Three-Processor AR Wearable Recovery After OTA Communication Failure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Coordinating a rollback of active partitions for multiple processors in a system-on-a-chip (SoC) after an over-the-air (OTA) update is challenging, especially when communication channels between processors are not functioning properly, leading to potential device failures.
Innovation Solution
A recovery process is implemented where each processor maintains a record of its last active partition, and in case of communication errors, all processors are switched to their respective last partitions, and the system is rebooted to restore communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If OTA update is applied to multiple processors, then system functionality is improved, but communication failures may occur between processors
Solution Approach 1:
The system performs preliminary actions by switching all processors to their respective last active partitions before the communication failure is detected. Each processor maintains a record of its last active partition, and upon detecting a communication failure, the system proactively rolls back all processors to their previous stable state, preventing the communication failure from causing device failure.
Solution Approach 2:
The system implements beforehand cushioning by maintaining backup partitions (first partition and second partition) for each processor. When an OTA update is applied, processors switch to new partitions, but the system keeps the previous partitions as cushions. If communication failure occurs, these backup partitions provide a safety net that allows the system to recover without losing functionality.
2Reliability
If rollback of active partitions is coordinated for multiple processors, then communication is restored, but system complexity increases
Solution Approach 1:
The system merges the rollback operation into a single coordinated action that affects all processors simultaneously. Instead of managing multiple independent rollback processes, the system combines them into one unified rollback mechanism where all processors switch to their respective last active partitions together, simplifying the coordination complexity.
Solution Approach 2:
The system implements universality by creating a single recovery mechanism that handles multiple communication failure scenarios. The recovery process works regardless of which specific processor or communication channel fails, providing a universal solution that simplifies the complexity of coordinating rollbacks for different processor configurations.
3Stability of the object's composition
If all processors switch to last active partitions, then consistent system state is achieved, but update progress is lost
Solution Approach 1:
The system implements discarding and recovering by temporarily discarding the new updated partitions when communication failure is detected, and recovering by switching back to the last active partitions. This allows the system to discard the problematic new state and recover to a known good state, ensuring consistency while allowing future updates to proceed.
Solution Approach 2:
The system uses feedback mechanisms where processors communicate their partition status and communication health to each other. When communication failure is detected, the feedback loop triggers a coordinated rollback to last active partitions. This feedback-driven approach ensures that the system only rolls back when necessary, maintaining update progress during successful updates while ensuring consistency when failures occur.
Data Source
AI summary
A method performed on an augmented reality (AR) wearable device includes providing an over-the-air (OTA) update to all processors of a three-processor system, each processor of the three processor system having a respective current plurality of partitions and a respective last plurality of partitions. A communication error is detected between two or more processors of the three processor system after the OTA update. Respective active partitions are set for at least one of three processors to the last respective partition. The three processors are rebooted.