Ethernet Physical Layer Protection

JP7779620B2Active Publication Date: 2025-12-03TEXAS INSTRUMENTS INC
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
JP2022558031
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Priority Date
2021-02-26
Filing Date
2021-03-29
Publication Date
2025-12-03
Estimated Expiration
2041-03-29

Smart Images

  • Figure 0007779620000001
    Figure 0007779620000001
  • Figure 0007779620000002
    Figure 0007779620000002
  • Figure 0007779620000003
    Figure 0007779620000003
Patent Text Reader

Abstract

The disclosed embodiment includes an Ethernet PHY device including a serial communications interface (320) configured to be coupled to a microcontroller (312), a register set (332) having registers, and a checksum generator circuit (360) coupled to the register set and configured to calculate a current checksum. The embodiment also includes a checksum register (338) coupled to the checksum generator and configured to store the current checksum. The embodiment further includes a checksum checker (334) coupled to the checksum generator, the checksum register, and the microcontroller (310) and configured to compare a previous value of the checksum with the current checksum and, in response to the previous value differing from the current checksum, send an error report to the microcontroller. The embodiment also includes a trigger circuit (336) coupled to the checksum generator and configured to send a checksum start signal to the checksum generator.
Need to check novelty before this filing date? Find Prior Art

Description

[Technical Field]

[0001] Ethernet is a communications protocol for connecting computers together in local, metropolitan, and wide area networks. Systems that communicate over Ethernet divide the stream of data into shorter pieces called frames. Each frame contains source and destination addresses and error-checking data. [Background technology]

[0002] The physical layer (PHY) defines the medium for transmitting raw data bits over the physical data links connecting network nodes. The primary functions and services performed by the PHY include performing bit-by-bit or symbol-by-symbol data delivery over the physical transmission medium and providing a standardized interface to the transmission medium.

[0003] Automotive electrical systems are becoming more complex due to advancements in infotainment, advanced driver assistance systems (ADAS), powertrain, and body electronics. These systems require high-speed communication networks because large amounts of real-time data and firmware / software are shared between various electronic control units (ECUs) within the vehicle.

[0004] Automotive Ethernet is a communications network used to connect components within a vehicle using a wired network to facilitate high-speed communication between components. Ethernet technology is used for in-vehicle communications, carrying measurement and calibration data, diagnostics, and communication between electric vehicles and charging stations.

[0005] Furthermore, critical functions related to the operation of an automobile are controlled by electronic components that use automotive Ethernet. If these electronic components fail, they can interfere with the operation and function of the vehicle. Failure of automotive electronic components can lead to dangerous situations for the driver, passengers, as well as other drivers and nearby pedestrians. Such failures can be caused by flipped data bits or other corrupted data. Many possible sources of data corruption include software glitches, electrostatic discharge (ESD) events, the effects of alpha radiation, or some other miscellaneous cause.

[0006] When such data corruption occurs, it is desirable for the microcontroller to take corrective action to repair the data. However, before such corrective action can be taken, the data corruption must first be detected. Additional safeguards must be implemented in automotive Ethernet PHY devices to detect and correct data errors. Summary of the Invention

[0007] A first disclosed embodiment includes an Ethernet PHY device, the Ethernet PHY device including: a serial communications interface adapted to be coupled to a microcontroller; a register set having registers; and a checksum generator coupled to the register set and configured to calculate current checksums of at least some of the registers. The embodiment also includes a checksum register coupled to the checksum generator and configured to store the current checksum. The embodiment also includes a checksum checker coupled to the checksum generator, the checksum register, and the microcontroller, configured to compare a previous value of the checksum with the current checksum and, in response to the previous value differing from the current checksum, send an error report to the microcontroller. The embodiment further includes a trigger circuit having an input and an output coupled to the checksum generator, the trigger circuit configured to send a checksum start signal to the checksum generator in response to receiving an active signal at the input.

[0008] Another example embodiment includes a method for detecting data corruption in an Ethernet PHY device, the method comprising: powering on the Ethernet PHY device; initializing the Ethernet PHY device; image into a register of the Ethernet PHY device, causing a checksum generator in the Ethernet PHY device to read the register and generate an initial checksum of the register, the initial checksum being stored in the checksum register. The method further includes initiating an examination of the register by the checksum generator reading the register, and generating a current checksum of the register. The current checksum is compared to the initial checksum to verify that the checksums match.

[0009] An example embodiment also includes an automotive network transceiver adapted to be coupled to the processor at a transceiver input, the transceiver including a register coupled to the transceiver input and adapted to store a copy of data stored in the processor. A checksum generator coupled to the register, the checksum generator having a checksum output and configured to perform a checksum operation on a portion of the register. A checksum register coupled to the checksum output, a checksum checker connected to the checksum generator and the checksum register, the checksum checker configured to compare the checksum output with a previous checksum output and generate an error in response to the checksum output being different from the previous checksum output. [Brief explanation of the drawings]

[0010] [Figure 1] Three examples of alternative schemes that can be used to help protect an Ethernet PHY from undetected data corruption in the PHY registers are presented.

[0011] [Figure 2] 1 illustrates an exemplary system for detecting data corruption in PHY registers using checksums of PHY register contents.

[0012] [Figure 3] 1 illustrates an exemplary system for detecting data corruption in PHY registers using checksums of PHY register contents where checksum generation is performed within the PHY register.

[0013] [Figure 4] 1 shows a checksum trigger circuit.

[0014] [Figure 5] We show how checksums of PHY register contents can be used to detect data corruption in PHY registers.

[0015] In the drawings, the same reference numbers are used to indicate the same or similar features (in function and / or structure). Details of one or more implementations of the present disclosure are set forth in the accompanying drawings and the following description. The drawings are not drawn to scale and are provided solely to illustrate the disclosure. Specific details, relationships, and methods are set forth to provide an understanding of the disclosure. Other features and advantages may become apparent from the description and drawings, and from the claims. DETAILED DESCRIPTION OF THE INVENTION

[0016] An Ethernet PHY functions as a transceiver between digital processing circuits (such as media access controllers, processors, gate arrays, and / or storage devices) and analog transmission media (such as buses, wires, and / or optical cables). PHYs can be implemented using hardware and software. An Ethernet PHY can have many registers, potentially exceeding 2000. Some registers are used to trim the PHY's internal parameters to maintain proper functionality and compliance with the Ethernet specification. Automotive Safety Integrity Level (ASIL) standards require that valid register configurations be loaded and verified to ensure proper PHY operation. However, data values ​​in PHY registers can become corrupted during operation. It is important to detect register configuration changes, such as those caused by bit flips or accidental write operations. If an automotive PHY's register changes go undetected and appropriate corrective action is not taken, the operation and functionality of the PHY may be impaired, posing a potential safety hazard.

[0017] One possible way to determine if the contents of the PHY registers have changed is to have the microcontroller (MCU) periodically read the PHY registers via the management data input / output (MDIO) and store the current values ​​in the PHY registers in the registers. imageThe drawback of this register reading approach is the cost in MCU time and resources. If the PHY has 2000 registers and each read operation takes 10-20 milliseconds, reading all the registers could require 20-40 seconds of MCU time. This register reading approach also requires using the limited memory and processing power on the MCU.

[0018] Figure 1 shows three examples of alternative embodiments that may be used to help protect an Ethernet PHY from undetected data corruption in PHY registers. Table 100 shows a PHY register block with columns 110, 120, 130, and 140. Column 110 shows the name and / or address of each register in the PHY. Column 120 represents PHY registers selected to be protected using register locks. Column 130 represents PHY registers selected to be protected using checksums. Column 140 represents physical registers selected to be protected using parity bits or error correcting codes (ECC).

[0019] The decision whether a given register should be protected by register lock 120, checksum 130, and / or ECC 140 may be made at design time (e.g., when the PHY is designed and / or manufactured). In some examples, this decision may even be made for some registers at run time (e.g., when the PHY is actually operating). If the register participation decision is made at design time, all of the registers may be selected, or selection bits may be added to the registers to provide a second selection point at run time, also providing the opportunity to include a subset of registers in the protection method. Any given register may be protected by one, two, or all three of protection schemes 120, 130, and 140.

[0020] There are two types of registers in the PHY register set: configuration registers and status registers. Generally, only the configuration registers need to be protected or checked for data corruption because the status registers are expected to be modified, which can make each of methods 120-140 more cumbersome to use when the status registers are included.

[0021] Register lock 120 can be used for PHY registers that are critical to the functionality of the PHY and need to be protected from being overwritten. A lock bit can be added to each given configuration register, giving the register an extra bit. This lock bit is used only for register locking. The value of the lock bit (0 or 1) determines whether the register should be locked or not. The lock bit can be hard-coded as a static bit in the register, so that the register is always locked after the register contents are written, or the lock bit can be configurable at run time. When a register lock bit is set active, only a reset, either a hardware reset or a software reset depending on the configuration, can release the register lock or rewrite the register contents.

[0022] In some implementations, register locks can only be released or register contents can be rewritten using a key. The key allows registers to be rewritten without a reset cycle while maintaining the desired protection. The key for register locks can be an 8-bit or 16-bit key in some cases, and must be written to the register to release the register lock. Register locks prevent the contents of the registers from being accidentally overwritten by software.

[0023] Parity or ECC 140 can be used to protect critical configuration registers within the PHY that can be overwritten by software glitches, noise, ESD spikes, radiation introducing soft errors (SER), or similar issues. Parity refers to the evenness or oddness of the number of bits with a value of 1 in a given set of bits, and is therefore determined by the values ​​of all bits. The parity bit checks whether the total number of 1 bits in the string is even for even parity or odd for odd parity. Parity can be calculated by the exclusive OR (XOR) sum of the bits, resulting in a 0 for even parity and a 1 for odd parity. By adding one or two parity bits to each register to be protected in this way, incorrect register contents can be detected. This property of parity—dependent on all bits and resulting in a change in value if any single bit changes—makes it useful for error detection.

[0024] Parity checking detects data corruption but does not correct errors in the data. ECC detects and corrects data corruption. ECC requires redundant bits that are a function of the data in the register and is achieved using an algorithm. There are many types of ECC algorithms, including Hamming code, single error correction and double error detection (SECDED), multidimensional parity, and Reed-Solomon coding. The choice of whether a given register is protected by parity or ECC 140 can be made at design time or run time. This choice may also include whether one-bit parity, two-bit parity, or an ECC algorithm is used. In some cases where ECC is used, a code describing the data bit sequence is calculated and stored with the data. When data is read, an ECC code for the read data is calculated and compared to the original ECC code. If the codes match, the data is considered uncorrupted. If the codes do not match, the stored ECC code is used to rewrite the data in the register. Accommodating ECC codes requires the addition of additional bits to the PHY register. The circuitry used to calculate the ECC code may be internal or external to the PHY.

[0025] Checksum 130 may be used for PHY registers that are critical to the functionality or performance of the PHY device. The decision to include registers in the checksum may be made at design time or run time. Adding selection bits to registers allows selection of participating registers at configuration or run time. When the checksum generator performs a checksum, it provides checksums of only those registers that are selected to participate in checksum protection.

[0026] Two examples for generating PHY register checksums that are later used for comparison with the checksum of the current PHY register contents include 1) generating the checksums external to the PHY using checksum generator software at compile time, or 2) providing hardware checksum circuitry within the PHY device to read the PHY register contents and generate the checksums during power-up after the registers are loaded.

[0027] 2 shows an example system for detecting data corruption in PHY registers using checksums of PHY register contents. In the example of FIG. 2, checksum generation is performed external to the PHY at compile time using a checksum generation software tool.

[0028] The contents of the PHY configuration registers are determined by design and characterization before compiling the code that will be loaded into the microcontroller. Once the contents of the PHY configuration registers are determined, the data is stored in the PHY registers. image 240 into a checksum generator 244. The checksum generator 244 checks the PHY registers using an appropriate checksum algorithm, such as a cyclic redundancy check (CRC). image Calculate the checksum 250 of 240.

[0029] register image 240 is loaded into memory 212 of microcontroller 210 (not shown) prior to system initialization. Microcontroller 210 may be a digital signal processor, a microprocessor, or a system-on-chip. Checksum 250 is also loaded into microcontroller 210 prior to system initialization. PHY device 230 is coupled to microcontroller 210 by MDIO interface 220. Microcontroller 210 reads PHY register 240 during system initialization via serial MDIO interface 220 following power-up. imageinto the PHY register 232. A checksum 250 is also loaded into a dedicated checksum register 238 in the PHY device 230 from the microcontroller 210 at power-up as part of the initialization process.

[0030] After all PHY registers have been loaded, the registers selected to be protected by register lock 120 may be locked, if desired, to prevent the locked registers from being rewritten by software without the use of a key or performing a reset. Each of methods 120-140 may be implemented independently of one another, so that the checksum of the register set may include both locked and unlocked registers.

[0031] A checksum checker 234 is coupled to register set 232. During run time, checksum checker 234 can verify PHY register contents by reading selected registers or the complete register set 232, calculating the current value of the checksum for those registers, and comparing the current checksum to a stored checksum in checksum register 238. Several different event trigger sources 236, both internal and external to PHY device 230, can trigger the checking of the checksum. If a checksum failure is detected, the failure can be reported to microcontroller 210, which can take corrective action, such as a system reset or reloading PHY register set 232 via MDIO 220.

[0032] FIG. 3 shows an example system for using checksums of PHY register contents to detect data corruption in PHY registers, where the PHY includes hardware checksum generator circuitry and checksum generation is performed within the PHY using the checksum generator.

[0033] The contents of the PHY configuration registers are determined by design and characterization before initialization. Once the contents of the PHY configuration registers are determined, they are stored in the PHY registers image , which may be a digital signal processor, a microprocessor, or a system-on-a-chip.

[0034] The PHY device 330 is coupled to the microcontroller 310 by the MDIO interface 320. The microcontroller 310 reads the PHY registers during system initialization via the serial MDIO interface 320 following power-up. image is loaded into the PHY register 332 as an initialization table.

[0035] PHY register 332 is coupled to checksum generator 360. After the register is loaded, checksum generator 360 calculates a checksum of the contents of PHY register 332 using an appropriate checksum algorithm, such as a cyclic redundancy check (CRC). The checksum is stored in a checksum register 338 coupled to checksum generator 360. Checksum checker 334 has a first input coupled to checksum generator 360 and a second input coupled to checksum register 350. Checker 334 has an output coupled to microcontroller 310.

[0036] register image are loaded into PHY registers 332 from memory 312 in microcontroller 310 via MDIO 320 during initialization of PHY 330. Checksum generator 360 is a state machine that reads the contents of PHY registers 332 and generates a checksum. The generated checksum is stored in checksum register 338 for later comparison with subsequent checksums to verify if the checksum has changed.

[0037] The checksum generator is coupled to a checksum trigger circuit 336. During run time, the checksum generator 360 may receive a signal from the checksum trigger 336 instructing it to read the PHY registers 332 and generate a checksum that is compared to the checksum stored in the checksum register 338.

[0038] When checksum generator 360 receives a signal from checksum trigger circuit 336, it reads the PHY registers 332 selected as part of the checksum and generates a checksum of the current PHY register contents. The new checksum is sent by checksum generator 360 to checksum checker 334. Checksum checker 334 reads the saved checksum from checksum register 338 and compares the current checksum with the saved checksum. If the current and saved checksums do not match, this indicates that the configuration data in PHY register 332 has been corrupted. Checker 334 reports the data corruption to microcontroller 312, which then updates the registers in memory 312. image Appropriate corrective action can be taken, which may include reloading the PHY register set 332.

[0039] 4 shows checksum trigger circuit 336, which includes trigger inputs 410-420 as inputs and a checksum start signal 440 as an output. Any of trigger inputs 410-420 that meet predetermined criteria for a valid signal results in a checksum initialization signal sent to checksum generator signal 360. The checksum initialization signal sent to checksum generator signal 360 begins the process of checksum generator 360 reading the contents of PHY register 332 and generating a checksum, which is compared to the checksum stored in checksum register 338 to determine if the PHY register contents are valid.

[0040] The software trigger input 410 can be used for a user-initiated checksum check. This can be performed if the user suspects that a problem or performance issue may have occurred. The software trigger input 410 can also be used to perform periodic checksum checks as a safety measure to ensure the integrity of the system. The software trigger input 410 is a single bit sent from the microcontroller 310 and is an autonomous check to ensure that nothing has changed in the PHY register set.

[0041] The link loss trigger 412 can signal a serious fault in the Ethernet system. The link loss trigger 412 is generated internally by the PHY 330 and is triggered when the PHY detects a loss of link between the PHY and the system with which it is communicating. The PHY constantly sends and receives trigger pulses, known as link, and data to synchronize with the PHY of the system with which it is communicating. The PHY periodically checks to ensure that the link is present. When the PHY senses that the link has been lost, it sets the link loss trigger bit 412.

[0042] Link loss can have many potential causes. However, link loss can occur as a result of modified register values, especially those related to PHY performance, timing, and synchronization. In some cases, reloading the PHY register values ​​following a link loss trigger 412 can resolve the link loss issue. If a link loss is detected, the link loss trigger 412 is set, triggering a checksum check.

[0043] Signal quality is constantly monitored in the PHY during runtime. A signal quality indicator (SQI) signal 414 may be generated internally by the PHY 330 and is an indicator that the signal quality has fallen below a predetermined threshold. If the SQI level falls below a certain threshold, it may indicate that the mean squared error (MSE) has risen to an unacceptable level. In this case, transmission may still occur, but with errors.

[0044] A potential cause of a low SQI may be that register settings related to maintaining a defined signal shape may have been changed or overwritten. In some cases, reloading PHY register values ​​following an SQI trigger 414 may improve the SQI and resolve the issue. Early detection and correction of degradation in SQI may prevent subsequent link loss. Thus, when the SQI falls below an acceptable SQI threshold, the SQI trigger 414 may be set, triggering a checksum check.

[0045] An electrostatic discharge (ESD) event trigger 416 can be sent by an internal ESD event sensing detector. An example implementation of an ESD event sensing detector can be found in U.S. Patent No. 10,749,337, which is incorporated herein by reference in its entirety. An ESD event can flip register bits or otherwise corrupt data stored in PHY configuration registers. Early detection of such data corruption is desirable. If an ESD event is detected, the ESD event sensing detector generates an ESD event trigger 416 and triggers a checksum check. [Patent Document 1] U.S. Patent No. 10,749,337

[0046] A self-test mode can be added to the PHY circuit to verify proper functionality of the checksum trigger 336, checksum generator 360, and checksum checker 334. The self-test can be initiated by a self-test trigger signal 418. The self-test trigger 418 can be sent by the microcontroller 310 or by circuit elements within the PHY. In the self-test mode, a fail bit can be inserted into a register setting to trigger error detection logic without propagating the fault to the rest of the Ethernet system. As part of the self-test, for example, a mechanism can be implemented to generate an incorrect checksum and then test to determine that the checksum error was captured and reported to the microcontroller 310. This verification can add safety to the operation of the Ethernet system, which is especially important in automotive applications.

[0047] 4 is not an exhaustive list. Other possible trigger sources 420 can be implemented as well. These other trigger sources 420 can include timers to initiate frequent register checks. Other trigger sources can be customized as appropriate for individual Ethernet system environments.

[0048] 5 shows a method 500 for detecting data corruption in PHY registers using a checksum of the PHY register contents. At 510, the system starts and power is applied to the microcontroller 310 and the PHY 330. At 520, the PHY is initialized and the registers image The file is loaded from the microcontroller memory 312 into the PHY registers 332 .

[0049] At 530, the checksum generator reads the contents of the register and generates an initial checksum that is stored in the checksum register at 540. At step 550, a checksum trigger source communicates to checksum generator 360 that it should read the current contents of checksum register 332 and generate a current checksum at step 560. Checksum checker 334 receives the current checksum from the checksum generator and the initial checksum from checksum register 338 at step 570. If the initial and current checksum values ​​are equal at 580, the process loops back to step 550 and waits for the trigger source to generate the next trigger. If the initial and current checksum values ​​are not equal at 580, the PHY reports an error to the microcontroller, and the microcontroller reads the current contents of register 332 and generates a current checksum at step 560. image Take appropriate corrective action, such as reloading the register set.

[0050] For purposes of this disclosure, as used herein, when an element is referred to as being "coupled" to another element, it is intended that there is a functional connection between the two elements (e.g., a direct connection, or an indirect connection where one or more intervening elements are present). When a first element is referred to as being "directly coupled" to a second element, there are no intervening elements between the first and second elements. The terms "substantially the same," "substantially equal," "substantially equal," "approximately equal," and "nearly the same" describe a quantitative relationship between two objects. This quantitative relationship anticipates that, while it may be desirable for the two objects to be equal by design, a certain amount of variation may be introduced by the manufacturing process.

[0051] As used herein, the terms "terminal," "node," "interconnect," "lead," and "pin" are used interchangeably. Unless otherwise noted, these terms are used generally to refer to an interconnection between or at the termination of a device element, circuit element, integrated circuit, device, or other electronic or semiconductor component.

[0052] Use of the term "ground" in the foregoing description includes chassis ground, earth ground, floating ground, virtual ground, digital ground, common ground, and / or any other form of ground connection applicable to or suitable for the teachings herein.

[0053] Although acts are shown as occurring in a particular order, this should not be understood as requiring that all illustrated acts be performed, or that such acts be performed in that order to achieve a desired result, unless such order is recited in one or more claims. In some situations, multitasking and parallel processing may be advantageous. Also, the separation of various system components in the above-described embodiments should not be understood as requiring such separation in all embodiments.

Claims

1. An Ethernet PHY device, comprising: a serial communications interface adapted to be coupled to a microcontroller; a register set having one or more registers that store a register image related to the PHY configuration; a checksum generator coupled to the set of registers and configured to calculate a current checksum of at least one of the registers for the register image; a checksum register coupled to the checksum generator and configured to store the current checksum; a checksum checker coupled to the checksum generator, the checksum register, and the microcontroller, comparing a previous value of the checksum to the current checksum; sending an error report to the microcontroller in response to the previous value being different from the current checksum; the checksum checker configured as follows: a trigger circuit having an input and an output coupled to the checksum generator, the trigger circuit configured to send a checksum start signal to the checksum generator in response to receiving an active signal at its input; An Ethernet PHY device, including:

2. 10. The device of claim 1, The device, wherein the serial communications interface is further adapted to be coupled to the microcontroller by a management data input / output (MDIO).

3. 10. The device of claim 1, The device further includes an electrostatic discharge (ESD) event sensing detector configured to provide an ESD trigger signal to one of the inputs of the trigger circuit.

4. 10. The device of claim 1, The device, wherein the trigger circuit input comprises a software trigger input.

5. 10. The device of claim 1, The device, wherein the input of the trigger circuit includes a link loss trigger input configured to provide an active signal when a link loss is detected.

6. 10. The device of claim 1, The device, wherein the trigger circuit input includes a signal quality indicator (SQI) input configured to provide an active signal when an SQI falls below an SQI threshold.

7. 10. The device of claim 1, The device, wherein the trigger circuit input includes a self-test trigger configured to initiate a self-test sequence.

8. 8. The device of claim 7, the self-test sequence: a checksum start signal sent by the trigger circuit to the checksum generator; a self-test checksum generated by the checksum generator in response to the checksum start signal, the self-test checksum being a checksum of the register to which a fail bit has been added; a failure indication sent by a checksum checker indicating that the self-test checksum does not match the current checksum; Including, the device.

9. 1. A method for detecting data corruption using hardware in an Ethernet PHY device, comprising: powering on the Ethernet PHY device; initializing the Ethernet PHY device and loading a register image relating to a PHY configuration into one or more registers within the Ethernet PHY device; reading the register using a checksum generator in the Ethernet PHY device; generating an initial checksum of the register image using the checksum generator; storing an initial checksum in a checksum register in the Ethernet PHY device; initiating a check of the register by the checksum generator reading the register; generating a current checksum of the register image with the checksum generator; comparing the current checksum with the initial checksum to verify that they match; A method comprising:

10. 10. The method of claim 9, If the current checksum and the initial checksum do not match, an error is reported to a microcontroller unit coupled to the device.

11. 10. The method of claim 9, The method wherein the register image is reloaded into the register if the current checksum and the initial checksum do not match.

12. 10. The method of claim 9, A method wherein a reset of an Ethernet PHY device is performed if the current checksum and the initial checksum do not match.

13. 10. The method of claim 9, The method, wherein initiating the check of the register is in response to a link loss.

14. 10. The method of claim 9, The method, wherein initiating testing of the resistor occurs in response to an electrostatic discharge (ESD) event.

15. 10. The method of claim 9, The method, wherein initiating the checking of the register occurs in response to a reduction in a signal quality indicator (SQI).

16. 1. An automotive network transceiver adapted to be coupled to a processor at a transceiver input, comprising: a register coupled to the transceiver input and adapted to store a copy of data stored in the processor, the data comprising a register image relating to a PHY configuration; a checksum generator coupled to the register, the checksum generator having a checksum output and configured to perform a checksum operation on the data on a portion of the register; a checksum register coupled to the checksum output; a checksum checker coupled to the checksum generator and the checksum register, comparing said checksum output with a previous checksum output; generating an error in response to the checksum output being different from the previous checksum output; the checksum checker configured as follows:

1. An automotive network transceiver, comprising:

17. 17. The automotive network transceiver of claim 16, 1. The automotive network transceiver, further comprising: a trigger circuit having an input and an output coupled to the checksum generator, the trigger circuit configured to send a checksum start signal to the checksum generator in response to receiving an active signal at its input.

18. 18. The automotive network transceiver of claim 17, An automotive network transceiver, wherein the trigger circuit input includes a link loss trigger input configured to provide an active signal when a link loss is detected.

19. 18. The automotive network transceiver of claim 17, An automotive network transceiver, wherein the trigger circuit input includes a signal quality indicator (SQI) input configured to provide an active signal when an SQI falls below an SQI threshold.

20. 18. The automotive network transceiver of claim 17, The automotive network transceiver, wherein the trigger circuit input comprises a software trigger input.

Citation Information

Patent Citations

  • Device and method for attaining interruption, resuming function and idle mode for protective mode microprocessor and hard disk

    JP2004005466A

  • Error detection on programmable logic resources

    JP2005505827A

  • Data error check method for eeprom and control unit

    JP2010250700A

  • Testing of display subsystems

    US20170094268A1

  • System and method for continuously verifying device state integrity

    US20200021308A1