Redundancy Device Threshold Logic Prevents Split-Brain Syndrome
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing redundancy systems face instability and incorrect data exchange due to 'split-brain syndrome' when heartbeat signals are interrupted, leading to incorrect recognition of node failures and potential system-wide issues, necessitating a higher priority on preventing this syndrome over preventing node failures.
Innovation Solution
A redundancy device with HB signal receivers, a calculator to count normal communication paths, and a comparator to determine the threshold for switching from redundancy to single execution, preventing unnecessary activation and maintaining system stability by setting a threshold for the number of normal communication paths required to avoid split-brain syndrome.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the redundancy system stops execution when heartbeat signal reliability is low, then split-brain syndrome is avoided, but work processing continuity is compromised
Solution Approach 1:
The patent changes the decision parameter from binary (stop or continue) to a threshold-based comparison. Instead of stopping execution whenever heartbeat reliability is low, the system compares the number of normal communication paths against a predetermined threshold. This allows the system to maintain execution when sufficient communication paths exist, while only stopping when the threshold is breached, thus balancing reliability and productivity.
Solution Approach 2:
The patent introduces dynamic adaptability by allowing the threshold to be configured based on system requirements. The threshold value can be adjusted to match different operational needs - higher thresholds prioritize reliability (avoiding split-brain), while lower thresholds prioritize productivity (maintaining execution). This dynamic parameter adjustment resolves the contradiction by allowing the system to adapt its behavior to specific operational contexts.
2Productivity
If the redundancy system continues execution with low heartbeat signal reliability, then work processing continuity is maintained, but split-brain syndrome may occur
Solution Approach 1:
The patent applies preliminary anti-action by proactively preventing split-brain syndrome before it occurs. The system continuously monitors the number of normal communication paths and compares them against the threshold. When the comparison indicates risk of split-brain (normal paths below threshold), the system stops execution in advance, preventing the harmful state from developing while maintaining productivity in safe conditions.
3Reliability
If multiple communication paths are used for heartbeat signals, then reliability of failure detection is improved, but complexity of the system increases
Solution Approach 1:
The patent applies segmentation by dividing the communication path monitoring into individual path assessments. Each communication path is evaluated separately to determine if it's normal or abnormal, and the results are aggregated by counting the number of normal paths. This segmented approach improves failure detection reliability while keeping the overall system manageable through modular, independent path evaluations.
Data Source
AI summary
A redundancy device which is configured to communicate with a redundancy opposite device and perform a redundancy execution, the redundancy device includes receivers configured to receive individually HB signals transmitted from the redundancy opposite device, a calculator configured to calculate a number of normal communication paths among communication paths of the HB signals based on a reception result of the receivers, a comparator configured to compare a calculation result of the calculator with a predetermined threshold value, and a changer configured to change the redundancy device from a standby state to an operating state, or change the redundancy device from the standby state to a not-standby state in which the redundancy execution is released, based on the calculation result of the calculator and a comparison result of the comparator.