MCU-PMIC Application Clustering for Granular Fault Resets

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current control systems for automotive components face challenges in balancing system availability and safety activation granularity, often causing unrelated systems to transition to a safe state upon detection of faults, leading to reduced availability and potential incorrect resets.

Innovation Solution

Implementing a microcontroller and power management integrated circuit (PMIC) with per-application group fault detection and management, allowing for granular control through program and hardware monitoring circuitry, enabling independent resets of application groups to maintain system availability and prevent fault propagation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complete safety system activation is performed upon detection of faults, then safety is improved, but system availability deteriorates due to unrelated systems transitioning to safe state

Engineering Contradiction:
ImprovesafetyVSAvoidsystem availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The microcontroller unit is divided into multiple application groups (first application group, second application group, etc.), each with independent hardware components. When a fault is detected in one application group, only that specific group transitions to safe state while other groups continue operating normally, thus maintaining system availability while ensuring safety.

Inventive Principle:
Principle #1Segmentation

2Reliability

If complete system reset is performed in response to faults, then fault propagation is prevented, but recovery time increases and unrelated functions are disrupted

Engineering Contradiction:
Improvefault containmentVSAvoidrecovery time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system provides individual reset capability for each application group through separate reset inputs. When a fault occurs, only the affected application group is reset while other groups continue to operate, significantly reducing recovery time and avoiding disruption to unrelated functions while still containing the fault effectively.

Inventive Principle:
Principle #1Segmentation

3Productivity

If granular per-application group monitoring is implemented, then system availability is improved, but device complexity increases

Engineering Contradiction:
Improvesystem availabilityVSAvoidmonitoring complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The microcontroller unit is segmented into distinct application groups with independent monitoring circuitry for each group. Each application group has its own program status monitoring and hardware status monitoring, allowing faults to be detected and isolated at the group level rather than requiring complete system-wide monitoring, thus improving availability while managing complexity through modular design.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11493982B2Microcontroller and power management integrated circuit application clustering for safe state management
Publication Date: 2022.11.08 INFINEON TECHNOLOGIES AG
  • US11493982B2 patent drawing
  • US11493982B2 patent drawing
  • US11493982B2 patent drawing

AI summary

Systems, methods, and circuitries are provided for controlling a microcontroller (MCU) on a per-application basis. A control system includes a microcontroller unit (MCU) including a first application group and a second application group. The first application group includes at least one hardware component not associated with the second application group. The control system includes a power management integrated circuit (PMIC). The PMIC includes monitoring circuitry configured to monitor the first application group to detect a first application group fault condition and monitor the second application group to detect a second application group fault condition. Based on the monitoring, the PMIC provides a first reset signal to the first application group that does not reset the second application group or provides a second reset signal to the second application group that does not reset the first application group.