operations is achieved which is slightly longer than actually required is. ,

6) Once the protective operations have been completed, a Shutdown sequence are carried out in their essential characteristics has already been indicated and which then protects the components in the circuit of the system and the information content in the main memory and also causes the system to shut down.

009886/1666 bad original

Docket GE 056 -17-

Block structure and circuit

The block diagram in Fig. 1 shows the structural design of a regulated and fault-monitored power supply unit in which the principles of the sequence control for switching on and off in normal and fault cases are taken into account and on which the Invention based on circuitry. Explanations of this arrangement are given below, insofar as they are applicable to the Understanding of the invention are required;

The core of this arrangement is a logic circuit LOG, which processes the alarm signals AS 1 and AS 2 and the corresponding ones Control signals KS 1 and KS 2 for the controllable short-circuit paths K and the actuators SG generated. The alarm signals are in Uberwachungsschaitungen US 1 and US 2 generated, which the output supply voltages and the input AC mains voltage monitor. The monitoring circuit US 1 is . · Ο designed so that they exceed limit values of Detects output voltages and currents and whether the output voltages have fallen below. The monitoring circuit US is used for the early detection of errors in network change planning,. '

The power supply unit also has a supply voltage in each of the power supply units NG, which supplies filtered direct voltages at one output

Docket GE 056 0 0 9 8 8 6/1 6 θ 6 - ¹⁸

supplying line an input energy storage Cl, which the supply line assigned to it with a common Reference line, for example the earth line, bridged. In the longitudinal branch, d. H. In the line itself, there is an actuator SG, which is used to keep the set voltage conditions constant. At the output of each supply line, a further energy store C2 then bridges its output line with the common reference line. As FIG. 1 shows, a short-circuit path K is connected in parallel to each of the aforementioned energy stores, which is via a short-circuit transmitter can accelerate the discharge of this energy storage device.

The actuators SG, which in principle represent controllable series resistors to which a control signal is fed to the control input RE, have a second input via which the control signal KS 2 can be fed from the logic circuit. This signal causes the series resistance to be set to its maximum possible value, regardless of the control signal that is currently present. In this way, the energy storage device C2 is prevented from being discharged in the reverse direction in certain fault cases, for example via the power supply unit NG.

The monitoring circuit occurs depending on an error that occurs en US 1 or ÜS2 in activity and generate the Almrm-

SAD ORIGINAL Docket GE 056 009 886/1666 -19-

signals AS 1 or AS 2, which are transmitted via the alarm transmitter AG of the logic circuit which in turn takes the necessary measures aimed at normal level conditions for as long as possible to maintain the necessary protective measures for the rescue of Information can still be carried out as completely as possible. For a data processing system in connection with a power supply unit, for example according to FIG. 1, the block diagram in FIG. 2 now shows the special precautions that are advantageously taken to protect information in data processing systems should be.

This arrangement according to FIG. 2 contains four monitoring circuits ÜS1 to ÜS4, two of which, namely ÜS1 and ÜS2 already in context with the power supply device of Fig. 1 have been mentioned. The monitoring circuit USl contains monitoring circuits for detecting overvoltage and overcurrent as well as Undervoltage conditions on the output side of the power supply. A signal on the line Ll shows indicates that there is an error that was most likely caused by a component defect.

The monitoring circuit ÜS2 monitors the input side Mains AC voltage and is designed in such a way that it indicates errors in the mains line and the mains supply at an early stage. A Signal on line L2 indicates that it is a

0 0 9 8 8 6/1666. _B AD ORiG'NAl

Docket GE 056 -20-

Error is that occurred on the network of the device is. via the common OR circuit Ol are the Transmit signals on line Ll or L2 to the alarm transmitter AG, which, for example, can be designed as a bistable switch that operates via the output signal of the OR circuit Ol is set. The reset R of this switch can be done automatically after a specific, predeterminable time or else can be done manually.

If this alarm generator AG by an output signal of the OR circuit Oil has been set, it is on its output line L5 a control signal which instantly causes the electromagnetic switch EMS, for example a contactor, to open will. This signal on line L5 is also transmitted to the command control unit of the data processing system, so that the fetching or the execution of a new instruction or macro instruction can be prevented there.

The monitoring circuit ÜS3 is provided for the detection of sudden drops in the non-critical voltages VNK. A signal on the output line L3 of this circuit indicates that the error case no. 11, whereby according to the table there is no effective protection the information can be guaranteed is available.

The monitoring circuit ÜS4 is ultimately used for detection sudden drops in the critical voltages VK. The starting

BADORIGINAL DocketGE056 009886/1666 " ₂₁ _

signal of this circuit on the line L4 indicates that it is error case no. 7, with a safe shutdown. - ".

Storage of the important register contents is no longer feasible is. The two lines L3 and L4 are via the OR circuit O2 summarized, the output signal of which is a lock switch PLC switches on automatically or manually. In the on position, this switch transmits a control signal on line L9 to the AND circuit A1, which has two inputs. The second input of this AND circuit is connected to the output line L5 of the alarm generator AG * connected .. In the coincidence failure, the AND circuit A1 generates an output signal which is transmitted to the line L7 via an OR circuit O3. This signal is then used as the start signal for executing the shutdown sequence.

In the off position of the switch PLC transmits this an output signal to the AND circuit A2, which also has two inputs and the second input as well is connected to line L5. This AND gate gives when the two input signals are present at the same time a signal via the line L8, which * al · start signal for a protective operation sequence is used, as will be explained in more detail in connection with the explanation of FIG.

The OR circuit 03 mentioned «ready» has two inputs. The not yet explained input, which is connected to line L6

BAO ORIGWAL

ttod.tO.OM 009886/1666

Λ C / Q LH Vl is connected, receives a signal via this line, if from the special control unit for protective operations, which is shown in Fig. 4, the end of a protection operation sequence is shown.

The block circuit shown in FIG. 2 thus triggers the start of a protective operation sequence via the AND circuit A2. For cases no. 7 and 11, in which a partial or a likely complete destruction of the information must be expected, the AND circuit A1 is used to start the shutdown sequence is triggered immediately, thus destroying circuit components and losing the information in the .Main memory is avoided if possible. Regarding the monitoring circuits US3 and ÜS4 it should be noted that they in their simplest form can consist of a capacitive coupling, which can consist of their respective voltage line with the setting input of the switch PLC. Precautions only have to be taken to ensure that the differentiated pulse at the output of the capacitor has the correct polarity.

Another additional precaution on the power supply unit according to FIG. 1 still has to be taken in cases no. 4 or "8, in which a critical or non-critical voltage VK or VNK rises quite suddenly because there is a short slack in the actuator SG. In this case, as shown in FIG. 3a, there is an additional resistance RZ vorgeaehen, which is switched parallel to the Laatwideratand RL.

ORiQINAL

DocketGE056 009886/1686 -23-

This resistance results in an additional current IS, which the output voltage VK or VNK back into the permissible range lowers. The following considerations are decisive for the dimensioning of this additional resistor:

1) IS · Ri j = IL · Rmin or

2) IS = IL (Rmin / Ri),

where IL is the normal load current and Rmin is the minimum series resistance of the actuator. Ri here denotes the Internal resistance of the voltage source. From these relationships it follows that

3) RZ = V / IS = RL * Ri / Rmin; (V = VK or VNK) is.

Fig. 3b shows a possible solution for switching on the Additional resistor RZ in a circuit according to Fig. 3a, the sudden change in voltage VK or VNK itself-the Control of the controllable silicon rectifier SCR takes over. An amplifier may have to be added at point VS, which raises the differentiated impulse to the necessary level. Since the circuit is only for monitoring a voltage line is suitable, as many circuits of this type must be provided as to be monitored output voltage lines in the System are in place.

Docket GE 056 ® * ^u -24-

009886/166 6.

FIG. 4 now shows the essential block diagram of the arrangement which is used to carry out the protective operations necessary for the rescue of information must be carried out in the event of an error. The block diagram contains the additional control devices that are required for the Performing the operation are necessary. In Fig. 4 it can be seen that the important registers REG 1 to REG η of the central unit ZE are connected to the main memory MS of the system via gates Gl to Gn. The information in these registers can be done either directly via the manifold or indirectly via the The machine's accumulator registers are transferred to the main memory. In the main memory there are special areas for the content of the mentioned registers are reserved. The content, for example of the register REG3, is in the event of an error in the memory area B3 transfer. The registers REGl to REG η contain the data register, the accumulator register, the address register, the instruction and opcode register, the index register, the microinstruction address register and others. '

The time control for the transmission and protection storage these register contents are carried out by the protective operation controller SOS, which generates n + 1 timing signals ti to tn + 1. The timing ti, for example, opens the gate circuit Gl and thus transfers the content of the register REGl to the one provided for this purpose Memory area Bl in the main memory MS. The arrival

SAD L

Docket GE 056 -25-

009886/1666

This area is controlled with the help of a fixed address generator FAG, whose address information is transferred to the main memory via the gate circuit GF at time ti « The address information that this fixed address generator generates relates to the first memory location of the desired Area, e.g. B. Bl. The other memory locations in this area are then addressed via the counter Z, which the information about the memory requirement of a certain register via the Line LlQ gets communicated. The address information of the counter Z is via the gate circuit GZ when the corresponding timing ti to the main memory MS transmitters via the line LIl, the address is returned to Protection operation control unit SOS.

The circuit according to FIG. 4 also contains an error identification circuit FI which is controlled by the monitoring circuit USi controlled, an indicator for the type of error is generated. Like ^ the information from the counter Z, . at the time tn + 1 via the gate circuit Gn + 1 in the memory area BEZ dee main memory MS for storing the final state of a Protection operation transfer / i.

The operation of the arrangement of Fig. 4 begins with that The start signal for the implementation of a Protection sequence is received. After the start of the protection operation control unit SOS, it generates the control signals for which

009886/1666 «» «» ««.

Docket GE 056 '-26-

the timing signals ti to tn + 1, the incremental pulses for the Counter Z and the end of protection signal on line L6. If the central unit ZE is busy executing a microprogram control, then care must be taken be carried so that the control unit SOS waits until the execution of the microinstruction that has just been processed is complete is ended before it begins to generate the control pulses mentioned.

The counter Z 'should expediently be reset when the system is switched on again. The memory area BEZ, in which the final state of the protection operation is stored can be deleted, for example, if its content was read out for test or service purposes, Finally It should also be mentioned that it is beneficial to have power to all those parts of the system that are involved in the Protective operation are involved, to be carried out via an additional unit.

. _t SAD

Docket GE 056 -27

009886/1666

Claims (4)

Claims 1. Device for the protection of electronic data processing systems information against loss or destruction in the event of errors in the power supply, characterized in that additional circuits (US3, ÜS4. AG *, PLC; Fig. 2) are provided that generate error rs specific control signals (via L5, L7, L8) that are dependent on the time in the one supply voltage after the occurrence of a Error can still be kept within usable limits and initiate error-specific protective operations, by having an information protection unit (SOS, FAG, Z, Gi; Fig. 4) and after their operations end or at the same time use this to switch on a soundproofing sequence control. 2. Device according to claim 1, characterized in that the error detection circuits (USl, ÜS2 and ÜS3, ÜS4; Fig. Z) are combined into two groups, of which the output signals of the one (ÜSl, ÜS2) have a first bistable BATH 009886/1666 -28- Documents (Art. 7 g l ab ·. 2 no. L sentence 3 defe amendment gee. V. 4. 9.: 967i Set switch (AG) whose output signal then switches on the information protection unit (via L8), its operation end signal (via L6) then switches on the shutdown sequence control and that the error detection circuits of the other group (ÜS3, ÜS4) have such a structure that they detect sudden voltage breakdowns and generate control signals that create a second bistable switch (PLC) whose output signal (via L9) also immediately switches on the shutdown sequence control. 3. Device according to claim 2, characterized in that the information protection unit consists of a control unit (SOS; Fig. 4), which timing signals (ti to tn + 1) generated that a set of gates (Gl to Gn) to connect the important registers (Rl to Rn) of the Central unit (ZE) with the main memory (MS) for the protective storage of the register information control the also the setting of the address control (FAG, Z), the transmission of the address information (GF, GZ, ti) and the protective storage of the information about the final state carry out the protective operation (FI, Z, tn + 1) and that finally the control unit (SOS) generates the operation end signal, which (via L6) causes the sequence control to be switched on. 4. Device according to claim 3, characterized in that for the protective storage of the register information ([.RIj bis- 009886/1666 "**" ■ $ 154947 and the end of operation states fixed, individually assigned memory areas (B1 to BEZ; Fig. 4) are assigned in the main memory, which have a fixed address «· generator (FAG), which contains the address of the first area (Bl) sets and a counter (Z), which sets the addresses of the other areas (B2 to BEZ) and which of the Control unit (SOS) is switched on, be addressed. 5 · Device according to claim 4, characterized in that the each final state of the protective operation reached by the counter reading of the counter (Z) and by the information an error indicator circuit (FI; Fig. 4), which the type of Error indicating is formed. • ·' BATH Docket ge 056 009886/1686