...
In the following table, system failure detection use cases are described where a passenger at the assistant driver’s seat is operating with a navigation app in the car.
The use cases UC.FD.1 to UC.FD.4 are for the passenger to face the navigation app failures, and UC.FD.5 is for OEM to analyze the failure at a service station later.
# | Item | Description | |
---|---|---|---|
UC.FD.1 | Service failure at System startup | The passenger is not able to see the map image on the screen, e.g. the map service cannot be activated. | 地図を表示するためのサービスが正しく起動しないといった正常でない状態が検出された場合に、そのサービスを再起動させるなどの処理を取り、正常に地図は表示される。それによって、ドライバーは地図を確認する。 If an unexpected state is detected, such as the map service cannot be activated, a procedure such as restarting the service is taken and the map will be displayed normally. Therefore the driver can see the map. |
UC.FD.2 | Service failure when System is in use | The passenger is not able to see the map image on the screen due to the route calculation, guidance services, etc. are not responding. | 経路計算や案内サービスが反応しないなどの正常でない状態を検出した場合に、システムを再起動させるなどの処理を取り、正常に地図が表示される。それによって、ドライバーは地図を確認する。 If an unexpected state is detected, such as the route calculation or guidance services not responding, a procedure such as restarting the system and the map will be displayed normally. Therefore the driver can see the map. |
UC.FD.3 | System memory shortage detection | The map image on the screen has freezed and not been updated due to a shortage of system memory. | システムメモリの不足により、画面のフリーズが起きてしまうといったリスクを検出した場合に、システムを再起動させる等の処理を取り、正常に地図が表示されるようにする。それによって、ドライバーは地図を確認する。 When an unexpected state is detected, such as a screen freeze due to a shortage of system memory, a procedure such as restarting the system and the map will be displayed normally. Therefore the driver can see the map. |
UC.FD.4 | CPU/GPU high load detection | The navigation map app does not respond in expected time and shows intermittent image updates due to very high work-load of system resources. | システムリソースへの負荷が非常に高いため、ナビゲーションマップアプリが期待した時間内に応答せず、画像の更新が断続的に表示されるなどのユーザの使いやすさが悪い場合に、リソースの情報を記録する。それによって、OEMはシステムの状態や問題を分析する。 If the navigation map app does not respond in expected time and shows intermittent display updates due to very high work-load of system resources, the IVI system resource information is recorded. Therefore OEM can analyze the system status and problems. |
UC.FD.5 | CPU/GPU usage log | In case of poor usability, i.e. intermittent screen updates, the IVI system resource information is recorded for OEM to analyze the issues later. |
Table 3
Functional Requirements
This table shows the functional requirements of Service Failure Detection module. It is assumed that the targets of failure detection are Services, system memory resources, CPU work-load, GPU work-load.
# | Item | Description | Description |
---|---|---|---|
RQ.FD.1 | Service failure detection | UC.FD.1,UC.FD.2 | The detector shall monitor IVI service health status. If an IVI service does not respond, it shall be recognized the service is in failure status. |
RQ.FD.2 | Timeout parameter for service monitoring | UC.FD.1,UC.FD.2 | The timeout parameter shall be configurable for the detector to wait for the response from an IVI service. |
RQ.FD.3 | Frequency for service monitoring | UC.FD.1,UC.FD.2 | The frequency with which the Detector checks the service should be configurable. |
RQ.FD.4 | Memory failure detection | UC.FD.3 | The detector shall decide the system is in failure status if the system memory consumption exceeds the threshold for the specified periods. |
RQ.FD.5 | CPU / GPU failure detection | UC.FD.4, | The detector shall decide the system is in failure status if the GPU work-load exceeds the threshold for the specified periods. |
RQ.FD.6 | Resource failure detection periods for Memory / CPU / GPU usage | UC.FD.3,UC.FD.4 | The periods to detect the system resource failure in RQ.FD.4 and RQ.FD.5 shall be configurable. |
RQ.FD.7 | System/service recovery | UC.FD.1,UC.FD.2,UC.FD.3,UC.FD.4 | In case of RQ.FD.1, the detector shall perform the system/service recovery operation, if it detects any system failure. |
RQ.FD.8 | Logging of failure | UC.FD.5 | The detector shall record the diagnostic information, e.g. process information, if it detects CPU/GPU resource failure. |
RQ.FD.9 | Immediate service shutdown | UC.FD.1,UC.FD.2,UC.FD.3,UC.FD.4 | The detector shall notify immediate shutdown of the failure service to the terminator if it detects any service failure. |
Table 4
Service Launch / Termination in Basesystem
...