ECC Access Validation in SoC Crossbar Paths for Multi-SIL Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The development of safety-aware devices for automotive electronics is complex and costly due to the need for multiple system-on-chip (SoC) architectures to support varying Safety Integrity Levels (SILs), as different applications require different levels of redundancy and connectivity.
Innovation Solution
A system-on-chip architecture featuring two or more bus master devices, a crossbar switch for communication, and validation elements to validate access requests and responses, allowing the system to operate in both independent and redundant modes, thereby providing flexibility in safety integrity levels without requiring separate SoC designs for each SIL.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple SoC architectures are developed to support different Safety Integrity Levels, then the reliability and safety coverage are improved, but the device complexity and development cost increase
Solution Approach 1:
The patent implements a universal SoC architecture that can operate at multiple Safety Integrity Levels through configurable redundancy mechanisms. The system uses a single architecture design that can be adapted to provide SIL 2 or SIL 3 compliance by enabling or disabling specific redundancy features, such as dual master element configurations and validation paths, rather than requiring separate architectures for each safety level.
Solution Approach 2:
The system dynamically configures its redundancy level based on the required safety integrity level. The architecture allows runtime or compile-time selection of operational modes (independent or redundant) that adjust the degree of redundancy and validation performed, enabling the same hardware to adapt its safety characteristics to match application requirements without physical reconfiguration.
2Reliability
If redundancy of building blocks is tightly coupled to the SoC architecture, then the safety integrity level is improved, but the adaptability to different applications decreases
Solution Approach 1:
The patent segments the redundancy functionality into independent, modular components that can be selectively activated. Validation elements, comparators, and redundancy mechanisms are divided into discrete blocks that can be individually enabled or disabled based on the required safety level, allowing the system to provide high safety integrity when needed while maintaining adaptability for applications requiring lower safety levels.
Solution Approach 2:
The system changes operational parameters such as the degree of redundancy, validation strictness, and master element configuration to adapt to different safety requirements. By adjusting these parameters rather than changing the fundamental architecture, the system can provide different safety integrity levels for different applications using the same hardware platform.
3Reliability
If validation elements are added to validate access requests and responses, then the reliability is improved, but the device complexity increases
Solution Approach 1:
The patent uses validation elements that create and compare copies of critical data and control signals. Comparators generate duplicate representations of access requests and responses, then compare these copies to detect discrepancies. This copying approach provides robust error detection without requiring entirely separate validation systems, optimizing the balance between reliability and complexity.
4Ease of manufacture
If a single system architecture is used to support multiple SILs, then the development cost is reduced, but the ability to provide sufficient redundancy for high SIL applications may be compromised
Solution Approach 1:
The patent implements a nested architecture where validation elements and redundancy mechanisms are integrated within the data paths rather than existing as completely separate systems. The validation comparators and error detection logic are nested within the existing master element and data path structure, allowing high-level safety functionality to be achieved without proportionally increasing overall system complexity or development cost.
Data Source
AI summary
A system comprises a first master element; and at least one shared communication element arranged to operably couple the first master element to at least one slave element. The system further comprises at least one validation element located on at least one further validation path located between the first master element and the at least one slave element, wherein the at least one validation element is arranged to validate at least one of: at least one access request by the first master element; and a response to an access request from the at least one slave element.