Self-testing and -repairing fault-tolerance infrastructure for computer systems

Abstract

ASICs or like fabrication-preprogrammed hardware provide controlled power and recovery signals to a computing system that is made up of commercial, off-the-shelf components—and that has its own conventional hardware and software fault-protection systems, but these are vulnerable to failure due to external and internal events, bugs, human malice and operator error. The computing system preferably includes processors and programming that are diverse in design and source. The hardware infrastructure uses triple modular redundancy to test itself as well as the computing system, and to remove failed elements—powering up and loading data into spares. The hardware is very simplified in design and programs, so that bugs can be thoroughly rooted out. Communications between the protected system and the hardware are protected by very simple circuits with duplex redundancy.

Description

BACKGROUND[0001]1. Field of the Invention[0002]This invention relates generally to robustness (resistance to failure) in computer systems; and more particularly to novel apparatus and methods for shielding and preserving computer systems—which can be substantially conventional systems—from failure.[0003]2. Related Art[0004](a) Earlier publications—Listed below, and wholly incorporated by reference into the present document, are earher materials in this field that will be helpful in orienting the reader. Cross-references to these publications, by number in the following list, appear enclosed in square brackets in the present document:[0005][1] Intel Corp., Intel's Quality System Databook (January 1998), Order No. 210997-007.[0006][2] A. Avi{hacek over (z)}ienis and Y. He, “Microprocessor entomology: A taxonomy of design faults in COTS microprocessors”, in J. Rushby and C. B. Weinstock, editors, Dependable Computing for Critical Applications 7, IEEE Computer Society Press (1999).[0007...

AI Technical Summary

Benefits of technology

[0035](2) a general-purpose processor interlinked with a true read-only memory (ROM)—“true read-only” in the sense that the memory circuit and its contents substantially cannot be changed without destroying it—the memory circuit being fabricated in such a way that it contains only one program (again, potentially quite complicated), which the processor performs.

[0079]In particular, whereas the earlier-discussed fifth aspect of the invention enhances reliability through comparison of processing results among subsystems within the protected computing system, this seventh facet of the invention looks to comparison of modules in the protective apparatus itself—to attain an analogous upward step in reliability of the hybrid overall system.

Problems solved by technology

(The term “deterring” implies that the computing system is rendered less probable to fail, but there is no absolute prevention or guarantee.)

Images