Automotive Semiconductors and Functional Safety

Which correctly describes how a lockstep CPU, used as a safety mechanism in automotive microcontrollers, works?

  1. ATwo CPU cores share different tasks between them, roughly doubling processing speed
  2. BTwo CPU cores execute the same instructions simultaneously, and their outputs are compared every clock cycle; a mismatch is reported as a fault
  3. CWhen a fault is detected, CPU operation is temporarily stopped (locked), switched to a spare circuit, and the faulty part is automatically repaired before resuming
Show answer and explanation

Answer: B. Two CPU cores execute the same instructions simultaneously, and their outputs are compared every clock cycle; a mismatch is reported as a fault

Lockstep is a scheme in which two identically configured CPU cores run the same program and a comparator checks their outputs against each other. If one result changes due to a bit flip from cosmic rays or a circuit fault, it is detected as a mismatch, giving high diagnostic coverage for CPU faults. Because the two cores do the same work, performance equals that of one core. Comparing two cores alone cannot tell which one is correct, so after detection the system performs a reset or a transition to a safe state.

Practice this topic Back to topic

Books on Automotive Semiconductors and Functional Safety Ad

As an Amazon Associate I earn from qualifying purchases.

More Automotive Semiconductors and Functional Safety questions

  1. What is the main reason for offsetting the execution of the two cores in a lockstep CPU by a few clock cycles, or placing the two cores apart on the chip?
  2. An automotive microcontroller's memory uses ECC (SEC-DED), which can correct 1-bit errors and detect 2-bit errors. What generally happens when read data contains a 2-bit error?
  3. Which correctly describes a feature of a window watchdog timer?
  4. What is the main functional safety purpose of running logic BIST and memory BIST in an automotive microcontroller at power-up or before driving?
  5. Which is an appropriate clock-monitoring safety mechanism for an automotive microcontroller?