| H. Kopetz, G. Bauer and S. Poledna. "Tolerating Arbitrary Node Failures in the Time-Triggered Architecture", SAE 2001-01-0677, SAE World Congress, Detroit, USA, March 2001. |
....whether this frame contains information that may lead to a failure at another node, such as the wrong time. Furthermore, a guardian performs signal reshaping in order to provide a consistent view on a frame to all other nodes of a cluster and to avoid Slightly off Specification (SoS) failures [9]. 3 The Transition from Asynchronous to Synchronous Operation In the preceding sections, we have explained the normal operation of the system, i.e. the synchronous operation. In this section, we will focus on the transition from asynchronous to synchronous operation. After power up, the clock ....
H. Kopetz, G. Bauer, and S. Poledna. Tolerating arbitrary node failures in the Time-Triggered Architecture. SAE 2001.
....also. TTA, however, provides a property called clique avoidance as part of its membership service, and this is equivalent to a consistent acknowledgment: only those nodes that receive a message, or those that did not (whichever is in the majority) will remain in the membership [BP00, KBP01] In common cases (where just one newly faulty node fails to receive, or a newly faulty sender fails to transmit) clique avoidance is achieved by the standard membership function and excludes exactly the faulty node. In rare cases, where there are multiple faults, or an asymmetric fault, the ....
Hermann Kopetz, Gunther Bauer, and Stefan Poledna. Tolerating arbitrary node failures in the Time-Triggered Architecture. In SAE
....violation of the fault hypothesis (fail silent nodes in TTAbus) and can bring the application into the safe state in case the fault hypothesis is violated. However, for fail operational applications, the TTA star interconnection that tolerates arbitrary (i.e. Byzantine) node faults is recommended [42], 43] In the TTA star configuration, the guardians are integrated into two replicated central star couplers as depicted in Figure 6. This has the following advantages: The guardians are fully independent and located at a physical distance from the nodes they protect. In a cluster ....
....configured TTA star a cluster will tolerate an arbitrary failure mode of a single TTA node (chip) A faulty 11 unit will be consistently detected by the membership protocol and isolated within two TDMA rounds. The TTA masks an asymmetric (Byzantine) fault of any node by architectural means [42] and realizes an efficient temporal and spatial partitioning of the nodes at the cluster level. B. Fault Tolerant Units For internal physical faults an important fault class in any system the preferred fault tolerance strategy is active replication of independent nodes. The effective ....
H. Kopetz, G. Bauer, and S. Poledna. Tolerating Arbitrary Node Failures in the Time-Triggered Architecture. Doc. No. SAE 2001-01-0677, SAE, 2001.
No context found.
H. Kopetz, G. Bauer and S. Poledna. "Tolerating Arbitrary Node Failures in the Time-Triggered Architecture", SAE 2001-01-0677, SAE World Congress, Detroit, USA, March 2001.
No context found.
Kopetz, H., Bauer, G., Poledna, S.: Tolerating Arbitrary Node Failure in the TimeTriggered Architecture. Doc No 2001-01-0677, SAE (2001)
No context found.
H. Kopetz, G. Bauer, and S. Poledna. Tolerating arbitrary node failures in the time-triggered architecture. In SAE 2001.
No context found.
H. Kopetz, G. Bauer, and S. Poledna. Tolerating arbitrary node failures in the time-triggered architecture. In SAE 2001.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC