139:
278:) and offers basic interlocking functions, local and remote control, automatic train operation, integrated block functionality and an integrated diagnosis system. LockTrac 6131 has two software channels with diverse software, to ensure the high safety requirements. Before getting transmitted externally, the data are checked in the safety channel. A diagnosis device saves all relevant information to allow efficient maintenance in case of failure.
337:
Dreamliner. The TTP-designed communication platform prevents an overload in the bus system, even if several important events occur simultaneously. Additionally, TTP-based systems weigh less than conventional systems due to a lower connecter count and less wiring. Furthermore, the whole system is more
294:
is scalable, adaptable and fault-tolerant. The key technology enabler in this new FADEC is the use of TTP for inter-module communication. TTP removes the complex interdependencies among modules, simplifying initial application development as well in-service changes and upgrades. It allows all modules
213:
Each node connected to a TTP network is required to have configuration data sets resident, prior to the startup of the TTP network. The minimum number of data sets for each node is two. See hardware section and AS8202NF (below). Each node needs to know the configuration of every other node on the TTP
129:
Data communication in TTP is organized in TDMA rounds. A TDMA round is divided into slots. Each node has one sending slot, and must send frames in every round. The frame size allocated to a node can vary from 2 to 240 bytes in length, each frame usually carrying several messages. The cluster cycle is
104:
TTP provides a membership service to inform every correct node about the consistency of data transmission. This mechanism can be viewed as a distributed acknowledgment service that informs the application promptly if an error in the communication system has occurred. If state consistency is lost, the
149:
There is one slot for each node in a TTP network. A node always transmits data (parameters) during its slot, even if the node has no data to send. However a node will only transmit the parameters that it is configured to send for the specific ROUND that the slot is in. A node may transmit parameters
350:
were implemented with "drive-by-wire" technology, in which on-board computers controlled steering, braking and other movements. Three TTP-based TTC 200 units controlled the parking brake and throttle and transmission functions, and one TTP-By-Wire Box controlled the service brake of the H1 Hummer
116:
TTP is often used in mission critical data communication applications where deterministic operation is a requirement. These operations include aircraft engine management and other aerospace applications. In these applications the TTP networks are often operated as separate networks with separate
195:
of a correct message to learn about the difference between the sender’s clock and the receiver’s clock. A fault-tolerant average algorithm needs this information to periodically calculate a correction term for the local clock so that the clock is kept in synchrony with all other clocks of the
204:
Time-Triggered
Protocol attempts to transmit data consistently to all correct nodes of the distributed system and, in case of a failure, the communication system attempts to decide which node is faulty. These properties are achieved by the membership protocol and an acknowledgment mechanism.
100:
As a fault-tolerant time-triggered protocol, TTP provides autonomous fault-tolerant message transport at known times and with minimal jitter by employing a TDMA (Time-Division
Multiple Access) strategy on replicated communication channels. TTP offers fault-tolerant clock synchronization that
239:
Interface to a TTP network requires the use of the AS8202NF device. This device operates between the computer platform and the TTP network. The AS8202NF is required to be loaded with a TASM (TTP Assembler) and MEDL (Message
Descriptor List) configuration data sets prior to operation.
153:
The slot for a node is determined when the TTP network is designed using PC based utilities TTP Plan and TTP Build. The definition that causes the AS8202NF to transmit specific data or parameters for a given SLOT and ROUND is contained in the MEDL.
306:. TTP, which is used as a backplane bus, supports high levels of engine safety, operational availability and reduced life cycle cost. A significant advantage is that all information on the bus is available to both FADEC channels simultaneously.
120:
The TTP protocol offers the unique feature of having all nodes on a network know, at the same time, when any other node fails to communicate or sends unreliable data. The status of each node is updated to all nodes several times each second.
174:
A Cluster Cycle is defined as having a number of Rounds. All nodes have transmitted all of their parameters at the end of a
Cluster Cycle. The Cluster Cycle is defined as starting with the first bit of the first slot of the first round.
96:
TTP is a dual-channel 4 - 25 Mbit/s time-triggered field bus. It can operate using one or both channels with maximum data rate of 2x 25 Mbit/s. With replicated data on both channels, redundant communication is supported
130:
a recurring sequence of TDMA rounds; in different rounds different messages can be transmitted in the frames, but in each cluster cycle the complete set of state messages is repeated. The data is protected by a 24-bit CRC (
75:
in the early 1980s. In 1998 TTTech
Computertechnik AG took over the development of TTP, providing software and hardware products. TTP communication controller chips and IP are available from sources including
162:
The TTP Round holds a slot for each node in the TTP network. The number of ROUNDS in CLUSTER CYCLE is defined using PC based utilities TTP Plan and TTP Build. This information is also contained in the MEDL.
273:
LockTrac 6131 ELEKTRA is an electronic interlocking system that provides the highest levels of safety and availability. The system is approved according to CENELEC standards with safety integrity level 4
166:
Rounds exist because a node is not required to transmit all of its parameters during its slot. To distribute bandwidth between nodes, each node transmits selected parameters in different ROUNDS.
231:
Data sets TASM and MEDL are created by utilities TTP Plan and TTP Build provided by TTTech. The third data set is often created by the customer and is platform and application specific.
183:
The number of slots is defined by the number of nodes in the TTP network. However, the number of Rounds is determined by the network designer using the TTP Plan and TTP Build utilities.
246:
It is not possible to design and implement a TTP network by simply buying the AS8202NF device. Each design requires license and configuration tools from TTTech or 3rd party.
191:
Clock synchronization provides all nodes with an equivalent time concept. Each node measures the difference between the a priori known expected and the observed
214:
network. For this reason, active nodes are not allowed to join an existing network without the update of configuration data sets of all nodes on the network.
108:
Additionally, TTP includes the service of clique avoidance to detect faults outside the fault hypothesis, which cannot be tolerated at the protocol level.
441:
318:
TTTech developed the internal communication system for the cabin pressure control system, working together with Nord-Micro, a subsidiary of
138:
360:
298:
TTP-based
Modular Aerospace Control (MAC), which is a part of the F110 full authority digital engine control (FADEC) system of
295:
in a system to see all data all of the time, thus ensuring seamless fault accommodation without complex channel change logic.
263:
410:
Kopetz, Herman; Grunsteidl, Gunter (1993), "TTP - A time-triggered protocol for fault-tolerant real-timesystems",
72:
445:
351:
H1ghlander. Drive-by-wire modifications controlled the acceleration, braking and shifting of the
Sandstorm.
347:
333:
developed a TTP-based data communication platform for the electric and environmental control system of the
36:(TTP Communication Protocol). TTP controllers have accumulated over 500 million flight hours in commercial
462:
134:). The schedule is stored in the MEDL (Message Descriptor List) within the communication controller.
365:
131:
262:
The electronic interlocking system “LockTrac 6131 ELEKTRA” was designed within a cooperation of
412:
FTCS-23. The Twenty-Third
International Symposium on Fault-Tolerant Computing, Digest of Papers
275:
375:
224:
MEDL or
Message Descriptor List for AS8202NF (defines data to be exchanged between all nodes)
303:
77:
8:
326:
319:
423:
60:
482:
415:
299:
117:
AS8202NF hardware interface devices and separate, but coordinated, configurations.
81:
21:
427:
150:
1,2,3 in its SLOT during ROUND x and parameters 4,5,6 in its SLOT during ROUND y.
53:
56:. In addition, TTP devices have accumulated over 1 billion operational hours in
33:
338:
flexible and has a greater modularity than conventional communication systems.
41:
25:
476:
419:
227:
Compute
Platform Configuration. (defines expected data and its utilization)
192:
101:
establishes the global time base without relying on a central time server.
315:
380:
334:
32:
for vehicles and industrial applications. and standardized in 2011 as
49:
29:
254:
TTP has been integrated into a number of commercial applications.
370:
290:
systems. The Modular Aerospace Control (MAC)-based FADEC for The
390:
330:
267:
85:
385:
309:
291:
287:
45:
40:
aviation application, in power generation, environmental and
37:
57:
243:
The AS8202NF will communicate on one or two TTP networks.
178:
467:
346:The two Red Team robotic vehicles competing in the
442:"AS8202 - TTP-C2NF Communication Controller - ams"
474:
409:
199:
257:
217:Typical Configuration Data Sets for each node:
288:FADEC (Full Authority Digital Engine Control)
208:
414:, Toulouse, France: IEEE, pp. 524–533,
310:Environmental and power generation systems
249:
221:TASM for AS8202NF (allows usage of MEDL)
186:
111:
179:Balance nodes, slots and cluster cycles
28:. It was designed as a time-triggered
475:
361:Avionics Full-Duplex Switched Ethernet
341:
304:Lockheed Martin F-16 fighter aircraft
105:application is notified immediately.
124:
71:TTP was originally designed at the
13:
14:
494:
456:
264:Thales Rail Signalling Solutions
169:
137:
327:Hamilton Sundstrand Corporation
320:Hamilton Sundstrand Corporation
73:Vienna University of Technology
434:
403:
1:
396:
286:The system has been used for
200:Membership and acknowledgment
91:
258:Railway Signalling Solutions
7:
354:
234:
10:
499:
348:2005 DARPA Grand Challenge
209:Configuration requirements
66:
420:10.1109/FTCS.1993.627355
281:
157:
302:, is integrated on the
250:Commercial applications
144:
132:Cyclic Redundancy Check
18:Time-Triggered Protocol
376:Time-triggered system
187:Clock synchronization
112:Critical applications
325:In cooperation with
342:Autonomous vehicles
78:austriamicrosystems
61:railway signalling
463:TTP Documentation
125:Technical details
44:. TTP is used in
20:(TTP) is an open
490:
450:
449:
444:. Archived from
438:
432:
431:
407:
300:General Electric
141:
82:ON Semiconductor
54:flight computers
22:computer network
498:
497:
493:
492:
491:
489:
488:
487:
473:
472:
459:
454:
453:
440:
439:
435:
430:, 0-8186-3680-7
408:
404:
399:
357:
344:
312:
284:
260:
252:
237:
211:
202:
189:
181:
172:
160:
147:
127:
114:
94:
69:
63:applications.
42:flight controls
26:control systems
12:
11:
5:
496:
486:
485:
471:
470:
465:
458:
457:External links
455:
452:
451:
448:on 2013-12-17.
433:
401:
400:
398:
395:
394:
393:
388:
383:
378:
373:
368:
363:
356:
353:
343:
340:
311:
308:
292:Aermacchi M346
283:
280:
259:
256:
251:
248:
236:
233:
229:
228:
225:
222:
210:
207:
201:
198:
188:
185:
180:
177:
171:
168:
159:
156:
146:
143:
126:
123:
113:
110:
93:
90:
68:
65:
52:controls, and
9:
6:
4:
3:
2:
495:
484:
481:
480:
478:
469:
466:
464:
461:
460:
447:
443:
437:
429:
425:
421:
417:
413:
406:
402:
392:
389:
387:
384:
382:
379:
377:
374:
372:
369:
367:
364:
362:
359:
358:
352:
349:
339:
336:
332:
328:
323:
321:
317:
307:
305:
301:
296:
293:
289:
279:
277:
271:
269:
266:division and
265:
255:
247:
244:
241:
232:
226:
223:
220:
219:
218:
215:
206:
197:
194:
184:
176:
170:Cluster cycle
167:
164:
155:
151:
142:
140:
135:
133:
122:
118:
109:
106:
102:
98:
89:
87:
83:
79:
74:
64:
62:
59:
55:
51:
47:
43:
39:
35:
31:
27:
24:protocol for
23:
19:
446:the original
436:
411:
405:
345:
324:
313:
297:
285:
272:
261:
253:
245:
242:
238:
230:
216:
212:
203:
193:arrival time
190:
182:
173:
165:
161:
152:
148:
136:
128:
119:
115:
107:
103:
99:
95:
70:
48:and modular
17:
15:
316:Airbus A380
397:References
381:TTEthernet
335:Boeing 787
92:Definition
34:SAE AS6003
196:cluster.
50:aerospace
483:Networks
477:Category
355:See also
314:For the
235:Hardware
30:fieldbus
371:FlexRay
67:History
468:TTTech
428:509153
426:
391:TTTech
331:TTTech
268:TTTech
86:ALTERA
424:S2CID
386:TTP/A
282:FADEC
158:ROUND
46:FADEC
38:DAL A
276:SIL4
145:SLOT
84:and
58:SIL4
16:The
416:doi
366:CAN
479::
422:,
329:,
322:.
270:.
88:.
80:,
418::
274:(
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
