A distributed real-time system for use in applications with safety implications must produce satisfactory results on time even under abnormal conditions, such as site or communication failure. This paper discusses issues which arise in the design of mechanisms to provide consistent safe and timely decisions and considers explicitly the modelling and implementation of multi-participant commit protocols with timeouts to cope with communication failure.
b-aim