fmmd concept fleshing out
This commit is contained in:
parent
dd56d45404
commit
858f9479b3
@ -52,21 +52,25 @@ paper
|
|||||||
{
|
{
|
||||||
chapter
|
chapter
|
||||||
}
|
}
|
||||||
presents a bottom up modular methodology, a extension and refinement of FMEA, where instead of looking
|
presents a bottom up modular methodology, a extension and refinement to the FMEA, where instead of looking
|
||||||
at individual component failure modes and deciding on their impact on the SYSTEM
|
at individual component failure modes and deciding on their impact on the SYSTEM
|
||||||
it uses the component failure modes, to build modules or derived components.
|
it uses the component failure modes, to build modules or derived components,
|
||||||
|
using incremental steps to build a hierarchical model.
|
||||||
|
%
|
||||||
This methodology has been named Failure Mode Modular De-composition (FMMD)
|
This methodology has been named Failure Mode Modular De-composition (FMMD)
|
||||||
because it de-composes a SYSTEM into a hierarchy of modules or {\dc}s.
|
because it de-composes a SYSTEM into a hierarchy of modules or {\dc}s.
|
||||||
|
%
|
||||||
It does this by working from the bottom up, taking small groups
|
It does this by working from the bottom up, taking small groups
|
||||||
of components, {\fgs}, and then analysing how they can fail.
|
of components, {\fgs}, and then analysing how they can fail.
|
||||||
This analysis is performed using FMEA from a micro rather than a macro perspective.
|
This analysis is performed using FMEA from a micro rather than a macro perspective.
|
||||||
Thus instead of looked at a component failure modes, and determining how
|
Thus instead of looking at a component failure modes, and determining how
|
||||||
it {\em might} cause a failure at SYSTEM level, we are looking at how
|
they {\em may} cause a failure at SYSTEM level, we are looking at how
|
||||||
it will affect the {\fg}.
|
they {\em will} affect the {\fg}.
|
||||||
When we know the failure modes of a {\fg} we can treat it as a `black box'
|
When we know the failure modes of a {\fg} we can treat it as a `black box'
|
||||||
or {\dc}. With {\dc}s we can build {\fgs}
|
or {\dc}. With {\dc}s we can build {\fgs}
|
||||||
at higher levels of analysis, until we have a complete
|
at higher levels of analysis, until we have a complete
|
||||||
hierarchy representing the failure behaviour of the SYSTEM.
|
hierarchy representing the failure behaviour of the SYSTEM.
|
||||||
|
%
|
||||||
Because all the failure modes of all the components
|
Because all the failure modes of all the components
|
||||||
are held in a computer program, we can determine if the model is complete
|
are held in a computer program, we can determine if the model is complete
|
||||||
(i.e. all component failure modes have been included in the model).
|
(i.e. all component failure modes have been included in the model).
|
||||||
@ -78,21 +82,22 @@ are held in a computer program, we can determine if the model is complete
|
|||||||
|
|
||||||
\paragraph{Ideal Static failure mode methodology}
|
\paragraph{Ideal Static failure mode methodology}
|
||||||
An ideal Static failure mode methodology would build a failure mode model
|
An ideal Static failure mode methodology would build a failure mode model
|
||||||
from which the the other four could be derived.
|
from which the traditional four models could be derived.
|
||||||
It would address the short-comings in the other methodologies, and
|
It would address the short-comings in the other methodologies, and
|
||||||
would have a user friendly interface, with a visual (rather than mathematical/formal) syntax with icons
|
would have a user friendly interface, with a visual (rather than mathematical/formal) syntax with icons
|
||||||
to represent the results of analysis phases.
|
to represent the results of analysis phases.
|
||||||
|
%
|
||||||
There are four static analysis failure mode methodologies in common use.
|
%There are four static analysis failure mode methodologies in common use.
|
||||||
Each has its advantages and drawbacks, and each is suited for
|
%Each has its advantages and drawbacks, and each is suited for
|
||||||
a different phase in the product life cycle.
|
%a different phase in the product life cycle.
|
||||||
These four methodologies are discussed briefly below.
|
The four methodologies in current use are discussed briefly below.
|
||||||
|
|
||||||
\subsection { FTA }
|
\subsection { FTA }
|
||||||
|
|
||||||
This, like all top~down methodologies introduces the very serious problem
|
This, like all top~down methodologies introduces the very serious problem
|
||||||
of missing component failure modes, or modelling at
|
of missing component failure modes \cite{faa}[Ch.9]
|
||||||
a too high level of failure mode abstraction.
|
%, or modelling at
|
||||||
|
%a too high level of failure mode abstraction.
|
||||||
FTA was invented for use on the minuteman nuclear defence missile
|
FTA was invented for use on the minuteman nuclear defence missile
|
||||||
systems in the early 1960's and was not designed as a rigorous
|
systems in the early 1960's and was not designed as a rigorous
|
||||||
fault/failure mode methodology. It is more like a structure to
|
fault/failure mode methodology. It is more like a structure to
|
||||||
@ -263,6 +268,54 @@ to smaller and smaller functional modules \cite{maikowski}.
|
|||||||
|
|
||||||
\section{Proposed Methodology \\ Failure Mode Modular De-Composition (FMMD)}
|
\section{Proposed Methodology \\ Failure Mode Modular De-Composition (FMMD)}
|
||||||
|
|
||||||
|
\paragraph{New methodology Must be bottom-up}
|
||||||
|
In order to ensure that all component failure modes have been covered
|
||||||
|
the methodology will have to work from the bottom-up
|
||||||
|
and start with the component failure modes.
|
||||||
|
%
|
||||||
|
\paragraph{How to build a SYSTEM failure behaviour model}
|
||||||
|
The next problem is how to we build a failure mode model
|
||||||
|
that converges to a finite set of SYSTEM level failure modes.
|
||||||
|
%
|
||||||
|
\paragraph{incremental stages and {\fg}s}
|
||||||
|
We can use incremental stages to build the hierarchy.
|
||||||
|
we can take small {\fg}s of components, where the {\fg}
|
||||||
|
is a small set of components that perform a simple
|
||||||
|
task.
|
||||||
|
This should be small enough to be able to consider all the failure
|
||||||
|
modes of its components.
|
||||||
|
We can consider these failure modes from the perspective
|
||||||
|
of the {\fg}. In other words, for each component failure mode in the {\fg},
|
||||||
|
we create a `test case' and decide how each failure affects the functional group.
|
||||||
|
%
|
||||||
|
With the results from the test cases we will now have the ways in which the
|
||||||
|
{\fg} can fail.
|
||||||
|
%
|
||||||
|
We can now treat the {\fg} as a component, or rather a {\dc}.
|
||||||
|
We can refine this further, by grouping the common symptoms, or results that
|
||||||
|
are the same failure w.r.t. the {\fg}.
|
||||||
|
%
|
||||||
|
We can now create a {\dc} and assign these common symptoms
|
||||||
|
as its failure modes.
|
||||||
|
%
|
||||||
|
This {\dc} can be used to build higher level
|
||||||
|
{\fg}s, and naturally a hierarchy is being formed, which is
|
||||||
|
a failure mode behaviour model.
|
||||||
|
\paragraph{Directed Acyclic Graph}. This will naturally form a DAG
|
||||||
|
meaning that for all SYSTEM failure modes, we will be able to trace
|
||||||
|
back through the DAG to possible component failure mode causes.
|
||||||
|
If statistical models exist for the component failure modes
|
||||||
|
these failure causation trees (or minimal cut sets \cite{nucfta})
|
||||||
|
can be used to calculate Mean Time to Failure (MTTF) or Probability of Failure on demand (PFD) figures.
|
||||||
|
%
|
||||||
|
Because common symptoms are being collected, as we build the tree up-ward
|
||||||
|
the number of failure modes decreases (or exceptionally stays the same) at each level.
|
||||||
|
%
|
||||||
|
This decreasing of the number of failure modes is bourne out {\irl}.
|
||||||
|
Of the thousands of component failure modes in a typical product
|
||||||
|
there are generally only a handful of SYSTEM level failure modes.
|
||||||
|
%
|
||||||
|
|
||||||
\subsection{Outline of the FMMD process}
|
\subsection{Outline of the FMMD process}
|
||||||
|
|
||||||
FMMD builds {\fg}s of components from the bottom-up.
|
FMMD builds {\fg}s of components from the bottom-up.
|
||||||
@ -272,7 +325,7 @@ We can perform a failure mode effects analysis on each of the component failure
|
|||||||
modes within the {\fg}. We can thus ensure that all component failure modes
|
modes within the {\fg}. We can thus ensure that all component failure modes
|
||||||
are covered. We can then treat the {\fg} as a `black box' or component in its own right.
|
are covered. We can then treat the {\fg} as a `black box' or component in its own right.
|
||||||
We can now look at how the {\fg} can fail. Many of the component failure modes will
|
We can now look at how the {\fg} can fail. Many of the component failure modes will
|
||||||
cause the same failure symptoms in the {fg} fialure behaviour.
|
cause the same failure symptoms in the {fg} failure behaviour.
|
||||||
We can collect these failures as common symptoms.
|
We can collect these failures as common symptoms.
|
||||||
When we have out set of symptoms, we can now create
|
When we have out set of symptoms, we can now create
|
||||||
a {\dc}. The {\dc} will have as its set of failures
|
a {\dc}. The {\dc} will have as its set of failures
|
||||||
@ -301,7 +354,8 @@ or even in other projects where the same {\dc} is used.
|
|||||||
for its results}
|
for its results}
|
||||||
Because the failure mode mode of a SYSTEM is a hierarchy of {\fg}s and derived components
|
Because the failure mode mode of a SYSTEM is a hierarchy of {\fg}s and derived components
|
||||||
SYSTEM level failure modes are traceable back down the tree to
|
SYSTEM level failure modes are traceable back down the tree to
|
||||||
component level failure modes. This proivides causation minimal cut sets \cite{sccs}
|
component level failure modes. This proivides causation trees \cite{sccs} or, minimal cut sets
|
||||||
|
\footnote{Here minimal cut sets represent combinations of component failure modes that can result in s SYSTEM level failure.}
|
||||||
for all SYSTEM failure modes.
|
for all SYSTEM failure modes.
|
||||||
|
|
||||||
\subsubsection{ It should be capable of producing reliability and danger evaluation statistics.}
|
\subsubsection{ It should be capable of producing reliability and danger evaluation statistics.}
|
||||||
|
@ -74,6 +74,7 @@
|
|||||||
\newcommand{\dcs}{\em derived~components}
|
\newcommand{\dcs}{\em derived~components}
|
||||||
\newcommand{\bc}{\em base~component}
|
\newcommand{\bc}{\em base~component}
|
||||||
\newcommand{\bcs}{\em base~components}
|
\newcommand{\bcs}{\em base~components}
|
||||||
|
\newcommand{\irl}{in real life}
|
||||||
\newcommand{\enc}{\ensuremath{\stackrel{enc}{\longrightarrow}}}
|
\newcommand{\enc}{\ensuremath{\stackrel{enc}{\longrightarrow}}}
|
||||||
\newcommand{\pin}{\ensuremath{\stackrel{pi}{\longleftrightarrow}}}
|
\newcommand{\pin}{\ensuremath{\stackrel{pi}{\longleftrightarrow}}}
|
||||||
%\newcommand{\pic}{\em pure~intersection~chain}
|
%\newcommand{\pic}{\em pure~intersection~chain}
|
||||||
|
Loading…
Reference in New Issue
Block a user