Method for detecting a failure of a constituent system in a system-of-systems
A process to detect a failure of a constituent system ( 110 . . . 113 ) in a system of systems ( 1 ) consisting of a number of constituent systems ( 111 . . . 113 ) which exchange messages through a communications system ( 120 ), in which every constituent system ( 111 . . . 113 ) has a global time with a known granularity g, and at least one constituent system creates, at periodic creation times ( 210, 211 ) determined a priori from the progression of the global time, a time-triggered life-sign message, the time of transmission ( 211, 221 ) of this life-sign message in the time-triggered communications system ( 120 ), determined a priori from the progression of the global time, is synchronized with the creation time of this life-sign message, and the time of receipt ( 212, 222 ) of this life-sign message, determined a priori from the progression of the global time, is synchronized with the timeout time point ( 213, 223 ), determined a priori from the progression of the global time, of a monitor ( 130 ) of this life-sign message monitoring the arrival of the life-sign message, wherein an error message is triggered at the timeout time point if no life-sign message has arrived at the expected time of receipt ( 222 ).
1. A process to detect a failure of a constituent system ( 110 . . . 113 ) in a system of systems ( 1 ) consisting of a number of constituent systems ( 111 . . . 113 ) which exchange messages through a communications system ( 120 ),
wherein every constituent system ( 111 . . . 113 ) has a global time with a known granularity g, and at least one constituent system creates, at periodic creation times ( 210 , 211 ) determined a priori from the progression of the global time, a time-triggered life-sign message, the time of transmission ( 211 , 221 ) of this life-sign message in the time-triggered communications system ( 120 ), determined a priori from the progression of the global time, is synchronized with the creation time of this life-sign message, and the time of receipt ( 212 , 222 ) of this life-sign message, determined a priori from the progression of the global time, is synchronized with the timeout time point ( 213 , 223 ), determined a priori from the progression of the global time, of a monitor ( 130 ) of this life-sign message monitoring the arrival of the life-sign message, wherein an error message is triggered at the timeout time point if no life-sign message has arrived at the expected time of receipt ( 222 ).
2. The process of claim 1 , wherein the time interval, measured with the global time, between the creation time ( 210 , 220 ) of the life-sign message and the time of transmission ( 211 , 221 ) of this message is n·g, where g means the granularity of the global time and n is a natural number where n≧2.
3. The process of claim 1 , wherein the time interval, measured with the global time, between the time of receipt ( 212 , 222 ) of the life-sign message and the timeout time point ( 213 , 223 ) of this message is n·g, where g means the granularity of the global time and where n is a natural number where n≧2.
4. The process of claim 1 , wherein an error handling process is begun with the triggering of the error message.
5. The process of claim 1 , wherein a life-sign message is sent at the end of every cycle in a cyclical computer system.