Byzantine Fault Containment in TTP/C

The TTP/C protocol is a communication protocol for safety-critical real-time applications. It is designed to meet both the cost constraints of the automotive industry and the stringent safety constraints of the aeronautics industry. This is achieved by using the static nature of the TTP/C communication pattern to build relatively cheap communication controllers being supervised by guardians that protect correct nodes from faulty ones. The complexity and, thus, the costs of these guardians determine the type of node failures a TTP/C-based network can tolerate. In this paper, we will give a short overview of the TTP/C protocol and discuss its fault hypothesis. We will then introduce a general guardian that enables a TTP/C-based network to tolerate arbitrary node failures.