2012 IEEE 18th International Symposium on Asynchronous Circuits and Systems (2009)
Chapel Hill, North Carolina, USA
May 17, 2009 to May 20, 2009
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ASYNC.2009.15
Due to their handshake-based flow control, asynchronous circuits generally do not suffer from metastability issues as much as synchronous circuits do. We will show, however, that fault effects like single-event transients can force (sequential) asynchronous building blocks such as Muller C-Elements into a metastable state. At the example of a fault-tolerant clock generation scheme, we will illustrate that metastability could overcome conventional error containment boundaries, and that, ultimately, a single metastable upset could cause even a multiple Byzantine fault-tolerant system to fail. In order to quantify this threat, we performed analytic modeling and simulation of the elastic pipelines, which are at the heart of our physical implementation of the fault-tolerant clocks. Our analysis results reveal that only transient pulses of some very specific width can trigger metastable behavior. So even without consideration of other masking effects the probability of a metastable upset to propagate through a pipeline is fairly small. Still, however, a thorough metastability analysis is mandatory for circuits employed in high-dependability applications.
Andreas Steininger, Gottfried Fuchs, Matthias Függer, "On the Threat of Metastability in an Asynchronous Fault-Tolerant Clock Generation Scheme", 2012 IEEE 18th International Symposium on Asynchronous Circuits and Systems, vol. 00, no. , pp. 127-136, 2009, doi:10.1109/ASYNC.2009.15