In this article, we present a set of lightweight mechanisms to enhance the dependability of a safety-critical real-time distributed system referred to as an integrated clinical environment (ICE). In an ICE, medical devices are interconnected and work together with the help of a supervisory computer system to enhance patient safety during clinical operations. Inevitably, there are strong dependability requirements on the ICE. We introduce a set of mechanisms that essentially make the supervisor component a trusted computing base, which can withstand common hardware failures and malicious attacks. The mechanisms rely on the replication of the supervisor component and employ only one input-exchange phase into the critical path of the operation of the ICE. Our analysis shows that the runtime latency overhead is much lower than that of traditional approaches.

中文翻译：

---

集成临床环境的可靠性增强机制


在本文中，我们提出了一组轻量级机制来增强安全关键型实时分布式系统（称为集成临床环境（ICE））的可靠性。在 ICE 中，医疗设备在监控计算机系统的帮助下互连并协同工作，以提高临床操作期间患者的安全。不可避免地，对 ICE 有很强的可靠性要求。我们引入了一套机制，本质上使管理组件成为一个可信的计算基础，可以抵御常见的硬件故障和恶意攻击。该机制依赖于监控器组件的复制，并且仅在 ICE 操作的关键路径中采用一个输入交换阶段。我们的分析表明，运行时延迟开销远低于传统方法。