Automotive Semiconductors and Functional Safety

What is the main reason for offsetting the execution of the two cores in a lockstep CPU by a few clock cycles, or placing the two cores apart on the chip?

  1. AIf the same cause, such as supply noise or radiation, produces the same error in both cores at the same time, the comparison cannot detect it, so this makes identical errors less likely
  2. BSo that one core can use the other core's computation results in advance, speeding up processing
  3. CSo that the two cores can each run different programs, increasing the number of usable cores
Show answer and explanation

Answer: A. If the same cause, such as supply noise or radiation, produces the same error in both cores at the same time, the comparison cannot detect it, so this makes identical errors less likely

Lockstep detects faults through differences between the two cores' results, so it cannot detect identical errors produced in both by the same cause. Such failures are called common cause failures. Momentary supply voltage drops or clock disturbances affect both cores simultaneously, so delaying one core's execution by, for example, 2 clock cycles and realigning the results for comparison makes it less likely that the same error occurs at the same timing. Placing the cores apart likewise keeps localized causes from affecting both.

Practice this topic Back to topic

Books on Automotive Semiconductors and Functional Safety Ad

As an Amazon Associate I earn from qualifying purchases.

More Automotive Semiconductors and Functional Safety questions

  1. An automotive microcontroller's memory uses ECC (SEC-DED), which can correct 1-bit errors and detect 2-bit errors. What generally happens when read data contains a 2-bit error?
  2. Which correctly describes a feature of a window watchdog timer?
  3. What is the main functional safety purpose of running logic BIST and memory BIST in an automotive microcontroller at power-up or before driving?
  4. Which is an appropriate clock-monitoring safety mechanism for an automotive microcontroller?
  5. Which is an appropriate voltage-monitoring safety mechanism provided in functional-safety-compliant automotive power ICs and similar devices?