Method and apparatus for performing a fault recovery based on an application dependent fault reaction time

A fault collection and control system (FCCS) of an SoC, the FCCS comprising:

• a reaction system;
• a controller;
• a domain identifier (DID) circuit arranged to output a domain identifier (DID) indicative of an application which caused a fault in a fault source of the SoC, the application executed by an application core of an SoC;
• a timer circuit arranged to determine based on the DID a fault reaction handling time interval (FRTI) for a reaction to the fault, wherein the DID is provided to a multiplexer which receives from a mapping multiplexer selected by a mapping control circuit a plurality of FRTI corresponding to different DID, the plurality of FRTI associated with the reaction, and which outputs to a timer of the timer circuit the FRTI based on the provided DID;
• the controller arranged to indicate to the reaction system a reaction associated with the fault;
• and
• the reaction system arranged to provide a reaction signal associated with the fault recovery;
• determine whether the fault is recovered based on the reaction signal and after an FRTI timeout is indicated by a timer of the timer circuit;
• and provide an indication of whether a safe state is reached based on the determination;
• wherein the FRTI is a first FRTI and the reaction is a first reaction;
• wherein the reaction system arranged to determine whether the fault is recovered or safe state is reached comprises the reaction system arranged to determine whether the safe state is reached or the fault recovered after the FRTI timeout;
• and wherein the reaction system arranged to provide an indication of a result of the fault recovery comprises the reaction system arranged to based on the safe state not being reached, signal a second reaction associated with the fault recovery different from the first reaction;
• wherein the timer circuit is further arranged to cause by the mapping control circuit the multiplexer to receive another plurality of FRTI corresponding to the different DID, the other plurality of FRTI associated with a second reaction;
• select by the multiplexer based on the provided DID a second FRTI from a plurality of FRTIs associated with the second reaction and output to the timer the second FRTI of the DID;
• wherein the reaction system arranged to determine whether the fault is recovered or safe state is reached further comprises the reaction system arranged to determine whether the safe state is reached or the fault recovered after a timeout of the second FRTI, wherein the first FRTI and the second FRTI are configured to reduce a time that the fault source reaches the safe state after the fault increasing functionality of the fault source after the fault compared to when the first FRTI and second FRTI do not change for different reactions;
• and
• wherein the second reaction is more severe than the first reaction.