43 results about "Lockstep" patented technology

The invention provides a heterogeneous flight control computer and a redundancy flight control computer system, the flight control computer comprises a normal mode lockstep calculation unit used for receiving external data and calculating to generate output data, and the output data is a control instruction used for controlling an aviation aircraft. The normal mode lockstep calculation unit selectively adopts one of the following two structures: the first structure comprises two heterogeneous control processors, the two heterogeneous control processors simultaneously calculate the external data to generate two groups of output data, and the two groups of output data are compared to realize lockstep; the second structure comprises a dual-core lockstep processor, two cores are used for calculating the external data at the same time to generate two sets of output data, and lockstep is achieved after the two sets of output data are compared. The invention provides the flight control computer with higher safety.

Apparatuses, systems, and methods for implementing temporal lockstep for error detection utilizing a single processor core are provided. For example, a processor core includes a pipeline with an instruction fetch circuit and an instruction decode and execute circuit. The instruction decode and execute circuit comprises a controller including a finite state machine with a plurality of states to control the processor core. A voting circuit is provided to vote on a control signal to control the finite state machine for transitioning from a current state to a next state. The processor core, based at least on the plurality of states of the finite state machine, is configured to: execute the first dummy instruction to generate a first dummy result; store the first dummy result in a first dummy buffer; execute the first real instruction to generate a first real result; compare the results to identify an error.

The invention provides a satellite-borne control computer and a safety control method thereof, and relates to the technical field of satellite-borne equipment. The dual-redundancy FPGA security gateway comprises a dual-CPU hot backup master control module, a dual-redundancy FPGA security gateway module and a peripheral module group, wherein the main control module integrates a dual-core lockstep kernel and an application processor kernel, and constructs a CPU redundant architecture combining a static lockstep pool and a dynamic lockstep pool; the state of the system is judged in real time by polling a PMU register and utilizing a health degree fusion algorithm, and then the ranges of the lock step part and the non-lock step part in the dynamic lock step pool are dynamically regulated and controlled. Meanwhile, a traditional full-static redundancy mode is broken through, task allocation is carried out according to work importance classification of instructions, and it is ensured that high-critical tasks preferentially obtain lock step redundancy protection; in addition, according to the invention, different satellite-borne control algorithms are subjected to local analogue simulation by using an idle kernel, and seamless switching of the satellite-borne control algorithms is realized by using switching between the master CPU and the slave CPU.

This invention proposes a microprocessor architecture, including: a master core, a slave core, a bus, and a comparator. The master core and the comparator are communicatively connected to the bus, and the slave core is communicatively connected to the comparator. When the microprocessor is in lockstep mode, the comparator blocks the slave core's access requests to the bus. Both the master core and the slave core execute the master core's tasks. The comparator compares the master core's execution data with the slave core's execution data to detect faults in the execution status of the master core's tasks. The invention also provides a microprocessor fault detection method, including: setting the microprocessor's operating mode according to task requirements, including lockstep mode and non-lockstep mode; if the microprocessor is in lockstep mode, both the master core and the slave core execute the master core's tasks, and faults in the execution status of the master core's tasks are detected by comparing the master core's execution data with the slave core's execution data.

A lockstep testing system includes a lockstep controller that generates various control signals. The lockstep testing system further includes various lockstep circuitries, with each lockstep circuitry including primary and redundant functional circuits that are operable in a lockstep mode, and a fault injection circuit that receives a control signal from the lockstep controller and injects a transient fault in the corresponding lockstep circuitry. The transient fault can be injected at one of input and output stages of the primary and redundant functional circuits. Each lockstep circuitry further includes a checker circuit that tests whether the corresponding lockstep circuitry is faulty (i.e., whether the injected fault is accurately detected), and generates and provides, to the lockstep controller, a fault indication signal indicating whether the corresponding lockstep circuitry is faulty.

This invention discloses a fault handling method based on a dual-core lockstep processor. The dual-core lockstep processor includes a master processor and a slave processor. The dual-core lockstep processor receives data from the last four stages of the processor's pipeline via a fault detection module, outputting a fault flag signal and a fault program pointer. A front-end fault handling module receives the fault flag signal and the fault program pointer, performing a pipeline-level rollback. A back-end fault handling module controls the handshake and selection signals of the last four stages of the pipeline and executes a virtual write-back fault-tolerance mechanism, managing the operating status of the last four stages of the pipeline and the instruction fetch stage pipeline. This prevents data conflicts during superscalar processor fault handling, thereby achieving full coverage of fault handling while maintaining low time and area overhead, and simultaneously achieving high performance and high reliability. This invention can be widely applied in the field of dual-core lockstep processors.

The invention relates to a validity verification method and device based on a dual-core lockstep mechanism, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring fault injection configuration parameters for performing electromagnetic fault injection; the fault injection configuration parameters comprise fault generation parameters, and the fault injection configuration parameters indicate to-be-verified functions; a verification instruction corresponding to the to-be-verified function is sent to a chip with a dual-core lockstep processor, so that the chip is switched to a test program corresponding to the to-be-verified function; electromagnetic interference is injected into the chip based on the fault generation parameters so as to trigger a dual-core lockstep processor of the chip to break down; and when the to-be-verified function is a fault detection function, obtaining a fault detection state and a fault output signal output by the chip, and verifying the validity of the fault detection function according to the fault detection state and the fault output signal. By adopting the method, the reliability of a verification result of validity verification based on dual-core overlock can be improved.

A completely de-energizable defibrillator is provided, allowing the electrical components of the defibrillator to be electrically unbiased while the defibrillator is not in use. The energizing of the defibrillator can be controlled through a power switch interfaced to a relay, with the microcontroller of the AED being able to de-energize the circuitry in case of unintended activation. Additionally, the microcontroller unit of the AED includes features to prevent computational errors due to external influences, electromagnetic interference, radio frequency interference, ionizing radiation, high energy particles, cosmic radiation, and / or solar radiation, or a combination thereof, including one or more pairs of lockstep processors, error detection code, and features that prevent tampering with the microcontroller.

The present disclosure relates to a semiconductor device. The semiconductor device performs software lockstep. The semiconductor device includes a first circuit group including a first intellectual property (IP) to be operated in a first address space, a first bus, and a first memory; a second circuit group including a second IP to be operated in a second address space, a second bus, and a second memory; a third bus connectable to a third memory; and a transfer control circuit coupled with the first bus to the third bus. When software lockstep is performed, the second circuit group converts an access address from the second IP to the second memory so that an address allocated to the second memory in the second address space is the same as an address allocated to the first memory in the first address space.

The invention discloses a multi-service demand adaptation method and device based on a single chip, equipment and a medium. The method comprises the following steps: dividing a plurality of processing cores in the system-on-chip into at least one processing domain based on service requirements; configuring a memory access permission for each processing domain so as to realize memory access isolation among different processing domains; configuring a hardware resource access permission for each processing domain so as to realize hardware resource access isolation between different processing domains; if a plurality of processing domains are obtained through division, an inter-domain cache consistency maintenance mechanism is configured; if a processing domain is obtained through division, an intra-domain cache consistency maintenance mechanism is configured; wherein the plurality of processing cores are connected through a consistent interconnection network; and configuring the processing core in the target processing domain into a lock step operation mode according to the function security level requirement corresponding to the service requirement. According to the method and the device, the cost and the time for developing special chips for different scenes are reduced, and multiplexing of hardware resources and improvement of research and development efficiency are realized.

A method for fault detection in a dual core lockstep microcontroller is provided. The method may include executing a set of instructions by a first central processing circuitry, executing the set of instructions by one or more second central processing circuitries operating in parallel with the first central processing circuitry, comparing an output from the first central processing circuitry with an output from one or more second central processing circuitries using a first comparator, comparing the output from the first central processing circuitry with the output from the one or more second central processing circuitries using one or more second comparators, and triggering, by at least one logic gate, a fault signal in response to output signals received from the first comparator and the one or more second comparators.

A method of explicit lockstep for functional safety includes spawning, by a main thread, a first safe thread core and a second safe thread core. The method also includes initializing and mapping a first data register associated with the first safe thread core to each safe variable of a set of predetermined safe variables. The method further includes initializing and mapping a second data register associated with the second safe thread core to each safe variable of the set of predetermined safe variables. The method also includes comparing, by a hardware comparator, a first safe variable value in the first data register to a second safe variable value in the second register. The method further includes issuing an error completion to the first safe thread core and the second safe thread core when the hardware comparator detects a mismatch between the first data register and the second data register.

A single-chip-based multi-service requirement adaptation method, device, equipment and medium. The method comprises: dividing a plurality of processing cores in a system-level chip into at least one processing domain based on service requirements; configuring memory access permissions for each processing domain to realize memory access isolation between different processing domains; configuring hardware resource access permissions for each processing domain to realize hardware resource access isolation between different processing domains; if a plurality of processing domains are obtained by division, a domain-to-domain cache consistency maintenance mechanism is configured; if one processing domain is obtained by division, an intra-domain cache consistency maintenance mechanism is configured; wherein the plurality of processing cores are connected through a consistent interconnection network; and the processing cores in the target processing domain are configured to a lockstep running mode according to the functional safety level requirement corresponding to the service requirement. Through the present application, the cost and time for developing special-purpose chips for different scenarios are reduced, and the reuse of hardware resources and the improvement of research and development efficiency are realized.

The invention relates to the technical field of chip architectures, and provides a lockstep core processor, a lockstep core reset circuit and electronic equipment, a clock reset control circuit in a verification core delays a system reset signal and inputs the delayed system reset signal to a system reset logic circuit, so that the system reset logic circuit can reset the system reset signal when performing reset processing; the reset delay time is the same as the input signal delay time, and the verification core can be reset only after completing the same operation as the main core, so that the problem of lock losing alarm caused by inconsistent reset time points of the verification core and the main core and inconsistent storage contents of a non-reset register during local reset is avoided, and the safety is improved.

The application provides a neural network-oriented accelerator, which comprises a main processing core, an input buffer, a controller, a main systolic array and an output buffer, the input buffer is used for storing feature maps and weight parameters of a neural network, the controller is used for generating operation signals to read the feature maps and the weight parameters from the input buffer, the main systolic array is used for receiving the feature maps and the weight parameters and performing calculation to obtain an output sequence; a sorter is used for reordering each element in the output sequence to select a to-be-detected sequence, a lockstep processing core is used for recalculating the value of each element in the to-be-detected sequence through a lockstep systolic array to obtain a check sequence; a check logic module is used for comparing whether the values of the same elements in the to-be-detected sequence and the check sequence are the same; and an error recovery module is used for recalculating the values of all elements in the to-be-detected sequence that do not pass the check according to a preset recalculation mechanism.

An exemplary fault-tolerant computing system includes a secondary processor configured to execute with a primary processor from a common program store in a delay lock-step manner, a comparator in a stored data and write-back path to detect a fault based on comparing a primary processor state and a secondary processor state, and allowing a write-back path delay that aborts execution when a fault is detected prior to write-back of invalid data. Auxiliary processor execution and main processor storage data and write back may be delayed by a predetermined number of cycles, allowing fault detection prior to writing invalid data. The storage data and write-back path may include a triple module redundancy configured to delay a level of most data only through the storage data and write-back path. Some embodiments may forward data from the storage data path delay stage to a write-back stage or memory if the load data address matches the address of data in the storage data path delay stage.

The invention relates to a novel lockstep safety system capable of covering a latent fault, and the system comprises a first time sequence module which is configured to receive external input data and send the data to a function core and a shadow core; a functional core; a shadow core; the second time sequence module comprises a first self-detection beating module and a second self-detection beating module, the first self-detection beating module sends an execution result of the functional core to the comparator, or the first self-detection beating module generates first data and sends the first data to the comparator; the second self-detection beating module sends the execution result of the shadow core to the comparator, or the second self-detection beating module generates second data and sends the second data to the comparator; and the comparator is configured to receive the execution results sent by the first self-detection beating module and the second self-detection beating module and compare the execution results to diagnose whether the functional core and the shadow core have faults or to receive and compare the first data and the second data to diagnose whether the comparator itself has faults.

The application discloses a processor lockstep device and related components, and relates to the field of processors, comprising a lockstep module and an abstract generation module corresponding to each processor. Each abstract generation module generates abstract data according to the running data of each processor. The lockstep module compares whether the abstract data is consistent to determine whether each processor is working normally. The abstract generation module extracts abstract data from the running data of each processor, and the lockstep is completed based on the abstract data. On the basis of realizing the judgment of whether each processor is working normally, the amount of data to be compared in the lockstep process is reduced, and the integrity of the running data of each processor to be transmitted is ensured.

Apparatuses, systems, and methods for implementing temporal lockstep for error detection utilizing a single processor are provided. For example, a processor includes a controller, wherein the controller includes a finite state machine comprising a plurality of states. The processor, based at least on the plurality of states of the finite state machine, is configured to fetch a first instruction, generate a first dummy instruction based on the first instruction and a first real instruction based on the first instruction, execute the first dummy instruction to generate a first dummy result; store the first dummy result in a first dummy buffer, execute the first real instruction to generate a first real result, and compare the first dummy result stored in the first dummy buffer with the first real result to identify an error.

A method of explicit lockstep for functional security includes deriving, by a main thread, a first security thread core and a second security thread core. The method also includes initializing a first data register associated with the first security thread core and mapping it to each security variable in a set of predetermined security variables. The method also includes initializing a second data register associated with a second security thread core and mapping it to each security variable in a set of predetermined security variables. The method further includes comparing, by a hardware comparator, a first security variable value in the first data register to a second security variable value in the second register. The method further includes issuing an erroneous completion to the first secure thread core and the second secure thread core when the hardware comparator detects a mismatch between the first data register and the second data register.

The application discloses a kind of coaxial shafting engine intelligent layered distributed control method and system, to solve the problem of slow control response, poor fuel adaptability and safety linkage lag caused by high-speed shafting strong coupling.The method comprises: performing system self-checking calibration, driving shafting to establish self-sustaining operation, loading to steady state and performing speed fuel double closed loop, double flow path thermal management, multi-fuel self-adaptation and efficiency optimization, and triggering hardware level protection when abnormal.The system comprises: multi-core lockstep MCU decision layer, FPGA fast execution layer and sensor executor network;MCU is responsible for logical decision and optimization, FPGA is responsible for hard real-time control and physical level emergency stop.The application separates decision and execution logic through layered architecture, can realize hard real-time stable control under high-speed working condition and multi-fuel variable working condition disturbance-free switching, while ensuring material safety, significantly improves system cycle efficiency and operation and maintenance intelligent level.

Systems and methods related to area-efficient functional safety are disclosed. A main core may have a first physical design and register transfer level (RTL) description. A secondary core may have a second physical design. The secondary core may have the same RTL description, but the first physical design may focus on performance and speed while the second physical design focuses on area-efficiency or low power. The secondary core may have a portion of the same RTL, but a different RTL description overall. The portion that is described by the same RTL may be an error prone portion of the main core. In either case, the secondary core may be physically smaller than the main core. The secondary core may be used to monitor for errors of the main core during operation. The main core may slow down when the main core and secondary core are operated in lockstep.

A method and system are disclosed for adaptive lossless data compression using a predictive model that is updated deterministically in lockstep at both encoder and decoder. An encoder generates symbol probability distributions from a frozen base model with a small set of updatable parameters, encodes input blocks via entropy coding, and applies deterministic parameter updates using the observed data. A decoder entropy-decodes the compressed bitstream, reconstructs the same blocks, and applies identical updates, thereby maintaining synchronization without transmission of model parameters. Optional features include periodic beacons for state verification and resynchronization, error-control metadata, and modality-specific tokenization. In preferred embodiments, parameter adaptation is confined to adapter modules within a largely fixed neural network, ensuring computational efficiency and reproducibility across platforms. Over time, the model specializes to the stream, reducing average coding rate while guaranteeing exact reconstruction of the original data.

The application relates to the chip architecture technical field and provides a lockstep core processor, a lockstep core reset circuit and electronic equipment. A clock reset control circuit in a check core delays a system reset signal and inputs the system reset signal to a system reset logic circuit, so that the system reset logic circuit has the same reset delay time and input signal delay time when performing reset processing. The check core can be reset after completing the same operation as the main core, so that the problem of inconsistent reset time points of the check core and the main core during local reset, inconsistent storage contents of non-reset registers and lock loss alarm is avoided, and the safety is improved.

The application provides a satellite-borne control computer and a safety control method thereof, and relates to the technical field of satellite-borne equipment; the application comprises a main control module of double-CPU hot backup, a double-redundancy FPGA safety gateway module and a peripheral module group; wherein the main control module adopts a CPU redundancy architecture combining a static lockstep pool and a dynamic lockstep pool by integrating a dual-core lockstep kernel and an application processor kernel; the system state is judged in real time by polling a PMU register and using a health degree fusion algorithm, and then the range of the lockstep and non-lockstep parts in the dynamic lockstep pool is dynamically regulated. Meanwhile, the application breaks through the traditional full-static redundancy mode, and task allocation is performed according to the importance classification of instructions, so that high-key tasks can be ensured to obtain lockstep redundancy protection in priority; in addition, the application also uses the idle kernel to perform local simulation of different satellite-borne control algorithms, and uses the switching between the master CPU and the slave CPU to realize seamless switching of the satellite-borne control algorithm.

A system (300) includes a memory (206) configured to store test patterns. A first lockstep core (102) and a second lockstep core (104) are configured to receive a same set of test patterns. During a reset of the first lockstep core and the second lockstep core, a first scan output is generated from the first lockstep core (102) and a second scan output is generated from the second lockstep core (104). A comparator (306) can be coupled to the first lockstep core and the second lockstep core and configured to compare the first scan output and the second scan output. If the first and second scan outputs are the same, the first and second lockstep cores (102, 104) can be initialized to a similar state. The first and second lockstep cores can comprise non-resettable flip-flops.

A processor-safe lockstep method based on low-bit-precision computing includes: in the convolutional neural network computation of an artificial intelligence processor, inputting feature maps and weight data, and performing parallel computation using a low-bit-precision computing unit array and a high-bit-precision computing unit array to obtain low-bit-precision computation results and high-bit-precision computation results respectively, wherein the number of bits in the low-bit-precision computing unit array is lower than the number of bits in the high-bit-precision computing unit array; verifying the high-bit-precision computation result based on the low-bit-precision computation result and outputting it. This application employs parallel low-bit-precision and high-bit-precision computation, compares the error of the low-bit-precision computation result with the error of the high-bit-precision computation result, and if the error is controlled within a certain range, the high-bit-precision computation result is considered correct. This verification of the computation result constitutes a safe lockstep mechanism, thereby reducing the area overhead and energy consumption of the artificial intelligence processor core.

This invention provides a data processing system. In this system, an execution thread group can execute a set of instructions in lockstep, and multiple execution channels can perform processing operations for the execution threads. Two or more execution threads of the thread group are assigned to the same execution channel for execution. These two or more execution threads can then be processed consecutively by the execution channel, allowing the execution channel to continuously perform the same processing operations. This can reduce signal switching, thereby reducing the overall power consumption of the data processor.

A processor is described. The processor includes model specific register space that is visible to software above a BIOS level. The model specific register space is to specify a granularity of a processing entity of a lock-step group. The processor also includes logic circuitry to support dynamic entry / exit of the lock-step group's processing entities to / from lock-step mode including: i) termination of lock-step execution by the processing entities before the program code to be executed in lock-step is fully executed; and, ii) as part of the exit from the lock-step mode, restoration of a state of a shadow processing entity of the processing entities as the state existed before the shadow processing entity entered the lock-step mode and began lock-step execution of the program code.

This application discloses a dual-core lockstep circuit, a controller, and a vehicle. The dual-core lockstep circuit includes: a first processor configured to be coupled to a first signal terminal; a second processor configured to be coupled to the first signal terminal via a first register circuit; a control circuit configured to be coupled to the first register circuit and a clock signal line, providing a clock signal to the first register circuit based on the signal states of its input and output terminals; wherein, the control circuit provides a clock signal when the signal states are different, and does not provide a clock signal when the signal states are the same. A comparator circuit configured to be coupled to the output terminal of the second processor determines the validity of the first processor's function based on first data and second data. This application can reduce the power consumption of the dual-core lockstep circuit and the applied vehicle, achieving power savings with finer granularity, improving the overall circuit reliability, and enhancing the stability of the applied system.