Methods and systems for diagnosing hardware and software faults using time-stamped events

• US 8,464,102 B2
• Filed: 12/23/2010
• Issued: 06/11/2013
• Est. Priority Date: 12/23/2010
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Sinha, Purnendu, Das, Dipankar
• Primary Examiner(s): DUNCAN, MARC M
• Application Number:
  US12/977,405
• Publication Number:
  US 20120166878A1
• Time in Patent Office: 901 Days
• Field of Search: 714/1, 714/26, 714/37, 714/39, 714/51
• US Class Current: 714/39
• CPC Class Codes: G06F 11/0715 in a system implementing multitasking multitasking per se G06F9/46
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: H04L 41/064 involving time analysis
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A transportation vehicle including a high-resolution clock, an electronic network including two or more tasks, including first and second tasks, and a memory including instructions causing a processor to classify faults in the electronic network using the clock. The steps include receiving a first fault code generated at the first task, receiving a second fault trouble code generated at the second task of the electronic system in response to a second fault, and identifying an execution cycle offset associated with the first and second tasks using an execution schedule, and considering whether the first cycle is separated from the second cycle by the execution cycle offset identified by the schedule. The instructions also cause the processor to identify causal relationships for a plurality of faults via a pair-wise repetition of the above-described analysis for at least one combination of tasks other than the first and second tasks.

Claims

1. A method executed by a computer processor of an observing device for classifying faults in an electronic network utilizing a time-triggered communication system and a high-resolution time component, the method comprising:

(i) the processor receiving a first fault code generated at a first task of the electronic system in response to a first fault at the first task, wherein the first fault code identifies;

a first communication cycle of the electronic system associated with the first fault; and

a first slot, corresponding to the first task, of a first message in which the first fault code is transmitted to the processor;

(ii) the processor receiving a second fault trouble code generated at a second faulting task of the electronic system in response to a second fault, wherein the second fault code identifies;

a second communication cycle of the electronic system associated with the second fault; and

a second slot, corresponding to the second task, of a second message in which the second fault code is transmitted to the processor,

wherein the first slot and the second slot are populated with the first fault code and the second fault code, respectively, based on time synchronized with respect to the high-resolution time component;

(iii) the processor identifying an execution cycle offset associated with the first task and the second task using an execution schedule;

(iv) the processor considering whether the first cycle, of the first fault trouble code, is separated from the second cycle, of the second fault trouble code, by the execution cycle offset identified by the schedule;

(v) if the processor determines that the first cycle is not separated from the second cycle by the execution cycle offset, the processor further determining that the first fault did not cause the second fault;

(vi) if the processor determines that the first cycle is separated from the second cycle by the execution cycle offset, the processor considering whether operation of any of the tasks is dependent on operation of any other of the tasks based on task-dependency data;

(vii) if the processor determines that operation of none of the tasks is dependent on operation of another of the tasks, the processor further determining that the first fault and the second fault are coincidental;

(viii) if the processor determines that operation of at least one of the tasks is dependent on operation of at least one other of the tasks, the processor considering whether operation of the second task is dependent on operation of the first task;

(ix) if the processor determines that operation of the second task is dependent on operation of the first task, the processor further determining that the failure of the first task caused the failure in the second task; and

(x) if the processor determines that operation of the second task is not dependent on operation of the second task, the processor further determining that the first fault did not cause the second fault.

2. The method of claim 1, further comprising:

(xi) the processor considering whether operation of the first task is dependent on operation of the second task;

(xii) if the processor determines that operation of the first task is dependent on operation of the second task, the processor further determining that the failure of the second task caused the failure in the first task; and

(xiii) if the processor determines that operation of the first task is not dependent on operation of the first task, the processor further determining that the second fault did not cause the first fault.

3. The method of claim 1, wherein:

the execution cycle offset is an initial cycle offset;

the method further comprises;

re-performing step (iii) to identify another cycle offset; and

re-performing steps (iv)-(x) using the other cycle offset instead of the initial cycle offset.

4. The method of claim 1, wherein:

the first task operates in a first cyclical schedule, timing of which is dictated by the high-resolution time component; and

the second task operates in a second cyclical schedule, timing of which is dictated by the high-resolution time component.

5. The method of claim 1, further comprising:

the processor arranging the task-dependency data based on inputs including at least one data set selected from a group of data sets consisting of;

a task graph; and

a resource map.

6. The method of claim 1, further comprising performing an action to improve functioning of the network based on classification of the faults.

7. The method of claim 6, wherein the action includes:

identifying a task of the first task and the second task to mask based on the classification; and

masking the selected task.

8. The method of claim 1, further including performing a pair-wise analysis including, in addition to performing steps (i) through (x) with respect to a combination of the first task and the second task, repeating steps (i) through (x) except with the combination of the first task and the second task being replaced with a combination of tasks selected from a group of task combinations consisting of:

the second and the first task;

a third task and the second task;

the first task and a third task; and

the third task and a fourth task.

9. A tangible, non-transitory computer-readable medium of an observing device including instructions that, when executed by a processor, cause the processor to perform steps for classify faults in an electronic network utilizing a time-triggered communication system and a high-resolution time component, the steps comprising:

(i) receiving a first fault code generated at a first task of the electronic system in response to a first fault at the first task, wherein the first fault code identifies;

a first communication cycle of the electronic system associated with the first fault; and

a first slot, corresponding to the first task, of a first message in which the first fault code is transmitted to the processor;

(ii) receiving a second fault trouble code generated at a second faulting task of the electronic system in response to a second fault, wherein the second fault code identifies;

a second communication cycle of the electronic system associated with the second fault; and

a second slot, corresponding to the second task, of a second message in which the second fault code is transmitted to the processor,

wherein the first slot and the second slot are populated with the first fault code and the second fault code, respectively, based on time synchronized with respect to the high-resolution time component;

(iii) identifying an execution cycle offset associated with the first task and the second task using an execution schedule;

(iv) considering whether the first cycle, of the first fault trouble code, is separated from the second cycle, of the second fault trouble code, by the execution cycle offset identified by the schedule;

(v) if the first cycle is not separated from the second cycle by the execution cycle offset, determining that the first fault did not cause the second fault;

(vi) if the first cycle is separated from the second cycle by the execution cycle offset, considering whether operation of any of the tasks is dependent on operation of any other of the tasks based on task-dependency data;

(vii) if operation of none of the tasks is dependent on operation of another of the tasks, determining that the first fault and the second fault are coincidental;

(viii) if operation of at least one of the tasks is dependent on operation of at least one other of the tasks, considering whether operation of the second task is dependent on operation of the first task;

(ix) if operation of the second task is dependent on operation of the first task, determining that the failure of the first task caused the failure in the second task; and

(x) if operation of the second task is not dependent on operation of the second task, determining that the first fault did not cause the second fault.

10. The tangible, non-transitory computer-readable medium of claim 9, wherein the instructions further cause the processor to:

(xi) considering whether operation of the first task is dependent on operation of the second task;

(xii) if operation of the first task is dependent on operation of the second task, determining that the failure of the second task caused the failure in the first task; and

(xiii) if operation of the first task is not dependent on operation of the first task, determining that the second fault did not cause the first fault.

11. The tangible, non-transitory computer-readable medium of claim 10, wherein:

the execution cycle offset is an initial cycle offset; and

the instructions further cause the processor to;

re-perform step (iii) to identify another cycle offset; and

re-perform steps (iv)-(x) using the other cycle offset instead of the initial cycle offset.

12. The tangible, non-transitory computer-readable medium of claim 10, wherein the instructions further cause the processor to:

arrange the task-dependency data based on inputs including at least one data set selected from a group of data sets consisting of;

a task graph; and

a resource map.

13. The tangible, non-transitory computer-readable medium of claim 10, wherein the instructions further cause the processor to perform an action to improve functioning of the network based on classification of the faults.

14. The tangible, non-transitory computer-readable medium of claim 10, wherein the instructions further cause the processor to perform a pair-wise analysis including, in addition to performing steps (i) through (x) with respect to a combination of the first task and the second task, repeating steps (i) through (x) except with the combination of the first task and the second task being replaced with a combination of tasks selected from a group of task combinations consisting of:

the second and the first task;

a third task and the second task;

the first task and a third task; and

the third task and a fourth task.

15. A transportation vehicle comprising:

a high-resolution time component;

an electronic network including a first task and a second task, the electronic network being configured to utilize a time-triggered communication system based on the high-resolution time component; and

an onboard computer including;

a processor; and

a tangible, non-transitory computer-readable medium including instructions that, when executed by the processor, cause the processor to perform steps for classify faults in the electronic network comprising;

(i) receiving a first fault code generated at a first task of the electronic system in response to a first fault at the first task, wherein the first fault code identifies;

a first communication cycle of the electronic system associated with the first fault; and

a first slot, corresponding to the first task, of a first message in which the first fault code is transmitted to the processor;

(ii) receive a second fault trouble code generated at a second faulting task of the electronic system in response to a second fault, wherein the second fault code identifies;

a second communication cycle of the electronic system associated with the second fault; and

a second slot, corresponding to the second task, of a second message in which the second fault code is transmitted to the processor,

wherein the first slot and the second slot are populated with the first fault code and the second fault code, respectively, based on time synchronized with respect to the high-resolution time component;

(iii) identifying an execution cycle offset associated with the first task and the second task using an execution schedule;

(iv) considering whether the first cycle, of the first fault trouble code, is separated from the second cycle, of the second fault trouble code, by the execution cycle offset identified by the schedule;

(v) if the first cycle is not separated from the second cycle by the execution cycle offset, determining that the first fault did not cause the second fault;

(vi) if the first cycle is separated from the second cycle by the execution cycle offset, considering whether operation of any of the tasks is dependent on operation of any other of the tasks based on task-dependency data;

(vii) if operation of none of the tasks is dependent on operation of another of the tasks, determining that the first fault and the second fault are coincidental;

(viii) if operation of at least one of the tasks is dependent on operation of at least one other of the tasks, considering whether operation of the second task is dependent on operation of the first task;

(ix) if operation of the second task is dependent on operation of the first task, determining that the failure of the first task caused the failure in the second task; and

(x) if operation of the second task is not dependent on operation of the second task, determining that the first fault did not cause the second fault.

16. The transportation vehicle of claim 15, wherein the instructions of the tangible, non-transitory computer-readable medium further cause the processor to:

(xi) consider whether operation of the first task is dependent on operation of the second task;

(xii) if operation of the first task is dependent on operation of the second task, determine that the failure of the second task caused the failure in the first task; and

(xiii) if operation of the first task is not dependent on operation of the first task, determine that the second fault did not cause the first fault.

17. The transportation vehicle of claim 15, wherein:

the execution cycle offset is an initial cycle offset; and

the instructions of the tangible, non-transitory computer-readable medium further cause the processor to;

re-perform step (iii) to identify another cycle offset; and

re-perform steps (iv)-(x) using the other cycle offset instead of the initial cycle offset.

18. The transportation vehicle of claim 15, wherein the instructions of the tangible, non-transitory computer-readable medium further cause the processor to:

arrange the task-dependency data based on inputs including at least one data set selected from a group of data sets consisting of;

a task graph; and

a resource map.

19. The transportation vehicle of claim 15, wherein the instructions of the tangible, non-transitory computer-readable medium further cause the processor to perform an action to improve functioning of the network based on classification of the faults.

20. The transportation vehicle of claim 15, wherein the instructions of the tangible, non-transitory computer-readable medium further cause the processor to perform a pair-wise analysis including, in addition to performing steps (i) through (x) with respect to a combination of the first task and the second task, repeating steps (i) through (x) except with the combination of the first task and the second task being replaced with a combination of tasks selected from a group of task combinations consisting of:

the second and the first task;

a third task and the second task;

the first task and a third task; and

the third task and a fourth task.