Reliable Software Supervision

Watchdog Manager

image

Watchdog Management Stack

Watchdog Stack provides a simple and reliable way to supervise software execution in embedded ECUs. It helps detect situations where functions are not executed correctly, run too late, or follow an unexpected execution order.

The supervision logic is handled at the software level, while hardware-specific watchdog control is kept separate. This separation allows the same supervision behaviour to be used across different MCU platforms with minimal changes.

By monitoring function execution through defined checkpoints and triggering the watchdog when failures are detected, the stack helps maintain stable and predictable system behaviour.

Key Features:

WdgM (Watchdog Manager): WdgM manages software supervision by monitoring a set of supervised functions. Each supervised function contains checkpoints, and WdgM evaluates whether these checkpoints are reached correctly, on time, and in the expected order.

  • 1. Alive Supervision: Checks whether a supervised function is called periodically within the expected cycle.
  • 2. Deadline Supervision: Verifies that a supervised function executes within a defined time limit.
  • 3. Logical Supervision: Monitors program flow and ensures that supervised functions are called in the correct sequence.

WdgIf (Watchdog Interface):WdgIf acts as an interface between WdgM and the watchdog driver. It provides a hardware-independent way for WdgM to control the watchdog without direct access to hardware details.

Wdg (Watchdog Driver): The Wdg driver directly controls the watchdog hardware. It initializes the watchdog, switches modes, and triggers the watchdog based on requests received through WdgIf.