TMR Verification Using Sequential Circuit Disabling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for verifying triple module redundancy (TMR) designs fail to detect missing or incorrectly connected feedback voters, as they do not differentiate between the presence or absence of feedback voters, leading to incorrect output validation.
Innovation Solution
A method involving three redundant circuits with feedback voter circuits, where each circuit's output is checked for defects by disabling and enabling the circuits sequentially, and comparing the output to known valid data to determine the functionality of each feedback voter.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If conventional simulation methods are used to verify TMR designs, then the verification process is simple, but the method cannot detect missing or incorrectly connected feedback voters
Solution Approach 1:
The verification process is segmented into distinct test phases: first verifying feedback voter functionality by disabling individual circuits and checking output correctness, then verifying output voter functionality. This segmentation allows detection of feedback voter defects that conventional single-phase simulation misses.
Solution Approach 2:
The method performs preliminary verification of feedback voters before final output verification. By sequentially disabling circuits and checking outputs after each disabling action, the system preliminarily identifies defects in feedback voter circuits, ensuring they are functioning correctly before final validation.
2Reliability
If feedback voter circuits are added to synchronize state logic, then reliability is improved, but device complexity increases
Solution Approach 1:
Feedback voter circuits are introduced to monitor and correct state logic discrepancies between redundant circuits. The feedback mechanism compares outputs of three circuits and provides correction signals to synchronize state logic, ensuring reliability through automatic error detection and correction.
Solution Approach 2:
Feedback voters act as intermediary components between redundant circuits and the output voter. They mediate the synchronization process by receiving outputs from redundant circuits, comparing them, and providing corrected feedback signals, thereby simplifying the overall system architecture while maintaining reliability.
3Measurement precision
If sequential disabling and enabling of circuits is performed to verify feedback voters, then verification accuracy is improved, but verification time increases
Solution Approach 1:
The verification process uses periodic action by systematically cycling through each circuit, disabling it, checking output correctness, then enabling it before moving to the next circuit. This periodic verification pattern ensures comprehensive coverage of feedback voter functionality while maintaining an efficient verification sequence.
Data Source
AI summary
A method of verifying a triple module redundant circuit. The method comprises providing three circuits, each comprising a redundant circuit; coupling a feedback voter circuit at the output of each circuit of the three circuits, each feedback voter receiving the output of each of the three circuits; disabling a first circuit of the three circuits; enabling the first circuit; disabling a second circuit of the three circuits; and verifying the output of the triple module redundant design to determine whether an error has occurred. A article of manufacture for verifying a design implemented as a triple redundancy module is also described.