Infineon Technologies Ag

Onespin Solutions Gmbh

Holger Busch

Jörg Bormann

An apparatus and corresponding method for protecting stored data. The apparatus includes a first encoder, a memory, a second encoder and a comparator. The first encoder is configured to generate first redundancy bits using a protection method to protect input data bits, whereas the input data bits are assigned to at least one of a plurality of classes. The memory is configured to store selectively inverted input data bits and/or selectively inverted first redundancy bits, whereas the selective inversion is based on the assigned at least one of the plurality of classes. The second encoder is configured to generate second redundancy bits using the protection method by encoding the selectively inverted input data bits. The comparator is configured to generate an alarm signal if the second redundancy bits are different from the first redundancy bits.

Apparatus, system and method for protecting data

The present invention enables a safety management of safety measures as well as the non-destructive testing of safety-relevant registers which are required for the configuration of a system, wherein the test method according to the invention can be carried out during each operating phase of a system to be tested.

Apparatus and method for the protection and for the non-destructive testing of safety-relevant registers

A method for formal fault detection in a design model includes providing a plurality of faults which are individually activatable in the design model, and providing a plurality of properties for the design model wherein each property of the plurality of properties is valid if none of the plurality of faults is activated. The method further includes selecting a property of the plurality of properties, and determining, by a formal property checker, whether activation of one fault of the plurality of faults causes the selected property to fail. If the formal property checker finds a particular fault which, when activated, causes the selected property to fail, determining that the selected property is capable to detect the particular fault, and if the formal property checker does not find any particular fault which, when activated, causes the selected property to fail, determining that the selected property is not capable to detect any fault of the plurality of faults.

Formal fault detection

A method is specified for determining the quality of a quantity of properties describing a machine, including a step for determining the existence of at least one sub-quantity of interrelated properties (P0, P1, . . . Pn) of the form Pi=(forall t. A(t)=&#x3e;Z(t)), wherein A(t) present an initial state and Z(t) a target state for a corresponding property and at least one initial state Ais dependant on internal signals and including a step for checking whether at least one aspect of the input/output behavior of the machine described by the properties, which cannot be derived from an individual property P, is described to such an accurate extent that one property Q exists, which represents this aspect without being dependant on the internal signals. The procedure is capable of providing a measurement and can particularly be used in the verification and specification of circuits.

Method for determining the quality of a quantity of properties, to be employed for verifying and specifying circuits

When designing digital circuits, the specification of the circuit is used to formulate properties and to check the applicability thereof using a model of the circuit. A verifier is employed and uses the model to determine whether a property is applicable by seeking a counterexample to which the property does not apply. Any counterexample appearing is evaluated to determine whether it is caused by a defective model or whether it should have been avoided by reformulating the property within the scope of the specification. Which exact part of the property led to the counterexample is determined when one appears. If a plurality of times is possible for a part of the property, the instant(s) at which specific events in the parts of the property lead to the counterexample is determined. A developer can evaluate the counterexample much more quickly using this information, so the development process can be accelerated.

Growing community of inventors

Brunnthal-Otterloh, Germany

Holger Busch