Ring-closures in fault trees and normalized representation

Patent metadata

Field	Value
Publication number	US-12487591-B2
Application number	US-202017621341-A
Country	US
Kind code	B2
Filing date	Jul 10, 2020
Priority date	Jul 12, 2019
Publication date	Dec 2, 2025
Grant date	Dec 2, 2025

Abstract

One or more ring closures of a fault tree are provided. For each one of the one or more ring closures: at least one respective edge the respective ring closure is replaced in the fault tree by a respective variable to obtain a placeholder fault tree and a normalized representation of the placeholder fault tree is determined.

First claim

The invention claimed is:

1 . A computer-implemented method, said method comprising:
analyzing a safety-critical system to detect a primary cause of error, determine fault probabilities, and/or determine fault interdependencies, wherein the safety-critical system is a multi-component control or actuator system, wherein prior to analyzing, one or more ring closures are replaced by: modeling the multi-component control or actuator system using a fault tree, the fault tree comprising a plurality of nodes associated with components of the system, and a plurality of edges between nodes of the plurality of nodes associated with functional dependencies between the components, detecting one or more ring closures of the fault tree, and for each one of the one or more ring closures: taking an appropriate counter measure to mitigate negative effects of the ring closure on safety assurance, including, replacing, in the fault tree, at least one respective edge of the respective ring closure by a respective variable, to obtain a placeholder fault tree, and determining a normalized representation of the placeholder fault tree, and wherein the detecting of the one or more ring closures comprises one or more of: back-tracing a plurality of failure propagation paths from an output of the fault tree towards one or more inputs of the fault tree; for each one of the plurality of failure propagation paths: checking if the respective failure propagation path forms a ring closure and, in the affirmative, replacing the ring closure by a predefined expression; and attempting to determine a normalized representation of the fault tree using a reference algorithm and obtaining an error feedback of the reference algorithm, wherein the output of the fault tree provides an actuator force or a control signal; actuating or controlling one or more machines, using the actuator force or the control signal, respectively, in application to the safety-critical system, wherein the safety-critical system comprises electronic circuitry having one or more electronic components, a drivetrain for a vehicle, an assembly line having one or more assembly-line components, a medical system, a power plant, or combinations thereof, wherein the one or more electronic components comprise a transistor, a coil, a capacitor, a resistor, or combinations thereof, wherein the one or more assembly-line components comprise a conveyor belt, a robot, a movable part, a control section, a test section for inspecting manufactured goods, or combinations thereof, and wherein the medical system comprises an imaging system, a magnetic resonance imaging system, a computer tomography system, a particle therapy system, or combinations thereof.

2 . The method of claim 1 , wherein the determining of the normalized representation of the placeholder fault tree comprises:
determining cutsets of the placeholder fault tree, and determining a disjunctive normalized graph or a conjunctive normalized graph based on the cutsets as the normalized representation.

3 . The method of claim 1 , said method further comprising:
for each one of the one or more ring closures: replacing, in the normalized representation of the placeholder fault tree, each respective variable by the at least one respective edge, to obtain the normalized representation of the fault tree.

4 . The method of claim 1 , wherein the multi-component control or actuator system comprises a closed-loop control circuitry associated with a ring closure of the fault tree.

5 . A computer program product comprising a computer readable storage medium storing program code that is executable by at least one processor, wherein when the at least one processor executes the program code the at least one processor performs the method of claim 1 .

6 . The method of claim 1 , wherein the reference algorithm comprises a minimum concept analysis.

7 . A device comprising control circuitry configured to:
model a multi-component control or actuator system of a safety-critical system using a fault tree, the fault tree comprising a plurality of nodes associated with components of the system, and a plurality of edges between nodes of the plurality of nodes associated with functional dependencies between the components, detect one or more ring closures of the fault tree, for each one of the one or more ring closures: replace, in the fault tree, at least one respective edge of the respective ring closure by a respective variable to obtain a placeholder fault tree, and determine a normalized representation of the placeholder fault tree, analyze the safety-critical system to detect a primary cause of error, determine fault probabilities, and/or determine fault interdependencies, and control operation of the multi-component control or actuator system using control data, wherein the control circuitry being configured to detect the one or more ring closures comprises the control circuitry being configured for one or more of: back-tracing a plurality of failure propagation paths from an output of the fault tree towards one or more inputs of the fault tree; and attempting to determine a normalized representation of the fault tree using a reference algorithm and obtaining an error feedback of the reference algorithm, wherein the output of the fault tree provides an actuator force or a control signal; actuate or control one or more machines, using the actuator force or the control signal, respectively, in application to the safety-critical system, wherein the safety-critical system comprises electronic circuitry having one or more electronic components, a drivetrain for a vehicle, an assembly line having one or more assembly-line components, a medical system, a power plant, or combinations thereof, wherein the one or more electronic components comprise a transistor, a coil, a capacitor, a resistor, or combinations thereof, wherein the one or more assembly-line components comprise a conveyor belt, a robot, a movable part, a control section, a test section for inspecting manufactured goods, or combinations thereof, and wherein the medical system comprises an imaging system, a magnetic resonance imaging system, a computer tomography system, a particle therapy system, or combinations thereof.

Assignees

• Siemens Ind Software Nv

Inventors

• Höfig Kai
• Montrone Francesco
• Rothbauer Stefan
• Zeller Marc

Classifications

• G05B2219/24065

  Real time diagnostics · CPC title

• G05B23/0248 Primary

  Causal models, e.g. fault tree; digraphs; qualitative physics · CPC title