ERROR CASE WRITEBACK

Abstract

An electronic device (112) is presented. The electronic device (112) has a non-volatile memory (118) configured to store information independently of a power supply. The electronic device (112) further has a plurality of write-back registers (120) configured to store information in parallel with operation of the electronic device (112). The electronic device (112) further has a fault detector (122) configured to detect a fault of a primary power supply (114), activate a backup power supply path (124) to a backup power supply (116) in the event of a fault, and initiate an information transfer (126) from the write-back registers (120) to the non-volatile memory (118) in the event of a fault.Furthermore, a system (110) comprising the electronic device (112) and a method for operating the electronic device (112) are presented.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to an electronic device, a system, and a method. The electronic device, the system, and the method can be used specifically for automotive applications, such as for controlling a vehicle or at least a portion thereof. However, other applications are of course also possible in principle. BACKGROUND

[0002] In practice, electronic devices may experience failures during operation, such as due to a power supply failure. Electronic devices typically need to store diagnostic information about such events, for example, for later analysis. Furthermore, this is typically required to occur immediately, e.g., due to a loss of power, or generally to avoid data loss. However, an application controlled by the electronic device typically also needs to continue operating, at least in a special mode of operation. As one example, the application controlled by the electronic device may be brought into a safe state, which may be an off state, such as by using a soft shutdown.To store information immediately while the application continues to run, random access memory architectures are typically required. If a memory is busy with a write operation, a read operation is usually impossible. However, if a system cannot fetch and execute a subsequent instruction, this can significantly impact overall performance. Random access memories can allow simultaneous reading and writing. Such random access memories can be implemented using multi-bank devices, such as multi-bank NOR flash devices. A write operation can then be performed in a first bank, while a read operation can be performed in a second bank. However, such devices are typically quite expensive.

[0003] Thus, there is a particular need to reduce costs while still ensuring adequate error handling.

[0004] The document DE 10 2018 110 276 A1 discloses an electronic device comprising a core, wherein the core comprises at least one volatile memory, one non-volatile memory, and a microcontroller. The electronic device further comprises a power supply unit and at least one interface unit, wherein the interface unit is configured to enable data transmission with an external electronic device. The power supply unit is powered by an external power supply network. The power supply unit comprises a voltage source comprising an accumulator and / or a battery. The voltage source and the power supply unit are coupled by means of an O-ring circuit, which ensures an uninterruptible power supply to the core.The electronic device is configured to store data in the volatile memory in a normal operating state, which is characterized in that the power supply unit does not report an error signal. In the normal operating state, the power supply unit ensures a power supply to the core, the power source, and the at least one interface unit.The electronic device is also configured to isolate the core from remaining components of the electronic device in a fault condition characterized in that the power supply unit reports a fault signal, wherein the microcontroller transfers the data stored in the volatile memory to the non-volatile memory, and wherein in this case the power source ensures a power supply for the volatile memory, the non-volatile memory and the microcontroller until the transfer of the data stored in the volatile memory to the non-volatile memory is completed.

[0005] The document DE 10 2012 105 986 B3 discloses a computer system comprising a power supply, a system component comprising at least one processor, a microcontroller, and a memory operatively connected to the microcontroller for storing information about an interruption of at least one operating voltage of the computer system. The microcontroller is configured to selectively switch the computer system to a first operating state depending on the read information when at least one secondary standby voltage is applied to the microcontroller and the information about an interruption of the primary supply voltage of the computer system is read from the memory.

[0006] EP 3 477 427 A1 discloses a method that can be performed in an electronic device having a power-consuming element and a power-storing element configured to store power when the power-consuming element is in an operating state. According to the present disclosure, the method includes controlling a switching of the power-consuming element to the operating state upon detection of an event that may lead to a power supply failure, in order to enable the storage element to store energy before a power failure occurs. SUMMARY

[0007] In a first aspect, an electronic device is presented. The electronic device comprises a non-volatile memory. The non-volatile memory is configured to store information independently of a power supply. The electronic device further comprises a plurality of write-back registers. The write-back registers are configured to store information in parallel with operation of the electronic device. The electronic device further comprises a fault detector. The fault detector is configured to detect a fault of a primary power supply. The fault detector is further configured to activate a backup power supply path to a backup power supply in the event of a fault. The fault detector is further configured to initiate an information transfer from the write-back registers to the non-volatile memory in the event of a fault.

[0008] In another aspect, a system is presented. The system includes a backup power supply. The system further includes an electronic device.

[0009] The electronic device comprises a non-volatile memory. The non-volatile memory is configured to store information independently of a power supply. The electronic device further comprises a plurality of write-back registers. The write-back registers are configured to store information in parallel with operation of the electronic device. The electronic device further comprises a fault detector. The fault detector is configured to detect a fault of a primary power supply. The fault detector is further configured to activate a backup power supply path to a backup power supply in the event of a fault. The fault detector is further configured to initiate a transfer of information from the write-back registers to the non-volatile memory in the event of a fault.

[0010] In a further aspect, a method is presented. The method comprises: a) storing information in a write-back register of an electronic device in parallel with an operation of the electronic device, b) Detecting a primary power supply fault, c) activating a backup power supply path to a backup power supply, d) initiating an information transfer from the write-back register to a non-volatile memory of the electronic device.

[0011] In a further aspect, a use of the electronic device, system and / or method for an automotive application is presented.

[0012] Those skilled in the art will recognize additional features and advantages upon reading the following detailed description and upon viewing the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The present disclosure is illustrated by way of example and not limitation in the figures of the accompanying drawings, in which like reference numerals refer to similar or identical elements. The elements of the drawings are not necessarily to scale relative to one another. The features of the various illustrated examples may be combined, provided they are not mutually exclusive. Fig. 1 schematically illustrates an example of a system including an electronic device according to the present disclosure. Fig. 2 schematically illustrates another example of a system including an electronic device according to the present disclosure. Fig. 3 schematically illustrates a flow diagram of an example of a method according to the present disclosure. DETAILED DESCRIPTION

[0014] The examples described herein offer significant advantages. In parallel with normal operation, information can be stored in the write-back registers of the presented electronic device. In the event of a power supply failure, the fault detector of the presented electronic device can then facilitate continued operation, at least temporarily, by accessing a backup power supply, e.g., a capacitor charged by a primary power supply during normal operation. During this continued operation, the information stored in the write-back registers can be transferred to the non-volatile memory of the presented electronic device for long-term storage without further power supply. Thus, in particular, expensive random access memory architectures can be avoided.

[0015] Fig. 1 schematically illustrates an example of a system 110 comprising an electronic device 112. The electronic device 112 may be configured to control an application, in particular an automotive application. As an example, the application may be or comprise an actuator or a sensor or a lighting device or a switch in a vehicle. The system 110 may include a primary power supply 114. As an example, the primary power supply 114 may be a battery, such as a battery of a vehicle. The system 110 includes a backup power supply 116. As an example, the backup power supply 116 may be a capacitor. In particular, the capacitor may be arranged such that the capacitor is charged by the primary power supply 114 during operation of the electronic device 112.The primary power supply 114 and the backup power supply 116 may be configured to supply the electronic device 112 with the same power, e.g., 48 V. The capacitor may be configured to at least temporarily supply the electronic device 112 with such power. The primary power supply 114 may be external to the electronic device 112. The backup power supply 116 may also be external to the electronic device 112. In other words, the primary power supply 114 and the backup power supply 116 may not be part of the electronic device 112. The electronic device 112 may be a semiconductor device 112. As an example, the electronic device 112 may be an integrated circuit or may include one or more integrated circuits, which may, for example, be arranged on a circuit board.

[0016] The electronic device 112 includes a non-volatile memory 118. The non-volatile memory 118 is configured to store information independent of a power supply. Thus, even if the primary power supply 114 and / or the backup power supply 116 cannot power the electronic device 112, the non-volatile memory 118 can still store the information. As an example, the non-volatile memory 118 can be selected from the group consisting of flash memory, non-volatile random access memory, and erasable programmable read-only memory. However, other options may also be possible. The information may specifically be or include diagnostic information about the operation of the electronic device 112 and / or about an application controlled by the electronic device 112.In particular, the diagnostic information may include information about at least one of a temperature of the electronic device 112 or at least a portion thereof, a voltage provided to the electronic device 112, operating hours of the electronic device 112, a timestamp, a power consumption of the electronic device 112, and an application-specific status of the electronic device 112. Other options may also be possible. The application-specific status may refer to a status set in an application controlled by the electronic device 112.

[0017] The electronic device 112 further includes a plurality of write-back registers 120. The write-back registers 120 are configured to store information in parallel with an operation of the electronic device 112. In other words, the write-back registers 120 may be registers configured to write back or directly store information when an instruction is executed during an operation of the electronic device 112. Such a write-back operation may, in particular, be performed in an immediate and fast manner. Thus, the write-back registers 120 may be accessed quickly. As an example, the electronic device 112 may execute instructions for controlling an application and store information, such as a result of the execution, directly in the write-back registers 120.For example, the electronic device 112 may perform a regulation operation or a detection operation in a controlled application and store corresponding diagnostic information, such as an application-specific status, directly in the write-back registers 120. The write-back registers 120 may be buffers. In particular, the write-back registers 120 may be buffers for storing the information until the information is stored in another storage device, in particular in the non-volatile memory 118. In other words, the write-back registers 120 may be intermediate storage devices. As one example, the write-back registers 120 may form a buffer or may be part of a buffer. However, other options may also be possible.

[0018] The electronic device 112 further includes a fault detector 122. The fault may, for example, be an undervoltage condition, an overvoltage condition, or an overtemperature condition. Other options may also be possible. Thus, the fault may be a deviation from a normal state. The normal state may, for example, be a power supply with a predefined voltage, e.g., 48 V. Thus, the fault may, for example, be a power supply with a different or at least significantly different voltage, such as a voltage that exceeds a predefined threshold voltage. The fault may include a failure or malfunction of the electronic device 112 or at least a part thereof, or a failure or malfunction of a device external to the electronic device 112, in particular the primary power supply 114.The fault event may comprise a failure event, e.g., a failure or malfunction of the primary power supply 114. As an example, a fault event of the primary power supply 114 may occur when a supplied voltage decreases below a predefined threshold voltage. The fault event detector 122 is configured to detect a fault event of the primary power supply 114. Thus, the fault event detector 122 may be configured to observe or detect at least the primary power supply 114. The fault event detector 122 may also be configured to observe or detect further components, such as the electronic device 112 or at least a portion thereof and / or the backup power supply 116. The fault event detector 122 may, for example, comprise at least one of a voltage detector, a temperature detector, and a current detector. Other options may also be possible.

[0019] The fault detector 122 is further configured to activate a backup power supply path 124 to the backup power supply 116 in the event of a fault. The backup power supply path 124 can be or have a connection to the backup power supply 116, in particular a wired connection. Thus, the backup power supply path 124 can be or have a wire and / or a conductor track. Thus, the fault detector 122 can be configured to connect the backup power supply 116 to the electronic device 112 or at least to a part thereof. The fault detector 122 can further be configured to disconnect the primary power supply 114. The fault detector 122 can, for example, have a switching element for such purposes.The fault detector 122 can also be configured to disconnect or deactivate components of the electronic device 112, in particular components that are not necessarily required for the operation of the electronic device 112. Thus, power can be saved for essential components. In the event of a fault, the electronic device 112 may operate with limitations and not at full functionality. The backup power supply 116 can only be configured to supply the electronic device 112 with power for a limited period of time in the event of a fault. This may require sufficient power management and prioritization of certain processes, such as adequate information storage before the power supply is terminated.

[0020] The error case detector 122 is further configured to initiate an information transfer 126 from the write-back registers 120 to the non-volatile memory 118 in the event of an error. In other words, the error case detector 122 may be configured to trigger or initialize the information transfer 126. Further components may be involved in implementing the information transfer 126, as will also be explained in more detail below. However, as stated, the error case detector 122 may detect the error case, and this may initiate further measures for implementing the information transfer 126, which may optionally involve further components. The information transfer 126 may include writing the information stored in the write-back registers 120 to the non-volatile memory 118. In particular, the information may be represented as data.Thus, as will also be explained in more detail below, the information transfer 126 may include writing data stored in the write-back registers 120 to predefined addresses in the non-volatile memory 118. The addresses may in turn also be stored in the write-back registers 120, in particular in other write-back registers 120 that do not store the aforementioned data. The data may, in particular, be digital data. Thus, the information transfer 126 may be or include a data transfer, and in particular a digital data transfer, such as via a data line.

[0021] Fig. Figure 2 schematically illustrates another example of the system 110 including the electronic device 112. At least in many aspects, the system shown in Fig. 2 illustrated system 110 to the Fig. 1. Thus, at least in many aspects, the description of Fig. 1 above, if Fig. 2, which will not be repeated hereafter. How Fig. 2, the write-back registers 120 may specifically include at least one write-back data register 128 and at least one write-back address register 130. The write-back data register 128 may be configured to store data. The write-back address register 130 may be configured to store addresses. Thus, the information transfer 126 may include transferring the data stored in the write-back data register 128 to an address in the non-volatile memory 118, the address being stored in the write-back address register 130.

[0022] How Fig. 2 further shows, the electronic device 112 may include a controller 132. The controller 132 may be arranged in the backup power supply path 126. The controller 132 may be configured to control or manage at least the information transfer 126 from the write-back registers 120 to the non-volatile memory 118. Thus, the controller 132 may include a state machine 134. The state machine 134 may be configured to process predefined states for continued operation of the electronic device 112 in the event of a fault, in particular in a step-by-step manner. The state machine 134 may, in particular, be a finite state machine. Thus, the state machine 134 may have a number of states, in particular a finite number of states, and may be configured to transition from one state to another. A transition may be triggered by an input, such as an external event.The state machine 134 may generate an output depending on the current state.

[0023] The state machine 134 can be activated in the event of an error, in particular by the error detector 122. The state machine 134 can, in particular, have the states described below. A first state can include deactivating unnecessary components of the electronic device 112, such as components that do not fulfill safety-critical tasks, or such as components that are not required for the information transmission 126. As an example, the error detector 122 can be deactivated in this state because the error has already been detected, so that no further monitoring is required. Thus, the controller 132 can also be configured to deactivate one or more components of the electronic device 112. As Fig. 2, the electronic device 112 may further include at least one application-specific component 136, e.g., a sensor, an actuator, a lighting device, or a switch. Thus, the controller 132 may be configured to deactivate the application-specific component 136 in the event of a fault, particularly if the application-specific component is not safety-critical. Another state may include ensuring a power supply to the required components, e.g., the non-volatile memory 118, such as by connecting the electronic device 112 to the backup power supply 116. Another state may include performing the information transfer 126 from the write-back registers 120 to the non-volatile memory 118. Completion of a previous task may trigger a transition of the state machine 134 to the subsequent state.

[0024] Additionally or alternatively, the controller 132 may include an adapter 138. The adapter 138 may be configured to adjust or manage power provided by the backup power supply 116. As previously stated, the backup power supply 116 may, in particular, be a capacitor. Thus, the adapter 138 may, in particular, be configured to adjust power provided by the capacitor. As an example, the capacitor may be a 48V capacitor. However, internal logic components of the electronic device 112 may require significantly lower voltages. As an example, the non-volatile memory 118 may require 3V for operation. Thus, the adapter 138 may, in particular, be or include a voltage converter.Furthermore, as also already stated, the backup power supply 116 can only be configured to supply the electronic device 112, or at least parts thereof, with power for a limited period of time. Thus, the adapter 138 can be configured to monitor a status of the backup power supply 116, in particular such that the controller 132 can deactivate or activate selected components of the electronic device 112 according to the remaining power still available.

[0025] Overall, during normal operation, the primary power supply 114 can supply power to the electronic device 112. However, in the event of a fault in the primary power supply 114, e.g., a supply with a voltage below a predefined threshold, this can be detected by the fault detector 122, which can trigger further actions. The fault detector 122 can activate a backup power supply path 124 from the electronic device 112 to the backup power supply 116, e.g., a capacitor charged by the primary power supply during normal operation. In particular, the fault detector 122 can activate the controller 132, which includes the state machine 134 and the adapter 138.According to the sequence predefined in the state machine 134, the controller 132 can deactivate selected components of the electronic device 112, such as the fault detector 122 or the application-specific component 136, particularly if the application-specific component 136 is not performing a safety-critical task. Furthermore, the controller 132 can ensure a sufficient continued power supply, at least for a limited period of time. In particular, the adapter 136 can adjust the power supplied to the electronic device 112 from the backup power supply 116 according to the requirements of the still active components of the electronic device 112. Furthermore, the controller 132 can manage the information transfer 126 from the write-back registers 120 to the non-volatile memory 118 such that the information is securely stored regardless of the power.

[0026] Fig. 3 illustrates a flow diagram of an example of a method for implementing the above-mentioned procedure. The method comprises the following method steps. The presented method steps can be performed in the specified order. However, it should be noted that a different order may also be possible. The method may comprise further method steps that are not listed. Furthermore, one or more of the method steps can be performed once or repeatedly. Furthermore, two or more of the method steps can be performed simultaneously or in a temporally overlapping manner. The method can be at least partially computer-implemented. Thus, one or more of the following method steps can be computer-implemented. a) (designated by reference numeral 140) storing information in a write-back register 120 of the electronic device 112 in parallel with an operation of the electronic device 112, b) (designated by reference numeral 142) detecting a fault in a primary power supply 114, c) (designated by reference numeral 144) activating a backup power supply path 124 to a backup power supply 116, d) (designated by reference numeral 146) initiating an information transfer 126 from the write-back register 120 to a non-volatile memory 118 of the electronic device 112.

[0027] In particular, step d) may be prioritized during remaining operation of the electronic device 112. Thus, other processes may be deactivated to safely perform the information transfer 126 with the remaining power from the backup power source 116. Unnecessary components of the electronic device 112 may, in particular, be deactivated, as explained in more detail above, so that the remaining power can be used for the information transfer 126. As also already indicated, step d) may, in particular, comprise transferring data stored in a write-back data register 128 to an address in the non-volatile memory 118 stored in a write-back address register 130. For further details regarding the method, reference may also be made to the description of the system 110 and the electronic device 112 of Fig. 1 and Fig.2 above. The system 110, the electronic device 112, and / or the described method may be used in particular in an automotive application. Thus, they may be used to control an application in a vehicle, such as an actuator or a sensor or a lighting device or a switch in a vehicle.

Claims

[1] An electronic device (112) comprising: • a non-volatile memory (118) arranged to store information independently of a power supply, a plurality of write-back registers (120) configured to store information in parallel with operation of the electronic device (112), and • a fault detector (122) which is arranged to: ◯ Detecting a primary power supply fault (114), ◯ Activating a backup power supply path (124) to a backup power supply (116) in the event of a fault, and ◯ Initiating an information transfer (126) from the write-back registers (120) to the non-volatile memory (118) in the event of an error, wherein the write-back registers (120) comprise: ◯ at least one write-back data register (128) configured to store data, and ◯ at least one write-back address register (130) configured to store addresses, wherein the information transfer (126) comprises transferring the data stored in the write-back data register (128) to an address in the non-volatile memory (118), the address being stored in the write-back address register (130). [2] The electronic device (112) according to the preceding claim, wherein the fault condition is selected from the group consisting of: an undervoltage condition, an overvoltage condition, an overtemperature condition. [3] The electronic device (112) according to any one of the preceding claims, further comprising: • a controller (132) in the backup power supply path (124), the controller (132) being configured to control the information transfer (126) from the write-back registers (120) to the non-volatile memory (118). [4] The electronic device (112) according to the preceding claim, wherein the controller (132) comprises a state machine (134), wherein the state machine (134) is configured to step by step process predefined states for further operation of the electronic device (112) in the event of a fault. [5] The electronic device (112) according to one of the two preceding claims, wherein the controller (132) is further configured to deactivate one or more components of the electronic device (112). [6] The electronic device (112) according to the preceding claim, wherein the electronic device (112) further comprises at least one application-specific component (136), wherein the controller (132) is configured to deactivate the application-specific component (136) in the event of a fault. [7] The electronic device (112) of any of the four preceding claims, wherein the controller (132) further comprises an adapter (138) configured to adapt power provided by the backup power supply (116). [8] The electronic device (112) according to the preceding claim, wherein the backup power supply (116) is a capacitor, wherein the adapter (138) is configured to adjust a power provided by the capacitor. [9] The electronic device (112) according to any one of the preceding claims, wherein the information stored in the write-back registers (120) in parallel with the operation of the electronic device (112) and transferred to the non-volatile memory (118) in the event of a fault comprises diagnostic information about the operation of the electronic device (112). [10] The electronic device (112) according to the preceding claim, wherein the diagnostic information comprises information about at least one of: a temperature of the electronic device (112) or at least a portion thereof, a voltage provided to the electronic device (112), operating hours of the electronic device (112), a timestamp, a power consumption of the electronic device (112), an application-specific status of the electronic device (112). [11] A system (110) comprising a backup power supply (116) and an electronic device (112), the electronic device (112) comprising: • a non-volatile memory (118) arranged to store information independently of a power supply, • a plurality of write-back registers (120) configured to store information in parallel with operation of the electronic device (112), and • a fault detector (122) configured to: ◯ Detecting a primary power supply fault (114), ◯ Activating a backup power supply path (124) to the backup power supply (114) in the event of a fault, and ◯ Initiating an information transfer (126) from the write-back registers (120) to the non-volatile memory (118) in the event of a fault, wherein the electronic device (112) is an electronic device (112) according to any one of the preceding claims relating to an electronic device (112). [12] The system (110) of the preceding claim, wherein the backup power supply (116) is a capacitor. [13] The system (110) of the preceding claim, wherein the capacitor is arranged such that the capacitor is charged by the primary power supply (114) during operation of the electronic device (112). [14] The system (110) of any preceding system claim, further comprising the primary power supply (114). [15] The system (110) according to the preceding claim, wherein the primary power supply (114) and the backup power supply (116) are arranged to supply the electronic device (112) with an equal power. [16] A method comprising: a) storing information in a write-back register (120) of an electronic device (112) in parallel with operation of the electronic device (112), b) detecting a fault in a primary power supply (114), c) activating a backup power supply path (124) to a backup power supply (116), d) initiating an information transfer (126) from the write-back register (120) to a non-volatile memory (118) of the electronic device (112), wherein the electronic device (112) is an electronic device (112) according to any one of the preceding claims relating to an electronic device (112). [17] The method of the preceding claim, wherein step d) is prioritized during a remaining operation of the electronic device (112). [18] A use for an automotive application of at least one of an electronic device (112) according to any one of the preceding claims relating to an electronic device (112), a system (110) according to any one of the preceding system claims and a method according to any one of the preceding method claims.

Images