Redundant computing system and redundant computing method

A redundant computing system is composed of two systems: a first arithmetic processing unit (A-system) and a second arithmetic processing unit (B-system) having the same functions. A diagnosis control unit performs diagnosis of one system while the other system is performing arithmetic processing operation. The diagnosis control unit controls the input to the first and second arithmetic processing units by way of an input control unit according to the diagnosis operation, and an output control unit controls the output from the first and second arithmetic processing units according to the diagnosis result. After termination of the diagnosis, a value is copied from a storage unit of the system which has not been diagnosed to a storage unit of the system which has been diagnosed, and the redundant computing system resumes the redundant operation.

Unified, workload-optimized, adaptive ras for hybrid systems

A method, system, and computer program product for maintaining reliability in a computer system. In an example embodiment, the method includes managing workloads on a first processor with a first processor architecture by an agent process executing on a second processor with a second processor architecture. The method proceeds by activating redundant computation on the second processor by the agent process. The method continues by performing a same computation from a workload of the workloads at least twice. Finally, the method includes comparing results of the same computation. In this embodiment the first processor is coupled the second processor by a network, and the first processor architecture and second processor architecture are different architectures.

Information processing apparatus, information processing system, method of detecting sign of abnormality in information processing apparatus, and abnormality sign detecting program

A synchronization controller has a synchronization determiner for determining a synchronization deviation in a CPU, an abnormality sign related information obtainer for obtaining abnormality sign related information on the basis of transaction monitoring information, and an abnormality determiner, when there is a synchronization deviation, for determining the presence/absence of a sign of abnormality in the CPU on the basis of the abnormality sign related information.

Unified, workload-optimized, adaptive ras for hybrid systems

A method, system, and computer program product for maintaining reliability in a computer system. In an example embodiment, the method includes managing workloads on a first processor with a first processor architecture by an agent process executing on a second processor with a second processor architecture. The method proceeds by activating redundant computation on the second processor by the agent process. The method continues by performing a same computation from a workload of the workloads at least twice. Finally, the method includes comparing results of the same computation. In this embodiment the first processor is coupled the second processor by a network, and the first processor architecture and second processor architecture are different architectures.

Multi-core decompression of block coded video data

Apparatus for and a method of decompression of block coded video data in a multi-core processor. The processor cores decode respective coded groups of blocks of video data independently, in parallel and deblock respective decoded groups of blocks of video data independently and in parallel with the decode operations and with other deblock operations.

Constructing software delta updates for controller software and abnormality detection based on toolchain

Disclosed embodiments relate to generating an update package for updating software on an Electronic Control Unit (ECU) in a vehicle. Operations may include accessing a plurality of attributes of a software update to be stored on the ECU in the vehicle; accessing a corresponding plurality of attributes of current software stored on the ECU in the vehicle; comparing the plurality of attributes with the corresponding plurality of attributes; generating a delta file representing differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison; and providing the delta file to the ECU, wherein the delta file is configured to be processed by startup code in the ECU that enables the delta file to execute in the ECU in the vehicle.

Detecting anomalies using real-time ecu processing activity

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified.

Self-healing learning system for one or more vehicles

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update.

Self-healing learning system for one or more controllers

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update.

HOT UPDATES TO CONTROLLER SOFTWARE USING TOOL CHAIN

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU. 120-. (canceled)21. A non-transitory computer-readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for performing changes to current controller software , the operations comprising:receiving a multidimensional delta file at a controller;storing, while the controller is operating, the multidimensional delta file in a first location of a single memory of the controller while simultaneously executing a code segment of the current controller software stored in a second location of the single memory, wherein the multidimensional delta file is stored in an additive manner adjacent to the current controller software in the single memory; andupdating addresses associated with the single memory based on the multidimensional delta file, without interrupting the execution of the code segment currently being executed and without modifying the code segment currently being executed, wherein the updating causes a software update to the current controller software, the software update being operable prior to rebooting the controller.22. The non-transitory computer-readable medium of claim 21 , wherein the multidimensional delta file is the product of ...

SYSTEMS AND METHODS FOR SAFETY ANALYSIS INCLUDING CONSIDERATION OF DEPENDENT FAILURES

A method for performing safety analysis includes determination of diagnostic coverage of safety mechanisms. The method includes considering the estimation of failure rapture for different scenario and potential sources of failure. The method includes considering and quantifying the effect of dependent failures that arise from other errors that may be already accounted for by existing safety mechanisms. 1. A method for performing functional safety analysis on a system with multiple processing units , wherein the system includes a comparator to compare data from a first core with data from a second core , the method comprising:obtaining or accessing, by one or more computing devices, description information regarding the system;determining, by the one or more computing devices, one or more failure modes (FMs) of the system from the description information;determining, by the one or more computing devices, one or more dependent failure initiators (DFIs) from the FMs;determining, by the one or more computing devices, a portion (_ideal_DC) of the one or more DFIs covered by core comparison without consideration of dependent failures;determining, by the one or more computing devices, a portion (p) of the one or more DFIs that can potentially lead to dependent failure;determining, by the one or more computing devices, a portion (NDF) of the one or more DFIs that cannot lead to dependent failure;determining, by the one or more computing devices, from the portion of the one or more DFIs that can lead to dependent failure, the coverage (K) provided by safety mechanisms other than core comparison; anddetermining, by the one or more computing devices, a diagnostic coverage (DC) of FMs provided by core comparison and other safety mechanisms.2. The method of claim 1 , wherein the obtained description information indicates the system includes a single DFI and wherein the diagnostic coverage DC for the system is determined by the one or more processing devices according to the ...

DETECTING ANOMALIES USING REAL-TIME CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:receiving first data representing real-time processing activity of a controller;receiving second data relating to processing activity of at least one other controller;comparing the first data with the second data to identify, based on a deviation between the first data and the second data, at least one anomaly associated with the real-time processing activity of the controller; andwhen the at least one anomaly is identified based on the deviation, sending a delta file to the controller, the delta file being configured to change software on a single memory component of the controller from a first version to a second version.22. The non-transitory computer readable medium of claim 21 , wherein the delta file comprises at least one position-independent executable code segment.23. The non-transitory computer readable medium of claim 22 , wherein the delta file is configured to change the software on the single memory component of the controller by linking execution of the at least one position-independent executable code segment to execution of the software on the single memory component.24. The non-transitory computer readable medium of claim 21 , wherein the delta file is ...

HOT UPDATES TO CONTROLLER SOFTWARE USING TOOL CHAIN

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU softwares; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for performing changes to current software while a controller is operating , comprising: 'wherein one or more of the plurality of dimensions are generated based on identified differences between a plurality of attributes of a software change for the controller and a corresponding plurality of attributes of the current software stored on the controller;', 'receiving, at the controller while the controller is operating, a multidimensional delta file, the multidimensional delta file having a plurality of dimensions,'}storing, while the controller is operating, the multidimensional delta file in an available memory location in a single memory of the controller while simultaneously executing a code segment of existing code from the current software stored on the controller; andupdating a plurality of memory addresses associated with the single memory of the controller based on the multidimensional delta file and without interrupting the execution of the code segment currently being executed, and without modifying the code segment currently ...

ORCHESTRATOR REPORTING OF PROBABILITY OF DOWNTIME FROM MACHINE LEARNING PROCESS

Disclosed embodiments relate to reporting Electronic Control Unit (ECU) errors or faults to a remote monitoring server. Operations may include receiving operational data from a plurality of ECUs in the vehicle, the operational data being indicative of a plurality of runtime attributes of the plurality of ECUs; generating, through a machine learning process, a statistical model of the operational data; receiving live, runtime updates from the plurality of ECUs in the communications network of the vehicle; identifying an ECU error associated with an ECU in the communications network of the vehicle, the ECU error being determined by a comparison of the live, runtime updates with the statistical model of the operational data to identify at least one deviation from the operational data; and wirelessly sending a report to the remote monitoring server based on the live, runtime updates, the report identifying the ECU and the identified ECU error. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for reporting and remediating controller errors or faults , comprising:receiving operational data from a plurality of controllers in a communications network, the operational data being indicative of a plurality of runtime attributes of the plurality of controllers;generating a statistical model of the operational data based on the plurality of runtime attributes;receiving live, runtime updates from the plurality of controllers in the communications network;identifying, based on the live, runtime updates, an error associated with a controller in the communications network, the error being determined by a comparison of the live, runtime updates with the statistical model of the operational data to identify at least one deviation;determining a probability of downtime for the plurality of ECUs based on the operational data and the live, runtime ...

CIRCUIT DEVICE, DISPLAY CONTROL SYSTEM, ELECTRONIC APPARATUS, AND MOBILE UNIT

A circuit device includes an interface circuit that receives image data and information for image check and a processing circuit that performs image check processing. The information for image check includes information for designating an image check method for a region to be subjected to image check and position information of the region to be subjected to image check. The processing circuit performs the image check processing on the image data of the region to be subjected to image check specified by the position information, using the image check method designated by the designation information. 1. A circuit device comprising:an interface circuit that receives image data and information for image check; anda processing circuit that performs image check processing, 'information for designating an image check method for a region to be subjected to image check and position information of the region to be subjected to image check, and', 'wherein the information for image check includesthe processing circuit performs the image check processing on the image data of the region to be subjected to image check specified by the position information, using the image check method designated by the designation information.2. The circuit device according to claim 1 ,wherein the interface circuit receives an expectation value of the image check processing after receiving the image data, andthe processing circuit performs the image check processing based on the expectation value.3. The circuit device according to claim 1 ,wherein the interface circuit receives an expectation value of the image check processing during a horizontal blanking period of the image data, andthe processing circuit performs the image check processing based on the expectation value.4. The circuit device according to claim 3 ,wherein the interface circuit receives fixed data as the expectation value, andthe processing circuit performs the image check processing by comparing the expectation value with ...

SELF-HEALING LEARNING SYSTEM FOR ONE OR MORE CONTROLLERS

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for providing software changes , comprising: the software vulnerability is identified based on a deviation of first activity data from an allowed envelope of at least one operational attribute; and', 'the allowed envelope is based on second activity data received from a plurality of controllers;, 'identifying a software vulnerability of a controller, whereindetermining a controller software change based on the identified software vulnerability, the controller software change being configured to adjust the controller from executing a first version of controller software to a second version of controller software; andsending, to the controller and based on the determining, a delta file configured to execute the controller software change on the controller to link execution of current code stored on the controller with execution of a segment of code from the delta file.22. The non-transitory computer readable medium of claim 21 , wherein ...

Selectable system controller for multi-processor computing systems

A system includes a computing system and a cable connector. The computing system includes a plurality of processors and an interconnect circuit configured to connect the plurality of processors to each other. The cable connector is configured to connect to the interconnect circuit and provide a channel identifier to the computing system, and the interconnect circuit is configured to set one of the plurality of processors as a system controller based on the channel identifier.

Identifying root causes of failures in a deployed distributed application using historical fine grained machine state data

Methods and arrangements for identifying root causes of system failures in a distributed system said method including: utilizing at least one processor to execute computer code that performs the steps of: recording, in a storage device, collected machine state data, wherein the collected machine state data are added to historical machine state data; creating, based on the historical machine state data, a healthy map model; detecting at least one failed machine state in the distributed system; comparing the failed machine state against the healthy map model; identifying, based on the comparison, at least one root cause of the failed machine state; and displaying, on a display device, a ranked list comprising the at least one root cause. Other variants and embodiments are broadly contemplated herein.

Verification of a vector execution unit design

A method for verification of a vector execution unit design. The method includes issuing an instruction into a first instance and a second instance of a vector execution unit. The method includes issuing a random operand into a first lane of the first instance of the vector execution unit and into a second lane of the second instance of the vector execution unit. The method further includes receiving results from execution of the instruction and the random operand in both the first and the second instance of the vector execution unit and comparing the received results.

DETECTING ANOMALIES USING REAL-TIME CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:receiving data representing real-time processing activity of a controller;receiving comparable data relating to processing activity of at least one other controller deemed comparable in functionality to the controller;comparing the real-time processing activity data with the comparable data, to identify, based on a deviation between the real-time processing activity data and the comparable data, at least one anomaly in the real-time processing activity of the controller; and the control action includes changing software of a first version on the controller based on a delta file corresponding to a second version of the software on the controller, and', 'the delta file comprises position-independent code., 'implementing a control action for the controller when the at least one anomaly is identified based on the deviation; wherein22. The non-transitory computer readable medium of claim 21 , wherein the comparing comprises implementing a statistical model.23. The non-transitory computer readable medium of claim 21 , wherein the delta file is a multidimensional delta file.24. The non-transitory computer readable medium of claim 21 , wherein the delta file comprises at least ...

Constructing software delta updates for controller software and abnormality detection based on toolchain

Disclosed embodiments relate to generating an update package for updating software on an Electronic Control Unit (ECU) in a vehicle. Operations may include accessing a plurality of attributes of a software update to be stored on the ECU in the vehicle; accessing a corresponding plurality of attributes of current software stored on the ECU in the vehicle; comparing the plurality of attributes with the corresponding plurality of attributes; generating a delta file representing differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison; and providing the delta file to the ECU, wherein the delta file is configured to be processed by startup code in the ECU that enables the delta file to execute in the ECU in the vehicle.

ASSEMBLING DATA DELTAS IN CONTROLLERS AND MANAGING INTERDEPENDENCIES BETWEEN SOFTWARE VERSIONS IN CONTROLLERS USING TOOL CHAIN

Disclosed embodiments relate to perform operations for receiving and integrating a delta file in a vehicle. Operations may include receiving, at an Electronic Control Unit (ECU) in the vehicle, a delta file, the delta file comprising a plurality of deltas corresponding to a software update for software on the ECU and startup code for executing the delta file in the ECU; executing the delta file, based on the startup code, in the ECU; and updating memory addresses in the ECU to correspond to the plurality of deltas from the delta file.

Main processor error detection using checker processors

An apparatus comprises a main processor to execute a main stream of program instructions, two or more checker processors to execute respective checker streams of program instructions in parallel with each other, the checker streams corresponding to different portions of the main stream executed by the main processor, and error detection circuitry to detect an error when a mismatch is detected between an outcome of a given portion of the main stream executed on the main processor and an outcome of the corresponding checker stream executed on one of the plurality of checker processors. This approach enables high performance main processors 4 to be checked for errors with lower circuit area and power consumption overhead than a dual-core lockstep technique.

DETECTING ANOMALIES ONLINE USING CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring, in the vehicle, data representing real-time processing activity of the ECU accessing, in the vehicle, historical data relating to processing activity of the ECU, the historical data representing expected processing activity of the ECU; comparing, in the vehicle, the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer-readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:accessing real-time processing activity data of a first controller;accessing controller data represented by at least one of a model or a map developed through a machine learning or statistical analysis technique;comparing the real-time processing activity data with the controller data, to identify at least one anomaly in the real-time processing activity of the first controller; and the first version of the controller software; or', 'a second delta file., 'implementing a control action for the first controller based on the identification of the at least one anomaly, the control action comprising causing the first controller to adjust from executing a first version of controller software to a second version of controller software by using a first delta file corresponding to differences between the first and second versions of controller software, wherein the first delta file is stored on the first controller adjacent to either22. The non-transitory computer-readable medium of claim 21 , wherein the controller data is based on data from a second controller.23. The non-transitory computer-readable medium of claim ...

HARDWARE LOCKSTEP CHECKING WITHIN A FAULT DETECTION INTERVAL IN A SYSTEM ON CHIP

A method to check for redundancy in two or more data lines comprises receiving data on a first data line, computing a first cyclic redundancy check (CRC) value on the data of the first data line, performing an exclusive OR (XOR) function on the first CRC value with a stored memory value, and updating the stored memory value with a result of the XOR function, and repeating on additional data lines until a last line is processed such that an error is indicated if a final stored memory value is not zero. An apparatus to check that two cores are operating in lockstep comprises a first core comprising a first data checker, a second core comprising a second data checker, and a lockstep checker to compare an output of the first data checker with an output of the second data checker. 1. A method to check for redundancy in two or more data lines from a functional safety core of a multicore System on Chip (SoC) , the method comprising:receiving data on a first data line of the functional safety core;computing a first cyclic redundancy check (CRC) value on the data of the first data line;performing an exclusive OR (XOR) function on the first CRC value with a stored memory value; andupdating the stored memory value with a result of the XOR function;wherein said receiving, computing, performing, and updating is performed on additional data lines of the functional safety core until a last line is processed such that an error is indicated if a final stored memory value is not zero.2. The method of claim 1 , wherein the two or more data lines comprise cache lines.3. The method of claim 1 , wherein the two or more data lines comprise cache lines each comprising two half lines claim 1 , and wherein said receiving claim 1 , said computing claim 1 , said performing is applied to individual half lines.4. The method of claim 3 , wherein data on a half cache line is inverted or shifted prior to said computing to prevent two half cache lines of a same cache masking each other out.5. The ...

DETECTING ANOMALIES ONLINE USING HISTOGRAMS OF CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring, in the vehicle, data representing real-time processing activity of the ECU; accessing, in the vehicle, historical data relating to processing activity of the ECU, the historical data representing expected processing activity of the ECU; comparing, in the vehicle, the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:monitoring data representing real-time processing activity of a first controller;accessing historical data relating to processing activity of the controller, the historical data comprising data from a second controller;comparing the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the first controller; andimplementing a control action for the first controller when the at least one anomaly is identified;wherein software on the first controller is mapped to a plurality of functional units associated with a virtual file system.22. The non-transitory computer readable medium of claim 21 , wherein the control action comprises issuing a prompt to adjust the first controller from executing a first version of controller software to a second version of controller software.23. The non-transitory computer readable medium of claim 21 , further comprising determining a third controller that is interdependent on the first controller claim 21 , and wherein the control action further comprises issuing a prompt to adjust the third controller ...

ASSEMBLING DATA DELTAS IN CONTROLLERS AND MANAGING INTERDEPENDENCIES BETWEEN SOFTWARE VERSIONS IN CONTROLLERS USING TOOL CHAIN

Disclosed embodiments relate to perform operations for receiving and integrating a delta file in a vehicle. Operations may include receiving, at an Electronic Control Unit (ECU) in the vehicle, a delta file, the delta file comprising a plurality of deltas corresponding to a software update for software on the ECU and startup code for executing the delta file in the ECU; executing the delta file, based on the startup code, in the ECU; and updating memory addresses in the ECU to correspond to the plurality of deltas from the delta file. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for receiving and integrating a delta file into a first controller to address a security vulnerability , comprising: update a program counter of the first controller to execute an instruction contained in the delta file;', 'extract data from the delta file for storage on the first controller; and', 'link execution of at least one code segment of the delta file to execution of current controller software on the first controller;, 'receiving, at the first controller, the delta file for addressing the security vulnerability of the first controller, the delta file comprising a plurality of deltas corresponding to a software change for the first controller, at least a portion of the delta file being configured tostoring the delta file at a first memory location in a single memory of the first controller;executing the delta file at the first memory location of the first controller; andupdating memory addresses in the first controller to correspond to the plurality of deltas from the delta file while allowing the first controller to execute operations at a second memory location of the first controller.22. The non-transitory computer readable medium of claim 21 , wherein the at least the portion of the delta file is further configured to link the delta file ...

Method and device for displaying a course of a process of at least one railway safety unit, and railway safety system having such a device

A method displays a course of a process of at least one railway safety unit. While using at least one device control, process data supplied by the at least one railway safety unit, are converted by dual-channel processing into first and second image data of the course of the process to be displayed. The image data are output to be displayed on a data display unit. In order to simplify the displaying of the course of the process, a pair of display spectacles having a first and a second display is used as a data display unit. The first display displays a first representation of the first image data delivered thereto that is visually detectable by the right eye, and the second display displays a second representation of the second image data delivered thereto that is visually detectable by the left eye.

Circuit for controlling an acceleration, braking and steering system of a vehicle

A circuit for controlling an acceleration, braking and steering system of a vehicle having at least two separate motors for actuating the acceleration and braking system, at least two separate motors for actuating the steering system and at least one electronic control unit for controlling the motors. The control unit comprises three identical CPUs and one programmable logic component. Each of the CPUs generates control signals for the motors depending on input control signals and sensor signals of the motors and forwards these control signals to the programmable logic component. The programmable logic component, depending on its programming, forwards the control signals of one of the CPUs to the motors.

ROLL BACK OF DATA DELTA UPDATES

Disclosed embodiments relate to adjusting vehicle Electronic Control Unit (ECU) software versions. Operations may include receiving a prompt to adjust an ECU of a vehicle from executing a first version of ECU software to a second version of ECU software; configuring, in response to the prompt and based on a delta file corresponding to the second version of ECU software, the second version of ECU software on the ECU in the vehicle for execution; and configuring, in response to the prompt, the first version of ECU software on the ECU in the vehicle to become non-executable. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for adjusting software versions , comprising:receiving a prompt to adjust controller software from a first version to a second version;configuring, in response to the prompt and based on a multidimensional delta file constructed based on differences between dimensions of the first and second versions of controller software and comprising position independent code, the second version of controller software for execution on the controller, wherein the multidimensional delta file represents code changes to segments of current code on the controller; and 'updating memory addresses in a single memory component of the controller, wherein the single memory component in the controller is configured to store both the first and second versions of controller software.', 'configuring, in response to the prompt, the first version of controller software on the controller to become non-executable, wherein configuring the first version of controller software to become non-executable comprises22. The non-transitory computer readable medium of claim 21 , wherein the multidimensional delta file is configured to identify contents on the single memory component to delete.23. The non-transitory computer readable medium of claim 21 , ...

SELF-HEALING LEARNING SYSTEM FOR ONE OR MORE CONTROLLERS

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for automatically providing software changes , comprising:identifying a software vulnerability based on a deviation of activity data of a first controller from an allowed envelope of at least one operational attribute;identifying a controller software change based on the identified software vulnerability, wherein the identified controller software change is configured to adjust the first controller from executing a first version of controller software to a second version of controller software;sending, to the first controller, a first delta file configured based on the identified controller software change, wherein the first delta file is configured to cause the first version of controller software on the first controller to become non-executable;identifying a second controller determined to be similar to the first controller; andsending a second delta file, corresponding to the first delta file, to the second controller based on the ...

Data processing system having lockstep operation

A data processing system and methods for operating the same are disclosed. The method includes detecting a fault by comparing output signals from a first processing core and a second processing core, entering a safe mode based upon detecting the fault, completing transactions while in the safe mode, and determining whether the fault corresponds to a hard error. Based upon the fault corresponding to a hard error, one of processing cores is identified as a faulty core. The faulty core is inhibited from executing instructions and the other processing core is allowed to execute instructions.

OPPORTUNISTIC SOFTWARE UPDATES DURING SELECT OPERATIONAL MODES

Disclosed embodiments relate to opportunistically updating Electronic Control Unit (ECU) software in a vehicle. Operations may include receiving, at a controller in a vehicle, a wireless transmission indicating a need to update software running on at least one ECU in the vehicle; monitoring an operational status of the vehicle to determine whether the vehicle is in a first mode of operation in which an ECU software update is prohibited; delaying the ECU software update when the operational status is prohibited; continuing to monitor the operational status of the vehicle to determine whether the vehicle is in a second mode of operation in which the ECU software update is permitted; and enabling updating of the at least one ECU with the delayed ECU software update when it is determined that the vehicle is in the second mode of operations. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for opportunistically updating controller software , the operations comprising:receiving, at a controller, a prompt to change current software on the controller associated with a device;determining at a first time whether the device is in a first mode of operation;delaying a controller software change when the device is in the first mode of operation;determining at a second time whether the device is in a second mode of operation;accessing the delayed controller software change based on the device being determined to be in the second mode of operation, wherein the delayed controller software change comprises a delta file having at least one position-independent executable code segment; andimplementing the delayed controller software change on the controller when the device is in the second mode of operation, wherein implementing the delayed controller software change comprises linking the at least one position-independent executable code segment to ...

CONSTRUCTING SOFTWARE DELTA UPDATES FOR CONTROLLER SOFTWARE AND ABNORMALITY DETECTION BASED ON TOOLCHAIN

Disclosed embodiments relate to generating an update package for updating software on an Electronic Control Unit (ECU) in a vehicle. Operations may include accessing a plurality of attributes of a software update to be stored on the ECU in the vehicle; accessing a corresponding plurality of attributes of current software stored on the ECU in the vehicle; comparing the plurality of attributes with the corresponding plurality of attributes; generating a delta file representing differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison; and providing the delta file to the ECU, wherein the delta file is configured to be processed by startup code in the ECU that enables the delta file to execute in the ECU in the vehicle. 124-. (canceled)25. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for changing software on a controller , the operations comprising:accessing a delta file comprising position-independent code in response to a detected deviation of controller behavior from an acceptable operational envelope;configuring the position-independent code to execute on the controller; andproviding the delta file to the controller, wherein the controller is configured to link execution of current software on the controller to execution of an instruction contained in the delta file.26. The non-transitory computer readable medium of claim 25 , wherein the delta file is based on a comparison of the current software to a software change.27. The non-transitory computer readable medium of claim 26 , wherein the delta file represents differences between the current software and the software change.28. The non-transitory computer readable medium of claim 26 , wherein the comparison of the current software to the software change involves comparing attributes between the current software and the software ...

Detecting anomalies online using histograms of ECU processing activity

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring, in the vehicle, data representing real-time processing activity of the ECU; accessing, in the vehicle, historical data relating to processing activity of the ECU, the historical data representing expected processing activity of the ECU; comparing, in the vehicle, the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:monitoring data representing real-time processing activity of a controller;accessing historical data relating to processing activity of the controller, the historical data representing expected processing activity of the controller;comparing the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the controller; andimplementing a control action for the controller when the at least one anomaly is identified, wherein the control action includes issuing a prompt to adjust the controller from executing a first version of controller software to a second version of controller software;wherein software on the controller is mapped to a plurality of functional units, and the controller is configured to utilize a virtual file system to manage and track one or more versions of each of the plurality of functional units.22. The non-transitory computer readable medium of claim 21 , wherein:the controller is a first controller, andthe historical data comprises data from a second controller.23. The non-transitory computer readable medium of ...

MEMORY EVENT MITIGATION IN REDUNDANT SOFTWARE INSTALLATIONS

Systems and techniques for memory event mitigation in redundant software installations are presented. A system can initiate an event executed by a first software application and a second software application that corresponds to the first software application. First data associated with the first software application can be stored in a first data store and second data associated with the second software application can be stored in a second data store. The system can also compare a first check value for the first data associated with the event and a second check value for the second data associated with the event. Furthermore, the system can re-initiate the event executed by the first software application and the second software application in response to a determination that the first check value does not correspond to the second check value. 1. A system , comprising:a memory that stores computer executable components; an event component that initiates an event executed by a first software application and a second software application that corresponds to the first software application, wherein the event component stores first data associated with the first software application in a first data store and stores second data associated with the second software application in a second data store;', 'a comparison component that compares a first check value for the first data associated with the event and a second check value for the second data associated with the event; and', 'a mitigation component that re-initiates the event executed by the first software application and the second software application in response to a determination that the first check value does not correspond to the second check value., 'a processor that executes computer executable components stored in the memory, wherein the computer executable components comprise2. The system of claim 1 , wherein claim 1 , in response to re-initiation of the event claim 1 , the event component stores third data ...

Buffer Checker for Task Processing Fault Detection

A graphics processing system for operation with a data store, comprising: one or more processing units for processing tasks; a check unit operable to form a signature which is characteristic of an output from processing a task on a processing unit; and a fault detection unit operable to compare signatures formed at the check unit; wherein the graphics processing system is operable to process each task first and second times at the one or more processing units so as to, respectively, generate first and second processed outputs, the graphics processing system being configured to: write out the first processed output to the data store; read back the first processed output from the data store and form at the check unit a first signature which is characteristic of the first processed output as read back from the data store; form at the check unit a second signature which is characteristic of the second processed output; compare the first and second signatures at the fault detection unit; and raise a fault signal if the first and second signatures do not match.

DETECTING ANOMALIES USING REAL-TIME CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:monitoring data representing real-time processing activity of a controller;receiving comparable data relating to processing activity of at least one other controller deemed comparable in functionality to the controller;comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the controller; and software on the controller is mapped to a plurality of functional units, and the controller is configured to utilize a virtual file system (VFS) to manage and track one or more versions of each of the plurality of functional units, and', 'the control action includes updating memory addresses of one or more functional units managed by the VFS based on a delta file corresponding to a second version of the software on the controller, wherein the delta file comprises position-independent code., 'implementing a control action for the controller when the at least one anomaly is identified; wherein22. The non-transitory computer readable medium of claim 21 , wherein the control action includes issuing a prompt to adjust the controller from executing a first version of the software on the controller ...

Fault isolation and identification in versioned microservices

A method for identifying and isolating faults in versioned microservices includes a request replicator receiving an original request, and determining whether to replicate the original request. The request replicator replicates the original request creating one or more replicated requests, including a first replicated request. In an example, the request replicator dispatches the original request to a stable production system, and dispatches the first replicated request to a first modified production system. The stable production system produces a first reply to the original request. The first modified production system produces a second reply to the first replicated request. A fault detector performs a comparison of the second reply and the first reply and determines, based on the comparison, that the first modified production system has a verification status. Then, the stable production system is replaced with first modified production system.

SELF-HEALING LEARING SYSTEM FOR ONE OR MORE CONTROLLERS

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for automatically providing software changes , comprising:receiving controller activity data from at least one controller, the controller activity data corresponding to actual operation of the at least one controller;determining a software vulnerability affecting the at least one controller, the software vulnerability being determined based on a deviation between the received controller activity data and expected controller activity data;identifying a controller software change based on the determined software vulnerability; and the multi-dimensional delta file comprises position-independent code,', 'the software on the at least one controller is mapped to a plurality of functional units,', 'the at least one controller is configured to utilize a virtual file system (VFS) to manage and track one or more versions of each of the plurality of functional units, and', 'the identified controller software change comprises a prompt to adjust ...

HOT UPDATES TO CONTROLLER SOFTWARE USING TOOL CHAIN

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for performing changes to current controller software , comprising:receiving a multidimensional delta file at a controller;storing, while the controller is operating, the multidimensional delta file in a first location of a single memory of the controller while simultaneously executing a code segment of existing code of the current controller software stored in a second location of the single memory, wherein the multidimensional delta file is stored in an additive manner adjacent to the current controller software in the single memory; andupdating a plurality of addresses associated with the single memory based on the multidimensional delta file, without interrupting the execution of the code segment currently being executed and without modifying the code segment currently being executed, wherein the updating causes linking of execution of at least one code segment of the multidimensional delta file to the existing code of the current controller software.22. The non-transitory computer readable medium of claim 21 , wherein the ...

HOT UPDATES TO CONTROLLER SOFTWARE USING TOOL CHAIN

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for performing changes to current software while a controller is operating , comprising:receiving, at the controller while the controller is operating, a multidimensional delta file, the multidimensional delta file having a plurality of deltas,storing, while the controller is operating, the multidimensional delta file in a first memory location of a memory of the controller while simultaneously executing a code segment of existing code of the current software stored in a second memory location of the memory; andupdating a plurality of memory addresses associated with the memory of the controller to correspond to the plurality of deltas based on the multidimensional delta file, without interrupting the execution of the code segment currently being executed and without modifying the code segment currently being executed.22. The non-transitory computer readable medium of claim 21 , wherein the multidimensional delta file has a plurality of dimensions generated based on identified differences between a plurality of attributes of a software ...

DETECTING ANOMALIES USING REAL-TIME CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:receiving first data representing real-time processing activity of a controller;receiving second data relating to processing activity of at least one other controller;comparing the real-time processing activity data with the second data, to identify, based on a deviation between the real-time processing activity data and the second data, at least one anomaly in the real-time processing activity of the controller; andimplementing a control action for the controller when the at least one anomaly is identified based on the deviation; wherein the control action includes sending a delta file to the controller, the delta file being configured to change software on the controller to an updated version without interrupting a current operation of the controller.22. The non-transitory computer readable medium of claim 21 , the operations further comprising generating the delta file based on the identified deviation.23. The non-transitory computer readable medium of claim 21 , wherein the second data comprises data obtained in real-time from the at least one other controller.24. The non-transitory computer readable medium of claim 21 , wherein the delta file comprises position- ...

DETECTING ANOMALIES ONLINE USING HISTORICAL CONTROLLER PROCESSING ACTIVITY

Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring, in the vehicle, data representing real-time processing activity of the ECU; accessing, in the vehicle, historical data relating to processing activity of the ECU, the historical data representing expected processing activity of the ECU; comparing, in the vehicle, the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified. 120-. (canceled)21. A non-transitory computer-readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for identifying controller anomalies , comprising:accessing real-time processing activity data of a first controller;accessing historical data relating to processing activity, the historical data comprising data from a second controller;comparing the real-time processing activity data with the historical data, to identify at least one anomaly in the real-time processing activity of the first controller; and the first version of the controller software; or', 'a second delta file., 'implementing a control action for the first controller when the at least one anomaly is identified, the control action comprising issuing a prompt to adjust the first controller from executing a first version of controller software to a second version of controller software by using a first delta file corresponding to differences between the first and second versions of controller software, wherein the first delta file is stored on the first controller adjacent to either22. The non-transitory computer-readable medium of claim 21 , wherein the second delta file corresponds to differences between the first version of controller software and a third version of controller software.23. ...

PARALLEL PROCESSING SYSTEM RUNTIME STATE RELOAD

A parallel processing system includes at least three processors operating in parallel, state monitoring circuitry, and state reload circuitry. The state monitoring circuitry couples to the at least three parallel processors and is configured to monitor runtime states of the at least three parallel processors and identify a first processor of the at least three parallel processors having at least one runtime state error. The state reload circuitry couples to the at least three parallel processors and is configured to select a second processor of the at least three parallel processors for state reload, access a runtime state of the second processor, and load the runtime state of the second processor into the first processor. Monitoring and reload may be performed only on sub-systems of the at least three parallel processors. During reload, clocks and supply voltages of the processors may be altered. The state reload may relate to sub-systems. 120-. (canceled)21. A parallel processing system comprising:a plurality of processors configured for parallel operation, wherein the processors are associated with autonomous driving of a vehicle; 'identify a first processor of the plurality of processors having at least one runtime state error; and', 'state monitoring circuitry coupled to the processors, the state monitoring circuitry configured tostate reload circuitry coupled to the processors, the state reload circuitry configured to update a runtime state of the first processor based on one or more remaining processors of the plurality of processors.22. The parallel processing system of claim 21 , wherein to update the runtime state of the first processor claim 21 , the state reload circuitry is configured to:select a second processor of the one or more remaining processors; andload a particular runtime state of the second processor into the first processor as the runtime state.23. The parallel processing system of claim 22 , wherein the state reload circuitry is further ...

Monitoring device, fault-tolerant system, and control method

A monitoring device is mounted in each of a plurality of operational systems constituting a fault-tolerant system. The plurality of operational systems have an identical configuration including a processor system. The monitoring device includes a processor. The processor executes instruction to read data from a predetermined storage area in a memory of an accessory device to be monitored, connected to the processor system. The processor further executes instruction to compare the read data with reference data held in advance. The processor further executes instruction to separate the processor system connected to the accessory device to be monitored from the fault-tolerant system when the read data is different from the reference data.

SYSTEM AND METHOD FOR PROTECTING GPU MEMORY INSTRUCTIONS AGAINST FAULTS

A system and method for protecting memory instructions against faults are described. The system and method include converting the slave instructions to dummy operations, modifying memory arbiter to issue up to N master and N slave global/shared memory instructions per cycle, sending master memory requests to memory system, using slave requests for error checking, entering master requests to the GM/LM FIFO, storing slave requests in a register, and comparing the entered master requests with the stored slave requests. 120.-. (canceled)21. A method for protecting memory instructions against faults , the method comprising:selecting a memory instruction to issue, the memory instruction indicating a master instruction and a slave instruction to be executed in lockstep;performing at least one of an operand error check, a data error check, and a parity error check for the memory instruction;sending data to a data cache and providing a response from data cache to a plurality of single instruction multiple data (SIMD) processors of the master and slave instructions and check for parity errors in the plurality of SIMDs; andcompleting memory access for the memory instruction by returning data from the plurality of SIMDs the master instruction and the slave instruction.22. The method of claim 21 , wherein the data cache is one of a L1 data cache and a local data share (LDS).23. The method of claim 21 , further comprising passing an error check if there is no error.24. The method of claim 21 , further comprising replaying the master and slave instruction if an error check results in an error.25. The method of claim 21 , further comprising utilizing parity information on the master instructions using at least one error check logic.26. The method of claim 21 , further comprising executing the master instruction in a data cache.27. A system for protecting memory instructions against faults claim 21 , the system comprising:a memory arbiter configured to select a memory instruction to ...

ASSEMBLING DATA DELTAS IN CONTROLLERS AND MANAGING INTERDEPENDENCIES BETWEEN SOFTWARE VERSIONS IN CONTROLLERS USING TOOL CHAIN

Disclosed embodiments relate to perform operations for receiving and integrating a delta file in a vehicle. Operations may include receiving, at an Electronic Control Unit (ECU) in the vehicle, a delta file, the delta file comprising a plurality of deltas corresponding to a software update for software on the ECU and startup code for executing the delta file in the ECU; executing the delta file, based on the startup code, in the ECU; and updating memory addresses in the ECU to correspond to the plurality of deltas from the delta file. 120-. (canceled)21. A non-transitory computer-readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for receiving and integrating a delta file into a first controller , comprising: update a program counter of the first controller to execute an instruction contained in the delta file;', 'extract data from the delta file for storage on the first controller; and', 'link execution of at least one code segment of the delta file to execution of current controller software on the first controller;, 'receiving, at the first controller from a production toolchain, the delta file corresponding to a software change for the first controller, at least a portion of the delta file having code tostoring the delta file at a first memory location in a single memory of the first controller; andupdating memory addresses in the first controller to correspond to at least a portion of the delta file while allowing the first controller to execute operations at a second memory location of the first controller.22. The non-transitory computer-readable medium of claim 21 , the operations further comprising:identifying a relationship between the first controller and a second controller; andprompting a software change at the second controller based on the identified relationship.23. The non-transitory computer-readable medium of claim 22 , wherein identifying the relationship ...

Method and device for computing data models in safety-critical systems

A device for computing data models, in particular comprising the possibility to detect errors occurring during the computation, has at least two processing units, at least one of the at least two processing units being designed to compute a main data model as a function of at least one state of a system, at least one other of the at least two processing units being designed to compute, as a function of this at least one state of the system, an approximation data model associated with the main data model, the main data model comprising at least one property of the system as a first data model, the approximation data model comprising at least the same property of the system approximately as a second data model, a comparator unit being designed to compare a first result of a first computation of the main data model with a second result of a second computation of the approximation data model associated with the main data model, in order to determine information about a deviation between the first result and the second result, the comparator unit being designed to detect an error as a function of the information about the deviation if the deviation exceeds a maximum admissible deviation.

SELF-HEALING LEARNING SYSTEM FOR ONE OR MORE CONTROLLERS

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for automatically providing software changes , comprising:identifying a software vulnerability based on anomalous activity data of a controller;identifying a controller software change based on the identified software vulnerability, wherein the identified controller software change is configured to adjust the controller from executing a first version of controller software to a second version of controller software; andsending, to the controller, a delta file configured based on the identified controller software change, wherein the delta file is configured to cause the first version of controller software on the controller to become non-executable.22. The non-transitory computer readable medium of claim 21 , wherein a linked execution of current code and a segment of code contained in the delta file form a functional equivalent of a software update that is functioning prior to rebooting the controller.23. The non-transitory computer ...

MAINTAINING SYSTEM RELIABILITY IN A CPU WITH CO-PROCESSORS

A computer-implemented method is provided that is performed in a computer having a processor and multiple co-processors. The method includes launching a same set of operations in each of an original co-processor and a redundant co-processor, from among the multiple co-processors, to obtain respective execution signatures from the original co-processor and the redundant co-processor. The method further includes detecting an error in an execution of the set of operations by the original co-processor, by comparing the respective execution signatures. The method also includes designating the execution of the set of operations by the original co-processor as error-free and committing a result of the execution, responsive to identifying a match between the respective execution signatures. The method additionally includes performing an error recovery operation that replays the set of operations by the original co-processor and the redundant co-processor, responsive to identifying a mismatch between the respective execution signatures. 1. A computer-implemented method performed in a computer having a processor and multiple co-processors , the method comprising:launching a same set of operations in each of an original co-processor and a redundant co-processor, from among the multiple co-processors, to obtain respective execution signatures from the original co-processor and the redundant co-processor;detecting an error in an execution of the set of operations by the original co-processor, by comparing the respective execution signatures;designating the execution of the set of operations by the original co-processor as error-free and committing a result of the execution, responsive to identifying a match between the respective execution signatures; andperforming an error recovery operation that replays the set of operations by the original co-processor and the redundant co-processor, responsive to identifying a mismatch between the respective execution signatures.2. The ...

MAINTAINING SYSTEM RELIABILITY IN A CPU WITH CO-PROCESSORS

A computer-implemented method is provided that is performed in a computer having a processor and multiple co-processors. The method includes launching a same set of operations in each of an original co-processor and a redundant co-processor, from among the multiple co-processors, to obtain respective execution signatures from the original co-processor and the redundant co-processor. The method further includes detecting an error in an execution of the set of operations by the original co-processor, by comparing the respective execution signatures. The method also includes designating the execution of the set of operations by the original co-processor as error-free and committing a result of the execution, responsive to identifying a match between the respective execution signatures. The method additionally includes performing an error recovery operation that replays the set of operations by the original co-processor and the redundant co-processor, responsive to identifying a mismatch between the respective execution signatures. 1. A computer program product for maintaining reliability of a computer having a processor and multiple co-processors , the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith , the program instructions executable by a computer to cause the computer to perform a method comprising:launching a same set of operations in each of an original co-processor and a redundant co-processor, from among the multiple co-processors, to obtain respective execution signatures from the original co-processor and the redundant co-processor;detecting an error in an execution of the set of operations by the original co-processor, by comparing the respective execution signatures;designating the execution of the set of operations by the original co-processor as error-free and committing a result of the execution, responsive to identifying a match between the respective execution ...

OPPORTUNISTIC SOFTWARE UPDATES DURING SELECT OPERATIONAL MODES

Disclosed embodiments relate to opportunistically updating Electronic Control Unit (ECU) software in a vehicle. Operations may include receiving, at a controller in a vehicle, a wireless transmission indicating a need to update software running on at least one ECU in the vehicle; monitoring an operational status of the vehicle to determine whether the vehicle is in a first mode of operation in which an ECU software update is prohibited; delaying the ECU software update when the operational status is prohibited; continuing to monitor the operational status of the vehicle to determine whether the vehicle is in a second mode of operation in which the ECU software update is permitted; and enabling updating of the at east one ECU with the delayed ECU software update when it is determined that the vehicle is in the second mode of operations. 120-. (canceled)21. A non-transitory computer-readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for opportunistically updating controller software , the operations comprising:determining a device is in a first mode of operation at a first time;accessing a controller software change based on the device being determined to be in the first mode of operation, the controller software change comprising a delta file; and storing the delta file adjacent to current software on the controller; and', 'linking at least one code segment of the delta file to the current software., 'implementing the controller software change on a controller associated with the device when the device is in the first mode of operation, wherein implementing the controller software change comprises22. The non-transitory computer-readable medium of claim 21 , wherein the first mode of operation comprises a predetermined safe operating condition.23. The non-transitory computer-readable medium of claim 22 , wherein the predetermined safe operating condition is one of a plurality ...

OPPORTUNISTIC SOFTWARE UPDATES DURING SELECT OPERATIONAL MODES

Disclosed embodiments relate to opportunistically updating Electronic Control Unit (ECU) software in a vehicle. Operations may include receiving, at a controller in a vehicle, a wireless transmission indicating a need to update software running on at least one ECU in the vehicle; monitoring an operational status of the vehicle to determine whether the vehicle is in a first mode of operation in which an ECU software update is prohibited; delaying the ECU software update when the operational status is prohibited; continuing to monitor the operational status of the vehicle to determine whether the vehicle is in a second mode of operation in which the ECU software update is permitted; and enabling updating of the at least one ECU with the delayed ECU software update when it is determined that the vehicle is in the second mode of operations. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for opportunistically updating controller software , the operations comprising:receiving, at a controller, a prompt to change software on the controller, the controller controlling at least a portion of a device;determining at a first time whether the device is in a first mode of operation;delaying a controller software change when the device is in the first mode of operation;determining at a second time whether the device is in a second mode of operation;determining the device to be in the second mode of operation;accessing the delayed controller software change based on determining that the device is in the second mode of operation, wherein the delayed controller software change is maintained on a remote server or on the device when the device is in the first mode of operation; andinstalling the delayed controller software change on the controller when the device is in the second mode of operation;wherein the delayed controller software change ...

Information processing device, elevator device, and program update method

An information processing device includes: a memory that stores therein a main program; a processor that reads out and executes the main program stored in the memory; a program update unit that updates the main program stored in the memory; and a start control unit that starts the processor in an update confirmation mode when the processor is reset after the main program stored in the memory is updated by the program update unit. The processor, when being started in the update confirmation mode, generates a monitoring process that monitors whether a process generated by the execution of the main program is normally operated, and outputs a monitoring process start completion signal when the monitoring process has been normally generated. The information processing device can reduce time required for processing of confirming whether each program have been normally updated after the update of the programs.

Automated test generation for multi-interface and multi-platform enterprise virtualization management environment

Embodiments for automated testing of a virtualization management system are described. An example computer-implemented method for automated testing of a virtualization management system includes sending, by a test server, a test case to a plurality of instances of the system under test, the test case sent to each instance of the system under test via each interface from a plurality of interfaces supported by the system under test. The method further includes, for each instance of the system under test, performing multi-interface comparison. The comparison includes comparing, by the test server, responses to the test case from each of the interfaces. The method also includes in response to the responses from each of the interfaces being identical, storing the responses in an instance-response file corresponding to the instance. The method also includes reporting, by the test server, an error in response to the responses from each interface not being identical.

Assembling data deltas in controllers and managing interdependencies between software versions in controllers using tool chain

Disclosed embodiments relate to perform operations for receiving and integrating a delta file in a vehicle. Operations may include receiving, at an Electronic Control Unit (ECU) in the vehicle, a delta file, the delta file comprising a plurality of deltas corresponding to a software update for software on the ECU and startup code for executing the delta file in the ECU; executing the delta file, based on the startup code, in the ECU; and updating memory addresses in the ECU to correspond to the plurality of deltas from the delta file.

OPPORTUNISTIC SOFTWARE UPDATES DURING SELECT OPERATIONAL MODES

Disclosed embodiments relate to opportunistically updating Electronic Control Unit (ECU) software in a vehicle. Operations may include receiving, at a controller in a vehicle, a wireless transmission indicating a need to update software running on at least one ECU in the vehicle; monitoring an operational status of the vehicle to determine whether the vehicle is in a first mode of operation in which an ECU software update is prohibited; delaying the ECU software update when the operational status is prohibited; continuing to monitor the operational status of the vehicle to determine whether the vehicle is in a second mode of operation in which the ECU software update is permitted; and enabling updating of the at least one ECU with the delayed ECU software update when it is determined that the vehicle is in the second mode of operations. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for opportunistically updating controller software , comprising:receiving, at a controller, a wireless transmission indicating a need to update software running on the controller, the controller controlling at least a portion of a device;monitoring an operational status of the device at a first time to determine whether the device is in a first mode of operation in which a controller software update is prohibited;delaying the controller software update when the operational status is prohibited;continuing to monitor the operational status of the device at a second time to determine whether the device is in a second mode of operation in which the controller software update is permitted;determining the device to be in the second mode of operation;sending a message to a remote server when it is determined that the device is in the second mode of operation;enabling updating of the controller with the delayed controller software update when it is ...

SYSTEMS AND METHODS FOR REAL-TIME FAULT DETECTION

Described herein are systems and methods for real-time fault detection in electrical circuits. Various embodiments provide a fault detection circuit that uses a resistor network that is controlled to detect an internal current leak in multiple directions, e.g., to ground or to a power supply. The magnitude of the leakage current may be estimated from voltage measurements at voltage pins. In addition, as part of circuit diagnostics, open and short circuit fault conditions may be identified by using current sources and measuring deflections at the voltage pins. 1. A fault detection circuit for determining a circuit failure in a multi-channel circuit , the fault detection circuit comprising:one or more switches;one or more resistors coupled to the one or more switches that are configured to decouple the one or more resistors from a reference potential; anda current source designed to couple to both the one or more resistors and a voltage node, such that measuring the voltage at the voltage node allows to determine the presence of a fault condition.2. The fault detection circuit according to claim 1 , wherein the voltage at the voltage node being relatively smaller than the reference potential indicates a short circuit condition.3. The fault detection circuit according to claim 2 , wherein a voltage at or near a ground potential indicates an open circuit condition in a resistor network that comprises a plurality of voltage nodes.4. The fault detection circuit according to claim 1 , wherein at least one of the one or more resistors is a thermistor.5. The fault detection circuit according to claim 4 , wherein the thermistor is a negative temperature coefficient resistor.6. The fault detection circuit according to claim 5 , further comprising a second resistor that shares a common voltage node with the thermistor claim 5 , the second resistor and the thermistor being coupled to ground during a diagnostic measurement.7. The fault detection circuit according to according to ...

SELF-HEALING LEARING SYSTEM FOR ONE OR MORE CONTROLLERS

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for automatically providing software changes , comprising:receiving controller activity data from at least one controller, the controller activity data corresponding to actual operation of the at least one controller;determining a software vulnerability affecting the at least one controller, the software vulnerability being determined based on a deviation between the received controller activity data and expected controller activity data;identifying a controller software change based on the determined software vulnerability; and the multi-dimensional delta file comprises at least one of a binary data dimension, a source attribute dimension, or a map file dimension; and', 'the identified controller software change is configured to adjust the at least one controller from executing a first version of controller software to a second version of controller software., 'sending a multi-dimensional delta file configured to change software on ...

CONSTRUCTING SOFTWARE DELTA UPDATES FOR CONTROLLER SOFTWARE AND ABNORMALITY DETECTION BASED ON TOOLCHAIN

Disclosed embodiments relate to generating an update package for updating software on an Electronic Control Unit (ECU) in a vehicle. Operations may include accessing a plurality of attributes of a software update to be stored on the ECU in the vehicle; accessing a corresponding plurality of attributes of current software stored on the ECU in the vehicle; comparing the plurality of attributes with the corresponding plurality of attributes; generating a delta file representing differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison; and providing the delta file to the ECU, wherein the delta file is configured to be processed by startup code in the ECU that enables the delta file to execute in the ECU in the vehicle. 124-. (canceled)25. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for generating an update package for updating software on a controller , comprising:accessing a plurality of attributes of a software update to be executed on the controller;accessing a corresponding plurality of attributes of current software stored on the controller;comparing the plurality of attributes with the corresponding plurality of attributes;generating a multi-dimensional delta file comprising position-independent code, wherein the multi-dimensional delta file represents differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison, and wherein the multi-dimensional delta file comprises at least one of a binary data dimension, a source attribute dimension, or a map file dimension;configuring the position-independent code to execute on the controller; andproviding the multi-dimensional delta file to the controller.26. The non-transitory computer readable medium of claim 25 , wherein startup code integrated into the multi-dimensional ...

Self-healing learning system for one or more controllers

Disclosed embodiments relate to automatically providing updates to at least one vehicle. Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on the ECU with a software update corresponding to the identified ECU software update.

Apparatus and method for communications in a safety critical system

A safety communication scheme for a safety-critical system which includes two or more higher level units that have voting capabilities and one or two sets of lower level units that do not have voting capabilities, involves using one channel between the high and low level units for safety and two channels for redundancy.

FINGERPRINTING OF REDUNDANT THREADS USING COMPILER-INSERTED TRANSFORMATION CODE

A first processing element is configured to execute a first thread and one or more second processing elements are configured to execute one or more second threads that are redundant to the first thread. The first thread and the one or more second threads are to selectively bypass one or more comparisons of results of operations performed by the first thread and the one or more second threads depending on whether an event trigger for the comparison has occurred a configurable number of times since a previous comparison of previously encoded values of the results. In some cases the comparison can be performed based on hashed (or encoded) values of the results of a current operation and one or more previous operations. 1. A method comprising:executing redundant threads on corresponding processing elements;generating encoded values of results of operations performed by the redundant threads by hashing the results with at least one of a previous encoded value and an initial value, wherein the encoded values are generated in response to the redundant threads executing event triggers for comparisons of the results; andselectively bypassing at least one comparison of the encoded values depending on whether the event trigger has occurred a configurable number of times since a previous comparison of previously encoded values of the results.2. The method of claim 1 , wherein the configurable number is greater than one.3. The method of claim 1 , wherein the event trigger is a store instruction executed by the redundant threads to store the results to a memory.4. The method of claim 1 , wherein executing the redundant threads on the corresponding processing elements comprises concurrently executing the redundant threads on the corresponding processing elements.5. The method of claim 1 , further comprising:modifying program code that is to be executed by the redundant threads by inserting code during compilation to generate a lookup table of code values that are used to hash the ...

Fault tolerance using shared memory architecture

Examples provide a fault tolerant virtual machine (VM) using pooled memory. When fault tolerance is enabled for a VM, a primary VM is created on a first host in a server cluster. A secondary VM is created on a second host in the server cluster. Memory for the VMs is maintained on a shared partition in pooled memory. The pooled memory is accessible to all hosts in the cluster. The primary VM has read and write access to the VM memory in the pooled memory. The secondary VM has read-only access to the VM memory. If the second host fails, a new secondary VM is created on another host in the cluster. If the first host fails, the secondary VM becomes the new primary VM and a new secondary VM is created on another host in the cluster.

Communication device for airborne system

A unitary communication device onboard an aircraft comprises, in a single equipment, avionics means for sending and receiving data to/from avionics applications, and non-avionics means for sending and receiving data to/from non-avionics applications. The device comprises the avionics means are coupled across a secure firewall within the equipment to the non-avionics means by serial or parallel communication links and in that the avionics and non-avionics means comprise a plurality of communication interfaces able to communicate respectively with the avionics applications and non-avionics applications, and means able to share computing resources to operate, onboard the aircraft, the avionics and non-avionics applications.

ROLL BACK OF DATA DELTA UPDATES

Disclosed embodiments relate to adjusting vehicle Electronic Control Unit (ECU) software versions. Operations may include receiving a prompt to adjust an ECU of a vehicle from executing a first version of ECU software to a second version of ECU software; configuring, in response to the prompt and based on a delta file corresponding to the second version of ECU software, the second version of ECU software on the ECU in the vehicle for execution; and configuring, in response to the prompt, the first version of ECU software on the ECU in the vehicle to become non-executable. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor , cause the at least one processor to perform operations for adjusting software versions , comprising:receiving a prompt to adjust a controller from executing a first version of software on the controller to a second version of software on the controller; the multidimensional delta file represents code changes to segments of code on the controller, and', 'the multidimensional delta file comprises at least one of: a binary data dimension, a source attribute dimension, or a map file dimension; and, 'configuring, in response to the prompt and based on a multidimensional delta file constructed based on differences between dimensions of the first and second versions of software and comprising position independent code, the second version of software for automatic execution on the controller, wherein 'updating memory addresses in a single memory component of the controller, wherein the single memory component in the controller is configured to store both the first and second versions of software.', 'configuring, in response to the prompt, the first version of software on the controller to become non-executable, wherein configuring the first version of software to become non-executable comprises22. The non-transitory computer readable medium of claim 21 , wherein the second ...

ASSEMBLING DATA DELTAS IN CONTROLLERS AND MANAGING INTERDEPENDENCIES BETWEEN SOFTWARE VERSIONS IN CONTROLLERS USING TOOL CHAIN

Disclosed embodiments relate to perform operations for receiving and integrating a delta file in a vehicle. Operations may include receiving, at an Electronic Control Unit (ECU) in the vehicle, a delta file, the delta file comprising a plurality of deltas corresponding to a software update for software on the ECU and startup code for executing the delta file in the ECU; executing the delta file, based on the startup code, in the ECU; and updating memory addresses in the ECU to correspond to the plurality of deltas from the delta file. 120-. (canceled)21. A non-transitory computer readable medium including instructions that , when executed by at least one processor in a dependency management system , cause the at least one processor to perform operations for receiving and integrating a delta file into a first controller to address a security vulnerability , comprising:receiving, at the first controller, the delta file for addressing the security vulnerability of the first controller comprising a plurality of deltas corresponding to a software update for software on the first controller;storing the delta file at a first memory location in an additive manner adjacent to current controller software in a single memory of the first controller;executing the delta file at the first memory location of the first controller; andupdating memory addresses in the first controller to correspond to the plurality of deltas from the delta file while allowing the first controller to execute operations at a second memory location of the first controller.22. The non-transitory computer readable medium of claim 21 , wherein the operations further comprise checking to determine if the delta file is associated with a second controller that is interdependent with the first controller claim 21 , wherein the checking is based on a mapping of interdependencies at a dependency management system claim 21 , the mapping of interdependencies existing prior to the receiving of the delta file.23. The ...

METHODS AND APPARATUS FOR ANOMALY RESPONSE

Examples of the present disclosure relate to a method for anomaly response in a system on chip. The method comprises measuring a magnitude of a transient anomaly event in an operating condition of the system on chip. Based on the magnitude it is determined, for each of a plurality of components of the system on chip, an indication of susceptibility of that component to an anomaly event of the measured magnitude. Based on the determined indications of susceptibility for each of the plurality of components, an anomaly response action is determined. The method then comprises performing the anomaly response action. 1. A method for anomaly response in a system on chip , the method comprising:measuring a magnitude of a transient anomaly event in an operating condition of the system on chip;based on the magnitude, determining, for each of a plurality of components of the system on chip, an indication of susceptibility of that component to an anomaly event of the measured magnitude;based on the determined indications of susceptibility for each of the plurality of components, determining an anomaly response action; andperforming the anomaly response action.2. A method according to claim 1 , wherein determining the anomaly response action comprises selecting the anomaly response action from a plurality of possible anomaly response actions claim 1 , at least one of which permits continued forward progress of the system on chip.3. A method according to claim 1 , wherein:the method comprises determining a dependent component of the plurality of components, the dependent component being dependent on a given other component of the plurality of components; andthe determining of the susceptibility of the dependent component to the anomaly event is additionally based on the susceptibility of the given other component to the anomaly event.4. A method according to claim 1 , wherein the determining of the indication for a given component of the plurality is based on comparing the ...

用于安全关键的应用的设备和方法

在用于机器环境中的安全关键的应用的能编程的控制装置中需要的是，安全重要的程序组件的功能不受其他程序组件的错误或流程所影响。为了对应用程序进行流程控制可以考虑不同的标准，例如可以基于运行时间系统与操作系统相联系地进行流程控制。本发明涉及用于基于运行时间系统结构并行地或独立地运行正常的和安全的程序的设备和方法，其中提出，所有对于控制装置重要的部件集成在具有特定硬件架构300的硬件组件30上并且借助于用于两个运行时间系统的构成为至少双重的运行时间系统结构33、34、301相互分开，以便能够在安全不重要的组件上自由地进行改变。分开特别是可以通过使所述运行时间系统之一优先化来进行。利用这样的运行时间系统结构301或硬件架构300无需事后认证能自由编程的控制装置，并且即使在安全不重要的部件上进行改变时，安全关键的部件的认证也继续保持有效。

Digital data processor for performing fault tolerant peripheral device bus communication

Multiprocessor postpones the method and system performed

公开了一种方法、系统和可装卸计算机卡。第一先入先出（FIFO）存储器可以从包括第一处理器的第一处理器组接收第一处理器输入。第一处理器组被配置为基于包括一组输入信号、时钟信号和对应数据的第一处理器输入来执行程序代码。第一FIFO可以存储第一处理器输入，并且可以根据第一延迟向第二FIFO存储器和第二处理器输出第一处理器输入。第二FIFO存储器可以存储第一处理器输入，并且可以根据第二延迟向第三处理器输出第一处理器输入。响应于第一处理器输入，第二处理器可以执行程序代码的至少第一部分，第三处理器可以执行程序代码的至少第二部分。

Systems and methods for test deployment of computational code on virtual servers

가상 서버 상의 계산 코드의 테스트 전개를 위한 방법 및 시스템이 개시된다. 일 실시예에서, 예시적인 방법은 자원을 제공하도록 프로그래밍된 테스트 계산 코드를 수신하는 것; 복수의 가상 서버로부터 테스트 가상 서버를 선택하는 것; 테스트 가상 서버에 테스트 계산 코드를 업로드하는 것; 테스트 가상 서버 상의 테스트 계산 코드를 초기화하는 것; 테스트 가상 서버 및 복수의 가상 서버의 나머지의 계산 성능 측정을 수신하는 것; 수신된 계산 성능 측정에 기초하여 테스트 가상 서버의 테스트 점수를 계산하는 것; 및 테스트 점수가 설정 범위 밖인 경우 테스트 계산 코드를 정지하는 것을 포함한다. A method and system are disclosed for test deployment of computational code on a virtual server. In one embodiment, an exemplary method includes receiving test computation code programmed to provide a resource; selecting a test virtual server from the plurality of virtual servers; uploading the test calculation code to the test virtual server; initializing test computation code on the test virtual server; receiving computational performance measurements of the test virtual server and the remainder of the plurality of virtual servers; calculating a test score of the test virtual server based on the received computational performance measure; and stopping the test calculation code when the test score is outside the set range.

System and method for detecting error in a application including internal operation system

본 명세서는 내장형 운영체제 기반의 고장 감지 시스템에 있어서, 데이터를 복사하며, 상기 복사된 데이터 각각을 전송하기 위한 데이터 분배 모듈; 데이터의 수신, 연산 및 출력에 대한 동작을 수행하며, 각 동작의 성공을 알리는 제 1 메시지를 전송하는 프라이머리 컴퓨터; 상기 프라이머리 컴퓨터와 동일한 동작을 수행하며, 상기 프라이머리 컴퓨터에서 전송되는 상기 제 1 메시지에 기초하여, 상기 프라이머리 컴퓨터의 고장 여부를 감지하기 위한 적어도 하나의 쉐도우 컴퓨터; 및 상기 프라이머리 컴퓨터 및 상기 쉐도우 컴퓨터로부터 출력되는 데이터를 수신하며, 상기 수신된 데이터 중 어느 하나를 외부로 전송하기 위한 데이터 스위칭 모듈을 포함하여 이루어진다.

A method for improving the reliability of functioning of complexes of automation tools for information processing and control systems and a device that implements it

РОССИЙСКАЯ ФЕДЕРАЦИЯ (19) RU (11) (13) 2020 127 008 A (51) МПК G06F 11/16 (2006.01) G06F 11/18 (2006.01) ФЕДЕРАЛЬНАЯ СЛУЖБА ПО ИНТЕЛЛЕКТУАЛЬНОЙ СОБСТВЕННОСТИ (12) ЗАЯВКА НА ИЗОБРЕТЕНИЕ (21)(22) Заявка: 2020127008, 11.08.2020 Приоритет(ы): (22) Дата подачи заявки: 11.08.2020 (43) Дата публикации заявки: 11.02.2022 Бюл. № 5 R U (57) Формула изобретения 1. Способ повышения надежности функционирования комплексов средств автоматизации систем обработки информации и управления, включающий этапы, на которых посредством устройства распределения задач производится: сортировка задач по критичности, оценка вычислительной сложности задач, ранжирование вычислительных трактов по степени их надежности с учетом как количества сбоев, так и комплексного показателя надежности, распределение задач по вычислительным трактам с учетом критичности задач, показателей надежности вычислительных трактов, а также с учетом потребности в резервировании вычислений в текущий момент времени; посредством каждого вычислительного тракта решают принятую расчетную задачу вычислительной системы; посредством устройства мажоритарного выбора производят мажоритарное сравнение сигналов, поступающих с вычислительных трактов, а также контроль, перезапуска, тестирования и отключения вычислительных трактов, не отправляющих своевременно результатов вычислений, передачу записей об ошибке или сбое, с указанием, в случае сбоя входных данных задачи, типа ошибки, а также системной отладочной информации об устройстве на момент прихода задачи, в устройство запоминания отказов и должностному лицу на устройство отображения ошибок и выдачи правильных ответов на устройство вывода. 2. Устройство повышения надежности функционирования комплексов средств автоматизации систем обработки информации и управления, содержащее устройство распределения запросов и резерв устройства распределения задач, содержащие блок асинхронного ввода и элементы ИЛИ, соединенные между собой и выполненные с возможностью получения входного потока задач, ...

Multiprocessor

(57)【要約】本公報は電子出願前の出願データであるた め要約のデータは記録されません。

Redundancy method and system of three-dimensional laminated memory

본원 발명의 3차원 적층 메모리의 이중화 동작 방법은 제1,2,3 프로세서가 데이턴 연산을 입력받는 단계; 상기 제2,3 프로세서 각각이 상기 데이터 연산을 수행하기 위해 전용 데이터 버스를 통해 데이터를 송수신하는 단계; 상기 제1 프로세서가 상기 제2,3 프로세서의 연산 결과값을 주메모리부로 부터 수신하는 단계; 상기 제1 프로세서의 결과값 비교부가 상기 제1, 2, 3프로세서의 연산 결과값을 비교하는 단계; 및 상기 결과값 비교부가 상기 비교 결과에 대응하여 연산 결과값을 출력하는 단계를 포함할 수 있다.

Redundant capacitive touch screen

A touch screen system (TSS) comprising:a touch screen (TS);capacitive grid (CG) associated with the touch screen and comprising a first capacitive sub-grid and a second capacitive sub-grid;a first channel (CI) controlling the first capacitive sub-grid;a second channel (C2) controlling the second first capacitive sub-grid;wherein the first channel and the second channel are configured to get respectively a first touch position and a second touch position after a touch input on the touch screen,wherein the first channel and the second channel are configured to test respectively the second channel and the first channel by sending a stimuli signal respectively to the first capacitive sub-grid and to the second capacitive sub-grid,wherein at least one of the first channel and the second channel determine a consolidated touch position by correlation of the first touch position and the second touch position.

Redundancy method and redundancy system of three-dimensional stacked memory

本发明公开一种三维层叠存储器的冗余方法，该冗余方法包括：第一处理器、第二处理器和第三处理器接收用于数据运算的命令；第二处理器和第三处理器中的每一个通过专用数据总线传送和接收数据以执行数据运算；第一处理器从主存储器接收第二处理器和第三处理器的运算结果值；第一处理器的结果值比较器比较第一处理器、第二处理器和第三处理器的运算结果值；以及结果值比较器根据比较结果输出运算结果值。

Multicore processor having active and inactive execution cores

公开了具有活动执行核心和非活动执行核心的多核处理器的实施方案。在一个实施方案中，一个装置包括在单个集成电路上具有多个执行核心的处理器以及多个核心标识寄存器。多个核心标识寄存器中的每一个对应于执行核心之一，用以标识该执行核心是否为活动的。

Integrated component for triggering air bag in vehicle, has storage unit storing content of register in another register, and execution unit executing task from content of latter register to verify whether another task is executed correctly

The component (100) has an execution unit (120) e.g. microprocessor system, to execute a software task from a content of a register (110) for determining whether an air bag is triggered or not. A storage unit stores the content of the register in another register (130), and another execution unit (140) executes another software task from the content of the latter register to verify whether the former task is executed correctly. A comparator compares the results of the tasks, where an emergency signal is produced if the result of comparison is higher than a preset value. An independent claim is also included for a method of securing a programmable integrated component.

Data management equipment for automatic flight control systems having plural digital processors

ABSTRACT OF THE DISCLOSURE An automatic flight control system having two digital processors receives sensor data over a bit serial data bus through a serial-to-parallel converter. The converter formats the data into bytes corresponding to the data parameters from the sensors. One of the proccessor controls the bus timing and receives the data bytes which are simultaneously applied to an independent data storage element. An independent address sequencer provides sequential addresses to the independent data storage element at which to store sequential data bytes from the converter. After an entire data frame is stored in the independent data storage element, the second processor performs a bulk move of the data into its local data storage element. The sensors are configured in data subsystems which provide respective messages, each message containing an address identifying the subsystem. These addresses are utilized for directing the data messages to respective areas in the independent data storage element. The other processor compares addresses to determine that the data messages are not scrambled.

SYSTEM AND METHOD FOR CONTROLLING THE EXECUTION OF INSTRUCTIONS BY A PROCESSOR

Computer system on board a carrier implementing at least one critical service for the operational safety of the carrier

Système informatique (1) embarqué à bord d'un porteur, communiquant en réseau avec un concentrateur de données (2) et avec un moniteur (M), et mettant en œuvre au moins un service critique pour la sûreté de fonctionnement du porteur, le service critique étant en redondance en au moins deux instances (δ1, …, δm) sur des calculateurs respectifs différents (C1, …, Cm) connectés audit réseau, chaque calculateur (Ck) mettant en œuvre au moins une tâche logicielle implémentant une instance (δk) du service critique étant configuré pour mettre en œuvre le service critique par cadencement par le temps. Figures pour l’abrégé : Fig.1a et Fig.1b Computer system (1) on board a carrier, communicating in a network with a data concentrator (2) and with a monitor (M), and implementing at least one service critical to the operational safety of the carrier, the critical service being in redundancy in at least two instances (δ1,…, δm) on different respective computers (C1,…, Cm) connected to said network, each computer (Ck) implementing at least one software task implementing an instance ( δk) of the critical service being configured to implement the critical service by timing. Figures for the abstract: Fig.1a and Fig.1b

COMMUNICATION DEVICE FOR AN AIRCRAFT ONBOARD SYSTEM

Verification of a vector execution unit design

A method for verification of a vector execution unit design. The method includes issuing an instruction into a first instance and a second instance of a vector execution unit. The method includes issuing a random operand into a first lane of the first instance of the vector execution unit and into a second lane of the second instance of the vector execution unit. The method further includes receiving results from execution of the instruction and the random operand in both the first and the second instance of the vector execution unit and comparing the received results.

Systems and methods for mitigating faults in combinatory logic

Methods, systems, and apparatus for detecting single event effects. The system includes a first-modulus digital logic unit and a second-modulus digital logic unit each configured to reduce one or more operands by a respective modulus, apply an arithmetic compute logic to the reduced operands to produce a respective compute output, and reduce the respective compute output by their respective modulus. The system includes a kernel digital logic unit configured to apply the arithmetic compute logic to the operands to produce a kernel compute output, output the kernel compute output reduced by the first modulus, and output the kernel compute output reduced by the second modulus. The system includes a detector configured to detect a single event effect based on the reduced first compute output, the kernel compute output reduced by the first modulus, the reduced second compute output, and the kernel compute output reduced by the second modulus.

Method for detecting errors when executing a real-time operating system

A system for distributing available memory resource

Method and device for displaying a course of a process of at least one railway safety unit, and railway safety system having such a device

The invention relates to a method for displaying a course of a process of at least one railway safety unit (2; 102), wherein while using at least one device control (6, 106), process data (5.1, 5.2; 105.1, 105.2) supplied by the at least one railway safety unit (2; 102,), are converted by means of dual-channel processing into first and second image data (11.1, 11.2; 111.1, 111.2) of the course of the process to be displayed, and which are output to be displayed on a data display unit (8; 108). In order to simplify the displaying of the course of the process, a pair of display spectacles having a first and a second display (12.1, 12.2; 112.1, 112.2) is used as a data display unit, wherein the first display (12.1; 112.1) displays a first representation (14.1; 114.1) of the first image data (11.1; 111.1) delivered thereto that is visually detectable by the right eye (13.1; 113.1), and wherein the second display (12.2; 112.2) displays a second representation (14.2; 114.2) of the second image data (11.2; 111.2) delivered thereto that is visually detectable by the left eye (13.2; 113.2). The invention further relates to a device (3; 103) for displaying a course of a process of at least one railway safety unit (2; 102), and to a railway safety system (1; 101) having such a device (3; 103).

Redundant processor architecture

Die Erfindung betrifft eine Anordnung (101) mit einem ersten Prozessor (103) und einem zweiten Prozessor (103); wobei der erste Prozessor (103) einen ersten Kern (107), einen zweiten Kern (109) und eine Kontrollinstanz (113) aufweist; wobei der zweite Prozessor (105) einen ersten Kern (115) aufweist; und wobei der erste Kern (107) und der zweite Kern (109) des ersten Prozessors (103) sowie der erste Kern (115) des zweiten Prozessors (105) ausgebildet sind, eine erste Prozedur auszuführen. Die Kontrollinstanz (113) des ersten Prozessors (103) ist ausgebildet, die folgenden Schritte auszuführen: Vergleichen eines Ergebnisses der Ausführung der ersten Prozedur auf dem ersten Kern (107) des ersten Prozessors (103) mit einem Ergebnis der Ausführung der ersten Prozedur auf dem zweiten Kern (109) des ersten Prozessors (103); und Vergleichen des Ergebnisses der Ausführung der ersten Prozedur auf dem ersten Kern (107) des ersten Prozessors (103) und des Ergebnisses der Ausführung der ersten Prozedur auf dem zweiten Kern (109) des ersten Prozessors (103) jeweils mit einem Ergebnis der Ausführung der ersten Prozedur auf dem ersten Kern (115) des zweiten Prozessors (105), wenn die Ergebnisse der Ausführung der ersten Prozedur auf dem ersten Kern (107) und dem zweiten Kern (109) des ersten Prozessors (103) voneinander abweichen. The invention relates to an arrangement (101) having a first processor (103) and a second processor (103); wherein the first processor (103) comprises a first core (107), a second core (109), and a control entity (113); the second processor (105) having a first core (115); and wherein the first core (107) and the second core (109) of the first processor (103) and the first core (115) of the second processor (105) are configured to execute a first procedure. The control instance (113) of the first processor (103) is configured to perform the steps of: comparing a result of executing the first procedure on the first core (107) of the first processor (103) ...

Circuitry

Circuitry comprises control circuitry to control an operating state of a data handling device of a set of two or more redundant data handling devices configured to perform identical data handling functions; the control circuitry being configured to control an operating state of the respective controlled data handling device as a state transition from a current operating state of that data handling device to a target operating state in response to the issue of a respective state change signal; the control circuitry comprising a detector responsive to issue of the state change signal in respect of a first threshold number representing some but not all of the data handling devices, to detect whether the state change signal is issued in respect of a further one or more of the devices so that a second threshold number of data handling devices is reached.

Method for increasing the availability of a microprocessor system

Die Erfindung beschreibt ein Verfahren zur Erhöhung der Verfügbarkeit eines Mikroprozessorsystems, wobei im Falle eines Fehlers (4) eine Unterbrechung wenigstens eines durch das Mikroprozessorsystem ausgeführten Programms (1) vorgenommen wird, und dass zur Wiederherstellung der Verfügbarkeit des Mikroprozessorsystems die Ausführung des Programms (1) ausgehend von einem Programm-Haltepunkt (2) fortgesetzt wird, der sich im Ablauf des Programms (1) vor dem aufgetretenen Fehler (4) befindet, wobei Kontextinformationen (3) herangezogen werden, welche vor dem Auftreten des Fehlers (4) und während der Ausführung des Programms (1) erfasst und in einem dafür vorgesehenen Speicherbereich abgespeichert wurden.

Interface for interchanging data between redundant programs for controlling a motor vehicle

An electronic control unit for controlling and/or regulating at least one motor vehicle includes at least one integrated microcontroller system for executing software and at least two microcontroller units that each executes at least one independent operating system. The at least one interface is provided for the purpose of interchanging information between the microcontroller units. The electronic control unit includes a first microcontroller unit configured to control and/or regulate of a first motor vehicle system, and a second microcontroller unit configured to use the interface of the first microcontroller unit to provide defaults for the control and/or regulation of the first motor vehicle system.

Subsea production system with multiple location master control station system

A subsea production system for producing fluids from a subsea well in a subsea field. The production system includes a production facility and a production umbilical connecting the subsea well with the production facility. The production system also includes a control system for controlling production from the subsea well. The control system includes a first redundant master control station system (redundant MCS) at a first location, the redundant MCS capable of controlling production from the subsea well. The control system also includes a second redundant MCS at a second location, the second redundant MCS capable of controlling production from the subsea well. The redundant MCSs are synchronized to keep the same electronic data at both locations and to prevent conflicts in control signals from the redundant MCSs.

System and method for protecting GPU memory instructions against faults

A system and method for protecting memory instructions against faults are described. The system and method include converting the slave instructions to dummy operations, modifying memory arbiter to issue up to N master and N slave global/shared memory instructions per cycle, sending master memory requests to memory system, using slave requests for error checking, entering master requests to the GM/LM FIFO, storing slave requests in a register, and comparing the entered master requests with the stored slave requests.

Method and device for displaying a course of a process of at least one railway safety unit, and railway safety system having such a device

Fault-tolerant method based on empirical learning

本申请提供一种基于经验学习的容错方法，获取N个通道的信号；分别对所述N个通道的信号进行投票表决，获得所述N个通道的表决结果；根据所述N个通道的表决结果，以及所述N个通道的可信度评估对所述N个通道的信号进行表决。

Error recovery for intra-core lockstep mode

It is a kind of promoted availability monitoring to tolerant system redundancy management method

本发明一种提升可用性的监控对容错系统余度管理方法，包括：节点内表决监控，A控制器与B控制器比较一致，选择A控制器数据进入节点级表决监控；节点级表决监控，三节点的三信号中选择中值，作为监控的基准值，如果其他两非中值信号与中值信号之间的差在门限范围内，则该非中值信号为正常，否则该非中值信号为故障。本余度管理方法实现基于监控对的容错三节点、双节点容错计算机的冗余管理；能够确保节点容错计算机系统系统数据的可信；本方法比基于故障静默的监控对容错减缓了系统的余度降级，通过软硬件结合方式，当某一节点内发生一次故障时，实现备份控制器可重构为主控制器，保证了系统的不降级。