Redundant Control Circuitry for Consensus State Transitions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In redundant data processing systems, especially those requiring functional safety, ensuring synchronized state transitions across multiple instances is challenging due to discrepancies in power and clock control operations, which can lead to errors if P/Q channels do not agree, causing issues in fault detection and correction.

Innovation Solution

The implementation of control circuitry that detects state change signals across a threshold number of data handling devices, allowing a transition to a target operating state only when a second threshold number of devices agrees, with an optional provisional state and watchdog timer to manage synchronization and detect errors within a threshold time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If state change signals are issued to redundant data handling devices independently, then operational flexibility is improved, but synchronization reliability deteriorates due to potential disagreements between P/Q channels

Engineering Contradiction:
Improveoperational flexibilityVSAvoidsynchronization reliability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The control circuitry acts as an intermediary that receives state change signals and coordinates their distribution to multiple redundant data handling devices. It introduces a detection mechanism that monitors whether state change signals are issued to a threshold number of devices, ensuring synchronized operation while maintaining operational flexibility through controlled state transitions.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If control operations are performed on all redundant devices simultaneously, then synchronization is improved, but system complexity increases due to the need for consensus mechanisms

Engineering Contradiction:
ImprovesynchronizationVSAvoidcontrol mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control mechanism is segmented into distinct functional components: a detector that monitors state change signal distribution, a threshold comparison unit that evaluates whether the first threshold number of devices have received signals, and a control unit that orchestrates state transitions. This segmentation manages complexity by dividing the consensus mechanism into modular, manageable parts.

Inventive Principle:
Principle #1Segmentation

3Reliability

If state transitions are delayed to ensure consensus, then fault detection reliability is improved, but operational speed deteriorates due to waiting for threshold numbers of devices

Engineering Contradiction:
Improvefault detection reliabilityVSAvoidstate transition speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The control circuitry performs preliminary detection and evaluation of state change signals before executing state transitions. By detecting whether signals are issued to the threshold number of devices in advance, the system ensures fault detection reliability while minimizing delays, as the consensus check is prepared and evaluated proactively rather than reactively.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11010175B2Circuitry
Publication Date: 2021.05.18 ARM LTD
  • US11010175B2 patent drawing
  • US11010175B2 patent drawing
  • US11010175B2 patent drawing

AI summary

Circuitry comprises control circuitry to control an operating state of a data handling device of a set of two or more redundant data handling devices configured to perform identical data handling functions; the control circuitry being configured to control an operating state of the respective controlled data handling device as a state transition from a current operating state of that data handling device to a target operating state in response to the issue of a respective state change signal; the control circuitry comprising a detector responsive to issue of the state change signal in respect of a first threshold number representing some but not all of the data handling devices, to detect whether the state change signal is issued in respect of a further one or more of the devices so that a second threshold number of data handling devices is reached.