Method for redundant processing of data

Patent metadata

Field	Value
Publication number	US-10089195-B2
Application number	US-201615279585-A
Country	US
Kind code	B2
Filing date	Sep 29, 2016
Priority date	Sep 30, 2015
Publication date	Oct 2, 2018
Grant date	Oct 2, 2018

Abstract

A method for redundant processing of data by at least two processing units is described. After a restart or reset, the first processing unit of the at least two processing units receives first portions of the data for processing from at least one second processing unit of the at least two processing units.

First claim

What is claimed is:

1. A method for redundant processing of data by at least two processing units, the method comprising:
receiving, by the at least two processing units, data, the data received by the at least two processing units being identical;
redundantly processing the received data by the at least two processing units;
detecting an error in a first processing unit of the at least two processing units based on the redundant processing;
based on detecting the error, restarting or resetting the first processing unit;
after the restarting or resetting of the first processing unit, receiving and processing, by the first processing unit, additional data transmitted from at least one second processing unit of the at least two processing units, the additional data including data received by the first processing unit prior to the restarting or resetting of the first processing unit, and data missed by the first processing unit during the restarting or resetting of the first processing unit; and
after the receiving and processing of the additional data by the first processing unit, the at least two processing units resuming redundant data processing.

2. The method as recited in claim 1 , wherein, after the restart or reset, requesting, by the first processing unit, the additional data from the at least one second processing unit.

3. The method as recited in claim 1 , further comprising:
putting a system including the at least two processing units into a protected system state by the restart or reset of the first processing unit, the protected state having reduced functionality.

4. The method as recited in claim 3 , wherein the protected system state is terminated when the first processing unit has resumed data processing or when the first processing unit no longer needs the additional data for processing.

5. The method as recited in claim 1 , wherein the first processing unit receives the additional data at least from a particular second processing unit of the at least two processing units and from a third processing unit of the at least two processing units.

6. The method as recited in claim 5 , further comprising:
comparing, by the first processing unit, the additional data received from the particular second processing unit to the additional data received from the third processing unit, to determine if the additional data received from the second particular processing unit are identical to the additional data received from the third processing unit; and
based on results of the comparing, the first processing unit processing the additional data.

7. The method as recited in claim 1 , wherein the first processing unit receives first portions of the additional data from a particular second processing unit of the at least two processing units, the first processing unit receives second portions of the additional data from a third processing unit of the at least two processing units, and the first processing unit assembles data needed for processing from the first portions of the additional data and the second portions of the additional data.

8. The method as recited in claim 1 , wherein the additional data sent from the at least one second processing unit and received by the first processing unit are protected prior to being sent by the at least one second processing unit via one of a check sum or live counter information.

9. The method as recited in claim 1 , wherein first results of a processing of data by the first processing unit and at least second results of a processing of data by the at least one second processing unit are checked by a comparison unit for consistency.

10. The method as recited in claim 9 , wherein the first processing unit and the at least one second processing unit are microprocessors, and the comparison unit is a microcontroller.

11. The method as recited in claim 1 , wherein the first processing unit detects the error itself.

12. The method as recited in claim 1 , wherein the error is detected by an external monitoring of the first processing unit by a comparison unit.

13. The method as recited in claim 1 , wherein the data received by the at least two processing units and redundantly processed by the at least two processing units are based on sensor measurements.

14. The method as recited in claim 13 , wherein the redundant processing of the received data occurs within a surroundings detection in an application for highly automated driving, and the sensor measurements include at least one of radar measurements, Light Detection and Ranging (“LIDAR”) measurements, video recordings, and ultrasound measurements.

15. The method as recited in claim 1 , wherein in the event of a start of a system including the at least two processing units and one comparison unit, the at least two processing units and the comparison unit exchange information about services offered in the system.

16. The method as recited in claim 15 , wherein after the restart of the first processing unit, the first processing unit receives information about services offered by another of the at least two processing units and about services offered by the comparison unit.

17. A non-transitory electronic memory medium on which is stored a computer program for redundant processing of data by at least two processing units, the computer program, when executed by a processor, causing the processor to:
receive, by the at least two processing units, data, the data received by the at least two processing units being identical;
redundantly process the received data by the at least two processing units;
detect an error in a first processing unit of the at least two processing units based on the redundant processing;
based on detecting the error, restart or reset the first processing unit;
after the restart or reset of the first processing unit, receive and process, by the first processing unit, additional data transmitted from at least one second processing unit of the at least two processing units, the additional data including data received by the first processing unit prior to the restarting or resetting of the first processing unit, and data missed by the first processing unit during the restart or reset of the first processing unit; and
after the receiving and processing of the additional data by the first processing unit, the at least two processing units resume redundant data processing.

18. A first processing unit of at least two processing units for redundant processing of data by the at least two processing units, the first processing unit configured to:
receive data, the data received by the first processing unit being identical to data received by at least a second one of the at least two processing units;
redundantly process the received data, the processing being redundant relative to processing by others of the at least two processing units;
detect an error in the first processing unit based on the redundant processing;
based on detecting the error, restart or reset the first processing unit;
receive, after the restart or the reset of the first processing unit, additional data transmitted from at least one second processing unit of the at least two processing units, the additional data including data received by the first processing unit prior to the restart or reset of the first processing unit, and data missed by the first processing unit during the restart or reset of the first processing unit; and
after the receipt and processing of the additional data by the first processing unit, the first processing unit resuming redundant data processing.

Assignees

• Bosch Gmbh Robert

Inventors

• Liisberg Mikkel
• Schleser Roland

Classifications

• G06F11/1658 Primary

  Data re-synchronization of a redundant component, or initial sync of replacement, additional or spare unit · CPC title

• G06F2201/805

  Real-time · CPC title

• G06F11/184

  where the redundant components implement processing functionality · CPC title

• G06F11/181

  Eliminating the failing redundant component · CPC title

• G06F2201/845

  Systems in which the redundancy can be transformed in increased performance · CPC title