Engineering:Single-event upset

From HandWiki
Short description: Change of state caused by an ionizing particle
A single-event upset in the flight computers of this Airbus A330 during Qantas Flight 72 on 7 October 2008 is suspected to have resulted in an aircraft upset that nearly ended in a crash after the computers experienced several malfunctions.[1]

A single-event upset (SEU), also known as a single-event error (SEE), is a change of state caused by one single ionizing particle (ions, electrons, photons...) striking a sensitive node in a live micro-electronic device, such as in a microprocessor, semiconductor memory, or power transistors. The state change is a result of the free charge created by ionization in or close to an important node of a logic element (e.g. memory "bit"). The error in device output or operation caused as a result of the strike is called an SEU or a soft error.

The SEU itself is not considered permanently damaging to the transistor's or circuits' functionality unlike the case of single-event latch-up (SEL), single-event gate rupture (SEGR), or single-event burnout (SEB). These are all examples of a general class of radiation effects in electronic devices called single-event effects (SEEs).

History

Single-event upsets were first described during above-ground nuclear testing, from 1954 to 1957, when many anomalies were observed in electronic monitoring equipment. Further problems were observed in space electronics during the 1960s, although it was difficult to separate soft failures from other forms of interference. In 1972, a Hughes satellite experienced an upset where the communication with the satellite was lost for 96 seconds and then recaptured. Scientists Dr. Edward C. Smith, Al Holman, and Dr. Dan Binder explained the anomaly as a single-event upset (SEU) and published the first SEU paper in the IEEE Transactions on Nuclear Science journal in 1975.[2] In 1978, the first evidence of soft errors from alpha particles in packaging materials was described by Timothy C. May and M.H. Woods. In 1979, James Ziegler of IBM, along with W. Lanford of Yale, first described the mechanism whereby a sea-level cosmic ray could cause a single-event upset in electronics. 1979 also saw the world’s first heavy ion "single-event effects" test at a particle accelerator facility, conducted at Lawrence Berkeley National Laboratory's 88-Inch Cyclotron and Bevatron.[3]

Cause

Terrestrial SEU arises due to cosmic particles colliding with atoms in the atmosphere, creating cascades or showers of neutrons and protons, which in turn may interact with electronic circuits. At deep sub-micron geometries, this affects semiconductor devices in the atmosphere.

In space, high-energy ionizing particles exist as part of the natural background, referred to as galactic cosmic rays (GCR). Solar particle events and high-energy protons trapped in the Earth's magnetosphere (Van Allen radiation belts) exacerbate this problem. The high energies associated with the phenomenon in the space particle environment generally render increased spacecraft shielding useless in terms of eliminating SEU and catastrophic single-event phenomena (e.g. destructive latch-up). Secondary atmospheric neutrons generated by cosmic rays can also have sufficiently high energy for producing SEUs in electronics on aircraft flights over the poles or at high altitudes. Trace amounts of radioactive elements in chip packages also lead to SEUs.

Testing for SEU sensitivity

The sensitivity of a device to SEU can be empirically estimated by placing a test device in a particle stream at a cyclotron or other particle accelerator facility. This particular test methodology is especially useful for predicting the SER (soft error rate) in known space environments but can be problematic for estimating terrestrial SER from neutrons. In this case, a large number of parts must be evaluated, possibly at different altitudes, to find the actual rate of upset.

Another way to empirically estimate SEU tolerance is to use a chamber shielded from radiation, with a known radiation source, such as Caesium-137.

When testing microprocessors for SEU, the software used to exercise the device must also be evaluated to determine which sections of the device were activated when SEUs occurred.

SEUs and circuit design

Main page: Engineering:Radiation hardening

By definition, SEUs do not destroy the circuits involved, but they can cause errors. In space-based microprocessors, one of the most vulnerable portions is often the 1st and 2nd-level cache memories, because these must be very small and have very high speed, which means that they do not hold much charge. Often these caches are disabled if terrestrial designs are being configured to survive SEUs. Another point of vulnerability is the state machine in the microprocessor control, because of the risk of entering "dead" states (with no exits), however, these circuits must drive the entire processor, so they have relatively large transistors to provide relatively large electric currents and are not as vulnerable as one might think. Another vulnerable processor component is the RAM. To ensure resilience to SEUs, often an error correcting memory is used, together with circuitry to periodically read (leading to correction) or scrub (if reading does not lead to correction) the memory of errors, before the errors overwhelm the error-correcting circuitry.

In digital and analog circuits, a single event may cause one or more voltages pulses (i.e. glitches) to propagate through the circuit, in which case it is referred to as a single-event transient (SET). Since the propagating pulse is not technically a change of "state" as in a memory SEU, one should differentiate between SET and SEU. If a SET propagates through digital circuitry and results in an incorrect value being latched in a sequential logic unit, it is then considered an SEU.

Hardware problems can also occur for related reasons. Under certain circumstances (of both circuit design, process design, and particle properties) a "parasitic" thyristor inherent to CMOS designs can be activated, effectively causing an apparent short-circuit from power to ground. This condition is referred to as latch-up, and in absence of constructional countermeasures, often destroys the device due to thermal runaway. Most manufacturers design to prevent latch-up and test their products to ensure that latch-up does not occur from atmospheric particle strikes. In order to prevent latch-up in space, epitaxial substrates, silicon on insulator (SOI) or silicon on sapphire (SOS) are often used to further reduce or eliminate the susceptibility.

Notable SEU

  • In the 2003 elections in Brussels's municipality Schaerbeek (Belgium), an anomalous recorded number of votes triggered an investigation that concluded an SEU was responsible for giving a candidate named Maria Vindevoghel 4,096 extra votes. The possibility of a single-event upset is suggested by the difference in votes being equivalent to a power of two, 212.[4]
  • In 2013, a speedrunner of the video game Super Mario 64 using the Nintendo 64 console experienced an advantageous glitch that teleported Mario higher up in the "Tick Tock Clock" stage. This has been hypothesized to have been caused by an SEU, flipping the least significant bit of Mario’s height value's most significant byte. Attempts by other players to reproduce the glitch, even using the exact controller inputs to recreate the speedrun identically, have not succeeded. Only after flipping one bit of memory in an emulator could players consistently replicate the glitch.[5]
  • On October 7, 2008, Qantas Flight 72 at 37,000 feet, one of the plane’s three air data inertial reference units had a failure, causing incorrect data to be sent to the plane’s flight control systems. This caused pitch-downs and caused severe injuries to crew and passengers. All potential causes were found to be "unlikely," or "very unlikely," except for an SEU. However, the Australian Transport Safety Board (ATSB) found it had "insufficient evidence to estimate the likelihood" that an SEU was the cause. [6]

See also

References

  1. Neutron-Induced Single Event Upset (SEU) FAQ, Microsemi Corporation, https://www.microsemi.com/document-portal/doc_download/130760-neutron-seu-faq, retrieved October 7, 2018, "The cause has been traced to errors in an onboard computer suspected to have been induced by cosmic rays." 
  2. Binder, Smith, Holman (1975). "Satellite Anomalies from Galactic Cosmic Rays". IEEE Transactions on Nuclear Science NS-22, No. 6 (6): 2675–2680. doi:10.1109/TNS.1975.4328188. Bibcode1975ITNS...22.2675B. 
  3. Petersen, Koga, Shoga, Pickel, & Price (2013). "The Single Event Revolution". IEEE Transactions on Nuclear Science. Vol. 60, No.3.
  4. Ian Johnston (17 February 2017). "Cosmic particles can change elections and cause planes to fall through the sky, scientists warn". Independent. https://www.independent.co.uk/news/science/subatomic-particles-cosmic-rays-computers-change-elections-planes-autopilot-a7584616.html. 
  5. How An Ionizing Particle From Outer Space Helped A Mario Speedrunner Save Time, 16 September 2020, https://www.thegamer.com/how-ionizing-particle-outer-space-helped-super-mario-64-speedrunner-save-time/, retrieved 18 February 2021 
  6. The Invisible Neutron Threat (2012), Target 4 Flight Path 30L Publications, Los Alamos National Laboratory

Further reading

General SEU
SEU in programmable logic devices
SEU in microprocessors
SEU related masters theses and doctoral dissertations
  • R. Islam (2011). High-speed Energy-efficient Soft Error Tolerant Flip-flops (masters). Concordia University (M. A. Sc. Thesis).
  • T. Z. Fullem (2006). Radiation detection using single event upsets in memory chips. Binghamton University (M. S. Thesis). ProQuest 304928976. ISBN 978-0-542-78484-2. 
  • C. L. Howe (2005). Radiation-induced energy deposition and single event upset error rates in scaled microelectronic structures (thesis). Vanderbilt University (M. S. Thesis).
  • J. A. Thompson (1997). Design, Construction and Programming of a Microcontroller-Based Testbench Suitable for Radiation Testing of Microelectronic Circuits. Naval Postgraduate School (M. S. Thesis). http://stinet.dtic.mil/oai/oai?&verb=getRecord&metadataPrefix=html&identifier=ADA333415. 
  • D. R. Roth (1991). The role of charge collection in the single event upset. Clemson University (M. S. Thesis). 
  • A. G. Costantine (1990). An Advanced Single Event Upset Tester. Rensselaer Polytechnic Institute (Ph. D Thesis).