# US 11,307,917 B2 · Decentralized cyber-physical system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,307,917 B2
- Document ID: US11307917B2
- Status: Granted
- Kind: B2
- Application number: 16/992,719
- Filed: 2020-08-13
- Published: 2021-02-18
- Granted: 2022-04-19
- Earliest claimed: 2019-08-16
- Assignees: Delta Electronics Int'l (Singapore) Pte Ltd
- Applicants: Delta Electronics Int'l (Singapore) Pte Ltd
- Inventors: Zhiheng Xu; Jun Xian Daniel Ng; Omar Bataineh; Arvind Easwaran; Sidharta Andalam; Bo Woon Jeffrey Soon
- Web page: https://patentgrep.com/patent/US11307917B2

## CPC

- G06F 11/0757: {by exceeding a time limit, i.e. time-out, e.g. watchdogs}
- G05B 23/0205: {by means of a monitoring system capable of detecting and responding to faults}
- G05B 23/0254: {based on a quantitative model, e.g. mathematical relationships between inputs and outputs; functions: observer, Kalman filter, residual calculation, Neural Networks}
- G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems}
- G06F 11/3006: {where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)}
- G06F 11/3058: {Monitoring arrangements for monitoring environmental properties or parameters of the computing system or of the computing system component, e.g. monitoring of power, currents, temperature, humidity, position, vibrations (thermal management in cooling arrangements of a computing system G06F1/206)}
- G06F 11/3065: {Monitoring arrangements determined by the means or processing involved in reporting the monitored data (error or fault reporting or logging G06F11/0766)}
- G05B 2219/32181: Monitor production, assembly apparatus with multiple sensors
- G06F 11/3013: {where the computing system is an embedded system, i.e. a combination of hardware and software dedicated to perform a certain function in mobile devices, printers, automotive or aircraft systems (testing or monitoring of control systems or parts thereof G05B23/02)}
- G06F 11/3089: {Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents (software debugging using additional hardware using a specific debug interface G06F11/3656; performance evaluation by tracing or monitoring G06F11/3466)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G)

## Abstract

The disclosure relates to a decentralized cyber-physical system including a managing unit and a plurality of components. The managing unit includes a root resilient manager including a root contract and a sub-contract generator. The sub-contract generator is configured to decompose the root contract into a plurality of sub-contracts and assign the plurality of sub-contracts to the plurality of components, respectively. Each component includes at least one observer configured to monitor if the property of the individual component violates the sub-contracts corresponding thereto. When one of the plurality of sub-contracts violates during the runtime of the decentralized cyber-physical system, the root resilience manager issues an alarm.

## Claims

### Claim 1

A decentralized cyber-physical system, comprising:
a managing unit comprising a root resilience manager for monitoring at least one property of the decentralized cyber-physical system; and
a plurality of components disposed in a physical space and connected to the root resilience manager,
wherein the root resilience manager comprises:
a root contract; and
a sub-contract generator configured to decompose the root contract into a plurality of sub-contracts and assign the plurality of sub-contracts to the plurality of components, respectively,
wherein each of the plurality of components comprises at least one observer configured to monitor if at least one property of the individual component violates the sub-contracts corresponding thereto, wherein when one of the plurality of sub-contracts violates during the runtime of the decentralized cyber-physical system, the root resilience manager issues an alarm;
wherein the sub-contract generator comprises at least one algorithm, and a non-functional formula and a dependency graph are taken as two inputs of the at least one algorithm;
wherein the decentralized cyber-physical system is a synchronous system with a global clock, and each of the plurality of components includes one process and has a minimum response time, wherein the root-contract is decomposed and unwound into the plurality of sub-contracts by the non-functional formula:
pi=p−[Σj=i+1n−1(RTmin(Cj))]
wherein pi is a timing parameter for the sub-contract of the corresponding component, p is an original timing parameter of the decentralized cyber-physical system, RTmin is the minimum response time of the corresponding component, Cj are the plurality of sub-contracts, and n is the total number of the plurality of components.

### Claim 2 (depends on 1)

The decentralized cyber-physical system according to claim 1, wherein the at least one property of the decentralized cyber-physical system and the at least one property of the individual component are non-functional property.

### Claim 3 (depends on 2)

The decentralized cyber-physical system according to claim 2, wherein the observer is configured to determine if the non-functional property of the corresponding component violates the sub-contract corresponding thereto.

### Claim 4 (depends on 2)

The decentralized cyber-physical system according to claim 2, wherein the plurality of sub-contracts are refined based on the individual non-functional properties of the plurality of components.

### Claim 5 (depends on 2)

The decentralized cyber-physical system according to claim 2, wherein the root resilient manager further comprises an observer configured to determine if an overall non-function property of the decentralized cyber-physical system violates the root-contract.

### Claim 6 (depends on 1)

The decentralized cyber-physical system according to claim 1, wherein the non-functional formula and the dependency graph are utilized to decompose the root-contract into a plurality of sub-contracts.

### Claim 7 (depends on 1)

The decentralized cyber-physical system according to claim 1, wherein the timing parameter for each of the sub-contracts is computed in backward design, and the sub-contracts of the plurality of components are verified in a forward direction.

### Claim 8 (depends on 1)

The decentralized cyber-physical system according to claim 1, wherein each of the plurality of components further comprises a resilience manager, and the root resilient manager and the plurality of resilient managers of the decentralized cyber-physical system are configured to form a multiple-level hierarchy system.

### Claim 9 (depends on 8)

The decentralized cyber-physical system according to claim 8, wherein the root resilient manager is disposed in a logical upper level, the plurality of resilient managers are disposed in a logical lower level, and the decentralized cyber-physical system is configured to form a two-level hierarchy system.

### Claim 10 (depends on 1)

The decentralized cyber-physical system according to claim 1, wherein the plurality of sub-contracts are optimized by the sub-contract generator of the root resilient manager.