Safety Communication Architecture for Voting and Non-Voting Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional safety critical systems face complexity and communication challenges due to the requirement of multiple communication channels for reliable operation, especially when low-level units lack voting capabilities, leading to increased system architecture complexity and bandwidth consumption.
Innovation Solution
A system architecture that employs a minimum of one active communication channel for normal operation and two for redundancy, using high-level units with voting and distribution capabilities to generate and secure messages, and low-level units without voting capabilities, which are secured with individually generated data protection codes to prevent unauthorized alteration or generation of messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple communication channels are required for reliable operation in safety critical systems, then system reliability is improved, but system architecture complexity and bandwidth consumption increase
Solution Approach 1:
The system segments communication channels into different types: voting channels for high-level units that require redundancy, and non-voting channels for low-level units that can operate with simpler communication requirements. This segmentation allows reliable voting functionality where needed while reducing overall system complexity.
Solution Approach 2:
Instead of requiring all units to have full voting capabilities and multiple redundant channels, the system applies voting principles partially - only to high-level units where safety-critical decisions are made. Low-level units use simplified communication protocols, reducing bandwidth consumption and architectural complexity while maintaining adequate reliability.
2Reliability
If low level units are equipped with voting capabilities, then system reliability is improved, but communication complexity and software complexity increase
Solution Approach 1:
The voting capability is extracted from low-level units and concentrated in high-level units. Low-level units simply execute commands and report status without participating in voting logic. This extraction eliminates the need for complex cross-communication channels between low-level units and simplifies their software architecture.
Solution Approach 2:
High-level units act as intermediaries that receive commands, perform voting decisions based on multiple input channels, and then distribute validated commands to low-level units. This intermediary role centralizes the complex voting logic while keeping low-level unit communication simple and direct.
3Adaptability or versatility
If cross-communication channels are implemented between low level units and high level units, then voting functionality is improved, but system complexity increases
Solution Approach 1:
The communication architecture is segmented into hierarchical levels: high-level units with full voting capability communicate through redundant voting channels, while low-level units communicate through simplified non-voting channels. This segmentation provides voting functionality where needed without implementing complex cross-communication throughout the entire system.
Data Source
AI summary
A safety communication scheme for a safety-critical system which includes two or more higher level units that have voting capabilities and one or two sets of lower level units that do not have voting capabilities, involves using one channel between the high and low level units for safety and two channels for redundancy.