Active fault tolerant control of discrete event systems using online diagnostics

The aim of this paper is to deal with the problem of fault tolerant control in the framework of discrete event systems modeled as automata. A fault tolerant controller is a controller able to satisfy control specifications both in nominal operation and after the occurrence of a fault. This task is solved by means of a parameterized controller that is suitably updated on the basis of the information provided by online diagnostics: the supervisor actively reacts to the detection of a malfunctioning component in order to eventually meet degraded control specifications. Starting from an appropriate model of the system, we recall the notion of safe diagnosability as a necessary step in order to achieve fault tolerant control. We then introduce two new notions: (i) “safe controllability”, which represents the capability, after the occurrence of a fault, of steering the system away from forbidden zones and (ii) “active fault tolerant system”, which is the property of safely continuing operation after faults. Finally, we show how the problem can be solved using a general control architecture based on the use of special kind of diagnoser, called “diagnosing controller”, which is used to safely detect faults and to switch between the nominal control policy and a bank of reconfigured control policies. A simple example is used to illustrate the new notions and the control architecture introduced in the paper.     

安全仪表系统在高含硫天然气净化厂的建立

高含硫天然气净化厂的安全仪表系统关键技术通过充分的实践检验和完善,它将实现特大型高含硫净化厂自动监控和安全联锁关断功能,实现迅速监测,准确判断,及时处理,使生产装置最快的速度进入安全状态,不需人工动态操作。系统的S O S E功能对系统本身的故障或触发的事件进行记录,以利于运行故障的快速分析,为装置在事故状态下的安全提供保证。     

网络安全技术浅析

伴随着21世纪信息时代的来临。网络的普及率大大提高。在计算机网络慢慢进入我们生活的各个角落的同时,计算机网络的安全问题越来越突出。该文介绍了计算机网络安全的重要性及威胁网络安全的因素。简要的分析了计算机网络的几种安全技术。     

Model-driven assessment of system dependability

Designers of complex real-time systems need to address dependability requirements early on in the development process. This paper presents a model-based approach that allows developers to analyse the dependability of use cases and to discover more reliable and safe ways of designing the interactions of the system with the environment. The hardware design and the dependability of the hardware to be used also needs to be considered. We use a probabilistic extension of statecharts to formally model the interaction requirements defined in the use cases. The model is then evaluated analytically based on the success and failure probabilities of events. The analysis may lead to further refinement of the use cases by introducing detection and recovery measures to ensure dependable system interaction. A visual modelling environment for our extended statecharts formalism supporting automatic probability analysis has been implemented in AToM³, A Tool for Multi-formalism and Meta-Modelling. Our approach is illustrated with an elevator control system case study.

Powered domestic lawnmowers: design for safety

The paper describes a detailed accident investigation carried out by the Institute for Consumer Ergonomics for the Consumer Safety Unit at the Department of Trade. As such it serves to illustrate the application of two specific research techniques (i) analysis of product related accident data, and (ii) ergonomics evaluation of current models - and shows how these may be used to help in defining standards and criteria for the design of safer products. The study identified lawnmower features and activities associated with accidents recorded by the Home Accident Surveillance System. Ergonomics appraisal by expert assessment and user trials highlighted hazards associated with currently available powered lawnmowers. Performance criteria for safer design of selected features were developed with the aim of overcoming these hazards. At the end of the study liaison was sought with manufacturers to discuss how the results from the work could be used to effect.     

A Review of:“The Remembering Self: Construction and Accuracy in the Self-narrative”, edited by ULRIC NEISSER and ROBYN FIVUSH,Cambridge University Press,New York (1994), pp. x + 301, £30.00, ISBN 0-521-43194-8

Driving is a task that requires the timely detection of critical events and relevant changes in traffic circumstances. Adaptation of speed and safety margins allows drivers to control the time available to react to potential hazards. One of the basic safety margins in driving is the time headway preserved with respect to cars ahead. To avoid rear-end collisions, drivers have to detect decelerations of lead cars. It can be assumed that fast or abrupt decelerations of the lead car are detected faster than slow or gradual decelerations. Moreover, expected decelerations are presumably detected faster than unexpected decelerations. Drivers' responses to rather abrupt and more gradual decelerations of the lead were investigated in a driving simulator. Situational traffic cues were used to manipulate the driver's expectations. Drivers adjusted the timing of their responses very well to the level of deceleration of the lead car. If cues in the environment indicated that the lead car was likely to decelerate, drivers reacted faster. Moreover, drivers increased their headway before the lead car actually started to decelerate, which can be considered an anticipatory response. In general, anticipation allows drivers to maintain their preferred headway and control time pressure in driving.     

风险社会下的刑法沉思——兼评食品安全刑法保护的严刑峻法

科技带来快捷与便利的同时也带来了风险与隐患,科技的“双刃剑”在食品安全领域的演绎尤为突出,助推着食品安全犯罪的发生并日益挑战民生底限。基于此,刑法在立法、司法乃至理论研究方面均呈现出严刑峻法的实证关注和理论热情。但法治毕竟不同于政治,更有别于民意,食品安全刑法保护理应遵循“秉承谦抑、坚守原则、兼顾例外、行政延伸”的理性进路。     

Crossing safety barriers: influence of children's morphological and functional variables

Thirty-three children between 3 and 6 years of age were asked to climb four different types of safety barriers. Morphological and functional variables of the children, which were expected to influence climbing or passing through skills, were collected. The influence of those variables on children’s success rate and time to cross was tested. No barrier offered a total restraining efficacy. The horizontal bars barrier was crossed by 97% of the children. In the group of children that succeeded in crossing the four barriers, mean time to cross the most difficult barrier was 15 s. Age was the best predictor for success in crossing most barriers but morphology and strength were important predictors of time to cross. The influence of anthropometric variables in time to cross was dependent upon the characteristics of the barrier. A good design of safety barriers should consider children’s age, morphology and strength.     

A critical review on physical factors and functional characteristics that may explain a sex/gender difference in work-related neck/shoulder disorders

The objective of this paper is to critically review recent literature on physical and functional sex/gender (s/g) differences, with focus on physical determinants associated with neck/shoulder musculoskeletal injuries. It is well known that there are s/g differences in anthropometrical and functional body characteristics (e.g. size and strength). However, s/g differences may be wrongly attributed if data analysis does not include appropriate corrections (e.g. by strength for endurance). Recent literature on motor control shows that there may indeed be s/g differences in muscle coordination and movement strategies during upper limb tasks that are not currently explained by methodological inadequacies. Moreover, recent studies have shown differences between men and women in sensory hypersensitivity characteristics associated with neck/shoulder injuries. Taken together, the literature points to the importance of accounting for possible s/g differences at all levels of the biopsychosocial system in order to better understand sex- and gender-specific issues relevant to workplace health. PRACTITIONER SUMMARY: This article critically reviews recent literature and a conceptual model highlighting s/g differences in physical and functional characteristics related to neck/shoulder musculoskeletal disorders (NSMSD). Findings have implications on understanding how personal factors may affect NSMSD risk. With better understanding, practitioners can make more appropriate decisions to prevent work-related NSMSD.     

Reach distance and safety standards

The reach of British males of 99th percentile stature over different height barriers was determined to establish reach distances for a proposed Comite Europeen de Normalisation (CEN) standard. The distances recorded are considerably in excess of those given in the draft West German standard DIN 310011984, and those given in the recently published British standard code of practice for safety of machinery BS.5304. Data are included from earlier experiments which show that the safety distances would also be inadequate for the 95th percentile stature British male. It is suggested that reasons for the discrepancies arise mainly from the differences in the way that the reach measurements were obtained.