Fault recovery mechanism, transparent to digital system function

Claim 1

In a digital computing system of the type including a central processing unit having an address/data bus coupled thereto, a main RAM, means coupled to said address/data bus for storing digital words comprising computational frames at addressable locations therein, main memory control means for effecting the writing of digital words comprising said computational frames into said main RAM at or from addresses originating at said central processing unit, apparatus for maintaining the integrity of the words comprising said computational frames stored in said main RAM in spite of system upsets due to external transient noise conditions impacting on said system, comprising: (a) supplemental memory control means; (b) first and second supplemental RAMs; (c) first switching means controlled by said supplemental memory control means for alternatively coupling said first and second supplemental RAMs to said address/data bus on successive ones of said computational frames, such that the same digital words comprising a given frame being written in said main RAM are simultaneously copied into one or the other of said first and second supplemental RAMs; (d) a backup RAM coupled to said address/data bus; (e) second switching means controlled by said supplemental memory control means for coupling said backup RAM to said first and second supplemental RAMs such that during the time words are being copied into said first supplemental RAM, selected words stored in said second supplemental RAM during an immediately preceding computational frame are transferred into said backup RAM and during the time words are being entered into said second supplemental RAM, selected words stored in said first supplemental RAM during the immediately preceding computational frame are transferred into said backup memory means; (f) means coupled to said supplemental memory control means for sensing system upsets due to transient noise; and (g) means controlled by said supplemental memory control means following the sensing of a system upset for transferring the contents of said backup RAM to said main RAM.

Claim 6

A method for restoring a digital computing system of the type including a central processing unit having a real-time clock, a main RAM memory and an address/data bus coupling said CPU and main RAM together, to an error-free operational state following an external transient disturbance to said CPU, said main RAM or said bus, comprising the steps of: (a) storing a copy of the digital words comprising even computational frames in a first supplemental RAM as they are being written in said main RAM; (b) storing a copy of the digital words comprising odd computational frames in a second supplemental RAM as they are being written into said main RAM, said even and odd computational frames being determined by successive cycles of said real-time clock; (c) transferring the contents of said first and second supplemental RAMs to a backup RAM on an alternating basis such that as digital words comprising a current computational frame are being simultaneously written in said main RAM and one of said first and second supplemental RAMs, the preceding computational frame stored in the other of said first and second supplemental RAMs is transferred to said backup RAM; (d) monitoring said CPU, said main memory and said address/data bus for occurrences of an external transient noise event; and (e) replacing the contents of said main RAM with the contents of said backup RAM following the occurrence of an external transient noise event.

Claim 7

A method for restoring a digital computing system of the type including a central processing unit having a real-time clock, a main RAM memory and an address/data bus coupling said CPU and main RAM together, to an error-free operational state following an external transient disturbance to said CPU, said main RAM or said bus, comprising the steps of: (a) storing a copy of the digital words comprising even computational frames in a first supplemental RAM as they are being written in said main RAM; (b) storing a copy of the digital words comprising odd computational frames in a second supplemental RAM as they are being written into said main RAM, said even and odd computational frames being determined by successive cycles of said real-time clock; (c) transferring the contents of said first and second supplemental RAMs to a backup RAM on an alternating basis such that as digital words comprising a current computational frame are being simultaneously written in said main RAM and one of said first and second supplemental RAMs, the preceding computational frame stored in the other of said first and second supplemental RAMs is transferred to said backup RAM; (d) monitoring said CPU, said main memory and said address/data bus for occurrences of an external transient noise event; and (e) replacing the contents of said main RAM with the contents of said backup RAM following the occurrence of an external transient noise event.

Claim 9

A method for allowing a control system incorporating digital computing means having a main memory, a central processing unit, and input/output means intercoupled by an address/data bus to recover from the occurrence of soft errors impacting the system, comprising the steps of: (a) providing an odd frame memory, an even frame memory, a backup memory and memory control means in an enclosure which effectively shields them from external transient noise, said even frame memory, odd frame memory and backup memory being connectable by switching means to said address/data bus; (b) writing words during even computational frames into said even frame memory as they are being written into said main memory; (c) writing words during odd computational frames into said odd frame memory as they are being written into said main memory; (d) maintaining a log of those words in said even and odd frame memories that are updated during the even and odd computational frames, respectively; (e) during the time that words are being written into said even frame memory or said odd frame memory on a current computational frame, transferring to said backup memory those words in said odd frame memory or even frame memory, respectively, which are identified by said log as having been updated in the immediately preceding computational frame; (f) sensing the occurrence of external transient disturbances to said central processing unit, said main memory or said address/data bus; (g) transferring the contents of said backup memory to said main memory at the conclusion of the computational frame in which said disturbance occurred, such that said main memory is returned to the same state as it was during the computational frame preceding the occurrence of said disturbance.

Claim 10

A method for allowing a control system incorporating digital computing means having a main memory, a central processing unit, and input/output means intercoupled by an address/data bus to recover from the occurrence of soft errors impacting the system, comprising the steps of: (a) providing an odd frame memory, an even frame memory, a backup memory and memory control means in an enclosure which effectively shields them from external transient noise, said even frame memory, odd frame memory and backup memory being connectable by switching means to said address/data bus; (b) writing words during even computational frames into said even frame memory as they are being written into said main memory; (c) writing words during odd computational frames into said odd frame memory as they are being written into said main memory; (d) maintaining a log of those words in said even and odd frame memories that are updated during the even and odd computational frames, respectively; (e) during the time that words are being written into said even frame memory or said odd frame memory on a current computational frame, transferring to said backup memory those words in said odd frame memory or even frame memory, respectively, which are identified by said log as having been updated in the immediately preceding computational frame; (f) sensing the occurrence of external transient disturbances to said central processing unit, said main memory or said address/data bus; (g) transferring the contents of said backup memory to said main memory at the conclusion of the computational frame in which said disturbance occurred, such that said main memory is returned to the same state as it was during the computational frame preceding the occurrence of said disturbance.