Watchdog Controller Fault Recovery via Reset Count Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional watchdog control methods fail to fundamentally address the root cause of system errors in embedded systems, leading to repeated resets and inefficient error restoration.
Innovation Solution
A method and apparatus that record fault information and reset counts in non-volatile memory, exclude problematic program groups from scheduling, and load substitute tasks to prevent repeated resets, utilizing a watchdog timer to manage system restarts and fault responses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a conventional watchdog timer is used to reboot the system when an error occurs, then the system can be restored to normal operation, but the root cause of the error is not identified and repeated resets may occur
Solution Approach 1:
The patent applies preliminary action by recording fault information and reset counts in non-volatile memory before system restart occurs. The controller stores program group information and watchdog reset counts in advance, so when a reset happens, the root cause information is already preserved and can be analyzed to prevent repeated resets.
Solution Approach 2:
The patent implements feedback by continuously monitoring watchdog reset counts and using this information to dynamically adjust system behavior. The controller reads the stored reset count, compares it against thresholds, and provides feedback by either excluding problematic program groups from scheduling or loading substitute tasks, thereby preventing repeated failures.
2Reliability
If the system continuously reboots to handle errors, then normal operation is restored, but productivity is reduced due to repeated interruptions
Solution Approach 1:
The patent applies self-service by enabling the system to automatically analyze fault information and take corrective actions without external intervention. The controller autonomously reads stored fault information, determines the appropriate response (excluding program groups or loading substitute tasks), and executes the correction, thereby reducing repeated reboots and improving system availability.
Solution Approach 2:
The patent changes system parameters dynamically based on fault analysis. When faults are detected, the controller modifies the scheduling parameters by excluding problematic program groups or replaces tasks with substitute tasks, thereby adjusting system behavior to prevent repeated failures and maintain productivity.
3Adaptability or versatility
If all program groups are scheduled for execution, then system functionality is maintained, but faulty program groups cause repeated watchdog resets
Solution Approach 1:
The patent applies the extraction principle by removing faulty program groups from the scheduling pool. When the controller detects that a program group has caused a watchdog reset and the reset count exceeds a threshold, it excludes that program group from future scheduling, thereby preventing repeated failures while maintaining execution of healthy program groups.
Solution Approach 2:
The patent introduces substitute tasks as intermediaries to replace faulty program groups. When a program group is excluded due to repeated failures, a substitute task is loaded to perform alternative functionality, thereby maintaining system adaptability while preventing the propagation of faults.
Data Source
AI summary
A method of controlling a watchdog and an apparatus for the same are provided. The method of controlling a watchdog within a controller includes determining, by a processor, whether to respond to a fault in the controller by comparing a watchdog count with a predetermined watchdog warning level when the fault is detected. Further, the method includes storing, by the processor, information regarding a program group related to the detected fault and a watchdog reset count that corresponds to the program group within a memory after increasing the watchdog reset count when the fault is to be responded to. In addition the processor is configured to reset the controller when the watchdog count exceeds a predetermined watchdog timeout level. Therefore, the present invention prevents occurrence of repeated resets that result from the same cause within the controller.