morning edit

This commit is contained in:
Robin P. Clark 2012-09-12 09:05:53 +01:00
parent 423b2894bb
commit 2b49372540
2 changed files with 56 additions and 37 deletions

View File

@ -56,15 +56,16 @@ starts with %starts with %an overview of current failure modelling techniques,
a worked example to introduce % using a worked example to introduce % using
a new methodology, a new methodology,
Failure Mode Modular De-composition (FMMD). Failure Mode Modular De-composition (FMMD).
This is followed by a discussion on the design of FMMD and then a This is followed by a discussion on the design of FMMD, a
%an ontological %an ontological
description and re-factoring process using UML class models. description of the FMMD process and finally the
data structures required using UML class models.
% This chapter defines the FMMD process and related concepts and calculations. % This chapter defines the FMMD process and related concepts and calculations.
FMMD is in essence a modularised variant of traditional FMEA~\cite{sccs}[pp.34-38]. FMMD is in essence a modularised variant of traditional FMEA~\cite{sccs}[pp.34-38].
% %
FMEA is a bottom-up, or forward search failure mode technique starting with %FMEA is a bottom-up, or forward search failure mode technique starting with
base component failure modes~\cite{safeware}[p.341]. %base component failure modes~\cite{safeware}[p.341].
% %
%\subsection{FMMD Process in outline.} %\subsection{FMMD Process in outline.}
% %
@ -79,7 +80,7 @@ The components to include in a {\fg} are chosen by hand.
{\fg} we can look at the components it contains, {\fg} we can look at the components it contains,
and from this determine the failure modes of all the components that belong to it. and from this determine the failure modes of all the components that belong to it.
% %
Initial {\fgs} will consist of {\bcs}. %Initial {\fgs} will consist of {\bcs}.
% %
% and determine a failure mode model for that group. % and determine a failure mode model for that group.
% %
@ -90,15 +91,15 @@ Initial {\fgs} will consist of {\bcs}.
% %
All the failure modes of all the components within a {\fg} are collected. All the failure modes of all the components within a {\fg} are collected.
% %
As each component %mode holds %As each component %mode holds
has a set of failure modes associated with it, %has a set of failure modes associated with it,
the {\fg} represents a set of sets of failure modes. %the {\fg} represents a set of sets of failure modes.
% %
We convert this %We convert this
into a flat set %into a flat set
of failure modes for use in analysis. %of failure modes for use in analysis.
% %
A flat set is a set containing just the failure modes and not sets of failure modes~\cite{joyofsets}[p.8]. %A flat set is a set containing just the failure modes and not sets of failure modes~\cite{joyofsets}[p.8].
% %
%In practical term each component failure mode is considered as a `failure~scenario' or 'test~case' %In practical term each component failure mode is considered as a `failure~scenario' or 'test~case'
%for the {\fg}. %for the {\fg}.
@ -113,7 +114,8 @@ Once we have the failure mode behaviour of the {\fg}, we can determine its sympt
%or the failure modes of the {\dc}. %or the failure modes of the {\dc}.
%for the {\fg}. %for the {\fg}.
% %
We view these symptoms as derived failure modes of the {\fg}. We view these symptoms as %derived
failure modes of the {\fg}.
% %
Or in other words we can determine how the `{\fg}' can fail. Or in other words we can determine how the `{\fg}' can fail.
We can now consider the {\fg} as a {\dc} % sort of super component We can now consider the {\fg} as a {\dc} % sort of super component
@ -156,8 +158,8 @@ In this way we can incrementally apply FMEA to an entire system. %, with documen
% %
This has advantages of concentrating This has advantages of concentrating
effort in where modules interact (interfaces), of effort in where modules interact (interfaces), of
being able to re-use work and a saving in the complexity of performing being able to re-use work and a savings in the complexity of performing
FMEA. FMEA (because the analysis is performed in small stages).
%A notation is then described to index and classify objects created in FMMD hierarchical models. %A notation is then described to index and classify objects created in FMMD hierarchical models.
@ -709,7 +711,7 @@ This {\dc} will have two failure modes, $HighPD$ and $LowPD$.
% \caption{DAG representing the {\dc} Potential Divider (PD) and its failure modes.} % \caption{DAG representing the {\dc} Potential Divider (PD) and its failure modes.}
% \label{fig:dc1dag} % \label{fig:dc1dag}
% \end{figure} % \end{figure}
%
% The derived component is defined by its failure modes and % The derived component is defined by its failure modes and
% the functional group used to derive it. % the functional group used to derive it.
% %We can consider this an an orthogonal WHAT???? Group ???? Collection ???? % %We can consider this an an orthogonal WHAT???? Group ???? Collection ????
@ -973,7 +975,7 @@ represents the failure mode behaviour of the non-inverting amplifier.
% %
% %
We can represent the analysis stages of INVAMP as an Euler diagram, We can represent the analysis stages of INVAMP as an Euler diagram,
showing the choice of de-composition of the system into {\fgs}.} showing the choice of de-composition of the system into {\fgs} (see figure~\ref{fig:eulerfmmd}).
%where the curves %where the curves
%define the components and {\dcs} used to form the INVAMP model, see figure~\ref{fig:eulerfmmd}. %define the components and {\dcs} used to form the INVAMP model, see figure~\ref{fig:eulerfmmd}.
% %
@ -1131,12 +1133,13 @@ as a separate building block for a circuit. For FMMD each of these four op-amps
in the chip would be considered to be a separate {\bc}. in the chip would be considered to be a separate {\bc}.
% CAN WE FIND SUPPORT FOR THIS IN LITERATURE??? % CAN WE FIND SUPPORT FOR THIS IN LITERATURE???
% %
We, need to go further than the above definition of a part defining an atomic entity. % used as a building block. We, need to go further than the above definition of a part, and define % defining
an atomic entity. % used as a building block.
%The term component, in American English, can mean a building block or a part. %The term component, in American English, can mean a building block or a part.
%In British-English a component generally is given to mean the definition for part above. %In British-English a component generally is given to mean the definition for part above.
We define {\bc} to be the lowest level---an entity with which we begin our analysis---a component We define {\bc} to be the lowest level---an entity with which we begin our analysis---a component
that we use as a building block. that we use as a building block.
This is a choice made by the analyst, often guided by the standards to which the analysis is being performed. % to. %This is a choice made by the analyst, often guided by the standards to which the analysis is being performed. % to.
% %
Both op-amps and transistors have published statistical failure rates and yet an op-amp is constructed from transistors. Both op-amps and transistors have published statistical failure rates and yet an op-amp is constructed from transistors.
% %
@ -1292,7 +1295,8 @@ Because they are design related they rarely show %clearly detail the
failure modes of the component, with environmental factors and MTTF~\cite{sccs}[p.165] statistics. failure modes of the component, with environmental factors and MTTF~\cite{sccs}[p.165] statistics.
Given the growing usage of FMEA/FMEDA in industry this may change. Given the growing usage of FMEA/FMEDA in industry this may change.
Currently, failure mode information is generally only available for generic component types~\cite{mil1991, fmd91}. Currently, failure mode information is generally only available for generic component types~\cite{mil1991, fmd91}.
Thus we can associate a set of faults to this component $ResistorFaultModes=\{OPEN, SHORT\}$\footnote{The failure modes of the resistor Thus we can associate a set of failure modes to types of component,
for example $ResistorFaultModes=\{OPEN, SHORT\}$\footnote{The failure modes of the resistor
are discussed in section~\ref{sec:resistorfm}.}. are discussed in section~\ref{sec:resistorfm}.}.
@ -1454,17 +1458,30 @@ and creates a new {\dc} from it.
%must consider all the failure modes of the components in the functional %must consider all the failure modes of the components in the functional
%group. %group.
The newly created {\dc} requires a set of failure modes of its own. The newly created {\dc} requires a set of failure modes of its own.
These failure modes are the failure mode behaviour---or symptoms---of the {\fg} from which it was derived. As a derived component inherits component, the UML model shows
that it inherits a set of failure modes.
% %
Because these new failure modes were derived from a {\fg}, we can call %These failure modes are the failure mode behaviour---or symptoms---of the {\fg} from which it was derived.
these `derived~failure~modes'. %
%Because these new failure modes were derived from a {\fg}, we can call
%these `derived~failure~modes'.
%It then creates a new derived~component object, and associates it to this new set of derived~failure~modes. %It then creates a new derived~component object, and associates it to this new set of derived~failure~modes.
We thus have a `new' component, %or system building block, but %We thus have a `new' component, %or system building block, but
with a known and traceable %with a known and traceable
fault behaviour. %fault behaviour.
A {\fg} must comprise of two or more components, and the UML diagram shows this
with the two to many relationship.
Under exceptional circumstances a component may need to be a member of more than
one {\fg} (this is looked at in section~\ref{sec:sideeffects}). The relationship between
the {\fg} and component is therefore $ \star \leftrightarrow 2..\star$.
%
A {\fg} will only be associated with one {\dc} and is given a one to one relationship in the UML diagram.
%
Each {\fg} will have one analysis report associated with it.
%
The UML representation (in figure \ref{fig:cfg}) shows a `{\fg}' having a one to one relationship with a derived~component. The UML representation (in figure \ref{fig:cfg}) shows a `{\fg}' having a one to one relationship with a derived~component.
% %
%
The symbol $\derivec$ is used to indicate the analysis process that takes a The symbol $\derivec$ is used to indicate the analysis process that takes a
functional group and converts it into a new component. functional group and converts it into a new component.
\begin{definition} \begin{definition}
@ -1513,16 +1530,17 @@ process. %\footnote
% %
\paragraph{Traceability and quality of FMMD analysis.} \paragraph{Traceability and quality of FMMD analysis.}
By having an analysis report report for each analysis stage, %i.e. {\fg} to {\dc}, By having an analysis report report for each analysis stage, %i.e. {\fg} to {\dc},
we add traceability to the reasoning applied to the FMEA process. we add traceability to the reasoning applied to the FMMD process.
% %
Consider that traditional FMEA has one large reasoning stage, that of component failure mode Consider that traditional FMEA has one large reasoning stage, that of component failure mode
directly to system level failure. The reasoning given is typically a one line comment directly to system level failure. The reasoning given is typically a one line comment
on a spreadsheet entry~\cite{sccs}[p.38]. % (if we are lucky!). on a spreadsheet entry~\cite{sccs}[p.38]. % (if we are lucky!).
% %
FMMD typically has several reasoning stages (i.e. from each {\dc} to {\fms}) up to to FMMD typically has several reasoning stages (i.e. from each {\fg} to {\dc}) up to the
final system level failure modes. final system level {\dc}.
% %
Thus, each possible cause for a system {\fm} will have a collection of FMMD analysis reports associated with it. Thus, each possible cause for a system failure %{\fm}
will have a collection of FMMD analysis reports associated with it.
% %
These collections of analysis reports will provide a cause and effect These collections of analysis reports will provide a cause and effect
story for each possible scenario that could cause the system level failure. story for each possible scenario that could cause the system level failure.
@ -2175,8 +2193,8 @@ Ensuring this condition is described in section~\ref{sec:completetest}.
\paragraph{State explosion problem of FMEA solved by FMMD.} \paragraph{State explosion problem of FMEA solved by FMMD.}
% %
Because FMMD considers failure modes within functional groups Because FMMD considers failure modes within functional groups;
the traditional state explosion problem in FMEA, where each failure the traditional state explosion problem in FMEA where each failure
mode could be considered in the context of all other components in the system mode could be considered in the context of all other components in the system
disappears. disappears.
% %
@ -2186,11 +2204,11 @@ This issue addressed formally in section~\ref{sec:cc}.
% %
Having a failure mode graph/model, where base component failure modes are traceable to top event events, Having a failure mode graph/model, where base component failure modes are traceable to top event events,
provides a forward search derived failure mode model. provides a forward search derived failure mode model.
A forward search means that we can apply checks to ensure that %A forward search means that we can apply checks to ensure that
all known component failure %all known component failure
modes have been considered in the analysis (i.e. completeness as described above). %modes have been considered in the analysis (i.e. completeness as described above).
% %
This means that for every system level failure we can track back to possible causes This means that for every system level failure we can traverse back to possible failure causes
in the base components. Coupled with MTTF statistics for the base components in the base components. Coupled with MTTF statistics for the base components
this allows use to predict statistical failure rates for system level failures (this is this allows use to predict statistical failure rates for system level failures (this is
described in greater detail in section~\ref{sec:determine_fms}). described in greater detail in section~\ref{sec:determine_fms}).

View File

@ -1199,6 +1199,7 @@ condition in higher levels of the system.
\subsection{Problems in choosing membership of functional groups} \subsection{Problems in choosing membership of functional groups}
\subsubsection{Side Effects: A Problem for FMMD analysis} \subsubsection{Side Effects: A Problem for FMMD analysis}
\label{sec:sideeffects}
A problem with modularising according to functionality is that we can have component failures that would A problem with modularising according to functionality is that we can have component failures that would
intuitively be associated with one {\fg} that may cause unintended side effects in other intuitively be associated with one {\fg} that may cause unintended side effects in other
{\fgs}. {\fgs}.