Consensus loss in distributed control systems

Patent metadata

Field	Value
Publication number	US-9686161-B2
Application number	US-201314028243-A
Country	US
Kind code	B2
Filing date	Sep 16, 2013
Priority date	Sep 16, 2013
Publication date	Jun 20, 2017
Grant date	Jun 20, 2017

Abstract

A device may correspond to a physical access controller in a distributed physical access control system. A method, performed by the device in a distributed system, may include detecting that another device in the distributed system has become unavailable; determining that a loss of consensus has occurred in the distributed system based on detecting that the other device has become unavailable; generating a list of available devices in the distributed system; and sending an alarm message to an administrative device, wherein the alarm message indicates the loss of consensus and wherein the alarm message includes the list of available devices.

First claim

What is claimed is:

1. A method, performed by a device in a distributed system, the method comprising:
detecting, by the device, that another device in the distributed system has become unavailable;
determining, by the device, that a loss of consensus has occurred in the distributed system for a particular distributed dataset based on detecting that the other device has become unavailable;
accessing, by the device, a consensus database to determine which devices associated with the particular distributed dataset are available;
generating, by the device, a list of available devices in the distributed system based on accessing the consensus database and based on determining that the loss of consensus has occurred; and
sending, by the device, an alarm message to an administrative device, wherein the alarm message indicates the loss of consensus and wherein the alarm message includes the list of available devices.

2. The method of claim 1 , further comprising:
receiving, from the administrative device, an instruction to create a consensus-based distributed system that includes at least some of the available devices included in the list; and
creating the consensus-based distributed system in response to receiving the instruction.

3. The method of claim 2 , wherein creating the consensus-based distributed system includes:
selecting a number of devices required to generate a quorum, wherein the number corresponds to a smallest number of devices from the available devices needed to achieve a majority.

4. The method of claim 3 , further comprising:
assigning a voting weight to a device of the at least some of the available devices, wherein the voting weight gives more weight to a vote received from the device than to a vote received from another device of the at least some of the available devices when the device is voting for a quorum in the created the consensus-based distributed system.

5. The method of claim 4 , wherein the voting weight is based on at least one of:
a location of the device;
a membership of the device in a particular subset of the available devices;
a device type associated with the device;
a threat level assigned to the device; or
a measure of reliability associated with the device.

6. The method of claim 4 , wherein the voting weight is based on at least one of:
one or more logged events associated with the device;
a frequency of activation of a peripheral device associated with the device; or
a frequency of administrative login associated with the device.

7. The method of claim 1 , wherein detecting that another device in the distributed system has become unavailable includes at least one of:
detecting that a connection to the other device has been lost;
receiving an indication of device failure from the other device; or
detecting that the other device is associated with a security breach.

8. The method of claim 1 , wherein sending the alarm message to the administrative device includes at least one of:
sending a Web Services message to the administrative device;
sending an email message to the administrative device;
sending a Short Message Service message to the administrative device; or
sending a real-time quality of service message to the administrative device.

9. The method of claim 1 , further comprising:
maintaining the list of available devices in the distributed system; and
updating the list of available devices at particular intervals.

10. The method of claim 1 , wherein the distributed system includes a distributed dataset, the method further comprising:
generating another distributed dataset based on the distributed dataset, in response to determining that a loss of consensus has occurred in the distributed system and before receiving, from the administrator device, an instruction to create a new consensus-based distributed system that includes at least some of the available devices included in the list; and
creating another consensus-based distributed system that uses the generated other distributed dataset and that includes at least some of the available devices included in the list.

11. The method of claim 10 , further comprising:
receiving, from the administrative device, the instruction to create the new consensus-based distributed system that includes the available devices included in the list; and
incorporating data from the other distributed dataset into the new distributed dataset, in response to receiving the instruction to create the new consensus-based distributed system.

12. The method of claim 1 , wherein the device corresponds to an embedded system.

13. The method of claim 12 , wherein the distributed system includes a distributed physical access control system, and wherein the device and the other device correspond to physical access control units.

14. A device of a distributed system comprising:
logic configured to:
detect that another device in the distributed system has become unavailable;
determine that a loss of consensus has occurred in the distributed system for a particular distributed dataset based on detecting that the other device has become unavailable;
access a consensus database to determine which devices associated with the particular distributed dataset are available;
generate a list of available devices in the distributed system based on accessing the consensus database and based on determining that the loss of consensus has occurred;

a transmitter to send an alarm message to an administrative device, wherein the alarm message indicates the loss of consensus and wherein the alarm message includes the list of available devices; and
a memory to store the consensus database.

15. The device of claim 14 , further comprising:
a receiver to receive, from the administrative device, an instruction to create a consensus-based distributed system that includes at least some of the available devices included in the list; and
wherein the logic is further configured to create the consensus-based distributed system in response to receiving the instruction.

16. The device of claim 15 , wherein when the logic is creating the consensus-based distributed system, the logic is further configured to:
select a number of devices required to generate a quorum, wherein the number corresponds to a smallest number of devices from the available devices needed to achieve a majority.

17. The device of claim 16 , wherein when the logic is creating the consensus-based distributed system, the logic is further configured to:
assign a voting weight to a device of the at least some of the available devices, wherein the voting weight gives more weight to a vote received from the device than to a vote received from another device of the at least some of the available devices when the device is voting for a quorum in the created the consensus-based distributed system.

18. The device of claim 17 , wherein the voting weight is based on at least one of:
a location of the device;
a membership of the device in a particular subset of the available devices;
a device type associated with the device;
a threat level assigned to the device;
a measure of reliability associated with the device;
one or more logged events associated with the device;
a frequency of activation of a peripheral device associated with the device; or
a frequency of administrative login associated with the device.

19. The device of claim 14 , wherein when the logic is detecting that another device in the distributed system has become unavailable, the logic is configured to

Assignees

• Axis Ab

Inventors

• Bruce Mathias
• Blomgren Olle

Classifications

• G06F2209/505

  Clust · CPC title

• G06F11/182

  based on mutual exchange of the output between redundant processing components · CPC title

• G06F9/5061 Primary

  Partitioning or combining of resources · CPC title

• H04L43/0811

  by checking connectivity · CPC title

• G07C9/00

  Individual registration on entry or exit · CPC title