US 12,204,825 B2
Function safety and fault management modeling at electrical system level (ESL)
Kai-Yuan Ting, San Jose, CA (US); Hsin-Cheng Chen, Chu-bei (TW); Sandeep Kumar Goel, Dublin, CA (US); Mei Wong, Saratoga, CA (US); and Yun-Han Lee, Baoshan Township (TW)
Assigned to Taiwan Semiconductor Manufacturing Co., Ltd., Hsinchu (TW)
Filed by Taiwan Semiconductor Manufacturing Co., Ltd., Hsinchu (TW)
Filed on May 27, 2022, as Appl. No. 17/804,411.
Application 17/804,411 is a continuation of application No. 17/020,313, filed on Sep. 14, 2020, granted, now 11,354,465.
Application 17/020,313 is a continuation of application No. 15/691,920, filed on Aug. 31, 2017, granted, now 10,776,538, issued on Sep. 15, 2020.
Claims priority of provisional application 62/537,125, filed on Jul. 26, 2017.
Prior Publication US 2022/0292237 A1, Sep. 15, 2022
Int. Cl. G06F 30/20 (2020.01); G06F 30/367 (2020.01); G06F 119/06 (2020.01)
CPC G06F 30/20 (2020.01) [G06F 30/367 (2020.01); G06F 2119/06 (2020.01)] 20 Claims
OG exemplary drawing
 
1. A method for simulating fault management in an electronic system comprising a primary device and a secondary device, wherein the electronic system is represented by a software model comprising a primary model representing the primary device, a secondary model representing the secondary device, a fault monitor model, and a fault injection model, the method comprising:
injecting, by a function safety model of the secondary model, a fault into a function run by a logical module of the secondary model, wherein a category of the fault is randomly chosen among a plurality of categories of faults;
characterizing, after injecting the fault and by a specific fault module of the secondary model, the fault;
generating, by the fault monitor model and based on the category of the fault, a report of the fault comprising the category of the fault;
generating, by a fault interrupt generation module of the fault injection model and based on the report of the fault, an interrupt; and
sending the interrupt to the primary model for the primary device to handle the fault.