FTMP—A highly reliable fault-tolerant multiprocess for aircraft

Hopkins, A. L.; Smith, T. B.; Lala, Jaynarayan H.

doi:10.1109/proc.1978.11113

Cited by 306 publications

(40 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They also provided an interesting contrast because they were developed from the same specifications; namely, to achieve a failure rate of 10 -9 per hour in a 10-hour flight, with maintenance intervals of hundreds of hours. MIT's design [HOPK78] used flexible hardware triplication and voting, with malfunctions detected and isolated by duplex "bus guardians" designed for a malfunction-safe mode of operation. Stanford's design [WENS78] relied on replicated software tasks executing on independent off-the-shelf computing elements and communicating through a voting protocol.…”

Section: Dependable Computer Systemsmentioning

confidence: 99%

From defects to failures: a view of dependable computing

Parhami

1988

SIGARCH Comput. Archit. News

View full text Add to dashboard Cite

A unified framework and terminology for the study of computer system dependability is presented. Impairments to dependability are viewed from six abstraction levels. It is argued that all of these levels are useful, in the sense that proven dependability procurement techniques can be applied at each level, and that it is beneficial to have distinct, precisely defined terminology for describing impairments to and procurement strategies for computer system dependability at these levels. The six levels in the proposed framework are:1

show abstract

Section: Dependable Computer Systemsmentioning

confidence: 99%

From defects to failures: a view of dependable computing

Parhami

1988

SIGARCH Comput. Archit. News

View full text Add to dashboard Cite

show abstract

“…The best known implementation of the Type lb structure is the Draper a Laboratory's Fault-Tolerant Multiprocessor (FTMP) [5]. i…”

Section: Canonical Models Of Real Time Multiprocessorsmentioning

confidence: 99%

“…)+µmP' + la-1+(j+l ) µPj.7+1 for 0<j<c, i>0 (5) (jt+cµ) pj,. = \pj-1.c +µmpi + l.o -1 for i>0 (6) The boundary condition is: 2 t Pj.)…”

Section: Qu45jtrmentioning

confidence: 99%

Queueing analysis of a canonical model of real-time multiprocessors

Krishna

Shin

1983

Proceedings of the 1983 ACM SIGMETRICS Conference on Measurement and Modeling of Computer Systems - SIGMETRICS '83

View full text Add to dashboard Cite

“…The other approach is to invoke an overload management technique upon detection of a failure. For example, one can prioritize tasks based on their importance to the application and discard tasks which do not adversely affect the performance delivered by the application [12]. The solution discussed in this paper for dealing with component failures is based on this latter approach.…”

Section: Introductionmentioning

confidence: 99%

Overload management in real-time control applications using (m, k)-firm guarantee

Ramanathan

1999

IEEE Trans. Parallel Distrib. Syst.

191

150

View full text Add to dashboard Cite

AbstractÐTasks in a real-time control application are usually periodic and they have deadline constraints by which each instance of a task is expected to complete its computation, even in the adverse circumstances caused by component failures. Techniques to recover from processor failures often involve a reconfiguration in which all tasks are assigned to fault-free processors. This reconfiguration may result in processor overload where it is no longer possible to meet the deadlines of all tasks. In this paper, we discuss an overload management technique which discards selected task instances in such a way that the performance of the control loops in the system remain satisfactory even after a failure. The technique is based on the rationale that real-time control applications can tolerate occasional misses of the control law updates, especially if the control law is modified to account for these missed updates. The paper devises a scheduling policy which deterministically guarantees when and where the misses will occur. The paper also proposes a methodology for modifying the control law to minimize the deterioration in the control system behavior as a result of these missed control law updates.

show abstract

FTMP—A highly reliable fault-tolerant multiprocess for aircraft

Cited by 306 publications

References 8 publications

From defects to failures: a view of dependable computing

From defects to failures: a view of dependable computing

Queueing analysis of a canonical model of real-time multiprocessors

Overload management in real-time control applications using (m, k)-firm guarantee

Contact Info

Product

Resources

About