External Watchdog Timing Sync Across Bootloader and Application
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Accidental safety disable situations occur due to difficulty in determining the window open time in watchdog systems, especially during transactions between bootloader and application software components in battery management systems.
Innovation Solution
A watchdog system with a main control unit (MCU) and an external watchdog module, utilizing a shared memory area to store the last watchdog refresh timing, allowing the bootloader or application area to generate refresh requests and determine if they correspond to window open time, ensuring accurate timing synchronization for watchdog refreshes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the watchdog service is provided by the ASIC outside the MCU during transactions between bootloader and application, then system safety is improved, but it becomes difficult to determine the exact window open time causing accidental safety disable
Solution Approach 1:
The patent introduces a shared memory area as an intermediary between the bootloader/application and the external watchdog module. This shared memory stores the last watchdog refresh timing information, allowing the software components to accurately determine window open time without directly accessing the watchdog module's internal timing mechanisms. The intermediary resolves the contradiction by enabling precise timing measurement while maintaining the safety benefits of external watchdog monitoring.
2Adaptability or versatility
If the watchdog refresh is performed during any time, then the system operation flexibility is improved, but the watchdog may not be refreshed during window close time causing false failure recognition
Solution Approach 1:
The patent implements dynamic timing adaptation by having the bootloader or application check the stored last watchdog refresh timing against the current time to determine if the current moment falls within the window open time. This dynamic approach allows the system to adapt to different operational phases (bootloader vs. application execution) while ensuring watchdog refreshes only occur during valid window open periods, preventing false failure recognition during window close time.
3Device complexity
If the window open time is determined without shared memory storage, then the device complexity is reduced, but the timing synchronization between bootloader and application becomes inaccurate
Solution Approach 1:
The patent segments the memory structure into a dedicated shared memory area that is separate from the main software execution areas. This shared memory specifically stores the last watchdog refresh timing, creating a specialized data storage segment that enables accurate timing synchronization. The segmentation approach maintains relatively simple device complexity by using a focused, purpose-built memory segment rather than a complex distributed timing system.
Data Source
AI summary
Provided is a watchdog system including: a software area including a bootloader area and an application area, and a shared memory area storing the last watchdog refresh timing; and an external watchdog module refreshing a watchdog when a transmitted refresh request timing corresponds to window open time in response to a refresh request transmitted from either the bootloader area or the application area and based on the last watchdog refresh timing transmitted from the shared memory area and the transmitted refresh request timing.


