A safety verification system, method and device for functional safety mechanism

Abstract

The embodiment of the present invention discloses a safety verification system of a functional safety mechanism, including: an error injection control module, a functional safety execution module and an error state management module; the error injection control module is used to obtain the injection identifier issued by the central processing unit, and send the injection identifier and error injection parameters to the corresponding functional safety execution module; the functional safety execution module is used to execute the error injection parameters when it is judged that the injection identifier is consistent with its own identifier; the error state management module is used to obtain the functional safety error reported by the functional safety execution module. The technical solution disclosed in the embodiment of the present invention makes it unnecessary for the central processing unit to adapt the safety verification interface of each functional safety execution module, reduces the development difficulty of the calling program in the central processing unit, and the management complexity of the safety verification interface, and reduces the chip resources occupied when the functional safety mechanism performs safety verification.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of chip technology, and in particular to a safety verification system, method, device and storage medium for a functional safety mechanism. Background Art

[0002] Chips used in the automotive chip field have certain functional safety requirements for each functional module inside the chip. According to the requirements of the international standard ISO26262, automotive chips with an Automotive Safety Integration Level (ASIL) of B require a single-point fault metric (SPFM) greater than or equal to 90%. Therefore, it is necessary to add corresponding functional safety mechanisms to each functional module of the industrial chip, and safety verification of each functional safety mechanism, that is, adding a secondary safety mechanism, has also become an important part of chip development.

[0003] Existing technologies such as Figure 1A As shown, to perform safety verification on the functional safety mechanism, usually a specific safety verification interface and a secondary safety mechanism are set for each functional safety mechanism, and the safety mechanism circuit in the functional safety mechanism is safety checked through the safety verification interface; however, the safety verification methods of the functional safety mechanisms of various functional modules in the chip are often different, and the designs of various safety verification interfaces are also quite different. The central processing unit must adapt to the safety verification interface of each functional safety mechanism, which makes the development of the calling program of the central processing unit more difficult and the management complexity of the safety verification interface more complex. Therefore, when performing safety verification on the functional safety mechanism, that is, designing a respective secondary safety mechanism for each individual safety mechanism, more chip resources are required. Summary of the invention

[0004] Embodiments of the present invention provide a functional safety mechanism safety verification system, method, device and storage medium to implement safety verification of the functional safety mechanism of each functional module in a chip.

[0005] In a first aspect, an embodiment of the present invention provides a safety verification system for a functional safety mechanism, including: at least one error injection control module, at least one functional safety execution module and an error state management module;

[0006] The error injection control module is used to obtain the injection identifier issued by the central processing unit and send broadcast information to the corresponding functional safety execution module; wherein the broadcast information includes the injection identifier and the error injection parameter;

[0007] The functional safety execution module is used to obtain the broadcast information sent by the corresponding error injection control module, and execute the error injection parameters when it is determined that the injection identifier is consistent with its own identifier;

[0008] The error status management module is used to obtain the functional safety error reported by the functional safety execution module.

[0009] In a second aspect, an embodiment of the present invention provides a safety verification method for a functional safety mechanism, including:

[0010] The error injection control module obtains the injection identifier issued by the central processor, and sends a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter;

[0011] After the functional safety execution module obtains the broadcast information sent by the error injection control module, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameter is executed;

[0012] The error status management module obtains the functional safety error reported by the functional safety execution module.

[0013] In a third aspect, an embodiment of the present invention provides a safety verification device for a functional safety mechanism, including:

[0014] A broadcast information issuing module, integrated in the error injection control module, is used to obtain the injection identifier issued by the central processor and issue a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter;

[0015] An error injection parameter execution module, integrated in the functional safety execution module, is used to execute the error injection parameter if it is determined that the injection identifier is consistent with its own identifier after acquiring the broadcast information sent by the error injection control module;

[0016] The functional safety error acquisition module is integrated in the error status management module and is used to obtain the functional safety errors reported by the functional safety execution module.

[0017] In a fourth aspect, an embodiment of the present invention provides a chip, comprising a safety verification system of a functional safety mechanism and at least one functional module, wherein the safety verification system of the functional safety mechanism comprises at least one error injection control module, at least one functional safety execution module and an error status management module, and the safety verification system of the functional safety mechanism is used to implement the safety verification method of the functional safety mechanism described in any embodiment of the present invention.

[0018] In a fifth aspect, an embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the safety verification method of the functional safety mechanism described in any embodiment of the present invention is implemented.

[0019] According to the technical solution disclosed in the embodiment of the present invention, after the error injection control module obtains the injection identifier issued by the central processing unit, it sends a broadcast message to the corresponding functional safety execution module. After the functional safety execution module obtains the above broadcast message, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameters are executed, and the error status management module obtains the functional safety error reported by the functional safety execution module. Through the above error injection control module, security verification management is performed on each functional safety execution module, so that the central processing unit does not need to adapt the security verification interface of each functional safety execution module, which reduces the development difficulty of the calling program in the central processing unit and the management complexity of the security verification interface, and at the same time reduces the chip resources occupied by the functional safety mechanism when performing security verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1A It is a schematic diagram of the safety verification process of the functional safety mechanism provided by the background technology of the present invention;

[0021] Figure 1B It is a structural block diagram of a safety verification system of a functional safety mechanism provided by Embodiment 1 of the present invention;

[0022] Figure 1C It is a structural block diagram of a safety verification system of a functional safety mechanism provided by Embodiment 1 of the present invention;

[0023] Figure 2 is a flow chart of a safety verification method for a functional safety mechanism provided in Embodiment 2 of the present invention;

[0024] Figure 3 This is a structural block diagram of a safety verification device for a functional safety mechanism provided by Embodiment 3 of the present invention;

[0025] Figure 4 This is a structural block diagram of a chip provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0026] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0027] Embodiment 1

[0028] Figure 1BThe structural block diagram of a safety verification system of a functional safety mechanism provided in the first embodiment of the present invention includes: at least one error injection control module 100, at least one functional safety execution module 200 and an error state management module 300; wherein, Figure 1B In the figure, a safety verification system of a functional safety mechanism is taken as an example, which includes two error injection control modules 100 and four functional safety execution modules 200.

[0029] The error injection control module 100 is used to obtain the injection identifier issued by the central processor and send broadcast information to the corresponding functional safety execution module 200; wherein the broadcast information includes the injection identifier and the error injection parameter. The functional safety execution module 200 corresponds to the functional module in the chip, and its role is to provide a functional safety mechanism for the functional module. The functional safety execution module 200 performs safety inspection and protection on the functional module through the internal logic circuit; taking the automotive chip in the above technical solution as an example, the setting of the functional safety execution module 200 makes the single-point fault metric (SPFM) of the automotive chip meet the requirements of the international standard ISO26262; the error injection control module 100 is a control node in the chip for performing functional safety error injection, so as to realize the safety verification of the functional safety execution module 200 by centralized injection, and each error injection control module 100 manages the safety verification of one or more functional safety execution modules 200.

[0030] Specifically, the central processing unit pre-assigns an identification information to each functional safety execution module 200, and records the association relationship between each error injection control module 100 and the functional safety execution module 200. For example, the error injection control module A manages the safety verification of the functional safety execution module 01, the functional safety execution module 02 and the functional safety execution module 03; when the central processing unit performs a safety verification on the functional safety execution module 200, the injection identification and the error injection parameters are sent to the error injection control module 100 that matches the current functional safety execution module 200 through the register configuration bus; after obtaining the above-mentioned injection identification and error injection parameters, the error injection control module 100 sends the above-mentioned injection identification and error injection parameters to each functional safety execution module 200 managed by itself in the form of broadcast information.

[0031] In particular, in an embodiment of the present invention, the central processing unit may be the central processing unit of the current chip, that is, the central processing unit inside a chip, which performs safety verification on the functional safety mechanisms of each functional module on the chip to verify whether the functional safety mechanisms of each functional module are effective; the central processing unit may also be the central processing unit of the superior control system of the current chip, that is, the central processing unit of a control system, which performs safety verification on the functional safety mechanisms of the functional modules of each chip under the system; for example, the automobile braking system includes multiple chips, each chip includes multiple functional modules, the central processing unit may exist in the automobile braking system in the form of an independent chip, or may be integrated in a functional chip of the automobile braking system, and the automobile braking system performs safety verification on the functional safety mechanism of each chip inside the system through the central processing unit; in an embodiment of the present invention, optionally, the type and position of the central processing unit are not specifically limited.

[0032] Optionally, in the embodiment of the present invention, the error injection control module 100 is specifically configured to send broadcast information to the corresponding functional safety execution module 200 through an error injection bus. The error injection bus, as a communication medium between the error injection control module 100 and the corresponding functional safety execution module 200, is used to carry the effective transmission of the broadcast information and ensure the accurate injection of the error injection parameters.

[0033] Optionally, in an embodiment of the present invention, the error injection control module 100 is specifically used to obtain locally stored error injection parameters according to the injection identifier, and construct broadcast information according to the injection identifier and the error injection parameters. In addition to being issued by the central processing unit according to test requirements, the error injection parameters can also be stored in the error injection control module 100; after obtaining the injection identifier, the error injection control module 100 locally queries and obtains matching error injection parameters according to the injection identifier, and then composes the injection identifier and the error injection parameters into broadcast information, and sends the above broadcast information to each functional safety execution module 200 managed by itself; wherein, different error injection parameters have at least one different parameter format, injection position and parameter value; by storing the error injection parameters in the error injection control module 100, the amount of communication data between the central processing unit and the error injection control module 100 is reduced, and the safety verification efficiency of the functional safety mechanism is improved.

[0034] Optionally, in an embodiment of the present invention, if the safety verification system of the functional safety mechanism includes multiple error injection control modules 100, each error injection control module 100 performs a different safety verification method, and each safety verification method corresponds to a different error injection parameter. Specifically, the functions implemented by each functional module in the chip are different, and the safety mechanism implemented by the functional safety execution module 200 corresponding to each functional module is also different. Therefore, different functional safety execution modules 200 can be verified by different safety verification methods, for example, Error Checking and Correcting Protection (ECC) Protection) check, bus parity check, configuration register parity check, state machine one-hot protection check, state machine timeout protection check, scheduling result monitoring check, scheduling timeout protection check, handshake timeout protection check, back pressure timeout protection check, bus ECC check, key signal dual-track protection check, key logic dual redundancy check and key logic triple redundancy check, etc. Different safety verification methods correspond to different error injection parameters; therefore, each functional safety execution module 200 can be grouped according to the safety verification method corresponding to each functional safety execution module 200, and the functional safety execution modules 200 in the same group all complete the error injection control through the same error injection control module 100. For the injection of erroneous parameters, the functional safety execution modules 200 between different groups complete the injection of erroneous parameters through different error injection control modules 100, that is, each error injection control module 100 only needs to interact with one or more functional safety execution modules 200 under one safety verification mode, which greatly reduces the management complexity of safety verification. At the same time, since each functional safety execution module 200 under the same safety verification mode can use the same error injection parameters, if the error injection parameters are stored in the error injection control module 100, each error injection control module 100 only needs to store one error injection parameter, which reduces the occupation of chip storage resources by the safety verification of the functional safety mechanism.

[0035] The functional safety execution module 200 is used to obtain the corresponding broadcast information sent by the error injection control module 100, and execute the error injection parameters when it is determined that the injection identifier is consistent with its own identifier; the error state management module 300 is used to obtain the functional safety error reported by the functional safety execution module 200. When the functional safety execution module 200 obtains the broadcast information sent by the error injection control module 100, it compares the injection identifier in the broadcast information with its own identifier. If they are inconsistent, it will not respond to the above broadcast information and delete the received broadcast information; if they are consistent, it will parse the error injection parameters in the broadcast information, and inject the parsing results into its internal logic circuit through the communication interface between itself and the functional module to simulate the functional module sending the error injection parameters to itself; if the logic circuit operates normally, after obtaining the error injection parameters, it will report the functional safety error to the error state management module 300 through the error reporting interface.

[0036] like Figure 1C As shown, optionally, in an embodiment of the present invention, the safety verification system of the functional safety mechanism further includes: a functional safety verification module 400; the functional safety verification module 400 is integrated in the central processing unit, and is used to obtain the address information of the matching error injection control module 100 through the interface register according to the injection identifier, and send the injection identifier to the matching error injection control module 100. The functional safety verification module 400 is a module in the central processing unit that initiates the safety verification of the functional safety mechanism. The functional safety verification module 400 can perform safety verification on each functional safety execution module 200 inside the chip or inside the control system through a preset verification cycle, and can also perform safety verification on each functional safety execution module 200 after each detection of the central processing unit being powered on; the interface register stores the interface address of each error injection control module 100. After determining the current functional safety execution module 200 to be detected, the functional safety verification module 400 queries and obtains the interface address of the error injection control module 100 that matches the current functional safety execution module 200 to be detected, and then sends the injection identifier and error injection parameters to the error injection control module 100 through the above interface address.

[0037] Optionally, in an embodiment of the present invention, the functional safety verification module 400 is also used to determine that the target functional safety execution module 200 is operating normally if a functional safety error reported by the target functional safety execution module 200 is obtained in the error status management module 300; and to determine that the target functional safety execution module 200 is operating abnormally if the functional safety error status reported by the target functional safety execution module 200 is not obtained in the error status management module. The functional safety verification module 400 queries the status information recorded in the error status management module 300. If the error status management module 300 has obtained the functional safety error reported by the target functional safety execution module 200, it indicates that the target functional safety execution module 200 is operating normally, that is, after the target functional safety execution module 200 is injected with erroneous parameters, it has detected the erroneous parameters through its own logic circuit and reported the error; if the error status management module 300 has not obtained the functional safety error reported by the target functional safety execution module 200, it indicates that the target functional safety execution module 200 is operating abnormally, that is, after the target functional safety execution module 200 is injected with erroneous parameters, it does not have the error detection and correction functions.

[0038] Optionally, in an embodiment of the present invention, the functional safety verification module 400 is further specifically used to determine that the target functional safety execution module 200 is operating normally if a functional safety error sent by the target functional safety execution module 200 is obtained in the error state management module 300, and the functional safety error is consistent with the expected data of the error injection parameter; if a functional safety error sent by the target functional safety execution module 200 is obtained in the error state management module 300, and the functional safety error is inconsistent with the expected data of the error injection parameter, then determine that the target functional safety execution module 200 is operating abnormally. Specifically, the functional safety verification module 400 queries the status information recorded in the error status management module 300. If the error status management module 300 has obtained the functional safety error reported by the target functional safety execution module 200, it only indicates that the target functional safety execution module 200 has the function of reporting the functional safety error, but cannot ensure that the reported functional safety error is consistent with the expected data of the error injection parameter, that is, the accuracy of the error detection function of the target functional safety execution module 200 cannot be ensured. Therefore, after obtaining the functional safety error sent by the target functional safety execution module 200 through the error status management module 300, if the functional safety error is verified to be consistent with the expected data of the error injection parameter, it is determined that the target functional safety execution module 200 is operating normally, otherwise it can be determined that the target functional safety execution module 200 is operating abnormally, which further improves the accuracy of the safety verification result of the functional safety execution module 200.

[0039] According to the technical solution disclosed in the embodiment of the present invention, after the error injection control module obtains the injection identifier issued by the central processing unit, it sends a broadcast message to the corresponding functional safety execution module. After the functional safety execution module obtains the above broadcast message, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameters are executed, and the error status management module obtains the functional safety error reported by the functional safety execution module. Through the above error injection control module, security verification management is performed on each functional safety execution module, so that the central processing unit does not need to adapt the security verification interface of each functional safety execution module, which reduces the development difficulty of the calling program in the central processing unit and the management complexity of the security verification interface, and at the same time reduces the chip resources occupied by the functional safety mechanism when performing security verification.

[0040] Embodiment 2

[0041] Figure 2 This is a flow chart of a safety verification method for a functional safety mechanism provided in the second embodiment of the present invention. This embodiment can be applied to perform safety verification on the functional safety mechanism of a chip. The method can be executed by the safety verification device for the functional safety mechanism in the third embodiment of the present invention. The device can be implemented by software and / or hardware and integrated in the safety verification system for the functional safety mechanism in the first embodiment. The method specifically includes the following steps:

[0042] S210. The error injection control module obtains the injection identifier issued by the central processing unit, and sends a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter.

[0043] Optionally, in an embodiment of the present invention, the error injection control module obtains the injection identifier issued by the central processing unit, and sends a broadcast message to the corresponding functional safety execution module, specifically including: the error injection control module obtains the locally stored error injection parameters according to the injection identifier, and constructs the broadcast message according to the injection identifier and the error injection parameters.

[0044] S220: After the functional safety execution module obtains the broadcast information sent by the error injection control module, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameter is executed.

[0045] S230. The error status management module obtains the functional safety error reported by the functional safety execution module.

[0046] Optionally, in an embodiment of the present invention, the method also includes: a functional safety verification module, which obtains the address information of the matching error injection control module through the interface register according to the injection identifier, and sends the injection identifier to the matching error injection control module; wherein the functional safety verification module is integrated in the central processing unit.

[0047] Optionally, in an embodiment of the present invention, the method further includes: if the functional safety verification module obtains a functional safety error reported by a target functional safety execution module in the error status management module, it determines that the target functional safety execution module is operating normally; if the functional safety error status reported by the target functional safety execution module is not obtained in the error status management module, it determines that the target functional safety execution module is operating abnormally.

[0048] Optionally, in an embodiment of the present invention, the method further includes: if the functional safety verification module obtains a functional safety error sent by the target functional safety execution module in the error status management module, and the functional safety error is consistent with the expected data of the error injection parameters, then it is determined that the target functional safety execution module is operating normally; if the functional safety error sent by the target functional safety execution module is obtained in the error status management module, and the functional safety error is inconsistent with the expected data of the error injection parameters, then it is determined that the target functional safety execution module is operating abnormally.

[0049] According to the technical solution disclosed in the embodiment of the present invention, after the error injection control module obtains the injection identifier issued by the central processing unit, it sends a broadcast message to the corresponding functional safety execution module. After the functional safety execution module obtains the above broadcast message, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameters are executed, and the error status management module obtains the functional safety error reported by the functional safety execution module. Through the above error injection control module, security verification management is performed on each functional safety execution module, so that the central processing unit does not need to adapt the security verification interface of each functional safety execution module, which reduces the development difficulty of the calling program in the central processing unit and the management complexity of the security verification interface, and at the same time reduces the chip resources occupied by the functional safety mechanism when performing security verification.

[0050] Embodiment 3

[0051] Figure 3 It is a structural block diagram of a safety verification device of a functional safety mechanism provided by the third embodiment of the present invention, and the device specifically comprises: a broadcast information sending module 310, an error injection parameter execution module 320 and a functional safety error acquisition module 330;

[0052] The broadcast information issuing module 310 is integrated in the error injection control module, and is used to obtain the injection identifier issued by the central processor, and issue a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter;

[0053] The error injection parameter execution module 320 is integrated in the functional safety execution module and is used to execute the error injection parameter if it is determined that the injection identifier is consistent with its own identifier after acquiring the broadcast information sent by the error injection control module;

[0054] The functional safety error acquisition module 330 is integrated in the error status management module and is used to acquire the functional safety error reported by the functional safety execution module.

[0055] According to the technical solution disclosed in the embodiment of the present invention, after the error injection control module obtains the injection identifier issued by the central processing unit, it sends a broadcast message to the corresponding functional safety execution module. After the functional safety execution module obtains the above broadcast message, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameters are executed, and the error status management module obtains the functional safety error reported by the functional safety execution module. Through the above error injection control module, security verification management is performed on each functional safety execution module, so that the central processing unit does not need to adapt the security verification interface of each functional safety execution module, which reduces the development difficulty of the calling program in the central processing unit and the management complexity of the security verification interface, and at the same time reduces the chip resources occupied by the functional safety mechanism when performing security verification.

[0056] Optionally, based on the above technical solution, the broadcast information issuing module 310 is specifically configured to obtain locally stored error injection parameters according to the injection identifier, and construct broadcast information according to the injection identifier and the error injection parameters.

[0057] Optionally, based on the above technical solution, the safety verification device of the functional safety mechanism further includes: an address information acquisition module;

[0058] The address information acquisition module is integrated in the functional safety verification module, and is used to obtain the address information of the matching error injection control module through the interface register according to the injection identifier, and send the injection identifier to the matching error injection control module; wherein the functional safety verification module is integrated in the central processing unit.

[0059] Optionally, based on the above technical solution, the safety verification device of the functional safety mechanism further includes: an operation result acquisition module;

[0060] An operation result acquisition module is integrated in the functional safety verification module and is used to determine that the target functional safety execution module is operating normally if a functional safety error reported by the target functional safety execution module is obtained in the error status management module; and to determine that the target functional safety execution module is operating abnormally if the functional safety error status reported by the target functional safety execution module is not obtained in the error status management module.

[0061] Optionally, on the basis of the above technical solution, it is also specifically used to determine that the target functional safety execution module is operating normally if a functional safety error sent by the target functional safety execution module is obtained in the error status management module, and the functional safety error is consistent with the expected data of the error injection parameters; if a functional safety error sent by the target functional safety execution module is obtained in the error status management module, and the functional safety error is inconsistent with the expected data of the error injection parameters, it is determined that the target functional safety execution module is operating abnormally.

[0062] The above device can execute the safety verification method of the functional safety mechanism provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. For technical details not described in detail in this embodiment, please refer to the method provided by any embodiment of the present invention.

[0063] Embodiment 4

[0064] Figure 4 A schematic diagram of the structure of a chip provided in Embodiment 4 of the present invention. Figure 4 A structural block diagram of an exemplary chip is shown. Figure 4 The chip shown includes a safety verification system of a functional safety mechanism and at least one functional module 500, wherein the safety verification system of the functional safety mechanism includes at least one error injection control module 100, at least one functional safety execution module 200 and an error status management module 300; wherein each functional safety execution module 200 corresponds to a functional module 500 in the chip, and its function is to provide a functional safety mechanism for the functional module 500, specifically, to perform safety checks and protection on the functional module through internal logic circuits.

[0065] The safety verification system of the functional safety mechanism is used to implement the safety verification method of the functional safety mechanism provided by any embodiment of the present invention. That is: the error injection control module obtains the injection identifier issued by the central processing unit, and sends a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter; after the functional safety execution module obtains the broadcast message issued by the error injection control module, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameter is executed; the error state management module obtains the functional safety error reported by the functional safety execution module.

[0066] Embodiment 5

[0067] Embodiment 5 of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, a safety verification method for a functional safety mechanism as described in any embodiment of the present invention is implemented; the method comprises:

[0068] The error injection control module obtains the injection identifier issued by the central processor, and sends a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter;

[0069] After the functional safety execution module obtains the broadcast information sent by the error injection control module, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameter is executed;

[0070] The error status management module obtains the functional safety error reported by the functional safety execution module.

[0071] The computer storage medium of the embodiment of the present invention can adopt any combination of one or more computer-readable media. The computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program, which can be used by an instruction execution system, device or device or used in combination with it.

[0072] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0073] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0074] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0075] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A safety verification system for a functional safety mechanism, characterized in that: include: at least one error injection control module, at least one functional safety execution module and an error state management module; The error injection control module is used to obtain the injection identifier issued by the central processing unit and send broadcast information to the corresponding functional safety execution module; wherein the broadcast information includes the injection identifier and the error injection parameter; The functional safety execution module is used to obtain the broadcast information sent by the corresponding error injection control module, and execute the error injection parameters when it is determined that the injection identifier is consistent with its own identifier; The error status management module is used to obtain the functional safety error reported by the functional safety execution module; The safety verification system of the functional safety mechanism also includes: a functional safety verification module; The functional safety verification module is integrated in the central processing unit and is used to obtain the address information of the matching error injection control module through the interface register according to the injection identifier, and send the injection identifier to the matching error injection control module; The functional safety verification module is further configured to determine that the target functional safety execution module is operating normally if a functional safety error reported by the target functional safety execution module is obtained in the error state management module; and determine that the target functional safety execution module is operating abnormally if the functional safety error state reported by the target functional safety execution module is not obtained in the error state management module; The functional safety verification module is specifically used to determine that the target functional safety execution module is operating normally if a functional safety error sent by the target functional safety execution module is obtained in the error status management module, and the functional safety error is consistent with the expected data of the error injection parameter; if a functional safety error sent by the target functional safety execution module is obtained in the error status management module, and the functional safety error is inconsistent with the expected data of the error injection parameter, then determine that the target functional safety execution module is operating abnormally.

2. The system according to claim 1, characterized in that The error injection control module is specifically configured to obtain locally stored error injection parameters according to the injection identifier, and construct broadcast information according to the injection identifier and the error injection parameters.

3. The system according to claim 1 or 2, characterized in that: If the safety verification system of the functional safety mechanism includes a plurality of error injection control modules, each error injection control module executes a different safety verification method, and each safety verification method corresponds to a different error injection parameter.

4. The system according to claim 1, characterized in that The error injection control module is specifically configured to send broadcast information to the corresponding functional safety execution module via an error injection bus.

5. A safety verification method for a functional safety mechanism, characterized in that: A safety verification system for a functional safety mechanism as claimed in any one of claims 1 to 4, comprising: The error injection control module obtains the injection identifier issued by the central processor, and sends a broadcast message to the corresponding functional safety execution module; wherein the broadcast message includes the injection identifier and the error injection parameter; After the functional safety execution module obtains the broadcast information sent by the error injection control module, if it is determined that the injection identifier is consistent with its own identifier, the error injection parameter is executed; The error status management module obtains the functional safety error reported by the functional safety execution module.

6. A chip, characterized in that: The chip includes a safety verification system of a functional safety mechanism and at least one functional module. The safety verification system of the functional safety mechanism includes at least one error injection control module, at least one functional safety execution module and an error status management module. The safety verification system of the functional safety mechanism is used to implement the safety verification method of the functional safety mechanism as described in claim 5.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the safety verification method of the functional safety mechanism as claimed in claim 5 is implemented.

Images