External Watchdog Timing Sync Across Bootloader and Application

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Accidental safety disable situations occur due to difficulty in determining the window open time in watchdog systems, especially during transactions between bootloader and application software components in battery management systems.

Innovation Solution

A watchdog system with a main control unit (MCU) and an external watchdog module, utilizing a shared memory area to store the last watchdog refresh timing, allowing the bootloader or application area to generate refresh requests and determine if they correspond to window open time, ensuring accurate timing synchronization for watchdog refreshes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the watchdog service is provided by the ASIC outside the MCU during transactions between bootloader and application, then system safety is improved, but it becomes difficult to determine the exact window open time causing accidental safety disable

Engineering Contradiction:
Improvesystem safetyVSAvoidwindow open time determination
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent introduces a shared memory area as an intermediary between the bootloader/application and the external watchdog module. This shared memory stores the last watchdog refresh timing information, allowing the software components to accurately determine window open time without directly accessing the watchdog module's internal timing mechanisms. The intermediary resolves the contradiction by enabling precise timing measurement while maintaining the safety benefits of external watchdog monitoring.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the watchdog refresh is performed during any time, then the system operation flexibility is improved, but the watchdog may not be refreshed during window close time causing false failure recognition

Engineering Contradiction:
Improvesystem operation flexibilityVSAvoidwatchdog service accuracy
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements dynamic timing adaptation by having the bootloader or application check the stored last watchdog refresh timing against the current time to determine if the current moment falls within the window open time. This dynamic approach allows the system to adapt to different operational phases (bootloader vs. application execution) while ensuring watchdog refreshes only occur during valid window open periods, preventing false failure recognition during window close time.

Inventive Principle:
Principle #15Dynamics

3Device complexity

If the window open time is determined without shared memory storage, then the device complexity is reduced, but the timing synchronization between bootloader and application becomes inaccurate

Engineering Contradiction:
Improvememory structureVSAvoidtiming synchronization
Core Design Contradiction:
Device complexityVSMeasurement precision

Solution Approach 1:

The patent segments the memory structure into a dedicated shared memory area that is separate from the main software execution areas. This shared memory specifically stores the last watchdog refresh timing, creating a specialized data storage segment that enables accurate timing synchronization. The segmentation approach maintains relatively simple device complexity by using a focused, purpose-built memory segment rather than a complex distributed timing system.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11928008B2Watchdog system, watchdog method, and battery management system comprising watchdog system
Publication Date: 2024.03.12 LG ENERGY SOLUTION LTD
  • US11928008B2 patent drawing
  • US11928008B2 patent drawing
  • US11928008B2 patent drawing

AI summary

Provided is a watchdog system including: a software area including a bootloader area and an application area, and a shared memory area storing the last watchdog refresh timing; and an external watchdog module refreshing a watchdog when a transmitted refresh request timing corresponds to window open time in response to a refresh request transmitted from either the bootloader area or the application area and based on the last watchdog refresh timing transmitted from the shared memory area and the transmitted refresh request timing.