Koninklijke Philips Corporation N.v.

Nxp B.v.

Nxp Usa, Inc.

Freescale Semiconductor,inc.

Markus Baumeister

Peter Fuhrmann

Steffen Hauptmann

Karin Klabunde

Heribert Baldus

Joachim Kahlert

Manfred Bruno Zinke

Andras Montvay

Frank Steinert

Andries Van Wageningen

Michael Rohleder

Carl Culshaw

Thomas Maria Falck

Thomas Henry Luedeke

Joachim Fader

Joachim Kruecken

Olaf Wischhusen

Rolf Dieter Schlagenhaft

Joern Ungermann

Jeffrey Freeman

Frank Lenke

A system on a chip comprising: a first communication controller; at least one second communication controller operably coupled to the first communication controller; at least one processing core operably coupled to the first communication controller and arranged to support software running on a first partition and a second partition; and a virtual machine monitor located between the first and second partitions, and the at least one processing core and arranged to support communications there between. The first communication controller is arranged to: generate or receive at least one data frame; and communicate the at least one data frame to the at least one second communication controller; such that the at least one second communication controller is capable of routing the at least one data frame to the second partition bypassing the virtual machine monitor.

System on a chip and method for a controller supported virtual machine monitor

A system-on-chip device comprises a core supporting a first virtual machine image and a virtual machine monitoring unit capable of communicating with the first virtual machine image. A shareable resource is also provided as well as a conflict detection unit capable of communicating with the virtual machine monitoring unit and the first virtual machine image. The conflict detection unit is arranged to detect, when in use, an access conflict caused by more than one virtual machine image attempting to access initially the shareable resource. The conflict detection unit is arranged to refer, when in use, the access conflict in response to detection thereof to the virtual machine monitoring unit for resolving of the access conflict, thereby handling the access conflict before the virtual machine monitoring unit.

Conflict detection circuit for resolving access conflict to peripheral device by multiple virtual machines

A microprocessor comprises at least one reset management module. The at least one reset management module is arranged to detect a reset event, determine if at least one reset condition has been met upon detection of the reset event, and cause at least a part of the microprocessor to remain in a reset state upon determining that the at least one reset condition has been met.

Microprocessor, and method of managing reset events therefor

An interrupt supervision system comprises an interrupt controller device comprising a plurality of interrupt request input lines and at least one output line connectable to a processing device. The interrupt controller device is arranged to receive, on the plurality of interrupt request input lines, a plurality of corresponding interrupt requests and to provide, on the at least one output line, the plurality of interrupt requests to the processing device in a sequence generated by the interrupt controller device depending on one or more priorities assigned to the interrupt requests; and one or more interrupt checker devices, each being arranged to receive a reception indication when the interrupt controller device receives, on a selected one of the plurality of interrupt request lines, a corresponding selected interrupt request, and to provide a corresponding error indication when an output of the corresponding selected interrupt request from the interrupt controller device on the at least one output line is not confirmed within a latency period assigned to the corresponding selected interrupt request, wherein the assigned latency period begins when the interrupt checker device receives the reception indication.

Interrupt supervision system, processing system and method for interrupt supervision

A method of processing data in a data processor comprising at least two data processing units. The method comprises performing different data processing steps in the data processing units concurrently during a parallel operation, and replicating performances of selected identical data processing steps in the data processing units during a non-synchronised redundant operation. The non-synchronised redundant operation comprises an initial performance of the selected identical data processing steps in one of the data processing units and a replicate performance of the data processing steps starting later than the initial performance, preferably in another of the data processing units. Initial result data representative of results from the initial performance are registered, and compared with replicate result data representative of results from the replicate performance, and an error signal is produced in case of discrepancy.

Fault tolerance of data processing steps operating in either a parallel operation mode or a non-synchronous redundant operation mode

The present invention relates to a clock supervision unit () and an electronic system clocked by at least one clock (c*) and using the clock supervision unit (). The clock supervision unit () analyzes the at least one clock (c*) based on a monitor clock (m*) provided together with the at least one clock (c*) or separately to the clock supervision unit (). The clock supervision unit () at least comprises an activity unit (), a deviation unit () and an auxiliary clock generator (). The auxiliary clock generator () outputs an auxiliary clock (a*). The activity unit () detects the presence of the monitor clock (m*) based on the auxiliary clock (a*) and the presence of the auxiliary clock (a*) based on the monitor clock (m*). The deviation unit () detects clock faults in the monitor clock (m*) based on the auxiliary clock (a*). With the clock supervision unit () according to the present invention, the at least one clock (c*) can be supervised in more detail and it is possible to react on different clock faults in the at least one clock c* with different error handling procedures, e.g. by initiating a shutdown of the devices controlled by the electronic system.

Clock supervision unit

The invention relates to a time triggered network used in particular in an automotive network having a plurality of clusters. Each cluster (A-X) includes a plurality of nodes (). For saving time during startup a cluster coupler unit () in a time triggered network is proposed, wherein the network comprises a plurality of communication clusters (A-X) each having a plurality of nodes (), the communication clusters (A-X) are compatible to each another in cycle length, slot length and frame length, wherein a cluster coupler unit () being connected to at least two communication clusters (A-X), the cluster coupler unit () includes as many protocol engines () as communication clusters are connected, each protocol engine () having at least one receiving input (RXD) and one transmitting output (TXD), wherein a synchronization logic () is connected to at least one of the receiving inputs (RXD) and/or the transmitting outputs (TXD) of the protocol engines (), wherein the synchronization logic () distributes information from incoming/outgoing signals, which is used for synchronizing the connected communication clusters (A-X) during startup.

Cluster coupler unit and method for synchronizing a plurality of clusters in a time-triggered network

A circuit comprises a clock tree for distributing a clock signal. A first counter is arranged at a first point in the clock tree. Upon detecting a triggering edge in the clock signal, the first counter sets a first current count equal to a first delayed count. After a first delay, the first counter sets the first delayed count equal to the first current count plus an increment. A second counter is arranged at a second point in the clock tree. Upon detecting a triggering edge in the clock signal, the second counter sets a second current count equal to a second delayed count. After a second delay, the second counter sets the second delayed count equal to the second current count plus the increment. A comparator compares the first current count and the second current count. The first point and the second point are not the same, or the second delay is longer than the first delay.

Clock glitch detection

The present invention relates to a node in distributed communication system operating under a time triggered protocol, further it relates to distributed communication system and to a monitoring device coupled to such node of a communication system. To provide a node in a distributed communication system, a distributed communication system and a monitoring device increasing the error detection and reducing complexity for providing a high availability for systems which require a non 100% fail safe solution a node is proposed comprising: a communication controller () coupled to a receiving and a transmission path, a host () for performing an application, and a monitoring device () coupled at least to one of a transmission path of the communication controller (), an interface () between communication controller () and the host (), and to internal lines of the communication controller (), wherein the monitoring device () is provided for evaluating information provided by the communication controller () to monitor at least one state of the communication controller (), wherein in case of detecting a non-defined state the host () is informed for performing predetermined actions in respect to the state of the communication controller (). Thereby, an easy cost reduced solution is provided adapted to detect a predetermined number of faults in a distributed communication system.

Node of a distributed communication system, node and monitoring device coupled to such communication system

A system and method for providing fault detection capability is provided which comprises a first node (). The first node () comprises a first processing subsystem () generating data () to be transmitted. The first node () has a fault supervisor unit () adapted to gather and process fault indications arising in the first node (). The first processing subsystem () and the fault supervisor unit are both integrated in the first node (). The first node () is structured such that, when no fault indications are detected by the fault supervisor unit (), the fault supervisor unit () provides a first key () as a validity key, and, when at least one fault indication is detected by the fault supervisor unit (), the fault supervisor unit () provides a second key () as the validity key, and the data () to be transmitted are encrypted by overlaying the respective validity key () on the data.

System and method providing fault detection capability

A network has network nodes and a software system distributed over the network nodes within which, on first access to an access-protected object of the system, an authentication of the user is provided. The authentication is valid at least for a further access to an access-protected object. The duration of the validity of the authentication is dependent on the duration of access to the access-protected object and/or on the context of the use of the system.

Just-in-time authentication of users of a digital home network

Mobile devices () are handed off in overlapping cells () by tracking a velocity (speed and direction) of movement of any number of the mobile devices (). Access points () are each located in an associated operational cell () and each operates at a dedicated frequency. The initial signal strengths are measured in advance at predefined locations within a defined space () to define signal strengths as location map (). A nearby initial access point (typically the nearest) and at least two nearby (typically next nearest) access points are assigned for one of the mobile devices (), and the frequencies of each access point identified. A tracking processor () periodically scans the frequencies of the nearby access points to determine the location velocity of the mobile device and predict when a handoff will be appropriate. E.g., the actual signal strength measurements between the mobile device and the nearby access points are collected and analyzed to determine a proper time for a handoff of one or more of the nearby access points.

Location based handoff for mobile devices

The invention relates to a multimedia device, which detects at least one information item in an audio and/or video data stream processed by the multimedia device, saves the detected information items as a function of a weighting consisting of the time of occurrence of an information item and at least one selection criterion and displays follow-up information relating to the information item selected by a user on an output unit of the multimedia device.

Display of follow-up information relating to information items occurring in a multimedia device

The invention relates to a network having network nodes (to) and a software system distributed among all the network nodes (to), said software system having at each network node (to) a software component referred to as a distribution utility (to) for the access to the data of a distributed data base (), and for the communication with other distribution utilities (to) of different network nodes. A software component referred to as a data manager (to) serves as a link from the data base () to other components and includes a callback component (to) for the access to at least one element () of a data object (). With the aid of a key consisting of two parts, of which a first part is a distribution utility key () for the identification of a data object () by the distribution utility (to), and of which a second part is a data manager key () for the identification of at least one required element () of a data object (), it is possible to access both the data object () and individual elements () of the data object ().

System for the efficient transmission of partial objects in distributed data bases

Theft protection of electronic apparatuses connected to a bus system is implemented in a manner particularly suitable for use in a digital home network based on the IEEE 1394 standard. At least one of the apparatuses in the network is equipped with a monitoring unit switchable between an activated and a de-activated state. In the activated state, the monitoring unit monitors the occurrence of a bus reset which is generated particularly upon removal of an apparatus from the network. After occurrence of such a reset, the monitoring unit compares the list of all apparatuses on the bus with a list generated and stored before the reset. When determining differences, an alarm is triggered which can be reproduced particularly by means of the apparatuses which are present, such as, for example, televisions and hi-fi equipment.

Growing community of inventors

Munich, Germany

Markus Baumeister