Method for detecting a failure of a constituent system in a system-of-systems

Patent metadata

Field	Value
Publication number	US-9766964-B2
Application number	US-201415024938-A
Country	US
Kind code	B2
Filing date	Sep 25, 2014
Priority date	Sep 27, 2013
Publication date	Sep 19, 2017
Grant date	Sep 19, 2017

Abstract

A process to detect a failure of a constituent system ( 110 . . . 113 ) in a system of systems ( 1 ) consisting of a number of constituent systems ( 111 . . . 113 ) which exchange messages through a communications system ( 120 ), in which every constituent system ( 111 . . . 113 ) has a global time with a known granularity g, and at least one constituent system creates, at periodic creation times ( 210, 211 ) determined a priori from the progression of the global time, a time-triggered life-sign message, the time of transmission ( 211, 221 ) of this life-sign message in the time-triggered communications system ( 120 ), determined a priori from the progression of the global time, is synchronized with the creation time of this life-sign message, and the time of receipt ( 212, 222 ) of this life-sign message, determined a priori from the progression of the global time, is synchronized with the timeout time point ( 213, 223 ), determined a priori from the progression of the global time, of a monitor ( 130 ) of this life-sign message monitoring the arrival of the life-sign message, wherein an error message is triggered at the timeout time point if no life-sign message has arrived at the expected time of receipt ( 222 ).

First claim

The invention claimed is:

1. A process to detect a failure of a constituent system ( 110 . . . 113 ) in a system of systems ( 1 ) consisting of a number of constituent systems ( 111 . . . 113 ) which exchange messages through a communications system ( 120 ),
wherein every constituent system ( 111 . . . 113 ) has a global time with a known granularity g, and at least one constituent system creates, at periodic creation times ( 210 , 211 ) determined a priori from the progression of the global time, a time-triggered life-sign message, the time of transmission ( 211 , 221 ) of this life-sign message in the time-triggered communications system ( 120 ), determined a priori from the progression of the global time, is synchronized with the creation time of this life-sign message, and the time of receipt ( 212 , 222 ) of this life-sign message, determined a priori from the progression of the global time, is synchronized with the timeout time point ( 213 , 223 ), determined a priori from the progression of the global time, of a monitor ( 130 ) of this life-sign message monitoring the arrival of the life-sign message, wherein an error message is triggered at the timeout time point if no life-sign message has arrived at the expected time of receipt ( 222 ).

2. The process of claim 1 , wherein the time interval, measured with the global time, between the creation time ( 210 , 220 ) of the life-sign message and the time of transmission ( 211 , 221 ) of this message is n·g, where g means the granularity of the global time and n is a natural number where n≧2.

3. The process of claim 1 , wherein the time interval, measured with the global time, between the time of receipt ( 212 , 222 ) of the life-sign message and the timeout time point ( 213 , 223 ) of this message is n·g, where g means the granularity of the global time and where n is a natural number where n≧2.

4. The process of claim 1 , wherein an error handling process is begun with the triggering of the error message.

5. The process of claim 1 , wherein a life-sign message is sent at the end of every cycle in a cyclical computer system.

Assignees

• Fts Computertechnik Gmbh

Inventors

• Kopetz Hermann

Classifications

• G06F11/076 Primary

  by exceeding a count or rate limit, e.g. word- or bit count limit · CPC title

• G06F11/0757

  by exceeding a time limit, i.e. time-out, e.g. watchdogs · CPC title

• G06F11/0709 Primary

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title

• G06F11/0772

  Means for error signaling, e.g. using interrupts, exception flags, dedicated error registers · CPC title

• G06F11/079

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title