An Imperfect Fault Coverage Model With Coverage of Irrelevant Components

• Published in: IEEE transactions on reliability Vol. 64; no. 1; pp. 320 - 332
• Main Authors: Jianwen Xiang, Machida, Fumio, Tadano, Kumiko, Maeno, Yoshiharu
• Format: Journal Article
• Language: English
• Published: IEEE 01.03.2015
• Subjects: coherent systems; Fault tolerant systems; fault tree; Fault trees; Imperfect fault coverage; irrelevancy; irrelevancy trigger; Logic gates; Markov processes; Redundancy; Semantics
• ISSN: 0018-9529; 1558-1721
• DOI: 10.1109/TR.2014.2363155

This paper addresses the coverage (including identification and isolation) of irrelevant components in systems with imperfect fault coverage (IFC). In fault-tolerant systems, a single not-covered component fault may thwart the automatic recovery mechanisms, and lead to a system or subsystem failure. The models that consider the effects of IFC are known as coverage models (CMs). In traditional CMs, except those considering functional dependency (a similar concept to relevancy but with different assumptions and semantics), coverage is typically limited to faulty components regardless of their relevancies. Consequently, an operational but irrelevant component will not be isolated, and may threaten the system by its future uncovered (not-covered) failures. Although the system is generally assumed to be coherent, which implies the relevancy of each component in the initial system state, the traditional CMs do not consider the fact that an initially relevant component could become irrelevant after the failures of other components. We propose the irrelevancy coverage model (ICM) to cover the irrelevant components in addition to the faulty components. In the ICM, a component will be isolated from the system whenever it becomes irrelevant (even it is not failed), such that its future not-covered failures will not affect the system anymore. By incorporating the coverage of irrelevant components, the ICM opens up a new cost-effective approach to improve system reliability without additional redundancy.