Single event effect mitigation
AssigneeROLLS-ROYCE plc
InventorDavid F Brookes
Life of this patent
Estimating the term…
Abstract
A multi-logic device system, an electronic engine controller, and a method of operating the multi-logic device system. The multi-logic device system includes a primary logic device which is more resilient to single event effects, and one or more secondary logic devices, each secondary logic device being powered by a respective power supply unit and being more susceptible to single event effects. The primary logic device is configured to run, for each secondary logic device, a respective watchdog timer. Each watchdog timer is restarted upon receipt of a restart signal from the respective secondary logic device. The primary logic device is also configured, in response to a watchdog timer timing out, to identify and reset the secondary logic device corresponding to the timed out watchdog timer.
Claims9
A multi-logic device system, comprising:
- a primary logic device, said primary logic device being more resilient to single event effects;
- and
- a plurality of secondary logic devices, grouped by design assurance level, each having power supply units, said secondary logic devices being more susceptible to single event effects;
- wherein the primary logic device is configured to run, for each secondary logic device, a respective watchdog timer, wherein each watchdog timer is restarted upon receipt of a restart signal from the respective secondary logic device,
- wherein the primary logic device is configured, in response to a watchdog timer timing out, to identify and reset the secondary logic device corresponding to the timed out watchdog timer,
- wherein, of the plurality of secondary logic devices, secondary logic devices having a same design assurance level share a same power supply unit.
Dependencies are inferred from the claim text.