INTEGRATED CIRCUIT, EMBEDDED SYSTEM AND MOTOR VEHICLE

Abstract

An integrated circuit. The circuit includes a communication module including shared ports, and an error management module for managing at least one case of an error. The circuit is configured to communicate on multiple internal communication channels via the ports. The error management module includes at least one hardware path for selectively switching off the individual communication channels in the case of an error.

Description

CROSS REFERENCE

The present application claims the benefit under 35 U.S.C. § 119 of German Patent Application No. 102020203663.2 filed on Mar. 20, 2020, which is expressly incorporated herein by reference in its entirety.

FIELD

The present invention relates to an integrated circuit, in particular, a microcontroller. The present invention further relates to an embedded system as well as a motor vehicle including such an integrated circuit.

BACKGROUND INFORMATION

Circuits for embedded systems according to the related art include multiple processor cores and complex peripheral functions such as Ethernet interfaces. Within the scope of the AUTOSAR standard, for example, individual software components are typically organized on shared multicore or multi-processor systems in logical application partitions for the purpose of virtualizing the system and creating protection boundaries.

German Patent Application No. DE 10 2016 211 768 A1 describes an integrated Ethernet communication module for media access control (MAC) per direct memory access (DMA).

SUMMARY

The present invention provides an integrated circuit, in particular in the form of a microcontroller (pC), an embedded system as well as a motor vehicle including such an integrated circuit.

Integrated Ethernet MAC communication modules having multiple queues and integrated DMA channels for transmitting and receiving are conventional. In multicore microcontroller and microprocessor architectures, these queues and DMAs may be assigned to different independent partitions or applications. A partition or an application has its own memory areas and may be executed on one CPU or distributed on multiple CPUs. In this case, the partition is regarded as a logic unit that is capable of accessing the Ethernet module. The operation of multiple partitions on one CPU is also possible.

Each partition communicates via an independent logic Ethernet communication channel and may not be influenced by other partitions with regard to guaranteed bandwidth and latency in order to ensure a deterministic behavior. A communication channel is characterized by its own MAC and/or IP address and usually includes a queue in the Ethernet communication controller (MAC), a DMA channel or DMA channels associated therewith and its own configuration. Transmitting and receiving by all defined communication channels takes place via the same Ethernet communication controller. Sending messages is controlled by establishing priorities or via the round-robin principle in the MAC layer.

The device according to an example embodiment of the present invention furthermore accounts for the fact that hardware errors in the pC that compromise the operational safety are typically managed in an error management module (EMM). Furthermore, there is an external error pin, in the case of which the defined functions in the pC may be switched off by an external monitoring module via EMM or directly.

A corresponding system response may be configured in the EMM for each error. In the case of communication modules according to the related art, the entire message content is considered to not be trustworthy as a rule in the case of an error. As a result of the error, a seemingly valid Ethernet packet may include a corrupt message. In order to prevent their transmission, the Ethernet transmission function is typically immediately deactivated at the media-independent interface (xMII) by the fault collection and control unit (FCCU) or the error pin in the case of an error. In this way, the transmission of faulty messages may be stopped in time. In systems having multiple partitions, all communication channels are, however, switched off simultaneously in this manner, although the occurred error may relate to only one partition and therefore only the communication of this partition must be prevented, while other partitions could continue with the transmission.

Against this background, separate hardware paths are provided from the central error management module as well as from the externally accessible error pins for the purpose of switching off one individual Ethernet communication channel of the module.

One advantage of this approach is the opened possibility of excluding in a targeted manner only that partition from the Ethernet communication that is subject to the error. In this way, other partitions may continue to communicate on the Ethernet bus in an undisturbed manner.

The measures described herein make advantageous refinements of and improvements on the disclosed embodiments of the present invention possible.

BRIEF DESCRIPTION OF THE DRAWINGS

Exemplary embodiments of the present invention are illustrated in the FIGURE and explained in greater detail in the description below.

The sole FIGURE shows the block diagram of a pC according to one specific embodiment of the present invention.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

The FIGURE illustrates the basic design of a circuit 10 according to the present invention in the form of a microcontroller 10 including multiple processor cores 70, 71, 72, 73, 74, some of which are combined to partitions 81, 82, 83, 84, 85 having a separated random access memory (RAM) 16. Microcontroller 10 moreover includes an Ethernet communication module 11 having shared ports 12 that manage transmission queues 40, 41, 42, 43, 44 and reception queues 50, 51, 52, 53 for multiple internal communication channels 20, 21, 22, 23, 24. Furthermore, microcontroller 10 includes a central error management module 13 having a hardware path 31, 32, 33, 34 that makes it possible to selectively switch off individual communication channels 20, 21, 22, 23, 24 in the case of an error 14. To make this object a reality, hardware path 31, 32, 33, 34 may take different courses, without departing from the scope of the present invention.

According to a first option 31, for example, the hardware path is configured to immediately lock or empty one of transmission queues 40, 41, 42, 43, 44. According to a second option 32, however, it merges directly into the MAC layer and is configured to exclude one of communication channels 20, 21, 22, 23, 24 from media access control 15. According to a third option 33, the hardware path is configured to deactivate direct memory access 60, 61, 62, 63, 64 on affected communication channel 20, 21, 22, 23, 24. Finally, according to a fourth option 34, the hardware path does not lead from error management module 13 to communication module 11, but to individual processor cores 70, 71, 72, 73, 74 that prevent the data transfer to affected communication channel 20, 21, 22, 23, 24 via interrupts according to the software in the case of an error 14.

Circuit 10 usually also includes an external error pin 17 for controlling error management module 13 as well as a conventional hardware path from error management module 13 directly to xMII interface 18.

A microcontroller 10 of this type may be embedded in a motor vehicle as a system on chip (SoC) for example.

Claims

1. An integrated circuit, comprising: a communication module including shared ports; andan error management module configured to manage at least one case of an error;wherein the circuit is configured to communicate on multiple internal communication channels via the ports, and the error management module includes at least one hardware path for selectively switching off individual ones of the communication channels in the case of an error.

2. The circuit as recited in claim 1, wherein: the communication module is configured to manage transmission queues and reception queues for the communication channels; andthe hardware path is configured to selectively lock or empty individual ones of the transmission and reception transmission queues.

3. The circuit as recited in claim 1, wherein: the communication module is configured for media access control; andthe hardware path is configured to exclude the individual ones of the communication channels from the media access control.

4. The circuit as recited in claim 1, wherein: the circuit includes a random access memory;the communication module is configured for a direct memory access to the random access memory; andthe hardware path is configured to deactivate the direct memory access on the individual ones of the communication channels.

5. The circuit as recited in claim 1, wherein: the circuit includes multiple processor cores;the processor cores are combined to partitions to which the individual communication channels are assigned; andthe hardware path leads from the error management module to the processor cores.

6. The circuit as recited in claim 1 wherein the circuit includes at least one external error pin for controlling the error management module.

7. The circuit as recited in claim 1, wherein the communication module is an Ethernet module including a media-independent interface, and a further hardware path leads from the error management module directly to the interface.

8. A microcontroller, comprising: an integrated circuit, including: a communication module including shared ports; andan error management module configured to manage at least one case of an error;wherein the circuit is configured to communicate on multiple internal communication channels via the ports, and the error management module includes at least one hardware path for selectively switching off individual ones of the communication channels in the case of an error.

9. An embedded system, comprising: an integrated circuit, including: a communication module including shared ports; andan error management module configured to manage at least one case of an error;wherein the circuit is configured to communicate on multiple internal communication channels via the ports, and the error management module includes at least one hardware path for selectively switching off individual ones of the communication channels in the case of an error.

10. A motor vehicle, comprising: an embedded system including an integrated circuit, the integrated circuit including: a communication module including shared ports; andan error management module configured to manage at least one case of an error;wherein the circuit is configured to communicate on multiple internal communication channels via the ports, and the error management module includes at least one hardware path for selectively switching off individual ones of the communication channels in the case of an error.