Time-triggered architecture for safety-related distributed real-time systems in transportation systems

Heiner, Gunter; Thurner, Thomas

doi:10.1109/ftcs.1998.689491

Cited by 53 publications

(22 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Depending on the application, the system recovery time can be tolerated. In Heiner and Thurner (1998), Heiner and Thurner state that a steering system in automobile applications can tolerate a system down-time up to 50 ms; this is sufficient in a typical TTA configuration to execute the recovery algorithm.…”

Section: System Restartmentioning

confidence: 98%

The TTA's Approach to Resilience after Transient Upsets

2006

View full text Add to dashboard Cite

The Time-Triggered Architecture, as architecture for safety-critical real-time applications, incorporates fault-tolerance mechanisms to ensure correct system operation despite failures. The primary fault hypothesis of the TTA claims to tolerate either the arbitrary failure of any one of its nodes or the passively arbitrary failure of any one of its communication channels. To cover these failure modes, active redundancy techniques are used, which basically means that nodes and channels are physically replicated. The primary fault hypothesis, is, however, not strong enough for certain applications that have to tolerate transient upsets of multiple, possibly all, components in the system. Such a transient upset of the system may break up the synchrony of the nodes and leave disjoined sets of nodes synchronized to each other while the overall synchronization is lost. Although the TTA provides a clique avoidance algorithm that is able to correct a wide class of such multiple transient failures, a stronger algorithm is needed for full coverage. In this paper we discuss a secondary fault hypothesis for the TTA that addresses the transient upset of multiple components and present a new clique resolving algorithm based on the TTA's integrated diagnosis and startup service.

show abstract

Section: System Restartmentioning

confidence: 98%

The TTA's Approach to Resilience after Transient Upsets

2006

View full text Add to dashboard Cite

show abstract

“…The application of the time-triggered approach is beneficial from the viewpoint of (i) establishing predictable real-time response times within the network, (ii) reducing system complexity, and, therefore, facilitating the design of real-time applications, by introducing an architecture with a global notion of time and well-defined interfaces, (iii) facilitating the processing of sensor data, since measurements can be synchronized and interpreted on a global timescale, and (iv) enable the coordination of timely correlated actions of actuators. The time-triggered approach has already been successfully applied to safety-critical applications in cars [29], railway control systems [9] and to flight-critical functions in aircraft and aircraft engines [29].…”

Section: Introductionmentioning

confidence: 99%

Time-Triggered Fieldbus Networks State of the Art and Future Applications

Elmenreich

2008

2008 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC)

View full text Add to dashboard Cite

The time-triggered paradigm encompasses a set of concepts and principles that support the design of dependable real-time systems. By using the properties of physical time and the mechanism of clock synchronization, coordinated interaction between distributed nodes can be facilitated. This paper briefly explains the time-triggered approach, defines a taxonomy for real-time requirements and discusses seven protocols that provide time-triggered features. Finally, two application examples are given that show the potential of the time-triggered approach.

show abstract

“…Many dozens of nodes can be connected in a FlexRay network, making full interconnection too expensive. Similar structures with little conventional symmetry are supported by the time-triggered protocol, where the network is a broadcast bus, often equipped with dual channels for fault tolerance [10].…”

Section: Experiments and Further Examplesmentioning

confidence: 99%

Extending Symmetry Reduction by Exploiting System Architecture

Trefler

Wahl

2008

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Symmetry reduction is a technique to alleviate state explosion in model checking by replacing a model of replicated processes with a bisimilar quotient model. The size of the quotient depends strongly on the set of applicable symmetries, which in many practical cases allows only polynomial reduction. We introduce architectural symmetry, a concept that exploits architectural system features to compensate for a lack of symmetry in the system model. We show that the standard symmetry quotient of an architecturally symmetric and well-architected model preserves arbitrary Boolean combinations and nestings of reachability properties. This quotient can be exponentially smaller than the model, even in cases where traditional symmetry reduction is nearly ineffective. Our technique thus extends the benefits of symmetry reduction to systems that are in fact not symmetric. Finally, we generalize our results to all architecturally symmetric models, including those that are not well-architected. We illustrate our method through examples and experimental data.

show abstract

Time-triggered architecture for safety-related distributed real-time systems in transportation systems

Cited by 53 publications

References 2 publications

The TTA's Approach to Resilience after Transient Upsets

The TTA's Approach to Resilience after Transient Upsets

Time-Triggered Fieldbus Networks State of the Art and Future Applications

Extending Symmetry Reduction by Exploiting System Architecture

Contact Info

Product

Resources

About