System and method for safety analysis of failure behavior
AssigneeSiemens Industry Software Inc.
InventorMarc Zeller
Life of this patent
Estimating the term…
Abstract
Provided is a system for safety analysis of failure behavior for a unit including two or more components with at least one inport for receiving failure data and one outport for transmitting failure data, wherein for the analysis of the failures data of the components and/or the unit a safety contract is used, and wherein the safety contract is generated automatically by a model-based safety analysis model comprising separate SAM modules which are related to the components of the unit.
Claims8
A system for safety analysis of failure behavior comprising:
- a computing unit having two or more components, wherein each component of the two or more components has at least one inport for receiving failure data and one outport for transmitting failure data,
- wherein the system is configured for using a safety contract for analysis of the failure data of the two or more components of the computing unit, and wherein the system is configured for automatically generating the safety contract from a model-based safety analysis model comprising separate modules related to the two or more components of the computing unit, respectively,
- wherein incoming failure data received at the inport are modelled by using an inport failure mode and outcoming failure data transmitted from the outport are modelled by using an outport failure mode, wherein the inport failure mode and the outport failure mode are defined by the model-based safety analysis model,
- wherein an internal failure behavior is defined for each component of the computing unit, and wherein the safety contract for the two or more components of the computing unit is an interface contract, and
- wherein the model-based safety analysis model is a component fault tree model,
- wherein each inport failure mode and outport failure mode is described in an object constraint language,
- wherein each inport failure mode related to a respective inport is transformed into an assumption for the interface contract and each outport failure mode related to a respective outport is transformed into a guarantee of the interface contract,
- wherein transformation of each inport failure mode of the interface contract and outport failure mode of the interface contract includes negation of constraints specifying the respective inport failure mode and respective outport failure mode to automatically generate the interface contract.
A method for providing safety analysis of failure behavior for a computing unit comprising two or more components, wherein each component of the two or more components has at least one inport for receiving failure data and one outport for transmitting failure data, and wherein separate safety analysis model modules are related to the respective components, comprising:
- (a) utilizing, by the computing unit, a model-based safety analysis model for the separate safety analysis modules;
- (b) generating, by the computing unit, a safety contract from the model-based safety analysis model by the separate safety analysis modules;
- and
- (c) utilizing, by the computing unit, the generated safety contract for the analysis of the failures data of the components,
- wherein failure data received at the inport are modelled by using an inport failure mode and failure data transmitted from the outport are modelled by using an outport failure mode, wherein the inport failure mode and the outport failure mode are defined by the model-based safety analysis model,
- wherein an internal failure behavior is defined for each component of the computing unit, and wherein the safety contract for the two or more components of the computing unit is an interface contract, and
- wherein the model-based safety analysis model is a component fault tree model,
- wherein each inport failure mode and outport failure mode is described in an object constraint language,
- wherein each inport failure mode related to a respective inport is transformed into an assumption for the interface contract and each outport failure mode related to a respective outport is transformed into a guarantee of the interface contract,
- wherein transformation of each inport failure mode of the interface contract and outport failure mode of the interface contract includes negation of constraints specifying the respective inport failure mode and respective outport failure mode to automatically generate the interface contract.
Dependencies are inferred from the claim text.