Validation of a fault-tolerant clock synchronization system

A validation method for the synchronization subsystem of a fault tolerant computer system is investigated. The method combines formal design verification with experimental testing. The design proof reduces the correctness of the clock synchronization system to the correctness of a set of axioms which are experimentally validated. Since the reliability requirements are often extreme, requiring the estimation of extremely large quantiles, an asymptotic approach to estimation in the tail of a distribution is employed

The Second NASA Formal Methods Workshop 1992

The primary goal of the workshop was to bring together formal methods researchers and aerospace industry engineers to investigate new opportunities for applying formal methods to aerospace problems. The first part of the workshop was tutorial in nature. The second part of the workshop explored the potential of formal methods to address current aerospace design and verification problems. The third part of the workshop involved on-line demonstrations of state-of-the-art formal verification tools. Also, a detailed survey was filled in by the attendees; the results of the survey are compiled

Experimental validation of clock synchronization algorithms

The objective of this work is to validate mathematically derived clock synchronization theories and their associated algorithms through experiment. Two theories are considered, the Interactive Convergence Clock Synchronization Algorithm and the Midpoint Algorithm. Special clock circuitry was designed and built so that several operating conditions and failure modes (including malicious failures) could be tested. Both theories are shown to predict conservative upper bounds (i.e., measured values of clock skew were always less than the theory prediction). Insight gained during experimentation led to alternative derivations of the theories. These new theories accurately predict the behavior of the clock system. It is found that a 100 percent penalty is paid to tolerate worst-case failures. It is also shown that under optimal conditions (with minimum error and no failures) the clock skew can be as much as three clock ticks. Clock skew grows to six clock ticks when failures are present. Finally, it is concluded that one cannot rely solely on test procedures or theoretical analysis to predict worst-case conditions

The Function of the Second Postulate in Special Relativity

Many authors noted that the principle of relativity, together with space-time symmetries, suffices to derive Lorentz-like coordinate transformations between inertial frames. These contain a free parameter, $k$, (equal to $c^{-2}$ in special relativity) which is usually claimed to be empirically determinable, so that special relativity does not need the postulate of constancy of the speed of light. I analyze this claim and find that all methods destined to measure $k$ fail without further assumptions, similar to the second postulate. Specifically, measuring $k$ requires a signal that travels identically in opposite directions (this is unrelated to the conventionality of synchronization, as the one-postulate program implicitly selects the standard synchronization convention). Positing such a property about light is logically weaker than Einstein's second postulate but suffices to recover special relativity in full

Two Examples of Circular Motion for Introductory Courses in Relativity

The circular twin paradox and Thomas Precession are presented in a way that makes both accessible to students in introductory relativity courses. Both are discussed by examining what happens during travel around a polygon and then in the limit as the polygon tends to a circle. Since relativistic predictions based on these examples can be verified in experiments with macroscopic objects such as atomic clocks and the gyroscopes on Gravity Probe B, they are particularly convincing to introductory students.Comment: Accepted by the American Journal of Physics This version includes revision

Faster-than-c signals, special relativity, and causality

Motivated by the recent attention on superluminal phenomena, we investigate the compatibility between faster-than-c propagation and the fundamental principles of relativity and causality. We first argue that special relativity can easily accommodate -- indeed, does not exclude -- faster-than-c signalling at the kinematical level. As far as causality is concerned, it is impossible to make statements of general validity, without specifying at least some features of the tachyonic propagation. We thus focus on the Scharnhorst effect (faster-than-c photon propagation in the Casimir vacuum), which is perhaps the most plausible candidate for a physically sound realization of these phenomena. We demonstrate that in this case the faster-than-c aspects are ``benign'' and constrained in such a manner as to not automatically lead to causality violations.Comment: Plain LaTeX2E; 25 pages; 4 embedded figures (LaTeX pictures). V2: Some discussion clarified, minor rearrangements, references updated, no change in physics conclusions. To appear in Annals of Physic