Microcontroller Identifier Checks for Fault-Detectable Safety Messaging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for transmitting safety messages between machines in facilities face challenges in ensuring functional safety compliance due to noise, latency, and inefficiencies, which can lead to errors that compromise safety.
Innovation Solution
The use of multiple microcontrollers in conjunction with application processors to provide scalable redundancies for error detection, combined with data encoding to detect bit overwriting errors, and fault indicators to reveal bit overwrite errors in communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple microcontrollers are used to provide redundant processing for safety message verification, then reliability of safety communication is improved, but device complexity increases
Solution Approach 1:
The system divides the safety verification task into multiple independent microcontrollers, each processing and verifying safety messages separately. This segmentation allows redundant verification paths without requiring a single complex processing unit, thereby improving reliability while managing complexity through modular architecture.
Solution Approach 2:
Multiple microcontrollers are deployed as copies of the same verification logic, each independently processing safety messages. This copying approach provides redundant verification capabilities where multiple instances perform identical functions, ensuring that if one microcontroller fails, others can still verify safety communications.
2Measurement precision
If data encoding is performed to detect bit overwriting errors, then measurement precision of error detection is improved, but use of energy increases
Solution Approach 1:
The system uses lightweight encoding schemes that can be implemented with simple logic circuits rather than complex processing. These encoding mechanisms are designed to be computationally inexpensive, allowing continuous error detection without significant energy overhead, effectively treating the encoding verification as a disposable, low-cost check.
3Reliability
If fault indicators are implemented to reveal bit overwrite errors, then reliability of error detection is improved, but device complexity increases
Solution Approach 1:
The fault indicator mechanism uses distinct signal states (analogous to color changes) to indicate different error conditions. When bit overwriting errors are detected through encoding verification, the system transitions to a fault indicator state that clearly signals the error condition, providing reliable error detection through simple state transitions rather than complex analysis.
4Reliability
If functional safety standards are strictly enforced with multiple verification layers, then safety of machine operations is improved, but productivity decreases
Solution Approach 1:
The system performs safety verifications and error checks in advance before critical operations occur. By continuously verifying safety messages and detecting errors proactively through multiple microcontrollers and encoding checks, the system prevents safety issues from developing into critical failures, thereby maintaining productivity while ensuring safety compliance.
Solution Approach 2:
The multiple microcontrollers autonomously perform verification of safety messages without requiring external intervention. The system self-verify communications through redundant processing paths, automatically detecting and flagging errors without needing manual safety checks, thus maintaining productivity while enforcing safety standards.
Data Source
AI summary
An application processor receives first and safety state information from first and second microcontrollers, and respective first and second sets of bytes forming a first identifier of the first microcontroller and a second identifier of the second microcontroller. The processor concatenates a safety message including the first and second safety state information, the safety message including the first set of bytes and the second set of bytes. The processor transmits the safety message to a second application processor of a safety controller, which separates, the first set of bytes and the second set of bytes, compares at least one of the first set of bytes and the second set of bytes to a data structure of known microcontroller identifiers, and verifies the safety state information based on identifying a match.