Imagination Technologies Limited

Philip Morris

Mario Sopena Novales

Jamie Broome

Mihai Dragan

A method of performing safety-critical rendering at a graphics processing unit within a graphics processing system, the method comprising: receiving, at the graphics processing system, graphical data for safety-critical rendering at the graphics processing unit; scheduling at a safety controller, in accordance with a reset frequency, a plurality of resets of the graphics processing unit; rendering the graphical data at the graphics processing unit; and the safety controller causing the plurality of resets of the graphics processing unit to be performed commensurate with the reset frequency.

Periodic reset of graphics processor unit in safety-critical graphics processing system

A computer system has a plurality of operating systems, each operating system including a GPU driver; a graphics processing unit (GPU) including GPU firmware for controlling the execution of tasks at the graphics processing unit and, for each operating system: a firmware state register modifiable by the GPU firmware and indicating whether the GPU firmware is online; and an OS state register modifiable by the GPU driver of the respective operating system and indicating whether the GPU driver is online; and a memory management unit configured to mediate access to the registers of the GPU such that each operating system can access its respective registers but not those of other operating systems; wherein: one of the GPU drivers at the plurality of operating systems is a host GPU driver configured to initialise the GPU and bring the GPU firmware online; each GPU driver is configured to submit tasks for processing at the GPU only if its respective firmware state register indicates that the GPU firmware is online; and the GPU is configured to process tasks for an operating system if the respective OS state register of that operating system indicates that the GPU driver is online.

Hypervisor removal

A method of detecting an error at a graphics processing unit causes an instruction including a request for a response from a graphics processing unit to be provided to the graphics processing unit. A timer being configured to expire after a time period is initialised, and during the time period the graphics processing unit is monitored for the response from the graphics processing unit. An error is determined to have occurred in response to determining that no response was received from the graphics processing unit before the timer expired.

Detecting error in safety-critical GPU by monitoring for response to an instruction

A method of configuring a graphics processing unit includes generating configuration data that specifies a configuration to be adopted by the graphics processing unit. The configuration data is received at the graphics processing unit, which is configured in accordance with the configuration data by writing the configuration data into one or more registers of the graphics processing unit. It is determined whether the graphics processing unit is correctly configured in accordance with the configuration data by determining whether the configuration data has been correctly written into the one or more registers of the graphics processing unit. An error is determined to have occurred in response to determining that the graphics processing unit is not correctly configured in accordance with the configuration data.

Configuration check for safety-critical GPU

A method of initialising rendering at a graphics processing unit configured to perform safety-critical rendering within a graphics processing system, the method comprising: generating configuration data for initialising rendering of safety critical graphical data at the graphics processing unit; receiving the configuration data for initialising rendering at the graphics processing unit; configuring the graphics processing unit in accordance with the configuration data for initialising rendering; determining whether the graphics processing unit is correctly configured in accordance with the configuration data; and determining, by a safety controller external to the graphics processing unit, that an initialisation error has occurred in response to determining that the graphics processing unit is not correctly configured in accordance with the configuration data.

Critical workload check

A method of initialising rendering at a graphics processing unit configured to perform safety-critical rendering, the method comprising: causing an instruction for initialising rendering of safety critical graphical data at the graphics processing unit to be provided to the graphics processing unit, said instruction comprising a request for response from the graphics processing unit; initialising a timer, said timer being configured to expire after a time period; and monitoring, during said time period, for a response from the graphics processing unit; determining, by a safety controller external to the graphics processing unit, that an initialisation error has occurred if no response is received from the graphics processing unit before the timer expires.

Growing community of inventors

Hertfordshire, United Kingdom

Philip Morris