Method and system for providing emergency shutdown of a malfunctioning device

• US 7,073,083 B2
• Filed: 07/18/2001
• Issued: 07/04/2006
• Est. Priority Date: 07/18/2001
• Status: Expired due to Term

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Ramaswamy, Kumar, Litwin, Louis Robert Jr.
• Primary Examiner(s): Cao, Chun
• Application Number:
  US09/908,230
• Publication Number:
  US 20030018922A1
• Time in Patent Office: 1,812 Days
• Field of Search: 713/310, 713/324, 370/461, 370/462, 714/4, 709/205
• US Class Current: 713/324
• CPC Class Codes: G06F 11/0745 in an input/output transactions management context input/output processing in general G06F13/00
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 12/12 Arrangements for remote connection or disconnection of substations or of equipment thereof
• CPC Class Codes: H04L 12/40026 Details regarding a bus guardian
• CPC Class Codes: H04L 12/40182 by using a plurality of communication lines
• CPC Class Codes: H04L 12/417 with deterministic access, e.g. token passing
• CPC Class Codes: H04L 41/0659 by isolating or reconfiguring faulty entities
• CPC Class Codes: H04L 41/344 Out-of-band transfers
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition

Abstract

In a network system having a plurality of devices communicating via a network, a method and system for providing an emergency signal is provided. In one embodiment, a device is malfunctioning if the device continuously transmits data to the network without proper authorization. Another properly functioning device transmits the emergency signal via an auxiliary channel to the malfunctioning device. The auxiliary channel is a separate channel supporting the transmission of the emergency signal. The malfunctioning device receives the emergency signal and disables itself in response to this signal.

Claims

1. In a network system having one master device and at least one slave device communicating via a network having a data channel and an auxiliary channel, a method comprising:

transmitting an emergency signal from said master device via said auxiliary channel to a slave device having a detected malfunction; and

said emergency signal adapted to cause the disabling of said slave device having the detected malfunction.

2. The method of claim 1 wherein said master device and said at least one slave device each comprise one of a powerline modem and a wireless modem.

3. The method of claim 1 wherein a malfunction is detected by:

determining, if said slave device is transmitting data via said data channel, whether said slave device is authorized to transmit data via said data channel.

4. The method of claim 3 wherein said slave device is authorized to transmit data via said data channel if at least one of a current time slot and an unexpired token is assigned to said slave device.

5. The method of claim 1 further comprising:

notifying a user of the malfunctioned state of the detected slave device.

6. The method of claim 1 wherein said disabling comprises:

transmitting said emergency signal to a relay used to control power of said detected malfunctioning slave device, said emergency signal adapted to cause said relay to change output states.

7. The method of claim 1 wherein said auxiliary channel uses a different frequency than said data channel.

8. The method of claim 1 wherein said auxiliary channel uses a different spreading code than said data channel.

9. The method of claim 1 wherein at least one of said master device and said at least one slave device comprise a computer system.

10. The method of claim 1 further comprising:

transmitting a signal to said disabled slave device adapted to cause the powering up of said disabled slave device.

11. In a network system having a first device and a second device communicating via a network having a data channel and an auxiliary channel, a method comprising:

transmitting an emergency signal from said first device via said auxiliary channel to said second device having a detected malfunction; and

said emergency signal adapted to cause the disabling of said second device having the detected malfunction,

wherein said first device and said second device are stand-alone devices.

12. In a network system having a plurality of devices communicating via a network having a data channel and an auxiliary channel, where said auxiliary channel is at least logically separated from said data channel, a method comprising:

detecting whether a malfunction exists for at least one device;

selecting a device that is properly functioning;

transmitting an emergency signal from said selected device to all other devices via said auxiliary channel, said emergency signal adapted to cause the disabling of said at least one device for which the malfunction exists,

wherein said selected device and said at least one device for which the malfunction exists are stand-alone devices.

13. The method of claim 12 wherein said selecting is performed in accordance to a Carrier Sense Multiple Access (CSMA) scheme.

14. The method of claim 12 wherein said selecting is performed in accordance to an ALOHA scheme.

15. The method of claim 12 wherein said selecting comprises:

selecting said device having a backoff time that is the earliest.

16. The method of claim 12 further comprising:

resetting said at least one device using a reset signal.

17. The method of claim 12 further comprising:

powering up said disabled devices to effect a reset of said previously disabled devices.

18. The method of claim 12 further comprising:

notifying a user of a reset of said plurality of devices.

19. The method of claim 12 wherein said plurality of devices comprise a master device and at least one slave device.

20. The method of claim 12 wherein said plurality of devices each comprise one of a powerline modem and a wireless modem.

21. The method of claim 12 wherein said auxiliary channel uses a different frequency than said data channel.

22. The method of claim 12 wherein said auxiliary channel uses a different spreading code than said data channel.

23. A network system adapted for communication via a network having a data channel and an auxiliary channel, said system comprising:

a master device for transmitting an emergency signal via said emergency channel; and

at least one slave device having a detected malfunction, said at least one slave device disabling itself upon receipt of said emergency signal via said emergency channel, wherein said master device and said at least one slave device are stand-alone devices.

24. In a network system having one master device and at least one slave device communicating via a network having a data channel and an auxiliary channel, a computer-readable medium having stored thereon a plurality of instructions which when executed by a processor cause the processor to perform the steps comprising:

transmitting an emergency signal from said master device via said auxiliary channel to a slave device having a detected malfunction; and

said emergency signal adapted to cause the disabling of said slave device having the detected malfunction,

wherein said master device and said slave device having the detected malfunction are stand-alone devices.

25. In a network system having one master device and at least one slave device communicating via a network having a data channel and an auxiliary channel, a computer-readable medium having stored thereon a plurality of instructions which when executed by a processor cause the processor to perform the steps comprising:

detecting whether a malfunction exists for at least one device;

selecting a device that is properly functioning;

transmitting an emergency signal from said selected device to all other devices via said auxiliary channel, said emergency signal adapted to cause the disabling of said at least one device for which the malfunction exists,

wherein said selected device and said at least one device for which the malfunction exists are stand-alone devices.