Lecture 1 Temporal constraints: source and characterization

Similar documents
Systems Theoretic Process Analysis (STPA)

Systems Theoretic Process Analysis (STPA)

MIL-STD-883G METHOD

Solenoid Valves used in Safety Instrumented Systems

CS 4649/7649 Robot Intelligence: Planning

Reliability of Safety-Critical Systems Chapter 3. Failures and Failure Analysis

Basic STPA Exercises. Dr. John Thomas

STPA Systems Theoretic Process Analysis John Thomas and Nancy Leveson. All rights reserved.

Mitos Fluika Pressure and Vacuum Pumps Datasheet

Fail Operational Controls for an Independent Metering Valve

THE CANDU 9 DISTRffiUTED CONTROL SYSTEM DESIGN PROCESS

Service & Support. Questions and Answers about the Proof Test Interval. Proof Test According to IEC FAQ August Answers for industry.

Safety-critical systems: Basic definitions

Every things under control High-Integrity Pressure Protection System (HIPPS)

Safety assessments for Aerodromes (Chapter 3 of the PANS-Aerodromes, 1 st ed)

Basic STPA Tutorial. John Thomas

Failure Modes, Effects and Diagnostic Analysis

PERCEPTIVE ROBOT MOVING IN 3D WORLD. D.E- Okhotsimsky, A.K. Platonov USSR

Hazard Identification

Verification Of Calibration for Direct-Reading Portable Gas Monitors

Failure Modes, Effects and Diagnostic Analysis. Rosemount Inc. Chanhassen, MN USA

Sensing and Modeling of Terrain Features using Crawling Robots

NEURAL NETWORKS BASED TYRE IDENTIFICATION FOR A TYRE INFLATOR OPERATIONS

DeZURIK. KGC Cast Knife Gate Valve. Safety Manual

DeZURIK Double Block & Bleed (DBB) Knife Gate Valve Safety Manual

The Risk of LOPA and SIL Classification in the process industry

The benefits of the extended diagnostics feature. Compact, well-proven, and flexible

Gerald D. Anderson. Education Technical Specialist

Planning and Acting in Partially Observable Stochastic Domains

HIGH WIND PRA DEVELOPMENT AND LESSONS LEARNED FROM IMPLEMENTATION Artur Mironenko and Nicholas Lovelace

2600T Series Pressure Transmitters Plugged Impulse Line Detection Diagnostic. Pressure Measurement Engineered solutions for all applications

D-Case Modeling Guide for Target System

Lecturers. Multi-Agent Systems. Exercises: Dates. Lectures. Prof. Dr. Bernhard Nebel Room Dr. Felix Lindner Room

TR Electronic Pressure Regulator. User s Manual

Series 7250 Ruska High-Speed Digital Pressure Controller. GE Sensing. Features

#19 MONITORING AND PREDICTING PEDESTRIAN BEHAVIOR USING TRAFFIC CAMERAS

PositionMaster EDP300 Extended Diagnostics. Compact, well-proven, and flexible

Rollover Warning/Control for Sports Utility Vehicles

Review and Assessment of Engineering Factors

Failure Modes, Effects and Diagnostic Analysis

Line Following with RobotC Page 1

Eutectic Plug Valve. SIL Safety Manual. SIL SM.015 Rev 0. Compiled By : G. Elliott, Date: 19/10/2016. Innovative and Reliable Valve & Pump Solutions

Kenzo Nonami Ranjit Kumar Barai Addie Irawan Mohd Razali Daud. Hydraulically Actuated Hexapod Robots. Design, Implementation. and Control.

OIL & GAS. 20th APPLICATION REPORT. SOLUTIONS for FLUID MOVEMENT, MEASUREMENT & CONTAINMENT. Q&A: OPEC Responds to SHALE BOOM

NASA AEROSPACE PRESSURE VESSEL SAFETY STANDARD

Rajiv Gandhi University of Knowledge Technologies, Nuzvid

Functional safety. Functional safety of Programmable systems, devices & components: Requirements from global & national standards

1001ICT Introduction To Programming Lecture Notes

CDS-2000 CO 2 Sensor Verification, Calibration, and Troubleshooting Bulletin

DeZURIK. KSV Knife Gate Valve. Safety Manual

Table 1: Safety Function (SF) Descriptions

SIL explained. Understanding the use of valve actuators in SIL rated safety instrumented systems ACTUATION

FP15 Interface Valve. SIL Safety Manual. SIL SM.018 Rev 1. Compiled By : G. Elliott, Date: 30/10/2017. Innovative and Reliable Valve & Pump Solutions

Spring Locomotion Concepts. Roland Siegwart, Margarita Chli, Martin Rufli. ASL Autonomous Systems Lab. Autonomous Mobile Robots

CT433 - Machine Safety

NEW IGC CODE AND IGF CODE

M. TECH. (Computer Science, Information Technology)

(C) Anton Setzer 2003 (except for pictures) A2. Hazard Analysis

RESILIENT SEATED BUTTERFLY VALVES FUNCTIONAL SAFETY MANUAL

PEAPOD. Pneumatically Energized Auto-throttled Pump Operated for a Developmental Upperstage. Test Readiness Review

Specifications and information are subject to change without notice. Up-to-date address information is available on our website.

Safety Manual. Process pressure transmitter IPT-1* 4 20 ma/hart. Process pressure transmitter IPT-1*

Author s Name Name of the Paper Session. Positioning Committee. Marine Technology Society. DYNAMIC POSITIONING CONFERENCE September 18-19, 2001

Reliability of Safety-Critical Systems Chapter 4. Testing and Maintenance

CS 4649/7649 Robot Intelligence: Planning

Failure Modes, Effects and Diagnostic Analysis

ROUNDABOUT CAPACITY: THE UK EMPIRICAL METHODOLOGY

CALIBRATION AND TRACEABILITY: ITS IMPORTANCE IN THE GAS INDUSTRY

Beating Heart Simulator: Oral Report 2. Ashley Whiteside Nicole Rice Jacob Bauer

Lecture 04 ( ) Hazard Analysis. Systeme hoher Qualität und Sicherheit Universität Bremen WS 2015/2016

XVII Congreso de Confiabilidad

Understanding the How, Why, and What of a Safety Integrity Level (SIL)

Kungl Tekniska Högskolan

Centre for Autonomous Systems

System Operating Limit Definition and Exceedance Clarification

COMPARING PLUG & SEAT REGULATORS & CONTROL VALVES. Lamar Jones. Equipment Controls Company 4555 South Berkeley Lake Road Norcross, GA 30071

Time-Delay Electropneumatic Applications

Controlling the prefeeder

Dynamic Analysis of a Multi-Stage Compressor Train. Augusto Garcia-Hernandez, Jeffrey A. Bennett, and Dr. Klaus Brun

Linear Compressor Suction Valve Optimization

Connect with Confidence NO POWER NO PROBLEM

GOLFER. The Golf Putting Robot

Systems of Accounting for and Control of Nuclear Material

Training Fees 3,400 US$ per participant for Public Training includes Materials/Handouts, tea/coffee breaks, refreshments & Buffet Lunch.

Model-based Adaptive Acoustic Sensing and Communication in the Deep Ocean with MOOS-IvP

Session One: A Practical Approach to Managing Safety Critical Equipment and Systems in Process Plants

LECTURE 3 MAINTENANCE DECISION MAKING STRATEGIES (RELIABILITY CENTERED MAINTENANCE)

Workshop Information IAEA Workshop

Advanced Pump Control for Irrigation Applications

Robotics and Autonomous Systems

Pneumatic QEV. SIL Safety Manual SIL SM Compiled By : G. Elliott, Date: 8/19/2015. Innovative and Reliable Valve & Pump Solutions

This manual provides necessary requirements for meeting the IEC or IEC functional safety standards.

Robotics and Autonomous Systems

Control System Nur Istianah-THP-FTP-UB-2014

STICTION: THE HIDDEN MENACE

Application Note AN-107

Failure Modes, Effects and Diagnostic Analysis

Ch.5 Reliability System Modeling.

Critical Systems Validation

A4s Operation Manual

Transcription:

Real-Time Systems Lecture 1 Temporal constraints: source and characterization Basic concepts about real-time Requirements of Real-Time Systems Adapted from the slides developed by Prof. Luís Almeida for the course Sistemas de Tempo-Real DETI/UA, STR 14/15 1

A few definitions related with Real-Time There is a wide variety of definitions related to Real-Time, systems dealing with Real-Time and the services that they provide. All of these definitions have in common the fact that express the dependency of a computer system on the time, as it exists in a particular physical process. DETI/UA, STR 14/15 2

Definitions related with Real-Time Real-Time Service or Function Which must be performed or provided within finite time intervals imposed by a physical process Real-Time System One who contains at least one feature of real-time or at least providing a service of real-time (PDC 1990) Real-Time Science Branch of computer science that studies the introduction of Real-Time in computational systems. DETI/UA, STR 14/15 3

Real-Time Computation The computation results must be Logically correct Delivered on time Timeliness (Stankovic, 1988) Logic correction DETI/UA, STR 14/15 4

Real-Time System System under control Controller system Operator Computational system 14:45:26 n, t n out/phy - t n in/phy < δ n, t n+1 in/phy - t n in/phy < Τ Actuators Sensors t n out/phy Environment (physical process) t n in/phy Temporal restrictions imposed by the environment DETI/UA, STR 14/15 5

Notion of Real-Time The environment with which the computer system interacts (physical process) has its own pace of evolution, i.e., its own dynamics. This rhythm is inherent to the physical process itself and can not (or should not, in the case of simulators) be controlled externally. Is called a Real-Time. DETI/UA, STR 14/15 6

Notion of Real-Time Thus, the environment imposes on the system timing requirements according to its own real-time, ie, its dynamics. For the computer system to be able to interac with its environment, it must act on it in time, i.e. according to the respective real-time. DETI/UA, STR 14/15 7

Notion of Real-Time Note that real-time does not mean fast but just the natural rhythm of a certain physical process (relative term) Note also the antagonism with situations in which the pace of change can be controlled either by the operator or by the control system (e.g., the reservation system of air travel, banking systems control accounts). In such cases, when facing an excess of requests, the system slows down the response to these requests, continuing the processing with the fastest possible pace (best effort). Leads to access queues... DETI/UA, STR 14/15 8

Notion of Real-Time Example F1 pilot (applies also to any driver, robots, machines...) The steering control has to be accurate, whatever the speed at which the car runs All unexpected events (e.g. car accidents, people on the track, water in the track, flat tires) arising while the car runs at high speed must be handled at that speed The car speed determines the real-time You can not stop instantly to think!! DETI/UA, STR 14/15 9

Notion of Real-Time Generally, when a control or monitoring system can monitor the state of a given physical process and, if necessary, act on it in time, then it is a real-time system. All living beings are real-time in relation to their natural habitats, which determine its real-time systems. On the other hand, when we build (programmable) machines to interact with physical processes, we need to use programming techniques and SW infrastructures that allow us to have confidence in its ability to carry out timely actions. DETI/UA, STR 14/15 10

Objective of the study of RTS The main objective of the study of Real-Time Systems is the development of techniques for Design, Analysis, and Verification that allow to obtain assurance that a given system, which is intended for real-time, has an appropriate timing behavior, namely satisfying the requirements imposed by the dynamics of the system with which it interacts DETI/UA, STR 14/15 11

Objective of the study of RTS Regarding the computational activities of RTS, the main aspects to consider are: Execution time Response time Regularity of periodic events DETI/UA, STR 14/15 12

Objective of the study of RTS Some aspects particularly important regarding Execution time Code structure (language, conditional execution, cycles) DMA, cache, pipeline Operative System or kernel (system calls) Response time and regularity Interrupts Multi-tasking Access to shared resources (buses, communication ports,...) DETI/UA, STR 14/15 13

Requirements of Real-Time Systems The requirements commonly imposed to real-time systems are of three types:: Functional Temporal Dependability DETI/UA, STR 14/15 14

Functional requirements Data gathering Sampling of system variables (real-time entities), both analog and discrete Digital Direct Control Direct access of the control system to sensors and actuators Interaction with the operator System status information, logs, support to correct system operation, warnings,... DETI/UA, STR 14/15 15

Functional requirements Data gathering Internally to the controller system are local images (internal variables) of the entities of real-time system. Each image of a real-time entity has a limited time validity due to the temporal dynamics of the physical process. The set of images of the real-time entities form the real-time database. The real-time database must be updated whenever there is a significant change in a value of a real-time entity. DETI/UA, STR 14/15 16

Functional requirements Example: Small mobile robot DC Motors VD SD 1.2 V 1.2 V Sens. IV 1.2 V SF 1.2 V IV SC Obstacle sensors SE VE Floor sensor Internal images Sensors: SE, SF, SD e SC Motors: VE e VD RT entities Sensors: SE, SF, SD and SC Motor speed: VE e VD RT database DETI/UA, STR 14/15 17

Temporal requirements Usually arise from the physical dynamics of the process to be controlled Impose restrictions: Delays the observation of the system state Delays computing the new control values (acting) Variations of previous delays (jitter) that must be followed in all instances (including the worst case) and not only on average DETI/UA, STR 14/15 18

Temporal requirements Controlling the liquid level in a container Xsp Controller X(t) Alarm Qi Xmax Qo DETI/UA, STR 14/15 19

Temporal requirements Controlling the liquid level in a container X(t) X2 Set-point d X(t) d t X1 tm tsub Dead-time Rise time Real-time DETI/UA, STR 14/15 20

Temporal requirements Delay in the actuation degradation of the control performance X(t) Overshoot resulting from a delay in the valve actuation X2 Set-point X1 tm tsub Dead-time Valve actuation delay Real-Time DETI/UA, STR 14/15 21

Temporal requirements The Control System imposes the following requirements Sampling period T s (< 1/10 t sub quasi-continuous control) Maximum delay of the valve actuation d max (< T s ) (easy to compensate by the controller) Variations on the delay of sensing the liquid level (jitter) j s,max (<< d max ) Variations on the delay of the valve actuation (jitter) j o,max (<< d max ) (hard to compensate -> degradation of the quality of control) Maximum delay on the alam activation d al,max DETI/UA, STR 14/15 22

Temporal requirements Periodic sampling event 0 Sensor reading Control algorithm execution Actuation 1 n Sensor Actuation reading t = 0 j s j s o 0 f 0 s 1 f 1 time d max d max r 0 = Φ T r 1 = T + Φ r n = n * T + Φ r n activation (release) s n start of execution f n end of execution DETI/UA, STR 14/15 23

Temporal requirements Classification of the temporal constraints: (according with the usefulness of the result) Soft temporal constraint in which the result retains some utility to the application, even after a temporal limit D, although affected by a degradation of quality of service. Utility r D t(f) Firm temporal constraint in which the result loses any usefulness to the application after a temporal limit D. Utility r D 0 t(f) Hard temporal restriction that, when not met, can lead to a catastrophic failure. Utility r - D t(f) DETI/UA, STR 14/15 24

Temporal requirements Classification of the Real-Time Systems: (according with the temporal constraints) Soft Real-Time The system only has firm or soft real-time constraints (e.g., simulators, multimedia systems) Hard Real-Time The system has at least one hard realtime constraint. These are the so-called safety-critical systems (e.g. airplane control, missile control, nuclear plants control, control of dangerous industrial processes) DETI/UA, STR 14/15 25

Dependability requirements Real-time systems are typically used in critical applications, in which failures may endanger human lives or result in high economic impact/losses. This results in a requirement of: High Reliability - Hard real-time systems have typically ultra-high reliability requirements (λ < 10-9 failures/hour). Cannot be experimentally verified!) DETI/UA, STR 14/15 26

Dependability requirements Important aspect to consider in safet-critical systems: Stable interfaces between the critical and the remaining subsystems, in order to avoid error propagation between each other. Well defined worst case scenarios. The system must have an adequate amount of resources to deal with worst case scenarios without resorting to probabilistic arguments, i.e. must provide service guarantees even in such scenarios. Architecture composed of autonomous subsystems, whose properties can be checked independently of the others (composability). DETI/UA, STR 14/15 27

Summary of Lecture 1 DETI/UA, STR 14/15 28

Summary of lecture 1 Notion of real-time and real-time system Antagonism between real-time and best effort Objectives of the study of RTS how to guarantee the adequate temporal behavior Aspects to consider: execution time, response-time and regularity of periodic events Requirements of RTS: functional, temporal and dependability Notion of real-time database Constraints soft, firm and hard, and hard real time vs soft real time The importance of consider the worst-case scenario DETI/UA, STR 14/15 29

Research work E. Baccelli, O. Hahm et al. Towards an OS for the Internet of Things. INFOCOM'2013 Demo/Poster Session URL:http://www.embedded.com/design/real-worldapplications/4430128/Towards-an-OS-for-the-Internet-of-Things DETI/UA, STR 14/15 30