skip to main content
10.1109/ETFA.2016.7733561guideproceedingsArticle/Chapter ViewAbstractPublication PagesConference Proceedingsacm-pubtype
research-article

Reset-based recovery for real-time cyber-physical systems with temporal safety constraints

Published: 01 September 2016 Publication History

Abstract

In traditional computing systems, software problems are often resolved by platform restarts. This approach, however, cannot be naïvely used in cyber-physical systems (CPS). In fact, in this class of systems, ensuring safety strictly depends on the ability to respect hard real-time constraints. Several adaptations of the Simplex architecture have been proposed to guarantee safety in spite of misbehaving software components. However, the problem of performing recovery into a fully operational state has not been extensively addressed. In this work, we discuss how resets can be used in CPS as an effective strategy to recover from a variety of software faults. Our work extends the Simplex architecture in a number of directions. First, we provide sufficient conditions under which safety is guaranteed in spite of fault-induced resets. Second, we introduce a novel technique to express not only state-dependent safety constraints, as typically done in Simplex, but also time-dependent safety properties. Finally, through a proof-of-concept minimal implementation on a small R/C helicopter and simulation-based system modeling, we show the effectiveness of the proposed recovery strategy under the assumed fault model.

References

[1]
L. Sha, “Dependable system upgrade,” in Real-Time Systems Symposium, 1998. Proceedings., The 19th IEEE. IEEE, 1998, pp. 440–448.
[2]
L. Sha, “Using simplicity to control complexity.” IEEE Software, 2001, pp. 20–28.
[3]
L. Sha, R. Rajkumar, and M. Gagliardi, “Evolving dependable real-time systems,” in Aerospace Applications Conference, 1996. Proceedings., 1996 IEEE, vol. 1. IEEE, 1996, pp. 335–346.
[4]
T. L. Crenshaw, E. Gunter, C. L. Robinson, L. Sha, and P. Kumar, “The simplex reference model: Limiting fault-propagation due to unreliable components in cyber-physical system architectures,” in Real-Time Systems Symposium, 2007. RTSS 2007. 28th IEEE International IEEE, 2007, pp. 400–412.
[5]
S. Bak, T. T. Johnson, M. Caccamo, and L. Sha, “Real-time reachability for verified simplex design,” in Real-Time Systems Symposium (RTSS), 2014 IEEE. IEEE, 2014, pp. 138–148.
[6]
S. Z. Bak, “Industrial application of the system-level simplex architecture for real-time embedded system safety,” 2009.
[7]
S. Bak, D. K. Chivukula, O. Adekunle, M. Sun, M. Caccamo, and L. Sha, “The system-level simplex architecture for improved real-time embedded system safety,” in Real-Time and Embedded Technology and Applications Symposium, 2009. RTAS 2009. 15th IEEE. IEEE, 2009, pp. 99–107.
[8]
G. Candea and A. Fox, “Recursive restartability: Turning the reboot sledgehammer into a scalpel,” in Hot Topics in Operating Systems, 2001. Proceedings of the Eighth Workshop on. IEEE, 2001, pp. 125–130.
[9]
G. Candea and A. Fox, “Crash-only software,” 2003.
[10]
G. Candea, E. Kiciman, S. Zhang, P. Keyani, and A. Fox, “Jagr: An autonomous self-recovering application server,” in Autonomic Computing Workshop. 2003. Proceedings of the. IEEE, 2003, pp. 168–177.
[11]
G. Candea, S. Kawamoto, Y. Fujiki, G. Friedman, and A. Fox, “Microreboot — a technique for cheap recovery,” in Proceedings of the 6th Conference on Symposium on Opearting Systems Design & Implementation - Volume 6, ser. OSDI'04, 2004, pp. 3–3.
[12]
K. Vaidyanathan and K. S. Trivedi, “A comprehensive model for software rejuvenation,” Dependable and Secure Computing, IEEE Transactions on, vol. 2, no. 2, pp. 124–137, 2005.
[13]
S. Garg, A. Puliafito, M. Telek, and K. S. Trivedi, “Analysis of software rejuvenation using markov regenerative stochastic petri net,” in Software Reliability Engineering, 1995. Proceedings., Sixth InternationalSymposium on. IEEE, 1995, pp. 180–187.
[14]
Y. Huang, C. Kintala, N. Kolettis, and N. D. Fulton, “Software rejuvenation: Analysis, module and applications,” in Fault-Tolerant Computing, 1995. FTCS-25. Digest of Papers., Twenty-Fifth InternationalSymposium on. IEEE, 1995, pp. 381–390.
[15]
R. Hajisheykhi, M. Roohitavaf, and S. S. Kulkarni, “Auditable restoration of distributed programs,” in 34th IEEE Symposium on Reliable Distributed Systems, SRDS 2015, Montreal, QC, Canada, September 28 - October 1, 2015, 2015, pp. 37–46. [Online]. Available: https://doi.org/10.1109/SRDS.2015.24
[16]
R. Hajisheykhi, M. Roohitavaf, and S. S. Kulkarni, “Bounded auditable restoration of distributed programs,” To be appeared at IEEE Transaction on Computers., 2016.
[17]
C. Zimmer and F. Mueller, “Fault resilient real-time design for noc architectures,” in Cyber-Physical Systems (ICCPS), 2012 IEEE/ACM Third InternationalConference on. IEEE, 2012, pp. 75–84.
[18]
E-Flite Inc., “Power 10 brushless outrunner motor datasheet,” http://www.e-fliterc.com/ProdInfo/Files/EFLPower10OutrunnerInstructions.pdf, accessed: 2015 –10 - 10.
[19]
B. Venkataraman, B. Godsey, W. Premerlani, E. Shulman, M. Thaku, and R. Midence, “Fundamentals of a motor thermal model and its applications in motor protection,” in Protective Relay Engineers, 2005 58th Annual Conference for. IEEE, 2005, pp. 127–144.
[20]
D. Seto and L. Sha, “A case study on analytical analysis of the inverted pendulum real-time control system,” DTIC Document, Tech. Rep., 1999.
[21]
F. Abdi, S. Bak, R. Mancuso, O. D. Dantsker, and M. Caccamo, Technical Report: Reset-Based Recovery for Real-Time Cyber-Physical Systems with Temporal Safety Constraints, http://rtsl-edge.cs.illinois.edu/reset-based/techrep.pdf, Feb 2015.
[22]
F. Mazenc, R. Mahony, and R. Lozano, “Forwarding control of scale model autonomous helicopter: a lyapunov control design,” in Decision and Control, 2003. Proceedings. 42nd IEEE Conference on, vol. 4, Dec 2003, pp. 3960–3965 vol. 4.
[23]
O. Shakernia, Y. Ma, T. J. Koo, and S. Sastry, “Landing an unmanned air vehicle: Vision based motion estimation and nonlinear control,” Asian journal of control, vol. 1, no. 3, pp. 128–145, 1999.
[24]
E. Licéaga-Castrol, “A liouvillian systems approach for the trajectory planning-based control of helicopter models,” Int. J. Robust Nonlinear Contrul, vol. 10, pp. 301–320, 2000.
[25]
I. A. Raptis and K. P. Valavanis, Linear and nonlinear control of small-scale unmanned helicopters. Springer Science& Business Media, 2010, vol. 45.
[26]
3D Robotics, “Ardupilot apm2.6,” http://3drobotics.com/kb/apm-2-6/, accessed: 2015 - 9 - 24.
[27]
CAPTRON Electronic GmbH, “Bavarian demon datasheet, 3x/3xs series,” http://www.bavariandemon.com/fileadmin/user_upload/downloads/bavarianDEMON-Instructions-3SX-3X_V6.1.pdf, accessed: 2015 –9 - 24.
[28]
Futaba Inc., “Fsu2 instruction manual,” http://manuals.hobbico.com/fut/fsu2-manual.pdf, accessed: 2015 –10 - 11.
[30]
S. N. Ahmadyan and S. Vasudevan, “Reachability analysis of nonlinear analog circuits through iterative reachable set reduction,” in Design, Automation Test in Europe Conference Exhibition (DATE), 2013, March 2013, pp. 1436–1441.

Cited By

View all

Recommendations

Comments

Information & Contributors

Information

Published In

cover image Guide Proceedings
2016 IEEE 21st International Conference on Emerging Technologies and Factory Automation (ETFA)
1580 pages

Publisher

IEEE Press

Publication History

Published: 01 September 2016

Qualifiers

  • Research-article

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)0
  • Downloads (Last 6 weeks)0
Reflects downloads up to 27 Jan 2025

Other Metrics

Citations

Cited By

View all

View Options

View options

Figures

Tables

Media

Share

Share

Share this Publication link

Share on social media