Protocol Membership Agreement in Distributed Communication System - A Question of Brittleness
Paper i proceeding, 2003

This paper describes results from fault injection experiments using heavy ions in the time-triggered communication protocol for safety critical distributed systems (TTP/C, C1 implementation). The observed results show that arbitrary faults in one erroneous node could cause inconsistencies in the cluster and thus jeopardize correctly working nodes and the whole communication system. The described inconsistencies resulted from either asymmetric value faults or slightly out of specification timing faults. This system behavior can be partly explained by too strict constraints on the fault handling algorithms using the membership agreement protocol.

Distributed systems

Time-triggered communications


System behaviors

Timing fault

Arbitrary faults

Fault injection

Distributed communication systems

Fault handling

Strict constraint

Working nodes Engineering controlled terms: Fracture mechanics Engineering main heading: Communication systems


Håkan Sivencrona

SP Swedish National Testing

Per Johannessen


Jan Torin

Chalmers, Institutionen för datorteknik

SAE World Congress; Detroit, MI; United States; 3 March 2003 through 6 March 2003; Code 90286


Data- och informationsvetenskap