KR102156541B1 - Method for determinig functional safety of timer and an electronic device performing the method - Google Patents

Abstract

In order to determine whether a function of a timer of an electronic apparatus is safe, provided is a method, which comprises the steps of: setting a target time to a first counter initialized to 0; setting the target time to a second counter initialized with a preset reference time; calculating a first value by subtracting the reference time from a value of the second counter per unit time; and determining the functional safety of the timer based on the first value and the value of the first counter.

Description

TECHNICAL FIELD The method of determining the functional safety of a timer, and an electronic device performing the method thereof.

The following embodiments relate to a technique for determining the functional safety of a timer, and more particularly, to a technique for determining the functional safety of a timer based on a comparison of a value of a counter and other values.

As technologies for Advanced Driver Assistance Systems (ADAS) or autonomous vehicles are being developed, the function to ISO 26262 is being emphasized. ISO 26262 is an international standard for functional safety in vehicles to implement functional safety. ISO 26262, along with a process model, defines the required activities, tangible and intangible evidence, and methods used in development and production.

An embodiment may provide a method for determining functional safety of a timer and an electronic device thereof.

An embodiment may provide a method and an electronic device for determining functional safety of a timer using a plurality of timers.

According to an aspect, a method of determining functional safety of a timer, performed by an electronic device, includes: setting a target time in a first counter initialized to 0, the target in a second counter initialized to a preset reference time Setting a time, calculating a first value obtained by subtracting the reference time from the value of the second counter per unit time, and determining the functional safety of the timer based on the first value and the value of the first counter It includes the step of.

The determining of the functional safety of the timer based on the first value and the value of the first counter may include outputting that there is an error in the function of the timer when the first value and the value of the first counter are not the same. It may include steps.

The method of determining the safety of the timer function may further include outputting an interrupt when the value of the first counter corresponds to the target time.

The unit time may be the same as the system clock.

The timer function safety determination method includes setting the target time to a third counter initialized with a preset second reference time, and a second value obtained by subtracting the second reference time from the value of the third counter for each unit time And determining the functional safety of the timer, the step of determining the functional safety of the timer based on the first value, the second value, and the value of the first counter. I can.

Determining the functional safety of the timer based on the first value, the second value, and the value of the first counter, when the first value, the second value, and the value of the first counter are different from each other, the It may include determining that there is an error in the function of the timer.

The electronic device may be included in a vehicle that supports an autonomous vehicle or an advanced driver assistance system.

According to another aspect, an electronic device for determining functional safety of a timer includes a memory in which a program for determining functional safety of a timer is recorded, and a processor that executes the program, wherein the program is 1 setting a target time in a counter, setting the target time in a second counter initialized with a preset reference time, calculating a first value by subtracting the reference time from the value of the second counter per unit time And determining functional safety of the timer based on the first value and the value of the first counter.

The determining of the functional safety of the timer based on the first value and the value of the first counter may include outputting that there is an error in the function of the timer when the first value and the value of the first counter are not the same. It may include steps.

The program comprises: setting the target time to a third counter initialized to a preset second reference time, and calculating a second value obtained by subtracting the second reference time from the value of the third counter for each unit time Further performing and determining the functional safety of the timer may include determining the functional safety of the timer based on the first value, the second value, and the value of the first counter.

Determining the functional safety of the timer based on the first value, the second value, and the value of the first counter, when the first value, the second value, and the value of the first counter are different from each other, the It may include determining that there is an error in the function of the timer.

The electronic device may be included in a vehicle that supports an autonomous vehicle or an advanced driver assistance system.

According to another aspect, a method of determining functional safety of a timer, performed by an electronic device, includes setting a target time to a first counter initialized to 0, transferring a value of the first counter every unit time Generating a target cumulative value by accumulating on the cumulative value, generating a verification value by applying a preset equation to the value of the first counter every unit time, and based on the target cumulative value and the verification value And determining the functional safety of the timer.

이고, 상기 m은 상기 제1 카운터의 값일 수 있다.The above equation is

And m may be the value of the first counter.

Determining the functional safety of the timer based on the target accumulation value and the verification value may include determining that there is an error in the function of the timer when the target accumulation value and the verification value are not the same. .

The method of determining the safety of the timer function may further include outputting an interrupt when the value of the first counter corresponds to the target time.

The unit time may be the same as the system clock.

The electronic device may be included in a vehicle that supports an autonomous vehicle or an advanced driver assistance system.

According to another aspect, an electronic device for determining functional safety of a timer includes a memory in which a program for determining functional safety of a timer is recorded, and a processor that executes the program, wherein the program is initialized to zero. Setting a target time to a first counter, generating a target accumulated value by accumulating the value of the first counter to a previous accumulated value for each unit time, and an equation preset to the value of the first counter for each unit time Generating a verification value by applying is performed, and determining functional safety of a timer based on the target accumulated value and the verification value.

A method for determining functional safety of a timer and an electronic device therefor can be provided.

A method of determining functional safety of a timer using a plurality of timers and an electronic device thereof may be provided.

1 illustrates a vehicle equipped with an electronic device according to an example.
2 is a block diagram of an electronic device for determining functional safety of a timer according to an exemplary embodiment.
3 is a flowchart of a method of determining functional safety of a timer according to an embodiment.
4 illustrates modules for determining functional safety of a timer according to an example.
5 is a timing chart of a first counter value, a second counter value, and a comparator value according to an example.
6 is a flowchart of a method of determining functional safety of a timer by additionally using a value of a third counter according to an example.
7 is a flowchart of a method of determining functional safety of a timer according to another exemplary embodiment.
8 illustrates modules for determining functional safety of a timer according to another example.
9 is a timing chart of a first counter value, a target cumulative value, and a verification value according to an example.

Hereinafter, exemplary embodiments will be described in detail with reference to the accompanying drawings. However, since various changes may be made to the embodiments, the scope of the rights of the patent application is not limited or limited by these embodiments. It should be understood that all changes, equivalents, or substitutes to the embodiments are included in the scope of the rights.

The terms used in the examples are used for illustrative purposes only and should not be interpreted as limiting. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present specification, terms such as "comprise" or "have" are intended to designate the presence of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification, but one or more other features. It is to be understood that the presence or addition of elements or numbers, steps, actions, components, parts, or combinations thereof, does not preclude in advance.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the embodiment belongs. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

In addition, in the description with reference to the accompanying drawings, the same reference numerals are assigned to the same components regardless of the reference numerals, and redundant descriptions thereof will be omitted. In describing the embodiments, when it is determined that a detailed description of related known technologies may unnecessarily obscure the subject matter of the embodiments, the detailed description thereof will be omitted.

1 illustrates a vehicle equipped with an electronic device according to an example.

According to an aspect, even in a situation where there is little or no input from a driver, the vehicle 100 may drive in an autonomous mode according to a recognized driving environment. The driving environment may be recognized through one or more sensors attached or installed on the vehicle 100. For example, one or more sensors may include a camera, LIDAR, radar, and voice recognition sensors, and are not limited to the examples described. The driving environment may include a road, a condition of a road, a type of a lane, the presence or absence of surrounding vehicles, a distance to a nearby vehicle, weather, the presence or absence of an obstacle, and the like, and is not limited to the examples described.

The vehicle 100 recognizes the driving environment and creates an autonomous driving route suitable for the driving environment. Autonomous vehicles control internal and external mechanical elements to follow the autonomous driving path. The vehicle 100 may periodically generate an autonomous driving route.

According to another aspect, the vehicle 100 may assist a driver's driving by using an Advanced Driver Assistance Systems (ADAS). ADAS is an Autonomous Emergency Braking (AEB) system that automatically reduces or stops the driver without stepping on the brake system in case of a collision risk, and Lane Keep Assist (Lane Keep Assist) that maintains the lane by adjusting the driving direction in case of lane departure. System: LKAS), Advanced Smart Cruise Control (ASCC), which maintains a distance from the vehicle in front while running at a predetermined speed, detects the risk of collision in blind spots and assists in changing lanes, supporting rear collision avoidance It includes a system (Active Blind Spot Detection: ABSD), an Around View Monitor (AVM), which visually shows the situation around the vehicle.

The electronic device 110 included in the vehicle 100 can control the mechanical device of the vehicle 100 to drive autonomously or assist the driver's driving, and can be used for ECUs and various types of controllers or sensors other than the described embodiments. Can be used. Since the electronic device 110 automatically controls the mechanical elements, the accuracy of the control is very important. For example, if control is performed at a timing different from the intention of the electronic device 110 due to a malfunction of the timer, it may lead to an accident. For example, if the control to decelerate the speed is performed at a late timing rather than an exact timing, it may lead to an accident.

Accordingly, before controlling a mechanical element, a method of determining whether the function of the timer is normal must be performed. The above is related to ISO 26262 or the international standard for functional safety in automobiles. ISO 26262 is an international standard for automotive functional safety established by ISO to prevent accidents caused by errors in the E/E (Electric & Electronic) system mounted on the vehicle 100. ISO 26262, along with a process model, defines the required activities, tangible and intangible evidence, and methods used in development and production.

A method of determining the functional safety of a timer using a plurality of timers or an additional structure instead of a single timer may be considered. The above methods will be described in detail with reference to FIGS. 2 to 9 below.

2 is a block diagram of an electronic device for determining functional safety of a timer according to an exemplary embodiment.

The electronic device 200 includes a communication unit 210, a processor 220, and a memory 230. For example, the electronic device 200 may be included in the vehicle 100 described above with reference to FIG. 1.

The communication unit 210 is connected to the processor 220 and the memory 230 to transmit and receive data. The communication unit 210 may be connected to other external devices to transmit and receive data. Hereinafter, the expression "transmitting/receiving A" may indicate transmitting/receiving "information or data representing A".

The communication unit 210 may be implemented as a circuit network in the electronic device 200. For example, the communication unit 210 may include an internal bus and an external bus. As another example, the communication unit 210 may be an element connecting the electronic device 200 and an external device. The communication unit 210 may be an interface. The communication unit 210 may receive data from an external device and transmit the data to the processor 220 and the memory 230.

The processor 220 processes data received by the communication unit 210 and data stored in the memory 230. The “processor” may be a data processing device implemented in hardware having a circuit having a physical structure for executing desired operations. For example, desired operations may include code or instructions included in a program. For example, a data processing device implemented in hardware is a microprocessor, a central processing unit, a processor core, a multi-core processor, and a multiprocessor. , Application-Specific Integrated Circuit (ASIC), and Field Programmable Gate Array (FPGA).

The processor 220 executes computer-readable code (eg, software) stored in a memory (eg, memory 230) and instructions induced by the processor 220.

The memory 230 stores data received by the communication unit 210 and data processed by the processor 220. For example, the memory 230 may store a program (or application or software). The stored program may be a set of syntaxes that are coded to determine the functional safety of the timer and executed by the processor 220.

According to an aspect, the memory 230 may include one or more volatile memories, nonvolatile memories and random access memories (RAM), flash memories, hard disk drives, and optical disk drives.

The memory 230 stores an instruction set (eg, software) for operating the electronic device 200. An instruction set for operating the electronic device 200 is executed by the processor 220.

The communication unit 210, the processor 220, and the memory 230 will be described in detail below with reference to FIGS. 3 to 9.

3 is a flowchart of a method of determining functional safety of a timer according to an embodiment.

The steps 310 to 360 below are performed by the electronic device 200 described above with reference to FIG. 2.

In step 310, the electronic device 200 sets a target time to the first counter initialized to zero. The target time may vary depending on the task in which the timer is to be operated. A plurality of tasks may be scheduled through an operating system (OS) that operates the electronic device 200. For example, when 3 seconds are required to perform the first task, 3 seconds may be set in the first counter for the first task. When 3 seconds have elapsed (ie, the timer is complete), the first counter generates an interrupt, and a new target time for the second task may be set.

After the target time is set in the first counter, the value of the first counter may increase each time the unit time elapses. The unit time may be a system clock.

In step 320, the electronic device 200 sets a target time to a second counter initialized to a preset reference time. The second counter may be a counter used to determine whether the value of the first counter is correct. For example, the reference time may be determined in units of seconds or based on unit time. The second counter does not directly generate an interrupt.

After the target time is set in the second counter, the value of the second counter may increase each time the unit time elapses.

Steps 310 and 320 may be performed independently and in parallel, and may be performed simultaneously.

In step 330, the electronic device 200 calculates a first value obtained by subtracting the reference time from the value of the second counter per unit time.

In step 340, the electronic device 200 determines functional safety of the timer based on the first value and the value of the first counter. For example, if the first value and the value of the first counter are not the same, it may be determined that the function of the timer is not secure.

In step 350, when there is an error in the timer, the electronic device 200 outputs that there is an error in the function of the timer.

In step 360, the electronic device 200 outputs an interrupt when the value of the first counter corresponds to the target time. If an interrupt is output, the task is terminated.

4 illustrates modules for determining functional safety of a timer according to an example.

According to one aspect, modules 400 for determining functional safety of a timer may be implemented using resources of the communication unit 210, the processor 220, and the memory 230. According to another aspect, modules 400 for determining functional safety of the timer may be implemented through respective circuits or devices.

Modules 400 for determining the functional safety of the timer include an External Interface & Register 410, a first counter 420, a second counter 430, and a comparator 440.

The External Interface & Register 410 is generally composed of registers for an APB interface and setting. The External Interface & Register 410 sets and operates the first counter 420 according to the register setting.

The first counter 420 increases the value of the first counter 420 until the set target time. For example, the value of the first counter 420 may increase by 1 for each unit time.

The second counter 430 increases the value of the second counter 430 up to the sum of the set target time and the reference time. For example, the value of the second counter 420 may increase by 1 for each unit time.

The comparator 440 determines the functional safety of the timer based on the value of the first counter 420 and the value of the second counter 430. The comparator 440 may determine the functional safety of the timer by calculating a first value obtained by subtracting the reference time from the value of the second counter 430 and determining whether the first value and the value of the first counter are the same.

5 is a timing chart of a first counter value, a second counter value, and a comparator value according to an example.

Each time the unit time increases, the value of the first counter and the value of the second counter increase, respectively. The unit time may be a clock inside the system.

For example, the reference time preset in the second counter may be 1 corresponding to one unit time.

In the period 510, the value of the first counter may be 1, and the value of the second counter may be 2. Since the reference time is 1, the first value is 1. Since the first value and the value of the first counter are each equal to 1, the function of the timer is determined to be safe.

6 is a flowchart of a method of determining functional safety of a timer by additionally using a value of a third counter according to an example.

Steps 610 and 620 below may be performed before step 340 described above with reference to FIG. 3 is performed. Step 610 may be performed simultaneously with steps 310 and 320.

In step 610, the electronic device 200 sets a target time to a third counter initialized to a preset second reference time. For example, if the first reference time is a time corresponding to one clock, the second reference time may be a time corresponding to two clocks.

In step 620, the electronic device 200 calculates a second value obtained by subtracting the second reference time from the value of the third counter per unit time.

Step 340 described above with reference to FIG. 3 includes step 630 below.

In step 630, the electronic device 200 determines the functional safety of the timer based on the first value, the second value, and the value of the first counter. When the first value, the second value, and the value of the first counter are different from each other, it may be determined that there is an error in the function of the timer. For example, when at least two of the first value, the second value, and the value of the first counter are the same, it may be determined that the function of the timer is safe. Based on the same values, the timer of the system can be operated.

7 is a flowchart of a method of determining functional safety of a timer according to another exemplary embodiment.

The steps 710 to 760 below are performed by the electronic device 200 described above with reference to FIG. 2.

In step 710, the electronic device 200 sets a target time to a first counter initialized to zero.

In step 720, the electronic device 200 generates a target cumulative value by accumulating the value of the first counter to the previous cumulative value every unit time. For example, if the value of the first counter is 3 and the previous cumulative value is 3, the target cumulative value is 6.

In step 730, the electronic device 200 generates a verification value by applying a preset equation to the value of the first counter every unit time. The equation may be [Equation 1] below.

[Equation 1]

m may be the value of the first counter.

In step 740, the electronic device 200 determines functional safety of the timer based on the target accumulated value and the verification value. For example, if the target accumulated value and the verification value are not the same, it may be determined that there is an error in the function of the timer.

In step 750, when there is an error in the timer, the electronic device 200 outputs that there is an error in the function of the timer.

In step 760, when the value of the first counter corresponds to the target time, the electronic device 200 outputs an interrupt. If an interrupt is output, the task is terminated.

8 illustrates modules for determining functional safety of a timer according to another example.

According to an aspect, modules 800 for determining functional safety of a timer may be implemented using resources of the communication unit 210, the processor 220, and the memory 230. According to another aspect, modules 800 for determining functional safety of the timer may be implemented through respective circuits or devices.

Modules 800 for determining the functional safety of the timer include an external interface & register 810, a first counter 820, a calculator 830, an accumulator 840, and a comparator 850.

The External Interface & Register 810 may correspond to the External Interface & Register 410, and the first counter 820 may correspond to the first counter 420.

The calculator 830 generates a verification value by applying a preset equation to the value of the first counter.

The accumulator 840 generates a target cumulative value by accumulating the value of the first counter to the previous cumulative value.

The comparator 850 compares the target accumulation value and the verification value, and if the target accumulation value and the verification value are not the same, it is determined that there is an error in the function of the timer.

9 is a timing chart of a first counter value, a target accumulation value, and a verification value according to an example.

Each time the unit time increases, the value of the first counter increases.

In the first section 910, the value of the first counter is 1, and the value of the previous accumulator is 0. The target cumulative value calculated based on this is 1 and the verification value is 1, so they are the same. Since the target accumulated value and the verification value are the same, it may be determined that the function of the timer is safe.

In the second interval 920, the value of the first counter is 2, and the value of the previous accumulator is 1. The target cumulative value calculated based on this is 3 and the verification value is 3, so they are the same. Since the target accumulated value and the verification value are the same, it may be determined that the function of the timer is safe.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operation of the embodiment, and vice versa.

The software may include a computer program, code, instructions, or a combination of one or more of these, configuring the processing unit to behave as desired or processed independently or collectively. You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. , Or may be permanently or temporarily embodyed in a transmitted signal wave. The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

As described above, although the embodiments have been described by the limited drawings, a person of ordinary skill in the art can apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order from the described method, and/or components such as a system, structure, device, circuit, etc. described are combined or combined in a form different from the described method, or other components Alternatively, even if substituted or substituted by an equivalent, an appropriate result can be achieved.

Therefore, other implementations, other embodiments and claims and equivalents fall within the scope of the following claims.

200: electronic device
210: communication department
220: processor
230: memory

Claims (20)

A method of determining the functional safety of a timer, performed by an electronic device, includes:
Setting a target time to a first counter initialized to zero;
Setting the target time to a second counter initialized with a preset reference time;
Calculating a first value obtained by subtracting the reference time from the value of the second counter for each unit time; And
Determining functional safety of a timer based on the first value and the value of the first counter
Containing,
How to determine the functional safety of the timer.
The method of claim 1,
Determining functional safety of the timer based on the first value and the value of the first counter,
Outputting that there is an error in the function of the timer when the first value and the value of the first counter are not the same
Containing,
How to determine the functional safety of the timer.
The method of claim 1,
Outputting an interrupt when the value of the first counter corresponds to the target time
Further comprising,
How to determine the functional safety of the timer.
The method of claim 1,
The unit time is the same as the system clock,
How to determine the functional safety of the timer.
The method of claim 1,
Setting the target time to a third counter initialized with a preset second reference time; And
Calculating a second value obtained by subtracting the second reference time from the value of the third counter per unit time
Including more,
Determining the functional safety of the timer,
Determining functional safety of a timer based on the first value, the second value, and the value of the first counter
Containing,
How to determine the functional safety of the timer.
The method of claim 5,
Determining functional safety of a timer based on the first value, the second value, and the value of the first counter,
Determining that there is an error in the function of the timer when the first value, the second value, and the value of the first counter are different from each other
Containing,
How to determine the functional safety of the timer.
The method of claim 1,
The electronic device is included in a vehicle supporting an autonomous vehicle or an advanced driver assistance system,
How to determine the functional safety of the timer.
A computer-readable recording medium containing a program for performing the method of claim 1.
The electronic device that determines the functional safety of the timer,
A memory in which a program for determining the functional safety of the timer is recorded; And
Processor that executes the above program
Including,
The above program,
Setting a target time to a first counter initialized to zero;
Setting the target time to a second counter initialized with a preset reference time;
Calculating a first value obtained by subtracting the reference time from the value of the second counter for each unit time; And
Determining functional safety of a timer based on the first value and the value of the first counter
To do,
Electronic device.
The method of claim 9,
Determining functional safety of the timer based on the first value and the value of the first counter,
Outputting that there is an error in the function of the timer when the first value and the value of the first counter are not the same
Containing,
Electronic device.
The method of claim 9,
The above program,
Setting the target time to a third counter initialized with a preset second reference time; And
Calculating a second value obtained by subtracting the second reference time from the value of the third counter per unit time
Do more,
Determining the functional safety of the timer,
Determining functional safety of a timer based on the first value, the second value, and the value of the first counter
Containing,
Electronic device.
The method of claim 11,
Determining functional safety of a timer based on the first value, the second value, and the value of the first counter,
Determining that there is an error in the function of the timer when the first value, the second value, and the value of the first counter are different from each other
Containing,
Electronic device.
The method of claim 9,
The electronic device is included in a vehicle supporting an autonomous vehicle or an advanced driver assistance system,
Electronic device.
A method of determining the functional safety of a timer, performed by an electronic device, includes:
Setting a target time to a first counter initialized to zero;
Generating a target cumulative value by accumulating the value of the first counter to a previous cumulative value every unit time;
Generating a verification value by applying a preset equation to the value of the first counter every unit time; And
Determining functional safety of a timer based on the target accumulated value and the verification value
Containing,
How to determine the functional safety of the timer.
The method of claim 14,
The above equation is

ego,
M is the value of the first counter,
How to determine the functional safety of the timer.
The method of claim 15,
Determining the functional safety of the timer based on the target accumulated value and the verification value,
Determining that there is an error in the function of the timer when the target accumulated value and the verification value are not the same
Containing,
How to determine the functional safety of the timer.
The method of claim 14,
Outputting an interrupt when the value of the first counter corresponds to the target time
Further comprising,
How to determine the functional safety of the timer.
The method of claim 14,
The unit time is the same as the system clock,
How to determine the functional safety of the timer.
The method of claim 14,
The electronic device is included in a vehicle supporting an autonomous vehicle or an advanced driver assistance system,
How to determine the functional safety of the timer.
The electronic device that determines the functional safety of the timer,
A memory in which a program for determining the functional safety of the timer is recorded; And
Processor that executes the above program
Including,
The above program,
Setting a target time to a first counter initialized to zero;
Generating a target cumulative value by accumulating the value of the first counter to a previous cumulative value every unit time;
Generating a verification value by applying a preset equation to the value of the first counter every unit time;
Determining functional safety of a timer based on the target accumulated value and the verification value
To do,
Electronic device.

Images