Microcontroller Failure Isolation for Safe Peripheral Reconfiguration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In systems with microcontrollers and peripheral devices, program execution failures can lead to incorrect and corrupt configuration information being transferred, causing cascading system failures, especially when entering safe mode.
Innovation Solution
An external device monitors the microcontroller, identifies failures, disconnects communication between the microcontroller and peripheral device, establishes a supplementary communication channel, and sends correct configuration information from a backup memory to the peripheral device, preventing the propagation of incorrect data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the microcontroller continues to transmit configuration information after program execution failure, then the data communication remains active, but the peripheral device receives corrupt or incorrect configuration information
Solution Approach 1:
An external device is introduced as an intermediary between the microcontroller and peripheral device. This external device monitors the microcontroller's program execution status and controls the data communication accordingly. When execution failure is detected, the external device interrupts the communication, preventing corrupt configuration information from being transmitted to the peripheral device.
Solution Approach 2:
The system implements a feedback mechanism where the external device continuously monitors the microcontroller's program execution status and uses this information to control the data communication. The monitoring result feeds back to the communication control logic, enabling dynamic adjustment of the communication state based on the actual execution status.
2Reliability
If the system enters safe mode upon detecting microcontroller failure, then correct configuration can be provided, but the peripheral device loses its current configuration
Solution Approach 1:
The external device maintains a backup of correct configuration information in advance. When microcontroller failure is detected and the system enters safe mode, this pre-stored configuration can be immediately provided to the peripheral device without requiring time-consuming reconfiguration procedures or system restarts.
3Measurement precision
If the microcontroller is monitored continuously for execution failures, then failures can be detected early, but the system requires additional monitoring infrastructure
Solution Approach 1:
The external device serves as a monitoring intermediary that observes the microcontroller's program execution through the existing data communication interface. This approach enables failure detection without requiring additional dedicated monitoring hardware or complex monitoring infrastructure, as the external device utilizes the same communication bus already present in the system.
Data Source
AI summary
A method for checking program execution of a microcontroller relating to a peripheral device in data communication with a microcontroller via a communication bus includes monitoring the microcontroller by an external device, identifying a failure status of the microcontroller by the external device based on the monitoring, disconnecting data communication between the peripheral device and the microcontroller by the external device, establishing a supplementary data communication between the external device and the peripheral device, and sending configuration information to the peripheral device by the external device via the supplementary data communication.